nexus-agents 2.95.0 → 2.97.0

package/dist/{chunk-FYGZ4MEQ.js → chunk-76FTBRUS.js}

@@ -1,25 +1,22 @@
+import {
+  CodebaseIndex,
+  extractSymbolIndex,
+  extractSymbols
+} from "./chunk-3ACDP4E6.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-5HBDXW44.js";
+} from "./chunk-FDTIRCSL.js";
 import {
   executeExpert
-} from "./chunk-2X24T4ZD.js";
+} from "./chunk-6IN4MKDA.js";
 import {
   EventTopics,
   JobStatusSchema,
-  NOOP_NOTIFIER,
-  RateLimiter,
-  abortSignalStorage,
   collectRealVotes,
-  createDefaultRateLimiter,
   createEvent,
-  createMcpNotifier,
-  createSecureHandler,
   getGlobalEventBus,
   getGlobalRegistry,
-  getToolAnnotations,
-  getToolTimeout,
   isRateLimitError,
   listJobs,
   readJobResult,
@@ -27,22 +24,13 @@ import {
   release,
   shortCircuitOrFreshJobId,
   suggestRetryAfterMs,
-  toSdkCallback,
-  toSdkCallbackWithBudgetCheck,
-  toolError,
-  toolStructuredError,
-  toolSuccess,
-  toolSuccessStructured,
   tryAcquire,
   warnIfSimulatedOutsideTests,
-  withAccessPolicy,
-  withProgressHeartbeat,
-  wrapToolWithTimeout,
   writeJobCancelled,
   writeJobComplete,
   writeJobFailed,
   writeJobPending
-} from "./chunk-VTMQND6B.js";
+} from "./chunk-GAIUXYF4.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
@@ -51,51 +39,68 @@ import {
   normalizeTopicToCanonical,
   savePapersRegistry,
   synthesizeResearch
-} from "./chunk-ECZW5FXN.js";
+} from "./chunk-T5TYWM5S.js";
 import {
   IssueTriage,
   createAuditTrail,
   createGraphAuditBridge
-} from "./chunk-4NVYN2MB.js";
+} from "./chunk-KKVH3PDK.js";
 import {
   resolveEnvMode,
   sanitizeInput
-} from "./chunk-O4LVC4MQ.js";
+} from "./chunk-SZNNT2DH.js";
+import {
+  withPrerequisite
+} from "./chunk-P2BKWVKF.js";
+import {
+  NOOP_NOTIFIER,
+  RateLimiter,
+  abortSignalStorage,
+  createDefaultRateLimiter,
+  createMcpNotifier,
+  createSecureHandler,
+  getToolAnnotations,
+  getToolTimeout,
+  toSdkCallback,
+  toSdkCallbackWithBudgetCheck,
+  toolError,
+  toolStructuredError,
+  toolSuccess,
+  toolSuccessStructured,
+  withAccessPolicy,
+  withProgressHeartbeat,
+  wrapToolWithTimeout
+} from "./chunk-5LGAPYX7.js";
 import {
   generateSecurityPlan
-} from "./chunk-BSHDI4BH.js";
+} from "./chunk-WXDWDGVL.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-HFOQKCD2.js";
-import {
-  CodebaseIndex,
-  extractSymbolIndex,
-  extractSymbols
-} from "./chunk-3ACDP4E6.js";
 import {
   getContextForTask,
   inferTaskCategory,
   summarizeContextForPrompt
-} from "./chunk-TEKWQNQ2.js";
+} from "./chunk-D3OT7TOA.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-KHZGMF2W.js";
+} from "./chunk-IHKPGTF3.js";
 import {
   DEFAULT_TASK_TTL_MS,
   DEFAULT_TOOL_RATE_LIMITS,
   clampTaskTtl
-} from "./chunk-GC5FH2IA.js";
+} from "./chunk-APLZRTYC.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-QUPPV6UO.js";
+} from "./chunk-N5656LE3.js";
 import {
   DEFAULTS
-} from "./chunk-7GUP6KQQ.js";
+} from "./chunk-UNOOL6EN.js";
 import {
   resolveInsideRoot
 } from "./chunk-NUBSJGQZ.js";
@@ -111,11 +116,11 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-3H6Q3RZM.js";
+} from "./chunk-ML4IF3PS.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-G42N55ZR.js";
+} from "./chunk-HZGHPBTV.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -127,7 +132,7 @@ import {
 } from "./chunk-PQHVC4BD.js";
 import {
   createSessionMemory
-} from "./chunk-6IWPN5UB.js";
+} from "./chunk-HIWO2WWP.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -199,9 +204,8 @@ import {
   resolveModelIdentitySync,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-ECBH5INZ.js";
+} from "./chunk-JTQLV374.js";
 import {
-  getNexusDataDir,
   nexusDataPath,
   nexusDataPathEnsure
 } from "./chunk-CH7QIDHQ.js";
@@ -2063,9 +2067,9 @@ var TASK_CATEGORY_KEYWORDS = [
   [["document", "doc"], "documentation"],
   [["refactor"], "refactoring"]
 ];
-function categorizeTaskByKeywords(description2) {
+function categorizeTaskByKeywords(description) {
   for (const [keywords, category] of TASK_CATEGORY_KEYWORDS) {
-    if (keywords.some((kw) => description2.includes(kw))) {
+    if (keywords.some((kw) => description.includes(kw))) {
       return category;
     }
   }
@@ -2599,8 +2603,8 @@ async function persistMemoryAfterTask(params) {
   });
   return updatedState;
 }
-function categorizeTaskType(description2) {
-  const desc = description2.toLowerCase();
+function categorizeTaskType(description) {
+  const desc = description.toLowerCase();
   return categorizeTaskByKeywords(desc);
 }
 async function persistMemoryOnCleanup(params) {
@@ -6270,8 +6274,8 @@ function scoreRoleCapabilities(subtask, role, expertWeights) {
   const weight = expertWeights[role] ?? 1;
   return score * weight;
 }
-function applyKeywordBoosts(scores, description2) {
-  const desc = description2.toLowerCase();
+function applyKeywordBoosts(scores, description) {
+  const desc = description.toLowerCase();
   const boosts = [
     { keywords: ["code", "implement"], role: "code_expert" },
     { keywords: ["architecture", "design"], role: "architecture_expert" },
@@ -6335,7 +6339,7 @@ function selectExpertForSubtask(subtask, expertWeights) {
 }
 
 // src/agents/tech-lead-helpers.ts
-function inferTaskType(description2) {
+function inferTaskType(description) {
   const typeKeywords = {
     implementation: ["implement", "create", "build", "develop", "write code"],
     refactoring: ["refactor", "improve", "optimize", "clean up"],
@@ -6347,16 +6351,16 @@ function inferTaskType(description2) {
   };
   for (const [taskType, keywords] of Object.entries(typeKeywords)) {
     for (const keyword of keywords) {
-      if (description2.includes(keyword)) {
+      if (description.includes(keyword)) {
         return taskType;
       }
     }
   }
   return "general";
 }
-function extractRequirements(description2) {
+function extractRequirements(description) {
   const requirements = [];
-  const lines = description2.split(/[.\n]/);
+  const lines = description.split(/[.\n]/);
   for (const line of lines) {
     const trimmed = line.trim();
     if (trimmed.length > 10 && (trimmed.includes("must") || trimmed.includes("should") || trimmed.includes("need") || trimmed.includes("require"))) {
@@ -6365,21 +6369,21 @@ function extractRequirements(description2) {
   }
   return requirements.slice(0, 5);
 }
-function identifyRisks(description2) {
+function identifyRisks(description) {
   const risks = [];
-  if (description2.includes("database") || description2.includes("migration")) {
+  if (description.includes("database") || description.includes("migration")) {
     risks.push("Data integrity during changes");
   }
-  if (description2.includes("security")) {
+  if (description.includes("security")) {
     risks.push("Security vulnerabilities if not thorough");
   }
-  if (description2.includes("performance")) {
+  if (description.includes("performance")) {
     risks.push("Performance regression");
   }
-  if (description2.includes("api") || description2.includes("interface")) {
+  if (description.includes("api") || description.includes("interface")) {
     risks.push("Breaking API changes");
   }
-  if (description2.includes("concurrent") || description2.includes("parallel")) {
+  if (description.includes("concurrent") || description.includes("parallel")) {
     risks.push("Race conditions");
   }
   return risks;
@@ -6394,23 +6398,23 @@ function suggestApproach(taskType, complexity) {
   return `Low complexity ${taskType} task. Direct implementation with basic validation.`;
 }
 function heuristicAnalysis(task, options) {
-  const description2 = task.description.toLowerCase();
+  const description = task.description.toLowerCase();
   const wordCount = task.description.split(/\s+/).length;
   let complexity = 3;
   if (wordCount > 100) complexity += 2;
   if (wordCount > 200) complexity += 2;
-  if (description2.includes("security")) complexity += 1;
-  if (description2.includes("architecture")) complexity += 1;
-  if (description2.includes("refactor")) complexity += 1;
+  if (description.includes("security")) complexity += 1;
+  if (description.includes("architecture")) complexity += 1;
+  if (description.includes("refactor")) complexity += 1;
   complexity = Math.min(10, complexity);
-  const taskType = inferTaskType(description2);
-  const requirements = extractRequirements(description2);
+  const taskType = inferTaskType(description);
+  const requirements = extractRequirements(description);
   return {
     taskId: task.id,
     complexity,
     taskType,
     requirements,
-    risks: identifyRisks(description2),
+    risks: identifyRisks(description),
     needsDecomposition: complexity >= options.decompositionThreshold,
     approach: suggestApproach(taskType, complexity),
     estimatedEffort: Math.ceil(complexity * 1.5)
@@ -6488,7 +6492,7 @@ function createSubtask(params) {
     baseId,
     num,
     parentTaskId,
-    description: description2,
+    description,
     expectedOutput,
     deps,
     priority,
@@ -6498,7 +6502,7 @@ function createSubtask(params) {
   return {
     id: `${baseId}-${String(num)}`,
     parentTaskId,
-    description: description2,
+    description,
     expectedOutput,
     dependencies: deps.map((d) => `${baseId}-${d}`),
     priority,
@@ -6819,13 +6823,13 @@ function buildBaseWorkflow(plan, steps, options) {
   };
 }
 function addDescription(workflow, plan, options) {
-  const description2 = generateDescription(
+  const description = generateDescription(
     plan.analysis,
     options?.description,
     options?.includeAnalysis
   );
-  if (description2 !== void 0) {
-    workflow.description = description2;
+  if (description !== void 0) {
+    workflow.description = description;
   }
 }
 function addTimeout(workflow, estimatedDuration) {
@@ -8079,8 +8083,8 @@ function buildCodeExpertBaseOptions(options, expertOpts) {
   if (options.logger !== void 0) baseOptions.logger = options.logger;
   return baseOptions;
 }
-function inferOperationType(description2) {
-  const desc = description2.toLowerCase();
+function inferOperationType(description) {
+  const desc = description.toLowerCase();
   if (desc.includes("debug") || desc.includes("fix bug") || desc.includes("error")) {
     return "debugging";
   }
@@ -8107,9 +8111,9 @@ function generateHeuristicRecommendations(operationType) {
       return baseRecs;
   }
 }
-function detectHeuristicWarnings(description2) {
+function detectHeuristicWarnings(description) {
   const warnings = [];
-  const desc = description2.toLowerCase();
+  const desc = description.toLowerCase();
   if (desc.includes("database") || desc.includes("sql")) {
     warnings.push("Database changes may require migration");
   }
@@ -9088,9 +9092,9 @@ var VULNERABILITY_PATTERNS = [
     cweId: "CWE-942"
   }
 ];
-function detectHeuristicVulnerabilities(description2, options = {}) {
+function detectHeuristicVulnerabilities(description, options = {}) {
   const vulnerabilities = [];
-  const desc = description2.toLowerCase();
+  const desc = description.toLowerCase();
   let vulnId = 1;
   for (const p of VULNERABILITY_PATTERNS) {
     if (p.pattern.test(desc)) {
@@ -9411,9 +9415,9 @@ var COMPONENT_PATTERNS = [
     responsibilities: ["Business rules", "Domain operations", "Workflow management"]
   }
 ];
-function identifyHeuristicPatterns(description2) {
+function identifyHeuristicPatterns(description) {
   const patterns = [];
-  const desc = description2.toLowerCase();
+  const desc = description.toLowerCase();
   for (const match of ARCHITECTURE_PATTERNS) {
     if (match.pattern.test(desc)) {
       patterns.push({
@@ -9426,9 +9430,9 @@ function identifyHeuristicPatterns(description2) {
   }
   return patterns.slice(0, 5);
 }
-function identifyHeuristicComponents(description2) {
+function identifyHeuristicComponents(description) {
   const components = [];
-  const desc = description2.toLowerCase();
+  const desc = description.toLowerCase();
   for (const cp of COMPONENT_PATTERNS) {
     if (cp.pattern.test(desc)) {
       components.push({
@@ -9459,8 +9463,8 @@ function generateHeuristicADRs(task, patterns) {
     }
   ];
 }
-function inferAnalysisType(description2) {
-  const desc = description2.toLowerCase();
+function inferAnalysisType(description) {
+  const desc = description.toLowerCase();
   if (desc.includes("pattern") || desc.includes("which approach")) {
     return "pattern_selection";
   }
@@ -9487,9 +9491,9 @@ function generateHeuristicRecommendations3(analysisType) {
       return base;
   }
 }
-function detectArchitectureWarnings(description2) {
+function detectArchitectureWarnings(description) {
   const warnings = [];
-  const desc = description2.toLowerCase();
+  const desc = description.toLowerCase();
   if (desc.includes("monolith") && desc.includes("microservice")) {
     warnings.push("Migration from monolith to microservices is complex - plan carefully");
   }
@@ -9815,8 +9819,8 @@ function createHeuristicCoverage() {
     ]
   };
 }
-function assessHeuristicQuality(description2) {
-  const desc = description2.toLowerCase();
+function assessHeuristicQuality(description) {
+  const desc = description.toLowerCase();
   const issues = [];
   if (desc.includes("flaky") || desc.includes("intermittent")) {
     issues.push("Flaky tests detected - improve test isolation");
@@ -9862,9 +9866,9 @@ function generateHeuristicRecommendations4(operationType) {
       return base;
   }
 }
-function detectTestingWarnings(description2) {
+function detectTestingWarnings(description) {
   const warnings = [];
-  const desc = description2.toLowerCase();
+  const desc = description.toLowerCase();
   if (desc.includes("database") || desc.includes("external")) {
     warnings.push("Integration tests with external dependencies need careful setup/teardown");
   }
@@ -9879,8 +9883,8 @@ function detectTestingWarnings(description2) {
   }
   return warnings;
 }
-function inferOperationType2(description2) {
-  const desc = description2.toLowerCase();
+function inferOperationType2(description) {
+  const desc = description.toLowerCase();
   if (desc.includes("coverage") || desc.includes("uncovered")) {
     return "coverage_analysis";
   }
@@ -10191,9 +10195,9 @@ function generateHeuristicRecommendations5(docType) {
       return base;
   }
 }
-function detectDocumentationWarnings(description2) {
+function detectDocumentationWarnings(description) {
   const warnings = [];
-  const desc = description2.toLowerCase();
+  const desc = description.toLowerCase();
   if (desc.includes("internal") || desc.includes("private")) {
     warnings.push("Document internal APIs carefully - they may change");
   }
@@ -10208,8 +10212,8 @@ function detectDocumentationWarnings(description2) {
   }
   return warnings;
 }
-function inferDocumentationType(description2) {
-  const desc = description2.toLowerCase();
+function inferDocumentationType(description) {
+  const desc = description.toLowerCase();
   if (desc.includes("api") || desc.includes("endpoint") || desc.includes("function doc")) {
     return "api";
   }
@@ -11796,14 +11800,14 @@ var TrinityStopReasonSchema = z13.enum(["verified", "max_iterations", "timeout",
 // src/agents/collaboration/trinity-helpers.ts
 function buildRoleTask(baseTask, role, context) {
   const rolePrompt = TRINITY_ROLE_PROMPTS[role];
-  const description2 = `${rolePrompt}
+  const description = `${rolePrompt}
 
 ---
 
 Original Task: ${baseTask.description}
 
 ${context}`;
-  return { id: `${baseTask.id}-${role}`, description: description2, context: baseTask.context };
+  return { id: `${baseTask.id}-${role}`, description, context: baseTask.context };
 }
 function extractSections(text) {
   const sections = {};
@@ -13256,8 +13260,8 @@ var SkillComposer = class {
   /**
    * Extracts keywords from task description.
    */
-  extractTaskKeywords(description2) {
-    return description2.toLowerCase().split(/\W+/).filter((word) => word.length > 2);
+  extractTaskKeywords(description) {
+    return description.toLowerCase().split(/\W+/).filter((word) => word.length > 2);
   }
   /**
    * Scores skills for a specific task.
@@ -16503,8 +16507,8 @@ var AGENT_PATTERN_MAP = {
   executor: "execution",
   terminator: "termination"
 };
-function extractKeywords3(description2) {
-  return description2.toLowerCase().split(/\W+/).filter((word) => word.length > 2 && !STOPWORDS.has(word)).slice(0, 10);
+function extractKeywords3(description) {
+  return description.toLowerCase().split(/\W+/).filter((word) => word.length > 2 && !STOPWORDS.has(word)).slice(0, 10);
 }
 function computeSimilarity(strings) {
   if (strings.length < 2) return 0;
@@ -23555,10 +23559,10 @@ function calculateZStatistic(params) {
 function calculateDifferenceCI(p1, p2, total1, total2, confidence) {
   const difference = p1 - p2;
   const seDiff = Math.sqrt(p1 * (1 - p1) / (total1 || 1) + p2 * (1 - p2) / (total2 || 1));
-  const z112 = getZScore(confidence);
+  const z111 = getZScore(confidence);
   return {
-    lower: difference - z112 * seDiff,
-    upper: difference + z112 * seDiff,
+    lower: difference - z111 * seDiff,
+    upper: difference + z111 * seDiff,
     estimate: difference,
     confidence,
     n: total1 + total2,
@@ -23581,11 +23585,11 @@ function proportionConfidenceInterval(successes, total, options = {}) {
       standardError: 0
     };
   }
-  const z112 = getZScore(opts.confidence);
-  const z210 = z112 * z112;
+  const z111 = getZScore(opts.confidence);
+  const z210 = z111 * z111;
   const denominator = 1 + z210 / n;
   const center = (p + z210 / (2 * n)) / denominator;
-  const margin = z112 / denominator * Math.sqrt(p * (1 - p) / n + z210 / (4 * n * n));
+  const margin = z111 / denominator * Math.sqrt(p * (1 - p) / n + z210 / (4 * n * n));
   const lower = Math.max(0, center - margin);
   const upper = Math.min(1, center + margin);
   const standardError = Math.sqrt(p * (1 - p) / n);
@@ -23615,8 +23619,8 @@ function meanConfidenceInterval(values, options = {}) {
   const variance = values.reduce((sum, v) => sum + (v - mean) ** 2, 0) / (n - 1 || 1);
   const stdDev = Math.sqrt(variance);
   const standardError = stdDev / Math.sqrt(n);
-  const z112 = getZScore(opts.confidence);
-  const margin = z112 * standardError;
+  const z111 = getZScore(opts.confidence);
+  const margin = z111 * standardError;
   return {
     lower: mean - margin,
     upper: mean + margin,
@@ -25366,9 +25370,9 @@ function generateTopicsTable(index) {
     "multi-agent-worker-dispatch": "Worker dispatch and wave execution"
   };
   const rows = topicStats.map((stat5) => {
-    const description2 = topicDescriptions[stat5.topic];
+    const description = topicDescriptions[stat5.topic];
     const topicLink = `[${capitalizeWords(stat5.topic.replaceAll("-", " "))}](topics/${stat5.topic}/README.md)`;
-    return `| ${topicLink} | ${String(stat5.paperCount)} | ${String(stat5.techniqueCount)} | ${description2 ?? ""} |`;
+    return `| ${topicLink} | ${String(stat5.paperCount)} | ${String(stat5.techniqueCount)} | ${description ?? ""} |`;
   });
   return `---
 
@@ -26037,7 +26041,7 @@ function registerCreateExpertTool(server, deps) {
     ]).describe("Expert role to create"),
     modelPreference: z44.string().max(100).optional().describe("Preferred model (e.g., claude-sonnet-4)")
   };
-  const description2 = "Create a specialized expert agent for code, architecture, security, documentation, testing, devops, research, product management, UX, or infrastructure tasks";
+  const description = "Create a specialized expert agent for code, architecture, security, documentation, testing, devops, research, product management, UX, or infrastructure tasks";
   const secureHandler = createSecureHandler(createCreateExpertHandler(deps), {
     toolName: "create_expert",
     rateLimiter: deps.rateLimiter,
@@ -26047,7 +26051,7 @@ function registerCreateExpertTool(server, deps) {
   const wrappedHandler = wrapToolWithTimeout("create_expert", secureHandler, { timeoutMs, logger: logger55 });
   server.registerTool(
     "create_expert",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("create_expert") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("create_expert") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered create_expert tool with secure handler and timeout protection");
@@ -27001,7 +27005,7 @@ async function populateUnifiedContextOnState(state) {
   try {
     const taskCandidate = state["task"];
     if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-    const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-6O6TREXH.js");
+    const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-H22L3WFV.js");
     const ctx = await getContextForTask2({
       task: taskCandidate,
       category: inferTaskCategory2(taskCandidate),
@@ -28030,12 +28034,12 @@ var logger18 = createLogger({ component: "CorePlugins" });
 function noopStageResult() {
   return { success: true, outputArtifacts: [], metadata: { stub: true } };
 }
-function createCorePlugin(id, description2, stages) {
+function createCorePlugin(id, description, stages) {
   return {
     manifest: {
       id,
       version: "1.0.0",
-      description: description2,
+      description,
       stages,
       requiredCapabilities: [],
       trustLevel: "core",
@@ -34288,7 +34292,7 @@ function registerOrchestrateTool(server, deps) {
   const logger55 = deps.logger ?? createLogger({ tool: "orchestrate" });
   const notifier = deps.notifier ?? createMcpNotifier(server);
   const depsWithNotifier = { ...deps, notifier };
-  const description2 = "Orchestrate a task by analyzing it, breaking it into subtasks if needed, and coordinating expert agents";
+  const description = "Orchestrate a task by analyzing it, breaking it into subtasks if needed, and coordinating expert agents";
   const secureHandler = createSecureHandler(createOrchestrateHandler(depsWithNotifier), {
     toolName: "orchestrate",
     securityTier: "user-facing",
@@ -34303,7 +34307,7 @@ function registerOrchestrateTool(server, deps) {
   server.registerTool(
     "orchestrate",
     {
-      description: description2,
+      description,
       inputSchema: ORCHESTRATE_TOOL_SCHEMA,
       annotations: getToolAnnotations("orchestrate")
     },
@@ -35865,7 +35869,7 @@ function registerListExpertsTool(server, deps) {
   const toolSchema = {
     format: z57.enum(["full", "names"]).optional().describe("Output format: full (with details) or names (just role names)")
   };
-  const description2 = "Inventory of expert ROLES available to `create_expert` (architect, security, devex, etc.). Use this BEFORE create_expert to pick a role; returns role name, capability summary, default model.";
+  const description = "Inventory of expert ROLES available to `create_expert` (architect, security, devex, etc.). Use this BEFORE create_expert to pick a role; returns role name, capability summary, default model.";
   const secureHandler = createSecureHandler(listExpertsHandler, {
     toolName: "list_experts",
     rateLimiter: deps.rateLimiter,
@@ -35887,7 +35891,7 @@ function registerListExpertsTool(server, deps) {
   server.registerTool(
     "list_experts",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema,
       annotations: getToolAnnotations("list_experts")
@@ -35958,7 +35962,7 @@ function registerListWorkflowsTool(server, deps) {
     category: z58.string().optional().describe("Filter by category (e.g., development, security)"),
     format: z58.enum(["full", "names"]).optional().describe("Output format: full (with details) or names (just template names)")
   };
-  const description2 = "Inventory of multi-step TEMPLATES available to `run_workflow` (code-review, security-audit, etc.). Use this BEFORE run_workflow to pick a template; returns template name, version, description, category, and required inputs.";
+  const description = "Inventory of multi-step TEMPLATES available to `run_workflow` (code-review, security-audit, etc.). Use this BEFORE run_workflow to pick a template; returns template name, version, description, category, and required inputs.";
   const secureHandler = createSecureHandler(createListWorkflowsHandler(deps.workflowEngine), {
     toolName: "list_workflows",
     rateLimiter: deps.rateLimiter,
@@ -35985,7 +35989,7 @@ function registerListWorkflowsTool(server, deps) {
   server.registerTool(
     "list_workflows",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema,
       annotations: getToolAnnotations("list_workflows")
@@ -36200,10 +36204,10 @@ function sanitizeExpertSummary(summary) {
 function buildTask(input) {
   const autoTimeout = getExpertTaskTimeout(input.task);
   const timeoutMs = input.timeoutMs ?? autoTimeout;
-  let description2 = input.task;
+  let description = input.task;
   if (input.previousExpertSummary !== void 0) {
     const sanitized = sanitizeExpertSummary(input.previousExpertSummary);
-    description2 = `[Previous expert context]
+    description = `[Previous expert context]
 ${sanitized}
 
 [Your task]
@@ -36211,7 +36215,7 @@ ${input.task}`;
   }
   return {
     id: `exec-${String(getTimeProvider().now())}-${getRandomProvider().random().toString(36).slice(2, 9)}`,
-    description: description2,
+    description,
     context: {
       metadata: input.context ?? {}
     },
@@ -36564,11 +36568,11 @@ function registerExecuteExpertTool(server, deps) {
   const logger55 = deps.logger ?? createLogger({ tool: "execute_expert" });
   const notifier = deps.notifier ?? createMcpNotifier(server);
   const depsWithNotifier = { ...deps, notifier };
-  const description2 = "Run a task through an expert YOU PREVIOUSLY CREATED via `create_expert`. Requires the expertId returned by create_expert; not for ad-hoc execution. Returns the expert analysis including output, confidence, and token usage.";
+  const description = "Run a task through an expert YOU PREVIOUSLY CREATED via `create_expert`. Requires the expertId returned by create_expert; not for ad-hoc execution. Returns the expert analysis including output, confidence, and token usage.";
   server.experimental.tasks.registerToolTask(
     "execute_expert",
     {
-      description: description2,
+      description,
       inputSchema: EXECUTE_EXPERT_TOOL_SCHEMA,
       execution: { taskSupport: "optional" },
       annotations: getToolAnnotations("execute_expert")
@@ -37990,7 +37994,7 @@ function registerResearchQueryTool(server, deps) {
     status: z62.enum(["implemented", "planned", "not-started", "rejected", "all"]).optional().describe("Filter by technique status"),
     threshold: z62.number().min(0).max(1).optional().describe("Overlap threshold (0-1) for overlap action")
   };
-  const description2 = "Query the research registry for technique status, overlaps, statistics, or text search. Provides read-only access to the research tracking system.";
+  const description = "Query the research registry for technique status, overlaps, statistics, or text search. Provides read-only access to the research tracking system.";
   const secureHandler = createSecureHandler(createResearchQueryHandler(deps), {
     toolName: "research_query",
     rateLimiter: deps.rateLimiter,
@@ -38009,7 +38013,7 @@ function registerResearchQueryTool(server, deps) {
   server.registerTool(
     "research_query",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema,
       annotations: getToolAnnotations("research_query")
@@ -38098,7 +38102,7 @@ function registerResearchAddTool(server, deps) {
     priority: z63.enum(["P1", "P2", "P3", "P4"]).optional().describe("Priority level"),
     dryRun: z63.boolean().optional().default(false).describe("Preview without persisting")
   };
-  const description2 = "PAPER-only: add an arXiv preprint to the research registry by arXiv ID. Fetches metadata from arxiv.org and persists to the registry. For non-paper sources (GitHub repos, tools, blogs) use `research_add_source` instead. Use dryRun=true to preview without saving.";
+  const description = "PAPER-only: add an arXiv preprint to the research registry by arXiv ID. Fetches metadata from arxiv.org and persists to the registry. For non-paper sources (GitHub repos, tools, blogs) use `research_add_source` instead. Use dryRun=true to preview without saving.";
   const secureHandler = createSecureHandler(createResearchAddHandler(deps), {
     toolName: "research_add",
     rateLimiter: deps.rateLimiter,
@@ -38119,7 +38123,7 @@ function registerResearchAddTool(server, deps) {
   server.registerTool(
     "research_add",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema,
       annotations: getToolAnnotations("research_add")
@@ -38314,7 +38318,7 @@ function registerResearchAddSourceTool(server, deps) {
     verdict_notes: z64.string().max(500).optional().describe("Verdict notes"),
     dryRun: z64.boolean().optional().default(false).describe("Preview only")
   };
-  const description2 = "NON-PAPER source: add a GitHub repo / tool / blog URL to the research registry. Auto-computes quality_score from provided quality_signals. For arXiv papers use `research_add` instead. Use dryRun=true to preview without saving.";
+  const description = "NON-PAPER source: add a GitHub repo / tool / blog URL to the research registry. Auto-computes quality_score from provided quality_signals. For arXiv papers use `research_add` instead. Use dryRun=true to preview without saving.";
   const secureHandler = createSecureHandler(createResearchAddSourceHandler(deps), {
     toolName: "research_add_source",
     securityTier: "external",
@@ -38329,7 +38333,7 @@ function registerResearchAddSourceTool(server, deps) {
   server.registerTool(
     "research_add_source",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema: RESEARCH_ADD_SOURCE_OUTPUT_SCHEMA,
       annotations: getToolAnnotations("research_add_source")
@@ -38649,7 +38653,7 @@ function registerResearchDiscoverTool(server, deps) {
     sinceDate: z65.string().optional().describe("Only results after this date (YYYY-MM-DD)"),
     relevanceThreshold: z65.number().min(0).max(1).optional().describe("Minimum relevance score (0-1) to include results. Higher = stricter filtering.")
   };
-  const description2 = "Discover new research papers and repositories from external sources. Searches arXiv, GitHub, and other sources. Filters out items already in the registry.";
+  const description = "Discover new research papers and repositories from external sources. Searches arXiv, GitHub, and other sources. Filters out items already in the registry.";
   const secureHandler = createSecureHandler(createResearchDiscoverHandler(deps), {
     toolName: "research_discover",
     rateLimiter: deps.rateLimiter,
@@ -38663,7 +38667,7 @@ function registerResearchDiscoverTool(server, deps) {
   server.registerTool(
     "research_discover",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema: RESEARCH_DISCOVER_OUTPUT_SCHEMA,
       annotations: getToolAnnotations("research_discover")
@@ -38937,7 +38941,7 @@ function registerResearchAnalyzeTool(server, deps) {
     focus: z66.enum(["gaps", "trends", "priorities", "stale", "coverage"]).describe("Analysis focus area"),
     topic: z66.string().optional().describe("Optional topic filter")
   };
-  const description2 = "Analyze the research registry for gaps, trends, priorities, stale entries, or coverage. Returns structured analysis with recommendations.";
+  const description = "Analyze the research registry for gaps, trends, priorities, stale entries, or coverage. Returns structured analysis with recommendations.";
   const secureHandler = createSecureHandler(createResearchAnalyzeHandler(deps), {
     toolName: "research_analyze",
     rateLimiter: deps.rateLimiter,
@@ -38957,7 +38961,7 @@ function registerResearchAnalyzeTool(server, deps) {
   server.registerTool(
     "research_analyze",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema,
       annotations: getToolAnnotations("research_analyze")
@@ -39112,7 +39116,7 @@ function registerResearchCatalogReviewTool(server, deps) {
     topic: z67.string().optional().describe("Topic for approved papers"),
     createIssue: z67.boolean().optional().describe("Create GitHub issue when approving")
   };
-  const description2 = "Review auto-cataloged research references found during tool execution. List pending references, approve them for registry addition, dismiss, or clear all.";
+  const description = "Review auto-cataloged research references found during tool execution. List pending references, approve them for registry addition, dismiss, or clear all.";
   const secureHandler = createSecureHandler(createCatalogReviewHandler(deps), {
     toolName: "research_catalog_review",
     rateLimiter: deps.rateLimiter,
@@ -39132,7 +39136,7 @@ function registerResearchCatalogReviewTool(server, deps) {
   server.registerTool(
     "research_catalog_review",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema,
       annotations: getToolAnnotations("research_catalog_review")
@@ -39174,7 +39178,7 @@ function registerResearchSynthesizeTool(server, deps) {
   const toolSchema = {
     topic: z68.string().optional().describe("Optional topic filter for single-cluster synthesis")
   };
-  const description2 = "Synthesize the research registry by grouping papers into topic clusters. Returns structured summaries with common themes, key insights, techniques, implementation opportunities, and cross-cutting themes across clusters.";
+  const description = "Synthesize the research registry by grouping papers into topic clusters. Returns structured summaries with common themes, key insights, techniques, implementation opportunities, and cross-cutting themes across clusters.";
   const secureHandler = createSecureHandler(createResearchSynthesizeHandler(deps), {
     toolName: "research_synthesize",
     rateLimiter: deps.rateLimiter,
@@ -39194,7 +39198,7 @@ function registerResearchSynthesizeTool(server, deps) {
   server.registerTool(
     "research_synthesize",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema,
       annotations: getToolAnnotations("research_synthesize")
@@ -39266,7 +39270,7 @@ function registerIssueTriageTool(server, deps) {
     issueUrl: z69.string().min(1).describe("GitHub issue URL (e.g., https://github.com/owner/repo/issues/123)"),
     dryRun: z69.boolean().optional().default(true).describe("Read-only mode (default: true)")
   };
-  const description2 = "Triage a GitHub issue using the full security pipeline. Classifies the issue, assesses author trust and reputation, proposes labels and actions, and validates all outputs through policy gate and corroboration checks. Read-only by default. Requires GITHUB_TOKEN or GH_TOKEN environment variable, or gh CLI auth.";
+  const description = "Triage a GitHub issue using the full security pipeline. Classifies the issue, assesses author trust and reputation, proposes labels and actions, and validates all outputs through policy gate and corroboration checks. Read-only by default. Requires GITHUB_TOKEN or GH_TOKEN environment variable, or gh CLI auth.";
   const secureHandler = createSecureHandler(createIssueTriageHandler(deps), {
     toolName: "issue_triage",
     securityTier: "external",
@@ -39280,7 +39284,7 @@ function registerIssueTriageTool(server, deps) {
   });
   server.registerTool(
     "issue_triage",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("issue_triage") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("issue_triage") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered issue_triage tool with secure handler and timeout protection");
@@ -40106,10 +40110,10 @@ function registerExecuteSpecTool(server, deps) {
     ),
     dryRun: z71.boolean().optional().describe("Parse and decompose only (no execution)")
   };
-  const description2 = "Execute a markdown specification through the full pipeline: parse, decompose into task DAG, compile to graph, execute, validate against acceptance criteria, and analyze failures.";
+  const description = "Execute a markdown specification through the full pipeline: parse, decompose into task DAG, compile to graph, execute, validate against acceptance criteria, and analyze failures.";
   server.registerTool(
     "execute_spec",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("execute_spec") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("execute_spec") },
     toSdkCallback(wrapped)
   );
   logger55.info("Registered execute_spec tool");
@@ -40251,7 +40255,7 @@ function registerMemoryQueryTool(server, deps) {
     limit: z72.number().int().min(1).max(50).optional().describe("Maximum results to return (default: 10, max: 50)"),
     source: z72.enum(["session", "belief", "agentic", "typed", "adaptive", "all"]).optional().describe("Filter by memory source (default: all)")
   };
-  const description2 = "Query across all memory backends (session, belief, agentic, adaptive, typed) with unified results. Returns memories matching the query with source attribution and relevance scores.";
+  const description = "Query across all memory backends (session, belief, agentic, adaptive, typed) with unified results. Returns memories matching the query with source attribution and relevance scores.";
   const secureHandler = createSecureHandler(memoryQueryHandler, {
     toolName: "memory_query",
     rateLimiter: deps.rateLimiter,
@@ -40269,7 +40273,7 @@ function registerMemoryQueryTool(server, deps) {
   server.registerTool(
     "memory_query",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema,
       annotations: getToolAnnotations("memory_query")
@@ -40369,7 +40373,7 @@ function registerMemoryStatsTool(server, deps) {
   const toolSchema = {
     includeDecay: z73.boolean().optional().describe("Include decay statistics (default: true)")
   };
-  const description2 = "Get memory system statistics dashboard. Shows backend availability, entry counts, and decay stats across all 7 memory backends.";
+  const description = "Get memory system statistics dashboard. Shows backend availability, entry counts, and decay stats across all 7 memory backends.";
   const secureHandler = createSecureHandler(memoryStatsHandler, {
     toolName: "memory_stats",
     rateLimiter: deps.rateLimiter,
@@ -40390,7 +40394,7 @@ function registerMemoryStatsTool(server, deps) {
   server.registerTool(
     "memory_stats",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema,
       annotations: getToolAnnotations("memory_stats")
@@ -40402,87 +40406,6 @@ function registerMemoryStatsTool(server, deps) {
 
 // src/mcp/tools/memory-write.ts
 import { z as z74 } from "zod";
-
-// src/mcp/middleware/tool-prerequisites.ts
-import { execFile as execFile2 } from "child_process";
-import { access as access2, constants } from "fs/promises";
-import { dirname as dirname5 } from "path";
-import { promisify as promisify2 } from "util";
-var execFileAsync2 = promisify2(execFile2);
-async function ghCliAvailable() {
-  try {
-    await execFileAsync2("gh", ["--version"], { timeout: 5e3 });
-    return { ok: true };
-  } catch (err2) {
-    return {
-      ok: false,
-      remediation: `the 'gh' CLI is not available (${getErrorMessage(err2)}) \u2014 install GitHub CLI and authenticate (\`gh auth login\`)`
-    };
-  }
-}
-async function dataDirWritable() {
-  const dir = getNexusDataDir();
-  try {
-    await access2(dir, constants.W_OK);
-    return { ok: true };
-  } catch {
-    try {
-      await access2(dirname5(dir), constants.W_OK);
-      return { ok: true };
-    } catch (err2) {
-      return {
-        ok: false,
-        remediation: `NEXUS_DATA_DIR (${dir}) is not writable or creatable (${getErrorMessage(err2)}) \u2014 fix its permissions; run \`nexus-agents doctor\` to diagnose`
-      };
-    }
-  }
-}
-var TOOL_PREREQUISITES = {
-  improvement_review: {
-    name: "gh-cli-available",
-    rationale: "improvement_review's fileIssues mode shells out to `gh` to file candidate issues; without it the write path fails mid-operation",
-    check: ghCliAvailable
-  },
-  memory_write: {
-    name: "data-dir-writable",
-    rationale: "memory_write persists entries under NEXUS_DATA_DIR \u2014 an unwritable data dir fails the write confusingly mid-operation",
-    check: dataDirWritable
-  },
-  registry_import: {
-    name: "data-dir-writable",
-    rationale: "registry_import persists a draft registry entry under NEXUS_DATA_DIR when not in dryRun mode",
-    check: dataDirWritable
-  }
-};
-function applyPrerequisite(toolName, prereq, handler3) {
-  return async (args, ctx) => {
-    let result;
-    try {
-      result = await prereq.check();
-    } catch (err2) {
-      result = { ok: false, remediation: `prerequisite check threw: ${getErrorMessage(err2)}` };
-    }
-    if (!result.ok) {
-      return toolStructuredError({
-        errorCategory: "permission",
-        message: `${toolName} blocked: prerequisite '${prereq.name}' not satisfied`,
-        detail: {
-          failedPrerequisite: prereq.name,
-          rationale: prereq.rationale,
-          remediation: result.remediation ?? "see .rules/tool-prerequisites.md"
-        }
-      });
-    }
-    return handler3(args, ctx);
-  };
-}
-function withPrerequisite(toolName, handler3) {
-  const prereq = TOOL_PREREQUISITES[toolName];
-  if (prereq === void 0) return handler3;
-  return applyPrerequisite(toolName, prereq, handler3);
-}
-
-// src/mcp/tools/memory-write.ts
 var MemoryWriteInputSchema = z74.object({
   key: z74.string().min(1).max(200).describe("Memory identifier or subject"),
   content: z74.string().min(1).max(5e3).describe("Memory content to store"),
@@ -40620,7 +40543,7 @@ function registerMemoryWriteTool(server, deps) {
     confidence: z74.enum(["high", "medium", "low"]).optional().describe("Confidence level (default: medium)"),
     metadata: z74.record(z74.string().max(100), z74.string().max(500)).optional().describe("Optional key-value metadata tags")
   };
-  const description2 = "Write a memory entry to a specific backend. Supports session (learnings), belief (subject-predicate-object triples), agentic (knowledge with attributes), adaptive (priority-scored), and typed (MIRIX-style semantic) backends.";
+  const description = "Write a memory entry to a specific backend. Supports session (learnings), belief (subject-predicate-object triples), agentic (knowledge with attributes), adaptive (priority-scored), and typed (MIRIX-style semantic) backends.";
   const secureHandler = createSecureHandler(memoryWriteHandler, {
     toolName: "memory_write",
     rateLimiter: deps.rateLimiter,
@@ -40639,7 +40562,7 @@ function registerMemoryWriteTool(server, deps) {
   server.registerTool(
     "memory_write",
     {
-      description: description2,
+      description,
       inputSchema: toolSchema,
       outputSchema,
       annotations: getToolAnnotations("memory_write")
@@ -40713,7 +40636,7 @@ function registerWeatherReportTool(server, deps) {
     ]).optional().describe("Filter by task category"),
     includeAdaptive: z75.boolean().optional().describe("Include adaptive routing bonuses (default: true)")
   };
-  const description2 = "Get multi-CLI performance weather report. Shows per-CLI success rates, per-category breakdowns, and adaptive routing bonus recommendations based on observed task outcomes.";
+  const description = "Get multi-CLI performance weather report. Shows per-CLI success rates, per-category breakdowns, and adaptive routing bonus recommendations based on observed task outcomes.";
   const secureHandler = createSecureHandler(weatherReportHandler, {
     toolName: "weather_report",
     rateLimiter: deps.rateLimiter,
@@ -40726,7 +40649,7 @@ function registerWeatherReportTool(server, deps) {
   });
   server.registerTool(
     "weather_report",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("weather_report") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("weather_report") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered weather_report tool");
@@ -40858,7 +40781,7 @@ function registerRegistryImportTool(server, deps) {
     modelId: z77.string().min(1).describe("Provider model identifier"),
     dryRun: z77.boolean().optional().describe("Preview without persisting (default: true)")
   };
-  const description2 = "Draft a registry ENTRY for a NEW model so routing can consider it later. Generates a ModelCapability YAML with conservative quality scores (5/10) for human review. For picking among ALREADY-registered models, use `delegate_to_model`. Use dryRun=true (default) to preview the entry without saving.";
+  const description = "Draft a registry ENTRY for a NEW model so routing can consider it later. Generates a ModelCapability YAML with conservative quality scores (5/10) for human review. For picking among ALREADY-registered models, use `delegate_to_model`. Use dryRun=true (default) to preview the entry without saving.";
   const secureHandler = createSecureHandler(registryImportHandler, {
     toolName: "registry_import",
     rateLimiter: deps.rateLimiter,
@@ -40872,7 +40795,7 @@ function registerRegistryImportTool(server, deps) {
   });
   server.registerTool(
     "registry_import",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("registry_import") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("registry_import") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered registry_import tool");
@@ -40913,7 +40836,7 @@ function registerRepoAnalyzeTool(server, deps) {
     repo: z79.string().min(1).describe('GitHub repository in "owner/name" format or full URL'),
     depth: z79.enum(["shallow", "deep"]).optional().describe("Analysis depth: shallow (tree + README) or deep")
   };
-  const description2 = "Analyze a GitHub repository structure. Returns language, framework, package manager, CI provider, security tooling, Dockerfile/Helm/Makefile detection, and gap identification. Replaces multi-step manual inspection with a single structured query.";
+  const description = "Analyze a GitHub repository structure. Returns language, framework, package manager, CI provider, security tooling, Dockerfile/Helm/Makefile detection, and gap identification. Replaces multi-step manual inspection with a single structured query.";
   const secureHandler = createSecureHandler(repoAnalyzeHandler, {
     toolName: "repo_analyze",
     rateLimiter: deps.rateLimiter,
@@ -40926,7 +40849,7 @@ function registerRepoAnalyzeTool(server, deps) {
   });
   server.registerTool(
     "repo_analyze",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("repo_analyze") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("repo_analyze") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered repo_analyze tool");
@@ -40967,7 +40890,7 @@ function registerRepoSecurityPlanTool(server, deps) {
     categories: z81.array(z81.string().max(50)).max(10).optional().describe('Filter to specific categories (e.g., ["sast", "sca", "secrets"])'),
     maxScanners: z81.number().min(1).max(20).optional().describe("Maximum scanners to recommend (default: 10)")
   };
-  const description2 = "Generate a security scanning pipeline recommendation for a GitHub repository. Analyzes repo structure, detects languages/frameworks, and recommends specific vulnerability scanners with CI config snippets. Powered by the vulnerability scanner registry with provenance-tracked metrics.";
+  const description = "Generate a security scanning pipeline recommendation for a GitHub repository. Analyzes repo structure, detects languages/frameworks, and recommends specific vulnerability scanners with CI config snippets. Powered by the vulnerability scanner registry with provenance-tracked metrics.";
   const secureHandler = createSecureHandler(handler, {
     toolName: "repo_security_plan",
     rateLimiter: deps.rateLimiter,
@@ -40980,7 +40903,7 @@ function registerRepoSecurityPlanTool(server, deps) {
   });
   server.registerTool(
     "repo_security_plan",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("repo_security_plan") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("repo_security_plan") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered repo_security_plan tool");
@@ -41106,7 +41029,7 @@ function registerSearchCodebaseTool(server, deps) {
     limit: z82.number().min(1).max(50).optional().describe("Max results"),
     mode: z82.enum(["search", "summary", "list"]).optional().describe("search/summary/list")
   };
-  const description2 = "Cross-file ripgrep-style search across the working directory. Builds an in-memory symbol index and ranks matches with relevance scoring. Use when you need usages of a symbol or pattern across MANY files. For the AST of a single file, use `extract_symbols` instead. Modes: search (find by keyword), summary (per-file overview), list (all indexed files).";
+  const description = "Cross-file ripgrep-style search across the working directory. Builds an in-memory symbol index and ranks matches with relevance scoring. Use when you need usages of a symbol or pattern across MANY files. For the AST of a single file, use `extract_symbols` instead. Modes: search (find by keyword), summary (per-file overview), list (all indexed files).";
   const secureHandler = createSecureHandler(searchCodebaseHandler, {
     toolName: "search_codebase",
     rateLimiter: deps.rateLimiter,
@@ -41116,7 +41039,7 @@ function registerSearchCodebaseTool(server, deps) {
   const wrapped = wrapToolWithTimeout("search_codebase", secureHandler, { timeoutMs, logger: logger55 });
   server.registerTool(
     "search_codebase",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("search_codebase") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("search_codebase") },
     toSdkCallback(wrapped)
   );
   logger55.info("Registered search_codebase tool");
@@ -41191,7 +41114,7 @@ function registerExtractSymbolsTool(server, deps) {
     filePath: z83.string().min(1).max(500).describe("Path to TypeScript/JavaScript file"),
     mode: z83.enum(["index", "full"]).optional().describe("index (default): names+lines. full: includes source text")
   };
-  const description2 = "Parse a SINGLE TypeScript/JavaScript file with tree-sitter and return its structural AST symbols. Use when you need the structure of one file \u2014 function/class/method/interface/type definitions. Not a cross-file search; for that use `search_codebase`. Output is 80%+ smaller than reading the full file.";
+  const description = "Parse a SINGLE TypeScript/JavaScript file with tree-sitter and return its structural AST symbols. Use when you need the structure of one file \u2014 function/class/method/interface/type definitions. Not a cross-file search; for that use `search_codebase`. Output is 80%+ smaller than reading the full file.";
   const secureHandler = createSecureHandler(extractSymbolsHandler, {
     toolName: "extract_symbols",
     rateLimiter: deps.rateLimiter,
@@ -41204,7 +41127,7 @@ function registerExtractSymbolsTool(server, deps) {
   });
   server.registerTool(
     "extract_symbols",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("extract_symbols") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("extract_symbols") },
     toSdkCallback(wrapped)
   );
   logger55.info("Registered extract_symbols tool");
@@ -41326,7 +41249,7 @@ function registerQueryTraceTool(server, deps) {
     eventType: z84.string().max(100).regex(/^[a-zA-Z0-9._-]+$/).optional().describe("Filter by event type (e.g., model.called)"),
     limit: z84.number().min(1).max(500).optional().describe("Max events to return (default: 100)")
   };
-  const description2 = "Query execution traces by run ID. Returns agent and model attribution for pipeline runs including decision paths, error taxonomy, and timing data.";
+  const description = "Query execution traces by run ID. Returns agent and model attribution for pipeline runs including decision paths, error taxonomy, and timing data.";
   const secureHandler = createSecureHandler(queryTraceHandler, {
     toolName: "query_trace",
     rateLimiter: deps.rateLimiter,
@@ -41336,7 +41259,7 @@ function registerQueryTraceTool(server, deps) {
   const wrappedHandler = wrapToolWithTimeout("query_trace", secureHandler, { timeoutMs, logger: logger55 });
   server.registerTool(
     "query_trace",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("query_trace") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("query_trace") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered query_trace tool");
@@ -42485,7 +42408,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-KZTENUDH.js");
+    const { createIssueTriage } = await import("./issue-triage-VVNQIQW5.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -42513,7 +42436,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-Q3OWPD4L.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-IAQPOJAQ.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -42777,9 +42700,9 @@ var logger34 = createLogger({ component: "security-scan" });
 var SCAN_TIMEOUT_MS = 3e5;
 async function isSemgrepAvailable() {
   try {
-    const { execFile: execFile5 } = await import("child_process");
-    const { promisify: promisify5 } = await import("util");
-    const exec2 = promisify5(execFile5);
+    const { execFile: execFile3 } = await import("child_process");
+    const { promisify: promisify3 } = await import("util");
+    const exec2 = promisify3(execFile3);
     await exec2("semgrep", ["--version"], { timeout: 1e4 });
     return true;
   } catch {
@@ -42787,9 +42710,9 @@ async function isSemgrepAvailable() {
   }
 }
 async function runSemgrep(targetDir, rulesets) {
-  const { execFile: execFile5 } = await import("child_process");
-  const { promisify: promisify5 } = await import("util");
-  const exec2 = promisify5(execFile5);
+  const { execFile: execFile3 } = await import("child_process");
+  const { promisify: promisify3 } = await import("util");
+  const exec2 = promisify3(execFile3);
   const args = ["--sarif", "--quiet", ...rulesets.flatMap((r) => ["--config", r]), targetDir];
   const { stdout } = await exec2("semgrep", args, {
     timeout: SCAN_TIMEOUT_MS,
@@ -43295,7 +43218,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-SXQAA2EN.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-X7CJ6X4A.js");
     const { getLearningDir } = await import("./learning-persistence-UKPO7RYK.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -43352,7 +43275,7 @@ function recordRoutingExperience(category, success, durationMs) {
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-YZRYGXQC.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-5T5QJF47.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -43386,7 +43309,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-D6HFOK7S.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-SUVIXWKI.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -43404,7 +43327,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-SXQAA2EN.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-X7CJ6X4A.js");
     const { getLearningDir } = await import("./learning-persistence-UKPO7RYK.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -43510,7 +43433,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-XLEQFVE7.js");
+        const { executeVoting } = await import("./consensus-vote-EQAYX53Z.js");
         const votingResult = await executeVoting(
           {
             proposal: plan.slice(0, 4e3),
@@ -44437,7 +44360,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-CGVR6M4S.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-OSP6FGNV.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -44508,7 +44431,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-XCX7EFJR.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-X74TBYOV.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -44792,7 +44715,7 @@ async function prReviewHandler(args, ctx) {
 }
 function registerPrReviewTool(server, deps) {
   const logger55 = deps.logger ?? createLogger({ tool: "pr_review" });
-  const description2 = "Run multi-voter consensus review on a PR diff (#2233). 5 voters (architect, security, devex, catfish, scope_steward) each emit approve/request_changes/abstain with reasoning and citations. Reuses consensus_vote infra; experimental.";
+  const description = "Run multi-voter consensus review on a PR diff (#2233). 5 voters (architect, security, devex, catfish, scope_steward) each emit approve/request_changes/abstain with reasoning and citations. Reuses consensus_vote infra; experimental.";
   const secureHandler = createSecureHandler(prReviewHandler, {
     toolName: "pr_review",
     rateLimiter: deps.rateLimiter,
@@ -44803,7 +44726,7 @@ function registerPrReviewTool(server, deps) {
   server.registerTool(
     "pr_review",
     {
-      description: description2,
+      description,
       inputSchema: PrReviewInputSchema.shape,
       annotations: getToolAnnotations("pr_review")
     },
@@ -45380,923 +45303,10 @@ function registerCompareDataFeedsTool(server, deps) {
   logger55.info("Registered compare_data_feeds tool");
 }
 
-// src/mcp/tools/improvement-review.ts
-import { execFile as execFile3 } from "child_process";
-import { promisify as promisify3 } from "util";
-import { z as z95 } from "zod";
-
-// src/governance/fitness-score.ts
-import { existsSync as existsSync11, readFileSync as readFileSync9, readdirSync as readdirSync2, statSync as statSync2 } from "fs";
-import { join as join11 } from "path";
-function findPkgRoot() {
-  let dir = import.meta.dirname;
-  for (let i = 0; i < 10; i++) {
-    const pkgPath = join11(dir, "package.json");
-    if (existsSync11(pkgPath)) {
-      const content = readFileSync9(pkgPath, "utf-8");
-      if (content.includes('"nexus-agents"')) return dir;
-    }
-    dir = join11(dir, "..");
-  }
-  return join11(import.meta.dirname, "../..");
-}
-var PKG_ROOT = findPkgRoot();
-var SRC_ROOT = join11(PKG_ROOT, "src");
-var REPO_ROOT = join11(PKG_ROOT, "../..");
-var DOCS_ROOT = join11(REPO_ROOT, "docs");
-var DETERMINISM_EXCLUDES = [
-  /\.test\.ts$/,
-  /\.spec\.ts$/,
-  /random-provider\.ts$/,
-  /time-provider\.ts$/
-];
-function countFiles(dir, pattern) {
-  if (!existsSync11(dir)) return 0;
-  let count = 0;
-  for (const entry of readdirSync2(dir)) {
-    const fullPath = join11(dir, entry);
-    const stat5 = statSync2(fullPath);
-    if (stat5.isDirectory() && !entry.startsWith(".")) {
-      count += countFiles(fullPath, pattern);
-    } else if (pattern.test(entry)) {
-      count++;
-    }
-  }
-  return count;
-}
-function fileContains(filePath, pattern) {
-  if (!existsSync11(filePath)) return false;
-  return pattern.test(readFileSync9(filePath, "utf-8"));
-}
-function isExcluded(entry, excludePatterns) {
-  return excludePatterns?.some((p) => p.test(entry)) ?? false;
-}
-function countMatchesInFile(fullPath, contentPattern) {
-  const matches = readFileSync9(fullPath, "utf-8").match(contentPattern);
-  return matches?.length ?? 0;
-}
-function countPatternInDir(dir, filePattern, contentPattern, excludePatterns) {
-  if (!existsSync11(dir)) return 0;
-  let count = 0;
-  for (const entry of readdirSync2(dir)) {
-    const fullPath = join11(dir, entry);
-    const stat5 = statSync2(fullPath);
-    if (stat5.isDirectory() && !entry.startsWith(".") && entry !== "node_modules") {
-      count += countPatternInDir(fullPath, filePattern, contentPattern, excludePatterns);
-    } else if (filePattern.test(entry) && !isExcluded(entry, excludePatterns)) {
-      count += countMatchesInFile(fullPath, contentPattern);
-    }
-  }
-  return count;
-}
-function clamp2(score, max) {
-  return Math.max(0, Math.min(max, score));
-}
-var FitnessScoreCalculator = class {
-  logger;
-  checks = [];
-  constructor(logger55) {
-    this.logger = logger55 ?? createLogger({ component: "FitnessScoreCalculator" });
-    this.registerDefaultChecks();
-  }
-  /** Register default fitness checks. */
-  registerDefaultChecks() {
-    const reg = (dimension, maxPoints, name, check) => {
-      this.checks.push({ dimension, maxPoints, name, check });
-    };
-    reg("canonicalPaths", 20, "Canonical Paths", () => this.checkCanonicalPaths());
-    reg("explicitBehavior", 15, "Explicit Behavior", () => this.checkExplicitBehavior());
-    reg("determinism", 15, "Determinism", () => this.checkDeterminism());
-    reg("observability", 15, "Observability", () => this.checkObservability());
-    reg("configSimplicity", 10, "Config Simplicity", () => this.checkConfigSimplicity());
-    reg("layerSeparation", 10, "Layer Separation", () => this.checkLayerSeparation());
-    reg("operatorErgonomics", 10, "Operator Ergonomics", () => this.checkOperatorErgonomics());
-    reg(
-      "governanceIntegration",
-      5,
-      "Governance Integration",
-      () => this.checkGovernanceIntegration()
-    );
-  }
-  /** Run full fitness audit. */
-  audit(version) {
-    const findings = [];
-    const dimensions = {};
-    const cliAdaptersDir = join11(SRC_ROOT, "cli-adapters");
-    if (!existsSync11(cliAdaptersDir)) {
-      return this.notSourceRepoResult(version);
-    }
-    for (const check of this.checks) {
-      this.logger.debug(`Running fitness check: ${check.name}`);
-      const result = check.check();
-      dimensions[check.dimension] = result.score;
-      findings.push(...result.findings);
-    }
-    const score = Object.values(dimensions).reduce((sum, val) => sum + val, 0);
-    this.logger.info("Fitness audit complete", { score, version });
-    const safeDim = (k) => dimensions[k] ?? 0;
-    const typedDimensions = {
-      canonicalPaths: safeDim("canonicalPaths"),
-      explicitBehavior: safeDim("explicitBehavior"),
-      determinism: safeDim("determinism"),
-      observability: safeDim("observability"),
-      configSimplicity: safeDim("configSimplicity"),
-      layerSeparation: safeDim("layerSeparation"),
-      operatorErgonomics: safeDim("operatorErgonomics"),
-      governanceIntegration: safeDim("governanceIntegration")
-    };
-    return {
-      score,
-      dimensions: typedDimensions,
-      findings,
-      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      version
-    };
-  }
-  /**
-   * Return when the runtime SRC_ROOT doesn't look like the nexus-agents
-   * source tree (#2716). One finding, score 0 — distinct from "the source
-   * tree is broken" because every existsSync would falsely report missing.
-   */
-  notSourceRepoResult(version) {
-    const finding = {
-      dimension: "governanceIntegration",
-      severity: "info",
-      description: `fitness-audit must run against the nexus-agents source repo, but ${SRC_ROOT}/cli-adapters does not exist. You are likely running the installed npm package via \`npx nexus-agents\`, which ships only the bundled dist/. Clone the source repo and run \`node packages/nexus-agents/dist/cli.js fitness-audit\` (or invoke \`pnpm fitness-audit\` from the workspace root).`,
-      pointsDeducted: 0
-    };
-    return {
-      score: 0,
-      dimensions: {
-        canonicalPaths: 0,
-        explicitBehavior: 0,
-        determinism: 0,
-        observability: 0,
-        configSimplicity: 0,
-        layerSeparation: 0,
-        operatorErgonomics: 0,
-        governanceIntegration: 0
-      },
-      findings: [finding],
-      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      version
-    };
-  }
-  // =========================================================================
-  // Individual Checks — real filesystem analysis
-  // =========================================================================
-  /**
-   * Check canonical paths: penalize duplicate router implementations.
-   *
-   * The current minimum is 6 (raised from 5 in #2063 after an audit):
-   *   1. composite-router — pipeline orchestrator
-   *   2. budget-router — budget/cost filtering
-   *   3. zero-router — hard-constraint exclusion
-   *   4. preference-router — user/task preference application
-   *   5. topsis-router — TOPSIS multi-criteria scoring
-   *   6. agreement-cascade-router — agreement-based cascade retry
-   *
-   * Each stage is distinct per CLAUDE.md's documented pipeline:
-   * Task → BudgetRouter → ZeroRouter → PreferenceRouter → TopsisRouter → Agreement → Model
-   */
-  checkCanonicalPaths() {
-    const findings = [];
-    let score = 20;
-    const routerCount = countFiles(join11(SRC_ROOT, "cli-adapters"), /router\.ts$/);
-    const ROUTER_COUNT_THRESHOLD = 6;
-    if (routerCount > ROUTER_COUNT_THRESHOLD) {
-      const excess = routerCount - ROUTER_COUNT_THRESHOLD;
-      const deduction = Math.min(5, excess);
-      score -= deduction;
-      findings.push(
-        this.finding(
-          "canonicalPaths",
-          "warning",
-          `${String(routerCount)} router implementations found (target: <=${String(ROUTER_COUNT_THRESHOLD)})`,
-          deduction,
-          "Consolidate duplicate routers into CompositeRouter"
-        )
-      );
-    }
-    if (existsSync11(join11(SRC_ROOT, "cli-adapters/composite-router.ts"))) {
-      score += 2;
-    } else {
-      score -= 3;
-      findings.push(
-        this.finding(
-          "canonicalPaths",
-          "critical",
-          "CompositeRouter missing \u2014 no unified routing entry point",
-          3
-        )
-      );
-    }
-    score = this.checkOrchestratorInterface(score, findings);
-    return { score: clamp2(score, 20), findings };
-  }
-  /** Sub-check for IOrchestrator interface and adapter wiring. */
-  checkOrchestratorInterface(score, findings) {
-    const orchPath = join11(SRC_ROOT, "core/types/orchestrator.ts");
-    if (existsSync11(orchPath) && fileContains(orchPath, /interface IOrchestrator/)) {
-      score += 3;
-    } else {
-      score -= 2;
-      findings.push(
-        this.finding("canonicalPaths", "warning", "No IOrchestrator interface in core/types", 2)
-      );
-    }
-    const adapterPath = join11(SRC_ROOT, "orchestration/orchestrator-adapters.ts");
-    if (existsSync11(adapterPath) && fileContains(adapterPath, /TechLeadAdapter|PuppeteerAdapter/)) {
-      score += 2;
-    }
-    return score;
-  }
-  /**
-   * Check explicit behavior: penalize hidden/magic behavior.
-   *
-   * Implementation is intentionally filesystem-signal-based (no AST parse).
-   * The `NEXUS_ALLOW_MOCK_ORCHESTRATION` guard and magic-routing pattern
-   * grep capture the observable failure modes that historically slipped
-   * past review. AST-based detection of implicit fallbacks was considered
-   * but not pursued — it would significantly widen this function's
-   * footprint and the filesystem signals already catch the recurring
-   * regressions. Revisit only if a new class of hidden-behavior bug
-   * surfaces that this grep-over-source approach can't catch.
-   */
-  checkExplicitBehavior() {
-    const findings = [];
-    let score = 15;
-    const mockGuardCount = countPatternInDir(
-      SRC_ROOT,
-      /\.ts$/,
-      /NEXUS_ALLOW_MOCK_ORCHESTRATION/g,
-      DETERMINISM_EXCLUDES
-    );
-    if (mockGuardCount === 0) {
-      score -= 3;
-      findings.push(
-        this.finding(
-          "explicitBehavior",
-          "warning",
-          "No NEXUS_ALLOW_MOCK_ORCHESTRATION guard found \u2014 mock fallback may be implicit",
-          3,
-          "Require explicit env var for mock orchestration"
-        )
-      );
-    }
-    const magicRouting = countPatternInDir(
-      SRC_ROOT,
-      /\.ts$/,
-      /fallback.*=.*true|implicitRoute/g,
-      DETERMINISM_EXCLUDES
-    );
-    if (magicRouting > 5) {
-      const deduction = Math.min(3, Math.floor(magicRouting / 3));
-      score -= deduction;
-      findings.push(
-        this.finding(
-          "explicitBehavior",
-          "info",
-          `${String(magicRouting)} implicit fallback/routing patterns detected`,
-          deduction
-        )
-      );
-    }
-    return { score: clamp2(score, 15), findings };
-  }
-  /** Check determinism: penalize unseeded random and raw Date.now(). */
-  checkDeterminism() {
-    const findings = [];
-    let score = 15;
-    score = this.checkRandomDeterminism(score, findings);
-    score = this.checkTimeDeterminism(score, findings);
-    return { score: clamp2(score, 15), findings };
-  }
-  /** Sub-check for Math.random() and injectable random provider. */
-  checkRandomDeterminism(score, findings) {
-    const randomCount = countPatternInDir(
-      SRC_ROOT,
-      /\.ts$/,
-      /Math\.random\(\)/g,
-      DETERMINISM_EXCLUDES
-    );
-    if (randomCount > 10) {
-      const deduction = Math.min(5, Math.floor(randomCount / 5));
-      score -= deduction;
-      findings.push(
-        this.finding(
-          "determinism",
-          "warning",
-          `${String(randomCount)} unseeded Math.random() calls in production code`,
-          deduction,
-          "Use getRandomProvider() for injectable randomness"
-        )
-      );
-    } else if (randomCount === 0) {
-      score += 2;
-    }
-    if (existsSync11(join11(SRC_ROOT, "core/random-provider.ts"))) {
-      score += 1;
-    }
-    const randomUsage = countPatternInDir(
-      SRC_ROOT,
-      /\.ts$/,
-      /getRandomProvider\(\)/g,
-      DETERMINISM_EXCLUDES
-    );
-    if (randomUsage > 5) {
-      score += 1;
-    }
-    return score;
-  }
-  /** Sub-check for Date.now() and injectable time provider. */
-  checkTimeDeterminism(score, findings) {
-    const dateNowCount = countPatternInDir(
-      SRC_ROOT,
-      /\.ts$/,
-      /Date\.now\(\)/g,
-      DETERMINISM_EXCLUDES
-    );
-    if (dateNowCount > 50) {
-      score -= 2;
-      findings.push(
-        this.finding(
-          "determinism",
-          "info",
-          `${String(dateNowCount)} Date.now() calls in production code`,
-          2,
-          "Use getTimeProvider() for injectable time"
-        )
-      );
-    }
-    if (existsSync11(join11(SRC_ROOT, "core/time-provider.ts"))) {
-      score += 1;
-    }
-    const timeUsage = countPatternInDir(
-      SRC_ROOT,
-      /\.ts$/,
-      /getTimeProvider\(\)/g,
-      DETERMINISM_EXCLUDES
-    );
-    if (timeUsage > 10) {
-      score += 1;
-    }
-    return score;
-  }
-  /** Check observability: reward tracing, logging, and audit coverage. */
-  checkObservability() {
-    const findings = [];
-    let score = 15;
-    if (existsSync11(join11(SRC_ROOT, "observability/swarm-observer.ts"))) {
-      score += 3;
-    } else {
-      score -= 3;
-      findings.push(
-        this.finding(
-          "observability",
-          "warning",
-          "No SwarmObserver found",
-          3,
-          "Add observability/swarm-observer.ts"
-        )
-      );
-    }
-    if (existsSync11(join11(SRC_ROOT, "core/trace.ts"))) {
-      score += 2;
-    }
-    const loggerCount = countPatternInDir(SRC_ROOT, /\.ts$/, /createLogger\(/g);
-    if (loggerCount > 50) {
-      score += 2;
-    } else {
-      findings.push(
-        this.finding(
-          "observability",
-          "info",
-          `Only ${String(loggerCount)} createLogger() calls (target: >50)`,
-          0
-        )
-      );
-    }
-    if (existsSync11(join11(SRC_ROOT, "audit"))) {
-      score += 2;
-    }
-    return { score: clamp2(score, 15), findings };
-  }
-  /** Check config simplicity: penalize excessive schema sprawl. */
-  checkConfigSimplicity() {
-    const findings = [];
-    let score = 10;
-    const schemaCount = countFiles(join11(SRC_ROOT, "config"), /schema.*\.ts$/);
-    if (schemaCount > 10) {
-      score -= 2;
-      findings.push(
-        this.finding(
-          "configSimplicity",
-          "info",
-          `${String(schemaCount)} config schemas (target: <=10)`,
-          2,
-          "Consolidate related schemas"
-        )
-      );
-    } else {
-      score += 1;
-    }
-    if (existsSync11(join11(SRC_ROOT, "config/config-loader.ts"))) {
-      score += 2;
-    }
-    if (existsSync11(join11(SRC_ROOT, "config/config-manager.ts"))) {
-      score += 1;
-    }
-    return { score: clamp2(score, 10), findings };
-  }
-  /** Check layer separation: penalize cross-layer imports. */
-  checkLayerSeparation() {
-    const findings = [];
-    let score = 10;
-    const adapterAgentImports = countPatternInDir(
-      join11(SRC_ROOT, "adapters"),
-      /\.ts$/,
-      /from ['"]\.\.\/agents\//g
-    );
-    if (adapterAgentImports > 0) {
-      const deduction = Math.min(5, adapterAgentImports);
-      score -= deduction;
-      findings.push(
-        this.finding(
-          "layerSeparation",
-          "warning",
-          `${String(adapterAgentImports)} adapter->agent import violations`,
-          deduction,
-          "Adapters should not import from agents layer"
-        )
-      );
-    } else {
-      score += 2;
-    }
-    const coreMcpImports = countPatternInDir(
-      join11(SRC_ROOT, "core"),
-      /\.ts$/,
-      /from ['"]\.\.\/mcp\//g
-    );
-    if (coreMcpImports > 0) {
-      const deduction = Math.min(3, coreMcpImports);
-      score -= deduction;
-      findings.push(
-        this.finding(
-          "layerSeparation",
-          "critical",
-          `${String(coreMcpImports)} core->MCP import violations`,
-          deduction,
-          "Core must not depend on MCP layer"
-        )
-      );
-    } else {
-      score += 1;
-    }
-    return { score: clamp2(score, 10), findings };
-  }
-  /** Check operator ergonomics: reward rich CLI commands. */
-  checkOperatorErgonomics() {
-    const findings = [];
-    let score = 10;
-    const commandCount = countFiles(join11(SRC_ROOT, "cli"), /\.ts$/);
-    if (commandCount >= 20) {
-      score += 3;
-    } else {
-      findings.push(
-        this.finding(
-          "operatorErgonomics",
-          "info",
-          `${String(commandCount)} CLI commands (target: >=20)`,
-          0
-        )
-      );
-    }
-    score = this.checkCliCommands(score, findings);
-    return { score: clamp2(score, 10), findings };
-  }
-  /** Sub-check for essential CLI commands (doctor, setup, demo, config). */
-  checkCliCommands(score, findings) {
-    const commands = [
-      ["cli/doctor.ts", "Doctor command", 2],
-      ["cli/setup-command.ts", "Setup wizard", 2],
-      ["cli/demo-command.ts", "Demo command", 1],
-      ["cli/config-command.ts", "Config command", 1]
-    ];
-    for (const [path14, name, bonus] of commands) {
-      if (existsSync11(join11(SRC_ROOT, path14))) {
-        score += bonus;
-      } else {
-        findings.push(this.finding("operatorErgonomics", "info", `Missing ${name} (${path14})`, 0));
-      }
-    }
-    return score;
-  }
-  /** Check governance integration: policy firewall, rate limiter, docs. */
-  checkGovernanceIntegration() {
-    const findings = [];
-    let score = 5;
-    score = this.checkGovernanceDocs(score, findings);
-    score = this.checkGovernanceInfra(score, findings);
-    return { score: clamp2(score, 5), findings };
-  }
-  /** Sub-check for governance documentation artifacts. */
-  checkGovernanceDocs(score, findings) {
-    if (!existsSync11(join11(REPO_ROOT, "CLAUDE.md"))) {
-      score -= 3;
-      findings.push(
-        this.finding("governanceIntegration", "critical", "No CLAUDE.md governance document", 3)
-      );
-    } else {
-      score += 1;
-    }
-    if (existsSync11(join11(DOCS_ROOT, "architecture/wiring-graph.json"))) {
-      score += 1;
-    }
-    if (existsSync11(join11(DOCS_ROOT, "adr"))) {
-      score += 1;
-    } else {
-      findings.push(this.finding("governanceIntegration", "info", "No ADR directory", 0));
-    }
-    return score;
-  }
-  /** Sub-check for governance runtime infrastructure. */
-  checkGovernanceInfra(score, findings) {
-    const hasPolicyFirewall = countPatternInDir(join11(SRC_ROOT, "security"), /\.ts$/, /PolicyGate|policyFirewall/g) > 0;
-    if (hasPolicyFirewall) {
-      score += 1;
-    } else {
-      findings.push(
-        this.finding(
-          "governanceIntegration",
-          "warning",
-          "No policy firewall detected in security layer",
-          0
-        )
-      );
-    }
-    const hasRateLimiter = countPatternInDir(SRC_ROOT, /\.ts$/, /RateLimiter|rateLimiter/g) > 0;
-    if (hasRateLimiter) {
-      score += 1;
-    }
-    return score;
-  }
-  /** Helper to create a FitnessFinding with defaults. */
-  finding(dimension, severity, description2, pointsDeducted, suggestion) {
-    const base = { dimension, severity, description: description2, pointsDeducted };
-    if (suggestion !== void 0) {
-      return { ...base, suggestion };
-    }
-    return base;
-  }
-};
-function createFitnessScoreCalculator(logger55) {
-  return new FitnessScoreCalculator(logger55);
-}
-function calculateFitnessScore(version) {
-  const calculator = createFitnessScoreCalculator();
-  return calculator.audit(version);
-}
-
-// src/mcp/tools/improvement-review-signals.ts
-function worstDimension(audit) {
-  let worst;
-  for (const finding of audit.findings) {
-    if (worst === void 0 || finding.pointsDeducted > worst.pointsDeducted) {
-      worst = { dimension: finding.dimension, pointsDeducted: finding.pointsDeducted };
-    }
-  }
-  return worst?.dimension;
-}
-function emitFitnessDeclinedSignal(audit, fitnessFloor, bus, logger55) {
-  if (audit.score >= fitnessFloor) return;
-  try {
-    const dimension = worstDimension(audit);
-    bus.emit({
-      type: "signal.fitness_declined",
-      timestamp: getTimeProvider().now(),
-      score: audit.score,
-      floor: fitnessFloor,
-      ...dimension !== void 0 ? { dimension } : {}
-    });
-  } catch (error) {
-    logger55.warn("Failed to emit signal.fitness_declined", { error: getErrorMessage(error) });
-  }
-}
-
-// src/mcp/tools/improvement-review.ts
-var execFileAsync3 = promisify3(execFile3);
-var ImprovementReviewInputSchema = z95.object({
-  lookbackDays: z95.number().int().min(1).max(90).optional().default(7).describe("Lookback window for outcome data, in days. Default 7."),
-  fileIssues: z95.boolean().optional().default(false).describe(
-    "When true, file candidate issues via `gh issue create` for crossed thresholds (rate-limited to 5 per run, deduped against open issues). When false (default), return signals only."
-  ),
-  minSampleSize: z95.number().int().min(1).max(1e3).optional().default(5).describe("Minimum sample size before a CLI/category signal can fire."),
-  fitnessFloor: z95.number().int().min(0).max(100).optional().default(90).describe("Fitness score below this threshold triggers a tech-debt signal.")
-});
-var MAX_ISSUES_PER_RUN = 5;
-var HOUR_MS = 60 * 60 * 1e3;
-var DAY_MS = 24 * HOUR_MS;
-function filterByLookback(outcomes, lookbackDays, now) {
-  const cutoff = now - lookbackDays * DAY_MS;
-  return outcomes.filter((o) => {
-    const t = Date.parse(o.timestamp);
-    return Number.isFinite(t) && t >= cutoff;
-  });
-}
-function detectCliPerformanceFloor(outcomes, minSamples, windowLabel) {
-  const buckets = /* @__PURE__ */ new Map();
-  for (const o of outcomes) {
-    const key = `${o.cli}::${o.category}`;
-    const bucket = buckets.get(key) ?? { cli: o.cli, category: o.category, ok: 0, total: 0 };
-    bucket.total += 1;
-    if (o.success) bucket.ok += 1;
-    buckets.set(key, bucket);
-  }
-  const signals = [];
-  for (const b of buckets.values()) {
-    if (b.total < minSamples) continue;
-    const rate = b.ok / b.total;
-    if (rate >= 0.6) continue;
-    const ratePct = Math.round(rate * 100);
-    signals.push({
-      category: "routing",
-      signalKey: `routing:cli-floor:${b.cli}:${b.category}`,
-      severity: rate < 0.4 ? "critical" : "warning",
-      title: `routing: ${b.cli} success rate ${String(ratePct)}% on ${b.category} (${windowLabel})`,
-      body: [
-        `Observed performance floor breach in the ${windowLabel} window.`,
-        "",
-        `- CLI: \`${b.cli}\``,
-        `- Category: \`${b.category}\``,
-        `- Success rate: ${String(ratePct)}% (${String(b.ok)}/${String(b.total)})`,
-        `- Threshold: 60% with \u2265${String(minSamples)} samples`,
-        "",
-        "Consider routing this category away from this CLI, or investigating the failure pattern via `weather_report` and the OutcomeStore."
-      ].join("\n"),
-      evidence: {
-        samples: b.total,
-        window: windowLabel,
-        observedValue: rate,
-        threshold: 0.6
-      }
-    });
-  }
-  return signals;
-}
-function detectFailureCategoryConcentration(outcomes, windowLabel) {
-  const failures = outcomes.filter((o) => !o.success);
-  if (failures.length < 10) return [];
-  const byCategory = /* @__PURE__ */ new Map();
-  for (const f of failures) {
-    const cat = f.failureCategory ?? "unknown";
-    byCategory.set(cat, (byCategory.get(cat) ?? 0) + 1);
-  }
-  const signals = [];
-  for (const [cat, count] of byCategory) {
-    const share = count / failures.length;
-    if (share <= 0.5) continue;
-    const sharePct = Math.round(share * 100);
-    signals.push({
-      category: "bug",
-      signalKey: `bug:failure-concentration:${cat}`,
-      severity: "warning",
-      title: `bug: ${String(sharePct)}% of failures in ${windowLabel} share category \`${cat}\``,
-      body: [
-        `Failure-category concentration breach in the ${windowLabel} window.`,
-        "",
-        `- Category: \`${cat}\``,
-        `- Share: ${String(sharePct)}% (${String(count)}/${String(failures.length)} failures)`,
-        `- Threshold: > 50% with \u226510 failures`,
-        "",
-        "A single failure mode dominating the error budget usually means a systemic bug or routing miss. Investigate via `query_trace` and the OutcomeStore."
-      ].join("\n"),
-      evidence: {
-        samples: failures.length,
-        window: windowLabel,
-        observedValue: share,
-        threshold: 0.5
-      }
-    });
-  }
-  return signals;
-}
-function buildFloorSignal(audit, fitnessFloor) {
-  return {
-    category: "tech-debt",
-    signalKey: `tech-debt:fitness-below-floor`,
-    severity: audit.score < 70 ? "critical" : "warning",
-    title: `tech-debt: fitness score ${String(audit.score)}/100 below floor ${String(fitnessFloor)}`,
-    body: [
-      `Code fitness score has dropped below the governance floor.`,
-      "",
-      `- Score: ${String(audit.score)} / 100`,
-      `- Floor: ${String(fitnessFloor)} (governance threshold per CLAUDE.md)`,
-      `- Findings: ${String(audit.findings.length)} total`,
-      "",
-      "Run `nexus-agents fitness-audit` for the full breakdown. Critical findings:",
-      ...audit.findings.filter((f) => f.severity === "critical").slice(0, 5).map((f) => `- ${f.dimension}: ${f.description}`)
-    ].join("\n"),
-    evidence: { observedValue: audit.score, threshold: fitnessFloor }
-  };
-}
-function buildCriticalFindingSignal(finding) {
-  return {
-    category: "tech-debt",
-    signalKey: `tech-debt:fitness-critical:${finding.dimension}`,
-    severity: "critical",
-    title: `tech-debt: critical fitness finding in ${finding.dimension}`,
-    body: [
-      `Fitness audit returned a CRITICAL finding.`,
-      "",
-      `- Dimension: \`${finding.dimension}\``,
-      `- Description: ${finding.description}`,
-      `- Points deducted: ${String(finding.pointsDeducted)}`,
-      finding.location !== void 0 ? `- Location: ${finding.location}` : "",
-      finding.suggestion !== void 0 ? `- Suggestion: ${finding.suggestion}` : ""
-    ].filter((line) => line.length > 0).join("\n"),
-    evidence: { observedValue: -finding.pointsDeducted }
-  };
-}
-function detectFitnessSignals(audit, fitnessFloor) {
-  const signals = [];
-  if (audit.score < fitnessFloor) signals.push(buildFloorSignal(audit, fitnessFloor));
-  for (const finding of audit.findings) {
-    if (finding.severity === "critical") signals.push(buildCriticalFindingSignal(finding));
-  }
-  return signals;
-}
-async function existingIssueForSignal(signalKey) {
-  try {
-    const { stdout } = await execFileAsync3("gh", [
-      "issue",
-      "list",
-      "--state",
-      "open",
-      "--search",
-      `"${signalKey}" in:body`,
-      "--json",
-      "number,url",
-      "--limit",
-      "5"
-    ]);
-    const parsed = JSON.parse(stdout);
-    if (parsed.length > 0 && typeof parsed[0]?.url === "string") {
-      return parsed[0].url;
-    }
-    return null;
-  } catch {
-    return null;
-  }
-}
-async function fileIssueForSignal(signal) {
-  const body = `${signal.body}
-
----
-
-_Signal key (do not edit): \`${signal.signalKey}\` \xB7 Generated by \`improvement_review\` (#2402) \xB7 Severity: ${signal.severity}_`;
-  const labels = signal.category === "security" ? "security" : signal.category;
-  try {
-    const { stdout } = await execFileAsync3("gh", [
-      "issue",
-      "create",
-      "--title",
-      signal.title,
-      "--body",
-      body,
-      "--label",
-      labels
-    ]);
-    const url = stdout.trim();
-    if (!url.startsWith("https://")) {
-      return { ok: false, error: `gh returned unexpected output: ${stdout.slice(0, 200)}` };
-    }
-    return { ok: true, url };
-  } catch (caught) {
-    const message = caught instanceof Error ? caught.message : String(caught);
-    return { ok: false, error: message };
-  }
-}
-function safeFitnessAudit(now, ctx) {
-  try {
-    return calculateFitnessScore("improvement-review");
-  } catch (caught) {
-    ctx.logger.warn("fitness audit failed; skipping fitness signals", {
-      error: caught instanceof Error ? caught.message : String(caught)
-    });
-    return {
-      score: 100,
-      dimensions: {},
-      findings: [],
-      timestamp: new Date(now).toISOString(),
-      version: "improvement-review-fallback"
-    };
-  }
-}
-var SEVERITY_ORDER3 = {
-  critical: 0,
-  warning: 1,
-  info: 2
-};
-async function fileSignalsAsIssues(signals, ctx) {
-  const issuesFiled = [];
-  const issuesSkipped = [];
-  for (const signal of signals) {
-    if (issuesFiled.length >= MAX_ISSUES_PER_RUN) {
-      issuesSkipped.push({ signalKey: signal.signalKey, reason: "rate-limit" });
-      continue;
-    }
-    const existing = await existingIssueForSignal(signal.signalKey);
-    if (existing !== null) {
-      issuesSkipped.push({ signalKey: signal.signalKey, reason: `dup:${existing}` });
-      continue;
-    }
-    const result = await fileIssueForSignal(signal);
-    if (result.ok) {
-      issuesFiled.push({ signalKey: signal.signalKey, issueUrl: result.url });
-      ctx.logger.info("improvement signal filed", {
-        signalKey: signal.signalKey,
-        url: result.url
-      });
-    } else {
-      issuesSkipped.push({ signalKey: signal.signalKey, reason: `error:${result.error}` });
-    }
-  }
-  return { issuesFiled, issuesSkipped };
-}
-async function runImprovementReview(input, deps = {}) {
-  const logger55 = deps.logger ?? createLogger({ component: "improvement_review" });
-  const { lookbackDays, fileIssues, minSampleSize, fitnessFloor } = input;
-  const now = Date.now();
-  const windowLabel = `${String(lookbackDays)}d`;
-  const allOutcomes = getOutcomeStore().query();
-  const windowed = filterByLookback(allOutcomes, lookbackDays, now);
-  const audit = safeFitnessAudit(now, { logger: logger55 });
-  const signals = [
-    ...detectCliPerformanceFloor(windowed, minSampleSize, windowLabel),
-    ...detectFailureCategoryConcentration(windowed, windowLabel),
-    ...detectFitnessSignals(audit, fitnessFloor)
-  ];
-  signals.sort((a, b) => SEVERITY_ORDER3[a.severity] - SEVERITY_ORDER3[b.severity]);
-  emitFitnessDeclinedSignal(audit, fitnessFloor, getPipelineEventBus(), logger55);
-  const { issuesFiled, issuesSkipped } = fileIssues ? await fileSignalsAsIssues(signals, { logger: logger55 }) : { issuesFiled: [], issuesSkipped: [] };
-  return {
-    window: windowLabel,
-    totalOutcomes: windowed.length,
-    signals,
-    issuesFiled,
-    issuesSkipped
-  };
-}
-async function reviewHandler(args, ctx) {
-  const parsed = ImprovementReviewInputSchema.safeParse(args);
-  if (!parsed.success) {
-    return toolStructuredError({
-      errorCategory: "validation",
-      message: `Validation error: ${formatZodError(parsed.error)}`
-    });
-  }
-  const response = await runImprovementReview(parsed.data, { logger: ctx.logger });
-  return toolSuccessStructured(response);
-}
-var description = "Periodic threshold-gated observability-driven improvement loop. Reads OutcomeStore + fitness audit, surfaces patterns crossing documented thresholds as candidate findings. When fileIssues=true, files candidate GitHub issues via `gh issue create` (rate-limited to 5 per run, deduped against open issues). Never auto-merges. Replaces the deleted self-development engine (#2402).";
-var TOOL_INPUT_SCHEMA = {
-  lookbackDays: z95.number().int().min(1).max(90).optional().describe("Lookback window for outcome data, in days. Default 7."),
-  fileIssues: z95.boolean().optional().describe(
-    "When true, file candidate issues for crossed thresholds (default false \u2014 return signals only)"
-  ),
-  minSampleSize: z95.number().int().min(1).max(1e3).optional().describe("Minimum sample size before a CLI/category signal fires (default 5)."),
-  fitnessFloor: z95.number().int().min(0).max(100).optional().describe("Fitness score below this threshold triggers a tech-debt signal (default 90).")
-};
-function registerImprovementReviewTool(server, deps) {
-  const logger55 = deps.logger ?? createLogger({ tool: "improvement_review" });
-  const secureHandler = createSecureHandler(reviewHandler, {
-    toolName: "improvement_review",
-    rateLimiter: deps.rateLimiter,
-    logger: logger55
-  });
-  const guardedHandler = withPrerequisite("improvement_review", secureHandler);
-  const timeoutMs = getToolTimeout("improvement_review", deps.security);
-  const wrappedHandler = wrapToolWithTimeout("improvement_review", guardedHandler, {
-    timeoutMs,
-    logger: logger55
-  });
-  server.registerTool(
-    "improvement_review",
-    {
-      description,
-      inputSchema: TOOL_INPUT_SCHEMA,
-      annotations: getToolAnnotations("improvement_review")
-    },
-    toSdkCallback(wrappedHandler)
-  );
-  logger55.info("Registered improvement_review tool");
-}
-
 // src/mcp/tools/query-task-state-tool.ts
-import { z as z96 } from "zod";
-var QueryTaskStateInputSchema = z96.object({
-  taskId: z96.string().min(1).max(128).describe("Task ID whose structured state log should be read")
+import { z as z95 } from "zod";
+var QueryTaskStateInputSchema = z95.object({
+  taskId: z95.string().min(1).max(128).describe("Task ID whose structured state log should be read")
 });
 function queryTaskStateHandler(args, ctx) {
   const parsed = QueryTaskStateInputSchema.safeParse(args);
@@ -46331,9 +45341,9 @@ function queryTaskStateHandler(args, ctx) {
 function registerQueryTaskStateTool(server, deps) {
   const logger55 = deps.logger ?? createLogger({ tool: "query_task_state" });
   const toolSchema = {
-    taskId: z96.string().min(1).max(128).describe("Task ID whose structured state log should be read")
+    taskId: z95.string().min(1).max(128).describe("Task ID whose structured state log should be read")
   };
-  const description2 = "Read the structured state log for a task ID and return the current snapshot. Includes Magentic-One Task Ledger (facts/guesses/openQuestions) and Progress Ledger (per-step reflections with suggestedAction) when orchestrators have written them. Structured state is only written when NEXUS_TASK_STATE_ENABLED=1 was set during the orchestrate invocation.";
+  const description = "Read the structured state log for a task ID and return the current snapshot. Includes Magentic-One Task Ledger (facts/guesses/openQuestions) and Progress Ledger (per-step reflections with suggestedAction) when orchestrators have written them. Structured state is only written when NEXUS_TASK_STATE_ENABLED=1 was set during the orchestrate invocation.";
   const secureHandler = createSecureHandler(queryTaskStateHandler, {
     toolName: "query_task_state",
     rateLimiter: deps.rateLimiter,
@@ -46346,14 +45356,14 @@ function registerQueryTaskStateTool(server, deps) {
   });
   server.registerTool(
     "query_task_state",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("query_task_state") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("query_task_state") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered query_task_state tool");
 }
 
 // src/mcp/tools/get-job-result-tool.ts
-import { z as z97 } from "zod";
+import { z as z96 } from "zod";
 
 // src/mcp/jobs/task-state-source.ts
 var logger42 = createLogger({ component: "task-state-source" });
@@ -46422,8 +45432,8 @@ function resolveJobResult(jobId, customDir) {
 }
 
 // src/mcp/tools/get-job-result-tool.ts
-var GetJobResultInputSchema = z97.object({
-  jobId: z97.string().min(1).max(128).describe('Job ID returned by orchestrate({ mode: "async" })')
+var GetJobResultInputSchema = z96.object({
+  jobId: z96.string().min(1).max(128).describe('Job ID returned by orchestrate({ mode: "async" })')
 });
 function getJobResultHandler(args) {
   const parsed = GetJobResultInputSchema.safeParse(args);
@@ -46454,9 +45464,9 @@ function getJobResultHandler(args) {
 function registerGetJobResultTool(server, deps) {
   const logger55 = deps.logger ?? createLogger({ tool: "get_job_result" });
   const toolSchema = {
-    jobId: z97.string().min(1).max(128).describe('Job ID returned by orchestrate({ mode: "async" })')
+    jobId: z96.string().min(1).max(128).describe('Job ID returned by orchestrate({ mode: "async" })')
   };
-  const description2 = 'Read the result of an async-mode tool invocation by jobId. Returns the structured record (status, result | error, timestamps). Poll until status !== "pending". Stage-1 of epic #2631 \u2014 Stage 2 will fold this into query_task_state once StructuredTaskState gains the result field.';
+  const description = 'Read the result of an async-mode tool invocation by jobId. Returns the structured record (status, result | error, timestamps). Poll until status !== "pending". Stage-1 of epic #2631 \u2014 Stage 2 will fold this into query_task_state once StructuredTaskState gains the result field.';
   const secureHandler = createSecureHandler(getJobResultHandler, {
     toolName: "get_job_result",
     rateLimiter: deps.rateLimiter,
@@ -46469,21 +45479,21 @@ function registerGetJobResultTool(server, deps) {
   });
   server.registerTool(
     "get_job_result",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("get_job_result") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("get_job_result") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered get_job_result tool");
 }
 
 // src/mcp/tools/list-jobs-tool.ts
-import { z as z98 } from "zod";
+import { z as z97 } from "zod";
 var MAX_LIST_JOBS_RESULTS = 200;
-var ListJobsInputSchema = z98.object({
+var ListJobsInputSchema = z97.object({
   /**
    * Filter to jobs from a specific tool (exact match — e.g. `'orchestrate'`).
    * Omit to list every tool's jobs.
    */
-  toolName: z98.string().min(1).max(128).optional().describe("Filter to one tool (exact match)."),
+  toolName: z97.string().min(1).max(128).optional().describe("Filter to one tool (exact match)."),
   /**
    * Filter to jobs in a specific lifecycle state.
    * Omit to list every state.
@@ -46496,7 +45506,7 @@ var ListJobsInputSchema = z98.object({
    * Newest jobs are returned first, so a smaller limit shows the most
    * recent activity.
    */
-  limit: z98.number().int().min(1).max(MAX_LIST_JOBS_RESULTS).optional().describe(`Max summaries to return (1-${String(MAX_LIST_JOBS_RESULTS)}, newest first).`)
+  limit: z97.number().int().min(1).max(MAX_LIST_JOBS_RESULTS).optional().describe(`Max summaries to return (1-${String(MAX_LIST_JOBS_RESULTS)}, newest first).`)
 });
 function listJobsHandler(args) {
   const parsed = ListJobsInputSchema.safeParse(args);
@@ -46527,13 +45537,13 @@ function listJobsHandler(args) {
 function registerListJobsTool(server, deps) {
   const logger55 = deps.logger ?? createLogger({ tool: "list_jobs" });
   const toolSchema = {
-    toolName: z98.string().min(1).max(128).optional().describe("Filter to one tool (exact match)."),
+    toolName: z97.string().min(1).max(128).optional().describe("Filter to one tool (exact match)."),
     status: JobStatusSchema.optional().describe(
       "Filter to pending | complete | failed | cancelled. Omit for all."
     ),
-    limit: z98.number().int().min(1).max(MAX_LIST_JOBS_RESULTS).optional().describe(`Max summaries to return (1-${String(MAX_LIST_JOBS_RESULTS)}, newest first).`)
+    limit: z97.number().int().min(1).max(MAX_LIST_JOBS_RESULTS).optional().describe(`Max summaries to return (1-${String(MAX_LIST_JOBS_RESULTS)}, newest first).`)
   };
-  const description2 = "List async-mode jobs (cross-session discovery). Returns summaries \u2014 jobId, toolName, status, timestamps \u2014 newest first. Filter by toolName / status / limit. Result payloads excluded; fetch via get_job_result(jobId). Stage 5 of epic #2631.";
+  const description = "List async-mode jobs (cross-session discovery). Returns summaries \u2014 jobId, toolName, status, timestamps \u2014 newest first. Filter by toolName / status / limit. Result payloads excluded; fetch via get_job_result(jobId). Stage 5 of epic #2631.";
   const secureHandler = createSecureHandler(listJobsHandler, {
     toolName: "list_jobs",
     rateLimiter: deps.rateLimiter,
@@ -46546,17 +45556,17 @@ function registerListJobsTool(server, deps) {
   });
   server.registerTool(
     "list_jobs",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("list_jobs") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("list_jobs") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered list_jobs tool");
 }
 
 // src/mcp/tools/cancel-job-tool.ts
-import { z as z99 } from "zod";
-var CancelJobInputSchema = z99.object({
-  jobId: z99.string().min(1).max(128).describe("Job ID returned by orchestrate / run_workflow / consensus_vote in async mode"),
-  reason: z99.string().max(1e3).optional().describe('Optional human-readable note (e.g. "user clicked cancel").')
+import { z as z98 } from "zod";
+var CancelJobInputSchema = z98.object({
+  jobId: z98.string().min(1).max(128).describe("Job ID returned by orchestrate / run_workflow / consensus_vote in async mode"),
+  reason: z98.string().max(1e3).optional().describe('Optional human-readable note (e.g. "user clicked cancel").')
 });
 function cancelJobHandler(args) {
   const parsed = CancelJobInputSchema.safeParse(args);
@@ -46608,10 +45618,10 @@ function cancelJobHandler(args) {
 function registerCancelJobTool(server, deps) {
   const logger55 = deps.logger ?? createLogger({ tool: "cancel_job" });
   const toolSchema = {
-    jobId: z99.string().min(1).max(128).describe("Job ID returned by orchestrate / run_workflow / consensus_vote in async mode"),
-    reason: z99.string().max(1e3).optional().describe('Optional human-readable note (e.g. "user clicked cancel").')
+    jobId: z98.string().min(1).max(128).describe("Job ID returned by orchestrate / run_workflow / consensus_vote in async mode"),
+    reason: z98.string().max(1e3).optional().describe('Optional human-readable note (e.g. "user clicked cancel").')
   };
-  const description2 = "Mark an async-mode job as cancelled (#3042 Stage 1b / epic #2631). Same-process dispatcher unwinds via AbortSignal (#3035/#3038); cross-process workers observe via get_job_result. Idempotent \u2014 cancel-after-complete is a no-op (preserves the terminal record); second cancel returns already_cancelled.";
+  const description = "Mark an async-mode job as cancelled (#3042 Stage 1b / epic #2631). Same-process dispatcher unwinds via AbortSignal (#3035/#3038); cross-process workers observe via get_job_result. Idempotent \u2014 cancel-after-complete is a no-op (preserves the terminal record); second cancel returns already_cancelled.";
   const secureHandler = createSecureHandler(cancelJobHandler, {
     toolName: "cancel_job",
     rateLimiter: deps.rateLimiter,
@@ -46624,29 +45634,29 @@ function registerCancelJobTool(server, deps) {
   });
   server.registerTool(
     "cancel_job",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("cancel_job") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("cancel_job") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered cancel_job tool");
 }
 
 // src/mcp/tools/ci-health-check-tool.ts
-import { z as z101 } from "zod";
+import { z as z100 } from "zod";
 
 // src/mcp/tools/ci-health-log.ts
-import { appendFileSync as appendFileSync4, existsSync as existsSync12, readFileSync as readFileSync10, statSync as statSync3, writeFileSync as writeFileSync3 } from "fs";
-import { z as z100 } from "zod";
+import { appendFileSync as appendFileSync4, existsSync as existsSync11, readFileSync as readFileSync9, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
+import { z as z99 } from "zod";
 var logger43 = createLogger({ component: "ci-health-log" });
-var CiHealthEventSchema = z100.object({
-  v: z100.literal(1),
-  ts: z100.iso.datetime(),
+var CiHealthEventSchema = z99.object({
+  v: z99.literal(1),
+  ts: z99.iso.datetime(),
   status: CiHealthStatusSchema,
-  repo: z100.string().optional(),
-  signals: z100.array(
-    z100.object({
-      source: z100.enum(["github-status", "repo-activity-window"]),
+  repo: z99.string().optional(),
+  signals: z99.array(
+    z99.object({
+      source: z99.enum(["github-status", "repo-activity-window"]),
       status: CiHealthStatusSchema,
-      evidence: z100.string()
+      evidence: z99.string()
     })
   )
 });
@@ -46664,13 +45674,13 @@ function capLogSize(path14) {
   const max = maxLogBytes();
   let size;
   try {
-    size = statSync3(path14).size;
+    size = statSync2(path14).size;
   } catch {
     return;
   }
   if (size <= max) return;
   try {
-    const lines = readFileSync10(path14, "utf-8").split("\n").filter((l) => l !== "");
+    const lines = readFileSync9(path14, "utf-8").split("\n").filter((l) => l !== "");
     const kept = [];
     let bytes = 0;
     for (let i = lines.length - 1; i >= 0; i--) {
@@ -46726,18 +45736,18 @@ function eventFromCheck(params) {
 }
 
 // src/mcp/tools/ci-health-check-tool.ts
-var CiHealthStatusSchema = z101.enum(["healthy", "degraded", "outage", "unknown"]);
-var CiHealthCheckInputSchema = z101.object({
+var CiHealthStatusSchema = z100.enum(["healthy", "degraded", "outage", "unknown"]);
+var CiHealthCheckInputSchema = z100.object({
   /**
    * Repo to check for the recent-runs activity signal (in `owner/repo` form).
    * Optional — when omitted, only the status-page signal is consulted.
    */
-  repo: z101.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
+  repo: z100.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
   /**
    * How far back to look for recent-runs activity (minutes). Default 30 —
    * matches the typical wedge-detection window from the #3070 / #3076 outages.
    */
-  activityWindowMinutes: z101.number().int().min(5).max(180).default(30).describe("Recent-runs lookback window in minutes (5-180; default 30).")
+  activityWindowMinutes: z100.number().int().min(5).max(180).default(30).describe("Recent-runs lookback window in minutes (5-180; default 30).")
 });
 var STATUS_PAGE_URL = "https://www.githubstatus.com/api/v2/components.json";
 function mapStatusPageStatus(raw) {
@@ -46870,8 +45880,8 @@ var DESCRIPTION = "Check CI infrastructure health before triggering / polling ru
 function registerCiHealthCheckTool(server, deps) {
   const logger55 = deps.logger ?? createLogger({ tool: "ci_health_check" });
   const toolSchema = {
-    repo: z101.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
-    activityWindowMinutes: z101.number().int().min(5).max(180).optional().describe("Recent-runs lookback window in minutes (5-180; default 30).")
+    repo: z100.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
+    activityWindowMinutes: z100.number().int().min(5).max(180).optional().describe("Recent-runs lookback window in minutes (5-180; default 30).")
   };
   const secureHandler = createSecureHandler((args) => ciHealthCheckHandler(args, logger55), {
     toolName: "ci_health_check",
@@ -46898,9 +45908,9 @@ function registerCiHealthCheckTool(server, deps) {
 // src/mcp/tools/verify-audit-chain-tool.ts
 import * as fs12 from "fs/promises";
 import * as path11 from "path";
-import { z as z102 } from "zod";
-var VerifyAuditChainInputSchema = z102.object({
-  logDir: z102.string().min(1).max(512).describe(
+import { z as z101 } from "zod";
+var VerifyAuditChainInputSchema = z101.object({
+  logDir: z101.string().min(1).max(512).describe(
     "Filesystem path to the FileAuditStorage log directory. Tool reads all `audit-*.jsonl` files in lexicographic order and verifies the combined chain."
   )
 });
@@ -46977,11 +45987,11 @@ async function handler2(args, ctx) {
 function registerVerifyAuditChainTool(server, deps) {
   const logger55 = deps.logger ?? createLogger({ tool: "verify_audit_chain" });
   const toolSchema = {
-    logDir: z102.string().min(1).max(512).describe(
+    logDir: z101.string().min(1).max(512).describe(
       "Filesystem path to the FileAuditStorage log directory. Tool reads all `audit-*.jsonl` files and verifies the combined hash chain."
     )
   };
-  const description2 = "Verify the hash chain of a persisted FileAuditStorage audit log. Reads all `audit-*.jsonl` files in the given directory, parses events, and runs `verifyChain()` to detect tampering. Returns a structured result with eventCount, fileCount, and one of three tamper signals if detected (hash_mismatch, previous_hash_mismatch, missing_hash). Read-only \u2014 never writes or deletes events.";
+  const description = "Verify the hash chain of a persisted FileAuditStorage audit log. Reads all `audit-*.jsonl` files in the given directory, parses events, and runs `verifyChain()` to detect tampering. Returns a structured result with eventCount, fileCount, and one of three tamper signals if detected (hash_mismatch, previous_hash_mismatch, missing_hash). Read-only \u2014 never writes or deletes events.";
   const secureHandler = createSecureHandler(handler2, {
     toolName: "verify_audit_chain",
     rateLimiter: deps.rateLimiter,
@@ -46994,25 +46004,25 @@ function registerVerifyAuditChainTool(server, deps) {
   });
   server.registerTool(
     "verify_audit_chain",
-    { description: description2, inputSchema: toolSchema, annotations: getToolAnnotations("verify_audit_chain") },
+    { description, inputSchema: toolSchema, annotations: getToolAnnotations("verify_audit_chain") },
     toSdkCallback(wrappedHandler)
   );
   logger55.info("Registered verify_audit_chain tool");
 }
 
 // src/mcp/tools/pipeline-tool.ts
-import { z as z103 } from "zod";
+import { z as z102 } from "zod";
 import * as fs13 from "fs";
 import * as path12 from "path";
-var PipelineInputSchema = z103.object({
+var PipelineInputSchema = z102.object({
   /** The task to execute. */
-  task: z103.string().min(5).max(1e4).describe("Task description \u2014 pipeline template auto-selected based on content"),
+  task: z102.string().min(5).max(1e4).describe("Task description \u2014 pipeline template auto-selected based on content"),
   /** Path to a spec file (.md, .yaml) to use as task input. */
-  specFile: z103.string().max(500).optional().describe("Path to a spec file \u2014 content prepended to task for greenfield projects"),
+  specFile: z102.string().max(500).optional().describe("Path to a spec file \u2014 content prepended to task for greenfield projects"),
   /** Override template — see `listTemplateIds()` for the canonical list (#2728). Auto-detected if omitted. */
-  template: z103.string().max(50).optional().describe(`Pipeline template override. Available: ${listTemplateIds().join(", ")}`),
+  template: z102.string().max(50).optional().describe(`Pipeline template override. Available: ${listTemplateIds().join(", ")}`),
   /** Voting strategy for consensus stages. */
-  votingStrategy: z103.enum([
+  votingStrategy: z102.enum([
     "simple_majority",
     "supermajority",
     "unanimous",
@@ -47023,13 +46033,13 @@ var PipelineInputSchema = z103.object({
     "Voting strategy for plan approval. simple_majority (default), supermajority (67%), unanimous, higher_order (Bayesian), proof_of_learning, opinion_wise"
   ),
   /** Use 3 agents instead of 6 for faster voting. */
-  quickMode: z103.boolean().default(false).describe("Use 3 agents instead of 6 for faster consensus voting"),
+  quickMode: z102.boolean().default(false).describe("Use 3 agents instead of 6 for faster consensus voting"),
   /** Maximum execution time per stage in milliseconds (min 30s, max 600s). */
-  timeoutMs: z103.number().int().min(3e4).max(6e5).optional().describe("Max time per stage in ms (30000-600000). Default: varies by stage complexity"),
+  timeoutMs: z102.number().int().min(3e4).max(6e5).optional().describe("Max time per stage in ms (30000-600000). Default: varies by stage complexity"),
   /** Stop after planning/voting (no implementation). */
-  dryRun: z103.boolean().default(false).describe("Stop after vote stage (no implementation)"),
+  dryRun: z102.boolean().default(false).describe("Stop after vote stage (no implementation)"),
   /** TESTS ONLY — random output, must not be used for real decisions. (#2319) */
-  simulateVotes: z103.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)")
+  simulateVotes: z102.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)")
 });
 function buildOutput2(result) {
   return {
@@ -47131,7 +46141,7 @@ function registerPipelineTool(server, deps) {
 }
 
 // src/mcp/tools/supply-chain-tradeoff-panel.ts
-import { z as z104 } from "zod";
+import { z as z103 } from "zod";
 var DEFAULT_AXES = [
   "build_time_determinism",
   "supply_chain_risk",
@@ -47151,16 +46161,16 @@ var FULL_PANEL = [
   "scope_steward"
 ];
 var QUICK_PANEL = ["architect", "security", "scope_steward"];
-var SupplyChainTradeoffPanelInputSchema = z104.object({
-  proposal: z104.string().min(1).max(MAX_PROPOSAL_LENGTH).describe('The proposal under tradeoff review (e.g. "Should aegis-boot adopt cargo-nextest?")'),
-  axes: z104.array(z104.string().min(1).max(MAX_AXIS_NAME_LENGTH)).min(1).max(MAX_AXES).optional().describe(
+var SupplyChainTradeoffPanelInputSchema = z103.object({
+  proposal: z103.string().min(1).max(MAX_PROPOSAL_LENGTH).describe('The proposal under tradeoff review (e.g. "Should aegis-boot adopt cargo-nextest?")'),
+  axes: z103.array(z103.string().min(1).max(MAX_AXIS_NAME_LENGTH)).min(1).max(MAX_AXES).optional().describe(
     `Tradeoff axes to evaluate. Default: ${DEFAULT_AXES.join(", ")}. Custom axes accepted; max ${String(MAX_AXES)}.`
   ),
-  context: z104.string().max(MAX_CONTEXT_LENGTH).optional().describe(
+  context: z103.string().max(MAX_CONTEXT_LENGTH).optional().describe(
     "Optional context: relevant repo state, dependency tree, vendor publishing patterns, etc."
   ),
-  quickMode: z104.boolean().optional().default(false).describe("Use 3 voters (architect, security, scope_steward) instead of 7"),
-  simulate: z104.boolean().optional().default(false).describe("Use simulated voters (testing only)")
+  quickMode: z103.boolean().optional().default(false).describe("Use 3 voters (architect, security, scope_steward) instead of 7"),
+  simulate: z103.boolean().optional().default(false).describe("Use simulated voters (testing only)")
 });
 function buildTradeoffProposal(input) {
   const axes = input.axes ?? DEFAULT_AXES;
@@ -47383,7 +46393,7 @@ async function tradeoffPanelHandler(args, ctx) {
 }
 function registerSupplyChainTradeoffPanelTool(server, deps) {
   const logger55 = deps.logger ?? createLogger({ tool: "supply_chain_tradeoff_panel" });
-  const description2 = "Run a structured per-axis tradeoff vote on an engineering proposal (#2294). Default axes: build_time_determinism / supply_chain_risk / update_cadence. Voters answer EACH axis independently; aggregator surfaces per-axis verdicts so legitimate tradeoffs are not masked by a single approve/reject.";
+  const description = "Run a structured per-axis tradeoff vote on an engineering proposal (#2294). Default axes: build_time_determinism / supply_chain_risk / update_cadence. Voters answer EACH axis independently; aggregator surfaces per-axis verdicts so legitimate tradeoffs are not masked by a single approve/reject.";
   const secureHandler = createSecureHandler(tradeoffPanelHandler, {
     toolName: "supply_chain_tradeoff_panel",
     rateLimiter: deps.rateLimiter,
@@ -47397,7 +46407,7 @@ function registerSupplyChainTradeoffPanelTool(server, deps) {
   server.registerTool(
     "supply_chain_tradeoff_panel",
     {
-      description: description2,
+      description,
       inputSchema: SupplyChainTradeoffPanelInputSchema.shape,
       annotations: getToolAnnotations("supply_chain_tradeoff_panel")
     },
@@ -48225,40 +47235,40 @@ var RiskLevel = /* @__PURE__ */ ((RiskLevel2) => {
 })(RiskLevel || {});
 
 // src/mcp/safety/stpa-schemas.ts
-import { z as z105 } from "zod";
-var HazardCategorySchema = z105.enum(HazardCategory);
-var HazardSeveritySchema = z105.enum(HazardSeverity);
-var ConstraintPrioritySchema = z105.enum(ConstraintPriority);
-var RiskLevelSchema = z105.enum(RiskLevel);
-var TriggerPatternSchema = z105.object({
-  parameter: z105.string().min(1),
-  matchType: z105.enum(["contains", "regex", "equals", "startsWith", "endsWith"]),
-  pattern: z105.string(),
-  reason: z105.string()
+import { z as z104 } from "zod";
+var HazardCategorySchema = z104.enum(HazardCategory);
+var HazardSeveritySchema = z104.enum(HazardSeverity);
+var ConstraintPrioritySchema = z104.enum(ConstraintPriority);
+var RiskLevelSchema = z104.enum(RiskLevel);
+var TriggerPatternSchema = z104.object({
+  parameter: z104.string().min(1),
+  matchType: z104.enum(["contains", "regex", "equals", "startsWith", "endsWith"]),
+  pattern: z104.string(),
+  reason: z104.string()
 });
-var HazardSchema = z105.object({
-  id: z105.string().min(1),
-  description: z105.string(),
+var HazardSchema = z104.object({
+  id: z104.string().min(1),
+  description: z104.string(),
   category: HazardCategorySchema,
   severity: HazardSeveritySchema,
-  likelihood: z105.enum(["almost_certain", "likely", "possible", "unlikely", "rare"]),
-  triggerConditions: z105.array(z105.string()),
-  consequences: z105.array(z105.string())
+  likelihood: z104.enum(["almost_certain", "likely", "possible", "unlikely", "rare"]),
+  triggerConditions: z104.array(z104.string()),
+  consequences: z104.array(z104.string())
 });
-var UnsafeControlActionSchema = z105.object({
-  id: z105.string().min(1),
-  toolName: z105.string().min(1),
-  type: z105.enum(["not_provided", "provided_causes_hazard", "wrong_timing", "wrong_duration"]),
-  description: z105.string(),
-  unsafeContext: z105.string(),
-  relatedHazards: z105.array(z105.string()),
-  triggerPatterns: z105.array(TriggerPatternSchema).optional()
+var UnsafeControlActionSchema = z104.object({
+  id: z104.string().min(1),
+  toolName: z104.string().min(1),
+  type: z104.enum(["not_provided", "provided_causes_hazard", "wrong_timing", "wrong_duration"]),
+  description: z104.string(),
+  unsafeContext: z104.string(),
+  relatedHazards: z104.array(z104.string()),
+  triggerPatterns: z104.array(TriggerPatternSchema).optional()
 });
-var SafetyConstraintSchema = z105.object({
-  id: z105.string().min(1),
-  description: z105.string(),
-  mitigates: z105.array(z105.string()),
-  enforcement: z105.enum([
+var SafetyConstraintSchema = z104.object({
+  id: z104.string().min(1),
+  description: z104.string(),
+  mitigates: z104.array(z104.string()),
+  enforcement: z104.enum([
     "prevent",
     "require_confirmation",
     "alert",
@@ -48266,54 +47276,54 @@ var SafetyConstraintSchema = z105.object({
     "rate_limit",
     "require_privilege"
   ]),
-  validationFunction: z105.string().optional(),
+  validationFunction: z104.string().optional(),
   priority: ConstraintPrioritySchema
 });
-var PropertySchemaSchema = z105.object({
-  type: z105.string(),
-  description: z105.string().optional(),
-  enum: z105.array(z105.unknown()).optional(),
-  pattern: z105.string().optional(),
-  minimum: z105.number().optional(),
-  maximum: z105.number().optional()
+var PropertySchemaSchema = z104.object({
+  type: z104.string(),
+  description: z104.string().optional(),
+  enum: z104.array(z104.unknown()).optional(),
+  pattern: z104.string().optional(),
+  minimum: z104.number().optional(),
+  maximum: z104.number().optional()
 });
-var ToolInputSchemaSchema = z105.object({
-  type: z105.string(),
-  properties: z105.record(z105.string(), PropertySchemaSchema).optional(),
-  required: z105.array(z105.string()).optional(),
-  additionalProperties: z105.boolean().optional()
+var ToolInputSchemaSchema = z104.object({
+  type: z104.string(),
+  properties: z104.record(z104.string(), PropertySchemaSchema).optional(),
+  required: z104.array(z104.string()).optional(),
+  additionalProperties: z104.boolean().optional()
 });
-var ToolDefinitionSchema = z105.object({
-  name: z105.string().min(1),
-  description: z105.string(),
+var ToolDefinitionSchema = z104.object({
+  name: z104.string().min(1),
+  description: z104.string(),
   inputSchema: ToolInputSchemaSchema
 });
-var AnalysisConfigurationSchema = z105.object({
-  includeLowSeverity: z105.boolean().default(true),
-  generateAllConstraints: z105.boolean().default(true),
-  checkInteractions: z105.boolean().default(true),
-  maxHazardsPerTool: z105.number().int().min(1).max(100).default(50),
-  categories: z105.array(HazardCategorySchema).default([])
+var AnalysisConfigurationSchema = z104.object({
+  includeLowSeverity: z104.boolean().default(true),
+  generateAllConstraints: z104.boolean().default(true),
+  checkInteractions: z104.boolean().default(true),
+  maxHazardsPerTool: z104.number().int().min(1).max(100).default(50),
+  categories: z104.array(HazardCategorySchema).default([])
 });
-var ConstraintViolationSchema = z105.object({
-  constraintId: z105.string().min(1),
-  constraintDescription: z105.string(),
+var ConstraintViolationSchema = z104.object({
+  constraintId: z104.string().min(1),
+  constraintDescription: z104.string(),
   severity: HazardSeveritySchema,
-  details: z105.string(),
-  remediation: z105.string()
+  details: z104.string(),
+  remediation: z104.string()
 });
-var ValidationWarningSchema = z105.object({
-  code: z105.string().min(1),
-  message: z105.string(),
-  affected: z105.string()
+var ValidationWarningSchema = z104.object({
+  code: z104.string().min(1),
+  message: z104.string(),
+  affected: z104.string()
 });
-var ValidationResultSchema = z105.object({
-  valid: z105.boolean(),
-  toolName: z105.string().min(1),
-  violations: z105.array(ConstraintViolationSchema),
-  passed: z105.array(z105.string()),
-  warnings: z105.array(ValidationWarningSchema),
-  validatedAt: z105.date()
+var ValidationResultSchema = z104.object({
+  valid: z104.boolean(),
+  toolName: z104.string().min(1),
+  violations: z104.array(ConstraintViolationSchema),
+  passed: z104.array(z104.string()),
+  warnings: z104.array(ValidationWarningSchema),
+  validatedAt: z104.date()
 });
 
 // src/mcp/safety/stpa-types.ts
@@ -49398,43 +48408,43 @@ var GeminiResponseParser = class {
 };
 
 // src/cli-adapters/router-types.ts
-import { z as z106 } from "zod";
-var RouterConfigSchema = z106.object({
-  minCapacityThreshold: z106.number().min(0).max(1).default(0.1),
-  preferCostEfficient: z106.boolean().default(false),
-  maxDecisionTimeMs: z106.number().min(1).max(1e3).default(100)
+import { z as z105 } from "zod";
+var RouterConfigSchema = z105.object({
+  minCapacityThreshold: z105.number().min(0).max(1).default(0.1),
+  preferCostEfficient: z105.boolean().default(false),
+  maxDecisionTimeMs: z105.number().min(1).max(1e3).default(100)
 });
 
 // src/cli-adapters/agreement-cascade-types.ts
-import { z as z107 } from "zod";
-var AgreementCascadeConfigSchema = z107.object({
-  agreementThreshold: z107.number().min(0.5).max(1).default(0.7),
-  maxStages: z107.number().int().min(1).max(5).default(3),
-  modelTimeoutMs: z107.number().int().min(1e3).max(3e5).default(6e4)
+import { z as z106 } from "zod";
+var AgreementCascadeConfigSchema = z106.object({
+  agreementThreshold: z106.number().min(0.5).max(1).default(0.7),
+  maxStages: z106.number().int().min(1).max(5).default(3),
+  modelTimeoutMs: z106.number().int().min(1e3).max(3e5).default(6e4)
 });
 
 // src/cli-adapters/agreement-cascade-router.ts
 var logger45 = createLogger({ component: "agreement-cascade-router" });
 
 // src/cli-adapters/task-classifier.ts
-import { z as z108 } from "zod";
-var ClassificationPatternsSchema = z108.object({
-  code: z108.array(z108.string()).readonly(),
-  research: z108.array(z108.string()).readonly(),
-  documentation: z108.array(z108.string()).readonly(),
-  analysis: z108.array(z108.string()).readonly()
+import { z as z107 } from "zod";
+var ClassificationPatternsSchema = z107.object({
+  code: z107.array(z107.string()).readonly(),
+  research: z107.array(z107.string()).readonly(),
+  documentation: z107.array(z107.string()).readonly(),
+  analysis: z107.array(z107.string()).readonly()
 });
 
 // src/cli-adapters/response-cache-types.ts
-import { z as z109 } from "zod";
-var ResponseCacheConfigSchema = z109.object({
-  defaultTTL: z109.number().min(1e3).max(36e5).default(3e5),
+import { z as z108 } from "zod";
+var ResponseCacheConfigSchema = z108.object({
+  defaultTTL: z108.number().min(1e3).max(36e5).default(3e5),
   // 5 minutes
-  maxEntries: z109.number().min(10).max(1e5).default(1e3),
-  maxMemoryMB: z109.number().min(1).max(1e3).default(50),
-  cleanupInterval: z109.number().min(1e3).max(6e5).default(6e4),
+  maxEntries: z108.number().min(10).max(1e5).default(1e3),
+  maxMemoryMB: z108.number().min(1).max(1e3).default(50),
+  cleanupInterval: z108.number().min(1e3).max(6e5).default(6e4),
   // 1 minute
-  enableLogging: z109.boolean().default(false)
+  enableLogging: z108.boolean().default(false)
 });
 
 // src/cli-adapters/response-cache-utils.ts
@@ -49442,12 +48452,12 @@ import { createHash as createHash4 } from "crypto";
 var logger46 = createLogger({ component: "ResponseCacheUtils" });
 
 // src/cli-adapters/unified-routing-types.ts
-import { z as z110 } from "zod";
-var UnifiedRoutingDecisionSchema = z110.object({
-  selectedCli: z110.string(),
-  confidence: z110.number().min(0).max(1),
-  reason: z110.string(),
-  strategy: z110.enum([
+import { z as z109 } from "zod";
+var UnifiedRoutingDecisionSchema = z109.object({
+  selectedCli: z109.string(),
+  confidence: z109.number().min(0).max(1),
+  reason: z109.string(),
+  strategy: z109.enum([
     "composite",
     "quality",
     "budget",
@@ -49459,57 +48469,57 @@ var UnifiedRoutingDecisionSchema = z110.object({
     "linucb",
     "direct"
   ]),
-  decisionTimeMs: z110.number().nonnegative(),
-  alternatives: z110.array(z110.string()).readonly(),
-  stagesExecuted: z110.array(z110.string()).readonly(),
-  withinBudget: z110.boolean().optional(),
-  estimatedComplexity: z110.enum(["simple", "moderate", "complex", "expert"]).optional(),
-  estimatedTokens: z110.number().int().positive().optional(),
-  topsisScore: z110.number().optional(),
-  ucbScore: z110.number().optional(),
-  resolvedAtStage: z110.number().int().nonnegative().optional(),
-  consensusReached: z110.boolean().optional(),
-  agreementScore: z110.number().min(0).max(1).optional(),
-  metadata: z110.record(z110.string(), z110.unknown()).optional()
+  decisionTimeMs: z109.number().nonnegative(),
+  alternatives: z109.array(z109.string()).readonly(),
+  stagesExecuted: z109.array(z109.string()).readonly(),
+  withinBudget: z109.boolean().optional(),
+  estimatedComplexity: z109.enum(["simple", "moderate", "complex", "expert"]).optional(),
+  estimatedTokens: z109.number().int().positive().optional(),
+  topsisScore: z109.number().optional(),
+  ucbScore: z109.number().optional(),
+  resolvedAtStage: z109.number().int().nonnegative().optional(),
+  consensusReached: z109.boolean().optional(),
+  agreementScore: z109.number().min(0).max(1).optional(),
+  metadata: z109.record(z109.string(), z109.unknown()).optional()
 });
 
 // src/learning/outcome-feedback-types.ts
-import { z as z111 } from "zod";
-var QualitySignalsSchema = z111.object({
-  testsPass: z111.boolean().optional(),
-  lintErrors: z111.number().int().min(0).optional(),
-  userApproved: z111.boolean().optional(),
-  retryCount: z111.number().int().min(0).default(0),
-  completionRatio: z111.number().min(0).max(1).default(1),
-  validStructure: z111.boolean().optional(),
-  coherenceScore: z111.number().min(0).max(1).optional()
+import { z as z110 } from "zod";
+var QualitySignalsSchema = z110.object({
+  testsPass: z110.boolean().optional(),
+  lintErrors: z110.number().int().min(0).optional(),
+  userApproved: z110.boolean().optional(),
+  retryCount: z110.number().int().min(0).default(0),
+  completionRatio: z110.number().min(0).max(1).default(1),
+  validStructure: z110.boolean().optional(),
+  coherenceScore: z110.number().min(0).max(1).optional()
 });
-var RoutingDecisionSchema = z111.object({
-  id: z111.uuid(),
-  timestamp: z111.iso.datetime(),
-  query: z111.string(),
-  routerType: z111.enum(["linucb", "preference", "quality", "cascade", "topsis"]),
-  selectedModel: z111.string(),
-  selectedTier: z111.enum(["strong", "weak"]).optional(),
-  armIndex: z111.number().int().min(0).optional(),
-  banditContext: z111.record(z111.string(), z111.unknown()).optional(),
-  queryFeatures: z111.record(z111.string(), z111.unknown()).optional(),
-  ucbScore: z111.number().optional(),
-  confidence: z111.number().min(0).max(1).optional(),
-  traceId: z111.string(),
-  domain: z111.string().optional()
+var RoutingDecisionSchema = z110.object({
+  id: z110.uuid(),
+  timestamp: z110.iso.datetime(),
+  query: z110.string(),
+  routerType: z110.enum(["linucb", "preference", "quality", "cascade", "topsis"]),
+  selectedModel: z110.string(),
+  selectedTier: z110.enum(["strong", "weak"]).optional(),
+  armIndex: z110.number().int().min(0).optional(),
+  banditContext: z110.record(z110.string(), z110.unknown()).optional(),
+  queryFeatures: z110.record(z110.string(), z110.unknown()).optional(),
+  ucbScore: z110.number().optional(),
+  confidence: z110.number().min(0).max(1).optional(),
+  traceId: z110.string(),
+  domain: z110.string().optional()
 });
-var TaskOutcomeSchema = z111.object({
-  routingDecisionId: z111.uuid(),
-  timestamp: z111.iso.datetime(),
-  outcomeClass: z111.enum(["success", "partial", "failure", "timeout", "error"]),
-  success: z111.boolean(),
-  qualityScore: z111.number().min(0).max(1),
-  durationMs: z111.number().min(0),
-  tokenUsage: z111.number().int().min(0),
-  errorMessage: z111.string().optional(),
+var TaskOutcomeSchema = z110.object({
+  routingDecisionId: z110.uuid(),
+  timestamp: z110.iso.datetime(),
+  outcomeClass: z110.enum(["success", "partial", "failure", "timeout", "error"]),
+  success: z110.boolean(),
+  qualityScore: z110.number().min(0).max(1),
+  durationMs: z110.number().min(0),
+  tokenUsage: z110.number().int().min(0),
+  errorMessage: z110.string().optional(),
   qualitySignals: QualitySignalsSchema,
-  traceId: z111.string()
+  traceId: z110.string()
 });
 var DEFAULT_FEEDBACK_COLLECTOR_CONFIG = {
   maxPendingDecisions: 1e3,
@@ -49524,17 +48534,17 @@ var DEFAULT_FEEDBACK_COLLECTOR_CONFIG = {
   targetTokenUsage: 2e3,
   maxHistorySize: 1e4
 };
-var FeedbackCollectorConfigSchema = z111.object({
-  maxPendingDecisions: z111.number().int().positive().default(1e3),
-  pendingTimeoutMs: z111.number().positive().default(3e5),
-  enableAutoReward: z111.boolean().default(true),
-  qualityWeight: z111.number().min(0).max(1).default(0.5),
-  speedWeight: z111.number().min(0).max(1).default(0.2),
-  efficiencyWeight: z111.number().min(0).max(1).default(0.2),
-  retryPenalty: z111.number().min(0).max(1).default(0.1),
-  targetDurationMs: z111.number().positive().default(5e3),
-  targetTokenUsage: z111.number().positive().default(2e3),
-  maxHistorySize: z111.number().int().positive().default(1e4)
+var FeedbackCollectorConfigSchema = z110.object({
+  maxPendingDecisions: z110.number().int().positive().default(1e3),
+  pendingTimeoutMs: z110.number().positive().default(3e5),
+  enableAutoReward: z110.boolean().default(true),
+  qualityWeight: z110.number().min(0).max(1).default(0.5),
+  speedWeight: z110.number().min(0).max(1).default(0.2),
+  efficiencyWeight: z110.number().min(0).max(1).default(0.2),
+  retryPenalty: z110.number().min(0).max(1).default(0.1),
+  targetDurationMs: z110.number().positive().default(5e3),
+  targetTokenUsage: z110.number().positive().default(2e3),
+  maxHistorySize: z110.number().int().positive().default(1e4)
 });
 
 // src/learning/outcome-feedback-helpers.ts
@@ -50596,10 +49606,10 @@ function getPolicy(id) {
 }
 
 // src/security/sandbox/sandbox-executor.ts
-import { execFile as execFile4 } from "child_process";
-import { promisify as promisify4 } from "util";
+import { execFile as execFile2 } from "child_process";
+import { promisify as promisify2 } from "util";
 import { resolve as resolve17, normalize as normalize2, sep as sep10 } from "path";
-var execFileAsync4 = promisify4(execFile4);
+var execFileAsync2 = promisify2(execFile2);
 var logger48 = createLogger({ component: "sandbox-executor" });
 function parseExecError(error) {
   const execError = error;
@@ -50708,7 +49718,7 @@ var PolicySandboxExecutor = class {
    * Executes command with resource limits.
    */
   async executeWithLimits(command, args, cwd, env, limits) {
-    const { stdout, stderr } = await execFileAsync4(command, [...args], {
+    const { stdout, stderr } = await execFileAsync2(command, [...args], {
       cwd: cwd ?? process.cwd(),
       timeout: limits.maxWallTimeMs,
       maxBuffer: limits.maxOutputBytes,
@@ -51138,9 +50148,9 @@ import * as fs14 from "fs";
 import * as path13 from "path";
 var logger54 = createLogger({ component: "task-tracker" });
 async function exec(cmd, args, timeout = 15e3) {
-  const { execFile: execFile5 } = await import("child_process");
-  const { promisify: promisify5 } = await import("util");
-  const run = promisify5(execFile5);
+  const { execFile: execFile3 } = await import("child_process");
+  const { promisify: promisify3 } = await import("util");
+  const run = promisify3(execFile3);
   const { stdout } = await run(cmd, [...args], { timeout });
   return stdout.trim();
 }
@@ -51151,7 +50161,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-PSMTMC7V.js");
+    const { createScmProvider } = await import("./factory-P2SQS7UM.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -51753,11 +50763,6 @@ export {
   registerMemoryStatsTool,
   MemoryWriteInputSchema,
   registerMemoryWriteTool,
-  createFitnessScoreCalculator,
-  calculateFitnessScore,
-  ImprovementReviewInputSchema,
-  runImprovementReview,
-  registerImprovementReviewTool,
   registerWeatherReportTool,
   RegistryImportInputSchema,
   registerRegistryImportTool,
@@ -51859,4 +50864,4 @@ export {
   detectBackend,
   createTaskTracker
 };
-//# sourceMappingURL=chunk-FYGZ4MEQ.js.map
+//# sourceMappingURL=chunk-76FTBRUS.js.map