nexus-agents 2.100.2 → 2.101.1

package/dist/{factory-PVN7DDNZ.js → factory-PPAK3TVG.js}

@@ -3,10 +3,10 @@ import {
   createCliAdapter,
   getAvailableClis,
   isCliAvailable
-} from "./chunk-P453545L.js";
-import "./chunk-A7XUXJWL.js";
-import "./chunk-AH67WRET.js";
-import "./chunk-M774MKHE.js";
+} from "./chunk-3GF52QPA.js";
+import "./chunk-4RW6OONY.js";
+import "./chunk-3QFQG5QT.js";
+import "./chunk-KLYBJUTK.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -15,4 +15,4 @@ export {
   getAvailableClis,
   isCliAvailable
 };
-//# sourceMappingURL=factory-PVN7DDNZ.js.map
+//# sourceMappingURL=factory-PPAK3TVG.js.map

package/dist/{improvement-review-7OWJBTOC.js → improvement-review-BGFCQV4I.js}

@@ -8,9 +8,9 @@ import {
   loadSelfEvalSignals,
   registerImprovementReviewTool,
   runImprovementReview
-} from "./chunk-D7FORQJJ.js";
-import "./chunk-3OCQKZLC.js";
-import "./chunk-M774MKHE.js";
+} from "./chunk-KYONCTIL.js";
+import "./chunk-KAJPY6YZ.js";
+import "./chunk-KLYBJUTK.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -24,4 +24,4 @@ export {
   registerImprovementReviewTool,
   runImprovementReview
 };
-//# sourceMappingURL=improvement-review-7OWJBTOC.js.map
+//# sourceMappingURL=improvement-review-BGFCQV4I.js.map

package/dist/index.d.ts

@@ -31684,8 +31684,13 @@ interface DevPipelineStages {
     research(task: string): Promise<string>;
     /** Architect creates a plan from research + task. */
     plan(task: string, research: string, priorFeedback?: string): Promise<string>;
-    /** Consensus vote on the plan. Returns approval + feedback. */
-    vote(plan: string): Promise<VoteResult>;
+    /**
+     * Consensus vote on the plan. Returns approval + feedback. `research` is the
+     * research-stage context, surfaced to voters so they can weigh research
+     * maturity (#3258) — appended to the proposal as informational, untrusted
+     * text (never as instructions).
+     */
+    vote(plan: string, research: string): Promise<VoteResult>;
     /** PM decomposes approved plan into tasks. */
     decompose(plan: string): Promise<PipelineTask[]>;
     /** Code expert implements a task. Returns the work product. */

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-Q3IFS7UA.js";
+} from "./chunk-ABGRFLJ6.js";
 import {
   ALLOWED_COMMANDS,
   ARTIFACT_TYPES,
@@ -509,27 +509,27 @@ import {
   validateWorkflow,
   validateWorkflowDependencies,
   withLogging
-} from "./chunk-LRM5NZ2I.js";
+} from "./chunk-AMYO7KUK.js";
 import "./chunk-3ACDP4E6.js";
 import {
   getTokenEnvVars,
   hasToken,
   resolveToken
-} from "./chunk-UWQ3BALH.js";
+} from "./chunk-S7R72HUB.js";
 import "./chunk-OK6U5N5Y.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
   OpenAIAdapter,
   createOpenAIAdapter
-} from "./chunk-SU7RKNIZ.js";
+} from "./chunk-EKO6XAAZ.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-V2C2MC6H.js";
+} from "./chunk-NAKDVIXS.js";
 import {
   executeExpert
-} from "./chunk-H4LBBFCO.js";
+} from "./chunk-KHEQIB6P.js";
 import {
   AgentFindingSchema,
   AgentPerformanceSchema,
@@ -601,7 +601,7 @@ import {
   registerConsensusVoteTool,
   withModelNotFoundFallback,
   wrapResilientWithFallback
-} from "./chunk-JW4JGJEU.js";
+} from "./chunk-2ETX4XQW.js";
 import {
   AdapterModelError,
   BaseAdapter,
@@ -625,11 +625,11 @@ import {
   transformStream,
   validateApiKeyPresence,
   withTimeout
-} from "./chunk-BO6QUVXI.js";
+} from "./chunk-FVWKAEYH.js";
 import {
   PROVIDER_ENV_KEYS
-} from "./chunk-J76KHBF3.js";
-import "./chunk-5WY3N7VX.js";
+} from "./chunk-W65C5VVJ.js";
+import "./chunk-Z7IQUUTZ.js";
 import {
   AgentActionSchema,
   AuditTrail,
@@ -661,11 +661,11 @@ import {
   requiresCorroboration,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-5T6S6HFY.js";
+} from "./chunk-4IWHFMCN.js";
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-J545CO5K.js";
+} from "./chunk-MNWYIYEZ.js";
 import {
   GitHubUserRoleSchema,
   InjectionFlagSchema,
@@ -680,8 +680,8 @@ import {
   assessReputation,
   reconcileTrustTier,
   sanitizeInput
-} from "./chunk-VD4TXDMR.js";
-import "./chunk-D7FORQJJ.js";
+} from "./chunk-GDY23NDK.js";
+import "./chunk-KYONCTIL.js";
 import {
   NOOP_NOTIFIER,
   PolicyConfigSchema,
@@ -705,7 +705,7 @@ import {
   toolSuccess,
   toolSuccessStructured,
   validateToolInput
-} from "./chunk-3OCQKZLC.js";
+} from "./chunk-KAJPY6YZ.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -713,7 +713,7 @@ import {
   generateSecurityPlan,
   getRegistryManifest,
   resolveScannerData
-} from "./chunk-BKUKBOGV.js";
+} from "./chunk-FZCB2P3F.js";
 import {
   analyzeGitHubRepo,
   analyzeRepo,
@@ -722,10 +722,10 @@ import {
 import {
   PersistentStrategyDistiller,
   RulesSnapshotSchema
-} from "./chunk-3XSEFOI5.js";
+} from "./chunk-VJR46M7L.js";
 import {
   MemoryError
-} from "./chunk-ZOBDTJNG.js";
+} from "./chunk-TDXLS2TY.js";
 import {
   AppConfigSchema,
   ExpertConfigSchema,
@@ -744,7 +744,7 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-EWJRZNDC.js";
+} from "./chunk-RIYVX4JS.js";
 import {
   AvailabilityCache,
   filterAvailableModels,
@@ -753,15 +753,15 @@ import {
   getFallbackChain,
   resetAvailabilityCache,
   resolveFallback
-} from "./chunk-HBZUXO4Q.js";
+} from "./chunk-FLUC27DF.js";
 import {
   AvailableModelsCache,
   getDefaultAvailableModelsCache,
   setDefaultAvailableModelsCache
-} from "./chunk-CJODZY4U.js";
+} from "./chunk-L2NPJRZZ.js";
 import {
   DEFAULTS
-} from "./chunk-XO25FS24.js";
+} from "./chunk-LVGYWJDX.js";
 import "./chunk-NUBSJGQZ.js";
 import "./chunk-6T3EPABN.js";
 import {
@@ -792,9 +792,9 @@ import {
   isCliAvailable,
   isRetryableError,
   sleep
-} from "./chunk-P453545L.js";
-import "./chunk-A7XUXJWL.js";
-import "./chunk-AH67WRET.js";
+} from "./chunk-3GF52QPA.js";
+import "./chunk-4RW6OONY.js";
+import "./chunk-3QFQG5QT.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -805,7 +805,7 @@ import {
   validateExpertConfig
 } from "./chunk-ZM4O442V.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-DLNCQO6L.js";
+import "./chunk-MNFEZIRI.js";
 import {
   AgentCapability,
   AgentError,
@@ -880,7 +880,7 @@ import {
   toError,
   unwrap,
   unwrapOr
-} from "./chunk-M774MKHE.js";
+} from "./chunk-KLYBJUTK.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 
@@ -6134,7 +6134,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-W6MIUFZK.js");
+    const { executeVoting } = await import("./consensus-vote-F5FEDUSU.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);

package/dist/{init-opencode-PB4G7RJR.js → init-opencode-WXY4DUFU.js}

@@ -1,12 +1,12 @@
 import {
   discoverModels,
   readOpencodeGateway
-} from "./chunk-WYDK6V7W.js";
-import "./chunk-SU7RKNIZ.js";
-import "./chunk-BO6QUVXI.js";
+} from "./chunk-5PZIMHNA.js";
+import "./chunk-EKO6XAAZ.js";
+import "./chunk-FVWKAEYH.js";
 import {
   createLogger
-} from "./chunk-M774MKHE.js";
+} from "./chunk-KLYBJUTK.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 
@@ -174,4 +174,4 @@ export {
   runInitOpencode,
   runOpencodeValidate
 };
-//# sourceMappingURL=init-opencode-PB4G7RJR.js.map
+//# sourceMappingURL=init-opencode-WXY4DUFU.js.map

package/dist/{issue-triage-EMYHDDTR.js → issue-triage-KGLNAJKH.js}

@@ -2,10 +2,10 @@ import {
   IssueTriage,
   createIssueTriage,
   formatTriageComment
-} from "./chunk-5T6S6HFY.js";
-import "./chunk-J545CO5K.js";
-import "./chunk-VD4TXDMR.js";
-import "./chunk-M774MKHE.js";
+} from "./chunk-4IWHFMCN.js";
+import "./chunk-MNWYIYEZ.js";
+import "./chunk-GDY23NDK.js";
+import "./chunk-KLYBJUTK.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -13,4 +13,4 @@ export {
   createIssueTriage,
   formatTriageComment
 };
-//# sourceMappingURL=issue-triage-EMYHDDTR.js.map
+//# sourceMappingURL=issue-triage-KGLNAJKH.js.map

package/dist/{pr-reviewer-helpers-DZQDKMMF.js → pr-reviewer-helpers-2YJG6XJM.js}

@@ -17,10 +17,10 @@ import {
   parseFindings,
   parseSeverity,
   sumFindings
-} from "./chunk-T5KDRR2I.js";
+} from "./chunk-LXBWH5XP.js";
 import "./chunk-OK6U5N5Y.js";
-import "./chunk-VD4TXDMR.js";
-import "./chunk-M774MKHE.js";
+import "./chunk-GDY23NDK.js";
+import "./chunk-KLYBJUTK.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -43,4 +43,4 @@ export {
   parseSeverity,
   sumFindings
 };
-//# sourceMappingURL=pr-reviewer-helpers-DZQDKMMF.js.map
+//# sourceMappingURL=pr-reviewer-helpers-2YJG6XJM.js.map

package/dist/{registry-command-5L7I44JA.js → registry-command-ZFOGLBKF.js}

@@ -1,9 +1,11 @@
 import {
-  ModelCapabilitySchema,
-  createLogger,
+  MANIFEST_MAX_BYTES,
+  USER_MANIFEST_ENV_VAR,
+  defaultUserManifestPath,
   getDefaultRegistry,
-  loadGeneratedRegistryEntries
-} from "./chunk-M774MKHE.js";
+  loadGeneratedRegistryEntries,
+  loadUserManifestOverlay
+} from "./chunk-KLYBJUTK.js";
 import {
   nexusDataPath
 } from "./chunk-CH7QIDHQ.js";
@@ -11,170 +13,8 @@ import "./chunk-PR4QN5HX.js";
 
 // src/cli/registry-command.ts
 import { createHash } from "crypto";
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, writeFileSync } from "fs";
+import { mkdirSync, writeFileSync } from "fs";
 import { dirname } from "path";
-
-// src/config/capability-overlay.ts
-import { existsSync, readFileSync, statSync } from "fs";
-import { parse as parseYaml } from "yaml";
-var OVERLAY_ENV_VAR = "NEXUS_MODEL_REGISTRY_OVERLAY";
-var OVERLAY_MAX_BYTES = 1 * 1024 * 1024;
-function defaultOverlayPath() {
-  return nexusDataPath("models.yaml");
-}
-function resolveOverlayPath(env = process.env) {
-  const override = env[OVERLAY_ENV_VAR];
-  if (override !== void 0 && override !== "") return override;
-  return defaultOverlayPath();
-}
-function loadCapabilityOverlay(pathOrEnv, logger) {
-  const log = logger ?? createLogger({ component: "capability-overlay" });
-  const path = resolvePath(pathOrEnv);
-  if (!existsSync(path)) {
-    return { entries: [], rejections: [], path, status: "missing" };
-  }
-  const sizeStatus = checkSize(path, log);
-  if (sizeStatus !== void 0) return sizeStatus;
-  const bodyResult = readBody(path, log);
-  if ("result" in bodyResult) return bodyResult.result;
-  const body = bodyResult.body;
-  if (body === "") {
-    log.info("Model registry overlay file is empty", { path });
-    return { entries: [], rejections: [], path, status: "empty" };
-  }
-  const parseResult = parseBody(body, path, log);
-  if ("result" in parseResult) return parseResult.result;
-  const parsed = parseResult.parsed;
-  const rawEntries = extractEntries(parsed);
-  if (rawEntries === void 0) {
-    log.warn("Model registry overlay has unrecognized shape; treated as empty", {
-      path
-    });
-    return {
-      entries: [],
-      rejections: [{ index: -1, reason: "Expected array or { models: [...] }" }],
-      path,
-      status: "malformed"
-    };
-  }
-  const { entries, rejections } = validateEntries(rawEntries, log, path);
-  return { entries, rejections, path, status: "loaded" };
-}
-function resolvePath(pathOrEnv) {
-  if (typeof pathOrEnv === "string") return pathOrEnv;
-  if (pathOrEnv !== void 0) return resolveOverlayPath(pathOrEnv);
-  return resolveOverlayPath();
-}
-function readBody(path, log) {
-  try {
-    return { body: readFileSync(path, "utf-8").trim() };
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    log.warn("Model registry overlay file read failed; treated as empty", {
-      path,
-      errorMessage: message
-    });
-    return {
-      result: {
-        entries: [],
-        rejections: [{ index: -1, reason: `file read error: ${message}` }],
-        path,
-        status: "malformed"
-      }
-    };
-  }
-}
-function parseBody(body, path, log) {
-  try {
-    return { parsed: parseYaml(body) };
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    log.warn("Model registry overlay YAML parse failed; treated as empty", {
-      path,
-      errorMessage: message
-    });
-    return {
-      result: {
-        entries: [],
-        rejections: [{ index: -1, reason: `YAML parse error: ${message}` }],
-        path,
-        status: "malformed"
-      }
-    };
-  }
-}
-function checkSize(path, log) {
-  let size;
-  try {
-    size = statSync(path).size;
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    log.warn("Model registry overlay statSync failed; treated as missing", {
-      path,
-      errorMessage: message
-    });
-    return { entries: [], rejections: [], path, status: "missing" };
-  }
-  if (size <= OVERLAY_MAX_BYTES) return void 0;
-  log.warn("Model registry overlay exceeds size cap; refusing to load", {
-    path,
-    size,
-    maxBytes: OVERLAY_MAX_BYTES
-  });
-  return {
-    entries: [],
-    rejections: [
-      {
-        index: -1,
-        reason: `file size ${String(size)} exceeds cap ${String(OVERLAY_MAX_BYTES)}`
-      }
-    ],
-    path,
-    status: "too-large"
-  };
-}
-function extractIdForError(raw) {
-  if (raw === null || typeof raw !== "object" || !("id" in raw)) return void 0;
-  const idValue = raw.id;
-  if (typeof idValue === "string" && idValue !== "") return idValue;
-  return void 0;
-}
-function extractEntries(parsed) {
-  if (Array.isArray(parsed)) return parsed;
-  if (parsed !== null && typeof parsed === "object") {
-    const obj = parsed;
-    if (Array.isArray(obj.models)) return obj.models;
-  }
-  return void 0;
-}
-function validateEntries(rawEntries, log, path) {
-  const entries = [];
-  const rejections = [];
-  for (let i = 0; i < rawEntries.length; i++) {
-    const raw = rawEntries[i];
-    const idCandidate = extractIdForError(raw);
-    const parsed = ModelCapabilitySchema.safeParse(raw);
-    if (!parsed.success) {
-      const rejection = {
-        index: i,
-        ...idCandidate !== void 0 && idCandidate !== "" ? { id: idCandidate } : {},
-        reason: parsed.error.message
-      };
-      rejections.push(rejection);
-      log.warn("Model registry overlay entry rejected by schema", {
-        path,
-        index: i,
-        id: idCandidate,
-        errorMessage: parsed.error.message
-      });
-      continue;
-    }
-    entries.push(parsed.data);
-  }
-  return { entries, rejections };
-}
-
-// src/cli/registry-command.ts
 var VALID_SUBCOMMANDS = ["doctor", "refresh"];
 function isValidRegistrySubcommand(v) {
   return v !== void 0 && VALID_SUBCOMMANDS.includes(v);
@@ -211,7 +51,7 @@ function buildDoctorReport(options) {
     sourceCounts[entry.source] += 1;
   }
   const generated = loadGeneratedRegistryEntries();
-  const overlay = loadCapabilityOverlay(options.overlayPath ?? process.env);
+  const overlay = options.overlayPath !== void 0 ? loadUserManifestOverlay({ path: options.overlayPath }) : loadUserManifestOverlay();
   return {
     sourceCounts,
     totalEntries: entries.length,
@@ -229,7 +69,7 @@ function buildDoctorReport(options) {
         ...r.id !== void 0 ? { id: r.id } : {},
         reason: r.reason
       })),
-      envOverride: process.env[OVERLAY_ENV_VAR]
+      envOverride: process.env[USER_MANIFEST_ENV_VAR]
     },
     unknownIdFallback: {
       contextWindow: UNKNOWN_MODEL_CONTEXT_WINDOW
@@ -393,8 +233,8 @@ function formatRegistryUsage() {
     "      SHA256-verify against <url>.sha256, and write to:",
     `      ${nexusDataPath("model-registry.generated.json")}`,
     "",
-    `Overlay path (T3) is ${defaultOverlayPath()} by default,`,
-    `or whatever ${OVERLAY_ENV_VAR} points to. Overlay max size is ${String(OVERLAY_MAX_BYTES)} bytes.`
+    `User overlay path is ${defaultUserManifestPath()} by default,`,
+    `or whatever ${USER_MANIFEST_ENV_VAR} points to. Overlay max size is ${String(MANIFEST_MAX_BYTES)} bytes.`
   ].join("\n");
 }
 export {
@@ -402,4 +242,4 @@ export {
   isValidRegistrySubcommand,
   registryCommand
 };
-//# sourceMappingURL=registry-command-5L7I44JA.js.map
+//# sourceMappingURL=registry-command-ZFOGLBKF.js.map

package/dist/registry-command-ZFOGLBKF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/registry-command.ts"],"sourcesContent":["/**\n * `nexus-agents registry` CLI subcommands (epic #2174 / issue #2179).\n *\n * Two subcommands:\n *\n * - `doctor` — inspect the ModelRegistry: effective per-source entry counts,\n *   the bundled generated registry path/status, the user overlay (reported for\n *   inspection), and the unknown-id fallback contextWindow. Surfaces whatever\n *   overlay parse rejections occurred at load. Read-only. (#3293 migrated this\n *   off the deleted CapabilityDiscovery four-tier chain.)\n *\n * - `refresh` — download a signed `model-registry.generated.json` from a\n *   URL, SHA256-verify against a `.sha256` sidecar, write to the user's\n *   overlay location. Requires `--source=<url>` today; the GitHub-latest-\n *   release automation is #2180's concern.\n *\n * No runtime hot path touches the network — refresh is a one-shot,\n * user-initiated operation.\n *\n * @module cli/registry-command\n */\n\nimport { createHash } from 'node:crypto';\nimport { mkdirSync, writeFileSync } from 'node:fs';\nimport { dirname } from 'node:path';\nimport { nexusDataPath } from '../config/nexus-data-dir.js';\n\nimport { getDefaultRegistry, type EntrySource } from '../config/model-registry.js';\nimport { loadGeneratedRegistryEntries } from '../config/models-generated-loader.js';\nimport {\n  USER_MANIFEST_ENV_VAR,\n  MANIFEST_MAX_BYTES,\n  defaultUserManifestPath,\n  loadUserManifestOverlay,\n} from '../config/manifest-overlay.js';\n\n// ---------------------------------------------------------------------------\n// Dispatch\n// ---------------------------------------------------------------------------\n\nexport type RegistrySubcommand = 'doctor' | 'refresh';\n\nconst VALID_SUBCOMMANDS: readonly RegistrySubcommand[] = ['doctor', 'refresh'];\n\nexport function isValidRegistrySubcommand(v: string | undefined): v is RegistrySubcommand {\n  return v !== undefined && (VALID_SUBCOMMANDS as readonly string[]).includes(v);\n}\n\nexport interface RegistryCommandOptions {\n  readonly json?: boolean;\n  readonly source?: string;\n  readonly dryRun?: boolean;\n  readonly overlayPath?: string;\n  /** For tests: a fetch function. Defaults to `globalThis.fetch`. */\n  readonly fetchImpl?: typeof fetch;\n  /** For tests: override the default destination path. */\n  readonly destPath?: string;\n}\n\nexport interface RegistryCommandResult {\n  readonly text: string;\n  readonly exitCode: number;\n}\n\nexport async function registryCommand(\n  subcommand: RegistrySubcommand,\n  options: RegistryCommandOptions = {}\n): Promise<RegistryCommandResult> {\n  if (subcommand === 'doctor') return doctorCommand(options);\n  return refreshCommand(options);\n}\n\n// ---------------------------------------------------------------------------\n// doctor\n// ---------------------------------------------------------------------------\n\n/**\n * ContextWindow returned for an id no registry source resolves. This is the\n * old `FAIL_CLOSED_DEFAULT.contextWindow` value (#2177), preserved here after\n * the CapabilityDiscovery four-tier chain was deleted in #3293.\n */\nconst UNKNOWN_MODEL_CONTEXT_WINDOW = 8192;\n\n/** Every registry source, in report order. */\nconst ENTRY_SOURCES: readonly EntrySource[] = [\n  'in-tree',\n  'models-dev',\n  'manifest',\n  'derived',\n  'generated',\n];\n\ninterface DoctorReport {\n  /** Effective per-source counts over `getDefaultRegistry().allEntries()`. */\n  readonly sourceCounts: Record<EntrySource, number>;\n  readonly totalEntries: number;\n  readonly bundled: {\n    readonly path: string;\n    readonly status: 'loaded' | 'missing' | 'malformed';\n    readonly entryCount: number;\n  };\n  readonly overlay: {\n    readonly path: string;\n    readonly status: 'missing' | 'empty' | 'malformed' | 'too-large' | 'loaded';\n    readonly entryCount: number;\n    readonly rejections: readonly { index: number; id?: string; reason: string }[];\n    readonly envOverride: string | undefined;\n  };\n  readonly unknownIdFallback: {\n    readonly contextWindow: number;\n  };\n}\n\nfunction doctorCommand(options: RegistryCommandOptions): RegistryCommandResult {\n  const report = buildDoctorReport(options);\n  if (options.json === true) {\n    return { text: JSON.stringify(report, null, 2), exitCode: 0 };\n  }\n  return { text: formatDoctorReport(report), exitCode: 0 };\n}\n\nfunction buildDoctorReport(options: RegistryCommandOptions): DoctorReport {\n  // Effective per-source counts over the fully-merged registry: dedup/override\n  // across tiers has already happened, so `allEntries()` reflects what actually\n  // wins, grouped by the surviving entry's `source`.\n  const entries = getDefaultRegistry().allEntries();\n  const sourceCounts: Record<EntrySource, number> = {\n    'in-tree': 0,\n    'models-dev': 0,\n    manifest: 0,\n    derived: 0,\n    generated: 0,\n  };\n  for (const entry of entries) {\n    sourceCounts[entry.source] += 1;\n  }\n\n  // The bundled generated catalog (long-tail breadth tier) — reported from the\n  // same loader the registry ingests, so the path/status here matches reality.\n  const generated = loadGeneratedRegistryEntries();\n\n  // User overlay (`~/.nexus-agents/models.yaml`) status, reported for\n  // inspection. As of #3351 this IS wired into the registry's manifest tier\n  // (below the operator manifest), loaded via the same manifest-overlay loader.\n  const overlay =\n    options.overlayPath !== undefined\n      ? loadUserManifestOverlay({ path: options.overlayPath })\n      : loadUserManifestOverlay();\n\n  return {\n    sourceCounts,\n    totalEntries: entries.length,\n    bundled: {\n      path: generated.path,\n      status: generated.status,\n      entryCount: generated.entries.length,\n    },\n    overlay: {\n      path: overlay.path,\n      status: overlay.status,\n      entryCount: overlay.entries.length,\n      rejections: overlay.rejections.map((r) => ({\n        index: r.index,\n        ...(r.id !== undefined ? { id: r.id } : {}),\n        reason: r.reason,\n      })),\n      envOverride: process.env[USER_MANIFEST_ENV_VAR],\n    },\n    unknownIdFallback: {\n      contextWindow: UNKNOWN_MODEL_CONTEXT_WINDOW,\n    },\n  };\n}\n\nfunction formatDoctorReport(r: DoctorReport): string {\n  const lines: string[] = [];\n  lines.push('nexus-agents registry doctor');\n  lines.push('============================');\n  lines.push('');\n  lines.push(`Registry entries by source (total ${String(r.totalEntries)}):`);\n  for (const source of ENTRY_SOURCES) {\n    lines.push(`  ${source.padEnd(11)}: ${String(r.sourceCounts[source])}`);\n  }\n  lines.push('');\n  lines.push('Bundled generated registry (long-tail breadth tier):');\n  lines.push(`  path        : ${r.bundled.path}`);\n  lines.push(`  status      : ${r.bundled.status}`);\n  lines.push(`  entryCount  : ${String(r.bundled.entryCount)}`);\n  lines.push('');\n  // User overlay reported for inspection; not consumed by the merged registry.\n  lines.push('T3 user overlay (reported for inspection):');\n  lines.push(`  path        : ${r.overlay.path}`);\n  lines.push(`  status      : ${r.overlay.status}`);\n  lines.push(`  entryCount  : ${String(r.overlay.entryCount)}`);\n  lines.push(`  env override: ${r.overlay.envOverride ?? '(not set)'}`);\n  if (r.overlay.rejections.length > 0) {\n    lines.push('  rejections  :');\n    for (const rej of r.overlay.rejections) {\n      const idPart = rej.id !== undefined ? ` id=${rej.id}` : '';\n      lines.push(`    - [${String(rej.index)}]${idPart} ${rej.reason}`);\n    }\n  }\n  lines.push('');\n  lines.push('Unknown-id fallback (id resolves in no source):');\n  lines.push(`  contextWindow : ${String(r.unknownIdFallback.contextWindow)}`);\n  return lines.join('\\n');\n}\n\n// ---------------------------------------------------------------------------\n// refresh\n// ---------------------------------------------------------------------------\n\nconst MAX_REFRESH_BYTES = 5 * 1024 * 1024;\n\nfunction missingSourceResult(): RegistryCommandResult {\n  return {\n    text: [\n      'registry refresh requires --source=<url>.',\n      '',\n      'The url should point at a model-registry.generated.json file with a',\n      'matching <url>.sha256 sidecar (single line containing the SHA256 hash).',\n      '',\n      'A signed GitHub release artifact is a planned default but not wired yet;',\n      `that is tracked in #2180. Use --source=<your-mirror-url> in the meantime.`,\n    ].join('\\n'),\n    exitCode: 2,\n  };\n}\n\ninterface VerifiedArtifact {\n  readonly body: string;\n  readonly sha256: string;\n}\n\nasync function fetchAndVerify(\n  source: string,\n  fetchImpl: typeof fetch\n): Promise<VerifiedArtifact | RegistryCommandResult> {\n  const body = await fetchWithCap(source, fetchImpl);\n  if (!body.ok || body.body === undefined) {\n    return { text: `Failed to fetch ${source}: ${body.error ?? 'unknown'}`, exitCode: 1 };\n  }\n  const sha = await fetchWithCap(`${source}.sha256`, fetchImpl);\n  if (!sha.ok || sha.body === undefined) {\n    return {\n      text: `Failed to fetch ${source}.sha256 for integrity check: ${sha.error ?? 'unknown'}`,\n      exitCode: 1,\n    };\n  }\n  const expected = sha.body.trim().split(/\\s+/)[0] ?? '';\n  if (expected === '') {\n    return { text: `SHA256 sidecar at ${source}.sha256 is empty`, exitCode: 1 };\n  }\n  const actual = createHash('sha256').update(body.body, 'utf-8').digest('hex');\n  if (actual.toLowerCase() !== expected.toLowerCase()) {\n    return {\n      text: `SHA256 mismatch: expected ${expected}, got ${actual}. Aborting write.`,\n      exitCode: 1,\n    };\n  }\n  return { body: body.body, sha256: actual };\n}\n\nfunction formatRefreshReport(\n  verb: 'would write to' | 'wrote to',\n  source: string,\n  artifact: VerifiedArtifact,\n  dest: string,\n  extraTail: readonly string[] = []\n): string {\n  return [\n    `registry refresh${verb.startsWith('would') ? ' --dry-run' : ''}`,\n    `source   : ${source}`,\n    `sha256   : ${artifact.sha256} (verified)`,\n    `bytes    : ${String(artifact.body.length)}`,\n    `${verb}: ${dest}`,\n    ...extraTail,\n  ].join('\\n');\n}\n\nasync function refreshCommand(options: RegistryCommandOptions): Promise<RegistryCommandResult> {\n  const source = options.source;\n  if (source === undefined || source === '') return missingSourceResult();\n\n  const artifact = await fetchAndVerify(source, options.fetchImpl ?? fetch);\n  if ('text' in artifact) return artifact;\n\n  const dest = options.destPath ?? nexusDataPath('model-registry.generated.json');\n  if (options.dryRun === true) {\n    return { text: formatRefreshReport('would write to', source, artifact, dest), exitCode: 0 };\n  }\n\n  mkdirSync(dirname(dest), { recursive: true });\n  writeFileSync(dest, artifact.body, 'utf-8');\n  return {\n    text: formatRefreshReport('wrote to', source, artifact, dest, [\n      '',\n      'The refreshed file takes precedence over the bundled registry on the next',\n      'run. Restart any running CLI / MCP server for the change to take effect.',\n    ]),\n    exitCode: 0,\n  };\n}\n\ninterface FetchResult {\n  readonly ok: boolean;\n  readonly body?: string;\n  readonly error?: string;\n}\n\nconst overCapError = (bytes: number | null): FetchResult => ({\n  ok: false,\n  error:\n    bytes === null\n      ? `payload exceeds cap ${String(MAX_REFRESH_BYTES)} bytes (stream aborted)`\n      : `payload ${String(bytes)} bytes exceeds cap ${String(MAX_REFRESH_BYTES)}`,\n});\n\nasync function fetchWithCap(url: string, fetchImpl: typeof fetch): Promise<FetchResult> {\n  try {\n    const response = await fetchImpl(url, { signal: AbortSignal.timeout(30_000) });\n    if (!response.ok) {\n      return { ok: false, error: `HTTP ${String(response.status)}` };\n    }\n\n    // Reject on the declared size before reading a single byte (#3354). A\n    // compromised/typo'd mirror could otherwise stream gigabytes; the old\n    // `response.text()` buffered the whole body before checking the cap and\n    // could exhaust memory first.\n    const declared = Number(response.headers.get('content-length'));\n    if (Number.isFinite(declared) && declared > MAX_REFRESH_BYTES) {\n      return overCapError(declared);\n    }\n\n    // No declared length we can trust: stream with a running cap and abort\n    // the moment the accumulated bytes exceed it, so an undeclared or lying\n    // Content-Length can't OOM the process.\n    if (response.body === null) {\n      const body = await response.text();\n      return body.length > MAX_REFRESH_BYTES ? overCapError(body.length) : { ok: true, body };\n    }\n    return await readStreamWithCap(response.body);\n  } catch (err: unknown) {\n    const message = err instanceof Error ? err.message : String(err);\n    return { ok: false, error: message };\n  }\n}\n\n/**\n * Read a response body stream, aborting the moment the accumulated bytes\n * exceed {@link MAX_REFRESH_BYTES} (#3354). Keeps a hostile mirror with an\n * undeclared/lying Content-Length from buffering unbounded data into memory.\n */\nasync function readStreamWithCap(stream: ReadableStream<Uint8Array>): Promise<FetchResult> {\n  const reader = stream.getReader();\n  const decoder = new TextDecoder();\n  let total = 0;\n  let body = '';\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    total += value.byteLength;\n    if (total > MAX_REFRESH_BYTES) {\n      await reader.cancel();\n      return overCapError(null);\n    }\n    body += decoder.decode(value, { stream: true });\n  }\n  body += decoder.decode();\n  return { ok: true, body };\n}\n\n// ---------------------------------------------------------------------------\n// Usage\n// ---------------------------------------------------------------------------\n\nexport function formatRegistryUsage(): string {\n  return [\n    'Usage:',\n    '  nexus-agents registry doctor [--json]',\n    '      Inspect the merged ModelRegistry: per-source entry counts, the',\n    '      bundled generated registry, the user overlay, and the unknown-id',\n    '      fallback contextWindow.',\n    '',\n    '  nexus-agents registry refresh --source=<url> [--dry-run]',\n    '      Download a signed model-registry.generated.json from <url>,',\n    '      SHA256-verify against <url>.sha256, and write to:',\n    `      ${nexusDataPath('model-registry.generated.json')}`,\n    '',\n    `User overlay path is ${defaultUserManifestPath()} by default,`,\n    `or whatever ${USER_MANIFEST_ENV_VAR} points to. Overlay max size is ${String(MANIFEST_MAX_BYTES)} bytes.`,\n  ].join('\\n');\n}\n"],"mappings":";;;;;;;;;;;;;;AAsBA,SAAS,kBAAkB;AAC3B,SAAS,WAAW,qBAAqB;AACzC,SAAS,eAAe;AAkBxB,IAAM,oBAAmD,CAAC,UAAU,SAAS;AAEtE,SAAS,0BAA0B,GAAgD;AACxF,SAAO,MAAM,UAAc,kBAAwC,SAAS,CAAC;AAC/E;AAkBA,eAAsB,gBACpB,YACA,UAAkC,CAAC,GACH;AAChC,MAAI,eAAe,SAAU,QAAO,cAAc,OAAO;AACzD,SAAO,eAAe,OAAO;AAC/B;AAWA,IAAM,+BAA+B;AAGrC,IAAM,gBAAwC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAuBA,SAAS,cAAc,SAAwD;AAC7E,QAAM,SAAS,kBAAkB,OAAO;AACxC,MAAI,QAAQ,SAAS,MAAM;AACzB,WAAO,EAAE,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,UAAU,EAAE;AAAA,EAC9D;AACA,SAAO,EAAE,MAAM,mBAAmB,MAAM,GAAG,UAAU,EAAE;AACzD;AAEA,SAAS,kBAAkB,SAA+C;AAIxE,QAAM,UAAU,mBAAmB,EAAE,WAAW;AAChD,QAAM,eAA4C;AAAA,IAChD,WAAW;AAAA,IACX,cAAc;AAAA,IACd,UAAU;AAAA,IACV,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACA,aAAW,SAAS,SAAS;AAC3B,iBAAa,MAAM,MAAM,KAAK;AAAA,EAChC;AAIA,QAAM,YAAY,6BAA6B;AAK/C,QAAM,UACJ,QAAQ,gBAAgB,SACpB,wBAAwB,EAAE,MAAM,QAAQ,YAAY,CAAC,IACrD,wBAAwB;AAE9B,SAAO;AAAA,IACL;AAAA,IACA,cAAc,QAAQ;AAAA,IACtB,SAAS;AAAA,MACP,MAAM,UAAU;AAAA,MAChB,QAAQ,UAAU;AAAA,MAClB,YAAY,UAAU,QAAQ;AAAA,IAChC;AAAA,IACA,SAAS;AAAA,MACP,MAAM,QAAQ;AAAA,MACd,QAAQ,QAAQ;AAAA,MAChB,YAAY,QAAQ,QAAQ;AAAA,MAC5B,YAAY,QAAQ,WAAW,IAAI,CAAC,OAAO;AAAA,QACzC,OAAO,EAAE;AAAA,QACT,GAAI,EAAE,OAAO,SAAY,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;AAAA,QACzC,QAAQ,EAAE;AAAA,MACZ,EAAE;AAAA,MACF,aAAa,QAAQ,IAAI,qBAAqB;AAAA,IAChD;AAAA,IACA,mBAAmB;AAAA,MACjB,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAEA,SAAS,mBAAmB,GAAyB;AACnD,QAAM,QAAkB,CAAC;AACzB,QAAM,KAAK,8BAA8B;AACzC,QAAM,KAAK,8BAA8B;AACzC,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,qCAAqC,OAAO,EAAE,YAAY,CAAC,IAAI;AAC1E,aAAW,UAAU,eAAe;AAClC,UAAM,KAAK,KAAK,OAAO,OAAO,EAAE,CAAC,KAAK,OAAO,EAAE,aAAa,MAAM,CAAC,CAAC,EAAE;AAAA,EACxE;AACA,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,sDAAsD;AACjE,QAAM,KAAK,mBAAmB,EAAE,QAAQ,IAAI,EAAE;AAC9C,QAAM,KAAK,mBAAmB,EAAE,QAAQ,MAAM,EAAE;AAChD,QAAM,KAAK,mBAAmB,OAAO,EAAE,QAAQ,UAAU,CAAC,EAAE;AAC5D,QAAM,KAAK,EAAE;AAEb,QAAM,KAAK,4CAA4C;AACvD,QAAM,KAAK,mBAAmB,EAAE,QAAQ,IAAI,EAAE;AAC9C,QAAM,KAAK,mBAAmB,EAAE,QAAQ,MAAM,EAAE;AAChD,QAAM,KAAK,mBAAmB,OAAO,EAAE,QAAQ,UAAU,CAAC,EAAE;AAC5D,QAAM,KAAK,mBAAmB,EAAE,QAAQ,eAAe,WAAW,EAAE;AACpE,MAAI,EAAE,QAAQ,WAAW,SAAS,GAAG;AACnC,UAAM,KAAK,iBAAiB;AAC5B,eAAW,OAAO,EAAE,QAAQ,YAAY;AACtC,YAAM,SAAS,IAAI,OAAO,SAAY,OAAO,IAAI,EAAE,KAAK;AACxD,YAAM,KAAK,UAAU,OAAO,IAAI,KAAK,CAAC,IAAI,MAAM,IAAI,IAAI,MAAM,EAAE;AAAA,IAClE;AAAA,EACF;AACA,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,iDAAiD;AAC5D,QAAM,KAAK,qBAAqB,OAAO,EAAE,kBAAkB,aAAa,CAAC,EAAE;AAC3E,SAAO,MAAM,KAAK,IAAI;AACxB;AAMA,IAAM,oBAAoB,IAAI,OAAO;AAErC,SAAS,sBAA6C;AACpD,SAAO;AAAA,IACL,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,IACX,UAAU;AAAA,EACZ;AACF;AAOA,eAAe,eACb,QACA,WACmD;AACnD,QAAM,OAAO,MAAM,aAAa,QAAQ,SAAS;AACjD,MAAI,CAAC,KAAK,MAAM,KAAK,SAAS,QAAW;AACvC,WAAO,EAAE,MAAM,mBAAmB,MAAM,KAAK,KAAK,SAAS,SAAS,IAAI,UAAU,EAAE;AAAA,EACtF;AACA,QAAM,MAAM,MAAM,aAAa,GAAG,MAAM,WAAW,SAAS;AAC5D,MAAI,CAAC,IAAI,MAAM,IAAI,SAAS,QAAW;AACrC,WAAO;AAAA,MACL,MAAM,mBAAmB,MAAM,gCAAgC,IAAI,SAAS,SAAS;AAAA,MACrF,UAAU;AAAA,IACZ;AAAA,EACF;AACA,QAAM,WAAW,IAAI,KAAK,KAAK,EAAE,MAAM,KAAK,EAAE,CAAC,KAAK;AACpD,MAAI,aAAa,IAAI;AACnB,WAAO,EAAE,MAAM,qBAAqB,MAAM,oBAAoB,UAAU,EAAE;AAAA,EAC5E;AACA,QAAM,SAAS,WAAW,QAAQ,EAAE,OAAO,KAAK,MAAM,OAAO,EAAE,OAAO,KAAK;AAC3E,MAAI,OAAO,YAAY,MAAM,SAAS,YAAY,GAAG;AACnD,WAAO;AAAA,MACL,MAAM,6BAA6B,QAAQ,SAAS,MAAM;AAAA,MAC1D,UAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO,EAAE,MAAM,KAAK,MAAM,QAAQ,OAAO;AAC3C;AAEA,SAAS,oBACP,MACA,QACA,UACA,MACA,YAA+B,CAAC,GACxB;AACR,SAAO;AAAA,IACL,mBAAmB,KAAK,WAAW,OAAO,IAAI,eAAe,EAAE;AAAA,IAC/D,cAAc,MAAM;AAAA,IACpB,cAAc,SAAS,MAAM;AAAA,IAC7B,cAAc,OAAO,SAAS,KAAK,MAAM,CAAC;AAAA,IAC1C,GAAG,IAAI,KAAK,IAAI;AAAA,IAChB,GAAG;AAAA,EACL,EAAE,KAAK,IAAI;AACb;AAEA,eAAe,eAAe,SAAiE;AAC7F,QAAM,SAAS,QAAQ;AACvB,MAAI,WAAW,UAAa,WAAW,GAAI,QAAO,oBAAoB;AAEtE,QAAM,WAAW,MAAM,eAAe,QAAQ,QAAQ,aAAa,KAAK;AACxE,MAAI,UAAU,SAAU,QAAO;AAE/B,QAAM,OAAO,QAAQ,YAAY,cAAc,+BAA+B;AAC9E,MAAI,QAAQ,WAAW,MAAM;AAC3B,WAAO,EAAE,MAAM,oBAAoB,kBAAkB,QAAQ,UAAU,IAAI,GAAG,UAAU,EAAE;AAAA,EAC5F;AAEA,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,gBAAc,MAAM,SAAS,MAAM,OAAO;AAC1C,SAAO;AAAA,IACL,MAAM,oBAAoB,YAAY,QAAQ,UAAU,MAAM;AAAA,MAC5D;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,UAAU;AAAA,EACZ;AACF;AAQA,IAAM,eAAe,CAAC,WAAuC;AAAA,EAC3D,IAAI;AAAA,EACJ,OACE,UAAU,OACN,uBAAuB,OAAO,iBAAiB,CAAC,4BAChD,WAAW,OAAO,KAAK,CAAC,sBAAsB,OAAO,iBAAiB,CAAC;AAC/E;AAEA,eAAe,aAAa,KAAa,WAA+C;AACtF,MAAI;AACF,UAAM,WAAW,MAAM,UAAU,KAAK,EAAE,QAAQ,YAAY,QAAQ,GAAM,EAAE,CAAC;AAC7E,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO,EAAE,IAAI,OAAO,OAAO,QAAQ,OAAO,SAAS,MAAM,CAAC,GAAG;AAAA,IAC/D;AAMA,UAAM,WAAW,OAAO,SAAS,QAAQ,IAAI,gBAAgB,CAAC;AAC9D,QAAI,OAAO,SAAS,QAAQ,KAAK,WAAW,mBAAmB;AAC7D,aAAO,aAAa,QAAQ;AAAA,IAC9B;AAKA,QAAI,SAAS,SAAS,MAAM;AAC1B,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,aAAO,KAAK,SAAS,oBAAoB,aAAa,KAAK,MAAM,IAAI,EAAE,IAAI,MAAM,KAAK;AAAA,IACxF;AACA,WAAO,MAAM,kBAAkB,SAAS,IAAI;AAAA,EAC9C,SAAS,KAAc;AACrB,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO,EAAE,IAAI,OAAO,OAAO,QAAQ;AAAA,EACrC;AACF;AAOA,eAAe,kBAAkB,QAA0D;AACzF,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,QAAQ;AACZ,MAAI,OAAO;AACX,aAAS;AACP,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,QAAI,KAAM;AACV,aAAS,MAAM;AACf,QAAI,QAAQ,mBAAmB;AAC7B,YAAM,OAAO,OAAO;AACpB,aAAO,aAAa,IAAI;AAAA,IAC1B;AACA,YAAQ,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAAA,EAChD;AACA,UAAQ,QAAQ,OAAO;AACvB,SAAO,EAAE,IAAI,MAAM,KAAK;AAC1B;AAMO,SAAS,sBAA8B;AAC5C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,cAAc,+BAA+B,CAAC;AAAA,IACvD;AAAA,IACA,wBAAwB,wBAAwB,CAAC;AAAA,IACjD,eAAe,qBAAqB,mCAAmC,OAAO,kBAAkB,CAAC;AAAA,EACnG,EAAE,KAAK,IAAI;AACb;","names":[]}

package/dist/{repo-security-plan-N2GNWFER.js → repo-security-plan-L47DDTAU.js}

@@ -3,9 +3,9 @@ import {
   buildPlanFromAnalysis,
   generateSecurityPlan,
   resolveScannerData
-} from "./chunk-BKUKBOGV.js";
+} from "./chunk-FZCB2P3F.js";
 import "./chunk-HFOQKCD2.js";
-import "./chunk-M774MKHE.js";
+import "./chunk-KLYBJUTK.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -14,4 +14,4 @@ export {
   generateSecurityPlan,
   resolveScannerData
 };
-//# sourceMappingURL=repo-security-plan-N2GNWFER.js.map
+//# sourceMappingURL=repo-security-plan-L47DDTAU.js.map

package/dist/{research-helpers-synthesize-OKNU245Z.js → research-helpers-synthesize-IABO7LB4.js}

@@ -1,13 +1,13 @@
 import {
   AttributedInsightSchema,
   synthesizeResearch
-} from "./chunk-5WY3N7VX.js";
+} from "./chunk-Z7IQUUTZ.js";
 import "./chunk-NUBSJGQZ.js";
-import "./chunk-M774MKHE.js";
+import "./chunk-KLYBJUTK.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=research-helpers-synthesize-OKNU245Z.js.map
+//# sourceMappingURL=research-helpers-synthesize-IABO7LB4.js.map

package/dist/{routing-memory-3QXWGWB5.js → routing-memory-2YWEWRMQ.js}

@@ -2,7 +2,7 @@ import {
   DEFAULT_ROUTING_MEMORY_CONFIG,
   RoutingMemory,
   createRoutingMemory
-} from "./chunk-M774MKHE.js";
+} from "./chunk-KLYBJUTK.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -10,4 +10,4 @@ export {
   RoutingMemory,
   createRoutingMemory
 };
-//# sourceMappingURL=routing-memory-3QXWGWB5.js.map
+//# sourceMappingURL=routing-memory-2YWEWRMQ.js.map

package/dist/{session-memory-AK4AJXGI.js → session-memory-YWOMPCLZ.js}

@@ -6,8 +6,8 @@ import {
   SessionMemory,
   SessionMemoryError,
   createSessionMemory
-} from "./chunk-DLNCQO6L.js";
-import "./chunk-M774MKHE.js";
+} from "./chunk-MNFEZIRI.js";
+import "./chunk-KLYBJUTK.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -19,4 +19,4 @@ export {
   SessionMemoryError,
   createSessionMemory
 };
-//# sourceMappingURL=session-memory-AK4AJXGI.js.map
+//# sourceMappingURL=session-memory-YWOMPCLZ.js.map