nexus-agents 3.6.4 → 3.6.6

package/dist/{consensus-vote-TALT6GHT.js → consensus-vote-QGMUKHKI.js}

@@ -11,26 +11,26 @@ import {
   resetCorrelationTracker,
   runConsensusForGoal,
   unwrapVoteOrThrow
-} from "./chunk-NRRH254O.js";
-import "./chunk-6LZNWY4D.js";
-import "./chunk-UAXEANMF.js";
-import "./chunk-J5TKJM7U.js";
-import "./chunk-4Q6SSODG.js";
-import "./chunk-DJ7YCUOL.js";
+} from "./chunk-SH4HKLPQ.js";
+import "./chunk-6WRQIEKK.js";
+import "./chunk-QWFEQURV.js";
+import "./chunk-KJCXANOL.js";
+import "./chunk-HOMEGHVJ.js";
+import "./chunk-3LMU5W5I.js";
 import "./chunk-6T3EPABN.js";
-import "./chunk-LFIDNLBP.js";
+import "./chunk-44AA6TSZ.js";
 import "./chunk-DVKS77O5.js";
 import "./chunk-KSQSWEFH.js";
-import "./chunk-TXQUWORP.js";
-import "./chunk-OVYEVJIS.js";
-import "./chunk-XLACRVKG.js";
-import "./chunk-77RSSNU6.js";
+import "./chunk-Y4T2ZCZB.js";
+import "./chunk-2I2VX62W.js";
+import "./chunk-YRAOOAYY.js";
+import "./chunk-QJU6PS53.js";
 import "./chunk-SNJNRDKZ.js";
-import "./chunk-EOVXDAYT.js";
+import "./chunk-LOY7LJJT.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-XZYPUK4O.js";
-import "./chunk-542D7RE3.js";
-import "./chunk-OO7JQJTG.js";
+import "./chunk-N7FPSYIR.js";
+import "./chunk-CGICJPJ6.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -48,4 +48,4 @@ export {
   runConsensusForGoal,
   unwrapVoteOrThrow
 };
-//# sourceMappingURL=consensus-vote-TALT6GHT.js.map
+//# sourceMappingURL=consensus-vote-QGMUKHKI.js.map

package/dist/{context-retriever-SHMAFK3K.js → context-retriever-SRPTYHYW.js}

@@ -6,18 +6,18 @@ import {
   inferTaskCategory,
   selectRelevantResearch,
   summarizeContextForPrompt
-} from "./chunk-XZ7XRJY5.js";
-import "./chunk-R4W2GOYG.js";
-import "./chunk-CWOXQK7J.js";
+} from "./chunk-3KIJASVO.js";
+import "./chunk-7RIGDQDO.js";
+import "./chunk-MGLEPBIZ.js";
 import "./chunk-NUBSJGQZ.js";
-import "./chunk-DJ7YCUOL.js";
+import "./chunk-3LMU5W5I.js";
 import "./chunk-6T3EPABN.js";
-import "./chunk-LFIDNLBP.js";
+import "./chunk-44AA6TSZ.js";
 import "./chunk-DVKS77O5.js";
 import "./chunk-KSQSWEFH.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-XZYPUK4O.js";
-import "./chunk-OO7JQJTG.js";
+import "./chunk-N7FPSYIR.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -30,4 +30,4 @@ export {
   selectRelevantResearch,
   summarizeContextForPrompt
 };
-//# sourceMappingURL=context-retriever-SHMAFK3K.js.map
+//# sourceMappingURL=context-retriever-SRPTYHYW.js.map

package/dist/{doctor-deep-R2DKQMK4.js → doctor-deep-TIIP6FL7.js}

@@ -1,8 +1,8 @@
 import {
   formatDeepDiagnostics,
   runDeepDiagnostics
-} from "./chunk-CFJV3CEA.js";
-import "./chunk-OO7JQJTG.js";
+} from "./chunk-SAPRUA5H.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -10,4 +10,4 @@ export {
   formatDeepDiagnostics,
   runDeepDiagnostics
 };
-//# sourceMappingURL=doctor-deep-R2DKQMK4.js.map
+//# sourceMappingURL=doctor-deep-TIIP6FL7.js.map

package/dist/{doctor-live-TXBH4FFG.js → doctor-live-47RN4A4J.js}

@@ -1,18 +1,18 @@
 import {
   createAllAdapters,
   probeAllClis
-} from "./chunk-TXQUWORP.js";
-import "./chunk-OVYEVJIS.js";
-import "./chunk-XLACRVKG.js";
-import "./chunk-77RSSNU6.js";
+} from "./chunk-Y4T2ZCZB.js";
+import "./chunk-2I2VX62W.js";
+import "./chunk-YRAOOAYY.js";
+import "./chunk-QJU6PS53.js";
 import "./chunk-SNJNRDKZ.js";
-import "./chunk-EOVXDAYT.js";
+import "./chunk-LOY7LJJT.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-XZYPUK4O.js";
-import "./chunk-542D7RE3.js";
+import "./chunk-N7FPSYIR.js";
+import "./chunk-CGICJPJ6.js";
 import {
   resolveClassGuardMs
-} from "./chunk-OO7JQJTG.js";
+} from "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -32,7 +32,20 @@ function buildReadiness(cli, levels) {
   return { cli, levels, ...reached !== void 0 ? { reached } : {} };
 }
 function formatReadiness(readiness) {
-  const icon = (o) => o.status === "verified" ? "\u2713" : o.status === "failed" ? "\u2717" : "\xB7";
+  const icon = (o) => {
+    switch (o.status) {
+      case "verified":
+        return "\u2713";
+      case "failed":
+        return "\u2717";
+      case "not-attempted":
+        return "\xB7";
+      default: {
+        const exhaustive = o;
+        throw new Error(`Unhandled level outcome: ${JSON.stringify(exhaustive)}`);
+      }
+    }
+  };
   const lines = READINESS_LEVELS.map((level) => {
     const outcome = readiness.levels[level];
     const detail = outcome.status === "verified" ? "" : ` \u2014 ${outcome.reason}`;
@@ -133,4 +146,4 @@ export {
   formatLiveReadiness,
   runLiveReadiness
 };
-//# sourceMappingURL=doctor-live-TXBH4FFG.js.map
+//# sourceMappingURL=doctor-live-47RN4A4J.js.map

package/dist/doctor-live-47RN4A4J.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/cli-readiness.ts","../src/cli/doctor-live.ts"],"sourcesContent":["/**\n * Readiness levels for a CLI adapter (#4376, #4351 criterion 7).\n *\n * Nothing in the tree could confirm that an adapter which *looks* healthy can\n * actually serve a completion. `healthCheck()` proves the binary exists at an\n * acceptable version; `cli-auth-probe` proves credentials are present and\n * unexpired, and says so explicitly — \"No live API calls.\" Neither proves the\n * adapter serves anything.\n *\n * That is the state #4351 reported: every voter returned `stop_sequence` with\n * zero tokens while every available check said healthy. The checks were not\n * wrong; they were answering a narrower question than the caller assumed.\n *\n * ## Levels, and what each one actually proves\n *\n * | level           | proves                                    | costs |\n * | --------------- | ----------------------------------------- | ----- |\n * | `installed`     | the binary exists at a supported version  | none  |\n * | `authenticated` | credentials are present and unexpired     | none  |\n * | `serves`        | a real completion came back with content  | quota |\n *\n * `serves` is the only level that can catch #4351, and the only one that\n * spends the resource it is measuring. It therefore runs **only when\n * explicitly invoked** (`doctor --live`). Decided by a 7-voter `higher_order`\n * panel on #4376 (5 of 6 approvers): the rejected alternative cached a probe\n * result behind a TTL on the default path, which is a stale measurement\n * presented as current readiness — the same defect this module exists to fix.\n *\n * ## Not-attempted is not a failure\n *\n * The load-bearing distinction. A level that was never run reports\n * `not-attempted`, never `failed`. A reader must be able to tell \"we checked\n * and it does not serve\" from \"we did not check\", because the second is the\n * default state of every run that does not pass `--live`, and reporting it as\n * either healthy or broken would be a claim nobody measured.\n *\n * @module cli/cli-readiness\n * (Source: Issue #4376)\n */\n\nimport { resolveClassGuardMs } from '../config/timeouts.js';\nimport type { CliName } from '../cli-adapters/types.js';\n\n/** Ordered weakest to strongest. Each level subsumes the ones before it. */\nexport const READINESS_LEVELS = ['installed', 'authenticated', 'serves'] as const;\n\nexport type ReadinessLevel = (typeof READINESS_LEVELS)[number];\n\n/** What a single level's check concluded. */\nexport type LevelOutcome =\n  | { readonly status: 'verified' }\n  | { readonly status: 'failed'; readonly reason: string }\n  /** Not run. Carries why, so the report can distinguish opt-out from error. */\n  | { readonly status: 'not-attempted'; readonly reason: string };\n\nexport interface CliReadiness {\n  readonly cli: CliName;\n  readonly levels: Readonly<Record<ReadinessLevel, LevelOutcome>>;\n  /**\n   * The strongest level actually VERIFIED, or undefined when even `installed`\n   * failed. Never inferred from a level that was not attempted.\n   */\n  readonly reached?: ReadinessLevel;\n}\n\n/** Human-readable statement of what a level does and does not prove. */\nexport const LEVEL_MEANING: Readonly<Record<ReadinessLevel, string>> = {\n  installed: 'binary present at a supported version — proves nothing about auth or serving',\n  authenticated: 'credentials present and unexpired, read locally — no API call was made',\n  serves: 'a real completion returned content — the only level that proves the adapter works',\n};\n\n/**\n * The strongest verified level, stopping at the first gap.\n *\n * Stops rather than scanning for any verified level, because the ladder is\n * cumulative: a `serves` verification below a failed `authenticated` would\n * mean the two checks disagree, and reporting the higher one would paper over\n * that. A `not-attempted` level stops the ladder exactly like a failure —\n * absence of a check is not a pass.\n */\nexport function highestVerified(\n  levels: Readonly<Record<ReadinessLevel, LevelOutcome>>\n): ReadinessLevel | undefined {\n  let reached: ReadinessLevel | undefined;\n  for (const level of READINESS_LEVELS) {\n    if (levels[level].status !== 'verified') break;\n    reached = level;\n  }\n  return reached;\n}\n\n/** Assemble a readiness result, deriving `reached` from the outcomes. */\nexport function buildReadiness(\n  cli: CliName,\n  levels: Readonly<Record<ReadinessLevel, LevelOutcome>>\n): CliReadiness {\n  const reached = highestVerified(levels);\n  return { cli, levels, ...(reached !== undefined ? { reached } : {}) };\n}\n\n/**\n * Render one CLI's ladder, naming every level's state.\n *\n * Every level is printed, including the ones that did not run. A report that\n * silently omitted `serves` would read as a clean bill of health from a run\n * that never tested serving — which is precisely how #4351 went unnoticed.\n */\nexport function formatReadiness(readiness: CliReadiness): string {\n  // Exhaustive rather than a ternary chain (#4563): a new LevelOutcome status\n  // would otherwise fall into the '·' arm and render as \"not attempted\",\n  // quietly misreporting whatever the new state actually means.\n  const icon = (o: LevelOutcome): string => {\n    switch (o.status) {\n      case 'verified':\n        return '✓';\n      case 'failed':\n        return '✗';\n      case 'not-attempted':\n        return '·';\n      default: {\n        const exhaustive: never = o;\n        throw new Error(`Unhandled level outcome: ${JSON.stringify(exhaustive)}`);\n      }\n    }\n  };\n\n  const lines = READINESS_LEVELS.map((level) => {\n    const outcome = readiness.levels[level];\n    const detail = outcome.status === 'verified' ? '' : ` — ${outcome.reason}`;\n    return `      ${icon(outcome)} ${level}${detail}`;\n  });\n\n  const summary =\n    readiness.reached === undefined ? 'not ready' : `ready through \"${readiness.reached}\"`;\n\n  return [`  ${readiness.cli}: ${summary}`, ...lines].join('\\n');\n}\n\n/** The minimal adapter surface the `serves` probe needs. */\nexport interface ServesProbeTarget {\n  execute(task: {\n    content: string;\n    maxTokens?: number;\n  }): Promise<{ ok: true; value: { text: string } } | { ok: false; error: { message: string } }>;\n}\n\n/**\n * The smallest prompt that still proves generation happened.\n *\n * Short on purpose — this level spends real quota, so it asks for the least\n * that can distinguish \"served content\" from \"returned nothing\".\n */\nexport const SERVES_PROBE_PROMPT = 'Reply with the single word: ok';\n\n/**\n * Probe whether an adapter actually serves a completion.\n *\n * The check that matters is **non-empty content**, not a successful exit.\n * #4351's signature was every voter returning `stop_sequence` with zero\n * tokens: the call succeeded and produced nothing. An adapter that returns\n * `ok` with empty text has not served, and saying otherwise would reproduce\n * the exact reading that made the incident invisible.\n *\n * Bounded by the `interactive` operation-class guard. Found by running it: an\n * unbounded ladder over four adapters hung past two minutes with no output,\n * and a readiness check that never returns is worse than one that reports a\n * failure — the operator learns nothing either way, but waits for it. A\n * timeout is itself a legitimate not-ready result, not an error.\n *\n * @param adapter - The adapter to probe.\n * @param timeoutMs - Per-adapter ceiling; defaults to the interactive guard.\n */\nexport async function probeServes(\n  adapter: ServesProbeTarget,\n  timeoutMs: number = resolveClassGuardMs('interactive')\n): Promise<LevelOutcome> {\n  let result: Awaited<ReturnType<ServesProbeTarget['execute']>>;\n  try {\n    result = await withDeadline(\n      adapter.execute({ content: SERVES_PROBE_PROMPT, maxTokens: 16 }),\n      timeoutMs\n    );\n  } catch (caught: unknown) {\n    if (caught instanceof ProbeTimeout) {\n      return {\n        status: 'failed',\n        reason: `no response within ${String(Math.round(timeoutMs / 1000))}s`,\n      };\n    }\n    const message = caught instanceof Error ? caught.message : String(caught);\n    return { status: 'failed', reason: `probe threw: ${message}` };\n  }\n\n  if (!result.ok) {\n    return { status: 'failed', reason: result.error.message };\n  }\n  if (result.value.text.trim() === '') {\n    return {\n      status: 'failed',\n      reason: 'call succeeded but returned no content — the #4351 signature',\n    };\n  }\n  return { status: 'verified' };\n}\n\n/** Raised when a probe outlives its ceiling. */\nclass ProbeTimeout extends Error {}\n\n/**\n * Race a promise against a deadline.\n *\n * The underlying call is not cancelled — a CLI subprocess keeps running until\n * its own guard reaps it. What this bounds is how long the OPERATOR waits,\n * which is the thing that made an unbounded ladder unusable.\n */\nasync function withDeadline<T>(work: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: NodeJS.Timeout | undefined;\n  const deadline = new Promise<never>((_resolve, reject) => {\n    timer = setTimeout(() => {\n      reject(new ProbeTimeout());\n    }, timeoutMs);\n    // Deliberately NOT unref'd. An unref'd timer does not hold the event loop\n    // open, so if the probed call never settles and nothing else is pending,\n    // Node can exit at the await before the deadline fires — the guarantee\n    // voiding itself in precisely the case it exists for. `clearTimeout` in\n    // the finally is what stops it outliving a call that did settle.\n  });\n\n  try {\n    return await Promise.race([work, deadline]);\n  } finally {\n    if (timer !== undefined) clearTimeout(timer);\n  }\n}\n","/**\n * The `serves` readiness level for `nexus-agents doctor --live` (#4376).\n *\n * Runs a real completion against every configured adapter and reports whether\n * content actually came back. This is the only level that can catch #4351 —\n * every voter returning `stop_sequence` with zero tokens while `healthCheck()`\n * and the auth probe both reported healthy — and the only one that spends the\n * resource it measures, which is why it is opt-in.\n *\n * @module cli/doctor-live\n * (Source: Issue #4376)\n */\n\nimport { createAllAdapters } from '../cli-adapters/factory.js';\nimport type { CliName } from '../cli-adapters/types.js';\nimport { probeAllClis } from './cli-auth-probe.js';\nimport {\n  buildReadiness,\n  formatReadiness,\n  probeServes,\n  type CliReadiness,\n  type LevelOutcome,\n  type ServesProbeTarget,\n} from './cli-readiness.js';\n\n/** Reason recorded when a level is skipped because an earlier one failed. */\nconst NOT_REACHED = 'earlier level did not pass, so this was not attempted';\n\n/**\n * Run the full ladder for every adapter.\n *\n * The ladder short-circuits: a CLI that is not installed is not probed for\n * auth, and one that is not authenticated is not billed for a completion. The\n * skipped levels report `not-attempted`, never `failed` — nothing was learned\n * about them, and saying otherwise would invent a measurement.\n */\nexport async function runLiveReadiness(\n  deps: {\n    readonly adapters?: Map<CliName, ServesProbeTarget>;\n    readonly authStates?: ReadonlyMap<CliName, 'authenticated' | 'unknown' | 'not-ok'>;\n  } = {}\n): Promise<readonly CliReadiness[]> {\n  const adapters =\n    deps.adapters ?? (createAllAdapters() as unknown as Map<CliName, ServesProbeTarget>);\n  const authStates = deps.authStates ?? (await readAuthStates());\n\n  const results: CliReadiness[] = [];\n  for (const [cli, adapter] of adapters) {\n    results.push(await ladderFor(cli, adapter, authStates.get(cli)));\n  }\n  return results;\n}\n\nasync function ladderFor(\n  cli: CliName,\n  adapter: ServesProbeTarget,\n  auth: 'authenticated' | 'unknown' | 'not-ok' | undefined\n): Promise<CliReadiness> {\n  const installed: LevelOutcome = { status: 'verified' };\n\n  // `unknown` (#4391: a CLI exposing no readable auth signal) is admitted\n  // optimistically at this level, exactly as the auth probe requires — but it\n  // is the live probe below that then actually settles the question.\n  const authenticated: LevelOutcome =\n    auth === 'not-ok'\n      ? { status: 'failed', reason: 'no usable credentials found' }\n      : { status: 'verified' };\n\n  if (authenticated.status !== 'verified') {\n    return buildReadiness(cli, {\n      installed,\n      authenticated,\n      serves: { status: 'not-attempted', reason: NOT_REACHED },\n    });\n  }\n\n  return buildReadiness(cli, { installed, authenticated, serves: await probeServes(adapter) });\n}\n\n/** Collapse the auth probe's states into what the ladder needs. */\nasync function readAuthStates(): Promise<\n  ReadonlyMap<CliName, 'authenticated' | 'unknown' | 'not-ok'>\n> {\n  const probes = await probeAllClis();\n  const states = new Map<CliName, 'authenticated' | 'unknown' | 'not-ok'>();\n  for (const probe of probes) {\n    if (probe.state === 'authenticated') states.set(probe.cli, 'authenticated');\n    else if (probe.state === 'unknown') states.set(probe.cli, 'unknown');\n    else states.set(probe.cli, 'not-ok');\n  }\n  return states;\n}\n\n/** Render the live report, with a heading that says what was and was not proven. */\nexport function formatLiveReadiness(report: readonly CliReadiness[]): string {\n  if (report.length === 0) {\n    return '\\nLive readiness: no adapters configured — nothing was probed.';\n  }\n  return [\n    '',\n    'Live readiness (--live: a real completion per adapter)',\n    ...report.map(formatReadiness),\n  ].join('\\n');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA4CO,IAAM,mBAAmB,CAAC,aAAa,iBAAiB,QAAQ;AAqChE,SAAS,gBACd,QAC4B;AAC5B,MAAI;AACJ,aAAW,SAAS,kBAAkB;AACpC,QAAI,OAAO,KAAK,EAAE,WAAW,WAAY;AACzC,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAGO,SAAS,eACd,KACA,QACc;AACd,QAAM,UAAU,gBAAgB,MAAM;AACtC,SAAO,EAAE,KAAK,QAAQ,GAAI,YAAY,SAAY,EAAE,QAAQ,IAAI,CAAC,EAAG;AACtE;AASO,SAAS,gBAAgB,WAAiC;AAI/D,QAAM,OAAO,CAAC,MAA4B;AACxC,YAAQ,EAAE,QAAQ;AAAA,MAChB,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,SAAS;AACP,cAAM,aAAoB;AAC1B,cAAM,IAAI,MAAM,4BAA4B,KAAK,UAAU,UAAU,CAAC,EAAE;AAAA,MAC1E;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,iBAAiB,IAAI,CAAC,UAAU;AAC5C,UAAM,UAAU,UAAU,OAAO,KAAK;AACtC,UAAM,SAAS,QAAQ,WAAW,aAAa,KAAK,WAAM,QAAQ,MAAM;AACxE,WAAO,SAAS,KAAK,OAAO,CAAC,IAAI,KAAK,GAAG,MAAM;AAAA,EACjD,CAAC;AAED,QAAM,UACJ,UAAU,YAAY,SAAY,cAAc,kBAAkB,UAAU,OAAO;AAErF,SAAO,CAAC,KAAK,UAAU,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,EAAE,KAAK,IAAI;AAC/D;AAgBO,IAAM,sBAAsB;AAoBnC,eAAsB,YACpB,SACA,YAAoB,oBAAoB,aAAa,GAC9B;AACvB,MAAI;AACJ,MAAI;AACF,aAAS,MAAM;AAAA,MACb,QAAQ,QAAQ,EAAE,SAAS,qBAAqB,WAAW,GAAG,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF,SAAS,QAAiB;AACxB,QAAI,kBAAkB,cAAc;AAClC,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,sBAAsB,OAAO,KAAK,MAAM,YAAY,GAAI,CAAC,CAAC;AAAA,MACpE;AAAA,IACF;AACA,UAAM,UAAU,kBAAkB,QAAQ,OAAO,UAAU,OAAO,MAAM;AACxE,WAAO,EAAE,QAAQ,UAAU,QAAQ,gBAAgB,OAAO,GAAG;AAAA,EAC/D;AAEA,MAAI,CAAC,OAAO,IAAI;AACd,WAAO,EAAE,QAAQ,UAAU,QAAQ,OAAO,MAAM,QAAQ;AAAA,EAC1D;AACA,MAAI,OAAO,MAAM,KAAK,KAAK,MAAM,IAAI;AACnC,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO,EAAE,QAAQ,WAAW;AAC9B;AAGA,IAAM,eAAN,cAA2B,MAAM;AAAC;AASlC,eAAe,aAAgB,MAAkB,WAA+B;AAC9E,MAAI;AACJ,QAAM,WAAW,IAAI,QAAe,CAAC,UAAU,WAAW;AACxD,YAAQ,WAAW,MAAM;AACvB,aAAO,IAAI,aAAa,CAAC;AAAA,IAC3B,GAAG,SAAS;AAAA,EAMd,CAAC;AAED,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,QAAQ,CAAC;AAAA,EAC5C,UAAE;AACA,QAAI,UAAU,OAAW,cAAa,KAAK;AAAA,EAC7C;AACF;;;AChNA,IAAM,cAAc;AAUpB,eAAsB,iBACpB,OAGI,CAAC,GAC6B;AAClC,QAAM,WACJ,KAAK,YAAa,kBAAkB;AACtC,QAAM,aAAa,KAAK,cAAe,MAAM,eAAe;AAE5D,QAAM,UAA0B,CAAC;AACjC,aAAW,CAAC,KAAK,OAAO,KAAK,UAAU;AACrC,YAAQ,KAAK,MAAM,UAAU,KAAK,SAAS,WAAW,IAAI,GAAG,CAAC,CAAC;AAAA,EACjE;AACA,SAAO;AACT;AAEA,eAAe,UACb,KACA,SACA,MACuB;AACvB,QAAM,YAA0B,EAAE,QAAQ,WAAW;AAKrD,QAAM,gBACJ,SAAS,WACL,EAAE,QAAQ,UAAU,QAAQ,8BAA8B,IAC1D,EAAE,QAAQ,WAAW;AAE3B,MAAI,cAAc,WAAW,YAAY;AACvC,WAAO,eAAe,KAAK;AAAA,MACzB;AAAA,MACA;AAAA,MACA,QAAQ,EAAE,QAAQ,iBAAiB,QAAQ,YAAY;AAAA,IACzD,CAAC;AAAA,EACH;AAEA,SAAO,eAAe,KAAK,EAAE,WAAW,eAAe,QAAQ,MAAM,YAAY,OAAO,EAAE,CAAC;AAC7F;AAGA,eAAe,iBAEb;AACA,QAAM,SAAS,MAAM,aAAa;AAClC,QAAM,SAAS,oBAAI,IAAqD;AACxE,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,UAAU,gBAAiB,QAAO,IAAI,MAAM,KAAK,eAAe;AAAA,aACjE,MAAM,UAAU,UAAW,QAAO,IAAI,MAAM,KAAK,SAAS;AAAA,QAC9D,QAAO,IAAI,MAAM,KAAK,QAAQ;AAAA,EACrC;AACA,SAAO;AACT;AAGO,SAAS,oBAAoB,QAAyC;AAC3E,MAAI,OAAO,WAAW,GAAG;AACvB,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAG,OAAO,IAAI,eAAe;AAAA,EAC/B,EAAE,KAAK,IAAI;AACb;","names":[]}

package/dist/{expert-bridge-WJ54PXNM.js → expert-bridge-76OOP55L.js}

@@ -3,9 +3,9 @@ import {
   shutdownExpertBridge,
   tokenSplitFromUsage,
   totalTokensFromUsage
-} from "./chunk-56GTITUT.js";
-import "./chunk-EOVXDAYT.js";
-import "./chunk-OO7JQJTG.js";
+} from "./chunk-ZCHQS3KU.js";
+import "./chunk-LOY7LJJT.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -15,4 +15,4 @@ export {
   tokenSplitFromUsage,
   totalTokensFromUsage
 };
-//# sourceMappingURL=expert-bridge-WJ54PXNM.js.map
+//# sourceMappingURL=expert-bridge-76OOP55L.js.map

package/dist/{factory-WFICVFVH.js → factory-IYGZJJU4.js}

@@ -3,16 +3,16 @@ import {
   createCliAdapter,
   getAvailableClis,
   isCliAvailable
-} from "./chunk-TXQUWORP.js";
-import "./chunk-OVYEVJIS.js";
-import "./chunk-XLACRVKG.js";
-import "./chunk-77RSSNU6.js";
+} from "./chunk-Y4T2ZCZB.js";
+import "./chunk-2I2VX62W.js";
+import "./chunk-YRAOOAYY.js";
+import "./chunk-QJU6PS53.js";
 import "./chunk-SNJNRDKZ.js";
-import "./chunk-EOVXDAYT.js";
+import "./chunk-LOY7LJJT.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-XZYPUK4O.js";
-import "./chunk-542D7RE3.js";
-import "./chunk-OO7JQJTG.js";
+import "./chunk-N7FPSYIR.js";
+import "./chunk-CGICJPJ6.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -22,4 +22,4 @@ export {
   getAvailableClis,
   isCliAvailable
 };
-//# sourceMappingURL=factory-WFICVFVH.js.map
+//# sourceMappingURL=factory-IYGZJJU4.js.map

package/dist/{factory-JWGO2QJJ.js → factory-JEKAU3BF.js}

@@ -1,10 +1,10 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-ABNK3EFM.js";
-import "./chunk-VIVICQZY.js";
-import "./chunk-R4W2GOYG.js";
-import "./chunk-OO7JQJTG.js";
+} from "./chunk-XZSYG6JW.js";
+import "./chunk-JJQWBH65.js";
+import "./chunk-7RIGDQDO.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -12,4 +12,4 @@ export {
   createGitHubProvider,
   createScmProvider
 };
-//# sourceMappingURL=factory-JWGO2QJJ.js.map
+//# sourceMappingURL=factory-JEKAU3BF.js.map

package/dist/{improvement-review-N5IGPQOL.js → improvement-review-XIHUWWA7.js}

@@ -11,10 +11,10 @@ import {
   loadSelfEvalSignals,
   registerImprovementReviewTool,
   runImprovementReview
-} from "./chunk-JOWSYOT4.js";
-import "./chunk-UAXEANMF.js";
-import "./chunk-J5TKJM7U.js";
-import "./chunk-OO7JQJTG.js";
+} from "./chunk-VCS5YLU2.js";
+import "./chunk-QWFEQURV.js";
+import "./chunk-KJCXANOL.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -32,4 +32,4 @@ export {
   registerImprovementReviewTool,
   runImprovementReview
 };
-//# sourceMappingURL=improvement-review-N5IGPQOL.js.map
+//# sourceMappingURL=improvement-review-XIHUWWA7.js.map

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-ABNK3EFM.js";
+} from "./chunk-XZSYG6JW.js";
 import {
   ALLOWED_COMMANDS,
   ARTIFACT_TYPES,
@@ -541,7 +541,7 @@ import {
   withLogging,
   withRetry,
   withRetryWrapper
-} from "./chunk-2TSXBISI.js";
+} from "./chunk-IW333FC3.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -549,7 +549,7 @@ import {
   generateSecurityPlan,
   getRegistryManifest,
   resolveScannerData
-} from "./chunk-WSFTWS2A.js";
+} from "./chunk-DJLJGL34.js";
 import {
   analyzeGitHubRepo,
   analyzeRepo,
@@ -575,16 +575,16 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-LEU3OISH.js";
+} from "./chunk-KG2ECSYJ.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
   OpenAIAdapter,
   createOpenAIAdapter
-} from "./chunk-PGNOJRUL.js";
+} from "./chunk-7ZDIDX4J.js";
 import {
   executeExpert
-} from "./chunk-56GTITUT.js";
+} from "./chunk-ZCHQS3KU.js";
 import {
   AgentFindingSchema,
   ConsensusEngine,
@@ -633,9 +633,9 @@ import {
   generateProposalId,
   parseAgentPairKey,
   registerConsensusVoteTool
-} from "./chunk-NRRH254O.js";
-import "./chunk-6LZNWY4D.js";
-import "./chunk-EJQRYAKB.js";
+} from "./chunk-SH4HKLPQ.js";
+import "./chunk-6WRQIEKK.js";
+import "./chunk-CPEOXRCU.js";
 import {
   AgentActionSchema,
   GitHubReviewer,
@@ -658,11 +658,11 @@ import {
   requiresHumanApproval,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-RNERS4BC.js";
+} from "./chunk-PZISZC5R.js";
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-VIVICQZY.js";
+} from "./chunk-JJQWBH65.js";
 import {
   GitHubUserRoleSchema,
   InjectionFlagSchema,
@@ -677,11 +677,11 @@ import {
   assessReputation,
   reconcileTrustTier,
   sanitizeInput
-} from "./chunk-ALDOPPP4.js";
+} from "./chunk-SA5S55UW.js";
 import {
   ImprovementReviewInputSchema,
   registerImprovementReviewTool
-} from "./chunk-JOWSYOT4.js";
+} from "./chunk-VCS5YLU2.js";
 import {
   AgentPerformanceSchema,
   ConsensusAlgorithmSchema,
@@ -717,7 +717,7 @@ import {
   toolSuccess,
   toolSuccessStructured,
   validateToolInput
-} from "./chunk-UAXEANMF.js";
+} from "./chunk-QWFEQURV.js";
 import {
   AuditTrail,
   MAX_STRIPPED_ELEMENTS_PER_EVENT,
@@ -729,13 +729,13 @@ import {
   emitReputationEvent,
   emitSanitizationEvent,
   emitTrustEvent
-} from "./chunk-J5TKJM7U.js";
+} from "./chunk-KJCXANOL.js";
 import {
   UnifiedAdapterRegistry,
   createUnifiedRegistry,
   getGlobalRegistry,
   resetGlobalRegistry
-} from "./chunk-4Q6SSODG.js";
+} from "./chunk-HOMEGHVJ.js";
 import {
   PersistentStrategyDistiller,
   RulesSnapshotSchema,
@@ -743,19 +743,19 @@ import {
   TokenCounter,
   TokenCounterProvider,
   createTokenCounter
-} from "./chunk-XZ7XRJY5.js";
+} from "./chunk-3KIJASVO.js";
 import {
   getTokenEnvVars,
   hasToken,
   resolveToken
-} from "./chunk-R4W2GOYG.js";
-import "./chunk-CWOXQK7J.js";
+} from "./chunk-7RIGDQDO.js";
+import "./chunk-MGLEPBIZ.js";
 import "./chunk-NUBSJGQZ.js";
 import {
   MemoryError
-} from "./chunk-DJ7YCUOL.js";
+} from "./chunk-3LMU5W5I.js";
 import "./chunk-6T3EPABN.js";
-import "./chunk-LFIDNLBP.js";
+import "./chunk-44AA6TSZ.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -800,7 +800,7 @@ import {
   isCliAvailable,
   isRetryableError,
   sleep
-} from "./chunk-TXQUWORP.js";
+} from "./chunk-Y4T2ZCZB.js";
 import {
   AdapterModelError,
   BaseAdapter,
@@ -822,11 +822,11 @@ import {
   tapStream,
   transformStream,
   withTimeout
-} from "./chunk-OVYEVJIS.js";
-import "./chunk-XLACRVKG.js";
+} from "./chunk-2I2VX62W.js";
+import "./chunk-YRAOOAYY.js";
 import {
   PROVIDER_ENV_KEYS
-} from "./chunk-77RSSNU6.js";
+} from "./chunk-QJU6PS53.js";
 import "./chunk-SNJNRDKZ.js";
 import {
   AvailabilityCache,
@@ -836,13 +836,13 @@ import {
   getFallbackChain,
   resetAvailabilityCache,
   resolveFallback
-} from "./chunk-EOVXDAYT.js";
+} from "./chunk-LOY7LJJT.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-XZYPUK4O.js";
+import "./chunk-N7FPSYIR.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-542D7RE3.js";
+} from "./chunk-CGICJPJ6.js";
 import {
   AgentCapability,
   AgentError,
@@ -916,7 +916,7 @@ import {
   toError,
   unwrap,
   unwrapOr
-} from "./chunk-OO7JQJTG.js";
+} from "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -4711,7 +4711,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-TALT6GHT.js");
+    const { executeVoting } = await import("./consensus-vote-QGMUKHKI.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);

package/dist/{init-opencode-YSZRAYEA.js → init-opencode-P2SUBOXA.js}

@@ -1,13 +1,13 @@
 import {
   discoverModels,
   readOpencodeGateway
-} from "./chunk-PGNOJRUL.js";
-import "./chunk-6LZNWY4D.js";
-import "./chunk-OVYEVJIS.js";
-import "./chunk-77RSSNU6.js";
+} from "./chunk-7ZDIDX4J.js";
+import "./chunk-6WRQIEKK.js";
+import "./chunk-2I2VX62W.js";
+import "./chunk-QJU6PS53.js";
 import {
   createLogger
-} from "./chunk-OO7JQJTG.js";
+} from "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -176,4 +176,4 @@ export {
   runInitOpencode,
   runOpencodeValidate
 };
-//# sourceMappingURL=init-opencode-YSZRAYEA.js.map
+//# sourceMappingURL=init-opencode-P2SUBOXA.js.map

package/dist/{issue-triage-EMQSTTXS.js → issue-triage-4ZI2PVTX.js}

@@ -2,11 +2,11 @@ import {
   IssueTriage,
   createIssueTriage,
   formatTriageComment
-} from "./chunk-RNERS4BC.js";
-import "./chunk-VIVICQZY.js";
-import "./chunk-ALDOPPP4.js";
-import "./chunk-J5TKJM7U.js";
-import "./chunk-OO7JQJTG.js";
+} from "./chunk-PZISZC5R.js";
+import "./chunk-JJQWBH65.js";
+import "./chunk-SA5S55UW.js";
+import "./chunk-KJCXANOL.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -15,4 +15,4 @@ export {
   createIssueTriage,
   formatTriageComment
 };
-//# sourceMappingURL=issue-triage-EMQSTTXS.js.map
+//# sourceMappingURL=issue-triage-4ZI2PVTX.js.map

package/dist/{pr-reviewer-helpers-ZP6PBKBX.js → pr-reviewer-helpers-L3JGYIAM.js}

@@ -17,10 +17,10 @@ import {
   parseFindings,
   parseSeverity,
   sumFindings
-} from "./chunk-3XYA4XDX.js";
+} from "./chunk-MNQYHPWP.js";
 import "./chunk-CQ77TF4Y.js";
-import "./chunk-ALDOPPP4.js";
-import "./chunk-OO7JQJTG.js";
+import "./chunk-SA5S55UW.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -44,4 +44,4 @@ export {
   parseSeverity,
   sumFindings
 };
-//# sourceMappingURL=pr-reviewer-helpers-ZP6PBKBX.js.map
+//# sourceMappingURL=pr-reviewer-helpers-L3JGYIAM.js.map

package/dist/{registry-command-KEAFJLHC.js → registry-command-STM5M5PE.js}

@@ -7,7 +7,7 @@ import {
   loadGeneratedRegistryEntries,
   loadUserManifestOverlay,
   reloadDefaultRegistry
-} from "./chunk-OO7JQJTG.js";
+} from "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import {
   nexusDataPath
@@ -249,4 +249,4 @@ export {
   isValidRegistrySubcommand,
   registryCommand
 };
-//# sourceMappingURL=registry-command-KEAFJLHC.js.map
+//# sourceMappingURL=registry-command-STM5M5PE.js.map

package/dist/{repo-security-plan-PYRBPSWW.js → repo-security-plan-TL4OZHQU.js}

@@ -3,9 +3,9 @@ import {
   buildPlanFromAnalysis,
   generateSecurityPlan,
   resolveScannerData
-} from "./chunk-WSFTWS2A.js";
+} from "./chunk-DJLJGL34.js";
 import "./chunk-HFOQKCD2.js";
-import "./chunk-OO7JQJTG.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -15,4 +15,4 @@ export {
   generateSecurityPlan,
   resolveScannerData
 };
-//# sourceMappingURL=repo-security-plan-PYRBPSWW.js.map
+//# sourceMappingURL=repo-security-plan-TL4OZHQU.js.map

package/dist/{research-helpers-synthesize-PNNPNBWS.js → research-helpers-synthesize-3ZCK4ND7.js}

@@ -1,10 +1,10 @@
 import {
   AttributedInsightSchema,
   synthesizeResearch
-} from "./chunk-EJQRYAKB.js";
-import "./chunk-CWOXQK7J.js";
+} from "./chunk-CPEOXRCU.js";
+import "./chunk-MGLEPBIZ.js";
 import "./chunk-NUBSJGQZ.js";
-import "./chunk-OO7JQJTG.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -12,4 +12,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=research-helpers-synthesize-PNNPNBWS.js.map
+//# sourceMappingURL=research-helpers-synthesize-3ZCK4ND7.js.map

package/dist/{routing-memory-RZ5RV35U.js → routing-memory-FBBYHH4N.js}

@@ -2,7 +2,7 @@ import {
   DEFAULT_ROUTING_MEMORY_CONFIG,
   RoutingMemory,
   createRoutingMemory
-} from "./chunk-OO7JQJTG.js";
+} from "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -11,4 +11,4 @@ export {
   RoutingMemory,
   createRoutingMemory
 };
-//# sourceMappingURL=routing-memory-RZ5RV35U.js.map
+//# sourceMappingURL=routing-memory-FBBYHH4N.js.map

package/dist/{session-memory-LXWIFK34.js → session-memory-3O6OL3XO.js}

@@ -6,8 +6,8 @@ import {
   SessionMemory,
   SessionMemoryError,
   createSessionMemory
-} from "./chunk-LFIDNLBP.js";
-import "./chunk-OO7JQJTG.js";
+} from "./chunk-44AA6TSZ.js";
+import "./chunk-KNOECZP2.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -20,4 +20,4 @@ export {
   SessionMemoryError,
   createSessionMemory
 };
-//# sourceMappingURL=session-memory-LXWIFK34.js.map
+//# sourceMappingURL=session-memory-3O6OL3XO.js.map