nexus-agents 11.3.0 → 11.4.0

package/dist/{chunk-A7XDON63.js → chunk-HHOSB6LL.js}

@@ -2,7 +2,7 @@ import {
   FINDING_SEVERITY_LEVELS,
   SARIF_LEVEL_MAP,
   SEVERITY_ORDER
-} from "./chunk-WDAND5YU.js";
+} from "./chunk-BDP422B2.js";
 import {
   executeExpert
 } from "./chunk-XAEGIDWX.js";
@@ -58,7 +58,7 @@ import {
   updateStage,
   withFileLock,
   writeJobCancelled
-} from "./chunk-PIBIAVWQ.js";
+} from "./chunk-CVHLQFUX.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
@@ -77,7 +77,7 @@ import {
 } from "./chunk-HQ2SMW4Y.js";
 import {
   withPrerequisite
-} from "./chunk-KS7CAJAC.js";
+} from "./chunk-JYZLBQ7M.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -105,7 +105,7 @@ import {
   toolSuccess,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-BREDDYX4.js";
+} from "./chunk-XXNSAOCH.js";
 import {
   generateSecurityPlan
 } from "./chunk-6ZTMMN2N.js";
@@ -187,7 +187,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-ZZ2BEXLC.js";
+} from "./chunk-HF36DB2G.js";
 import {
   allOf,
   anyOf
@@ -196,7 +196,7 @@ import {
   VERSION,
   createRequestContext,
   measuredTrustTier
-} from "./chunk-3OQBXYFS.js";
+} from "./chunk-JEESPQIQ.js";
 import {
   BWRAP_READ_ONLY_ARGS,
   CliDetectionCache,
@@ -787,19 +787,19 @@ function suggestSimilar(name, known) {
 function classifyEnvKeys(nexusKeys, env) {
   const knownRecord = {};
   const unknownVars = [];
-  for (const key of nexusKeys) {
-    if (isDynamicFamilyMember(key)) {
+  for (const key2 of nexusKeys) {
+    if (isDynamicFamilyMember(key2)) {
       continue;
     }
-    if (KNOWN_NAMES.includes(key)) {
-      const value = env[key];
+    if (KNOWN_NAMES.includes(key2)) {
+      const value = env[key2];
       if (value !== void 0) {
-        knownRecord[key] = value;
+        knownRecord[key2] = value;
       }
     } else {
       unknownVars.push({
-        name: key,
-        suggestion: suggestSimilar(key, KNOWN_NAMES)
+        name: key2,
+        suggestion: suggestSimilar(key2, KNOWN_NAMES)
       });
     }
   }
@@ -963,14 +963,14 @@ var PERSISTENCE_AWARE_FLAGS = /* @__PURE__ */ new Set([
 function resolveStageFlags(stagesConfig) {
   const persistenceOn = isPersistenceEnabled();
   const result = {};
-  for (const key of STAGE_FLAG_KEYS) {
-    const explicit = stagesConfig[key];
+  for (const key2 of STAGE_FLAG_KEYS) {
+    const explicit = stagesConfig[key2];
     if (explicit !== void 0) {
-      result[key] = explicit;
-    } else if (PERSISTENCE_AWARE_FLAGS.has(key) && persistenceOn) {
-      result[key] = true;
+      result[key2] = explicit;
+    } else if (PERSISTENCE_AWARE_FLAGS.has(key2) && persistenceOn) {
+      result[key2] = true;
     } else {
-      result[key] = DEFAULT_COMPOSITE_CONFIG[key];
+      result[key2] = DEFAULT_COMPOSITE_CONFIG[key2];
     }
   }
   return result;
@@ -1062,13 +1062,13 @@ var ConfigManager = class _ConfigManager {
     _ConfigManager.instance = null;
   }
   /** Gets the effective value for a configuration key. */
-  get(category, key) {
-    return this.getWithMeta(category, key).value;
+  get(category, key2) {
+    return this.getWithMeta(category, key2).value;
   }
   /** Gets the effective value with source metadata. */
-  getWithMeta(category, key) {
-    const fullKey = `${category}.${String(key)}`;
-    const defaultValue = DEFAULTS[category][key];
+  getWithMeta(category, key2) {
+    const fullKey = `${category}.${String(key2)}`;
+    const defaultValue = DEFAULTS[category][key2];
     const override = this.overrides.get(fullKey);
     if (override) {
       return {
@@ -1101,9 +1101,9 @@ var ConfigManager = class _ConfigManager {
    * Sets an override for a configuration key.
    * @throws {Error} If value fails type validation
    */
-  setOverride(category, key, value, source) {
-    const fullKey = `${category}.${String(key)}`;
-    const defaultValue = DEFAULTS[category][key];
+  setOverride(category, key2, value, source) {
+    const fullKey = `${category}.${String(key2)}`;
+    const defaultValue = DEFAULTS[category][key2];
     if (!validateValue(value, defaultValue)) {
       throw new Error(
         `Invalid value type for ${fullKey}: expected ${typeof defaultValue}, got ${typeof value}`
@@ -1112,8 +1112,8 @@ var ConfigManager = class _ConfigManager {
     this.overrides.set(fullKey, { value, source, setAt: new Date(getTimeProvider().now()) });
   }
   /** Clears an override. Returns true if it existed. */
-  clearOverride(category, key) {
-    return this.overrides.delete(`${category}.${String(key)}`);
+  clearOverride(category, key2) {
+    return this.overrides.delete(`${category}.${String(key2)}`);
   }
   /** Clears all overrides. */
   clearAllOverrides() {
@@ -1121,8 +1121,8 @@ var ConfigManager = class _ConfigManager {
   }
   /** Lists all active overrides. */
   listOverrides() {
-    return Array.from(this.overrides.entries()).map(([key, override]) => ({
-      key,
+    return Array.from(this.overrides.entries()).map(([key2, override]) => ({
+      key: key2,
       value: override.value,
       source: override.source,
       setAt: override.setAt
@@ -1133,12 +1133,12 @@ var ConfigManager = class _ConfigManager {
     const categories = categoryFilter ? [categoryFilter] : Object.keys(DEFAULTS);
     const result = [];
     for (const category of categories) {
-      for (const key of Object.keys(DEFAULTS[category])) {
-        const fullKey = `${category}.${key}`;
-        const meta = this.getWithMeta(category, key);
+      for (const key2 of Object.keys(DEFAULTS[category])) {
+        const fullKey = `${category}.${key2}`;
+        const meta = this.getWithMeta(category, key2);
         result.push({
           category,
-          key,
+          key: key2,
           value: meta.value,
           source: meta.source,
           envVar: ENV_VAR_MAP[fullKey]
@@ -1148,12 +1148,12 @@ var ConfigManager = class _ConfigManager {
     return result;
   }
   /** Gets the environment variable name for a config key. */
-  getEnvVarName(category, key) {
-    return ENV_VAR_MAP[`${category}.${String(key)}`];
+  getEnvVarName(category, key2) {
+    return ENV_VAR_MAP[`${category}.${String(key2)}`];
   }
   /** Checks if a key has an active override. */
-  hasOverride(category, key) {
-    return this.overrides.has(`${category}.${String(key)}`);
+  hasOverride(category, key2) {
+    return this.overrides.has(`${category}.${String(key2)}`);
   }
 };
 function getConfigManager() {
@@ -1522,7 +1522,7 @@ var RateLimiter2 = class {
    * Sleeps for the specified duration.
    */
   sleep(ms) {
-    return new Promise((resolve12) => setTimeout(resolve12, ms));
+    return new Promise((resolve13) => setTimeout(resolve13, ms));
   }
   /**
    * Returns the current number of available tokens.
@@ -1745,14 +1745,14 @@ function notifyRetry(onRetry, info) {
 function sleepUnlessAborted(ms, signal) {
   if (signal === void 0) return sleep(ms).then(() => true);
   if (signal.aborted) return Promise.resolve(false);
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     const onAbort = () => {
       clearTimeout(timer);
-      resolve12(false);
+      resolve13(false);
     };
     const timer = setTimeout(() => {
       signal.removeEventListener("abort", onAbort);
-      resolve12(true);
+      resolve13(true);
     }, ms);
     signal.addEventListener("abort", onAbort, { once: true });
   });
@@ -4363,7 +4363,7 @@ function getAgentStateKey(agentId) {
 
 // src/agents/memory-operations.ts
 async function persistMemoryState(backend, state, logger58) {
-  const key = getAgentStateKey(state.agentId);
+  const key2 = getAgentStateKey(state.agentId);
   const metadata = {
     importance: MemoryImportance.HIGH,
     tags: ["agent-state", state.role]
@@ -4372,7 +4372,7 @@ async function persistMemoryState(backend, state, logger58) {
     ...state,
     persistedAt: new Date(getTimeProvider().now())
   };
-  const result = await backend.store(key, updatedState, metadata);
+  const result = await backend.store(key2, updatedState, metadata);
   if (!result.ok) {
     logger58.error("Failed to persist agent memory state", result.error, { agentId: state.agentId });
     return err(
@@ -4388,8 +4388,8 @@ async function persistMemoryState(backend, state, logger58) {
   return ok(void 0);
 }
 async function loadMemoryState(backend, agentId, role, logger58) {
-  const key = getAgentStateKey(agentId);
-  const result = await backend.retrieve(key);
+  const key2 = getAgentStateKey(agentId);
+  const result = await backend.retrieve(key2);
   if (!result.ok) {
     logger58.debug("No existing memory state found, creating fresh state", { agentId });
     return ok(createInitialMemoryState(agentId, role));
@@ -4741,13 +4741,13 @@ function makeCancelError(taskId) {
 }
 function executeWithTimeout(params) {
   const { task, maxDurationMs, executeTask, transformError, signal } = params;
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     let settled = false;
     const settle = (result) => {
       if (settled) return;
       settled = true;
       clearTimeout(timeoutId);
-      resolve12(result);
+      resolve13(result);
     };
     const timeoutId = setTimeout(() => {
       settle(
@@ -6102,9 +6102,9 @@ function mergeArrays(outputs) {
   const merged = [];
   for (const output2 of outputs) {
     for (const item of output2) {
-      const key = JSON.stringify(item);
-      if (!seen.has(key)) {
-        seen.add(key);
+      const key2 = JSON.stringify(item);
+      if (!seen.has(key2)) {
+        seen.add(key2);
         merged.push(item);
       }
     }
@@ -6131,7 +6131,7 @@ function deepEquals(a, b) {
   if (aKeys.length !== bKeys.length) {
     return false;
   }
-  return aKeys.every((key) => deepEquals(aObj[key], bObj[key]));
+  return aKeys.every((key2) => deepEquals(aObj[key2], bObj[key2]));
 }
 function handleFieldConflict(ctx) {
   const conflict = {
@@ -6162,25 +6162,25 @@ function mergeObjects(results, outputs, conflictResolver) {
     const output2 = outputs[i];
     const result = results[i];
     if (output2 === void 0 || result === void 0) continue;
-    for (const [key, value] of Object.entries(output2)) {
-      const existing = keyOwners.get(key);
+    for (const [key2, value] of Object.entries(output2)) {
+      const existing = keyOwners.get(key2);
       if (existing === void 0) {
-        keyOwners.set(key, { expertId: result.expertId, value });
-        merged[key] = value;
+        keyOwners.set(key2, { expertId: result.expertId, value });
+        merged[key2] = value;
         continue;
       }
       if (deepEquals(existing.value, value)) continue;
       const conflict = handleFieldConflict({
         existing,
         newResult: result,
-        key,
+        key: key2,
         value,
         results,
         conflictResolver
       });
       if (conflict.resolution === "expert2") {
-        merged[key] = value;
-        keyOwners.set(key, { expertId: result.expertId, value });
+        merged[key2] = value;
+        keyOwners.set(key2, { expertId: result.expertId, value });
       }
       conflicts.push(conflict);
     }
@@ -10500,13 +10500,13 @@ var WaveScheduler = class {
   }
   async withTimeout(promise, timeoutMs, taskId) {
     if (timeoutMs <= 0) return promise;
-    return new Promise((resolve12, reject) => {
+    return new Promise((resolve13, reject) => {
       const timer = setTimeout(() => {
         reject(new Error(`Task ${taskId} timed out after ${String(timeoutMs)}ms`));
       }, timeoutMs);
       promise.then((result) => {
         clearTimeout(timer);
-        resolve12(result);
+        resolve13(result);
       }).catch((error) => {
         clearTimeout(timer);
         reject(error instanceof Error ? error : new Error(String(error)));
@@ -10518,8 +10518,8 @@ function chunkByDirectory(files, basePath) {
   const normalizedBase = basePath.endsWith("/") ? basePath : `${basePath}/`;
   const groups = /* @__PURE__ */ new Map();
   for (const file of files) {
-    const relative6 = file.startsWith(normalizedBase) ? file.slice(normalizedBase.length) : file;
-    const stripped = relative6.startsWith("/") ? relative6.slice(1) : relative6;
+    const relative7 = file.startsWith(normalizedBase) ? file.slice(normalizedBase.length) : file;
+    const stripped = relative7.startsWith("/") ? relative7.slice(1) : relative7;
     const topDir = stripped.split("/")[0] ?? "root";
     const existing = groups.get(topDir);
     if (existing !== void 0) {
@@ -13500,8 +13500,8 @@ var RecoveryManager = class {
    * Resets the attempt count for a failure archetype.
    */
   resetAttemptCount(failure) {
-    const key = this.getAttemptKey(failure);
-    this.attemptCounts.delete(key);
+    const key2 = this.getAttemptKey(failure);
+    this.attemptCounts.delete(key2);
   }
   /**
    * Checks if recovery should be attempted.
@@ -13622,8 +13622,8 @@ INDICATORS FOUND: ${ctx.failure.indicators.join("; ")}
   }
   /** Increments the attempt count. */
   incrementAttemptCount(failure) {
-    const key = this.getAttemptKey(failure);
-    this.attemptCounts.set(key, (this.attemptCounts.get(key) ?? 0) + 1);
+    const key2 = this.getAttemptKey(failure);
+    this.attemptCounts.set(key2, (this.attemptCounts.get(key2) ?? 0) + 1);
   }
 };
 
@@ -13878,12 +13878,12 @@ function categoryToGuidance(category, count) {
 function groupByCategory(outcomes) {
   const groups = /* @__PURE__ */ new Map();
   for (const outcome of outcomes) {
-    const key = outcome.failureCategory ?? "unknown";
-    const group = groups.get(key);
+    const key2 = outcome.failureCategory ?? "unknown";
+    const group = groups.get(key2);
     if (group !== void 0) {
       group.push(outcome);
     } else {
-      groups.set(key, [outcome]);
+      groups.set(key2, [outcome]);
     }
   }
   return groups;
@@ -18121,8 +18121,8 @@ var Semaphore = class {
       this.available -= 1;
       return Promise.resolve();
     }
-    return new Promise((resolve12) => {
-      this.waiters.push(resolve12);
+    return new Promise((resolve13) => {
+      this.waiters.push(resolve13);
     });
   }
   release() {
@@ -19758,8 +19758,8 @@ function inferLastPattern(recentOutputs) {
   const lastOutput = recentOutputs[recentOutputs.length - 1];
   if (lastOutput === void 0) return void 0;
   const lastAgentId = lastOutput.agentId;
-  for (const [key, pattern] of Object.entries(AGENT_PATTERN_MAP)) {
-    if (lastAgentId.includes(key)) return pattern;
+  for (const [key2, pattern] of Object.entries(AGENT_PATTERN_MAP)) {
+    if (lastAgentId.includes(key2)) return pattern;
   }
   return void 0;
 }
@@ -20094,8 +20094,8 @@ function extractFeatureValues(features) {
 }
 function computeGradients(trajectory, returns, baseline) {
   const gradients = {};
-  for (const key of LEARNABLE_WEIGHTS) {
-    gradients[key] = 0;
+  for (const key2 of LEARNABLE_WEIGHTS) {
+    gradients[key2] = 0;
   }
   for (let t = 0; t < trajectory.length; t++) {
     const step = trajectory[t];
@@ -20104,16 +20104,16 @@ function computeGradients(trajectory, returns, baseline) {
     const advantage = returnValue - baseline;
     const features = extractFeatures(step.state);
     const featureValues = extractFeatureValues(features);
-    for (const key of LEARNABLE_WEIGHTS) {
-      const featureVal = featureValues[key];
-      const currentGrad = gradients[key] ?? 0;
-      gradients[key] = currentGrad + advantage * featureVal;
+    for (const key2 of LEARNABLE_WEIGHTS) {
+      const featureVal = featureValues[key2];
+      const currentGrad = gradients[key2] ?? 0;
+      gradients[key2] = currentGrad + advantage * featureVal;
     }
   }
   if (trajectory.length > 0) {
-    for (const key of LEARNABLE_WEIGHTS) {
-      const currentGrad = gradients[key] ?? 0;
-      gradients[key] = currentGrad / trajectory.length;
+    for (const key2 of LEARNABLE_WEIGHTS) {
+      const currentGrad = gradients[key2] ?? 0;
+      gradients[key2] = currentGrad / trajectory.length;
     }
   }
   return gradients;
@@ -20122,9 +20122,9 @@ function normalizeWeights(weights) {
   const weightSum = Object.values(weights).reduce((s, w) => s + Math.abs(w), 0);
   if (weightSum === 0) return weights;
   const normalized = { ...weights };
-  for (const key of Object.keys(normalized)) {
-    const weight = normalized[key] ?? 0;
-    normalized[key] = Math.abs(weight) / weightSum;
+  for (const key2 of Object.keys(normalized)) {
+    const weight = normalized[key2] ?? 0;
+    normalized[key2] = Math.abs(weight) / weightSum;
   }
   return normalized;
 }
@@ -20132,10 +20132,10 @@ function applyGradientUpdate(gradients, currentWeights, learningRate, gradientCl
   const gradNorm = Math.sqrt(Object.values(gradients).reduce((sum, g) => sum + g * g, 0));
   const clipRatio = gradNorm > gradientClip ? gradientClip / gradNorm : 1;
   const newWeights = { ...currentWeights };
-  for (const key of LEARNABLE_WEIGHTS) {
-    const currentWeight = newWeights[key] ?? 0;
-    const gradient = gradients[key] ?? 0;
-    newWeights[key] = currentWeight + learningRate * gradient * clipRatio;
+  for (const key2 of LEARNABLE_WEIGHTS) {
+    const currentWeight = newWeights[key2] ?? 0;
+    const gradient = gradients[key2] ?? 0;
+    newWeights[key2] = currentWeight + learningRate * gradient * clipRatio;
   }
   return {
     weights: normalizeWeights(newWeights),
@@ -20448,14 +20448,14 @@ var PatternTracker = class {
     const ngramCounts = /* @__PURE__ */ new Map();
     for (let i = 0; i <= sequence2.length - length; i++) {
       const ngram = sequence2.slice(i, i + length);
-      const key = ngram.join("|");
-      ngramCounts.set(key, (ngramCounts.get(key) ?? 0) + 1);
+      const key2 = ngram.join("|");
+      ngramCounts.set(key2, (ngramCounts.get(key2) ?? 0) + 1);
     }
     const cycles = [];
-    for (const [key, count] of ngramCounts) {
+    for (const [key2, count] of ngramCounts) {
       if (count >= 2) {
         cycles.push({
-          agents: key.split("|"),
+          agents: key2.split("|"),
           occurrences: count
         });
       }
@@ -20465,14 +20465,14 @@ var PatternTracker = class {
   mergeCycles(cycles) {
     const grouped = /* @__PURE__ */ new Map();
     for (const cycle of cycles) {
-      const key = this.normalizeCycleKey(cycle.agents);
-      const existing = grouped.get(key);
+      const key2 = this.normalizeCycleKey(cycle.agents);
+      const existing = grouped.get(key2);
       if (existing) {
         if (cycle.occurrences > existing.occurrences) {
-          grouped.set(key, cycle);
+          grouped.set(key2, cycle);
         }
       } else {
-        grouped.set(key, cycle);
+        grouped.set(key2, cycle);
       }
     }
     return [...grouped.values()].sort((a, b) => b.occurrences - a.occurrences);
@@ -21541,9 +21541,9 @@ var ExpertPool = class {
     if (this.active < this.capacity) {
       return this.issuePermit();
     }
-    return new Promise((resolve12, reject) => {
+    return new Promise((resolve13, reject) => {
       const timer = setTimeout(() => {
-        const idx = this.queue.findIndex((e) => e.resolve === resolve12);
+        const idx = this.queue.findIndex((e) => e.resolve === resolve13);
         if (idx !== -1) {
           this.queue.splice(idx, 1);
         }
@@ -21553,7 +21553,7 @@ var ExpertPool = class {
           )
         );
       }, this.acquireTimeoutMs);
-      this.queue.push({ resolve: resolve12, reject, timer });
+      this.queue.push({ resolve: resolve13, reject, timer });
     });
   }
   /** Release a permit back to the pool. */
@@ -22148,8 +22148,8 @@ var TaskQueue = class {
     if (this.cancelled) {
       return Promise.reject(new Error("Queue has been cancelled"));
     }
-    return new Promise((resolve12, reject) => {
-      this.queue.push({ task, resolve: resolve12, reject });
+    return new Promise((resolve13, reject) => {
+      this.queue.push({ task, resolve: resolve13, reject });
       this.processNext();
     });
   }
@@ -22425,16 +22425,16 @@ async function executeStepWithTimeout(step, context, stepExecutor, signal) {
   return executeWithTimeout2(step, stepContext, stepExecutor, stepTimeout, startTime);
 }
 function executeWithTimeout2(step, context, executor, timeout, startTime) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     const timeoutId = setTimeout(() => {
-      resolve12(createTimeoutResult(step.id, getTimeProvider().now() - startTime, timeout));
+      resolve13(createTimeoutResult(step.id, getTimeProvider().now() - startTime, timeout));
     }, timeout);
     executor(step, context).then((result) => {
       clearTimeout(timeoutId);
-      resolve12(result);
+      resolve13(result);
     }).catch((error) => {
       clearTimeout(timeoutId);
-      resolve12(createErrorResult(step.id, getTimeProvider().now() - startTime, error));
+      resolve13(createErrorResult(step.id, getTimeProvider().now() - startTime, error));
     });
   });
 }
@@ -23235,12 +23235,12 @@ function isCancelled(context) {
 }
 function snapshotContext(context) {
   const stepResults = {};
-  for (const [key, value] of context.stepResults) {
-    stepResults[key] = value;
+  for (const [key2, value] of context.stepResults) {
+    stepResults[key2] = value;
   }
   const variables = {};
-  for (const [key, value] of context.variables) {
-    variables[key] = value;
+  for (const [key2, value] of context.variables) {
+    variables[key2] = value;
   }
   return {
     workflowId: context.workflowId,
@@ -23271,14 +23271,14 @@ function validateRequiredInputs(inputs, required) {
 // src/workflows/expression-resolver-helpers.ts
 function getNestedValue(obj, path9) {
   let current = obj;
-  for (const key of path9) {
+  for (const key2 of path9) {
     if (current === null || current === void 0) {
       return void 0;
     }
     if (typeof current !== "object") {
       return void 0;
     }
-    current = current[key];
+    current = current[key2];
   }
   return current;
 }
@@ -23467,8 +23467,8 @@ function resolveInput(input, context) {
   }
   if (input !== null && typeof input === "object") {
     const resolved = {};
-    for (const [key, value] of Object.entries(input)) {
-      resolved[key] = resolveInput(value, context);
+    for (const [key2, value] of Object.entries(input)) {
+      resolved[key2] = resolveInput(value, context);
     }
     return resolved;
   }
@@ -23595,7 +23595,7 @@ function formatValue(value) {
   return typeof value === "number" || typeof value === "boolean" ? String(value) : "[complex]";
 }
 function buildTaskDescription(step, inputs) {
-  const inputSummary = Object.entries(inputs).map(([key, value]) => `- ${key}: ${formatValue(value)}`).join("\n");
+  const inputSummary = Object.entries(inputs).map(([key2, value]) => `- ${key2}: ${formatValue(value)}`).join("\n");
   return `Execute action: ${step.action}
 
 Inputs:
@@ -26393,8 +26393,8 @@ function buildTopEdges(graph) {
   const edges = graph.getEdges();
   const edgeMap = /* @__PURE__ */ new Map();
   for (const edge of edges) {
-    const key = `${edge.from}|${edge.to}`;
-    const existing = edgeMap.get(key) ?? { count: 0, successes: 0, totalLatency: 0, timed: 0 };
+    const key2 = `${edge.from}|${edge.to}`;
+    const existing = edgeMap.get(key2) ?? { count: 0, successes: 0, totalLatency: 0, timed: 0 };
     existing.count++;
     if (edge.outcome === "success") {
       existing.successes++;
@@ -26403,10 +26403,10 @@ function buildTopEdges(graph) {
       existing.totalLatency += edge.durationMs;
       existing.timed++;
     }
-    edgeMap.set(key, existing);
+    edgeMap.set(key2, existing);
   }
-  return Array.from(edgeMap.entries()).map(([key, stats]) => {
-    const [from, to] = key.split("|");
+  return Array.from(edgeMap.entries()).map(([key2, stats]) => {
+    const [from, to] = key2.split("|");
     return {
       from: from ?? "",
       to: to ?? "",
@@ -26919,10 +26919,10 @@ function calculateDifferenceCI(p1, p2, total1, total2, confidence) {
   const difference = p1 - p2;
   const measured = total1 > 0 && total2 > 0;
   const seDiff = Math.sqrt(p1 * (1 - p1) / (total1 || 1) + p2 * (1 - p2) / (total2 || 1));
-  const z115 = getZScore(confidence);
+  const z116 = getZScore(confidence);
   return {
-    lower: difference - z115 * seDiff,
-    upper: difference + z115 * seDiff,
+    lower: difference - z116 * seDiff,
+    upper: difference + z116 * seDiff,
     estimate: difference,
     confidence,
     n: total1 + total2,
@@ -26950,11 +26950,11 @@ function proportionConfidenceInterval(successes, total, options = {}) {
       measured: false
     };
   }
-  const z115 = getZScore(opts.confidence);
-  const z210 = z115 * z115;
+  const z116 = getZScore(opts.confidence);
+  const z210 = z116 * z116;
   const denominator = 1 + z210 / n;
   const center = (p + z210 / (2 * n)) / denominator;
-  const margin = z115 / denominator * Math.sqrt(p * (1 - p) / n + z210 / (4 * n * n));
+  const margin = z116 / denominator * Math.sqrt(p * (1 - p) / n + z210 / (4 * n * n));
   const lower = Math.max(0, center - margin);
   const upper = Math.min(1, center + margin);
   const standardError = Math.sqrt(p * (1 - p) / n);
@@ -26992,8 +26992,8 @@ function meanConfidenceInterval(values, options = {}) {
   const variance = values.reduce((sum, v) => sum + (v - mean) ** 2, 0) / (n - 1 || 1);
   const stdDev = Math.sqrt(variance);
   const standardError = stdDev / Math.sqrt(n);
-  const z115 = getZScore(opts.confidence);
-  const margin = z115 * standardError;
+  const z116 = getZScore(opts.confidence);
+  const margin = z116 * standardError;
   return {
     lower: mean - margin,
     upper: mean + margin,
@@ -29085,8 +29085,8 @@ function budgetHaltFailure(context) {
 import { randomUUID as randomUUID8 } from "node:crypto";
 function resolveExecutionEngineOrError(deps, workflowName) {
   try {
-    const resolve12 = deps.resolveExecutionEngine ?? (() => deps.workflowEngine);
-    return { ok: true, value: resolve12() };
+    const resolve13 = deps.resolveExecutionEngine ?? (() => deps.workflowEngine);
+    return { ok: true, value: resolve13() };
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     deps.logger?.error(
@@ -30053,8 +30053,8 @@ function initializeState(graph, inputs) {
   for (const [field, schema] of Object.entries(graph.stateSchema)) {
     state[field] = schema.defaultValue;
   }
-  for (const [key, value] of Object.entries(inputs)) {
-    state[key] = value;
+  for (const [key2, value] of Object.entries(inputs)) {
+    state[key2] = value;
   }
   return state;
 }
@@ -30072,9 +30072,9 @@ function applyStateUpdates(graph, state, updates) {
   for (const [field, value] of Object.entries(updates)) {
     const schema = graph.stateSchema[field];
     if (schema === void 0) {
-      const key = `${String(Object.keys(graph.stateSchema).length)}:${field}`;
-      if (!undeclaredFieldWarned.has(key)) {
-        undeclaredFieldWarned.add(key);
+      const key2 = `${String(Object.keys(graph.stateSchema).length)}:${field}`;
+      if (!undeclaredFieldWarned.has(key2)) {
+        undeclaredFieldWarned.add(key2);
         logger17.warn("Node wrote to undeclared state field; defaulting to overwrite reducer", {
           field,
           knownFields: Object.keys(graph.stateSchema)
@@ -30291,13 +30291,13 @@ function dedupe(ids) {
   return [...new Set(ids)];
 }
 async function withTimeout3(promise, ms) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve13, reject) => {
     const timer = setTimeout(() => {
       reject(new Error(`Node timed out after ${String(ms)}ms`));
     }, ms);
     promise.then((result) => {
       clearTimeout(timer);
-      resolve12(result);
+      resolve13(result);
     }).catch((error) => {
       clearTimeout(timer);
       reject(error instanceof Error ? error : new Error(String(error)));
@@ -32661,12 +32661,12 @@ function computeMetrics2(outcomes, filterPattern) {
   const groups = /* @__PURE__ */ new Map();
   for (const o of outcomes) {
     if (filterPattern !== void 0 && o.pattern !== filterPattern) continue;
-    const key = `${o.pattern}:${o.taskType}`;
-    const group = groups.get(key);
+    const key2 = `${o.pattern}:${o.taskType}`;
+    const group = groups.get(key2);
     if (group !== void 0) {
       group.push(o);
     } else {
-      groups.set(key, [o]);
+      groups.set(key2, [o]);
     }
   }
   const metrics = [];
@@ -32848,11 +32848,11 @@ function createMockOrchestrator() {
 async function raceAgainstDeadline(promise, deadlineMs, onTimeout) {
   const startedAt = Date.now();
   let timer;
-  const timeoutP = new Promise((resolve12, reject) => {
+  const timeoutP = new Promise((resolve13, reject) => {
     timer = setTimeout(
       () => {
         try {
-          resolve12(onTimeout(Date.now() - startedAt));
+          resolve13(onTimeout(Date.now() - startedAt));
         } catch (err2) {
           reject(err2 instanceof Error ? err2 : new Error(String(err2)));
         }
@@ -34039,11 +34039,11 @@ function createWorkerTask(entry, taskIndex, waveNumber, opts) {
     const staggerSlot = taskIndex % opts.maxConcurrency;
     const staggerMs = staggerSlot * opts.staggerDelayMs;
     if (staggerMs > 0) {
-      await new Promise((resolve12) => setTimeout(resolve12, staggerMs));
+      await new Promise((resolve13) => setTimeout(resolve13, staggerMs));
     }
     const spacingDelay = opts.failureTracker.getSpacingDelay(entry.role);
     if (spacingDelay > 0) {
-      await new Promise((resolve12) => setTimeout(resolve12, spacingDelay));
+      await new Promise((resolve13) => setTimeout(resolve13, spacingDelay));
     }
     const timeoutMs = opts.options.workerTimeoutMs ?? getExpertTaskTimeout(entry.subTask);
     const result = await executeSafe({
@@ -34096,7 +34096,7 @@ async function maybeDelayForRateLimit(results, waveIdx, totalWaves) {
   );
   if (hasRateLimit) {
     logger27.warn("Rate-limit detected \u2014 delaying next wave", { delayMs: RATE_LIMIT_WAVE_DELAY_MS });
-    await new Promise((resolve12) => setTimeout(resolve12, RATE_LIMIT_WAVE_DELAY_MS));
+    await new Promise((resolve13) => setTimeout(resolve13, RATE_LIMIT_WAVE_DELAY_MS));
   }
 }
 function emitWaveStarted(ctx, workerCount, roles) {
@@ -34203,7 +34203,7 @@ async function maybeRetryAfterTriage(opts) {
   }
   const useAltCli = triage.action === "retry_different_cli" && altExecuteWorker !== void 0;
   if (triage.action === "retry_different_cli") {
-    await new Promise((resolve12) => setTimeout(resolve12, RATE_LIMIT_SPACING_MS));
+    await new Promise((resolve13) => setTimeout(resolve13, RATE_LIMIT_SPACING_MS));
   }
   if (isCancelled2(opts.signal)) return { ...failedResult2, triageAction: triage.action };
   const retryTimeout = triage.action === "extend_timeout" ? Math.min(timeoutMs * TIMEOUT_EXTENSION_FACTOR, MAX_WORKER_TIMEOUT_MS) : timeoutMs;
@@ -34657,12 +34657,12 @@ function extractFilePaths(output2) {
   FILE_PATH_PATTERN.lastIndex = 0;
   return [...paths];
 }
-function addToOverlapMap(map, key, role) {
-  const existing = map.get(key);
+function addToOverlapMap(map, key2, role) {
+  const existing = map.get(key2);
   if (existing !== void 0) {
     existing.add(role);
   } else {
-    map.set(key, /* @__PURE__ */ new Set([role]));
+    map.set(key2, /* @__PURE__ */ new Set([role]));
   }
 }
 function detectConflicts(results) {
@@ -34751,8 +34751,8 @@ var SynthesisHistoryTracker = class {
     if (this.patterns.size <= MAX_PATTERNS) return;
     const sorted = [...this.patterns.entries()].sort((a, b) => a[1].lastUpdated - b[1].lastUpdated);
     const toRemove = sorted.slice(0, this.patterns.size - MAX_PATTERNS);
-    for (const [key] of toRemove) {
-      this.patterns.delete(key);
+    for (const [key2] of toRemove) {
+      this.patterns.delete(key2);
     }
   }
 };
@@ -35131,18 +35131,18 @@ function createCheckpoint2(role, subTask, partialOutput = "") {
 var WorkerCheckpointStore = class {
   store = /* @__PURE__ */ new Map();
   /** Save a checkpoint, truncating partial output if needed. */
-  save(key, checkpoint) {
+  save(key2, checkpoint) {
     const truncated = truncateOutput(checkpoint);
-    this.store.set(key, truncated);
+    this.store.set(key2, truncated);
     this.enforceCapacity();
   }
   /** Retrieve a checkpoint by key. */
-  get(key) {
-    return this.store.get(key);
+  get(key2) {
+    return this.store.get(key2);
   }
   /** Remove a specific checkpoint. Returns true if it existed. */
-  remove(key) {
-    return this.store.delete(key);
+  remove(key2) {
+    return this.store.delete(key2);
   }
   /** Clear all checkpoints. */
   clear() {
@@ -35705,25 +35705,25 @@ var ReflectionCache = class {
     return query.toLowerCase().trim().replace(/\s+/g, " ");
   }
   get(query) {
-    const key = this.normalize(query);
-    const entry = this.entries.get(key);
+    const key2 = this.normalize(query);
+    const entry = this.entries.get(key2);
     if (entry === void 0) return void 0;
     if (getTimeProvider().now() - entry.timestamp > this.ttlMs) {
-      this.entries.delete(key);
+      this.entries.delete(key2);
       return void 0;
     }
-    this.entries.delete(key);
-    this.entries.set(key, entry);
+    this.entries.delete(key2);
+    this.entries.set(key2, entry);
     return entry.criteria;
   }
   set(query, criteria) {
-    const key = this.normalize(query);
-    this.entries.delete(key);
+    const key2 = this.normalize(query);
+    this.entries.delete(key2);
     if (this.entries.size >= this.maxEntries) {
       const oldest = this.entries.keys().next();
       if (oldest.done !== true) this.entries.delete(oldest.value);
     }
-    this.entries.set(key, { criteria, timestamp: getTimeProvider().now() });
+    this.entries.set(key2, { criteria, timestamp: getTimeProvider().now() });
   }
   get size() {
     return this.entries.size;
@@ -37060,7 +37060,7 @@ var REASON_MAP = [
   ["needsExploration", "exploration/research task benefits from large context"]
 ];
 function buildReasons(requirements, pref, billingMode = "api", specialization = null, chosenCli) {
-  const reasons = REASON_MAP.filter(([key]) => requirements[key] === true).map(([, desc]) => desc);
+  const reasons = REASON_MAP.filter(([key2]) => requirements[key2] === true).map(([, desc]) => desc);
   if (specialization !== null) {
     if (chosenCli !== void 0 && specialization.primaryCli !== chosenCli) {
       reasons.push(
@@ -38146,8 +38146,8 @@ function getSecuritySetupRegistry() {
 }
 
 // src/mcp/tools/run-graph-workflow-templates.ts
-function stateStrings(state, key) {
-  const val = state[key];
+function stateStrings(state, key2) {
+  const val = state[key2];
   return Array.isArray(val) ? val : [];
 }
 var WORKFLOW_METADATA = [
@@ -40211,8 +40211,8 @@ function failureResponse(focus, registry = "techniques") {
 function countByKey(items, keyFn) {
   const counts = {};
   for (const item of items) {
-    for (const key of keyFn(item)) {
-      counts[key] = (counts[key] ?? 0) + 1;
+    for (const key2 of keyFn(item)) {
+      counts[key2] = (counts[key2] ?? 0) + 1;
     }
   }
   return counts;
@@ -40387,8 +40387,8 @@ function countTechniqueStatuses(techniques, topic) {
   for (const tech of Object.values(techniques)) {
     if (topic !== void 0 && tech.topic !== topic) continue;
     counts.total++;
-    const key = statusMap[tech.status];
-    if (key !== void 0) counts[key]++;
+    const key2 = statusMap[tech.status];
+    if (key2 !== void 0) counts[key2]++;
   }
   return counts;
 }
@@ -41254,8 +41254,8 @@ function extractSections2(lines) {
 }
 function extractOverview(sections) {
   const keys = ["overview", "goal", "description", "summary"];
-  for (const key of keys) {
-    const content = sections.get(key);
+  for (const key2 of keys) {
+    const content = sections.get(key2);
     if (content !== void 0 && content.length > 0) {
       return joinNonEmpty(content);
     }
@@ -41266,8 +41266,8 @@ function extractOverview(sections) {
 }
 function extractListItems(sections, keys) {
   const items = [];
-  for (const key of keys) {
-    const content = sections.get(key);
+  for (const key2 of keys) {
+    const content = sections.get(key2);
     if (content === void 0) continue;
     for (const line of content) {
       const trimmed = line.trim();
@@ -42178,48 +42178,48 @@ var MemoryWriteInputSchema = z73.object({
   metadata: z73.record(z73.string().max(100), z73.string().max(500)).optional().describe("Optional key-value metadata tags"),
   sourceTrustTier: TrustTierSchema.optional().describe(SOURCE_TRUST_TIER_DESCRIPTION)
 });
-function writeToSession(key, content, confidence, trustTier) {
+function writeToSession(key2, content, confidence, trustTier) {
   const toolMemory = getToolMemory();
   const numericConfidence = confidence === "high" ? 0.9 : confidence === "medium" ? 0.7 : 0.4;
   const outcome = toolMemory.recordLearning({
     pattern: content,
-    context: key,
+    context: key2,
     confidence: numericConfidence,
     source: "memory_write_tool",
     ...trustTier !== void 0 ? { trustTier } : {}
   });
   if (!outcome.persisted) {
-    return { success: false, backend: "session", key, error: outcome.reason };
+    return { success: false, backend: "session", key: key2, error: outcome.reason };
   }
-  return { success: true, backend: "session", key };
+  return { success: true, backend: "session", key: key2 };
 }
-async function writeToBelief(key, content, confidence, trustTier) {
+async function writeToBelief(key2, content, confidence, trustTier) {
   const toolMemory = getToolMemory();
   const countBefore = toolMemory.getBeliefCount();
   const outcome = await toolMemory.recordBelief(
-    key,
+    key2,
     "has_knowledge",
     content,
     confidence,
     trustTier
   );
   if (!outcome.persisted) {
-    return { success: false, backend: "belief", key, error: outcome.reason };
+    return { success: false, backend: "belief", key: key2, error: outcome.reason };
   }
   const deduplicated = toolMemory.getBeliefCount() === countBefore;
-  return { success: true, backend: "belief", key, ...deduplicated ? { deduplicated: true } : {} };
+  return { success: true, backend: "belief", key: key2, ...deduplicated ? { deduplicated: true } : {} };
 }
-async function writeToAgentic(key, content, confidence, metadata, trustTier) {
+async function writeToAgentic(key2, content, confidence, metadata, trustTier) {
   const toolMemory = getToolMemory();
   if (!toolMemory.isAgenticMemoryAvailable()) {
     return {
       success: false,
       backend: "agentic",
-      key,
+      key: key2,
       error: "Agentic memory backend unavailable (requires SQLite)"
     };
   }
-  const outcome = await toolMemory.recordKnowledge(key, content, {
+  const outcome = await toolMemory.recordKnowledge(key2, content, {
     importance: confidence,
     tags: [
       ...metadata !== void 0 ? Object.keys(metadata) : [],
@@ -42227,53 +42227,53 @@ async function writeToAgentic(key, content, confidence, metadata, trustTier) {
     ]
   });
   if (!outcome.persisted) {
-    return { success: false, backend: "agentic", key, error: outcome.reason };
+    return { success: false, backend: "agentic", key: key2, error: outcome.reason };
   }
-  return { success: true, backend: "agentic", key };
+  return { success: true, backend: "agentic", key: key2 };
 }
-async function writeToAdaptive(key, content, confidence, trustTier) {
+async function writeToAdaptive(key2, content, confidence, trustTier) {
   const toolMemory = getToolMemory();
   if (!toolMemory.isAdaptiveMemoryAvailable()) {
     return {
       success: false,
       backend: "adaptive",
-      key,
+      key: key2,
       error: "Adaptive memory backend unavailable (requires SQLite)"
     };
   }
   const importance = confidence === "high" ? 0.9 : confidence === "medium" ? 0.7 : 0.5;
   const outcome = await toolMemory.storeAdaptive(
-    key,
+    key2,
     content,
     importance,
     trustTier
   );
   if (!outcome.persisted) {
-    return { success: false, backend: "adaptive", key, error: outcome.reason };
+    return { success: false, backend: "adaptive", key: key2, error: outcome.reason };
   }
-  return { success: true, backend: "adaptive", key };
+  return { success: true, backend: "adaptive", key: key2 };
 }
-async function writeToTyped(key, content, confidence, trustTier) {
+async function writeToTyped(key2, content, confidence, trustTier) {
   const toolMemory = getToolMemory();
   if (!toolMemory.isTypedMemoryAvailable()) {
     return {
       success: false,
       backend: "typed",
-      key,
+      key: key2,
       error: "Typed memory backend unavailable (requires SQLite)"
     };
   }
   const importance = confidence === "high" ? "high" : confidence === "medium" ? "medium" : "low";
   const outcome = await toolMemory.storeTyped(
-    key,
+    key2,
     content,
     importance,
     trustTier
   );
   if (!outcome.persisted) {
-    return { success: false, backend: "typed", key, error: outcome.reason };
+    return { success: false, backend: "typed", key: key2, error: outcome.reason };
   }
-  return { success: true, backend: "typed", key };
+  return { success: true, backend: "typed", key: key2 };
 }
 var recentWriteKeys = /* @__PURE__ */ new Map();
 var MAX_DEDUP_CACHE = 200;
@@ -44572,12 +44572,12 @@ var FileAuditStorage = class _FileAuditStorage {
     const data = this.writeBuffer.join("");
     this.writeBuffer = [];
     const stream = this.writeStream;
-    return new Promise((resolve12, reject) => {
+    return new Promise((resolve13, reject) => {
       stream.write(data, (err2) => {
         if (err2 !== void 0 && err2 !== null) {
           reject(new AuditError("Failed to flush audit log", { cause: err2 }));
         } else {
-          resolve12();
+          resolve13();
         }
       });
     });
@@ -44638,15 +44638,15 @@ var FileAuditStorage = class _FileAuditStorage {
   }
   async close() {
     await this.flush();
-    return new Promise((resolve12) => {
+    return new Promise((resolve13) => {
       if (this.writeStream === null) {
-        resolve12();
+        resolve13();
         return;
       }
       this.writeStream.end(() => {
         this.writeStream = null;
         this.logger.info("Audit storage closed");
-        resolve12();
+        resolve13();
       });
     });
   }
@@ -46077,8 +46077,8 @@ function buildError(templateId, error, startTime) {
     error
   };
 }
-function extractStateValue(state, key) {
-  return state[key];
+function extractStateValue(state, key2) {
+  return state[key2];
 }
 
 // src/pipeline/templates.ts
@@ -46682,7 +46682,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-BD5NWZU5.js");
+    const { executeVoting } = await import("./consensus-vote-36TUM35R.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -46839,8 +46839,8 @@ async function recallPriorBeliefContext(bm, task, sessionId) {
   try {
     const records = [];
     const seen = /* @__PURE__ */ new Set();
-    for (const key of pipelineHindsightKeys(task, sessionId)) {
-      const result = await bm.getHindsightRecords(key);
+    for (const key2 of pipelineHindsightKeys(task, sessionId)) {
+      const result = await bm.getHindsightRecords(key2);
       if (!result.ok) continue;
       for (const rec of result.value) {
         if (seen.has(rec.hindsightId)) continue;
@@ -47192,7 +47192,7 @@ function execFileTree(command, args, options) {
     return Promise.reject(new AbortError(`${command} aborted before it started`));
   }
   const graceMs = options.graceMs ?? SIGKILL_GRACE_MS;
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve13, reject) => {
     const run = {
       settled: false,
       child: void 0
@@ -47220,8 +47220,8 @@ function execFileTree(command, args, options) {
     signal?.addEventListener("abort", onAbort, { once: true });
     run.child = spawnTracked(command, args, options, (error, stdout, stderr) => {
       finish(() => {
-        if (error === null) resolve12({ stdout, stderr });
-        else reject(error);
+        if (error === null) resolve13({ stdout, stderr });
+        else reject(Object.assign(error, { stdout, stderr }));
       });
     });
   });
@@ -47628,6 +47628,7 @@ async function withDevPipelineWorkspace(stages, run, install = installDependenci
     const dependencies = await provisionDependencies(scratch.path, install, sandbox.wrapper);
     const bound = stages.withWorkspace({
       directory: join13(scratch.path, relative4(repoRoot, directory)),
+      baseline: { sha: baseSha, directory: repoRoot },
       dependencies,
       wrapper: sandbox.wrapper
     });
@@ -47927,6 +47928,7 @@ async function runImplSecurityPhase(planResult, tasks, stages, run) {
     qaIterations: implResult.totalIterations,
     securityPassed: security.passed,
     securityRan: security.verdict !== "skip",
+    ...security.comparison !== void 0 ? { securityComparison: security.comparison } : {},
     taskStatus,
     ...security.verdict === "skip" ? { securityNote: security.feedback } : {},
     ...warnings
@@ -48282,8 +48284,8 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     // #3234: record the run's research-maturity (RECORD + measure; #3815 gates use).
     ...researchMaturity !== void 0 ? { researchMaturity } : {}
   };
-  const callRecord = (rm) => {
-    rm.recordExperience(category, ["claude"], success, metrics);
+  const callRecord = (rm2) => {
+    rm2.recordExperience(category, ["claude"], success, metrics);
   };
   if (routingMemoryCache !== null) {
     callRecord(routingMemoryCache);
@@ -48298,8 +48300,8 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     logger44.debug("Routing memory init failed; continuing without it", { error: msg });
     return null;
   });
-  void routingMemoryInitPromise.then((rm) => {
-    if (rm !== null) callRecord(rm);
+  void routingMemoryInitPromise.then((rm2) => {
+    if (rm2 !== null) callRecord(rm2);
   });
 }
 
@@ -48377,6 +48379,14 @@ function accessModeSignals(args) {
   }
   return [];
 }
+function securityStageResult(result, passed) {
+  return {
+    passed,
+    verdict: result.verdict,
+    feedback: result.details,
+    ...result.comparison !== void 0 ? { comparison: result.comparison } : {}
+  };
+}
 function throwIfAborted2(signal, expertType) {
   if (signal?.aborted !== true) return;
   const reason = signal.reason;
@@ -48515,7 +48525,7 @@ function createVoteStage({ config, startStage }) {
     const strategy = config.votingStrategy ?? "higher_order";
     await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
     try {
-      const { executeVoting } = await import("./consensus-vote-BD5NWZU5.js");
+      const { executeVoting } = await import("./consensus-vote-36TUM35R.js");
       const proposal = buildVoteProposal(plan, research);
       const votingResult = await executeVoting(
         {
@@ -48615,6 +48625,9 @@ Verdict: PASS/NEEDS_WORK/REJECT`;
   };
 }
 
+// src/mcp/tools/security-scan.ts
+import { z as z93 } from "zod";
+
 // src/security/sarif-parser.ts
 import { z as z92 } from "zod";
 var SarifLocationSchema = z92.object({
@@ -48623,7 +48636,11 @@ var SarifLocationSchema = z92.object({
     region: z92.object({
       startLine: z92.number().optional().catch(void 0),
       endLine: z92.number().int().min(1).optional().catch(void 0),
-      snippet: z92.object({ text: z92.string().optional().catch(void 0) }).optional().catch(void 0)
+      snippet: z92.object({
+        text: z92.string().optional().catch(void 0),
+        // Unknown truncation metadata cannot establish a complete snippet.
+        truncated: z92.boolean().optional().catch(true)
+      }).optional().catch(void 0)
     }).optional()
   }).optional()
 });
@@ -48654,7 +48671,18 @@ var SarifRunSchema = z92.object({
       rules: z92.array(z92.unknown()).optional()
     }).optional()
   }).optional(),
-  results: z92.array(z92.unknown()).nullish()
+  results: z92.array(z92.unknown()).nullish(),
+  invocations: z92.array(z92.unknown()).optional()
+});
+var SarifNotificationSchema = z92.object({
+  descriptor: z92.object({ id: z92.string().optional() }).optional(),
+  level: z92.string().optional(),
+  message: z92.object({ text: z92.string().optional() }).optional()
+});
+var SarifInvocationSchema = z92.object({
+  executionSuccessful: z92.boolean().optional(),
+  toolExecutionNotifications: z92.array(SarifNotificationSchema).optional(),
+  toolConfigurationNotifications: z92.array(SarifNotificationSchema).optional()
 });
 var SarifLogSchema = z92.object({
   version: z92.string().optional(),
@@ -48685,7 +48713,7 @@ function parseSarif(sarifJson, maxFindings = 100) {
   const errors = [];
   const envelope = parseEnvelope(sarifJson);
   if (!envelope.ok) {
-    return { scanner: "unknown", totalFindings: 0, findings: [], errors: [envelope.error] };
+    return emptyResult(envelope.error);
   }
   return parseLog(envelope.log, maxFindings, errors);
 }
@@ -48694,25 +48722,91 @@ function describeDriver(run) {
   return { scanner: driver?.name ?? "unknown", rules: driver?.rules ?? [] };
 }
 function emptyResult(error) {
-  return { scanner: "unknown", totalFindings: 0, findings: [], errors: [error] };
+  return {
+    scanner: "unknown",
+    totalFindings: 0,
+    findings: [],
+    errors: [error],
+    coverageComplete: false
+  };
 }
 function parseLog(log, maxFindings, errors) {
   const runs = log.runs;
   if (runs === void 0 || runs.length === 0) return emptyResult("No runs in SARIF");
-  const parsedRun = SarifRunSchema.safeParse(runs[0]);
-  if (!parsedRun.success) {
-    return emptyResult(`Malformed SARIF run: ${describeZodError(parsedRun.error)}`);
+  let scanner = "unknown";
+  const parseDiagnostics = [];
+  const findings = [];
+  for (const [index, raw] of runs.entries()) {
+    const parsedRun = SarifRunSchema.safeParse(raw);
+    if (!parsedRun.success) {
+      errors.push(`Malformed SARIF run ${String(index)}: ${describeZodError(parsedRun.error)}`);
+      continue;
+    }
+    const driver = describeDriver(parsedRun.data);
+    checkRunCoverage(parsedRun.data, errors);
+    if (index === 0) scanner = driver.scanner;
+    checkInvocations(parsedRun.data.invocations ?? [], errors, parseDiagnostics);
+    const ruleMap = buildRuleMap(driver.rules, errors);
+    findings.push(
+      ...collectFindings(parsedRun.data.results ?? [], driver.scanner, ruleMap, errors)
+    );
+  }
+  findings.sort((a, b) => SEVERITY_ORDER[a.severity] - SEVERITY_ORDER[b.severity]);
+  if (findings.length > maxFindings) {
+    errors.push(
+      `Truncated findings: returned ${String(maxFindings)} of ${String(findings.length)}`
+    );
   }
-  const { scanner, rules } = describeDriver(parsedRun.data);
-  const ruleMap = buildRuleMap(rules, errors);
-  const findings = collectFindings(parsedRun.data.results ?? [], scanner, ruleMap, errors);
   return {
     scanner,
     totalFindings: findings.length,
     findings: findings.slice(0, maxFindings),
-    errors
+    errors,
+    coverageComplete: errors.length === 0,
+    ...parseDiagnostics.length > 0 ? { parseDiagnostics } : {}
   };
 }
+function checkRunCoverage(run, errors) {
+  if (run.tool?.driver?.name === void 0 || run.tool.driver.name.length === 0) {
+    errors.push("SARIF run missing scanner identity");
+  }
+  if (run.results === void 0 || run.results === null) {
+    errors.push("SARIF run missing measured results");
+  }
+}
+function checkInvocations(invocations, errors, parseDiagnostics) {
+  for (const raw of invocations) {
+    const parsed = SarifInvocationSchema.safeParse(raw);
+    if (!parsed.success) {
+      errors.push(`Malformed SARIF invocation: ${describeZodError(parsed.error)}`);
+      continue;
+    }
+    if (parsed.data.executionSuccessful === false) errors.push("Scanner invocation failed");
+    const notifications = [
+      ...parsed.data.toolExecutionNotifications ?? [],
+      ...parsed.data.toolConfigurationNotifications ?? []
+    ];
+    checkNotifications(notifications, errors, parseDiagnostics);
+  }
+}
+function checkNotifications(notifications, errors, parseDiagnostics) {
+  for (const notification of notifications ?? []) {
+    const diagnostic = parseNotification(notification);
+    if (diagnostic !== void 0) parseDiagnostics.push(diagnostic);
+    else if (notification.level !== "note" && notification.level !== "none")
+      errors.push(`Scanner notification: ${notification.message?.text ?? "unknown scanner error"}`);
+  }
+}
+function parseNotification(notification) {
+  if (!/^(?:Syntax error|Other syntax error)$/.test(notification.descriptor?.id ?? ""))
+    return void 0;
+  const message = notification.message?.text;
+  if (message === void 0) return void 0;
+  const file = /^(?:Syntax error|Other syntax error) at line (.+):(\d+):(?:\n|$| )/.exec(
+    message
+  )?.[1];
+  return file === void 0 ? void 0 : { file, kind: "parse", message };
+}
 function collectFindings(results, scanner, ruleMap, errors) {
   const findings = [];
   for (const [index, raw] of results.entries()) {
@@ -48751,7 +48845,8 @@ function buildLocation(file, startLine, phys) {
   const endLine = phys.region?.endLine;
   const snippetText = phys.region?.snippet?.text;
   if (endLine !== void 0) loc.endLine = endLine;
-  if (snippetText !== void 0) loc.snippet = snippetText.slice(0, 500);
+  if (snippetText !== void 0) loc.snippet = snippetText;
+  if (phys.region?.snippet?.truncated === true) loc.snippetTruncated = true;
   return loc;
 }
 function extractLocation(result, ruleId, errors) {
@@ -48807,6 +48902,7 @@ function parseResult(result, scanner, ruleMap, errors) {
     cweIds: extractCweIds(rule),
     confidence: resolveConfidence(rule),
     snippet: loc.snippet,
+    snippetTruncated: loc.snippetTruncated,
     helpUrl: rule?.helpUri
   };
 }
@@ -48857,25 +48953,46 @@ function resolveConfidence(rule) {
 }
 
 // src/mcp/tools/security-scan.ts
+import { access, constants as constants2 } from "node:fs/promises";
+import { readFile as readFile5, realpath as realpath2, writeFile as writeFile2 } from "node:fs/promises";
+import { delimiter as delimiter2, isAbsolute as isAbsolute6, join as join14, parse as parse4, resolve as resolve8 } from "node:path";
 var logger47 = createLogger({ component: "security-scan" });
 var SCAN_TIMEOUT_MS = 3e5;
-async function isSemgrepAvailable(signal, env, wrapper) {
+async function isSemgrepAvailable(signal, env, wrapper, binary = "semgrep", cwd) {
   try {
-    await execFileTree("semgrep", ["--version"], { timeoutMs: 1e4, signal, env, wrapper });
-    return true;
+    const { stdout } = await execFileTree(binary, ["--version"], {
+      timeoutMs: 1e4,
+      signal,
+      env,
+      wrapper,
+      cwd
+    });
+    return stdout.trim() || void 0;
   } catch {
-    return false;
+    return void 0;
   }
 }
-async function runSemgrep(targetDir, rulesets, signal, env, wrapper) {
-  const args = ["--sarif", "--quiet", ...rulesets.flatMap((r) => ["--config", r]), targetDir];
-  const { stdout } = await execFileTree("semgrep", args, {
+async function runSemgrep(targetDir, rulesets, signal, env, options) {
+  const prepared = options.preparedScan;
+  const flags = prepared?.flags ?? (options.completeResults === true ? COMPLETE_SCAN_FLAGS : []);
+  const configs = prepared?.rulesets ?? rulesets.map(
+    (ruleset) => /^(?:[pr]\/|https?:\/\/|auto$)/.test(ruleset) ? ruleset : resolve8(ruleset)
+  );
+  const args = [
+    "--sarif",
+    "--quiet",
+    ...flags,
+    ...configs.flatMap((r) => ["--config", r]),
+    targetDir
+  ];
+  const { stdout } = await execFileTree(prepared?.binary ?? "semgrep", args, {
+    cwd: parse4(targetDir).root,
     timeoutMs: SCAN_TIMEOUT_MS,
     maxBuffer: 10 * 1024 * 1024,
     // 10MB for large SARIF output
     signal,
     env,
-    wrapper
+    wrapper: options.wrapper
   });
   return stdout;
 }
@@ -48886,6 +49003,105 @@ function validateTargetPath(target, root = process.cwd()) {
   }
   return resolved;
 }
+var COMPLETE_SCAN_FLAGS = [
+  "--no-git-ignore",
+  "--max-target-bytes=0",
+  "--metrics=off",
+  "--disable-nosem",
+  "--no-rewrite-rule-ids",
+  // Avoid mutable ignore files and hidden-ancestor skips in scratch worktrees.
+  // Unsupported scanner versions fail closed on this explicitly pinned flag.
+  "--x-ignore-semgrepignore-files",
+  "--exclude=node_modules",
+  "--exclude=.git"
+];
+async function resolveSemgrep(env) {
+  for (const directory of (env["PATH"] ?? "").split(delimiter2)) {
+    if (!isAbsolute6(directory)) continue;
+    const binary = join14(directory, process.platform === "win32" ? "semgrep.exe" : "semgrep");
+    try {
+      await access(binary, constants2.X_OK);
+      return await realpath2(binary);
+    } catch {
+    }
+  }
+  throw new Error("semgrep is not installed. Install with: pip install semgrep");
+}
+async function readRuleset(ruleset, signal) {
+  const url = /^[pr]\//.test(ruleset) ? `https://semgrep.dev/c/${ruleset}` : ruleset;
+  if (!/^https?:\/\//.test(url)) return await readFile5(resolve8(ruleset), "utf8");
+  const timeout = AbortSignal.timeout(3e4);
+  const response = await fetch(url, {
+    headers: { Accept: "application/json" },
+    signal: signal === void 0 ? timeout : AbortSignal.any([signal, timeout])
+  });
+  if (!response.ok) throw new Error(`Ruleset download failed: HTTP ${String(response.status)}`);
+  const text = await response.text();
+  if (text.length > 10 * 1024 * 1024) throw new Error("Ruleset download exceeds 10MB");
+  return unwrapRuleset(text);
+}
+function unwrapRuleset(text) {
+  let raw;
+  try {
+    raw = JSON.parse(text);
+  } catch {
+    return text;
+  }
+  if (typeof raw === "object" && raw !== null && "rule_config" in raw) {
+    const config = raw.rule_config;
+    return typeof config === "string" ? config : JSON.stringify(config);
+  }
+  return text;
+}
+async function measureScannerVersion(options, targetDir) {
+  const version = await isSemgrepAvailable(
+    options.signal,
+    options.env,
+    options.wrapper,
+    options.preparedScan?.binary,
+    parse4(targetDir).root
+  );
+  if (options.signal?.aborted === true) return { error: "Scan aborted before semgrep ran" };
+  if (version === void 0)
+    return { error: "semgrep is not installed. Install with: pip install semgrep" };
+  if (options.preparedScan !== void 0 && options.preparedScan.version !== version) {
+    return {
+      error: `Scanner version changed: expected ${options.preparedScan.version}, got ${version}`
+    };
+  }
+  return version;
+}
+async function prepareSecurityScan(rulesets, options) {
+  try {
+    if (rulesets.length === 0) throw new Error("No security rulesets configured");
+    const binary = await resolveSemgrep(options.env ?? process.env);
+    const version = await isSemgrepAvailable(
+      options.signal,
+      options.env,
+      options.wrapper,
+      binary,
+      parse4(resolve8(options.directory)).root
+    );
+    if (version === void 0) throw new Error("Cannot measure semgrep version");
+    const configs = [];
+    for (const [index, ruleset] of rulesets.entries()) {
+      const contents = await readRuleset(ruleset, options.signal);
+      const file = join14(options.directory, `security-rules-${String(index)}.yaml`);
+      await writeFile2(file, contents, { mode: 256, flag: "wx" });
+      configs.push(file);
+    }
+    return Object.freeze({
+      binary,
+      version,
+      rulesets: Object.freeze(configs),
+      flags: COMPLETE_SCAN_FLAGS
+    });
+  } catch (error) {
+    return {
+      error: `Security scan preparation failed: ${error instanceof Error ? error.message : String(error)}`
+    };
+  }
+}
 async function executeSecurityScan(input, options = {}) {
   const { signal, env } = options;
   let targetDir;
@@ -48899,42 +49115,104 @@ async function executeSecurityScan(input, options = {}) {
     scanner: input.scanner,
     rulesets: input.rulesets
   });
-  const available = await isSemgrepAvailable(signal, env, options.wrapper);
-  if (signal?.aborted === true) return { error: "Scan aborted before semgrep ran" };
-  if (!available) {
-    return {
-      error: "semgrep is not installed. Install with: pip install semgrep"
-    };
-  }
+  const version = await measureScannerVersion(options, targetDir);
+  if (typeof version !== "string") return version;
   try {
-    const sarifOutput = await runSemgrep(targetDir, input.rulesets, signal, env, options.wrapper);
-    const result = parseSarif(sarifOutput, input.maxFindings);
+    const sarifOutput = await runSemgrep(targetDir, input.rulesets, signal, env, options);
+    const result = parseSarif(
+      sarifOutput,
+      options.completeResults === true ? Infinity : input.maxFindings
+    );
     logger47.info("Security scan completed", {
       scanner: result.scanner,
       findings: result.totalFindings,
       errors: result.errors.length
     });
-    return result;
+    return { ...result, scannerVersion: version };
   } catch (error) {
-    const msg = error instanceof Error ? error.message : String(error);
-    logger47.warn("Security scan failed", { error: msg });
-    return { error: `Scan failed: ${msg.slice(0, 500)}` };
+    return handleScanFailure(
+      error,
+      version,
+      options.completeResults === true ? Infinity : input.maxFindings
+    );
   }
 }
+var InvocationSuccessSchema = z93.object({
+  runs: z93.array(
+    z93.object({
+      invocations: z93.array(z93.object({ executionSuccessful: z93.literal(true) })).min(1)
+    })
+  ).min(1)
+});
+function failureCode(error) {
+  return typeof error === "object" && error !== null && "code" in error ? error.code : "unknown";
+}
+function failureOutput(error) {
+  if (typeof error !== "object" || error === null || !("stdout" in error)) return void 0;
+  return typeof error.stdout === "string" && error.stdout.length > 0 ? error.stdout : void 0;
+}
+function scannerInvocationsSuccessful(output2) {
+  try {
+    return InvocationSuccessSchema.safeParse(JSON.parse(output2)).success;
+  } catch {
+    return false;
+  }
+}
+function handleScanFailure(error, version, maxFindings) {
+  const output2 = failureOutput(error);
+  const result = output2 === void 0 ? void 0 : parseSarif(output2, maxFindings);
+  if (result !== void 0 && output2 !== void 0 && failureCode(error) === 3) {
+    if (result.coverageComplete === true && (result.parseDiagnostics?.length ?? 0) > 0 && scannerInvocationsSuccessful(output2)) {
+      return { ...result, scannerVersion: version };
+    }
+  }
+  const message = `${summarizeScanFailure(error)}${failedOutputDetails(result)}`;
+  logger47.warn("Security scan failed", { error: message });
+  return { error: message };
+}
+function failedOutputDetails(result) {
+  if (result === void 0) return "";
+  const files = result.parseDiagnostics?.map((diagnostic) => diagnostic.file) ?? [];
+  const diagnostics = files.length > 0 ? `; affected files: ${[...new Set(files)].join(", ")}` : "";
+  const errors = result.errors.length > 0 ? `; ${result.errors.join("; ")}` : "";
+  return diagnostics + errors;
+}
+function summarizeScanFailure(error) {
+  const code = String(failureCode(error));
+  const message = error instanceof Error ? error.message : String(error);
+  const commandFailure = message.startsWith("Command failed:");
+  const newline = message.indexOf("\n");
+  const rawDiagnostic = commandFailure && newline >= 0 ? message.slice(newline + 1) : message;
+  const diagnostic = rawDiagnostic.split("\n").filter((line) => !isScannerNoise(line)).join("\n");
+  const detail = diagnostic.length > 500 ? `[diagnostic truncated] ${diagnostic.slice(-500)}` : diagnostic;
+  const files = [
+    ...new Set(
+      [...diagnostic.matchAll(/^(?:Syntax error|Other syntax error) at line (.+):\d+:/gm)].map(
+        (match) => match[1]
+      )
+    )
+  ];
+  const affected = files.length > 0 ? `; affected files: ${files.join(", ")}` : "";
+  const unavailable = commandFailure && failureOutput(error) === void 0 ? "; scanner stdout unavailable" : "";
+  return `Scan failed (exit ${code}${unavailable}${affected}): ${detail}`;
+}
+function isScannerNoise(line) {
+  return /opentelemetry\/instrumentation\/dependencies\.py.*UserWarning: pkg_resources/.test(line) || /^\s*from pkg_resources import \(/.test(line) || /^pyenv: (?:cannot rehash|warning:)/.test(line) || /^.*WARNING.*(?:experimental|--x-).*$/i.test(line) || /^.*These options are not part of the semgrep API.*$/.test(line);
+}
 
 // src/security/osv-lookup.ts
-import { z as z93 } from "zod";
+import { z as z94 } from "zod";
 var logger48 = createLogger({ component: "osv-lookup" });
 var OSV_API_URL = "https://api.osv.dev/v1/query";
 var DEFAULT_TIMEOUT_MS4 = NETWORK_FETCH_TIMEOUT_MS;
-var OsvVulnerabilitySchema = z93.object({
-  id: z93.string(),
-  summary: z93.string().optional(),
-  severity: z93.enum(["CRITICAL", "HIGH", "MODERATE", "LOW", "UNKNOWN"]).optional(),
-  aliases: z93.array(z93.string()).default([]),
-  affectedVersions: z93.string().optional(),
-  fixedVersion: z93.string().optional(),
-  url: z93.string().optional()
+var OsvVulnerabilitySchema = z94.object({
+  id: z94.string(),
+  summary: z94.string().optional(),
+  severity: z94.enum(["CRITICAL", "HIGH", "MODERATE", "LOW", "UNKNOWN"]).optional(),
+  aliases: z94.array(z94.string()).default([]),
+  affectedVersions: z94.string().optional(),
+  fixedVersion: z94.string().optional(),
+  url: z94.string().optional()
 });
 var DEFAULT_OSV_CONFIG = {
   timeoutMs: DEFAULT_TIMEOUT_MS4
@@ -49026,11 +49304,343 @@ async function queryOsvBatch(packages, config = DEFAULT_OSV_CONFIG, signal) {
   return results;
 }
 
+// src/pipeline/security-baseline.ts
+import { createHash as createHash4 } from "node:crypto";
+import { mkdtemp, rm, readFile as readFile7, readlink } from "node:fs/promises";
+import { tmpdir as tmpdir2 } from "node:os";
+import { isAbsolute as isAbsolute8, join as join16 } from "node:path";
+
+// src/pipeline/security-baseline-coverage.ts
+import { readFile as readFile6 } from "node:fs/promises";
+import { isAbsolute as isAbsolute7, join as join15, relative as relative6 } from "node:path";
+function scanErrors(scan, side) {
+  if ("error" in scan) return [`${side}: ${scan.error}`];
+  const errors = scan.errors.map((error) => `${side}: ${error}`);
+  if (scan.coverageComplete !== true || scan.totalFindings !== scan.findings.length)
+    errors.push(`${side}: scan coverage is incomplete`);
+  for (const finding of scan.findings) {
+    if (isAbsolute7(finding.file) || finding.file.split("/").includes("..") || /^[a-z]+:/i.test(finding.file))
+      errors.push(`${side}: finding path outside scanned tree: ${finding.file}`);
+    if (ambiguousSnippet(finding))
+      errors.push(
+        `${side}: missing or truncated snippet: ${finding.rule} ${finding.file}:${String(finding.startLine)}`
+      );
+  }
+  return errors;
+}
+function normalizedScan(scan, directory) {
+  if ("error" in scan) return scan;
+  return {
+    ...scan,
+    parseDiagnostics: (scan.parseDiagnostics ?? []).map((diagnostic) => ({
+      ...diagnostic,
+      file: isAbsolute7(diagnostic.file) ? relative6(directory, diagnostic.file) : diagnostic.file.replace(/^\.\//, ""),
+      message: diagnostic.message.split(join15(directory, "/")).join("")
+    })),
+    findings: scan.findings.map((finding) => ({
+      ...finding,
+      file: isAbsolute7(finding.file) ? relative6(directory, finding.file) : finding.file.replace(/^\.\//, "")
+    }))
+  };
+}
+function ambiguousSnippet(finding) {
+  return finding.snippet === void 0 || finding.snippet.trim() === "" || finding.snippetTruncated === true;
+}
+async function compareParseCoverage(input) {
+  const base = input.base.parseDiagnostics ?? [];
+  const worktree = input.worktree.parseDiagnostics ?? [];
+  const files = [...new Set([...base, ...worktree].map((diagnostic) => diagnostic.file))].sort();
+  const errors = [];
+  const unscannedCoverage = [];
+  for (const file of files) {
+    if (outsideTree(file)) {
+      errors.push(`Parse diagnostic path outside scanned tree: ${file}`);
+      continue;
+    }
+    const identities = (diagnostics) => JSON.stringify(
+      diagnostics.filter((d) => d.file === file).map(({ kind, message }) => JSON.stringify([kind, message])).sort()
+    );
+    if (identities(base) !== identities(worktree)) {
+      errors.push(`New or changed parse diagnostics: ${file}`);
+      continue;
+    }
+    try {
+      const [oldBytes, newBytes, diff] = await Promise.all([
+        readFile6(join15(input.baseDirectory, file)),
+        readFile6(join15(input.target, file)),
+        input.diff(file)
+      ]);
+      if (!oldBytes.equals(newBytes) || diff !== "") {
+        errors.push(`Change touches partially parsed file: ${file}`);
+      } else unscannedCoverage.push(file);
+    } catch (error) {
+      errors.push(
+        `Cannot verify partially parsed file ${file}: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
+  }
+  return { errors, unscannedCoverage };
+}
+function outsideTree(file) {
+  return isAbsolute7(file) || file.split("/").includes("..") || /^[a-z]+:/i.test(file);
+}
+
+// src/pipeline/security-baseline.ts
+var blocking = (finding) => finding.severity === "critical" || finding.severity === "high";
+function key(finding) {
+  return JSON.stringify([finding.rule, finding.file, finding.snippet?.replace(/\s+/g, " ").trim()]);
+}
+function preservedLine(finding, diff) {
+  let offset = 0;
+  for (const match of diff.matchAll(/^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@/gm)) {
+    const oldStart = Number(match[1]);
+    const oldCount = Number(match[2] ?? 1);
+    const newCount = Number(match[4] ?? 1);
+    const oldEnd = oldStart + oldCount - 1;
+    if (oldCount > 0 && finding.startLine <= oldEnd && (finding.endLine ?? finding.startLine) >= oldStart)
+      return void 0;
+    if ((oldCount === 0 ? oldStart : oldEnd) < finding.startLine) offset += newCount - oldCount;
+  }
+  return finding.startLine + offset;
+}
+async function introducedFindings(base, worktree, git2, target, sha) {
+  const diffs = /* @__PURE__ */ new Map();
+  for (const file of new Set(base.map((finding) => finding.file))) {
+    if (isAbsolute8(file) || file.split("/").includes(".."))
+      throw new Error("Finding path outside scanned tree");
+    diffs.set(
+      file,
+      await git2(target, [
+        "diff",
+        "--text",
+        "--no-color",
+        "--no-ext-diff",
+        "--no-textconv",
+        "--no-renames",
+        "--unified=0",
+        sha,
+        "--",
+        file
+      ])
+    );
+  }
+  const remaining = [...base];
+  const result = [];
+  for (const finding of worktree) {
+    const index = remaining.findIndex(
+      (old) => key(old) === key(finding) && preservedLine(old, diffs.get(old.file) ?? "") === finding.startLine && SEVERITY_ORDER[finding.severity] >= SEVERITY_ORDER[old.severity]
+    );
+    if (index >= 0) remaining.splice(index, 1);
+    else if (blocking(finding) || remaining.some(
+      (old) => key(old) === key(finding) && SEVERITY_ORDER[finding.severity] < SEVERITY_ORDER[old.severity]
+    ))
+      result.push(finding);
+  }
+  return result;
+}
+async function compareSecurityBaseline(target, rulesets, config, signal) {
+  const baseline = config.baseline;
+  if (baseline === void 0) throw new Error("Security baseline required");
+  let directory;
+  let base = { error: "base scan did not run" };
+  let worktree = { error: "worktree scan did not run" };
+  let sha = baseline.sha;
+  const execOptions = comparisonExecOptions(config, signal);
+  const git2 = comparisonGit(execOptions);
+  try {
+    sha = (await git2(baseline.directory, ["rev-parse", "--verify", `${baseline.sha}^{commit}`])).trim();
+    if (!/^[a-f0-9]{40,64}$/.test(sha)) throw new Error("Base did not resolve to a commit SHA");
+    directory = await allocateComparisonDirectory(config, execOptions);
+    const archive = await archiveBaseline({ target, directory, baseline, sha, git: git2, execOptions });
+    ({ base, worktree } = await scanTrees({
+      target,
+      rulesets,
+      config,
+      signal,
+      directory,
+      archive
+    }));
+    throwIfAborted(signal, "Security baseline scan aborted");
+    return await assessComparison({
+      sha,
+      base,
+      worktree,
+      git: git2,
+      target,
+      baseDirectory: archive.target
+    });
+  } catch (error) {
+    throwIfAborted(signal, "Security baseline scan aborted");
+    return incomplete(sha, base, worktree, [
+      error instanceof Error ? error.message : String(error)
+    ]);
+  } finally {
+    if (directory !== void 0) await rm(directory, { recursive: true, force: true });
+  }
+}
+function incomplete(sha, base, worktree, errors, unscannedCoverage = []) {
+  return {
+    baseSha: sha,
+    baseCount: "error" in base ? null : base.totalFindings,
+    worktreeCount: "error" in worktree ? null : worktree.totalFindings,
+    introducedBlockingCount: null,
+    blockingFindings: [],
+    unscannedCoverage,
+    ...scannerVersion(base, worktree),
+    complete: false,
+    errors
+  };
+}
+async function allocateComparisonDirectory(config, options) {
+  if (config.wrapper === void 0) return mkdtemp(join16(tmpdir2(), "security-baseline-"));
+  const path9 = (await execFileTree("mktemp", ["-d"], options)).stdout.trim();
+  if (!isAbsolute8(path9)) throw new Error("Sandbox did not allocate a comparison directory");
+  return path9;
+}
+async function assessComparison(input) {
+  const { sha, base, worktree, git: git2, target } = input;
+  const errors = [...scanErrors(base, "base"), ...scanErrors(worktree, "worktree")];
+  if ("error" in base || "error" in worktree) return incomplete(sha, base, worktree, errors);
+  const coverage = await compareParseCoverage({
+    base,
+    worktree,
+    baseDirectory: input.baseDirectory,
+    target,
+    diff: async (file) => git2(target, [
+      "diff",
+      "--text",
+      "--no-color",
+      "--no-ext-diff",
+      "--no-textconv",
+      "--no-renames",
+      "--unified=0",
+      sha,
+      "--",
+      file
+    ])
+  });
+  errors.push(...coverage.errors);
+  if (errors.length > 0) return incomplete(sha, base, worktree, errors, coverage.unscannedCoverage);
+  const findings = await introducedFindings(base.findings, worktree.findings, git2, target, sha);
+  return {
+    baseSha: sha,
+    baseCount: base.totalFindings,
+    worktreeCount: worktree.totalFindings,
+    introducedBlockingCount: findings.length,
+    blockingFindings: actionableFindings(findings),
+    complete: true,
+    errors: [],
+    unscannedCoverage: coverage.unscannedCoverage,
+    ...scannerVersion(base, worktree)
+  };
+}
+async function verifyArchive(directory, tree) {
+  if (tree === "") return;
+  for (const entry of tree.split("\0").filter((record) => record !== "")) {
+    const { mode, hash, file } = parseTreeEntry(entry);
+    const contents = mode === "120000" ? Buffer.from(await readlink(join16(directory, file))) : await readFile7(join16(directory, file));
+    const digest = createHash4(hash.length === 64 ? "sha256" : "sha1").update(`blob ${String(contents.length)}\0`).update(contents).digest("hex");
+    if (digest !== hash) throw new Error(`Pinned archive content differs: ${file}`);
+  }
+}
+function parseTreeEntry(entry) {
+  const match = /^(\d+) (\w+) ([a-f0-9]+)\t([\s\S]+)$/.exec(entry);
+  if (match === null) throw new Error("Unreadable pinned Git tree");
+  const [, mode, type, hash, file] = match;
+  if (mode === void 0 || type !== "blob" || hash === void 0 || file === void 0 || isAbsolute8(file) || file.split("/").includes(".."))
+    throw new Error("Pinned tree coverage incomplete: unsupported tree entry");
+  return { mode, hash, file };
+}
+function comparisonExecOptions(config, signal) {
+  return {
+    signal,
+    env: hermeticGitEnv(config.env),
+    wrapper: config.wrapper,
+    timeoutMs: 3e4,
+    maxBuffer: 16 * 1024 * 1024
+  };
+}
+function comparisonGit(options) {
+  return async (cwd, args) => (await execFileTree(
+    "git",
+    [
+      "--literal-pathspecs",
+      "-c",
+      "core.hooksPath=/dev/null",
+      "-c",
+      "core.fsmonitor=false",
+      ...args
+    ],
+    { ...options, cwd }
+  )).stdout;
+}
+async function archiveBaseline(input) {
+  const { target, directory, baseline, sha, git: git2, execOptions } = input;
+  const baseDir = join16(directory, "base");
+  const prefix = (await git2(target, ["rev-parse", "--show-prefix"])).trim();
+  if (isAbsolute8(prefix) || prefix.split("/").includes(".."))
+    throw new Error("Invalid scan subtree");
+  const { mkdir: mkdir2 } = await import("node:fs/promises");
+  await mkdir2(baseDir);
+  const archive = join16(directory, "base.tar");
+  await git2(baseline.directory, ["archive", "--format=tar", `--output=${archive}`, sha]);
+  await execFileTree("tar", ["-xf", archive, "-C", baseDir], execOptions);
+  await verifyArchive(baseDir, await git2(baseline.directory, ["ls-tree", "-r", "-z", sha]));
+  return { root: baseDir, target: join16(baseDir, prefix) };
+}
+async function scanTrees(input) {
+  const { target, rulesets, config, signal, directory, archive } = input;
+  const prepared = await prepareSecurityScan(rulesets, {
+    ...comparisonExecOptions(config, signal),
+    directory
+  });
+  if ("error" in prepared) throw new Error(prepared.error);
+  const scanInput = {
+    scanner: "semgrep",
+    rulesets: [...rulesets],
+    maxFindings: Number.MAX_SAFE_INTEGER
+  };
+  const options = {
+    signal,
+    env: config.env,
+    wrapper: config.wrapper,
+    completeResults: true,
+    preparedScan: prepared
+  };
+  const base = normalizedScan(
+    await executeSecurityScan(
+      { ...scanInput, target: archive.target },
+      { ...options, root: archive.root }
+    ),
+    archive.target
+  );
+  const worktree = normalizedScan(
+    await executeSecurityScan({ ...scanInput, target }, { ...options, root: config.root }),
+    target
+  );
+  return { base, worktree };
+}
+function actionableFindings(findings) {
+  return findings.map(({ rule, file, startLine, severity }) => ({
+    rule,
+    file,
+    startLine,
+    severity
+  }));
+}
+function scannerVersion(base, worktree) {
+  const version = "error" in base ? void 0 : base.scannerVersion;
+  const other = "error" in worktree ? void 0 : worktree.scannerVersion;
+  const measured = version ?? other;
+  return measured === void 0 ? {} : { scannerVersion: measured };
+}
+
 // src/pipeline/security-gate.ts
 var logger49 = createLogger({ component: "security-gate" });
 var BLOCKING_SEVERITIES = /* @__PURE__ */ new Set(["critical", "high"]);
 function checkSecurityScan(targetDir, rulesets = ["p/default"], config = {}) {
   return async (signal) => {
+    if (config.baseline !== void 0) return runBaselineGate(targetDir, rulesets, config, signal);
     const start = Date.now();
     const result = await executeSecurityScan(
       {
@@ -49051,33 +49661,59 @@ function checkSecurityScan(targetDir, rulesets = ["p/default"], config = {}) {
         durationMs: Date.now() - start
       };
     }
-    return runSecurityPipeline(result, targetDir, config, start, signal);
+    const gateResult = await runSecurityPipeline(result, targetDir, config, start, signal);
+    if (gateResult.verdict === "fail") return gateResult;
+    if (result.parseDiagnostics !== void 0 && result.parseDiagnostics.length > 0) {
+      return {
+        ...gateResult,
+        verdict: "skip",
+        details: `Security scan incomplete: unparsed files ${result.parseDiagnostics.map((d) => d.file).join(", ")}`,
+        durationMs: Date.now() - start
+      };
+    }
+    return gateResult;
+  };
+}
+async function runBaselineGate(target, rulesets, config, signal) {
+  const start = Date.now();
+  const comparison = await compareSecurityBaseline(target, rulesets, config, signal);
+  const osv = comparison.complete ? await runOsvCheck(target, config.enableOsv ?? true, signal) : OSV_EMPTY;
+  throwIfAborted(signal, "Security baseline scan aborted");
+  const osvFailed = osv.vulnerabilities.some((v) => v.severity === "CRITICAL");
+  const details = comparison.complete ? `Base ${String(comparison.baseCount)}, worktree ${String(comparison.worktreeCount)} findings; ${String(comparison.introducedBlockingCount)} introduced blocking; ${buildScanSummary(comparison.worktreeCount ?? 0, comparison.introducedBlockingCount ?? 0, osv.vulnerabilities.length, osv)}` : `Security comparison incomplete: ${comparison.errors.join("; ")}`;
+  return {
+    name: "security_scan",
+    verdict: !comparison.complete ? "skip" : comparison.introducedBlockingCount === 0 && !osvFailed ? "pass" : "fail",
+    details: details.slice(0, 500),
+    comparison,
+    durationMs: Date.now() - start
   };
 }
 async function runSecurityPipeline(sarifResult, targetDir, config, start, signal) {
   const osv = await runOsvCheck(targetDir, config.enableOsv ?? true, signal);
   throwIfAborted(signal, "Security scan aborted");
   const osvVulns = osv.vulnerabilities;
-  const blocking = getBlockingFindings(sarifResult.findings);
+  const blocking2 = getBlockingFindings(sarifResult.findings);
   const details = buildScanSummary(
     sarifResult.totalFindings,
-    blocking.length,
+    blocking2.length,
     osvVulns.length,
     osv,
     sarifResult.errors.length
   );
   logger49.info("Security gate complete", {
     total: sarifResult.totalFindings,
-    blocking: blocking.length,
+    blocking: blocking2.length,
     osvVulns: osvVulns.length,
     osvFailedLookups: osv.failedLookups,
     sarifParseErrors: sarifResult.errors.length
   });
-  const failed = blocking.length > 0 || osvVulns.some((v) => v.severity === "CRITICAL");
+  const failed = blocking2.length > 0 || osvVulns.some((v) => v.severity === "CRITICAL");
   return {
     name: "security_scan",
     verdict: failed ? "fail" : "pass",
     details,
+    blockingFindings: blocking2,
     durationMs: Date.now() - start
   };
 }
@@ -49124,26 +49760,26 @@ async function runOsvCheck(targetDir, enabled, signal) {
 function getBlockingFindings(findings) {
   return findings.filter((f) => BLOCKING_SEVERITIES.has(f.severity));
 }
-function osvCoverageNote(blocking, osvCount, osv) {
+function osvCoverageNote(blocking2, osvCount, osv) {
   if (osv?.checkFailed === true) {
     return "OSV check did not run (error) \u2014 dependency vulnerabilities unknown";
   }
   if (osv !== void 0 && osv.failedLookups > 0) {
     return `OSV not checked for ${String(osv.failedLookups)} of ${String(osv.queried)} dependencies (lookup failed)`;
   }
-  if (blocking === 0 && osvCount === 0) return "none blocking";
+  if (blocking2 === 0 && osvCount === 0) return "none blocking";
   return "";
 }
-function buildScanSummary(total, blocking, osvCount, osv, sarifParseErrors = 0) {
+function buildScanSummary(total, blocking2, osvCount, osv, sarifParseErrors = 0) {
   const parts = [`${String(total)} SAST findings`];
   if (sarifParseErrors > 0) {
     parts.push(
       `${String(sarifParseErrors)} scanner output line(s) unreadable \u2014 SAST coverage is partial`
     );
   }
-  if (blocking > 0) parts.push(`${String(blocking)} blocking`);
+  if (blocking2 > 0) parts.push(`${String(blocking2)} blocking`);
   if (osvCount > 0) parts.push(`${String(osvCount)} OSV dependency vulnerabilities`);
-  parts.push(osvCoverageNote(blocking, osvCount, osv));
+  parts.push(osvCoverageNote(blocking2, osvCount, osv));
   if (osv !== void 0 && osv.declared > osv.queried) {
     parts.push(
       `OSV covered ${String(osv.queried)} of ${String(osv.declared)} declared dependencies`
@@ -49154,7 +49790,7 @@ function buildScanSummary(total, blocking, osvCount, osv, sarifParseErrors = 0)
 
 // src/security/quality-gate-commands.ts
 import { existsSync as existsSync11, readFileSync as readFileSync9 } from "node:fs";
-import { join as join14 } from "node:path";
+import { join as join17 } from "node:path";
 var LOCKFILES = [
   { file: "pnpm-lock.yaml", manager: "pnpm" },
   { file: "yarn.lock", manager: "yarn" },
@@ -49169,12 +49805,12 @@ var SCRIPT_CANDIDATES = {
 };
 function detectPackageManager(projectDir) {
   for (const { file, manager } of LOCKFILES) {
-    if (existsSync11(join14(projectDir, file))) return manager;
+    if (existsSync11(join17(projectDir, file))) return manager;
   }
   return "npm";
 }
 function readScripts(projectDir) {
-  const manifest = join14(projectDir, "package.json");
+  const manifest = join17(projectDir, "package.json");
   if (!existsSync11(manifest)) return void 0;
   try {
     const parsed = JSON.parse(readFileSync9(manifest, "utf-8"));
@@ -49376,8 +50012,8 @@ function getTrendContext() {
 
 // src/pipeline/agent-executor-parsers.ts
 var logger50 = createLogger({ component: "agent-executor" });
-function stringField(record, key, fallback) {
-  const value = record[key];
+function stringField(record, key2, fallback) {
+  const value = record[key2];
   if (typeof value === "string") return value;
   if (typeof value === "number") return String(value);
   return fallback;
@@ -49765,12 +50401,8 @@ function createQualityGateStage({
     return { passed, verdict: result.verdict, feedback };
   };
 }
-function createSecurityScanStage({
-  config,
-  startStage,
-  workspaceDependencies,
-  wrapper
-}) {
+function createSecurityScanStage(deps) {
+  const { config, startStage, workspaceDependencies, wrapper } = deps;
   return async (signal) => {
     startStage("security");
     const start = getTimeProvider().now();
@@ -49778,6 +50410,7 @@ function createSecurityScanStage({
     await postProgress(config, "Security", `Scanning ${target}...`);
     const scratchBound = workspaceDependencies !== void 0;
     const check = checkSecurityScan(target, void 0, {
+      baseline: config.securityBaseline,
       env: scratchBound ? hermeticGitEnv() : void 0,
       root: scratchBound ? target : void 0,
       wrapper
@@ -49801,7 +50434,7 @@ function createSecurityScanStage({
     const securityNote = result.verdict === "skip" ? `Security scan did not run: ${result.details}. Install the scanner, or use qualityGate 'advisory' to proceed without security evidence.` : `BLOCKED: ${result.details}`;
     await postProgress(config, "Security", passed ? "Passed" : securityNote);
     flushPipelineMemory();
-    return { passed, verdict: result.verdict, feedback: result.details };
+    return securityStageResult(result, passed);
   };
 }
 
@@ -49826,12 +50459,12 @@ function createAgentStages(config = {}) {
     decompose: createDecomposeStage(deps),
     ...createExecutionStages(deps),
     // #6794: execution closures share the same guard and scratch directory.
-    withWorkspace: ({ directory, dependencies: workspaceDependencies, wrapper }) => {
+    withWorkspace: ({ directory, dependencies: workspaceDependencies, wrapper, baseline }) => {
       const bound = {
         ...deps,
         workspaceDependencies,
         wrapper,
-        config: { ...config, scanTarget: directory }
+        config: { ...config, scanTarget: directory, securityBaseline: baseline }
       };
       return {
         ...createExecutionStages(bound),
@@ -49857,11 +50490,11 @@ function createExecutionStages(deps) {
 }
 
 // src/pipeline/stage-wrappers.ts
-function output(key, value, durationMs, success) {
-  return { stateKey: key, value, durationMs, success };
+function output(key2, value, durationMs, success) {
+  return { stateKey: key2, value, durationMs, success };
 }
-function failOutput(key, error, durationMs) {
-  return { stateKey: key, value: null, durationMs, success: false, error };
+function failOutput(key2, error, durationMs) {
+  return { stateKey: key2, value: null, durationMs, success: false, error };
 }
 function createParseSpecStageWrapper() {
   return {
@@ -50401,7 +51034,7 @@ ${FINDINGS_FORMAT_INSTRUCTIONS}
 }
 
 // src/mcp/tools/pr-review-tool.ts
-import { z as z94 } from "zod";
+import { z as z95 } from "zod";
 import { randomUUID as randomUUID14 } from "node:crypto";
 
 // src/audit/reviewed-diff-hash.ts
@@ -50952,19 +51585,19 @@ var MAX_REPO_CONTEXT_LENGTH = 2e3;
 var MAX_TITLE_LENGTH = 500;
 var MAX_DESCRIPTION_LENGTH = 1e4;
 var PR_REVIEW_ASYNC_HINT = "A pr_review run fans out to 5 live LLM voters and can exceed the synchronous MCP request timeout. Retry with `dispatch: 'async'` to get a jobId immediately, then poll get_job_result({ jobId }) for the result.";
-var PrReviewInputSchema = z94.object({
-  prTitle: z94.string().min(1).max(MAX_TITLE_LENGTH).describe("PR title"),
-  prDescription: z94.string().max(MAX_DESCRIPTION_LENGTH).optional().describe("PR body / description"),
-  prDiff: z94.string().min(1).max(MAX_DIFF_INPUT_LENGTH).refine(looksLikeUnifiedDiff, {
+var PrReviewInputSchema = z95.object({
+  prTitle: z95.string().min(1).max(MAX_TITLE_LENGTH).describe("PR title"),
+  prDescription: z95.string().max(MAX_DESCRIPTION_LENGTH).optional().describe("PR body / description"),
+  prDiff: z95.string().min(1).max(MAX_DIFF_INPUT_LENGTH).refine(looksLikeUnifiedDiff, {
     message: "prDiff must be a unified diff (expected a `diff --git`, `---`/`+++`, or `@@ \u2026 @@` line). Prose descriptions of a change are rejected: a review of a summary is not a review of the code, and would be recorded as though it were (#4451)."
   }).describe(
     `Unified diff text (max ${String(MAX_DIFF_INPUT_LENGTH)} chars). REQUIRED SHAPE (#4451): must contain a \`diff --git\` header, an \`@@ \u2026 @@\` hunk header backed by +/- lines, or a \`---\`/\`+++\` header pair \u2014 a prose summary of the change is REJECTED, because reviewing a summary is not reviewing the code and would be recorded as though it were. (Stated here because Zod refinements do not survive JSON-schema generation, so this constraint is otherwise invisible to clients.) No need to truncate before calling: the panel reads the whole diff whenever it fits the voters' context windows (#6003); a diff larger than that is security-prioritized and PARTIALLY reviewed (lowest-priority whole files dropped; a partial panel read can block but never verified-approve). Separately, the audit record's hash binds only the first ${String(MAX_DIFF_LENGTH)} UTF-8 bytes; the response \`coverage\` and the record summary state both what the panel read and what the hash binds.`
   ),
-  repoContext: z94.string().max(MAX_REPO_CONTEXT_LENGTH).optional().describe(
+  repoContext: z95.string().max(MAX_REPO_CONTEXT_LENGTH).optional().describe(
     `Optional one-paragraph repo context (architecture, conventions; max ${String(MAX_REPO_CONTEXT_LENGTH)} chars; trim before calling)`
   ),
-  baseRef: z94.string().max(200).optional().describe("Base branch ref (e.g. main)"),
-  headRef: z94.string().max(200).optional().describe("Head branch ref"),
+  baseRef: z95.string().max(200).optional().describe("Base branch ref (e.g. main)"),
+  headRef: z95.string().max(200).optional().describe("Head branch ref"),
   /**
    * Option-C audit binding (#4031). When BOTH `prNumber` and `baseSha` are
    * supplied AND the review is live (not simulated), pr_review persists an
@@ -50980,14 +51613,14 @@ var PrReviewInputSchema = z94.object({
    * the PR opened and drifts as main advances), so pass the merge-base as
    * `baseSha` or the record will not match on an aged branch (#5692).
    */
-  prNumber: z94.number().int().positive().optional().describe("PR number \u2014 with baseSha, enables Option-C audit-record persistence (#4031)"),
-  baseSha: z94.string().regex(/^[0-9a-f]{40}$/, "baseSha must be a 40-char lowercase hex commit sha").optional().describe(
+  prNumber: z95.number().int().positive().optional().describe("PR number \u2014 with baseSha, enables Option-C audit-record persistence (#4031)"),
+  baseSha: z95.string().regex(/^[0-9a-f]{40}$/, "baseSha must be a 40-char lowercase hex commit sha").optional().describe(
     "40-hex base commit sha the reviewed diff was computed from \u2014 pass `git merge-base origin/<base> <head>`, the base the gate recomputes (Option-C binding, #4031, #5692)"
   ),
-  repoPath: z94.string().max(1024).optional().describe(
+  repoPath: z95.string().max(1024).optional().describe(
     "Repo root path for persisting the governance pr-review record (overrides cwd auto-detection). Must contain a .git ancestor \u2014 relative paths are resolved against cwd; ignored (falls back to cwd auto-detection) if it is not a real repo root. Env NEXUS_PR_REVIEW_RECORDS_PATH still takes precedence and is unrestricted."
   ),
-  simulate: z94.boolean().default(false).describe("Use simulated voters (testing only; never ship live with this true)"),
+  simulate: z95.boolean().default(false).describe("Use simulated voters (testing only; never ship live with this true)"),
   /**
    * Error policy (#4132). `standard` (default) excludes absent voters but
    * requires a majority of the requested panel to approve. `absolute_quorum` gates
@@ -50999,7 +51632,7 @@ var PrReviewInputSchema = z94.object({
    * verified approve. A genuine `request_changes` blocker still wins (Tiers 1-2
    * run first).
    */
-  errorPolicy: z94.enum(["standard", "absolute_quorum"]).default("standard").describe(
+  errorPolicy: z95.enum(["standard", "absolute_quorum"]).default("standard").describe(
     "Error policy (#4132). 'standard' (default): absent voters excluded; approval requires a majority of the requested panel. 'absolute_quorum': any errored voter \u2014 esp. the contrarian \u2014 degrades a would-be approve to a recoverable abstain (verified:false); never manufactures a verified approve from an induced error."
   ),
   // #6123: same field as consensus_vote — the panel judges the caller's project.
@@ -51355,27 +51988,27 @@ function absoluteQuorumApprove(reviews, valid) {
 }
 
 // src/mcp/tools/survey-oss-landscape.ts
-import { z as z95 } from "zod";
-var SurveyOssLandscapeInputSchema = z95.object({
-  query: z95.string().min(1).max(200).describe('Free-text search query, e.g. "cargo nextest replacement" or "OSS SBOM tools"'),
-  maxResults: z95.number().int().min(1).max(50).optional().default(10).describe("Maximum candidates to return (1-50; default 10)"),
-  minStars: z95.number().int().min(0).optional().default(0).describe("Minimum star count to include (default 0; useful for filtering noise)"),
-  language: z95.string().max(50).optional().describe('GitHub language filter, e.g. "rust" or "typescript"')
+import { z as z96 } from "zod";
+var SurveyOssLandscapeInputSchema = z96.object({
+  query: z96.string().min(1).max(200).describe('Free-text search query, e.g. "cargo nextest replacement" or "OSS SBOM tools"'),
+  maxResults: z96.number().int().min(1).max(50).optional().default(10).describe("Maximum candidates to return (1-50; default 10)"),
+  minStars: z96.number().int().min(0).optional().default(0).describe("Minimum star count to include (default 0; useful for filtering noise)"),
+  language: z96.string().max(50).optional().describe('GitHub language filter, e.g. "rust" or "typescript"')
 });
-var GitHubRepoSchema = z95.object({
-  full_name: z95.string().optional(),
-  html_url: z95.string().optional(),
-  description: z95.string().nullable().optional(),
-  stargazers_count: z95.number().optional(),
-  pushed_at: z95.string().nullable().optional(),
-  language: z95.string().nullable().optional(),
-  license: z95.object({
-    spdx_id: z95.string().nullable().optional()
+var GitHubRepoSchema = z96.object({
+  full_name: z96.string().optional(),
+  html_url: z96.string().optional(),
+  description: z96.string().nullable().optional(),
+  stargazers_count: z96.number().optional(),
+  pushed_at: z96.string().nullable().optional(),
+  language: z96.string().nullable().optional(),
+  license: z96.object({
+    spdx_id: z96.string().nullable().optional()
   }).nullable().optional()
 });
-var GitHubSearchResponseSchema = z95.object({
-  total_count: z95.number().optional(),
-  items: z95.array(GitHubRepoSchema).optional()
+var GitHubSearchResponseSchema = z96.object({
+  total_count: z96.number().optional(),
+  items: z96.array(GitHubRepoSchema).optional()
 });
 var GITHUB_SEARCH_BASE = "https://api.github.com/search/repositories";
 function buildGithubQuery(input) {
@@ -51497,16 +52130,16 @@ function createSurveyHandler(deps) {
     });
     return withToolError("Survey failed", logger58, async () => {
       const result = await executeSurvey(validation.data, logger58);
-      return structuredToolSuccess(z95.object(SURVEY_OUTPUT_SCHEMA), result);
+      return structuredToolSuccess(z96.object(SURVEY_OUTPUT_SCHEMA), result);
     });
   };
 }
 var SURVEY_OUTPUT_SCHEMA = {
-  query: z95.string(),
-  totalFound: z95.number(),
-  candidates: z95.array(z95.unknown()),
-  sourcesQueried: z95.array(z95.string()),
-  sourcesFailed: z95.array(z95.string())
+  query: z96.string(),
+  totalFound: z96.number(),
+  candidates: z96.array(z96.unknown()),
+  sourcesQueried: z96.array(z96.string()),
+  sourcesFailed: z96.array(z96.string())
 };
 var SURVEY_DESCRIPTION = 'Transient OSS project search. Returns a ranked list of GitHub repositories with license, last-commit, star-count, and one-line description. Does NOT persist to the research registry \u2014 use `research_add_source` for that. Best for one-off engineering decisions like "what tools exist in this space?".';
 function registerSurveyOssLandscapeTool(server, deps) {
@@ -51536,7 +52169,7 @@ function registerSurveyOssLandscapeTool(server, deps) {
 }
 
 // src/mcp/tools/vendor-publishing-audit.ts
-import { z as z96 } from "zod";
+import { z as z97 } from "zod";
 
 // src/mcp/tools/vendor-publishing-seed.ts
 var VENDOR_PUBLISHING_SEED = {
@@ -51609,8 +52242,8 @@ function listKnownVendors() {
 }
 
 // src/mcp/tools/vendor-publishing-audit.ts
-var VendorPublishingAuditInputSchema = z96.object({
-  vendor: z96.string().min(1).max(50).toLowerCase().describe('Vendor identifier, lowercase. e.g. "ubuntu", "debian", "fedora"')
+var VendorPublishingAuditInputSchema = z97.object({
+  vendor: z97.string().min(1).max(50).toLowerCase().describe('Vendor identifier, lowercase. e.g. "ubuntu", "debian", "fedora"')
 });
 function lookupVendor(vendor) {
   if (isKnownVendor(vendor)) {
@@ -51638,26 +52271,26 @@ function createVendorPublishingAuditHandler(deps) {
     return withToolError("Vendor publishing audit failed", logger58, () => {
       const result = lookupVendor(validation.data.vendor);
       return Promise.resolve(
-        structuredToolSuccess(z96.object(VENDOR_PUBLISHING_OUTPUT_SCHEMA), result)
+        structuredToolSuccess(z97.object(VENDOR_PUBLISHING_OUTPUT_SCHEMA), result)
       );
     });
   };
 }
 var VENDOR_PUBLISHING_OUTPUT_SCHEMA = {
-  vendor: z96.string(),
-  known: z96.boolean(),
+  vendor: z97.string(),
+  known: z97.boolean(),
   // Fields below populate when known=true; permissive optional for known=false.
-  sha256SumsUrlPattern: z96.string().optional(),
-  sha256SumsSignatureUrlPattern: z96.string().optional(),
-  signaturePattern: z96.string().optional(),
-  gpgKeys: z96.array(z96.unknown()).optional(),
-  releaseCadence: z96.string().optional(),
-  keyRotationNotes: z96.string().optional(),
-  vendorDocUrl: z96.string().optional(),
-  citedAt: z96.string().optional(),
+  sha256SumsUrlPattern: z97.string().optional(),
+  sha256SumsSignatureUrlPattern: z97.string().optional(),
+  signaturePattern: z97.string().optional(),
+  gpgKeys: z97.array(z97.unknown()).optional(),
+  releaseCadence: z97.string().optional(),
+  keyRotationNotes: z97.string().optional(),
+  vendorDocUrl: z97.string().optional(),
+  citedAt: z97.string().optional(),
   // Fields below populate when known=false.
-  message: z96.string().optional(),
-  knownVendors: z96.array(z96.string()).optional()
+  message: z97.string().optional(),
+  knownVendors: z97.array(z97.string()).optional()
 };
 var VENDOR_PUBLISHING_DESCRIPTION = "Look up a vendor's published-artifact signing infrastructure: GPG key fingerprints, SHA256SUMS URL pattern, signature shape (clearsigned / detached / detached-on-iso), release cadence, key rotation notes, and the vendor doc citation. Static lookup against a curated seed dataset; the vendor doc URL is the authoritative source. Returns `{known: false, knownVendors: [...]}` for vendors without a seed entry. v1 covers ubuntu, debian, fedora.";
 function registerVendorPublishingAuditTool(server, deps) {
@@ -51687,17 +52320,17 @@ function registerVendorPublishingAuditTool(server, deps) {
 }
 
 // src/mcp/tools/compare-data-feeds.ts
-import { z as z97 } from "zod";
+import { z as z98 } from "zod";
 import * as path6 from "node:path";
 import * as fs7 from "node:fs";
 import * as yaml3 from "yaml";
-var CompareDataFeedsInputSchema = z97.object({
-  feedAPath: z97.string().min(1).max(1e3).describe("Filesystem path to feed A (YAML or JSON, auto-detected by extension)"),
-  feedBPath: z97.string().min(1).max(1e3).describe("Filesystem path to feed B"),
-  keyPath: z97.string().min(1).max(200).describe(
+var CompareDataFeedsInputSchema = z98.object({
+  feedAPath: z98.string().min(1).max(1e3).describe("Filesystem path to feed A (YAML or JSON, auto-detected by extension)"),
+  feedBPath: z98.string().min(1).max(1e3).describe("Filesystem path to feed B"),
+  keyPath: z98.string().min(1).max(200).describe(
     'Dotted path to the entry key, e.g. "id" or "name". Each entry must have this field.'
   ),
-  compareFields: z97.array(z97.string().min(1).max(200)).max(20).optional().describe(
+  compareFields: z98.array(z98.string().min(1).max(200)).max(20).optional().describe(
     'Optional dotted field paths to compare across matched entries (e.g. ["license", "sha256"])'
   )
 });
@@ -51737,16 +52370,16 @@ function indexByKey(entries, keyPath) {
   const missingKeyAt = [];
   for (let i = 0; i < entries.length; i++) {
     const entry = entries[i];
-    const key = readDottedPath(entry, keyPath);
-    if (key === void 0 || key === null) {
+    const key2 = readDottedPath(entry, keyPath);
+    if (key2 === void 0 || key2 === null) {
       missingKeyAt.push(i);
       continue;
     }
-    if (typeof key === "object") {
+    if (typeof key2 === "object") {
       missingKeyAt.push(i);
       continue;
     }
-    const keyStr = typeof key === "string" ? key : typeof key === "number" ? String(key) : typeof key === "bigint" ? key.toString() : typeof key === "boolean" ? String(key) : "";
+    const keyStr = typeof key2 === "string" ? key2 : typeof key2 === "number" ? String(key2) : typeof key2 === "bigint" ? key2.toString() : typeof key2 === "boolean" ? String(key2) : "";
     if (keyStr === "") {
       missingKeyAt.push(i);
       continue;
@@ -51759,12 +52392,12 @@ function membershipDiff(indexA, indexB) {
   const onlyInA = [];
   const onlyInB = [];
   const inBoth = [];
-  for (const key of indexA.keys()) {
-    if (indexB.has(key)) inBoth.push(key);
-    else onlyInA.push(key);
+  for (const key2 of indexA.keys()) {
+    if (indexB.has(key2)) inBoth.push(key2);
+    else onlyInA.push(key2);
   }
-  for (const key of indexB.keys()) {
-    if (!indexA.has(key)) onlyInB.push(key);
+  for (const key2 of indexB.keys()) {
+    if (!indexA.has(key2)) onlyInB.push(key2);
   }
   onlyInA.sort();
   onlyInB.sort();
@@ -51773,14 +52406,14 @@ function membershipDiff(indexA, indexB) {
 }
 function compareFields(inBothKeys, indexA, indexB, fields) {
   const out = [];
-  for (const key of inBothKeys) {
-    const a = indexA.get(key);
-    const b = indexB.get(key);
+  for (const key2 of inBothKeys) {
+    const a = indexA.get(key2);
+    const b = indexB.get(key2);
     for (const field of fields) {
       const valueA = readDottedPath(a, field);
       const valueB = readDottedPath(b, field);
       if (!deepEqual(valueA, valueB)) {
-        out.push({ key, field, valueA, valueB });
+        out.push({ key: key2, field, valueA, valueB });
       }
     }
   }
@@ -51875,29 +52508,29 @@ function createCompareDataFeedsHandler(deps) {
     });
     return withToolError("Compare data feeds failed", logger58, () => {
       const result = executeCompare(validation.data);
-      return Promise.resolve(structuredToolSuccess(z97.object(COMPARE_OUTPUT_SCHEMA), result));
+      return Promise.resolve(structuredToolSuccess(z98.object(COMPARE_OUTPUT_SCHEMA), result));
     });
   };
 }
 var COMPARE_OUTPUT_SCHEMA = {
-  feedAPath: z97.string(),
-  feedBPath: z97.string(),
-  keyPath: z97.string(),
-  counts: z97.object({
-    entriesInA: z97.number(),
-    entriesInB: z97.number(),
-    onlyInA: z97.number(),
-    onlyInB: z97.number(),
-    inBoth: z97.number(),
-    fieldDifferences: z97.number()
+  feedAPath: z98.string(),
+  feedBPath: z98.string(),
+  keyPath: z98.string(),
+  counts: z98.object({
+    entriesInA: z98.number(),
+    entriesInB: z98.number(),
+    onlyInA: z98.number(),
+    onlyInB: z98.number(),
+    inBoth: z98.number(),
+    fieldDifferences: z98.number()
   }),
-  coverage: z97.object({
-    onlyInA: z97.array(z97.string()),
-    onlyInB: z97.array(z97.string()),
-    inBoth: z97.array(z97.string())
+  coverage: z98.object({
+    onlyInA: z98.array(z98.string()),
+    onlyInB: z98.array(z98.string()),
+    inBoth: z98.array(z98.string())
   }),
-  fieldDifferences: z97.array(z97.unknown()),
-  summary: z97.string()
+  fieldDifferences: z98.array(z98.unknown()),
+  summary: z98.string()
 };
 var COMPARE_DESCRIPTION = "Diff two upstream data feeds (YAML or JSON files) along coverage and per-field axes. Returns which entries exist in A, B, both, plus optional field-level diffs across matched entries. v1 takes file paths only (no URL fetch \u2014 that needs an SSRF design pass). Both feeds must be a top-level array OR a top-level object with exactly one array field.";
 function registerCompareDataFeedsTool(server, deps) {
@@ -51927,9 +52560,9 @@ function registerCompareDataFeedsTool(server, deps) {
 }
 
 // src/mcp/tools/query-task-state-tool.ts
-import { z as z98 } from "zod";
-var QueryTaskStateInputSchema = z98.object({
-  taskId: z98.string().min(1).max(128).describe("Task ID whose structured state log should be read")
+import { z as z99 } from "zod";
+var QueryTaskStateInputSchema = z99.object({
+  taskId: z99.string().min(1).max(128).describe("Task ID whose structured state log should be read")
 });
 function queryTaskStateHandler(args, ctx) {
   const parsed = QueryTaskStateInputSchema.safeParse(args);
@@ -51964,7 +52597,7 @@ function queryTaskStateHandler(args, ctx) {
 function registerQueryTaskStateTool(server, deps) {
   const logger58 = deps.logger ?? createLogger({ tool: "query_task_state" });
   const toolSchema = {
-    taskId: z98.string().min(1).max(128).describe("Task ID whose structured state log should be read")
+    taskId: z99.string().min(1).max(128).describe("Task ID whose structured state log should be read")
   };
   const description = "Read the structured state log for a task ID and return the current snapshot. Includes Magentic-One Task Ledger (facts/guesses/openQuestions) and Progress Ledger (per-step reflections with suggestedAction) when orchestrators have written them. Structured state is only written when NEXUS_TASK_STATE_ENABLED=1 was set during the orchestrate invocation.";
   const secureHandler = createSecureHandler(queryTaskStateHandler, {
@@ -51986,28 +52619,28 @@ function registerQueryTaskStateTool(server, deps) {
 }
 
 // src/mcp/tools/ci-health-check-tool.ts
-import { z as z101 } from "zod";
+import { z as z102 } from "zod";
 
 // src/mcp/tools/ci-health-log.ts
 import { appendFileSync as appendFileSync5, existsSync as existsSync13, readFileSync as readFileSync11, statSync as statSync2, writeFileSync as writeFileSync3 } from "node:fs";
-import { z as z100 } from "zod";
+import { z as z101 } from "zod";
 
 // src/mcp/tools/ci-health-types.ts
-import { z as z99 } from "zod";
-var CiHealthStatusSchema = z99.enum(["healthy", "degraded", "outage", "unknown"]);
+import { z as z100 } from "zod";
+var CiHealthStatusSchema = z100.enum(["healthy", "degraded", "outage", "unknown"]);
 
 // src/mcp/tools/ci-health-log.ts
 var logger52 = createLogger({ component: "ci-health-log" });
-var CiHealthEventSchema = z100.object({
-  v: z100.literal(1),
-  ts: z100.iso.datetime(),
+var CiHealthEventSchema = z101.object({
+  v: z101.literal(1),
+  ts: z101.iso.datetime(),
   status: CiHealthStatusSchema,
-  repo: z100.string().optional(),
-  signals: z100.array(
-    z100.object({
-      source: z100.enum(["github-status", "repo-activity-window"]),
+  repo: z101.string().optional(),
+  signals: z101.array(
+    z101.object({
+      source: z101.enum(["github-status", "repo-activity-window"]),
       status: CiHealthStatusSchema,
-      evidence: z100.string()
+      evidence: z101.string()
     })
   )
 });
@@ -52087,17 +52720,17 @@ function eventFromCheck(params) {
 }
 
 // src/mcp/tools/ci-health-check-tool.ts
-var CiHealthCheckInputSchema = z101.object({
+var CiHealthCheckInputSchema = z102.object({
   /**
    * Repo to check for the recent-runs activity signal (in `owner/repo` form).
    * Optional — when omitted, only the status-page signal is consulted.
    */
-  repo: z101.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
+  repo: z102.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
   /**
    * How far back to look for recent-runs activity (minutes). Default 30 —
    * matches the typical wedge-detection window from the #3070 / #3076 outages.
    */
-  activityWindowMinutes: z101.number().int().min(5).max(180).default(30).describe("Recent-runs lookback window in minutes (5-180; default 30).")
+  activityWindowMinutes: z102.number().int().min(5).max(180).default(30).describe("Recent-runs lookback window in minutes (5-180; default 30).")
 });
 var STATUS_PAGE_URL = "https://www.githubstatus.com/api/v2/components.json";
 function mapStatusPageStatus(raw) {
@@ -52256,8 +52889,8 @@ var DESCRIPTION = "Check CI infrastructure health before triggering / polling ru
 function registerCiHealthCheckTool(server, deps) {
   const logger58 = deps.logger ?? createLogger({ tool: "ci_health_check" });
   const toolSchema = {
-    repo: z101.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
-    activityWindowMinutes: z101.number().int().min(5).max(180).optional().describe("Recent-runs lookback window in minutes (5-180; default 30).")
+    repo: z102.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
+    activityWindowMinutes: z102.number().int().min(5).max(180).optional().describe("Recent-runs lookback window in minutes (5-180; default 30).")
   };
   const secureHandler = createSecureHandler((args) => ciHealthCheckHandler(args, logger58), {
     toolName: "ci_health_check",
@@ -52283,18 +52916,18 @@ function registerCiHealthCheckTool(server, deps) {
 
 // src/mcp/tools/quality-gate-tool.ts
 import { statSync as statSync3 } from "node:fs";
-import { z as z102 } from "zod";
-var QualityCheckSchema = z102.enum(["typecheck", "lint", "tests", "build", "security"]);
+import { z as z103 } from "zod";
+var QualityCheckSchema = z103.enum(["typecheck", "lint", "tests", "build", "security"]);
 var DEFAULT_CHECKS = ["typecheck", "lint", "tests"];
-var RunQualityGateInputSchema = z102.object({
+var RunQualityGateInputSchema = z103.object({
   /** Project directory to run checks against. Must resolve inside the repo/cwd root. */
-  projectDir: z102.string().optional().describe(
+  projectDir: z103.string().optional().describe(
     "Project directory to run checks against (default: cwd). Must stay inside the repo root."
   ),
   /** Which allowlisted checks to run. */
-  checks: z102.array(QualityCheckSchema).nonempty().default([...DEFAULT_CHECKS]).describe("Allowlisted checks to run (default: ['typecheck','lint','tests'])."),
+  checks: z103.array(QualityCheckSchema).nonempty().default([...DEFAULT_CHECKS]).describe("Allowlisted checks to run (default: ['typecheck','lint','tests'])."),
   /** 1-based iteration counter, forwarded to the engine for feedback context. */
-  iteration: z102.number().int().min(1).default(1).describe("1-based iteration number (default 1).")
+  iteration: z103.number().int().min(1).default(1).describe("1-based iteration number (default 1).")
 });
 function validateProjectDir(raw) {
   const candidate = raw ?? process.cwd();
@@ -52369,11 +53002,11 @@ var DESCRIPTION2 = "Run the QA quality gate (#1684 engine) against a project dir
 function registerRunQualityGateTool(server, deps) {
   const logger58 = deps.logger ?? createLogger({ tool: "run_quality_gate" });
   const toolSchema = {
-    projectDir: z102.string().optional().describe(
+    projectDir: z103.string().optional().describe(
       "Project directory to run checks against (default: cwd). Must stay inside the repo root."
     ),
-    checks: z102.array(QualityCheckSchema).nonempty().optional().describe("Allowlisted checks to run (default: ['typecheck','lint','tests'])."),
-    iteration: z102.number().int().min(1).optional().describe("1-based iteration number (default 1).")
+    checks: z103.array(QualityCheckSchema).nonempty().optional().describe("Allowlisted checks to run (default: ['typecheck','lint','tests'])."),
+    iteration: z103.number().int().min(1).optional().describe("1-based iteration number (default 1).")
   };
   const secureHandler = createSecureHandler(
     (args) => runQualityGateHandler(args, logger58),
@@ -52403,7 +53036,7 @@ function registerRunQualityGateTool(server, deps) {
 // src/mcp/tools/verify-audit-chain-tool.ts
 import * as fs8 from "node:fs/promises";
 import * as path7 from "node:path";
-import { z as z103 } from "zod";
+import { z as z104 } from "zod";
 
 // src/cli-server-auth.ts
 function resolveAuthEnabled(config) {
@@ -52577,11 +53210,11 @@ function logSecurityConfig(logger58, config) {
 }
 
 // src/mcp/tools/verify-audit-chain-tool.ts
-var VerifyAuditChainInputSchema = z103.object({
-  logDir: z103.string().min(1).max(512).describe(
+var VerifyAuditChainInputSchema = z104.object({
+  logDir: z104.string().min(1).max(512).describe(
     "Filesystem path to the FileAuditStorage log directory. Must lie inside the nexus data dir, a repo-local `.nexus-agents/`, or the configured `security.audit.logDir`. Tool reads all `audit-*.jsonl` files in lexicographic order and verifies the combined chain."
   ),
-  filePrefix: z103.string().min(1).max(64).optional().default(DEFAULT_AUDIT_FILE_PREFIX).describe(
+  filePrefix: z104.string().min(1).max(64).optional().default(DEFAULT_AUDIT_FILE_PREFIX).describe(
     'Filename prefix for audit log files (defaults to "audit"). Files matching `${filePrefix}-*.jsonl` will be verified.'
   )
 });
@@ -52710,10 +53343,10 @@ async function handler2(args, ctx, security) {
 function registerVerifyAuditChainTool(server, deps) {
   const logger58 = deps.logger ?? createLogger({ tool: "verify_audit_chain" });
   const toolSchema = {
-    logDir: z103.string().min(1).max(512).describe(
+    logDir: z104.string().min(1).max(512).describe(
       "Filesystem path to the FileAuditStorage log directory. Must lie inside the nexus data dir, a repo-local `.nexus-agents/`, or the configured `security.audit.logDir`. Tool reads all `audit-*.jsonl` files and verifies the combined hash chain."
     ),
-    filePrefix: z103.string().min(1).max(64).optional().describe(
+    filePrefix: z104.string().min(1).max(64).optional().describe(
       'Filename prefix for audit log files (defaults to "audit"). Files matching `${filePrefix}-*.jsonl` will be verified.'
     )
   };
@@ -52737,15 +53370,15 @@ function registerVerifyAuditChainTool(server, deps) {
 }
 
 // src/mcp/tools/suggest-research-tasks-tool.ts
-import { z as z104 } from "zod";
+import { z as z105 } from "zod";
 var SUGGEST_RESEARCH_TASKS_NOTE = "Suggestions derived from external research (untrusted); review before acting \u2014 nothing was executed or filed.";
 var RESEARCH_BUDGET_MS = 2e4;
 var RESEARCH_TIMED_OUT = /* @__PURE__ */ Symbol("research-budget-exceeded");
 async function withResearchBudget(p, ms) {
   let timer;
-  const budget = new Promise((resolve12) => {
+  const budget = new Promise((resolve13) => {
     timer = setTimeout(() => {
-      resolve12(RESEARCH_TIMED_OUT);
+      resolve13(RESEARCH_TIMED_OUT);
     }, ms);
   });
   try {
@@ -52754,11 +53387,11 @@ async function withResearchBudget(p, ms) {
     if (timer !== void 0) clearTimeout(timer);
   }
 }
-var SuggestResearchTasksInputSchema = z104.object({
-  topic: z104.string().optional().describe("Topic filter passed to research_discover. Optional."),
-  qualityThreshold: z104.number().min(0).max(10).optional().describe("Minimum quality score (0-10) a discovery must meet to be suggested. Optional."),
-  maxTriggers: z104.number().int().min(1).optional().describe("Max number of candidate tasks to return (>=1). Optional."),
-  existingTaskIds: z104.array(z104.string()).optional().describe("Known task IDs to skip (dedup). Optional.")
+var SuggestResearchTasksInputSchema = z105.object({
+  topic: z105.string().optional().describe("Topic filter passed to research_discover. Optional."),
+  qualityThreshold: z105.number().min(0).max(10).optional().describe("Minimum quality score (0-10) a discovery must meet to be suggested. Optional."),
+  maxTriggers: z105.number().int().min(1).optional().describe("Max number of candidate tasks to return (>=1). Optional."),
+  existingTaskIds: z105.array(z105.string()).optional().describe("Known task IDs to skip (dedup). Optional.")
 });
 function toTriggerConfig(input) {
   return {
@@ -52815,10 +53448,10 @@ var DESCRIPTION3 = "SUGGEST-ONLY: surface candidate pipeline tasks for human/orc
 function registerSuggestResearchTasksTool(server, deps) {
   const logger58 = deps.logger ?? createLogger({ tool: "suggest_research_tasks" });
   const toolSchema = {
-    topic: z104.string().optional().describe("Topic filter passed to research_discover. Optional."),
-    qualityThreshold: z104.number().min(0).max(10).optional().describe("Minimum quality score (0-10) a discovery must meet to be suggested. Optional."),
-    maxTriggers: z104.number().int().min(1).optional().describe("Max number of candidate tasks to return (>=1). Optional."),
-    existingTaskIds: z104.array(z104.string()).optional().describe("Known task IDs to skip (dedup). Optional.")
+    topic: z105.string().optional().describe("Topic filter passed to research_discover. Optional."),
+    qualityThreshold: z105.number().min(0).max(10).optional().describe("Minimum quality score (0-10) a discovery must meet to be suggested. Optional."),
+    maxTriggers: z105.number().int().min(1).optional().describe("Max number of candidate tasks to return (>=1). Optional."),
+    existingTaskIds: z105.array(z105.string()).optional().describe("Known task IDs to skip (dedup). Optional.")
   };
   const secureHandler = createSecureHandler(
     (args) => suggestResearchTasksHandler(args, logger58),
@@ -52846,7 +53479,7 @@ function registerSuggestResearchTasksTool(server, deps) {
 }
 
 // src/mcp/tools/run-tool.ts
-import { z as z108 } from "zod";
+import { z as z109 } from "zod";
 import { randomUUID as randomUUID19 } from "node:crypto";
 
 // src/orchestration/consensus-enforcement-mode.ts
@@ -53468,7 +54101,7 @@ function createMetaOrchestrator(options) {
 
 // src/orchestration/meta-shadow-selector.ts
 import { appendFileSync as appendFileSync6, existsSync as existsSync14, readFileSync as readFileSync12 } from "node:fs";
-import { z as z105 } from "zod";
+import { z as z106 } from "zod";
 var SHADOW_STRATEGY_ARMS = [
   "single-shot",
   "dev-pipeline",
@@ -53557,19 +54190,19 @@ function createHydratableSelector() {
 var META_OUTCOME_SCHEMA_VERSION = 1;
 var HYDRATE_LOOKBACK_DAYS = 30;
 var HYDRATE_LOOKBACK_MS = HYDRATE_LOOKBACK_DAYS * 24 * 60 * 60 * 1e3;
-var PersistedContextSchema = z105.object({
-  taskComplexity: z105.number(),
-  contextLengthNormalized: z105.number(),
-  isCodeTask: z105.number(),
-  isReasoningTask: z105.number(),
-  budgetUtilization: z105.number(),
-  timePressure: z105.number()
+var PersistedContextSchema = z106.object({
+  taskComplexity: z106.number(),
+  contextLengthNormalized: z106.number(),
+  isCodeTask: z106.number(),
+  isReasoningTask: z106.number(),
+  budgetUtilization: z106.number(),
+  timePressure: z106.number()
 });
-var PersistedMetaOutcomeSchema = z105.object({
-  schema: z105.literal(META_OUTCOME_SCHEMA_VERSION),
-  timestamp: z105.string(),
-  strategy: z105.enum(SHADOW_STRATEGY_ARMS),
-  success: z105.boolean(),
+var PersistedMetaOutcomeSchema = z106.object({
+  schema: z106.literal(META_OUTCOME_SCHEMA_VERSION),
+  timestamp: z106.string(),
+  strategy: z106.enum(SHADOW_STRATEGY_ARMS),
+  success: z106.boolean(),
   context: PersistedContextSchema
 });
 var persistLogger = createLogger({ component: "MetaShadowSelector" });
@@ -53962,7 +54595,7 @@ function evaluateMetaStrategyReadiness(result, config = DEFAULT_META_STRATEGY_RE
 }
 
 // src/mcp/tools/dev-pipeline-tool.ts
-import { z as z106 } from "zod";
+import { z as z107 } from "zod";
 import * as fs10 from "node:fs";
 import { randomUUID as randomUUID17 } from "node:crypto";
 
@@ -54016,8 +54649,11 @@ function warningsField(result) {
   return result.warnings !== void 0 ? { warnings: result.warnings } : {};
 }
 function securityStatus(result) {
-  if (result.securityRan !== true) return { status: "unmeasured" };
-  return { status: result.securityPassed ? "passed" : "failed" };
+  const comparison = result.securityComparison ?? {};
+  if (result.securityRan !== true || result.securityComparison?.complete === false) {
+    return { status: "unmeasured", ...comparison };
+  }
+  return { status: result.securityPassed ? "passed" : "failed", ...comparison };
 }
 function planVoteVerdictFields(result) {
   return {
@@ -54030,7 +54666,7 @@ function planVoteVerdictFields(result) {
 }
 
 // src/mcp/tools/dev-pipeline-tool.ts
-import { resolve as resolve10 } from "node:path";
+import { resolve as resolve11 } from "node:path";
 
 // src/mcp/tools/dev-pipeline-options.ts
 function buildPipelineOptions(input, trustTier, auditLogger) {
@@ -54223,48 +54859,48 @@ var DEV_PIPELINE_DRY_RUN_NOTE = "This was a dry run (plan+vote), which always ru
 function dispatchNoteFor(dryRun) {
   return dryRun ? DEV_PIPELINE_DRY_RUN_NOTE : DEV_PIPELINE_ASYNC_HINT;
 }
-var DevPipelineInputSchema = z106.object({
+var DevPipelineInputSchema = z107.object({
   /** Direct task instructions. */
-  task: z106.string().max(1e4).optional().describe("Direct task instructions (what to build)"),
+  task: z107.string().max(1e4).optional().describe("Direct task instructions (what to build)"),
   /** Declared provenance of the task text (#6795); omitted means '3'. */
   sourceTrustTier: TaskSourceTrustTierSchema,
   /** Path to a plan file (.md, .yaml, .txt) to use as input. */
-  planFile: z106.string().max(500).optional().describe("Path to a plan/spec file to use as input"),
+  planFile: z107.string().max(500).optional().describe("Path to a plan/spec file to use as input"),
   /** Whether to run in dry-run mode (plan+vote only, no implementation). */
-  dryRun: z106.boolean().default(false).describe("If true, stop after plan+vote (no implementation)"),
+  dryRun: z107.boolean().default(false).describe("If true, stop after plan+vote (no implementation)"),
   /** Maximum vote iterations before proceeding (default: 3). */
-  maxVoteIterations: z106.number().int().min(1).max(5).default(3).describe("Max plan\u2192vote iterations"),
+  maxVoteIterations: z107.number().int().min(1).max(5).default(3).describe("Max plan\u2192vote iterations"),
   /** Maximum QA iterations per task (default: 3). */
-  maxQaIterations: z106.number().int().min(1).max(5).default(3).describe("Max QA review iterations per task"),
+  maxQaIterations: z107.number().int().min(1).max(5).default(3).describe("Max QA review iterations per task"),
   /** Working directory for the pipeline (default: cwd). Used for security scan and context. */
-  workingDir: z106.string().max(500).optional().describe("Working directory (default: cwd)"),
+  workingDir: z107.string().max(500).optional().describe("Working directory (default: cwd)"),
   /** GitHub issue number to track progress on. Updates posted as comments. */
-  issueNumber: z106.number().int().positive().optional().describe("GitHub issue to post progress to"),
+  issueNumber: z107.number().int().positive().optional().describe("GitHub issue to post progress to"),
   /** GitHub repo (owner/name) for issue tracking. */
-  repo: z106.string().max(200).optional().describe("GitHub repo for issue tracking (e.g., owner/repo)"),
+  repo: z107.string().max(200).optional().describe("GitHub repo for issue tracking (e.g., owner/repo)"),
   /** Task tracking backend: github, gitlab, or json (default: json). */
-  trackerBackend: z106.enum(["github", "gitlab", "json"]).default("json").describe("Task tracking backend for issue creation"),
+  trackerBackend: z107.enum(["github", "gitlab", "json"]).default("json").describe("Task tracking backend for issue creation"),
   /** Labels to apply to created issues. */
-  labels: z106.array(z106.string()).optional().describe("Labels for created issues"),
+  labels: z107.array(z107.string()).optional().describe("Labels for created issues"),
   /** Session ID for checkpoint/resume. Enables crash recovery. */
-  sessionId: z106.string().max(128).regex(/^[a-zA-Z0-9_-]+$/).optional().describe("Session ID for checkpoint/resume (crash recovery)"),
+  sessionId: z107.string().max(128).regex(/^[a-zA-Z0-9_-]+$/).optional().describe("Session ID for checkpoint/resume (crash recovery)"),
   /**
    * TESTS ONLY — when true, voters return random decisions. Must not be used as
    * a fallback when adapters are unavailable; configure an adapter instead. (#2319)
    */
-  simulateVotes: z106.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)"),
+  simulateVotes: z107.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)"),
   /** Voting strategy for consensus stages. */
   votingStrategy: VotingStrategySchema.optional().describe(
     "Voting strategy for plan approval (default: higher_order)"
   ),
   /** Use 3 agents instead of 6 for faster voting. */
-  quickMode: z106.boolean().default(false).describe("Use 3 agents instead of 6 for faster consensus voting"),
+  quickMode: z107.boolean().default(false).describe("Use 3 agents instead of 6 for faster consensus voting"),
   /**
    * Deadline for EACH stage call in milliseconds (min 30s, max 600s), not a
    * budget for the whole run (#6736). Replaces every stage's default, the
    * vote's included; clamped to the `pipeline` class guard.
    */
-  timeoutMs: z106.number().int().min(3e4).max(6e5).optional().describe(
+  timeoutMs: z107.number().int().min(3e4).max(6e5).optional().describe(
     "Max time for EACH stage call in ms (30000-600000), not for the whole run; applies to every stage, the vote included, and to each plan/vote and implement/QA iteration. A stage past it fails with a timeout and its model calls are aborted. Default: the vote stage gets the multi-LLM panel guard (900000 unless overridden), other stages the pipeline guard (1800000 unless overridden)"
   ),
   /**
@@ -54272,7 +54908,7 @@ var DevPipelineInputSchema = z106.object({
    * dispatch. A caller who learned `mode: 'async'` elsewhere gets an error
    * naming `dispatch` rather than the bare enum message (#4968).
    */
-  mode: z106.enum(["autonomous", "harness"], { error: modeEnumErrorNamingDispatch }).default("autonomous").describe(
+  mode: z107.enum(["autonomous", "harness"], { error: modeEnumErrorNamingDispatch }).default("autonomous").describe(
     "'autonomous': full pipeline. 'harness': stops after decompose, returns tasks for caller to implement. (Not the async switch \u2014 that is `dispatch`.)"
   ),
   /**
@@ -54286,11 +54922,11 @@ var DevPipelineInputSchema = z106.object({
    */
   dispatch: dispatchFieldDefaultSync("Ignored for dryRun."),
   /** Local pre-ship quality gate (typecheck/lint/tests) mode (#3356). */
-  qualityGate: z106.enum(["off", "advisory", "blocking"]).default("off").describe(
+  qualityGate: z107.enum(["off", "advisory", "blocking"]).default("off").describe(
     "Pre-ship local quality gate. 'off' (default): skip. 'advisory': run + record feedback, never fail. 'blocking': a red gate fails the pipeline."
   ),
   /** Opt-in per-run token budget — a safety cap for unattended runs (#3395). */
-  maxBudgetTokens: z106.number().int().positive().optional().describe(
+  maxBudgetTokens: z107.number().int().positive().optional().describe(
     "Per-run token ceiling (#3395). When set, expert calls stop (returning failures) once cumulative usage crosses it \u2014 a hard-stop safety cap for unattended/multi-day runs. Omit to disable (default)."
   )
 });
@@ -54319,7 +54955,7 @@ function containWorkingDir(workingDir) {
   const roots = [process.cwd()];
   const workspaceRoot = getActiveWorkspaceRoot();
   if (workspaceRoot !== void 0) roots.push(workspaceRoot);
-  const absolute = resolve10(workingDir);
+  const absolute = resolve11(workingDir);
   for (const root of roots) {
     const contained = resolveInsideRoot(absolute, root);
     if (contained !== null) return contained;
@@ -54377,7 +55013,7 @@ async function executeDevPipelineBody(taskText, stages, pipelineOptions, simulat
       detail: output2
     });
   }
-  return structuredToolSuccess(z106.record(z106.string(), z106.unknown()), output2);
+  return structuredToolSuccess(z107.record(z107.string(), z107.unknown()), output2);
 }
 function describeIncompleteRun(result) {
   if (result.planStatus !== void 0) {
@@ -54509,33 +55145,33 @@ function registerDevPipelineTool(server, deps) {
 }
 
 // src/mcp/tools/pipeline-tool.ts
-import { z as z107 } from "zod";
+import { z as z108 } from "zod";
 import * as fs11 from "node:fs";
 import { randomUUID as randomUUID18 } from "node:crypto";
 var PIPELINE_ASYNC_HINT = "A full run_pipeline run can exceed the synchronous MCP request timeout. Retry with `dispatch: 'async'` to get a jobId immediately, then poll get_job_result({ jobId }) for the result.";
-var PipelineInputSchema = z107.object({
+var PipelineInputSchema = z108.object({
   /** The task to execute. */
-  task: z107.string().min(5).max(1e4).describe("Task description \u2014 pipeline template auto-selected based on content"),
+  task: z108.string().min(5).max(1e4).describe("Task description \u2014 pipeline template auto-selected based on content"),
   /** Path to a spec file (.md, .yaml) to use as task input. */
-  specFile: z107.string().max(500).optional().describe("Path to a spec file \u2014 content prepended to task for greenfield projects"),
+  specFile: z108.string().max(500).optional().describe("Path to a spec file \u2014 content prepended to task for greenfield projects"),
   /** Override template — see `listTemplateIds()` for the canonical list (#2728). Auto-detected if omitted. */
-  template: z107.string().max(50).optional().describe(`Pipeline template override. Available: ${listTemplateIds().join(", ")}`),
+  template: z108.string().max(50).optional().describe(`Pipeline template override. Available: ${listTemplateIds().join(", ")}`),
   /** Voting strategy for consensus stages. */
   votingStrategy: VotingStrategySchema.optional().describe(
     "Voting strategy for plan approval. simple_majority (default), supermajority (67%), unanimous, higher_order (Bayesian), opinion_wise"
   ),
   /** Use 3 agents instead of 7 for faster voting. */
-  quickMode: z107.boolean().default(false).describe("Use 3 agents instead of 7 for faster consensus voting"),
+  quickMode: z108.boolean().default(false).describe("Use 3 agents instead of 7 for faster consensus voting"),
   /**
    * Deadline for EACH stage in milliseconds (min 30s, max 600s), not a budget
    * for the whole run (#6730). Replaces every stage's default, the vote's
    * included; clamped to the `pipeline` class guard.
    */
-  timeoutMs: z107.number().int().min(3e4).max(6e5).optional().describe(
+  timeoutMs: z108.number().int().min(3e4).max(6e5).optional().describe(
     "Max time for EACH stage in ms (30000-600000), not for the whole run; applies to every stage, the vote included. Default: the vote stage gets the multi-LLM panel guard (900000 unless overridden), other stages 120000"
   ),
   /** Stop after planning/voting (no implementation). */
-  dryRun: z107.boolean().default(false).describe("Stop after vote stage (no implementation)"),
+  dryRun: z108.boolean().default(false).describe("Stop after vote stage (no implementation)"),
   /**
    * Dispatch mode (#3730). `sync` (default) runs the pipeline inline and
    * returns the result — but a real multi-stage adaptive run can exceed the
@@ -54546,7 +55182,7 @@ var PipelineInputSchema = z107.object({
    */
   ...asyncDispatchInputDefaultSync("Ignored for dryRun."),
   /** TESTS ONLY — random output, must not be used for real decisions. (#2319) */
-  simulateVotes: z107.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)")
+  simulateVotes: z108.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)")
 });
 function buildOutput3(result, simulated) {
   return {
@@ -54572,14 +55208,14 @@ function buildOutput3(result, simulated) {
     rateLimitHint: result.error?.toLowerCase().includes("rate limit") === true ? "Consider using quickMode or increasing delay between pipeline runs" : void 0
   };
 }
-var VoteEvidenceSchema = z107.object({
-  approvalPercentage: z107.number(),
-  voteRecordId: z107.string().optional()
+var VoteEvidenceSchema = z108.object({
+  approvalPercentage: z108.number(),
+  voteRecordId: z108.string().optional()
 });
-var VoteResultSchema = z107.discriminatedUnion("kind", [
-  VoteEvidenceSchema.extend({ kind: z107.literal("approved") }),
-  VoteEvidenceSchema.extend({ kind: z107.literal("rejected"), feedback: z107.string() }),
-  VoteEvidenceSchema.extend({ kind: z107.literal("no_quorum"), reason: z107.string() })
+var VoteResultSchema = z108.discriminatedUnion("kind", [
+  VoteEvidenceSchema.extend({ kind: z108.literal("approved") }),
+  VoteEvidenceSchema.extend({ kind: z108.literal("rejected"), feedback: z108.string() }),
+  VoteEvidenceSchema.extend({ kind: z108.literal("no_quorum"), reason: z108.string() })
 ]);
 function isVoteResult(value) {
   return VoteResultSchema.safeParse(value).success;
@@ -54681,7 +55317,7 @@ async function executePipelineBody(task, stages, run) {
       detail: output2
     });
   }
-  return structuredToolSuccess(z107.record(z107.string(), z107.unknown()), output2);
+  return structuredToolSuccess(z108.record(z108.string(), z108.unknown()), output2);
 }
 function createPipelineAgentStages(input, config) {
   return createAgentStages({
@@ -54832,9 +55468,9 @@ function cancellableExecutor(strategy, executor, signal) {
 }
 
 // src/mcp/tools/run-tool.ts
-var RunInputSchema = z108.object({
-  goal: z108.string().min(1).describe("Natural-language goal. nexus-agents selects how to execute it."),
-  forceStrategy: z108.enum([
+var RunInputSchema = z109.object({
+  goal: z109.string().min(1).describe("Natural-language goal. nexus-agents selects how to execute it."),
+  forceStrategy: z109.enum([
     "single-shot",
     "dev-pipeline",
     "pipeline",
@@ -54846,10 +55482,10 @@ var RunInputSchema = z108.object({
   ]).optional().describe(
     "Power-user override: force a specific strategy instead of letting the router choose."
   ),
-  requiresConsensus: z108.boolean().optional().describe("Hint: the task needs a multi-perspective consensus decision."),
-  dependencyStructure: z108.enum(["linear", "dag", "independent", "unknown"]).optional().describe("Hint: the dependency structure of the work."),
-  isNovel: z108.boolean().optional().describe("Hint: this kind of task has not been seen before."),
-  execute: z108.boolean().optional().describe(
+  requiresConsensus: z109.boolean().optional().describe("Hint: the task needs a multi-perspective consensus decision."),
+  dependencyStructure: z109.enum(["linear", "dag", "independent", "unknown"]).optional().describe("Hint: the dependency structure of the work."),
+  isNovel: z109.boolean().optional().describe("Hint: this kind of task has not been seen before."),
+  execute: z109.boolean().optional().describe(
     "When true, actually run the selected strategy (if an executor is wired) and return its result; otherwise return the routing decision only (default false, read-only)."
   ),
   /**
@@ -54864,7 +55500,7 @@ var RunInputSchema = z108.object({
    * other, the call is REFUSED rather than executed: silently ignoring a
    * do-not-act flag is the one outcome a governance substrate cannot allow.
    */
-  dryRun: z108.boolean().optional().describe(
+  dryRun: z109.boolean().optional().describe(
     "Plan and vote only, no implementation (#4806). Requires the dev-pipeline strategy \u2014 refused (never silently executed) when the router selects another."
   ),
   /**
@@ -55100,12 +55736,12 @@ function registerRunTool(server, deps) {
 }
 
 // src/mcp/tools/list-available-models-tool.ts
-import { z as z109 } from "zod";
+import { z as z110 } from "zod";
 var DESCRIPTION5 = "Probe every model-discovery transport (OpenRouter API, the configured gateway, and the opencode/claude/codex/gemini CLIs) and report a per-transport health summary: probe ok/failed, model count, and a sample of usable ids. Models with open route breakers are excluded; each CLI reports whether its default-route breaker is open. Use it to validate the CLIs and APIs are wired and reachable. Read-only; does not change routing.";
 var PROBE_TIMEOUT_MS = 12e3;
-var ListAvailableModelsInputSchema = z109.object({
-  includeModelIds: z109.boolean().optional().describe("Include the full model-id list per transport (default false \u2192 sample of 5 only)."),
-  includeOpenRouter: z109.boolean().optional().describe("Probe the OpenRouter live catalog (default true).")
+var ListAvailableModelsInputSchema = z110.object({
+  includeModelIds: z110.boolean().optional().describe("Include the full model-id list per transport (default false \u2192 sample of 5 only)."),
+  includeOpenRouter: z110.boolean().optional().describe("Probe the OpenRouter live catalog (default true).")
 });
 async function probeSource(source, includeModelIds) {
   let timer;
@@ -55214,8 +55850,8 @@ async function listAvailableModelsHandler(args, deps, logger58) {
 function registerListAvailableModelsTool(server, deps) {
   const logger58 = deps.logger ?? createLogger({ tool: "list_available_models" });
   const toolSchema = {
-    includeModelIds: z109.boolean().optional().describe("Include the full model-id list per transport (default false \u2192 sample of 5 only)."),
-    includeOpenRouter: z109.boolean().optional().describe("Probe the OpenRouter live catalog (default true).")
+    includeModelIds: z110.boolean().optional().describe("Include the full model-id list per transport (default false \u2192 sample of 5 only)."),
+    includeOpenRouter: z110.boolean().optional().describe("Probe the OpenRouter live catalog (default true).")
   };
   const secureHandler = createSecureHandler(
     (args) => listAvailableModelsHandler(args, deps, logger58),
@@ -55239,9 +55875,9 @@ function registerListAvailableModelsTool(server, deps) {
 }
 
 // src/mcp/tools/pr-review-eval-types.ts
-import { z as z110 } from "zod";
+import { z as z111 } from "zod";
 var MAX_EVAL_FINDINGS = 100;
-var VoterEvalFindingSchema = z110.object({
+var VoterEvalFindingSchema = z111.object({
   summary: RawFindingSchema.shape.summary,
   location: RawFindingSchema.shape.location,
   severity: RawFindingSchema.shape.severity.unwrap(),
@@ -55249,14 +55885,14 @@ var VoterEvalFindingSchema = z110.object({
   gate: RawFindingSchema.shape.gate.extend({
     named_assertion: RawFindingSchema.shape.claim.min(0)
   }).optional(),
-  verified: z110.boolean().optional(),
-  classification: z110.enum(["TP", "FP", "FN", "excluded"]),
-  source: z110.enum(["voter", "ground_truth"]),
+  verified: z111.boolean().optional(),
+  classification: z111.enum(["TP", "FP", "FN", "excluded"]),
+  source: z111.enum(["voter", "ground_truth"]),
   /** Original index in the voter's raw findings; repeated TP evidence shares it. */
-  findingIndex: z110.number().int().nonnegative().optional(),
-  knownBugIndex: z110.number().int().nonnegative().optional(),
+  findingIndex: z111.number().int().nonnegative().optional(),
+  knownBugIndex: z111.number().int().nonnegative().optional(),
   /** String fields shortened by the producer, never silently truncated. */
-  truncatedFields: z110.array(z110.enum(["summary", "location", "rationale", "gate.named_assertion"])).max(4).optional()
+  truncatedFields: z111.array(z111.enum(["summary", "location", "rationale", "gate.named_assertion"])).max(4).optional()
 });
 var PR_REVIEW_EVAL_ROLES = [
   "architect",
@@ -55265,47 +55901,47 @@ var PR_REVIEW_EVAL_ROLES = [
   "catfish",
   "scope_steward"
 ];
-var PrReviewEvalRoleSchema = z110.enum(PR_REVIEW_EVAL_ROLES);
-var PrReviewCaseClassSchema = z110.enum(["buggy", "clean", "borderline"]);
-var VoterEvalVerdictSchema = z110.object({
+var PrReviewEvalRoleSchema = z111.enum(PR_REVIEW_EVAL_ROLES);
+var PrReviewCaseClassSchema = z111.enum(["buggy", "clean", "borderline"]);
+var VoterEvalVerdictSchema = z111.object({
   /** Stable record id (e.g. `${runId}:${caseNumber}:${role}`). */
-  id: z110.string().min(1).max(160),
+  id: z111.string().min(1).max(160),
   /** The pr_review run / batch this verdict belongs to. */
-  runId: z110.string().min(1).max(64),
+  runId: z111.string().min(1).max(64),
   /** Dataset case identifier (the dataset's `number` field). */
-  caseNumber: z110.string().min(1).max(80),
+  caseNumber: z111.string().min(1).max(80),
   /** Rubric class of the case (ground-truth label). */
   caseClass: PrReviewCaseClassSchema,
   /** The voter role being scored. */
   role: PrReviewEvalRoleSchema,
   /** Verified findings that matched a known bug. */
-  truePositives: z110.number().int().nonnegative(),
+  truePositives: z111.number().int().nonnegative(),
   /** Verified findings on clean code that matched no known bug. */
-  falsePositives: z110.number().int().nonnegative(),
+  falsePositives: z111.number().int().nonnegative(),
   /** Known bugs this voter failed to flag. */
-  falseNegatives: z110.number().int().nonnegative(),
+  falseNegatives: z111.number().int().nonnegative(),
   /** Optional for legacy records/count-only callers; [] means measured, no evidence. */
-  findings: z110.array(VoterEvalFindingSchema).max(MAX_EVAL_FINDINGS).optional(),
+  findings: z111.array(VoterEvalFindingSchema).max(MAX_EVAL_FINDINGS).optional(),
   /** Number of evidence entries omitted at the cap; full tallies are unchanged. */
-  findingsTruncated: z110.number().int().nonnegative().optional(),
+  findingsTruncated: z111.number().int().nonnegative().optional(),
   /** Rubric version the ground truth was adjudicated under. */
-  rubricVersion: z110.string().min(1).max(32),
+  rubricVersion: z111.string().min(1).max(32),
   /** ISO-8601 timestamp the verdict was recorded. */
-  timestamp: z110.string().min(1).max(40)
+  timestamp: z111.string().min(1).max(40)
 });
-var VoterEvalVerdictQuerySchema = z110.object({
+var VoterEvalVerdictQuerySchema = z111.object({
   role: PrReviewEvalRoleSchema.optional(),
-  runId: z110.string().min(1).max(64).optional(),
+  runId: z111.string().min(1).max(64).optional(),
   caseClass: PrReviewCaseClassSchema.optional(),
-  rubricVersion: z110.string().min(1).max(32).optional(),
+  rubricVersion: z111.string().min(1).max(32).optional(),
   /** ISO-8601 lower bound (inclusive) on `timestamp`. */
-  since: z110.string().optional(),
+  since: z111.string().optional(),
   /** Most-recent-N cap. */
-  limit: z110.number().int().positive().optional()
+  limit: z111.number().int().positive().optional()
 });
 
 // src/mcp/tools/supply-chain-tradeoff-panel.ts
-import { z as z111 } from "zod";
+import { z as z112 } from "zod";
 import { randomUUID as randomUUID20 } from "node:crypto";
 var DEFAULT_AXES = [
   "build_time_determinism",
@@ -55327,16 +55963,16 @@ var FULL_PANEL = [
   "scope_steward"
 ];
 var QUICK_PANEL = ["architect", "security", "scope_steward"];
-var SupplyChainTradeoffPanelInputSchema = z111.object({
-  proposal: z111.string().min(1).max(MAX_PROPOSAL_LENGTH).describe('The proposal under tradeoff review (e.g. "Should aegis-boot adopt cargo-nextest?")'),
-  axes: z111.array(z111.string().min(1).max(MAX_AXIS_NAME_LENGTH)).min(1).max(MAX_AXES).optional().describe(
+var SupplyChainTradeoffPanelInputSchema = z112.object({
+  proposal: z112.string().min(1).max(MAX_PROPOSAL_LENGTH).describe('The proposal under tradeoff review (e.g. "Should aegis-boot adopt cargo-nextest?")'),
+  axes: z112.array(z112.string().min(1).max(MAX_AXIS_NAME_LENGTH)).min(1).max(MAX_AXES).optional().describe(
     `Tradeoff axes to evaluate. Default: ${DEFAULT_AXES.join(", ")}. Custom axes accepted; max ${String(MAX_AXES)}.`
   ),
-  context: z111.string().max(MAX_CONTEXT_LENGTH).optional().describe(
+  context: z112.string().max(MAX_CONTEXT_LENGTH).optional().describe(
     "Optional context: relevant repo state, dependency tree, vendor publishing patterns, etc."
   ),
-  quickMode: z111.boolean().optional().default(false).describe("Use 3 voters (architect, security, scope_steward) instead of 7"),
-  simulate: z111.boolean().optional().default(false).describe("Use simulated voters (testing only)"),
+  quickMode: z112.boolean().optional().default(false).describe("Use 3 voters (architect, security, scope_steward) instead of 7"),
+  simulate: z112.boolean().optional().default(false).describe("Use simulated voters (testing only)"),
   // #6123: same field as consensus_vote — the panel judges the caller's project.
   project: VoterProjectInputSchema,
   /**
@@ -55636,7 +56272,7 @@ function createAnnotationsProxy(server) {
 
 // src/mcp/workspace-roots.ts
 import { existsSync as existsSync15, realpathSync as realpathSync6, statSync as statSync4 } from "node:fs";
-import { isAbsolute as isAbsolute6, join as join16 } from "node:path";
+import { isAbsolute as isAbsolute9, join as join19 } from "node:path";
 import { homedir as homedir3 } from "node:os";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function deriveWorkspaceRootFromRoots(roots) {
@@ -55651,7 +56287,7 @@ function deriveWorkspaceRootFromRoots(roots) {
       continue;
     }
     first ??= path9;
-    if (gitRoot === null && existsSync15(join16(path9, ".git"))) gitRoot = path9;
+    if (gitRoot === null && existsSync15(join19(path9, ".git"))) gitRoot = path9;
   }
   return gitRoot ?? first;
 }
@@ -55662,7 +56298,7 @@ function resolveClaudeProjectRoot(logger58) {
   const candidate = process.env["CLAUDE_PROJECT_DIR"];
   if (candidate === void 0) return null;
   try {
-    if (isAbsolute6(candidate)) {
+    if (isAbsolute9(candidate)) {
       const canonical = realpathSync6(candidate);
       const root = statSync4(canonical).isDirectory() ? findRepoRoot(canonical) : null;
       if (root !== null && setActiveWorkspaceRoot(root)) return root;
@@ -55675,8 +56311,8 @@ function resolveClaudeProjectRoot(logger58) {
 function beginWorkspaceRootResolution(logger58) {
   if (resolution?.timer !== void 0) clearTimeout(resolution.timer);
   let resolveReady;
-  workspaceRootReady = new Promise((resolve12) => {
-    resolveReady = resolve12;
+  workspaceRootReady = new Promise((resolve13) => {
+    resolveReady = resolve13;
   });
   const root = resolveClaudeProjectRoot(logger58);
   resolution = {
@@ -55958,40 +56594,40 @@ var RiskLevel = /* @__PURE__ */ ((RiskLevel2) => {
 })(RiskLevel || {});
 
 // src/mcp/safety/stpa-schemas.ts
-import { z as z112 } from "zod";
-var HazardCategorySchema = z112.enum(HazardCategory);
-var HazardSeveritySchema = z112.enum(HazardSeverity);
-var ConstraintPrioritySchema = z112.enum(ConstraintPriority);
-var RiskLevelSchema = z112.enum(RiskLevel);
-var TriggerPatternSchema = z112.object({
-  parameter: z112.string().min(1),
-  matchType: z112.enum(["contains", "regex", "equals", "startsWith", "endsWith"]),
-  pattern: z112.string(),
-  reason: z112.string()
+import { z as z113 } from "zod";
+var HazardCategorySchema = z113.enum(HazardCategory);
+var HazardSeveritySchema = z113.enum(HazardSeverity);
+var ConstraintPrioritySchema = z113.enum(ConstraintPriority);
+var RiskLevelSchema = z113.enum(RiskLevel);
+var TriggerPatternSchema = z113.object({
+  parameter: z113.string().min(1),
+  matchType: z113.enum(["contains", "regex", "equals", "startsWith", "endsWith"]),
+  pattern: z113.string(),
+  reason: z113.string()
 });
-var HazardSchema = z112.object({
-  id: z112.string().min(1),
-  description: z112.string(),
+var HazardSchema = z113.object({
+  id: z113.string().min(1),
+  description: z113.string(),
   category: HazardCategorySchema,
   severity: HazardSeveritySchema,
-  likelihood: z112.enum(["almost_certain", "likely", "possible", "unlikely", "rare"]),
-  triggerConditions: z112.array(z112.string()),
-  consequences: z112.array(z112.string())
+  likelihood: z113.enum(["almost_certain", "likely", "possible", "unlikely", "rare"]),
+  triggerConditions: z113.array(z113.string()),
+  consequences: z113.array(z113.string())
 });
-var UnsafeControlActionSchema = z112.object({
-  id: z112.string().min(1),
-  toolName: z112.string().min(1),
-  type: z112.enum(["not_provided", "provided_causes_hazard", "wrong_timing", "wrong_duration"]),
-  description: z112.string(),
-  unsafeContext: z112.string(),
-  relatedHazards: z112.array(z112.string()),
-  triggerPatterns: z112.array(TriggerPatternSchema).optional()
+var UnsafeControlActionSchema = z113.object({
+  id: z113.string().min(1),
+  toolName: z113.string().min(1),
+  type: z113.enum(["not_provided", "provided_causes_hazard", "wrong_timing", "wrong_duration"]),
+  description: z113.string(),
+  unsafeContext: z113.string(),
+  relatedHazards: z113.array(z113.string()),
+  triggerPatterns: z113.array(TriggerPatternSchema).optional()
 });
-var SafetyConstraintSchema = z112.object({
-  id: z112.string().min(1),
-  description: z112.string(),
-  mitigates: z112.array(z112.string()),
-  enforcement: z112.enum([
+var SafetyConstraintSchema = z113.object({
+  id: z113.string().min(1),
+  description: z113.string(),
+  mitigates: z113.array(z113.string()),
+  enforcement: z113.enum([
     "prevent",
     "require_confirmation",
     "alert",
@@ -55999,52 +56635,52 @@ var SafetyConstraintSchema = z112.object({
     "rate_limit",
     "require_privilege"
   ]),
-  validationFunction: z112.string().optional(),
+  validationFunction: z113.string().optional(),
   priority: ConstraintPrioritySchema
 });
-var PropertySchemaSchema = z112.object({
-  type: z112.string(),
-  description: z112.string().optional(),
-  enum: z112.array(z112.unknown()).optional(),
-  pattern: z112.string().optional(),
-  minimum: z112.number().optional(),
-  maximum: z112.number().optional()
+var PropertySchemaSchema = z113.object({
+  type: z113.string(),
+  description: z113.string().optional(),
+  enum: z113.array(z113.unknown()).optional(),
+  pattern: z113.string().optional(),
+  minimum: z113.number().optional(),
+  maximum: z113.number().optional()
 });
-var ToolInputSchemaSchema = z112.object({
-  type: z112.string(),
-  properties: z112.record(z112.string(), PropertySchemaSchema).optional(),
-  required: z112.array(z112.string()).optional(),
-  additionalProperties: z112.boolean().optional()
+var ToolInputSchemaSchema = z113.object({
+  type: z113.string(),
+  properties: z113.record(z113.string(), PropertySchemaSchema).optional(),
+  required: z113.array(z113.string()).optional(),
+  additionalProperties: z113.boolean().optional()
 });
-var ToolDefinitionSchema = z112.object({
-  name: z112.string().min(1),
-  description: z112.string(),
+var ToolDefinitionSchema = z113.object({
+  name: z113.string().min(1),
+  description: z113.string(),
   inputSchema: ToolInputSchemaSchema
 });
-var AnalysisConfigurationSchema = z112.object({
-  includeLowSeverity: z112.boolean().default(true),
-  generateAllConstraints: z112.boolean().default(true),
-  checkInteractions: z112.boolean().default(true),
-  maxHazardsPerTool: z112.number().int().min(1).max(100).default(50),
-  categories: z112.array(HazardCategorySchema).default([])
+var AnalysisConfigurationSchema = z113.object({
+  includeLowSeverity: z113.boolean().default(true),
+  generateAllConstraints: z113.boolean().default(true),
+  checkInteractions: z113.boolean().default(true),
+  maxHazardsPerTool: z113.number().int().min(1).max(100).default(50),
+  categories: z113.array(HazardCategorySchema).default([])
 });
-var ConstraintViolationSchema = z112.object({
-  constraintId: z112.string().min(1),
-  constraintDescription: z112.string(),
+var ConstraintViolationSchema = z113.object({
+  constraintId: z113.string().min(1),
+  constraintDescription: z113.string(),
   severity: HazardSeveritySchema,
-  details: z112.string(),
-  remediation: z112.string()
+  details: z113.string(),
+  remediation: z113.string()
 });
-var ValidationWarningSchema = z112.object({
-  code: z112.string().min(1),
-  message: z112.string(),
-  affected: z112.string()
+var ValidationWarningSchema = z113.object({
+  code: z113.string().min(1),
+  message: z113.string(),
+  affected: z113.string()
 });
-var ValidationResultSchema = z112.object({
-  valid: z112.boolean(),
-  toolName: z112.string().min(1),
-  violations: z112.array(ConstraintViolationSchema),
-  passed: z112.array(z112.string()),
+var ValidationResultSchema = z113.object({
+  valid: z113.boolean(),
+  toolName: z113.string().min(1),
+  violations: z113.array(ConstraintViolationSchema),
+  passed: z113.array(z113.string()),
   // Optional rather than required, deliberately. `ValidationResult` declares
   // both fields required because every result this package produces has them;
   // the schema is the lenient inbound edge for a result that arrived from
@@ -56055,10 +56691,10 @@ var ValidationResultSchema = z112.object({
   // "nothing was evaluated". The strict/lenient split is safe because nothing
   // bridges the two with `z.infer`: a parsed result will not typecheck as a
   // `ValidationResult` without handling the absent fields.
-  evaluated: z112.array(z112.string()).optional(),
-  notApplicable: z112.array(z112.string()).optional(),
-  warnings: z112.array(ValidationWarningSchema),
-  validatedAt: z112.date()
+  evaluated: z113.array(z113.string()).optional(),
+  notApplicable: z113.array(z113.string()).optional(),
+  warnings: z113.array(ValidationWarningSchema),
+  validatedAt: z113.date()
 });
 
 // src/mcp/safety/stpa-types.ts
@@ -57143,18 +57779,18 @@ var GeminiResponseParser = class {
 };
 
 // src/cli-adapters/router-types.ts
-import { z as z113 } from "zod";
-var RouterConfigSchema = z113.object({
-  preferCostEfficient: z113.boolean().default(false)
+import { z as z114 } from "zod";
+var RouterConfigSchema = z114.object({
+  preferCostEfficient: z114.boolean().default(false)
 });
 
 // src/cli-adapters/task-classifier.ts
-import { z as z114 } from "zod";
-var ClassificationPatternsSchema = z114.object({
-  code: z114.array(z114.string()).readonly(),
-  research: z114.array(z114.string()).readonly(),
-  documentation: z114.array(z114.string()).readonly(),
-  analysis: z114.array(z114.string()).readonly()
+import { z as z115 } from "zod";
+var ClassificationPatternsSchema = z115.object({
+  code: z115.array(z115.string()).readonly(),
+  research: z115.array(z115.string()).readonly(),
+  documentation: z115.array(z115.string()).readonly(),
+  analysis: z115.array(z115.string()).readonly()
 });
 
 // src/security/sandbox/sandbox-types.ts
@@ -57389,25 +58025,25 @@ function sanitizeEnvironment(sourceEnv, allowedVars, additionalEnv) {
   const blocked = [];
   const violations = [];
   const effectiveAllowlist = allowedVars.length > 0 ? allowedVars : SAFE_ENV_VARS;
-  for (const [key, value] of Object.entries(sourceEnv)) {
+  for (const [key2, value] of Object.entries(sourceEnv)) {
     if (value === void 0) continue;
-    const validation = validateEnvVar(key, effectiveAllowlist);
+    const validation = validateEnvVar(key2, effectiveAllowlist);
     if (validation !== null) {
-      blocked.push(key);
+      blocked.push(key2);
       violations.push(validation);
       continue;
     }
-    result[key] = value;
+    result[key2] = value;
   }
   if (additionalEnv !== void 0) {
-    for (const [key, value] of Object.entries(additionalEnv)) {
-      const denyCheck = isDeniedEnvVar(key);
+    for (const [key2, value] of Object.entries(additionalEnv)) {
+      const denyCheck = isDeniedEnvVar(key2);
       if (denyCheck !== null) {
-        blocked.push(key);
+        blocked.push(key2);
         violations.push(denyCheck);
         continue;
       }
-      result[key] = value;
+      result[key2] = value;
     }
   }
   return { env: result, blocked, violations };
@@ -57583,7 +58219,7 @@ function getPolicy(id) {
 // src/security/sandbox/sandbox-executor.ts
 import { execFile as execFile2 } from "node:child_process";
 import { promisify } from "node:util";
-import { resolve as resolve11 } from "node:path";
+import { resolve as resolve12 } from "node:path";
 var execFileAsync = promisify(execFile2);
 var logger55 = createLogger({ component: "sandbox-executor" });
 function parseExecError(error) {
@@ -57675,7 +58311,7 @@ var PolicySandboxExecutor = class {
    * following symlinks, else `null`. No rules means no allowed directory.
    */
   resolveAllowedCwd(cwd, policy) {
-    const absolute = resolve11(cwd);
+    const absolute = resolve12(cwd);
     for (const rule of policy.pathRules) {
       if (rule.access === "none") continue;
       const contained = resolveInsideRoot(absolute, rule.path);
@@ -58532,4 +59168,4 @@ export {
   initializeSandbox,
   getSandboxMode
 };
-//# sourceMappingURL=chunk-A7XDON63.js.map
+//# sourceMappingURL=chunk-HHOSB6LL.js.map