nexus-agents 2.134.0 → 2.136.0

package/dist/{chunk-76R5ES6Z.js → chunk-6JOXXQK2.js}

@@ -1,6 +1,9 @@
 import {
   generateSecurityPlan
-} from "./chunk-Z6DXZ6AS.js";
+} from "./chunk-3JSDOBOA.js";
+import {
+  analyzeGitHubRepo
+} from "./chunk-HFOQKCD2.js";
 import {
   CodebaseIndex,
   extractSymbolIndex,
@@ -11,9 +14,14 @@ import {
   SARIF_LEVEL_MAP,
   SEVERITY_ORDER
 } from "./chunk-WAYGXUSM.js";
+import {
+  DEFAULT_TASK_TTL_MS,
+  DEFAULT_TOOL_RATE_LIMITS,
+  clampTaskTtl
+} from "./chunk-66TXNH4S.js";
 import {
   executeExpert
-} from "./chunk-VI7LELES.js";
+} from "./chunk-UH3F4RZB.js";
 import {
   JobStatusSchema,
   collectRealVotes,
@@ -32,24 +40,24 @@ import {
   toJobSummary,
   warnIfSimulatedOutsideTests,
   writeJobCancelled
-} from "./chunk-DLUFDKPA.js";
+} from "./chunk-N67LHY47.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-UDB5NHJI.js";
+} from "./chunk-4GVPON4W.js";
 import {
   IssueTriage,
   createAuditTrail,
   createGraphAuditBridge,
   emitPipelinePolicyEvent
-} from "./chunk-FUJ3XR7T.js";
+} from "./chunk-3AAJWZCR.js";
 import {
   resolveEnvMode,
   sanitizeInput
-} from "./chunk-EHLJLIHS.js";
+} from "./chunk-FSUZIIOJ.js";
 import {
   withPrerequisite
-} from "./chunk-7TQZR5VU.js";
+} from "./chunk-3WBEEYCS.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -71,10 +79,7 @@ import {
   withAccessPolicy,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-6UCWR3DS.js";
-import {
-  analyzeGitHubRepo
-} from "./chunk-HFOQKCD2.js";
+} from "./chunk-JVZ7FGWR.js";
 import {
   addResearchPaper,
   addSourceToRegistry,
@@ -102,36 +107,31 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-QZUT22LP.js";
+} from "./chunk-5546JU53.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-MY52DFXC.js";
+} from "./chunk-FHFEC2XM.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry
-} from "./chunk-B26FGLIJ.js";
+} from "./chunk-ZHCEOIEQ.js";
+import {
+  resolveInsideRoot
+} from "./chunk-NUBSJGQZ.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-33MFMXBQ.js";
-import {
-  createSessionMemory
-} from "./chunk-FPMQ2JAK.js";
-import {
-  DEFAULT_TASK_TTL_MS,
-  DEFAULT_TOOL_RATE_LIMITS,
-  clampTaskTtl
-} from "./chunk-7GSYICTL.js";
-import {
-  resolveInsideRoot
-} from "./chunk-NUBSJGQZ.js";
+} from "./chunk-ESP6U3LW.js";
 import {
   STOPWORDS,
   truncateWithInfo
 } from "./chunk-6T3EPABN.js";
+import {
+  createSessionMemory
+} from "./chunk-3QH2KWLH.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -140,13 +140,13 @@ import {
 } from "./chunk-ZM4O442V.js";
 import {
   getMemoryRegistry
-} from "./chunk-PQHVC4BD.js";
+} from "./chunk-2XRPKJKX.js";
 import {
   EventTopics,
   createEvent,
   getGlobalEventBus,
   getGlobalRegistry
-} from "./chunk-WYJJUF6N.js";
+} from "./chunk-HMZT2SJK.js";
 import {
   CliDetectionCache,
   asRecord,
@@ -154,19 +154,19 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-3EYXPV5F.js";
+} from "./chunk-GWOXPCIF.js";
 import {
   DEFAULTS
-} from "./chunk-ZMDOGN33.js";
+} from "./chunk-7E5UXA4U.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-PFBV5FCT.js";
+} from "./chunk-KOVTOPEQ.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-ORQAFTAZ.js";
+} from "./chunk-FIQSOSQU.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -258,14 +258,16 @@ import {
   selectStrategyByManifest,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-DBDWMHUL.js";
+} from "./chunk-OCJEYHUQ.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
-  isPersistenceEnabled,
+  isPersistenceEnabled
+} from "./chunk-5SXGPX34.js";
+import {
   nexusDataPath,
   nexusDataPathEnsure
-} from "./chunk-GZ4NF4ZW.js";
+} from "./chunk-L4QFWOOQ.js";
 
 // src/agents/state-machine-types.ts
 var VALID_TRANSITIONS = /* @__PURE__ */ new Map([
@@ -2555,13 +2557,13 @@ function makeCancelError(taskId) {
 }
 function executeWithTimeout(params) {
   const { task, maxDurationMs, executeTask, transformError, signal } = params;
-  return new Promise((resolve18) => {
+  return new Promise((resolve19) => {
     let settled = false;
     const settle = (result) => {
       if (settled) return;
       settled = true;
       clearTimeout(timeoutId);
-      resolve18(result);
+      resolve19(result);
     };
     const timeoutId = setTimeout(() => {
       settle(
@@ -7971,13 +7973,13 @@ var WaveScheduler = class {
   }
   async withTimeout(promise, timeoutMs, taskId) {
     if (timeoutMs <= 0) return promise;
-    return new Promise((resolve18, reject) => {
+    return new Promise((resolve19, reject) => {
       const timer = setTimeout(() => {
         reject(new Error(`Task ${taskId} timed out after ${String(timeoutMs)}ms`));
       }, timeoutMs);
       promise.then((result) => {
         clearTimeout(timer);
-        resolve18(result);
+        resolve19(result);
       }).catch((error) => {
         clearTimeout(timer);
         reject(error instanceof Error ? error : new Error(String(error)));
@@ -14911,8 +14913,8 @@ var Semaphore = class {
       this.available -= 1;
       return Promise.resolve();
     }
-    return new Promise((resolve18) => {
-      this.waiters.push(resolve18);
+    return new Promise((resolve19) => {
+      this.waiters.push(resolve19);
     });
   }
   release() {
@@ -18345,9 +18347,9 @@ var ExpertPool = class {
     if (this.active < this.capacity) {
       return this.issuePermit();
     }
-    return new Promise((resolve18, reject) => {
+    return new Promise((resolve19, reject) => {
       const timer = setTimeout(() => {
-        const idx = this.queue.findIndex((e) => e.resolve === resolve18);
+        const idx = this.queue.findIndex((e) => e.resolve === resolve19);
         if (idx !== -1) {
           this.queue.splice(idx, 1);
         }
@@ -18357,7 +18359,7 @@ var ExpertPool = class {
           )
         );
       }, this.acquireTimeoutMs);
-      this.queue.push({ resolve: resolve18, reject, timer });
+      this.queue.push({ resolve: resolve19, reject, timer });
     });
   }
   /** Release a permit back to the pool. */
@@ -18941,8 +18943,8 @@ var TaskQueue = class {
     if (this.cancelled) {
       return Promise.reject(new Error("Queue has been cancelled"));
     }
-    return new Promise((resolve18, reject) => {
-      this.queue.push({ task, resolve: resolve18, reject });
+    return new Promise((resolve19, reject) => {
+      this.queue.push({ task, resolve: resolve19, reject });
       this.processNext();
     });
   }
@@ -19218,16 +19220,16 @@ async function executeStepWithTimeout(step, context, stepExecutor, signal) {
   return executeWithTimeout2(step, stepContext, stepExecutor, stepTimeout, startTime);
 }
 function executeWithTimeout2(step, context, executor, timeout, startTime) {
-  return new Promise((resolve18) => {
+  return new Promise((resolve19) => {
     const timeoutId = setTimeout(() => {
-      resolve18(createTimeoutResult(step.id, getTimeProvider().now() - startTime, timeout));
+      resolve19(createTimeoutResult(step.id, getTimeProvider().now() - startTime, timeout));
     }, timeout);
     executor(step, context).then((result) => {
       clearTimeout(timeoutId);
-      resolve18(result);
+      resolve19(result);
     }).catch((error) => {
       clearTimeout(timeoutId);
-      resolve18(createErrorResult(step.id, getTimeProvider().now() - startTime, error));
+      resolve19(createErrorResult(step.id, getTimeProvider().now() - startTime, error));
     });
   });
 }
@@ -23634,10 +23636,10 @@ function calculateZStatistic(params) {
 function calculateDifferenceCI(p1, p2, total1, total2, confidence) {
   const difference = p1 - p2;
   const seDiff = Math.sqrt(p1 * (1 - p1) / (total1 || 1) + p2 * (1 - p2) / (total2 || 1));
-  const z115 = getZScore(confidence);
+  const z116 = getZScore(confidence);
   return {
-    lower: difference - z115 * seDiff,
-    upper: difference + z115 * seDiff,
+    lower: difference - z116 * seDiff,
+    upper: difference + z116 * seDiff,
     estimate: difference,
     confidence,
     n: total1 + total2,
@@ -23660,11 +23662,11 @@ function proportionConfidenceInterval(successes, total, options = {}) {
       standardError: 0
     };
   }
-  const z115 = getZScore(opts.confidence);
-  const z210 = z115 * z115;
+  const z116 = getZScore(opts.confidence);
+  const z210 = z116 * z116;
   const denominator = 1 + z210 / n;
   const center = (p + z210 / (2 * n)) / denominator;
-  const margin = z115 / denominator * Math.sqrt(p * (1 - p) / n + z210 / (4 * n * n));
+  const margin = z116 / denominator * Math.sqrt(p * (1 - p) / n + z210 / (4 * n * n));
   const lower = Math.max(0, center - margin);
   const upper = Math.min(1, center + margin);
   const standardError = Math.sqrt(p * (1 - p) / n);
@@ -23694,8 +23696,8 @@ function meanConfidenceInterval(values, options = {}) {
   const variance = values.reduce((sum, v) => sum + (v - mean) ** 2, 0) / (n - 1 || 1);
   const stdDev = Math.sqrt(variance);
   const standardError = stdDev / Math.sqrt(n);
-  const z115 = getZScore(opts.confidence);
-  const margin = z115 * standardError;
+  const z116 = getZScore(opts.confidence);
+  const margin = z116 * standardError;
   return {
     lower: mean - margin,
     upper: mean + margin,
@@ -25144,20 +25146,22 @@ function recordExpertError(role, errorMessage2) {
 }
 
 // src/mcp/tools/create-expert.ts
+var CREATE_EXPERT_ROLES = [
+  "code_expert",
+  "architecture_expert",
+  "security_expert",
+  "documentation_expert",
+  "testing_expert",
+  "devops_expert",
+  "research_expert",
+  "pm_expert",
+  "ux_expert",
+  "infrastructure_expert",
+  "qa_expert",
+  "data_visualization_expert"
+];
 var CreateExpertInputSchema = z43.object({
-  role: z43.enum([
-    "code_expert",
-    "architecture_expert",
-    "security_expert",
-    "documentation_expert",
-    "testing_expert",
-    "devops_expert",
-    "research_expert",
-    "pm_expert",
-    "ux_expert",
-    "infrastructure_expert",
-    "data_visualization_expert"
-  ]).describe("Expert role to create"),
+  role: z43.enum(CREATE_EXPERT_ROLES).describe("Expert role to create"),
   modelPreference: z43.string().max(100).optional().describe("Preferred model (e.g., claude-sonnet-4)")
 });
 var MAX_EXPERTS = 100;
@@ -25268,21 +25272,12 @@ function createCreateExpertHandler(deps) {
 function registerCreateExpertTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "create_expert" });
   const toolSchema = {
-    role: z43.enum([
-      "code_expert",
-      "architecture_expert",
-      "security_expert",
-      "documentation_expert",
-      "testing_expert",
-      "devops_expert",
-      "research_expert",
-      "pm_expert",
-      "ux_expert",
-      "infrastructure_expert"
-    ]).describe("Expert role to create"),
+    // Derived from the single-source CREATE_EXPERT_ROLES so the registered enum
+    // can never drift from the exported CreateExpertInputSchema (#3978).
+    role: z43.enum(CREATE_EXPERT_ROLES).describe("Expert role to create"),
     modelPreference: z43.string().max(100).optional().describe("Preferred model (e.g., claude-sonnet-4)")
   };
-  const description = "Create a specialized expert agent for code, architecture, security, documentation, testing, devops, research, product management, UX, or infrastructure tasks";
+  const description = "Create a specialized expert agent for code, architecture, security, documentation, testing, devops, research, product management, UX, infrastructure, quality assurance (QA), or data visualization tasks";
   const secureHandler = createSecureHandler(createCreateExpertHandler(deps), {
     toolName: "create_expert",
     rateLimiter: deps.rateLimiter,
@@ -25886,7 +25881,7 @@ function registerRunWorkflowTool(server, deps) {
   server.registerTool(
     "run_workflow",
     {
-      description: "Run a LINEAR (single-path) workflow template by name with typed inputs. For DAG-shaped workflows with branching, checkpoints, or rollback, use `run_graph_workflow` instead.",
+      description: "Run a LINEAR (single-path) workflow template by name with typed inputs. For DAG-shaped workflows with branching, checkpoints, or rollback, use `run_graph_workflow` instead. Supports mode: 'async' (non-dryRun runs) \u2014 returns a jobId immediately; poll get_job_result.",
       inputSchema: toolInputSchema,
       annotations: getToolAnnotations("run_workflow")
     },
@@ -26297,7 +26292,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-I4NEOUEV.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-NIFXFYPQ.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -26794,13 +26789,13 @@ function dedupe(ids) {
   return [...new Set(ids)];
 }
 async function withTimeout2(promise, ms) {
-  return new Promise((resolve18, reject) => {
+  return new Promise((resolve19, reject) => {
     const timer = setTimeout(() => {
       reject(new Error(`Node timed out after ${String(ms)}ms`));
     }, ms);
     promise.then((result) => {
       clearTimeout(timer);
-      resolve18(result);
+      resolve19(result);
     }).catch((error) => {
       clearTimeout(timer);
       reject(error instanceof Error ? error : new Error(String(error)));
@@ -29218,11 +29213,11 @@ function createMockOrchestrator() {
 async function raceAgainstDeadline(promise, deadlineMs, onTimeout) {
   const startedAt = Date.now();
   let timer;
-  const timeoutP = new Promise((resolve18, reject) => {
+  const timeoutP = new Promise((resolve19, reject) => {
     timer = setTimeout(
       () => {
         try {
-          resolve18(onTimeout(Date.now() - startedAt));
+          resolve19(onTimeout(Date.now() - startedAt));
         } catch (err2) {
           reject(err2 instanceof Error ? err2 : new Error(String(err2)));
         }
@@ -30425,11 +30420,11 @@ function createWorkerTask(entry, taskIndex, waveNumber, opts) {
     const staggerSlot = taskIndex % opts.maxConcurrency;
     const staggerMs = staggerSlot * opts.staggerDelayMs;
     if (staggerMs > 0) {
-      await new Promise((resolve18) => setTimeout(resolve18, staggerMs));
+      await new Promise((resolve19) => setTimeout(resolve19, staggerMs));
     }
     const spacingDelay = opts.failureTracker.getSpacingDelay(entry.role);
     if (spacingDelay > 0) {
-      await new Promise((resolve18) => setTimeout(resolve18, spacingDelay));
+      await new Promise((resolve19) => setTimeout(resolve19, spacingDelay));
     }
     const timeoutMs = opts.options.workerTimeoutMs ?? getExpertTaskTimeout(entry.subTask);
     const result = await executeSafe({
@@ -30481,7 +30476,7 @@ async function maybeDelayForRateLimit(results, waveIdx, totalWaves) {
   );
   if (hasRateLimit) {
     logger25.warn("Rate-limit detected \u2014 delaying next wave", { delayMs: RATE_LIMIT_WAVE_DELAY_MS });
-    await new Promise((resolve18) => setTimeout(resolve18, RATE_LIMIT_WAVE_DELAY_MS));
+    await new Promise((resolve19) => setTimeout(resolve19, RATE_LIMIT_WAVE_DELAY_MS));
   }
 }
 function emitWaveStarted(ctx, workerCount, roles) {
@@ -30579,7 +30574,7 @@ async function maybeRetryAfterTriage(opts) {
   }
   const useAltCli = triage.action === "retry_different_cli" && altExecuteWorker !== void 0;
   if (triage.action === "retry_different_cli") {
-    await new Promise((resolve18) => setTimeout(resolve18, RATE_LIMIT_SPACING_MS));
+    await new Promise((resolve19) => setTimeout(resolve19, RATE_LIMIT_SPACING_MS));
   }
   const retryTimeout = triage.action === "extend_timeout" ? Math.min(timeoutMs * TIMEOUT_EXTENSION_FACTOR, MAX_WORKER_TIMEOUT_MS) : timeoutMs;
   const retryExecutor = useAltCli ? altExecuteWorker : executeWorker;
@@ -34431,7 +34426,7 @@ function registerDelegateToModelTool(server, deps) {
   server.registerTool(
     "delegate_to_model",
     {
-      description: "Pick which EXISTING model should handle a task. Inspects task complexity and returns the best-fit model from the routing registry \u2014 does NOT add a new model. Read-only. (For drafting a registry entry for a new model, use `registry_import`.)",
+      description: "Pick which EXISTING model should handle a task. Inspects task complexity and returns the best-fit model from the routing registry \u2014 does NOT add a new model. Records the routing decision to tool-memory for learning feedback (not a pure read). (For drafting a registry entry for a new model, use `registry_import`.)",
       inputSchema: TOOL_SCHEMA,
       outputSchema: DelegateOutputSchema.shape,
       annotations: getToolAnnotations("delegate_to_model")
@@ -36495,7 +36490,7 @@ var ResearchAddSourceInputSchema = z61.object({
     has_tests: z61.boolean().optional(),
     has_docs: z61.boolean().optional(),
     has_paper: z61.boolean().optional()
-  }).optional().describe("Quality signals (auto-fetched for GitHub repos if omitted)"),
+  }).optional().describe("Quality signals used to compute quality_score; provide explicitly \u2014 no GitHub metadata is fetched"),
   techniques_extracted: z61.array(z61.string().max(100)).max(5).optional().describe("Techniques identified in this source (max 5)"),
   verdict: VerdictEnum.optional().describe("Adoption verdict"),
   verdict_notes: z61.string().max(500).optional().describe("Notes explaining the verdict"),
@@ -37460,7 +37455,7 @@ function registerResearchCatalogReviewTool(server, deps) {
     topic: z64.string().optional().describe("Topic for approved papers"),
     createIssue: z64.boolean().optional().describe("Create GitHub issue when approving")
   };
-  const description = "Review auto-cataloged research references found during tool execution. List pending references, approve them for registry addition, dismiss, or clear all.";
+  const description = "Review auto-cataloged research references found during tool execution. List pending references, approve them for registry addition (optionally filing a GitHub issue), dismiss, or clear all.";
   const secureHandler = createSecureHandler(createCatalogReviewHandler(deps), {
     toolName: "research_catalog_review",
     rateLimiter: deps.rateLimiter,
@@ -37779,7 +37774,7 @@ async function handleRunGraphWorkflow(input, logger57) {
     checkpointCount
   };
 }
-var GRAPH_WORKFLOW_DESCRIPTION = "Run a DAG-shaped workflow with per-node checkpoints, event streaming, and an audit trail. Checkpoints drive the executor in-process recovery (crash-resume + selective node retry) and inspection \u2014 the MCP call is fire-and-forget with NO caller resume input, and the checkpoint store is in-memory (not durable across process restarts). For straight linear templates, use `run_workflow` instead.";
+var GRAPH_WORKFLOW_DESCRIPTION = "Run a DAG-shaped workflow with per-node checkpoints, event streaming, and an audit trail. Checkpoints drive the executor in-process recovery (crash-resume + selective node retry) and inspection \u2014 the MCP call is fire-and-forget with NO caller resume input, and the checkpoint store is in-memory (not durable across process restarts). For straight linear templates, use `run_workflow` instead. Supports dispatch: 'async' \u2014 returns a jobId immediately; poll get_job_result.";
 var GRAPH_WORKFLOW_SCHEMA = {
   workflow: z67.string().min(1).max(100).describe(
     'Workflow name: echo, pipeline, code-review, security-scan. Use "list" for available workflows.'
@@ -38953,7 +38948,7 @@ function registerMemoryWriteTool(server, deps) {
     confidence: z71.enum(["high", "medium", "low"]).optional().describe("Confidence level (default: medium)"),
     metadata: z71.record(z71.string().max(100), z71.string().max(500)).optional().describe("Optional key-value metadata tags")
   };
-  const description = "Write a memory entry to a specific backend. Supports session (learnings), belief (subject-predicate-object triples), agentic (knowledge with attributes), adaptive (priority-scored), and typed (MIRIX-style semantic) backends.";
+  const description = "Write a memory entry to a specific backend. Supports session (learnings), belief assertions (subject + object; predicate fixed as `has_knowledge`), agentic (knowledge with attributes), adaptive (priority-scored), and typed (MIRIX-style semantic) backends.";
   const secureHandler = createSecureHandler(memoryWriteHandler, {
     toolName: "memory_write",
     rateLimiter: deps.rateLimiter,
@@ -39072,8 +39067,8 @@ var RegistryImportInputSchema = z73.object({
   provider: z73.enum(["anthropic", "google", "openai"]).describe("Model provider (anthropic, google, openai)"),
   /** Model identifier from the provider (e.g., "claude-4-opus-20260201"). */
   modelId: z73.string().min(1).describe("Provider model identifier"),
-  /** Preview without persisting (default: true). */
-  dryRun: z73.boolean().optional().default(true).describe("Preview without persisting")
+  /** No-op flag echoed back in the response; the tool never persists regardless. */
+  dryRun: z73.boolean().optional().default(true).describe("No-op flag echoed back in the response; the tool never persists regardless")
 });
 
 // src/mcp/tools/registry-import-tool.ts
@@ -39189,9 +39184,9 @@ function registerRegistryImportTool(server, deps) {
   const toolSchema = {
     provider: z74.enum(["anthropic", "google", "openai"]).describe("Model provider (anthropic, google, openai)"),
     modelId: z74.string().min(1).describe("Provider model identifier"),
-    dryRun: z74.boolean().optional().describe("Preview without persisting (default: true)")
+    dryRun: z74.boolean().optional().describe("No-op flag echoed back in the response; the tool never persists regardless")
   };
-  const description = "Draft a registry ENTRY for a NEW model so routing can consider it later. Generates a ModelCapability YAML with conservative quality scores (5/10) for human review. For picking among ALREADY-registered models, use `delegate_to_model`. Use dryRun=true (default) to preview the entry without saving.";
+  const description = "Draft a registry ENTRY for a NEW model so routing can consider it later. Generates a ModelCapability YAML with conservative quality scores (5/10) for human review. Always returns a draft entry for human review (never persists). For picking among ALREADY-registered models, use `delegate_to_model`.";
   const secureHandler = createSecureHandler(registryImportHandler, {
     toolName: "registry_import",
     rateLimiter: deps.rateLimiter,
@@ -39219,8 +39214,12 @@ var RepoAnalyzeInputSchema = z75.object({
     (v) => !v.includes("://") || /^https?:\/\//i.test(v),
     "Only HTTP/HTTPS URLs are allowed"
   ).describe('GitHub repository in "owner/name" format (e.g., "cloudfoundry/korifi") or full URL'),
-  /** Analysis depth: shallow (tree + README) or deep (full analysis). */
-  depth: z75.enum(["shallow", "deep"]).optional().default("shallow").describe("Analysis depth: shallow (tree + README) or deep (full analysis)")
+  /**
+   * Currently a no-op: the handler ignores this flag and always runs the full
+   * analysis. Both values resolve to identical behavior; retained for input-shape
+   * stability until a distinct shallow path is implemented.
+   */
+  depth: z75.enum(["shallow", "deep"]).optional().default("shallow").describe("Currently a no-op \u2014 the handler always runs the full analysis (both values identical)")
 });
 
 // src/mcp/tools/repo-analyze-tool.ts
@@ -39244,7 +39243,7 @@ function registerRepoAnalyzeTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "repo_analyze" });
   const toolSchema = {
     repo: z76.string().min(1).describe('GitHub repository in "owner/name" format or full URL'),
-    depth: z76.enum(["shallow", "deep"]).optional().describe("Analysis depth: shallow (tree + README) or deep")
+    depth: z76.enum(["shallow", "deep"]).optional().describe("Currently a no-op \u2014 the handler always runs the full analysis (both values identical)")
   };
   const description = "Analyze a GitHub repository structure. Returns language, framework, package manager, CI provider, security tooling, Dockerfile/Helm/Makefile detection, and gap identification. Replaces multi-step manual inspection with a single structured query.";
   const secureHandler = createSecureHandler(repoAnalyzeHandler, {
@@ -40469,27 +40468,27 @@ var FileAuditStorage = class _FileAuditStorage {
     const data = this.writeBuffer.join("");
     this.writeBuffer = [];
     const stream = this.writeStream;
-    return new Promise((resolve18, reject) => {
+    return new Promise((resolve19, reject) => {
       stream.write(data, (err2) => {
         if (err2 !== void 0 && err2 !== null) {
           reject(new AuditError("Failed to flush audit log", { cause: err2 }));
         } else {
-          resolve18();
+          resolve19();
         }
       });
     });
   }
   async close() {
     await this.flush();
-    return new Promise((resolve18) => {
+    return new Promise((resolve19) => {
       if (this.writeStream === null) {
-        resolve18();
+        resolve19();
         return;
       }
       this.writeStream.end(() => {
         this.writeStream = null;
         this.logger.info("Audit storage closed");
-        resolve18();
+        resolve19();
       });
     });
   }
@@ -41390,7 +41389,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-NJB6SL4S.js");
+    const { createIssueTriage } = await import("./issue-triage-7RN74LBU.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -41418,7 +41417,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-GMB5IHHF.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-NY6FAFQH.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -43184,8 +43183,8 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-GMQYZLJE.js");
-    const { getLearningDir } = await import("./learning-persistence-2KO4CXNL.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-WZCS7WDH.js");
+    const { getLearningDir } = await import("./learning-persistence-EHTHKWR5.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
     cachedMemory = {
@@ -43246,7 +43245,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-VVLJL3MG.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-RAYIYIUP.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -43280,7 +43279,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-OU65NJS3.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-TEBEALS7.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -43298,8 +43297,8 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-GMQYZLJE.js");
-    const { getLearningDir } = await import("./learning-persistence-2KO4CXNL.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-WZCS7WDH.js");
+    const { getLearningDir } = await import("./learning-persistence-EHTHKWR5.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
     if (learnings.length === 0) return "";
@@ -43410,7 +43409,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-R6X5IL57.js");
+        const { executeVoting } = await import("./consensus-vote-K2SHY4TC.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -43847,7 +43846,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-5TLNHT3I.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-WH4IC36H.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -43918,7 +43917,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-U2ZIFW53.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-76IXMJNC.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -45387,9 +45386,9 @@ var RESEARCH_BUDGET_MS = 2e4;
 var RESEARCH_TIMED_OUT = /* @__PURE__ */ Symbol("research-budget-exceeded");
 async function withResearchBudget(p, ms) {
   let timer;
-  const budget = new Promise((resolve18) => {
+  const budget = new Promise((resolve19) => {
     timer = setTimeout(() => {
-      resolve18(RESEARCH_TIMED_OUT);
+      resolve19(RESEARCH_TIMED_OUT);
     }, ms);
   });
   try {
@@ -46024,7 +46023,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-WR62MEIJ.js");
+    const { createScmProvider } = await import("./factory-6A26HIWS.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -46274,7 +46273,7 @@ function buildStructuredOutput(result) {
     }))
   };
 }
-var RUN_DEV_PIPELINE_DESCRIPTION = "Run the multi-agent development pipeline. Accepts direct task instructions, a plan file, or a spec file. Supports dry-run (plan+vote only).";
+var RUN_DEV_PIPELINE_DESCRIPTION = "Run the multi-agent development pipeline. Accepts direct task instructions, a plan file, or a spec file. Supports dry-run (plan+vote only). Supports dispatch: 'async' (non-dryRun runs) \u2014 returns a jobId immediately; poll get_job_result.";
 function buildPipelineOptions(input, trustTier, auditLogger) {
   return {
     ...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {},
@@ -46487,7 +46486,7 @@ function selectStageRegistry(template, task, agentStages) {
   }
   return createDevStageRegistry(agentStages);
 }
-var RUN_PIPELINE_DESCRIPTION = `Single unified entry point for all pipeline templates (${listTemplateIds().join("/")}). Auto-detects template from task content or accepts an explicit override.`;
+var RUN_PIPELINE_DESCRIPTION = `Single unified entry point for all pipeline templates (${listTemplateIds().join("/")}). Auto-detects template from task content or accepts an explicit override. Supports dispatch: 'async' (non-dryRun runs) \u2014 returns a jobId immediately; poll get_job_result.`;
 async function runPipelineForGoal(goal, logger57 = createLogger({ tool: "run_pipeline" })) {
   const budget = resolveRunBudget(goal, void 0, logger57);
   const agentStages = createAgentStages(budget !== void 0 ? { budget } : {});
@@ -46789,7 +46788,7 @@ async function probeSource(source, includeModelIds) {
   }
 }
 async function defaultSources(includeOpenRouter) {
-  const { createAllAdapters: createAllAdapters2 } = await import("./factory-ZBQGA373.js");
+  const { createAllAdapters: createAllAdapters2 } = await import("./factory-GGSACEWN.js");
   const adapters = createAllAdapters2();
   return buildDefaultModelSources(adapters, { includeOpenRouter });
 }
@@ -49355,6 +49354,66 @@ function computeOutcomeReward(collector, outcome) {
   return collector.computeReward(outcome);
 }
 
+// src/audit/pr-review-record.ts
+import * as crypto2 from "crypto";
+import { z as z115 } from "zod";
+var PrReviewVerdictSchema = z115.enum(["approve", "request_changes", "abstain"]);
+var PrReviewVoteCountsSchema = z115.object({
+  approve: z115.number().int().nonnegative(),
+  request_changes: z115.number().int().nonnegative(),
+  abstain: z115.number().int().nonnegative(),
+  error: z115.number().int().nonnegative(),
+  total: z115.number().int().nonnegative()
+}).strict();
+var PrReviewRecordSchema = z115.object({
+  /** Schema version. '1.0' is the initial record-set+sequence model (#3831). */
+  version: z115.literal("1.0"),
+  /**
+   * Monotonic sequence number (integer ≥ 0). Assigned as (max existing
+   * sequence)+1 at write time. Sorted, the set of sequences must cover
+   * 0..maxSeq with no gap (omission detection); DUPLICATE sequences are a
+   * benign concurrent-fork signal, not tampering.
+   */
+  sequence: z115.number().int().nonnegative(),
+  /** The PR number the review covers. */
+  prNumber: z115.number().int().positive(),
+  /**
+   * The 40-hex head commit SHA the review was run against. SHA-BINDING
+   * (condition 1): the gate matches THIS sha — a record for a stale head does
+   * NOT satisfy a later push, and the hash below covers it so it cannot be
+   * edited to claim a different reviewed sha.
+   */
+  headSha: z115.string().regex(/^[0-9a-f]{40}$/, "headSha must be a 40-char lowercase hex commit sha"),
+  /** ISO-8601 timestamp the review was recorded. */
+  recordedAt: z115.string().min(1),
+  /** The resolved aggregate verdict. */
+  verdict: PrReviewVerdictSchema,
+  /**
+   * Whether the aggregate carried a VERIFIED finding (the 4-point gate). A
+   * `request_changes` with `verified: true` is a strict blocker; covered by the
+   * hash so it cannot be flipped without detection.
+   */
+  verified: z115.boolean(),
+  /** Per-decision voter tally from the pr_review aggregate. */
+  voteCounts: PrReviewVoteCountsSchema,
+  /** Truncated human-readable review summary for the reviewer record. */
+  summary: z115.string(),
+  /** Optional correlation/decision id linking to the cost rollup / trace. */
+  correlationId: z115.string().min(1).optional(),
+  /**
+   * ADVISORY hash of the tip record at write time (absent for the first).
+   * Retained for audit texture but NOT covered by `hash` and NOT verified —
+   * the record-set model is position-independent (mirrors #3927).
+   */
+  previousHash: z115.string().length(64).optional(),
+  /** SHA-256 over every field above EXCEPT `previousHash` (and except `hash`). */
+  hash: z115.string().length(64)
+}).strict();
+
+// src/audit/pr-review-record-store.ts
+import { existsSync as existsSync12, readFileSync as readFileSync10 } from "fs";
+import { isAbsolute, join as join10, resolve as resolve17 } from "path";
+
 // src/security/sandbox/sandbox-types.ts
 var DEFAULT_RESOURCE_LIMITS = {
   maxMemoryBytes: 512 * 1024 * 1024,
@@ -49770,7 +49829,7 @@ function getPolicy(id) {
 // src/security/sandbox/sandbox-executor.ts
 import { execFile } from "child_process";
 import { promisify } from "util";
-import { resolve as resolve17, normalize as normalize2, sep as sep11 } from "path";
+import { resolve as resolve18, normalize as normalize2, sep as sep11 } from "path";
 var execFileAsync = promisify(execFile);
 var logger51 = createLogger({ component: "sandbox-executor" });
 function parseExecError(error) {
@@ -49850,9 +49909,9 @@ var PolicySandboxExecutor = class {
    */
   validateCwd(cwd, policy) {
     if (cwd === void 0) return null;
-    const normalizedCwd = normalize2(resolve17(cwd));
+    const normalizedCwd = normalize2(resolve18(cwd));
     const isAllowed = policy.pathRules.some((rule) => {
-      const normalizedRule = normalize2(resolve17(rule.path));
+      const normalizedRule = normalize2(resolve18(rule.path));
       const isUnderRule = normalizedCwd === normalizedRule || normalizedCwd.startsWith(normalizedRule + sep11);
       return isUnderRule && rule.access !== "none";
     });
@@ -50852,4 +50911,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-76R5ES6Z.js.map
+//# sourceMappingURL=chunk-6JOXXQK2.js.map