nexus-agents 2.56.0 → 2.58.0

package/dist/cli.js

@@ -12,12 +12,12 @@ import {
   parseFindings,
   sumFindings
 } from "./chunk-6E3NMMEY.js";
-import "./chunk-4FVISCDB.js";
+import "./chunk-6QU4DJYW.js";
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-KGMC6F5D.js";
-import "./chunk-EKYT4NMD.js";
+} from "./chunk-GJ5BJU7A.js";
+import "./chunk-QGZBCD2A.js";
 import {
   AuthHandler,
   DEFAULT_EXPERTS,
@@ -131,6 +131,7 @@ import {
   registerRunWorkflowTool,
   registerSearchCodebaseTool,
   registerTools,
+  registerVerifyAuditChainTool,
   registerWeatherReportTool,
   resolveV2Config,
   runBenchmarkInstances,
@@ -141,10 +142,10 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-EJLWDYK7.js";
+} from "./chunk-JLYJQ7OG.js";
 import {
   resolveToken
-} from "./chunk-2SPRLBOS.js";
+} from "./chunk-EZXOJZYE.js";
 import {
   CATEGORY_DISPLAY_NAMES,
   DEFAULT_PR_REVIEW_CONFIG
@@ -160,30 +161,29 @@ import {
   registerConsensusVoteTool,
   shutdownToolMemory,
   validateTimeout
-} from "./chunk-BPMQRYGU.js";
-import "./chunk-R66AWJJ7.js";
+} from "./chunk-L3NHOUEX.js";
+import "./chunk-YU4NABXM.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   savePapersRegistry,
   synthesizeResearch
-} from "./chunk-PCMWLXT4.js";
+} from "./chunk-TC46TRLR.js";
 import {
   classifyTrust,
   createFullGitHubProvider,
   evaluatePolicy,
   parsePRUrl,
   sanitizeInput
-} from "./chunk-FWSTXEG2.js";
-import "./chunk-IOU7F5PH.js";
-import "./chunk-Q5TKQWOI.js";
+} from "./chunk-AFSIP6JH.js";
+import "./chunk-K7EA5OV4.js";
+import "./chunk-V5CGWMYL.js";
 import "./chunk-BC3M4VLP.js";
 import "./chunk-AP2FD37C.js";
 import "./chunk-BQ4YXGGQ.js";
 import "./chunk-ED6VQWNG.js";
 import {
   CustomExpertDefinitionSchema,
-  DEFAULTS,
   MAX_SYSTEM_PROMPT_LENGTH,
   VALID_EXPERT_DOMAINS,
   VALID_EXPERT_TIERS,
@@ -199,27 +199,30 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-C3FGEDD7.js";
+} from "./chunk-7EYQBG3W.js";
+import {
+  DEFAULTS
+} from "./chunk-H43PABG4.js";
 import "./chunk-NUBSJGQZ.js";
 import "./chunk-GJVHRJO2.js";
-import "./chunk-NYNBDP7M.js";
+import "./chunk-7Y36JLES.js";
 import {
   MemoryError
-} from "./chunk-3IDJSFWT.js";
+} from "./chunk-TFEFN37P.js";
 import {
   capitalize,
   capitalizeKebab,
   truncateSentence
 } from "./chunk-633WH2ML.js";
-import "./chunk-VKZKC4SM.js";
-import "./chunk-KRIFBGWZ.js";
-import "./chunk-VLVHPC72.js";
+import "./chunk-EDGG3RQE.js";
+import "./chunk-PTGBJFSD.js";
+import "./chunk-JKDHWOQL.js";
 import {
   createAllAdapters,
   getAvailableClis,
   isRecord
-} from "./chunk-RSUCXOQM.js";
-import "./chunk-W5AJRK4U.js";
+} from "./chunk-YQAOMDR2.js";
+import "./chunk-GMOGKX4E.js";
 import {
   API_TIMEOUTS,
   AgentCapability,
@@ -284,7 +287,7 @@ import {
   toError,
   writeEmptyLine,
   writeLine
-} from "./chunk-UOUJZIKH.js";
+} from "./chunk-R2Y57PM3.js";
 import "./chunk-CLYZ7FWP.js";
 import "./chunk-UP2VWCW5.js";
 
@@ -5835,7 +5838,7 @@ function recordVoteToGitHub(issueNumber, result) {
 async function runVote(options) {
   const threshold = THRESHOLD_MAP[options.threshold ?? "supermajority"] ?? "supermajority";
   const useQuick = options.quick === true;
-  const roles = useQuick ? ["architect", "security", "pm"] : ["architect", "security", "devex", "ai_ml", "pm", "catfish"];
+  const roles = useQuick ? ["architect", "security", "scope_steward"] : ["architect", "security", "devex", "ai_ml", "pm", "catfish", "scope_steward"];
   const start = getTimeProvider().now();
   const requestedTimeoutMs = options.timeoutMs ?? DEFAULT_VOTE_TIMEOUT_MS;
   const { value: timeoutMs, clamped } = validateTimeout(requestedTimeoutMs);
@@ -9257,44 +9260,283 @@ function sanitizeTool(tool) {
 // src/indexer/entrypoint-cli-extractor.ts
 import { SyntaxKind } from "ts-morph";
 import * as path12 from "path";
-function parseHelpTextCommands(helpText) {
-  const commands = [];
-  const lines = helpText.split("\n");
-  let inCommandsSection = false;
-  for (const line of lines) {
-    if (line.trim() === "COMMANDS:") {
-      inCommandsSection = true;
-      continue;
-    }
-    const trimmed = line.trim();
-    if (trimmed.endsWith(":") && trimmed !== "COMMANDS:" && !trimmed.startsWith("-")) {
-      inCommandsSection = false;
-      continue;
-    }
-    if (!inCommandsSection) continue;
-    const match = line.match(/^\s{2}(\S+(?:\s+\S+)?)\s{2,}(.+)$/);
-    if (match !== null) {
-      const cmdPart = match[1];
-      const descriptionPart = match[2];
-      if (cmdPart === void 0 || descriptionPart === void 0) continue;
-      const parts = cmdPart.trim().split(/\s+/);
-      const name = parts[0];
-      if (name === void 0) continue;
-      const subcommand = parts.length > 1 ? parts[1] : void 0;
-      const existing = commands.find((c) => c.name === name);
-      if (existing !== void 0 && subcommand !== void 0) {
-        existing.subcommands.push(subcommand);
-      } else if (existing === void 0) {
-        commands.push({
-          name,
-          description: descriptionPart.trim(),
-          subcommands: subcommand !== void 0 ? [subcommand] : []
-        });
-      }
+
+// src/cli-command-catalog.ts
+var COMMAND_CATALOG = [
+  // ── Essential ────────────────────────────────────────────────────────────
+  {
+    command: "(default)",
+    description: "Start MCP server with stdio transport",
+    audience: "essential"
+  },
+  {
+    command: "hello",
+    description: "Show welcome message and quick start (no API keys needed)",
+    audience: "essential"
+  },
+  {
+    command: "setup",
+    description: "Configure CLI integration (MCP + .rules + data dirs)",
+    audience: "essential"
+  },
+  {
+    command: "verify",
+    description: "Check install health (sqlite, adapters, config)",
+    audience: "essential"
+  },
+  {
+    command: "doctor",
+    description: "Detailed system/adapter health check",
+    audience: "essential"
+  },
+  {
+    command: "config",
+    description: "Manage configuration (init, get, set, list, export, import)",
+    audience: "essential"
+  },
+  {
+    command: "orchestrate",
+    description: "Execute a task via CLI tools (standalone mode)",
+    audience: "essential"
+  },
+  {
+    command: "vote",
+    description: "Run consensus vote on a proposal (5-6 agents)",
+    audience: "essential"
+  },
+  {
+    command: "workflow",
+    description: "Manage and run workflow templates (list, run)",
+    audience: "essential"
+  },
+  {
+    command: "expert",
+    description: "Manage expert agents (list, create, execute)",
+    audience: "essential"
+  },
+  {
+    command: "research",
+    description: "Manage research registry (status, add, stats, refresh)",
+    audience: "essential"
+  },
+  // ── Advanced ─────────────────────────────────────────────────────────────
+  {
+    command: "session",
+    description: "Manage session persistence (list, show, export, delete)",
+    audience: "advanced"
+  },
+  {
+    command: "auth",
+    description: "Manage MCP authentication tokens (init, show, rotate)",
+    audience: "advanced"
+  },
+  {
+    command: "status",
+    description: "At-a-glance project health dashboard",
+    audience: "advanced"
+  },
+  {
+    command: "capabilities",
+    description: "Show model capabilities matrix",
+    audience: "advanced"
+  },
+  {
+    command: "registry",
+    description: "Inspect + refresh the dynamic model registry (doctor / refresh)",
+    audience: "advanced"
+  },
+  {
+    command: "review",
+    description: "Review a GitHub PR (dogfooding helper)",
+    audience: "advanced"
+  },
+  {
+    command: "scaffold",
+    description: "Generate project files from templates",
+    audience: "advanced"
+  },
+  {
+    command: "validate",
+    description: "Run unified validation (doctor + fitness + config)",
+    audience: "advanced"
+  },
+  {
+    command: "index",
+    description: "Generate and manage codebase index",
+    audience: "advanced"
+  },
+  // ── Maintainer (hidden by default) ───────────────────────────────────────
+  {
+    command: "demo",
+    description: "API-free exploration mode (marketing/demo flow)",
+    audience: "maintainer"
+  },
+  {
+    command: "hooks",
+    description: "Claude CLI hook integration commands",
+    audience: "maintainer"
+  },
+  {
+    command: "routing-audit",
+    description: "Debug model routing decisions",
+    audience: "maintainer"
+  },
+  {
+    command: "fitness-audit",
+    description: "Run CLI orchestration fitness score audit",
+    audience: "maintainer"
+  },
+  {
+    command: "system-review",
+    description: "Automated system review (5-phase checklist)",
+    audience: "maintainer"
+  },
+  {
+    command: "sprint",
+    description: "Automated sprint planning from open issues",
+    audience: "maintainer"
+  },
+  {
+    command: "evaluate",
+    description: "Self-evaluation of codebase components",
+    audience: "maintainer"
+  },
+  {
+    command: "issue",
+    description: "Issue template validation and management",
+    audience: "maintainer"
+  },
+  {
+    command: "validation",
+    description: "Learning validation dashboard",
+    audience: "maintainer"
+  },
+  {
+    command: "learning-metrics",
+    description: "Aggregated learning metrics dashboard",
+    audience: "maintainer"
+  },
+  {
+    command: "swe-bench",
+    description: "Run SWE-bench evaluation benchmark",
+    audience: "maintainer"
+  },
+  {
+    command: "atbench",
+    description: "Run ATBench trajectory-safety evaluation",
+    audience: "maintainer"
+  },
+  {
+    command: "visualize",
+    description: "Generate Mermaid diagrams and ASCII dashboards",
+    audience: "maintainer"
+  },
+  {
+    command: "health",
+    description: "Swarm health metrics dashboard",
+    audience: "maintainer"
+  },
+  {
+    command: "release-notes",
+    description: "Generate release notes from git commits",
+    audience: "maintainer"
+  },
+  {
+    command: "release-validate",
+    description: "Run expert swarm validation for releases",
+    audience: "maintainer"
+  },
+  {
+    command: "release-announce",
+    description: "Generate release announcements (blog, social)",
+    audience: "maintainer"
+  },
+  // ── Internal (hidden everywhere; here for extractor/index completeness) ──
+  {
+    command: "server",
+    // Synonym for the no-arg invocation — `nexus-agents` and
+    // `nexus-agents server` both run `handleServerCommand`. Listed here for
+    // extractor completeness; humans see `(default)` in --help.
+    description: "Start MCP server with stdio transport (explicit form)",
+    audience: "internal"
+  },
+  {
+    command: "e2e-eval",
+    description: "E2E evaluation scenario runner (dev loop)",
+    audience: "internal"
+  },
+  {
+    command: "memory-benchmark",
+    description: "Memory-system benchmark runner (dev loop)",
+    audience: "internal"
+  },
+  {
+    command: "memory-eval",
+    description: "Comparative memory evaluation benchmark (dev loop)",
+    audience: "internal"
+  },
+  {
+    command: "routing-ab",
+    description: "A/B comparison of routing strategies (dev loop)",
+    audience: "internal"
+  },
+  {
+    command: "scenario",
+    description: "Execute a named scenario from the testing framework",
+    audience: "internal"
+  },
+  {
+    command: "warm-up",
+    description: "Warm the model/adapter caches before a run",
+    audience: "internal"
+  }
+];
+function filterCatalog(showAll) {
+  const visible = COMMAND_CATALOG.filter((e) => e.audience !== "internal");
+  if (showAll) return visible;
+  return visible.filter((e) => e.audience !== "maintainer");
+}
+function catalogForExtractors() {
+  return COMMAND_CATALOG.filter((e) => e.command !== "(default)");
+}
+function groupByAudience(entries) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    const existing = groups.get(entry.audience) ?? [];
+    existing.push(entry);
+    groups.set(entry.audience, existing);
+  }
+  return groups;
+}
+var AUDIENCE_HEADINGS = {
+  essential: "Essential \u2014 install, configure, run",
+  advanced: "Advanced \u2014 day-to-day extras",
+  maintainer: "Maintainer \u2014 benchmarks, releases, deep diagnostics",
+  // Never rendered (filterCatalog strips internal before renderCommandsSection
+  // iterates), but required by the Record<CommandAudience, string> contract.
+  internal: "Internal \u2014 dev/eval loops (hidden from --help)"
+};
+function renderCommandsSection(showAll) {
+  const filtered = filterCatalog(showAll);
+  const groups = groupByAudience(filtered);
+  const lines = [];
+  const order = showAll ? ["essential", "advanced", "maintainer"] : ["essential", "advanced"];
+  for (const audience of order) {
+    const entries = groups.get(audience);
+    if (entries === void 0 || entries.length === 0) continue;
+    lines.push(`  ${AUDIENCE_HEADINGS[audience]}`);
+    for (const entry of entries) {
+      lines.push(`    ${entry.command.padEnd(16)} ${entry.description}`);
     }
+    lines.push("");
+  }
+  if (!showAll) {
+    lines.push("  Run with --all to show maintainer commands (benchmarks, release tooling).");
   }
-  return commands;
+  return lines.join("\n").replace(/\n+$/, "");
 }
+
+// src/indexer/entrypoint-cli-extractor.ts
 function extractCliOptions(sourceFile) {
   const options = /* @__PURE__ */ new Map();
   const configVar = sourceFile.getVariableDeclaration("PARSE_ARGS_CONFIG");
@@ -9388,47 +9630,54 @@ function getCommandOptions(name, cliOptions) {
   }
   return cmdOptions;
 }
-function loadHelpTextCommands(project, packageRoot, typesFile) {
-  const helpTextPath = path12.join(packageRoot, "src/cli-help-text.ts");
-  const helpTextFile = project.getSourceFile(helpTextPath) ?? typesFile;
-  if (helpTextFile === void 0) return [];
-  const helpTextVar = helpTextFile.getVariableDeclaration("HELP_TEXT");
-  if (helpTextVar === void 0) return [];
-  const helpText = helpTextVar.getInitializer()?.getText() ?? "";
-  const cleanText = helpText.slice(1, -1).replace(/^\s*\n/, "").replace(/\n\s*$/, "");
-  return parseHelpTextCommands(cleanText);
-}
-function extractCliCommands(project, packageRoot, cliCommandsPath, cliTypesPath) {
-  const commands = [];
+function buildCommandSpec(entry, ctx) {
+  const handlerName = `handle${toPascalCase(entry.command)}Command`;
+  const handlerFunc = ctx.commandsFile.getFunction(handlerName);
+  const sourceLine = handlerFunc?.getStartLineNumber() ?? 1;
+  if (handlerFunc === void 0 && ctx.warnings !== void 0) {
+    ctx.warnings.push(
+      `CLI extraction: catalog entry "${entry.command}" has no matching ${handlerName} function in ${ctx.cliCommandsPath}. Check naming drift.`
+    );
+  }
+  const cmdOptions = getCommandOptions(entry.command, ctx.cliOptions);
+  const cmdSpec = {
+    name: entry.command,
+    description: entry.description,
+    source_file: ctx.relativePath,
+    source_line: sourceLine
+  };
+  if (cmdOptions.length > 0) {
+    cmdSpec.options = cmdOptions;
+  }
+  return cmdSpec;
+}
+function extractCliCommands(project, packageRoot, cliCommandsPath, cliTypesPath, warnings) {
   const typesFullPath = path12.join(packageRoot, cliTypesPath);
   const typesFile = project.getSourceFile(typesFullPath);
-  const helpTextCommands = loadHelpTextCommands(project, packageRoot, typesFile);
+  if (typesFile === void 0 && warnings !== void 0) {
+    warnings.push(
+      `CLI extraction: types file not loaded (${typesFullPath}). PARSE_ARGS_CONFIG options will be missing from the manifest.`
+    );
+  }
   const cliOptions = typesFile !== void 0 ? extractCliOptions(typesFile) : /* @__PURE__ */ new Map();
   const commandsFullPath = path12.join(packageRoot, cliCommandsPath);
   const commandsFile = project.getSourceFile(commandsFullPath);
-  if (commandsFile === void 0) return commands;
-  const relativePath = path12.relative(process.cwd(), commandsFullPath);
-  for (const cmdMeta of helpTextCommands) {
-    if (cmdMeta.name === "(default)") continue;
-    const handlerName = `handle${toPascalCase(cmdMeta.name)}Command`;
-    const handlerFunc = commandsFile.getFunction(handlerName);
-    const sourceLine = handlerFunc?.getStartLineNumber() ?? 1;
-    const cmdOptions = getCommandOptions(cmdMeta.name, cliOptions);
-    const cmdSpec = {
-      name: cmdMeta.name,
-      description: cmdMeta.description,
-      source_file: relativePath,
-      source_line: sourceLine
-    };
-    if (cmdMeta.subcommands.length > 0) {
-      cmdSpec.subcommands = cmdMeta.subcommands;
-    }
-    if (cmdOptions.length > 0) {
-      cmdSpec.options = cmdOptions;
+  if (commandsFile === void 0) {
+    if (warnings !== void 0) {
+      warnings.push(
+        `CLI extraction: commands file not loaded (${commandsFullPath}). Returning zero commands.`
+      );
     }
-    commands.push(cmdSpec);
+    return [];
   }
-  return commands;
+  const ctx = {
+    commandsFile,
+    relativePath: path12.relative(process.cwd(), commandsFullPath),
+    cliOptions,
+    cliCommandsPath,
+    ...warnings !== void 0 && { warnings }
+  };
+  return catalogForExtractors().map((entry) => buildCommandSpec(entry, ctx));
 }
 
 // src/indexer/entrypoint-mcp-extractor.ts
@@ -9474,10 +9723,15 @@ function extractZodParameters(schemaObj) {
   }
   return params;
 }
-function extractMcpTools(project, packageRoot, mcpToolsPath) {
+function extractMcpTools(project, packageRoot, mcpToolsPath, warnings) {
   const tools = [];
   const toolsDir = path13.join(packageRoot, mcpToolsPath);
   const toolFiles = project.getSourceFiles(`${toolsDir}/*.ts`);
+  if (toolFiles.length === 0 && warnings !== void 0) {
+    warnings.push(
+      `MCP tool extraction: glob "${toolsDir}/*.ts" matched zero files. Check that the path exists and is included in the ts-morph project.`
+    );
+  }
   for (const sourceFile of toolFiles) {
     const filePath = sourceFile.getFilePath();
     const fileName = path13.basename(filePath);
@@ -9614,9 +9868,10 @@ function extractEntrypoints(options = {}) {
       project,
       opts.packageRoot,
       opts.cliCommandsPath,
-      "src/cli-types.ts"
+      "src/cli-types.ts",
+      warnings
     );
-    const mcpTools = extractMcpTools(project, opts.packageRoot, opts.mcpToolsPath);
+    const mcpTools = extractMcpTools(project, opts.packageRoot, opts.mcpToolsPath, warnings);
     const finalCommands = opts.sanitize ? cliCommands.map(sanitizeCommand) : cliCommands;
     const finalTools = opts.sanitize ? mcpTools.map(sanitizeTool) : mcpTools;
     const manifest = {
@@ -14109,9 +14364,15 @@ var FitnessScoreCalculator = class {
   }
   /**
    * Check explicit behavior: penalize hidden/magic behavior.
-   * TODO: This dimension lacks strong filesystem signals. Currently checks
-   * for NEXUS_ALLOW_MOCK_ORCHESTRATION guard and magic routing patterns.
-   * Future: add AST-based detection of implicit fallbacks.
+   *
+   * Implementation is intentionally filesystem-signal-based (no AST parse).
+   * The `NEXUS_ALLOW_MOCK_ORCHESTRATION` guard and magic-routing pattern
+   * grep capture the observable failure modes that historically slipped
+   * past review. AST-based detection of implicit fallbacks was considered
+   * but not pursued — it would significantly widen this function's
+   * footprint and the filesystem signals already catch the recurring
+   * regressions. Revisit only if a new class of hidden-behavior bug
+   * surfaces that this grep-over-source approach can't catch.
    */
   checkExplicitBehavior() {
     const findings = [];
@@ -15284,7 +15545,7 @@ function getBlueskyConfig() {
 }
 async function loadAtproto() {
   try {
-    const mod = await import("./dist-4LDAFGC5.js");
+    const mod = await import("./dist-RLMRWMYO.js");
     return { AtpAgent: mod.AtpAgent, RichText: mod.RichText };
   } catch {
     return void 0;
@@ -16743,230 +17004,6 @@ function authCommand(subcommand, options) {
   }
 }
 
-// src/cli-command-catalog.ts
-var COMMAND_CATALOG = [
-  // ── Essential ────────────────────────────────────────────────────────────
-  {
-    command: "(default)",
-    description: "Start MCP server with stdio transport",
-    audience: "essential"
-  },
-  {
-    command: "hello",
-    description: "Show welcome message and quick start (no API keys needed)",
-    audience: "essential"
-  },
-  {
-    command: "setup",
-    description: "Configure CLI integration (MCP + .rules + data dirs)",
-    audience: "essential"
-  },
-  {
-    command: "verify",
-    description: "Check install health (sqlite, adapters, config)",
-    audience: "essential"
-  },
-  {
-    command: "doctor",
-    description: "Detailed system/adapter health check",
-    audience: "essential"
-  },
-  {
-    command: "config",
-    description: "Manage configuration (init, get, set, list, export, import)",
-    audience: "essential"
-  },
-  {
-    command: "orchestrate",
-    description: "Execute a task via CLI tools (standalone mode)",
-    audience: "essential"
-  },
-  {
-    command: "vote",
-    description: "Run consensus vote on a proposal (5-6 agents)",
-    audience: "essential"
-  },
-  {
-    command: "workflow",
-    description: "Manage and run workflow templates (list, run)",
-    audience: "essential"
-  },
-  {
-    command: "expert",
-    description: "Manage expert agents (list, create, execute)",
-    audience: "essential"
-  },
-  {
-    command: "research",
-    description: "Manage research registry (status, add, stats, refresh)",
-    audience: "essential"
-  },
-  // ── Advanced ─────────────────────────────────────────────────────────────
-  {
-    command: "session",
-    description: "Manage session persistence (list, show, export, delete)",
-    audience: "advanced"
-  },
-  {
-    command: "auth",
-    description: "Manage MCP authentication tokens (init, show, rotate)",
-    audience: "advanced"
-  },
-  {
-    command: "status",
-    description: "At-a-glance project health dashboard",
-    audience: "advanced"
-  },
-  {
-    command: "capabilities",
-    description: "Show model capabilities matrix",
-    audience: "advanced"
-  },
-  {
-    command: "review",
-    description: "Review a GitHub PR (dogfooding helper)",
-    audience: "advanced"
-  },
-  {
-    command: "scaffold",
-    description: "Generate project files from templates",
-    audience: "advanced"
-  },
-  {
-    command: "validate",
-    description: "Run unified validation (doctor + fitness + config)",
-    audience: "advanced"
-  },
-  {
-    command: "index",
-    description: "Generate and manage codebase index",
-    audience: "advanced"
-  },
-  // ── Maintainer (hidden by default) ───────────────────────────────────────
-  {
-    command: "demo",
-    description: "API-free exploration mode (marketing/demo flow)",
-    audience: "maintainer"
-  },
-  {
-    command: "hooks",
-    description: "Claude CLI hook integration commands",
-    audience: "maintainer"
-  },
-  {
-    command: "routing-audit",
-    description: "Debug model routing decisions",
-    audience: "maintainer"
-  },
-  {
-    command: "fitness-audit",
-    description: "Run CLI orchestration fitness score audit",
-    audience: "maintainer"
-  },
-  {
-    command: "system-review",
-    description: "Automated system review (5-phase checklist)",
-    audience: "maintainer"
-  },
-  {
-    command: "sprint",
-    description: "Automated sprint planning from open issues",
-    audience: "maintainer"
-  },
-  {
-    command: "evaluate",
-    description: "Self-evaluation of codebase components",
-    audience: "maintainer"
-  },
-  {
-    command: "issue",
-    description: "Issue template validation and management",
-    audience: "maintainer"
-  },
-  {
-    command: "validation",
-    description: "Learning validation dashboard",
-    audience: "maintainer"
-  },
-  {
-    command: "learning-metrics",
-    description: "Aggregated learning metrics dashboard",
-    audience: "maintainer"
-  },
-  {
-    command: "swe-bench",
-    description: "Run SWE-bench evaluation benchmark",
-    audience: "maintainer"
-  },
-  {
-    command: "atbench",
-    description: "Run ATBench trajectory-safety evaluation",
-    audience: "maintainer"
-  },
-  {
-    command: "visualize",
-    description: "Generate Mermaid diagrams and ASCII dashboards",
-    audience: "maintainer"
-  },
-  {
-    command: "health",
-    description: "Swarm health metrics dashboard",
-    audience: "maintainer"
-  },
-  {
-    command: "release-notes",
-    description: "Generate release notes from git commits",
-    audience: "maintainer"
-  },
-  {
-    command: "release-validate",
-    description: "Run expert swarm validation for releases",
-    audience: "maintainer"
-  },
-  {
-    command: "release-announce",
-    description: "Generate release announcements (blog, social)",
-    audience: "maintainer"
-  }
-];
-function filterCatalog(showAll) {
-  if (showAll) return COMMAND_CATALOG;
-  return COMMAND_CATALOG.filter((e) => e.audience !== "maintainer");
-}
-function groupByAudience(entries) {
-  const groups = /* @__PURE__ */ new Map();
-  for (const entry of entries) {
-    const existing = groups.get(entry.audience) ?? [];
-    existing.push(entry);
-    groups.set(entry.audience, existing);
-  }
-  return groups;
-}
-var AUDIENCE_HEADINGS = {
-  essential: "Essential \u2014 install, configure, run",
-  advanced: "Advanced \u2014 day-to-day extras",
-  maintainer: "Maintainer \u2014 benchmarks, releases, deep diagnostics"
-};
-function renderCommandsSection(showAll) {
-  const filtered = filterCatalog(showAll);
-  const groups = groupByAudience(filtered);
-  const lines = [];
-  const order = showAll ? ["essential", "advanced", "maintainer"] : ["essential", "advanced"];
-  for (const audience of order) {
-    const entries = groups.get(audience);
-    if (entries === void 0 || entries.length === 0) continue;
-    lines.push(`  ${AUDIENCE_HEADINGS[audience]}`);
-    for (const entry of entries) {
-      lines.push(`    ${entry.command.padEnd(16)} ${entry.description}`);
-    }
-    lines.push("");
-  }
-  if (!showAll) {
-    lines.push("  Run with --all to show maintainer commands (benchmarks, release tooling).");
-  }
-  return lines.join("\n").replace(/\n+$/, "");
-}
-
 // src/cli-help-text.ts
 var HELP_TEXT = `
 nexus-agents - Intelligent orchestration platform for AI coding tools
@@ -17607,6 +17644,14 @@ var PARSE_ARGS_CONFIG = {
     deep: {
       type: "boolean",
       default: false
+    },
+    // Registry command options (#2179)
+    json: {
+      type: "boolean",
+      default: false
+    },
+    source: {
+      type: "string"
     }
   },
   allowPositionals: true,
@@ -17657,7 +17702,8 @@ function isValidCommand(value) {
     "routing-ab",
     "memory-eval",
     "health",
-    "validate"
+    "validate",
+    "registry"
   ];
   return validCommands.includes(value);
 }
@@ -18460,6 +18506,7 @@ var STANDALONE_TOOLS = [
   { name: "list_experts", register: registerListExpertsTool },
   { name: "query_trace", register: registerQueryTraceTool },
   { name: "query_task_state", register: registerQueryTaskStateTool },
+  { name: "verify_audit_chain", register: registerVerifyAuditChainTool },
   { name: "extract_symbols", register: registerExtractSymbolsTool },
   { name: "search_codebase", register: registerSearchCodebaseTool },
   { name: "run_dev_pipeline", register: registerDevPipelineTool },
@@ -19955,12 +20002,14 @@ function setupShutdownHandlers(cleanup, logger17) {
       process.exit(EXIT_CODES.SHUTDOWN_ERROR);
     }
   };
-  process.on("SIGINT", () => {
-    void handleShutdown("SIGINT");
-  });
-  process.on("SIGTERM", () => {
-    void handleShutdown("SIGTERM");
-  });
+  const onSignal = (signal) => () => {
+    handleShutdown(signal).catch((err2) => {
+      logger17.error("Shutdown handler crashed", err2 instanceof Error ? err2 : new Error(String(err2)));
+      process.exit(EXIT_CODES.SHUTDOWN_ERROR);
+    });
+  };
+  process.on("SIGINT", onSignal("SIGINT"));
+  process.on("SIGTERM", onSignal("SIGTERM"));
   process.on("uncaughtException", (error) => {
     logger17.error("Uncaught exception", error);
     process.exit(EXIT_CODES.SERVER_START_FAILED);
@@ -20156,7 +20205,7 @@ async function initializeSubsystems(config, logger17) {
   await initializeAndLogSandbox(serverLogger, config.security?.sandbox);
   const policyFirewall = logSecurityConfig(serverLogger, config);
   const auditLogger = initializeAuditLogger(config.security, serverLogger);
-  const authInit = initializeAuth(config, serverLogger);
+  initializeAuth(config, serverLogger);
   await initializeAndRegisterTools(
     server,
     serverLogger,
@@ -20164,8 +20213,9 @@ async function initializeSubsystems(config, logger17) {
     config,
     feedbackResult.feedbackIntegration
   );
-  return { server, serverLogger, observer, eventBusBridge, policyFirewall, auditLogger, authInit };
+  return { server, serverLogger, observer, eventBusBridge, auditLogger };
 }
+var SERVER_STARTUP_TIMEOUT_MS = 3e4;
 async function startServer(verbose, mode, modeWasExplicit = false, orchestratorOptions) {
   const logger17 = createLogger({ component: "cli" });
   if (verbose) logger17.setLevel("debug");
@@ -20174,6 +20224,13 @@ async function startServer(verbose, mode, modeWasExplicit = false, orchestratorO
     await startOrchestratorMode(orchestratorOptions ?? { verbose });
     return;
   }
+  const startupWatchdog = setTimeout(() => {
+    logger17.error(
+      `Server startup exceeded ${String(SERVER_STARTUP_TIMEOUT_MS)}ms \u2014 aborting. Common causes: hung config load, blocked subsystem init, stdio transport stall.`
+    );
+    process.exit(EXIT_CODES.SERVER_START_FAILED);
+  }, SERVER_STARTUP_TIMEOUT_MS);
+  startupWatchdog.unref();
   const detectionResult = detectMode({ explicitMode: modeWasExplicit ? mode : void 0 });
   logStartupInfo(logger17, detectionResult, verbose);
   const configResult = loadAndLogConfig(logger17);
@@ -20198,6 +20255,7 @@ async function startServer(verbose, mode, modeWasExplicit = false, orchestratorO
     auditLogger
   });
   setupShutdownHandlers(cleanup, logger17);
+  clearTimeout(startupWatchdog);
   logger17.debug("Server running, waiting for requests...");
 }
 
@@ -20229,6 +20287,11 @@ function isValidIndexFormat(value) {
 function isValidResearchFormat(value) {
   return value === "table" || value === "json";
 }
+function parsePositiveInt(arg, defaultVal) {
+  if (arg === void 0) return defaultVal;
+  const parsed = parseInt(arg, 10);
+  return Number.isNaN(parsed) || parsed <= 0 ? defaultVal : parsed;
+}
 
 // src/cli-commands-usage.ts
 function printWorkflowRunUsage() {
@@ -20575,6 +20638,32 @@ async function handleResearchCommand(args) {
     process.exit(EXIT_CODES.SERVER_START_FAILED);
   }
 }
+async function handleRegistryCommand(args) {
+  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-S46JJ2SX.js");
+  const subcommand = args.subcommand;
+  if (!isValidRegistrySubcommand(subcommand)) {
+    process.stdout.write(`${formatRegistryUsage()}
+`);
+    process.exit(EXIT_CODES.INVALID_ARGS);
+  }
+  const source = typeof args.options.source === "string" ? args.options.source : void 0;
+  const options = {
+    json: args.options.json === true,
+    dryRun: args.options.dryRun,
+    ...source !== void 0 ? { source } : {}
+  };
+  try {
+    const result = await registryCommand(subcommand, options);
+    process.stdout.write(`${result.text}
+`);
+    process.exit(result.exitCode === 0 ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
+  } catch (error) {
+    const message = getErrorMessage(error);
+    process.stdout.write(`Error: ${message}
+`);
+    process.exit(EXIT_CODES.SERVER_START_FAILED);
+  }
+}
 function handleValidationCommand(args) {
   const options = parseValidationArgs(args.positionals, args.options.format, args.options.verbose);
   const exitCode = validationDashboardCommand(options);
@@ -20598,7 +20687,7 @@ async function handleVerifyCommand(args) {
 async function handleDoctorCommand(args) {
   const exitCode = await doctorCommand({ fix: args.options.fix });
   if (args.options.deep) {
-    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-RKMOZSIS.js");
+    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-VN6KMUCG.js");
     const diag = runDeepDiagnostics2();
     process.stdout.write(formatDeepDiagnostics2(diag) + "\n");
   }
@@ -20627,7 +20716,7 @@ async function handleSetupCommandAsync(args) {
   process.exit(exitCode === 0 ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runCustomApiSetup(args) {
-  const { configureCustomApi } = await import("./setup-custom-api-XAWKRDWV.js");
+  const { configureCustomApi } = await import("./setup-custom-api-CSB26HWD.js");
   const baseUrl = args.options.customApi;
   if (baseUrl === void 0) return EXIT_CODES.SERVER_START_FAILED;
   const input = {
@@ -20787,25 +20876,19 @@ function handleWarmUpCommand(_args) {
   process.exit(EXIT_CODES.SUCCESS);
 }
 function handleE2EEvalCommand(args) {
-  const countArg = args.positionals[1];
-  const taskCount = countArg !== void 0 ? parseInt(countArg, 10) : 50;
-  const count = Number.isNaN(taskCount) || taskCount <= 0 ? 50 : taskCount;
+  const count = parsePositiveInt(args.positionals[1], 50);
   const result = runE2EEval({ taskCount: count });
   process.stdout.write(formatE2EEvalResult(result) + "\n");
   process.exit(result.passed ? EXIT_CODES.SUCCESS : 1);
 }
 function handleRoutingABCommand(args) {
-  const countArg = args.positionals[1];
-  const taskCount = countArg !== void 0 ? parseInt(countArg, 10) : 30;
-  const count = Number.isNaN(taskCount) || taskCount <= 0 ? 30 : taskCount;
+  const count = parsePositiveInt(args.positionals[1], 30);
   const result = runRoutingAB({ taskCount: count });
   process.stdout.write(formatABReport(result) + "\n");
   process.exit(EXIT_CODES.SUCCESS);
 }
 function handleMemoryEvalCommand(args) {
-  const sizeArg = args.positionals[1];
-  const size = sizeArg !== void 0 ? parseInt(sizeArg, 10) : 50;
-  const count = Number.isNaN(size) || size <= 0 ? 50 : size;
+  const count = parsePositiveInt(args.positionals[1], 50);
   const result = runMemoryEval(count);
   process.stdout.write(formatMemoryEvalReport(result) + "\n");
   process.exit(EXIT_CODES.SUCCESS);
@@ -22749,6 +22832,7 @@ var ASYNC_COMMAND_HANDLERS = {
   vote: handleVoteCommand,
   index: handleIndexCommand2,
   research: handleResearchCommand,
+  registry: handleRegistryCommand,
   "swe-bench": handleSweBenchCommand,
   atbench: handleAtbenchCommand,
   hooks: handleHooksCommand,
@@ -23152,6 +23236,8 @@ function buildOptions(values) {
     quick: values.quick,
     mock: values.mock,
     deep: values.deep,
+    json: values.json,
+    ...values.source !== void 0 && { source: values.source },
     ...values.output !== void 0 && { output: values.output },
     ...values.input !== void 0 && { input: values.input },
     ...buildOrchestrateOptions(values),