nexus-agents 2.63.0 → 2.63.2

package/dist/{chunk-4G7MSCIK.js → chunk-EB7LP5WD.js}

@@ -4,10 +4,10 @@ import {
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-EZXOJZYE.js";
+} from "./chunk-UCQTXKTS.js";
 import {
   executeExpert
-} from "./chunk-JKDHWOQL.js";
+} from "./chunk-46S665SD.js";
 import {
   ClaudeAdapter,
   DEFAULT_RELEVANCE_CONFIG,
@@ -32,10 +32,11 @@ import {
   toolError,
   toolSuccess,
   toolSuccessStructured,
+  warnIfSimulatedOutsideTests,
   withAccessPolicy,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-FEWWXGFE.js";
+} from "./chunk-PEDEZRPR.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
@@ -44,14 +45,14 @@ import {
   normalizeTopicToCanonical,
   savePapersRegistry,
   synthesizeResearch
-} from "./chunk-TC46TRLR.js";
+} from "./chunk-PB2EXTSV.js";
 import {
   IssueTriage,
   sanitizeInput
-} from "./chunk-AFSIP6JH.js";
+} from "./chunk-RCQZMJBZ.js";
 import {
   generateSecurityPlan
-} from "./chunk-V5CGWMYL.js";
+} from "./chunk-QAOI6EIU.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-BC3M4VLP.js";
@@ -68,16 +69,22 @@ import {
   clampTaskTtl,
   getAvailabilityCache,
   resolveFallback
-} from "./chunk-FMFQJLMR.js";
+} from "./chunk-QJTOZIE7.js";
 import {
   DEFAULTS
-} from "./chunk-H43PABG4.js";
+} from "./chunk-FHFNOMNK.js";
 import {
   resolveInsideRoot
 } from "./chunk-NUBSJGQZ.js";
 import {
-  nexusDataPath
-} from "./chunk-FDNWRZNJ.js";
+  ClaudeCliAdapter,
+  CliDetectionCache,
+  asRecord,
+  extractNumberField,
+  getAvailableClis,
+  sleep,
+  withTimeout
+} from "./chunk-ZC4KHPRL.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -86,11 +93,11 @@ import {
 } from "./chunk-GJVHRJO2.js";
 import {
   createSessionMemory
-} from "./chunk-7Y36JLES.js";
+} from "./chunk-I37IQ26H.js";
 import {
   MemoryImportance,
   calculateTextJaccardSimilarity
-} from "./chunk-TFEFN37P.js";
+} from "./chunk-KVZNQWWI.js";
 import {
   STOPWORDS,
   capitalize,
@@ -99,19 +106,10 @@ import {
 } from "./chunk-633WH2ML.js";
 import {
   generateMcpConfig
-} from "./chunk-EDGG3RQE.js";
+} from "./chunk-FTWGBV7S.js";
 import {
   getFallbackChainForCategory
-} from "./chunk-PTGBJFSD.js";
-import {
-  ClaudeCliAdapter,
-  CliDetectionCache,
-  asRecord,
-  extractNumberField,
-  getAvailableClis,
-  sleep,
-  withTimeout
-} from "./chunk-YQAOMDR2.js";
+} from "./chunk-CDWQP3UC.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -176,7 +174,10 @@ import {
   ok,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-R2Y57PM3.js";
+} from "./chunk-FAUHVWYZ.js";
+import {
+  nexusDataPath
+} from "./chunk-FDNWRZNJ.js";
 
 // src/agents/state-machine-types.ts
 var VALID_TRANSITIONS = /* @__PURE__ */ new Map([
@@ -13863,7 +13864,7 @@ function wouldCreateCycle(from, to, getNode) {
   return canReach(to, from, /* @__PURE__ */ new Set(), getNode);
 }
 function findCyclePath(from, to, getNode) {
-  const path20 = [from, to];
+  const path19 = [from, to];
   const visited = /* @__PURE__ */ new Set([from]);
   const findPath = (current) => {
     if (current === from) return true;
@@ -13872,9 +13873,9 @@ function findCyclePath(from, to, getNode) {
     for (const depId of node.dependencies.keys()) {
       if (!visited.has(depId)) {
         visited.add(depId);
-        path20.push(depId);
+        path19.push(depId);
         if (findPath(depId)) return true;
-        path20.pop();
+        path19.pop();
       } else if (depId === from) {
         return true;
       }
@@ -13882,7 +13883,7 @@ function findCyclePath(from, to, getNode) {
     return false;
   };
   findPath(to);
-  return path20;
+  return path19;
 }
 function detectCycleDFS(nodeId, visited, stack, getNode) {
   visited.add(nodeId);
@@ -13901,29 +13902,29 @@ function detectCycleDFS(nodeId, visited, stack, getNode) {
   return false;
 }
 function findCycleFromNode(startId, getNode) {
-  const path20 = [];
+  const path19 = [];
   const visited = /* @__PURE__ */ new Set();
   const dfs = (nodeId) => {
-    if (path20.includes(nodeId)) {
-      const cycleStart = path20.indexOf(nodeId);
-      path20.splice(0, cycleStart);
-      path20.push(nodeId);
+    if (path19.includes(nodeId)) {
+      const cycleStart = path19.indexOf(nodeId);
+      path19.splice(0, cycleStart);
+      path19.push(nodeId);
       return true;
     }
     if (visited.has(nodeId)) return false;
     visited.add(nodeId);
-    path20.push(nodeId);
+    path19.push(nodeId);
     const node = getNode(nodeId);
     if (node) {
       for (const depId of node.dependencies.keys()) {
         if (dfs(depId)) return true;
       }
     }
-    path20.pop();
+    path19.pop();
     return false;
   };
   dfs(startId);
-  return path20;
+  return path19;
 }
 
 // src/agents/skills/skill-dependency-graph.ts
@@ -18468,18 +18469,18 @@ var DependencyGraph = class {
     }
     const startNode = firstNode;
     const visited = /* @__PURE__ */ new Set();
-    const path20 = [];
+    const path19 = [];
     const dfs = (nodeId) => {
-      if (path20.includes(nodeId)) {
-        const cycleStart = path20.indexOf(nodeId);
-        path20.splice(0, cycleStart);
+      if (path19.includes(nodeId)) {
+        const cycleStart = path19.indexOf(nodeId);
+        path19.splice(0, cycleStart);
         return true;
       }
       if (visited.has(nodeId)) {
         return false;
       }
       visited.add(nodeId);
-      path20.push(nodeId);
+      path19.push(nodeId);
       const node = this.nodes.get(nodeId);
       if (node) {
         for (const depId of node.dependencies) {
@@ -18490,11 +18491,11 @@ var DependencyGraph = class {
           }
         }
       }
-      path20.pop();
+      path19.pop();
       return false;
     };
     dfs(startNode);
-    return path20.length > 0 ? path20 : cycleNodes.slice(0, 3);
+    return path19.length > 0 ? path19 : cycleNodes.slice(0, 3);
   }
   /**
    * Gets the execution order (topologically sorted step IDs).
@@ -19346,9 +19347,9 @@ function getBuiltInTemplatesPath() {
     join3(dirname2(currentDir), "workflows", "templates"),
     join3(dirname2(currentDir), "dist", "workflows", "templates")
   ];
-  for (const path20 of possiblePaths) {
-    if (existsSync3(path20)) {
-      return path20;
+  for (const path19 of possiblePaths) {
+    if (existsSync3(path19)) {
+      return path19;
     }
   }
   return join3(currentDir, "templates");
@@ -19889,9 +19890,9 @@ function validateRequiredInputs(inputs, required) {
 }
 
 // src/workflows/expression-resolver-helpers.ts
-function getNestedValue(obj, path20) {
+function getNestedValue(obj, path19) {
   let current = obj;
-  for (const key of path20) {
+  for (const key of path19) {
     if (current === null || current === void 0) {
       return void 0;
     }
@@ -19902,24 +19903,24 @@ function getNestedValue(obj, path20) {
   }
   return current;
 }
-function resolveInputs(path20, context) {
-  const value = getNestedValue(context.inputs, path20);
+function resolveInputs(path19, context) {
+  const value = getNestedValue(context.inputs, path19);
   if (value === void 0) {
     return {
       success: false,
-      error: `Input '${path20.join(".")}' not found`
+      error: `Input '${path19.join(".")}' not found`
     };
   }
   return { success: true, value };
 }
-function validateStepPath(path20) {
-  if (path20.length < 2) {
+function validateStepPath(path19) {
+  if (path19.length < 2) {
     return {
       success: false,
       error: "Steps expression requires at least stepId and output"
     };
   }
-  if (path20[0] === void 0 || path20[1] === void 0) {
+  if (path19[0] === void 0 || path19[1] === void 0) {
     return {
       success: false,
       error: "Steps expression requires stepId and output"
@@ -19945,12 +19946,12 @@ function validateStepResult(stepId, outputKey, stepResult) {
   }
   return null;
 }
-function resolveSteps(path20, context) {
-  const pathError = validateStepPath(path20);
+function resolveSteps(path19, context) {
+  const pathError = validateStepPath(path19);
   if (pathError !== null) return pathError;
-  const stepId = path20[0] ?? "";
-  const outputKey = path20[1] ?? "";
-  const rest = path20.slice(2);
+  const stepId = path19[0] ?? "";
+  const outputKey = path19[1] ?? "";
+  const rest = path19.slice(2);
   const stepResult = context.stepResults.get(stepId);
   const earlyReturn = validateStepResult(stepId, outputKey, stepResult);
   if (earlyReturn !== null) return earlyReturn;
@@ -19966,15 +19967,15 @@ function resolveSteps(path20, context) {
   }
   return { success: true, value };
 }
-function resolveVariables(path20, context) {
-  if (path20.length === 0) {
+function resolveVariables(path19, context) {
+  if (path19.length === 0) {
     return {
       success: false,
       error: "Variables expression requires a variable name"
     };
   }
-  const varName = path20[0];
-  const rest = path20.slice(1);
+  const varName = path19[0];
+  const rest = path19.slice(1);
   if (varName === void 0) {
     return {
       success: false,
@@ -20997,8 +20998,8 @@ var WorkflowEngine = class {
     this.config = resolveConfig2(config);
   }
   /** Load workflow template from file. */
-  async loadTemplate(path20) {
-    return this.deps.loadWorkflowFile(path20);
+  async loadTemplate(path19) {
+    return this.deps.loadWorkflowFile(path19);
   }
   /** Execute a workflow with inputs. */
   async execute(workflow, inputs) {
@@ -21102,8 +21103,8 @@ var WorkflowEngine = class {
     }
     return Promise.resolve(templates);
   }
-  createTemplate(workflow, path20, category) {
-    const t = { name: workflow.name, version: workflow.version, path: path20, category };
+  createTemplate(workflow, path19, category) {
+    const t = { name: workflow.name, version: workflow.version, path: path19, category };
     if (workflow.description !== void 0) t.description = workflow.description;
     return t;
   }
@@ -21389,8 +21390,8 @@ function createParseWorkflow() {
   };
 }
 function createLoadWorkflowFile() {
-  return async (path20) => {
-    const result = await loadWorkflowFile(path20);
+  return async (path19) => {
+    const result = await loadWorkflowFile(path19);
     if (!result.ok) {
       if (result.error instanceof ParseError) {
         return result;
@@ -27031,31 +27032,31 @@ var GraphBuilder = class {
     }
     const visited = /* @__PURE__ */ new Set();
     const stack = /* @__PURE__ */ new Set();
-    const path20 = [];
+    const path19 = [];
     for (const nodeId of this.nodes.keys()) {
-      const cycle = this.dfs(nodeId, adj, visited, stack, path20);
+      const cycle = this.dfs(nodeId, adj, visited, stack, path19);
       if (cycle !== void 0) return cycle;
     }
     return void 0;
   }
-  dfs(nodeId, adj, visited, stack, path20) {
+  dfs(nodeId, adj, visited, stack, path19) {
     if (stack.has(nodeId)) {
-      const cycleStart = path20.indexOf(nodeId);
-      const cyclePath = path20.slice(cycleStart);
+      const cycleStart = path19.indexOf(nodeId);
+      const cyclePath = path19.slice(cycleStart);
       cyclePath.push(nodeId);
       return { type: "cycle_detected", path: cyclePath };
     }
     if (visited.has(nodeId)) return void 0;
     visited.add(nodeId);
     stack.add(nodeId);
-    path20.push(nodeId);
+    path19.push(nodeId);
     const neighbors = adj.get(nodeId) ?? [];
     for (const neighbor of neighbors) {
-      const cycle = this.dfs(neighbor, adj, visited, stack, path20);
+      const cycle = this.dfs(neighbor, adj, visited, stack, path19);
       if (cycle !== void 0) return cycle;
     }
     stack.delete(nodeId);
-    path20.pop();
+    path19.pop();
     return void 0;
   }
   checkReachability() {
@@ -27723,8 +27724,8 @@ function extractModelAttribution(event) {
   };
 }
 function extractRoutingAttribution(event) {
-  const path20 = event.decisionPath !== void 0 ? [...event.decisionPath] : void 0;
-  return { modelId: event.selectedModel, reasoning: event.reasoning, decisionPath: path20 };
+  const path19 = event.decisionPath !== void 0 ? [...event.decisionPath] : void 0;
+  return { modelId: event.selectedModel, reasoning: event.reasoning, decisionPath: path19 };
 }
 function extractPipelineAttribution(event) {
   if (event.type === "pipeline.completed") {
@@ -31930,8 +31931,6 @@ function isReflectiveShadowMode() {
 }
 
 // src/mcp/tools/orchestrate-reflection.ts
-import * as os from "os";
-import * as path4 from "path";
 var logger28 = createLogger({ component: "orchestrate-reflection" });
 var REFLECTION_MAX_TOKENS2 = 1e3;
 var REFLECTION_WRITE_CONFIDENCE_THRESHOLD = 0.6;
@@ -32022,7 +32021,7 @@ function writeLearningsToSession(learnings, taskDescription) {
   }
   if (eligible.length === 0) return 0;
   try {
-    const memoryDir = path4.join(os.homedir(), ".nexus-agents", "memory", "sessions");
+    const memoryDir = nexusDataPath("memory", "sessions");
     const memory = createSessionMemory(memoryDir);
     const sessionId = `reflection-${String(Date.now())}`;
     const startResult = memory.startSession(sessionId);
@@ -32470,8 +32469,7 @@ function hashObjective(userObjective) {
 
 // src/context/structured-task-state.ts
 import * as fs5 from "fs";
-import * as path5 from "path";
-import * as os2 from "os";
+import * as path4 from "path";
 
 // src/context/structured-task-state-types.ts
 import { z as z55 } from "zod";
@@ -32594,15 +32592,15 @@ var StructuredTaskLogEntrySchema = z55.discriminatedUnion("event", [
 
 // src/context/structured-task-state.ts
 var logger29 = createLogger({ component: "structured-task-state" });
-var TASKS_DIR = path5.join(".nexus-agents", "tasks");
+var TASKS_SUBDIR = "tasks";
 var FILE_MODE2 = 384;
 var DIR_MODE3 = 448;
 function getTasksDir(customDir) {
-  if (customDir !== void 0) return path5.resolve(customDir);
-  return path5.join(os2.homedir(), TASKS_DIR);
+  if (customDir !== void 0) return path4.resolve(customDir);
+  return nexusDataPath(TASKS_SUBDIR);
 }
 function getLogPath(taskId, customDir) {
-  return path5.join(getTasksDir(customDir), `state-${taskId}.jsonl`);
+  return path4.join(getTasksDir(customDir), `state-${taskId}.jsonl`);
 }
 function validateTaskId(taskId) {
   if (taskId.includes("..") || taskId.includes("/") || taskId.includes("\\")) {
@@ -36383,18 +36381,18 @@ function parseArxivEntries(xml, source, topic = "") {
 
 // src/cli/research-helpers-sources-io.ts
 import * as fs6 from "fs/promises";
-import * as path6 from "path";
+import * as path5 from "path";
 import { parse as parseYaml2, stringify as stringifyYaml } from "yaml";
 var SOURCES_FILE = "sources.yaml";
 function validatePath3(constructedPath, allowedRoot) {
   const resolved = resolveInsideRoot(constructedPath, allowedRoot);
   if (resolved === null) {
-    const root = path6.resolve(allowedRoot);
+    const root = path5.resolve(allowedRoot);
     return {
       ok: false,
       error: {
         code: "PATH_TRAVERSAL",
-        message: `Path ${path6.resolve(constructedPath)} is outside ${root}`
+        message: `Path ${path5.resolve(constructedPath)} is outside ${root}`
       }
     };
   }
@@ -36402,7 +36400,7 @@ function validatePath3(constructedPath, allowedRoot) {
 }
 async function loadSourcesRegistry(rootDir) {
   const root = rootDir ?? getProjectRoot();
-  const filePath = path6.join(root, REGISTRY_PATH, SOURCES_FILE);
+  const filePath = path5.join(root, REGISTRY_PATH, SOURCES_FILE);
   const pathResult = validatePath3(filePath, root);
   if (!pathResult.ok) return pathResult;
   try {
@@ -36428,7 +36426,7 @@ async function loadSourcesRegistry(rootDir) {
 }
 async function saveSourcesRegistry(registry, rootDir) {
   const root = rootDir ?? getProjectRoot();
-  const filePath = path6.join(root, REGISTRY_PATH, SOURCES_FILE);
+  const filePath = path5.join(root, REGISTRY_PATH, SOURCES_FILE);
   const pathResult = validatePath3(filePath, root);
   if (!pathResult.ok) return pathResult;
   try {
@@ -36735,12 +36733,12 @@ function rankDiscoveredItems(items, topic) {
 
 // src/cli/research-helpers-index-ops.ts
 import * as fs7 from "fs/promises";
-import * as path7 from "path";
+import * as path6 from "path";
 function getRegistryPath() {
-  return path7.resolve(process.cwd(), "docs/research/registry");
+  return path6.resolve(process.cwd(), "docs/research/registry");
 }
 function getIndexPath() {
-  return path7.resolve(process.cwd(), "docs/research/RESEARCH_INDEX.md");
+  return path6.resolve(process.cwd(), "docs/research/RESEARCH_INDEX.md");
 }
 async function handleStatsCommand(options) {
   const registryPath = getRegistryPath();
@@ -36770,7 +36768,7 @@ async function handleRefreshCommand(options) {
   if (!mdResult.ok) {
     return `Error: Failed to generate markdown: ${mdResult.error.message}`;
   }
-  await fs7.mkdir(path7.dirname(outputPath), { recursive: true });
+  await fs7.mkdir(path6.dirname(outputPath), { recursive: true });
   await fs7.writeFile(outputPath, mdResult.value, "utf-8");
   const stats = index.stats;
   return [
@@ -38710,12 +38708,12 @@ function extractFileReferences(markdown) {
   let match;
   FILE_REF_PATTERN.lastIndex = 0;
   while ((match = FILE_REF_PATTERN.exec(markdown)) !== null) {
-    const path20 = match[1];
-    if (path20 === void 0 || seen.has(path20)) continue;
-    seen.add(path20);
+    const path19 = match[1];
+    if (path19 === void 0 || seen.has(path19)) continue;
+    seen.add(path19);
     const lineStr = match[2];
     const line = lineStr !== void 0 ? parseInt(lineStr, 10) : void 0;
-    refs.push(line !== void 0 ? { path: path20, line } : { path: path20 });
+    refs.push(line !== void 0 ? { path: path19, line } : { path: path19 });
   }
   return refs;
 }
@@ -39999,7 +39997,7 @@ function registerExtractSymbolsTool(server, deps) {
 
 // src/mcp/tools/query-trace-tool.ts
 import { readFile as readFile5, stat as stat3 } from "fs/promises";
-import { join as join9, resolve as resolve11, sep as sep3 } from "path";
+import { join as join8, resolve as resolve11, sep as sep3 } from "path";
 import { z as z84 } from "zod";
 var QueryTraceInputSchema = z84.object({
   runId: z84.string().min(1).max(128).regex(/^[a-zA-Z0-9_-]+$/, "runId must be alphanumeric, hyphens, or underscores").describe("Run ID to query traces for"),
@@ -40040,7 +40038,7 @@ var EMPTY_RESPONSE = {
 };
 async function queryTraceFromDisk(input, runsDir) {
   const dir = runsDir ?? DEFAULT_RUNS_DIR;
-  const tracePath = join9(dir, input.runId, "trace.jsonl");
+  const tracePath = join8(dir, input.runId, "trace.jsonl");
   const resolvedDir = resolve11(dir);
   const resolvedTrace = resolve11(tracePath);
   if (!resolvedTrace.startsWith(resolvedDir + sep3) && resolvedTrace !== resolvedDir) {
@@ -40350,11 +40348,11 @@ var InMemoryAuditStorage = class {
 
 // src/audit/audit-storage.ts
 import * as fs9 from "fs";
-import * as path8 from "path";
+import * as path7 from "path";
 function validateLogDir(logDir, allowedRoot) {
-  const resolvedRoot = path8.resolve(allowedRoot);
-  const resolvedLogDir = path8.resolve(allowedRoot, logDir);
-  if (!resolvedLogDir.startsWith(resolvedRoot + path8.sep) && resolvedLogDir !== resolvedRoot) {
+  const resolvedRoot = path7.resolve(allowedRoot);
+  const resolvedLogDir = path7.resolve(allowedRoot, logDir);
+  if (!resolvedLogDir.startsWith(resolvedRoot + path7.sep) && resolvedLogDir !== resolvedRoot) {
     return {
       ok: false,
       error: new SecurityError("Path traversal detected: logDir escapes allowed root directory", {
@@ -40377,10 +40375,10 @@ function validateLogDirBasic(logDir) {
       };
     }
   }
-  const resolved = path8.resolve(logDir);
+  const resolved = path7.resolve(logDir);
   const systemDirs = ["/etc", "/var", "/usr", "/bin", "/sbin", "/root", "/proc", "/sys"];
   for (const sysDir of systemDirs) {
-    if (resolved === sysDir || resolved.startsWith(sysDir + path8.sep)) {
+    if (resolved === sysDir || resolved.startsWith(sysDir + path7.sep)) {
       return {
         ok: false,
         error: new SecurityError("logDir cannot be a system directory", {
@@ -40469,7 +40467,7 @@ var FileAuditStorage = class _FileAuditStorage {
     const existingFiles = this.getExistingLogFiles();
     const latestFileName = existingFiles[0];
     if (existingFiles.length > 0 && latestFileName !== void 0) {
-      const latestFile = path8.join(this.logDir, latestFileName);
+      const latestFile = path7.join(this.logDir, latestFileName);
       const stats = fs9.statSync(latestFile);
       if (stats.size < this.maxFileSizeBytes) {
         this.currentFile = latestFile;
@@ -40492,7 +40490,7 @@ var FileAuditStorage = class _FileAuditStorage {
       this.writeStream.end();
       this.writeStream = null;
     }
-    this.currentFile = path8.join(this.logDir, this.generateFileName());
+    this.currentFile = path7.join(this.logDir, this.generateFileName());
     this.currentFileSize = 0;
     this.openWriteStream();
     this.logger.debug("Rotated audit log file", { file: this.currentFile });
@@ -40503,7 +40501,7 @@ var FileAuditStorage = class _FileAuditStorage {
     if (files.length > this.maxFiles) {
       const filesToDelete = files.slice(this.maxFiles);
       for (const file of filesToDelete) {
-        const filePath = path8.join(this.logDir, file);
+        const filePath = path7.join(this.logDir, file);
         fs9.unlinkSync(filePath);
         this.logger.info("Pruned old audit log", { file });
       }
@@ -40557,7 +40555,7 @@ var FileAuditStorage = class _FileAuditStorage {
     let skipped = 0;
     for (const file of files) {
       if (results.length >= limit) break;
-      const filePath = path8.join(this.logDir, file);
+      const filePath = path7.join(this.logDir, file);
       const events = await readAuditFile({
         filePath,
         criteria,
@@ -41225,7 +41223,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-YYTE6KTC.js");
+    const { createIssueTriage } = await import("./issue-triage-DGDKQQTD.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -41253,7 +41251,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-BHTUNALT.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-R6FQWUHB.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -41528,7 +41526,7 @@ function resolveConfidence(rule) {
 }
 
 // src/mcp/tools/security-scan.ts
-import * as path9 from "path";
+import * as path8 from "path";
 var logger33 = createLogger({ component: "security-scan" });
 var SCAN_TIMEOUT_MS = 3e5;
 async function isSemgrepAvailable() {
@@ -41555,9 +41553,9 @@ async function runSemgrep(targetDir, rulesets) {
   return stdout;
 }
 function validateTargetPath(target) {
-  const root = path9.resolve(process.cwd());
-  const resolved = path9.resolve(root, target);
-  if (resolved !== root && !resolved.startsWith(root + path9.sep)) {
+  const root = path8.resolve(process.cwd());
+  const resolved = path8.resolve(root, target);
+  if (resolved !== root && !resolved.startsWith(root + path8.sep)) {
     throw new Error(
       `Invalid target path: must resolve inside ${root} (got ${resolved})`
     );
@@ -41986,8 +41984,8 @@ async function runOsvCheck(targetDir, enabled) {
   if (!enabled) return [];
   try {
     const fs20 = await import("fs");
-    const path20 = await import("path");
-    const pkgPath = path20.join(targetDir, "package.json");
+    const path19 = await import("path");
+    const pkgPath = path19.join(targetDir, "package.json");
     if (!fs20.existsSync(pkgPath)) return [];
     const pkg = JSON.parse(fs20.readFileSync(pkgPath, "utf-8"));
     const deps = Object.entries(pkg.dependencies ?? {}).slice(0, 20).map(([name, version]) => ({
@@ -42047,9 +42045,9 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-DWF5Z2LC.js");
-    const { LEARNING_DIR } = await import("./learning-persistence-WMWZJZ35.js");
-    const mem = createSessionMemory2(LEARNING_DIR);
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-IOXXN6XA.js");
+    const { getLearningDir } = await import("./learning-persistence-FILWP3IR.js");
+    const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(Date.now())}`);
     cachedMemory = {
       recordLearning: (l) => {
@@ -42096,10 +42094,10 @@ function flushPipelineMemory() {
 }
 async function persistMobiMemState() {
   try {
-    const { isPersistenceEnabled } = await import("./learning-persistence-WMWZJZ35.js");
+    const { isPersistenceEnabled } = await import("./learning-persistence-FILWP3IR.js");
     if (!isPersistenceEnabled()) return;
     const { nexusDataPath: nexusDataPath2 } = await import("./nexus-data-dir-M6DYKIHJ.js");
-    const { createMobiMem } = await import("./mobimem-QDBP37H7.js");
+    const { createMobiMem } = await import("./mobimem-NO7I2Y4O.js");
     const mobimem = createMobiMem();
     const savePath = nexusDataPath2("memory", "mobimem-state.json");
     await mobimem.save(savePath);
@@ -42116,7 +42114,7 @@ function recordRoutingExperience(category, success, durationMs) {
     callRecord(routingMemoryCache);
     return;
   }
-  void import("./routing-memory-W3YWMLJM.js").then(({ createRoutingMemory }) => {
+  void import("./routing-memory-SALB3DZI.js").then(({ createRoutingMemory }) => {
     routingMemoryCache = createRoutingMemory();
     callRecord(routingMemoryCache);
   }).catch((error) => {
@@ -42145,7 +42143,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-YQSLX4MS.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-SBJRXFTW.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -42162,9 +42160,9 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-DWF5Z2LC.js");
-    const { LEARNING_DIR } = await import("./learning-persistence-WMWZJZ35.js");
-    const memory = createSessionMemory2(LEARNING_DIR, { maxLearningsInContext: 10 });
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-IOXXN6XA.js");
+    const { getLearningDir } = await import("./learning-persistence-FILWP3IR.js");
+    const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
     if (learnings.length === 0) return "";
     const lines = learnings.slice(0, 8).map((l) => `- ${l.pattern}`).join("\n");
@@ -42255,7 +42253,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-PRLGGUNY.js");
+        const { executeVoting } = await import("./consensus-vote-6FKSINXV.js");
         const votingResult = await executeVoting(
           {
             proposal: plan.slice(0, 4e3),
@@ -42415,7 +42413,7 @@ function extractIssues(text) {
 
 // src/pipeline/pipeline-checkpoint.ts
 import * as fs10 from "fs";
-import * as path10 from "path";
+import * as path9 from "path";
 var logger38 = createLogger({ component: "pipeline-checkpoint" });
 var SESSION_ID_REGEX = /^[a-zA-Z0-9_-]{1,128}$/;
 function validateSessionId(sessionId) {
@@ -42427,7 +42425,7 @@ function getCheckpointPath(sessionId, customDir) {
     logger38.warn("Checkpoint directory unavailable", { error: dirResult.error.message });
     return null;
   }
-  return path10.join(dirResult.value, `pipeline-${sessionId}.jsonl`);
+  return path9.join(dirResult.value, `pipeline-${sessionId}.jsonl`);
 }
 function saveStageCheckpoint(sessionId, stage, data, customDir) {
   if (!validateSessionId(sessionId)) {
@@ -43100,11 +43098,11 @@ async function extractSymbolsForTask(task) {
     const fileRefs = task.match(/(?:src|lib|packages)\/[^\s,)]+\.ts/g);
     if (fileRefs === null || fileRefs.length === 0) return null;
     const { extractSymbols: extractSymbols2 } = await import("./symbol-extractor-UEBANFSN.js");
-    const path20 = await import("path");
+    const path19 = await import("path");
     const summaries = [];
     for (const ref of fileRefs.slice(0, 3)) {
       try {
-        const resolved = path20.resolve(ref);
+        const resolved = path19.resolve(ref);
         const result = await extractSymbols2(resolved);
         const exported = result.symbols.filter((s) => s.exported);
         if (exported.length > 0) {
@@ -43120,13 +43118,13 @@ async function extractSymbolsForTask(task) {
 }
 async function retrieveAdaptiveMemory(task) {
   try {
-    const { AdaptiveMemoryBackend } = await import("./adaptive-memory-TSZEJUJC.js");
-    const path20 = await import("path");
+    const { AdaptiveMemoryBackend } = await import("./adaptive-memory-2UIPH67R.js");
+    const path19 = await import("path");
     const { nexusDataPath: nexusDataPath2 } = await import("./nexus-data-dir-M6DYKIHJ.js");
     const baseDir = nexusDataPath2("memory");
     const memory = new AdaptiveMemoryBackend({
-      dbPath: path20.join(baseDir, "adaptive.db"),
-      markdownDir: path20.join(baseDir, "adaptive-md")
+      dbPath: path19.join(baseDir, "adaptive.db"),
+      markdownDir: path19.join(baseDir, "adaptive-md")
     });
     const key = task.slice(0, 50).replace(/\s+/g, "-").toLowerCase();
     const result = await memory.retrieve(key);
@@ -43139,7 +43137,7 @@ async function retrieveAdaptiveMemory(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-NVQIWLQL.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-SH34FJIE.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -43224,7 +43222,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-C3LLE3Z7.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-BZ3WOIEZ.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           ctx.sharedMemory.write("scan", "decision", { recommendations: recs });
@@ -43575,7 +43573,7 @@ function registerQueryTaskStateTool(server, deps) {
 
 // src/mcp/tools/verify-audit-chain-tool.ts
 import * as fs11 from "fs/promises";
-import * as path11 from "path";
+import * as path10 from "path";
 import { z as z92 } from "zod";
 var VerifyAuditChainInputSchema = z92.object({
   logDir: z92.string().min(1).max(512).describe(
@@ -43587,7 +43585,7 @@ async function loadAuditEvents(dir, logger56) {
   const auditFiles = entries.filter((name) => name.startsWith("audit-") && name.endsWith(".jsonl")).sort();
   const events = [];
   for (const filename of auditFiles) {
-    const fullPath = path11.join(dir, filename);
+    const fullPath = path10.join(dir, filename);
     let content;
     try {
       content = await fs11.readFile(fullPath, "utf-8");
@@ -43622,7 +43620,7 @@ async function handler2(args, ctx) {
   if (!parsed.success) {
     return toolError(`Validation error: ${formatZodError(parsed.error)}`);
   }
-  const resolvedDir = path11.resolve(parsed.data.logDir);
+  const resolvedDir = path10.resolve(parsed.data.logDir);
   let dirStats;
   try {
     dirStats = await fs11.stat(resolvedDir);
@@ -43672,7 +43670,7 @@ function registerVerifyAuditChainTool(server, deps) {
 // src/mcp/tools/pipeline-tool.ts
 import { z as z93 } from "zod";
 import * as fs12 from "fs";
-import * as path12 from "path";
+import * as path11 from "path";
 var PipelineInputSchema = z93.object({
   /** The task to execute. */
   task: z93.string().min(5).max(1e4).describe("Task description \u2014 pipeline template auto-selected based on content"),
@@ -43697,8 +43695,8 @@ var PipelineInputSchema = z93.object({
   timeoutMs: z93.number().int().min(3e4).max(6e5).optional().describe("Max time per stage in ms (30000-600000). Default: varies by stage complexity"),
   /** Stop after planning/voting (no implementation). */
   dryRun: z93.boolean().default(false).describe("Stop after vote stage (no implementation)"),
-  /** Use simulated votes (for testing). */
-  simulateVotes: z93.boolean().default(false).describe("Use simulated votes (for testing without real CLIs)")
+  /** TESTS ONLY — random output, must not be used for real decisions. (#2319) */
+  simulateVotes: z93.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)")
 });
 function buildOutput2(result) {
   return {
@@ -43715,8 +43713,8 @@ function buildOutput2(result) {
 }
 function resolveTask(task, specFile) {
   if (specFile === void 0) return task;
-  const resolved = path12.resolve(specFile);
-  const cwdRoot = path12.resolve(".");
+  const resolved = path11.resolve(specFile);
+  const cwdRoot = path11.resolve(".");
   if (!resolved.startsWith(cwdRoot)) {
     throw new Error(`Path traversal denied: specFile must be within ${cwdRoot}`);
   }
@@ -43743,6 +43741,9 @@ function selectStageRegistry(template, task, agentStages) {
 function registerPipelineTool(server, _deps) {
   server.tool("run_pipeline", PipelineInputSchema.shape, async (args) => {
     const input = PipelineInputSchema.parse(args);
+    if (input.simulateVotes) {
+      warnIfSimulatedOutsideTests("run_pipeline", createLogger({ tool: "run_pipeline" }));
+    }
     try {
       const task = resolveTask(input.task, input.specFile);
       const agentStages = createAgentStages({
@@ -48147,13 +48148,13 @@ function createEmptyContext() {
     approachHistory: []
   };
 }
-function assignRelevance(path20, response) {
+function assignRelevance(path19, response) {
   const lowerResponse = response.toLowerCase();
-  const lowerPath = path20.toLowerCase();
+  const lowerPath = path19.toLowerCase();
   const idx = lowerResponse.indexOf(lowerPath);
   if (idx === -1) return "low";
   const surroundStart = Math.max(0, idx - 100);
-  const surroundEnd = Math.min(lowerResponse.length, idx + path20.length + 100);
+  const surroundEnd = Math.min(lowerResponse.length, idx + path19.length + 100);
   const surrounding = lowerResponse.slice(surroundStart, surroundEnd);
   if (/(?:root cause|bug|fix|patch|change|modify|edit)/i.test(surrounding)) {
     return "high";
@@ -48297,9 +48298,9 @@ var SAFE_COMMIT_RE = /^[0-9a-f]{7,40}$/i;
 var SAFE_REPO_RE = /^[a-zA-Z0-9_.-]+\/[a-zA-Z0-9_.-]+$/;
 async function tryExistingClone(repoDir, commit, exec5) {
   const fs20 = await import("fs/promises");
-  const path20 = await import("path");
+  const path19 = await import("path");
   try {
-    await fs20.access(path20.join(repoDir, ".git"));
+    await fs20.access(path19.join(repoDir, ".git"));
     await exec5(`git checkout -- .`, { cwd: repoDir, timeout: GIT_TIMEOUT_MS });
     await exec5(`git clean -fd`, { cwd: repoDir, timeout: GIT_TIMEOUT_MS });
     try {
@@ -48318,7 +48319,7 @@ async function tryExistingClone(repoDir, commit, exec5) {
   }
 }
 async function cloneRepository(repo, commit, workDir) {
-  const path20 = await import("path");
+  const path19 = await import("path");
   const fs20 = await import("fs/promises");
   const childProcess = await import("child_process");
   const { promisify: promisify9 } = await import("util");
@@ -48329,7 +48330,7 @@ async function cloneRepository(repo, commit, workDir) {
   if (!SAFE_COMMIT_RE.test(commit)) {
     return { ok: false, error: new AgentRunnerError(`Invalid commit hash: ${commit}`) };
   }
-  const repoDir = path20.join(workDir, repo.replaceAll("/", "__"));
+  const repoDir = path19.join(workDir, repo.replaceAll("/", "__"));
   try {
     await fs20.mkdir(workDir, { recursive: true });
     const cloned = await tryExistingClone(repoDir, commit, exec5);
@@ -48348,8 +48349,8 @@ async function applyPatch(repoDir, patch) {
   const { promisify: promisify9 } = await import("util");
   const exec5 = promisify9(childProcess.exec);
   const fs20 = await import("fs/promises");
-  const path20 = await import("path");
-  const patchFile = path20.join(repoDir, ".agent_patch.diff");
+  const path19 = await import("path");
+  const patchFile = path19.join(repoDir, ".agent_patch.diff");
   try {
     await fs20.writeFile(patchFile, patch);
     await exec5(`git apply --whitespace=fix ${patchFile}`, {
@@ -49487,7 +49488,7 @@ function transformHarnessOutput(raw) {
 // src/swe-bench/harness-file-operations.ts
 import { spawn } from "child_process";
 import * as fs14 from "fs/promises";
-import * as path13 from "path";
+import * as path12 from "path";
 var capitalizeFirst = capitalize;
 function buildHarnessArgs(config) {
   const args = [
@@ -49584,7 +49585,7 @@ function createInitialProgress(totalCount) {
   };
 }
 function getResultsFilePath(config) {
-  return path13.join(config.outputDir, config.runId, "results.json");
+  return path12.join(config.outputDir, config.runId, "results.json");
 }
 
 // src/swe-bench/harness-process-runner.ts
@@ -50141,7 +50142,7 @@ function formatValidationResult(result) {
 }
 
 // src/swe-bench/evaluation-harness-helpers.ts
-import * as os3 from "os";
+import * as os from "os";
 function calculateMetrics(results) {
   const totalInstances = results.length;
   const predictedInstances = totalInstances;
@@ -50233,12 +50234,12 @@ function createProgressAdapter(totalPredictions, onProgress) {
 }
 function getMemoryInfo() {
   return {
-    total: os3.totalmem(),
-    free: os3.freemem()
+    total: os.totalmem(),
+    free: os.freemem()
   };
 }
 function getCpuCores() {
-  return os3.cpus().length;
+  return os.cpus().length;
 }
 
 // src/swe-bench/evaluation-harness.ts
@@ -51322,11 +51323,11 @@ function parsePatch(patch) {
 import { execFile as execFile5 } from "child_process";
 import { promisify as promisify7 } from "util";
 import * as fs15 from "fs/promises";
-import * as path14 from "path";
+import * as path13 from "path";
 var execFileAsync5 = promisify7(execFile5);
 var MAX_OUTPUT_BUFFER = 5 * 1024 * 1024;
 async function writeTempPatch(patch, workDir) {
-  const tempPath = path14.join(workDir, `.patch-${String(getTimeProvider().now())}.patch`);
+  const tempPath = path13.join(workDir, `.patch-${String(getTimeProvider().now())}.patch`);
   await fs15.writeFile(tempPath, patch, "utf-8");
   return tempPath;
 }
@@ -51577,9 +51578,9 @@ var TestRunnerError = class extends Error {
 
 // src/swe-bench/test-runner-parser.ts
 import * as fs16 from "fs/promises";
-import * as path15 from "path";
+import * as path14 from "path";
 async function readJsonResults(workDir) {
-  const jsonPath = path15.join(workDir, "test-results.json");
+  const jsonPath = path14.join(workDir, "test-results.json");
   try {
     const content = await fs16.readFile(jsonPath, "utf-8");
     return JSON.parse(content);
@@ -51774,7 +51775,7 @@ ${getStderr()}`.trim();
 import { exec as exec3 } from "child_process";
 import { promisify as promisify8 } from "util";
 import * as fs17 from "fs/promises";
-import * as path16 from "path";
+import * as path15 from "path";
 var execAsync3 = promisify8(exec3);
 var FRAMEWORK_CONFIG_FILES = {
   pytest: ["pytest.ini", "pyproject.toml", "setup.cfg", "conftest.py", "tox.ini"],
@@ -51880,7 +51881,7 @@ var TestRunner = class {
   async findConfigFiles(workDir, configFiles) {
     const found = [];
     for (const file of configFiles) {
-      const filePath = path16.join(workDir, file);
+      const filePath = path15.join(workDir, file);
       try {
         await fs17.access(filePath);
         found.push(file);
@@ -52033,7 +52034,7 @@ async function detectTestFramework(workDir) {
 
 // src/swe-bench/report-generator.ts
 import * as fs18 from "fs/promises";
-import * as path17 from "path";
+import * as path16 from "path";
 
 // src/swe-bench/report-renderer.ts
 function renderReport(report, format) {
@@ -52389,7 +52390,7 @@ var ReportGenerator = class {
   async save(report, config) {
     this.logger.info("Saving report", { outputPath: config.outputPath });
     const content = await this.render(report, config.format);
-    await fs18.mkdir(path17.dirname(config.outputPath), { recursive: true });
+    await fs18.mkdir(path16.dirname(config.outputPath), { recursive: true });
     await fs18.writeFile(config.outputPath, content, "utf-8");
     this.logger.info("Report saved", { path: config.outputPath, format: config.format });
   }
@@ -52609,14 +52610,14 @@ async function exportReport(result, outputPath, config) {
 
 // src/swe-bench/trace-logger.ts
 import { appendFile, writeFile as writeFile6 } from "fs/promises";
-import * as path18 from "path";
+import * as path17 from "path";
 function deriveTracePath(outputPath) {
-  const ext = path18.extname(outputPath);
+  const ext = path17.extname(outputPath);
   const base = outputPath.slice(0, outputPath.length - ext.length);
   return `${base}-trace.jsonl`;
 }
 function deriveStatusPath(outputPath) {
-  const ext = path18.extname(outputPath);
+  const ext = path17.extname(outputPath);
   const base = outputPath.slice(0, outputPath.length - ext.length);
   return `${base}-status.json`;
 }
@@ -52822,7 +52823,7 @@ function getStdinLifecycleMonitor() {
 
 // src/pipeline/task-tracker.ts
 import * as fs19 from "fs";
-import * as path19 from "path";
+import * as path18 from "path";
 var logger55 = createLogger({ component: "task-tracker" });
 async function exec4(cmd, args, timeout = 15e3) {
   const { execFile: execFile6 } = await import("child_process");
@@ -52838,7 +52839,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-FA7WDPZW.js");
+    const { createScmProvider } = await import("./factory-7DJA2CIL.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -52900,8 +52901,8 @@ var JsonTaskTracker = class {
   outputPath;
   constructor(config) {
     const dir = config.outputDir ?? ".nexus-pipeline";
-    this.outputPath = path19.resolve(dir, "tasks.json");
-    fs19.mkdirSync(path19.dirname(this.outputPath), { recursive: true });
+    this.outputPath = path18.resolve(dir, "tasks.json");
+    fs19.mkdirSync(path18.dirname(this.outputPath), { recursive: true });
   }
   async createTask(title, body) {
     const id = String(this.nextId++);
@@ -53661,4 +53662,4 @@ export {
   detectBackend,
   createTaskTracker
 };
-//# sourceMappingURL=chunk-4G7MSCIK.js.map
+//# sourceMappingURL=chunk-EB7LP5WD.js.map