nexus-agents 4.12.0 → 4.12.1

package/dist/{chunk-OAVU4XW2.js → chunk-PIOQ22BI.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-7LDOGIIK.js";
+} from "./chunk-U3ULCRR5.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -11,20 +11,20 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-6YPUY4DX.js";
+} from "./chunk-3JJ3QSJ6.js";
 import {
   emitPolicyEvent
-} from "./chunk-CUSNJVQP.js";
+} from "./chunk-7H6AIQFC.js";
 import {
   hasToken
-} from "./chunk-VNPF3XDJ.js";
+} from "./chunk-3F7XUEXM.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/security/trust-classifier.ts
 function mapAuthorAssociation(association) {
@@ -1247,4 +1247,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-OAVU4XW2.js.map
+//# sourceMappingURL=chunk-PIOQ22BI.js.map

package/dist/{chunk-SZB4YAPS.js → chunk-Q6TVHHJS.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-6T3EPABN.js";
 import {
   SessionMemory
-} from "./chunk-GCBJOTZL.js";
+} from "./chunk-WDICVPNC.js";
 import {
   StatsOnlyAdapter,
   ensureSharedMemoryRegistry
@@ -15,7 +15,7 @@ import {
 } from "./chunk-KSQSWEFH.js";
 import {
   generateId
-} from "./chunk-U3PXZWHJ.js";
+} from "./chunk-ADKJSLYH.js";
 import {
   ErrorCode,
   NexusError,
@@ -28,7 +28,7 @@ import {
   getTimeProvider,
   ok,
   setSharedMobiMemDbPathResolver
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 import {
   nexusDataPath
 } from "./chunk-OQLFRJCW.js";
@@ -5550,4 +5550,4 @@ export {
   reinitializeMemoryBackends,
   ToolMemoryManager
 };
-//# sourceMappingURL=chunk-SZB4YAPS.js.map
+//# sourceMappingURL=chunk-Q6TVHHJS.js.map

package/dist/{chunk-HG2SQFVP.js → chunk-QWKXEUR3.js}

@@ -8,7 +8,7 @@ import {
   getErrorMessage,
   ok,
   parseBoolEnv
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/cli/research-helpers-io.ts
 import * as fs2 from "fs/promises";
@@ -146,4 +146,4 @@ export {
   loadPapersRegistry,
   savePapersRegistry
 };
-//# sourceMappingURL=chunk-HG2SQFVP.js.map
+//# sourceMappingURL=chunk-QWKXEUR3.js.map

package/dist/{chunk-SOZLET5T.js → chunk-R5HKFDMX.js}

@@ -1,14 +1,14 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-7LDOGIIK.js";
+} from "./chunk-U3ULCRR5.js";
 import {
   resolveToken
-} from "./chunk-VNPF3XDJ.js";
+} from "./chunk-3F7XUEXM.js";
 import {
   err,
   ok
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/scm/factory.ts
 async function createScmProvider(config) {
@@ -41,4 +41,4 @@ export {
   createScmProvider,
   createGitHubProvider
 };
-//# sourceMappingURL=chunk-SOZLET5T.js.map
+//# sourceMappingURL=chunk-R5HKFDMX.js.map

package/dist/{chunk-WJZ2BV5H.js → chunk-RTLSASIG.js}

@@ -4,16 +4,16 @@ import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   savePapersRegistry
-} from "./chunk-HG2SQFVP.js";
+} from "./chunk-QWKXEUR3.js";
 import {
   resolveInsideRoot
 } from "./chunk-NUBSJGQZ.js";
 import {
   resolveToken
-} from "./chunk-VNPF3XDJ.js";
+} from "./chunk-3F7XUEXM.js";
 import {
   getToolMemory
-} from "./chunk-SZB4YAPS.js";
+} from "./chunk-Q6TVHHJS.js";
 import {
   capitalizeWords,
   tokenizeFiltered,
@@ -39,7 +39,7 @@ import {
   getTimeProvider,
   ok,
   registerPersistentDistillerFactory
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 import {
   ensureLearningDir,
   getRulesFile
@@ -4129,4 +4129,4 @@ export {
   DEFAULT_CONTEXT_BUDGET_TOKENS,
   getContextPromptPrefix
 };
-//# sourceMappingURL=chunk-WJZ2BV5H.js.map
+//# sourceMappingURL=chunk-RTLSASIG.js.map

package/dist/{chunk-NMQSNJPT.js → chunk-SIDH6NYX.js}

@@ -1,10 +1,10 @@
 import {
   createAutoAdapter
-} from "./chunk-5ML6GHQX.js";
+} from "./chunk-WFZGUWWQ.js";
 import {
   getDefaultCliCircuitBreakerRegistry,
   mapModelErrorToCategory
-} from "./chunk-M5BG7NYZ.js";
+} from "./chunk-UGXR3FGB.js";
 import {
   CLI_NAMES,
   CircularBuffer,
@@ -22,7 +22,7 @@ import {
   ok,
   recordRateLimitEvent,
   toRateLimitError
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/agents/collaboration/event-bus-helpers.ts
 import { randomUUID } from "crypto";
@@ -863,4 +863,4 @@ export {
   getGlobalRegistry,
   resetGlobalRegistry
 };
-//# sourceMappingURL=chunk-NMQSNJPT.js.map
+//# sourceMappingURL=chunk-SIDH6NYX.js.map

package/dist/{chunk-7LDOGIIK.js → chunk-U3ULCRR5.js}

@@ -4,7 +4,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/scm/types.ts
 var ScmError = class extends Error {
@@ -263,4 +263,4 @@ export {
   ScmError,
   GitHubProvider
 };
-//# sourceMappingURL=chunk-7LDOGIIK.js.map
+//# sourceMappingURL=chunk-U3ULCRR5.js.map

package/dist/{chunk-M5BG7NYZ.js → chunk-UGXR3FGB.js}

@@ -8,7 +8,7 @@ import {
   getTimeProvider,
   isRateLimitText,
   ok
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -540,4 +540,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-M5BG7NYZ.js.map
+//# sourceMappingURL=chunk-UGXR3FGB.js.map

package/dist/{chunk-ACYC2MQ6.js → chunk-UUHVA3EP.js}

@@ -1,9 +1,9 @@
 import {
   loadPapersRegistry
-} from "./chunk-HG2SQFVP.js";
+} from "./chunk-QWKXEUR3.js";
 import {
   getErrorMessage
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/cli/research-helpers-synthesize.ts
 import { z } from "zod";
@@ -876,4 +876,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=chunk-ACYC2MQ6.js.map
+//# sourceMappingURL=chunk-UUHVA3EP.js.map

package/dist/{chunk-2FKHVC6A.js → chunk-VAKHNSKR.js}

@@ -12,11 +12,11 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-6YPUY4DX.js";
+} from "./chunk-3JJ3QSJ6.js";
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
 import { randomUUID } from "crypto";
@@ -291,4 +291,4 @@ export {
   formatReviewComment,
   createFailedReview
 };
-//# sourceMappingURL=chunk-2FKHVC6A.js.map
+//# sourceMappingURL=chunk-VAKHNSKR.js.map

package/dist/{chunk-4BHQDCIT.js → chunk-VXSEXHLF.js}

@@ -2,7 +2,7 @@ import {
   TASK_CATEGORIES,
   getAdaptiveBonus,
   getOutcomeStore
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/cli/doctor-deep.ts
 var CLI_NAMES = ["claude", "gemini", "codex", "opencode"];
@@ -106,4 +106,4 @@ export {
   runDeepDiagnostics,
   formatDeepDiagnostics
 };
-//# sourceMappingURL=chunk-4BHQDCIT.js.map
+//# sourceMappingURL=chunk-VXSEXHLF.js.map

package/dist/{chunk-GCBJOTZL.js → chunk-WDICVPNC.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/context/session-memory.ts
 import * as fs from "fs";
@@ -352,4 +352,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-GCBJOTZL.js.map
+//# sourceMappingURL=chunk-WDICVPNC.js.map

package/dist/{chunk-5ML6GHQX.js → chunk-WFZGUWWQ.js}

@@ -5,34 +5,34 @@ import {
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-QAX4II24.js";
+} from "./chunk-AUFZGVPH.js";
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-FR5WCGPG.js";
+} from "./chunk-JEOQU5YQ.js";
 import {
   CUSTOM_API_BASE_URL_ENV,
   PROVIDER_ENV_KEYS,
   assertCustomApiHostResolvesPublic,
   validateCustomApiBaseUrl
-} from "./chunk-KE3VSAM2.js";
+} from "./chunk-YBR5G3FR.js";
 import {
   nexusMkdtempSync
 } from "./chunk-SNJNRDKZ.js";
 import {
   getAvailabilityCache
-} from "./chunk-J2ZVAPGA.js";
+} from "./chunk-BDJ5H6BY.js";
 import {
   extractSystemPrompt
 } from "./chunk-QZUG667L.js";
 import {
   generateHyphenId
-} from "./chunk-U3PXZWHJ.js";
+} from "./chunk-ADKJSLYH.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG,
   getCliCircuitBreakerSnapshot,
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-M5BG7NYZ.js";
+} from "./chunk-UGXR3FGB.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
@@ -72,7 +72,7 @@ import {
   resolveCliAlias,
   resolveRetryAfterMs,
   retryAfterMsFromContext
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/cli-adapters/cli-to-model-adapter.ts
 var CliToModelAdapter = class {
@@ -4870,4 +4870,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-5ML6GHQX.js.map
+//# sourceMappingURL=chunk-WFZGUWWQ.js.map

package/dist/{chunk-SIJBJRHO.js → chunk-XUHVOLBI.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-7ZCZDRTJ.js";
+} from "./chunk-MWJLA3SK.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -19,7 +19,7 @@ import {
   getPipelineEventBus,
   getTimeProvider,
   isDeclaredNeverDeprecate
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 import {
   getNexusDataDir,
   nexusDataPath
@@ -2132,4 +2132,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-SIJBJRHO.js.map
+//# sourceMappingURL=chunk-XUHVOLBI.js.map

package/dist/{chunk-KE3VSAM2.js → chunk-YBR5G3FR.js}

@@ -3,7 +3,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/adapters/sdk/types.ts
 var PROVIDER_ENV_KEYS = {
@@ -82,6 +82,15 @@ function classifyIpAddress(normalized) {
   }
   return "not_an_ip";
 }
+function classifyLiteral(hostname, normalized) {
+  const literal = classifyIpAddress(normalized);
+  if (literal === null || literal === "not_an_ip") return ok(void 0);
+  return err(
+    new ConfigError(
+      `Custom API host '${hostname}' is a ${literal.reason} address: ${literal.message}`
+    )
+  );
+}
 async function assertCustomApiHostResolvesPublic(hostname, opts = {}) {
   const allowPrivate = opts.allowPrivate === true || resolveAllowPrivateFromEnv();
   if (allowPrivate) {
@@ -89,7 +98,7 @@ async function assertCustomApiHostResolvesPublic(hostname, opts = {}) {
   }
   const normalized = normalizeHost(hostname);
   if (isIPv4(normalized) || isIPv6(normalized)) {
-    return ok(void 0);
+    return classifyLiteral(hostname, normalized);
   }
   let addresses;
   try {
@@ -151,6 +160,47 @@ function classifyIPv4(ip) {
   }
   return null;
 }
+function foldTrailingQuad(s) {
+  const dotted = /(?:^|:)((?:\d{1,3}\.){3}\d{1,3})$/.exec(s);
+  if (dotted?.[1] === void 0) return s;
+  const q = dotted[1].split(".").map((n) => Number.parseInt(n, 10));
+  if (q.length !== 4 || q.some((n) => Number.isNaN(n) || n < 0 || n > 255)) return null;
+  const hi = ((q[0] ?? 0) << 8 | (q[1] ?? 0)).toString(16);
+  const lo = ((q[2] ?? 0) << 8 | (q[3] ?? 0)).toString(16);
+  return `${s.slice(0, s.length - dotted[1].length)}${hi}:${lo}`;
+}
+function toHextets(ip) {
+  const s = foldTrailingQuad(ip.toLowerCase());
+  if (s === null) return null;
+  const halves = s.split("::");
+  if (halves.length > 2) return null;
+  const head = halves[0] === "" || halves[0] === void 0 ? [] : halves[0].split(":");
+  const tail = halves[1] === "" || halves[1] === void 0 ? [] : halves[1].split(":");
+  const groups = halves.length === 1 ? head : [...head, ...Array(8 - head.length - tail.length).fill("0"), ...tail];
+  if (groups.length !== 8) return null;
+  const out = groups.map((g) => Number.parseInt(g === "" ? "0" : g, 16));
+  return out.some((n) => Number.isNaN(n) || n < 0 || n > 65535) ? null : out;
+}
+function embeddedIPv4(g) {
+  const top = g.slice(0, 6);
+  const prefixes = [
+    [0, 0, 0, 0, 0, 65535],
+    // ::ffff:0:0/96    — IPv4-mapped
+    [0, 0, 0, 0, 65535, 0],
+    // ::ffff:0:0:0/96  — IPv4-translated
+    [100, 65435, 0, 0, 0, 0],
+    // 64:ff9b::/96  — NAT64 well-known
+    [0, 0, 0, 0, 0, 0]
+    // ::a.b.c.d           — deprecated IPv4-compatible
+  ];
+  const matched = prefixes.some((p) => p.every((v, i) => top[i] === v));
+  if (!matched) return null;
+  const g6 = g[6] ?? 0;
+  const g7 = g[7] ?? 0;
+  if (top.every((v) => v === 0) && g6 === 0 && g7 <= 1) return null;
+  const octets = [g6 >> 8 & 255, g6 & 255, g7 >> 8 & 255, g7 & 255];
+  return octets.join(".");
+}
 function classifyIPv6(ip) {
   const lower = ip.toLowerCase();
   if (lower === "::1") return { reason: "loopback", message: `IPv6 loopback (${ip})` };
@@ -159,7 +209,15 @@ function classifyIPv6(ip) {
   if (/^fc|^fd/.test(lower)) {
     return { reason: "private_range", message: `IPv6 unique-local (${ip}, fc00::/7)` };
   }
-  return null;
+  const groups = toHextets(lower);
+  if (groups === null) return null;
+  if (groups.every((n) => n === 0)) {
+    return { reason: "reserved", message: `IPv6 unspecified (${ip}) \u2014 routes to localhost` };
+  }
+  const v4 = embeddedIPv4(groups);
+  if (v4 === null) return null;
+  const detail = classifyIPv4(v4);
+  return detail === null ? null : { reason: detail.reason, message: `${detail.message} via IPv6 (${ip})` };
 }
 
 export {
@@ -169,4 +227,4 @@ export {
   validateCustomApiBaseUrl,
   assertCustomApiHostResolvesPublic
 };
-//# sourceMappingURL=chunk-KE3VSAM2.js.map
+//# sourceMappingURL=chunk-YBR5G3FR.js.map

package/dist/chunk-YBR5G3FR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/sdk/types.ts","../src/adapters/sdk/custom-api-validation.ts"],"sourcesContent":["/**\n * nexus-agents/adapters/sdk - Shared Types\n *\n * Type definitions for AI SDK adapter layer.\n *\n * @module adapters/sdk/types\n * (Source: Issue #1123 — AI SDK provider layer)\n */\n\n/**\n * Supported AI SDK provider identifiers.\n *\n * `custom-openai` is for OpenAI-compatible gateways (multi-vendor proxies,\n * self-hosted LLM servers, corporate model gateways) — uses the same\n * @ai-sdk/openai package but with a configurable `baseURL`.\n */\nexport type SdkProviderId = 'anthropic' | 'openai' | 'google' | 'custom-openai';\n\n/**\n * Configuration for creating an AI SDK adapter.\n */\nexport interface SdkAdapterConfig {\n  /** Provider identifier */\n  providerId: SdkProviderId;\n  /** Model to use (e.g., 'claude-sonnet-4-6', 'gpt-4o') */\n  modelId: string;\n  /** API key (falls back to environment variable) */\n  apiKey?: string;\n  /**\n   * Base URL for OpenAI-compatible gateways. Required when\n   * `providerId === 'custom-openai'`, ignored otherwise. Falls back to\n   * the `NEXUS_CUSTOM_API_BASE_URL` environment variable.\n   */\n  baseUrl?: string;\n  /** Request timeout in milliseconds */\n  timeout?: number;\n  /** Maximum retries on transient failures */\n  maxRetries?: number;\n}\n\n/**\n * Maps provider IDs to their environment variable names.\n */\nexport const PROVIDER_ENV_KEYS: Record<SdkProviderId, string> = {\n  anthropic: 'ANTHROPIC_API_KEY',\n  openai: 'OPENAI_API_KEY',\n  google: 'GOOGLE_AI_API_KEY',\n  'custom-openai': 'NEXUS_CUSTOM_API_KEY',\n};\n\n/**\n * Environment variable name for the custom gateway base URL.\n * Keep in sync with `SdkAdapterConfig.baseUrl`.\n */\nexport const CUSTOM_API_BASE_URL_ENV = 'NEXUS_CUSTOM_API_BASE_URL';\n\n/**\n * Escape hatch: set to `1`/`true` to allow the custom gateway base URL to\n * resolve to a loopback or RFC 1918 private address. Default is DENY —\n * SSRF defense. Only disable this when you know the gateway runs on a\n * trusted internal host and you accept the risk.\n */\nexport const CUSTOM_API_ALLOW_PRIVATE_ENV = 'NEXUS_CUSTOM_API_ALLOW_PRIVATE';\n","/**\n * Validation for the `custom-openai` SDK adapter's gateway URL.\n *\n * The base URL is user-provided, so without validation the adapter becomes\n * an SSRF vector: a malicious prompt that reshaped env vars, or a typo in\n * the config, could point nexus-agents at `http://169.254.169.254/` (AWS\n * metadata) or `http://localhost:5432/` (internal services). This module\n * rejects such URLs unless the user explicitly opts in via\n * `NEXUS_CUSTOM_API_ALLOW_PRIVATE=1`.\n *\n * Called out in the #2119 consensus vote by the Security Engineer role.\n *\n * @module adapters/sdk/custom-api-validation\n */\n\nimport { isIPv4, isIPv6 } from 'node:net';\nimport { lookup as dnsLookup } from 'node:dns/promises';\nimport { ConfigError, ok, err, createLogger, type Result } from '../../core/index.js';\nimport { CUSTOM_API_ALLOW_PRIVATE_ENV } from './types.js';\n\nconst logger = createLogger({ module: 'custom-api-validation' });\n\n/**\n * Why a given URL was rejected. Machine-readable so error messages can\n * distinguish root causes in downstream tooling.\n */\nexport type BaseUrlRejectionReason =\n  | 'empty'\n  | 'not_a_url'\n  | 'not_http_https'\n  | 'loopback'\n  | 'link_local'\n  | 'private_range'\n  | 'reserved';\n\ninterface RejectionDetail {\n  readonly reason: BaseUrlRejectionReason;\n  readonly message: string;\n}\n\n/**\n * Validates a user-provided custom-gateway base URL. Returns the URL as an\n * `ok` Result if it passes, or a `ConfigError` with a machine-readable\n * reason if it fails.\n *\n * Pass `{ allowPrivate: true }` (or set the env var) to bypass the SSRF\n * checks — use this only when the gateway is on a trusted internal host\n * and you accept the risk.\n */\nexport function validateCustomApiBaseUrl(\n  raw: string | undefined,\n  opts: { readonly allowPrivate?: boolean } = {}\n): Result<URL, ConfigError> {\n  if (raw === undefined || raw.trim() === '') {\n    return err(\n      new ConfigError(\n        'Custom API base URL is required but missing. Set NEXUS_CUSTOM_API_BASE_URL or pass `baseUrl` in config.'\n      )\n    );\n  }\n\n  let url: URL;\n  try {\n    url = new URL(raw);\n  } catch {\n    return err(new ConfigError(`Custom API base URL is not a valid URL: ${raw}`));\n  }\n\n  if (url.protocol !== 'http:' && url.protocol !== 'https:') {\n    return err(\n      new ConfigError(`Custom API base URL must use http or https, got \"${url.protocol}\" in ${raw}`)\n    );\n  }\n\n  const allowPrivate = opts.allowPrivate === true || resolveAllowPrivateFromEnv();\n  if (!allowPrivate) {\n    const rejection = classifyPrivateHost(url.hostname);\n    if (rejection !== null) {\n      return err(\n        new ConfigError(\n          `Custom API base URL rejected (SSRF guard, reason=\"${rejection.reason}\"): ${rejection.message}. ` +\n            `Set ${CUSTOM_API_ALLOW_PRIVATE_ENV}=1 to bypass if the gateway runs on a trusted internal host.`\n        )\n      );\n    }\n  }\n\n  return ok(url);\n}\n\nfunction resolveAllowPrivateFromEnv(): boolean {\n  // Deliberately strict (case-sensitive, not parseBoolEnv): this disables an\n  // SSRF guard, so we don't want extra case variants (e.g. `TRUE`) to loosen\n  // the control. Fail-closed on anything but exact `1`/`true` (#3297).\n  const v = process.env[CUSTOM_API_ALLOW_PRIVATE_ENV];\n  return v === '1' || v === 'true';\n}\n\n/**\n * Returns a rejection reason if the hostname resolves (by string form) to\n * a loopback, link-local, or RFC 1918 private address; `null` otherwise.\n *\n * Note: this is a string-level check. It does NOT perform DNS resolution,\n * so a public DNS name that secretly resolves to a private IP will pass.\n * For that level of defense, callers should additionally run\n * {@link assertCustomApiHostResolvesPublic}, which performs a DNS lookup\n * and classifies each resolved address with the same range tables below.\n */\nfunction classifyPrivateHost(hostname: string): RejectionDetail | null {\n  const normalized = normalizeHost(hostname);\n\n  // Literal IP addresses — classify directly against the range tables.\n  const literal = classifyIpAddress(normalized);\n  if (literal !== 'not_an_ip') {\n    return literal;\n  }\n\n  // Hostname literals that resolve to loopback without needing DNS\n  if (\n    normalized === 'localhost' ||\n    normalized.endsWith('.localhost') ||\n    normalized.endsWith('.local') // mDNS\n  ) {\n    return {\n      reason: 'loopback',\n      message: `hostname \"${hostname}\" resolves to loopback/mDNS`,\n    };\n  }\n\n  return null;\n}\n\n/**\n * Strips IPv6 bracket wrapping (URL.hostname yields \"[::1]\") and lowercases,\n * giving the bare form the `node:net` checks expect. Shared by the sync and\n * async guards so the normalization rule lives in one place.\n */\nfunction normalizeHost(hostname: string): string {\n  const stripped =\n    hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;\n  return stripped.toLowerCase();\n}\n\n/**\n * Classifies a single (already normalized, bracket-stripped) address string.\n * Returns:\n *  - a {@link RejectionDetail} if it is a private/loopback/link-local/reserved IP,\n *  - `null` if it is a public IP literal (safe),\n *  - the sentinel `'not_an_ip'` if the string is not an IP literal at all.\n *\n * This is the shared per-address classifier reused by both the sync\n * string-level guard ({@link classifyPrivateHost}) and the async\n * DNS-resolve-time guard ({@link assertCustomApiHostResolvesPublic}), so the\n * IPv4/IPv6 range tables live in exactly one place.\n */\nfunction classifyIpAddress(normalized: string): RejectionDetail | null | 'not_an_ip' {\n  if (isIPv4(normalized)) {\n    return classifyIPv4(normalized);\n  }\n  if (isIPv6(normalized)) {\n    return classifyIPv6(normalized);\n  }\n  return 'not_an_ip';\n}\n\n/** Verdict for a host that is already an IP literal — no DNS required. */\nfunction classifyLiteral(hostname: string, normalized: string): Result<void, ConfigError> {\n  const literal = classifyIpAddress(normalized);\n  if (literal === null || literal === 'not_an_ip') return ok(undefined);\n  return err(\n    new ConfigError(\n      `Custom API host '${hostname}' is a ${literal.reason} address: ${literal.message}`\n    )\n  );\n}\n\n/**\n * DNS-resolve-time SSRF guard for the custom-openai gateway.\n *\n * The sync {@link validateCustomApiBaseUrl} only inspects the hostname as a\n * string, so a PUBLIC DNS name that resolves to a PRIVATE/loopback/link-local\n * IP (e.g. an attacker-controlled `gateway.evil.test` pointing at\n * `169.254.169.254`) slips past it. This function closes that gap: it resolves\n * the hostname and runs the EXISTING IP classification against every returned\n * address, failing closed if ANY of them is private.\n *\n * Behaviour:\n *  - `allowPrivate` (opt or env) → bypass, returns `ok` (matches the sync guard).\n *  - hostname is already an IP literal → no DNS needed; the sync guard already\n *    classified literals at construction, so return `ok`.\n *  - otherwise `dns.lookup(hostname, { all: true })` and classify each address.\n *    If ANY resolves private → `err(ConfigError)`.\n *  - on a `dns.lookup` THROW (transient/NXDOMAIN/network error) → log debug and\n *    return `ok`. Failing closed here is too aggressive: it would break legit\n *    gateways on a flaky resolver, and this is additive defense-in-depth layered\n *    on top of the sync string guard that already ran at construction. We only\n *    REJECT on a SUCCESSFUL resolution to a private address.\n *\n * Residual risk (TOCTOU): this is RESOLVE-time, not socket-connect-time. A name\n * that passes here could rebind to a private IP before the actual connect\n * (DNS rebinding). A full fix needs a custom `fetch` `lookup` hook validating\n * the peer address at the socket layer — out of scope for this LOW\n * defense-in-depth pass (#3426).\n */\nexport async function assertCustomApiHostResolvesPublic(\n  hostname: string,\n  opts: { readonly allowPrivate?: boolean } = {}\n): Promise<Result<void, ConfigError>> {\n  const allowPrivate = opts.allowPrivate === true || resolveAllowPrivateFromEnv();\n  if (allowPrivate) {\n    return ok(undefined);\n  }\n\n  const normalized = normalizeHost(hostname);\n\n  // A literal needs no DNS, but it is still classified HERE rather than\n  // assumed handled elsewhere. This used to return ok for any literal on the\n  // grounds that the sync guard had classified it at construction — but\n  // `discoverModels` calls only this guard, never the sync one, so on that\n  // path each deferred to the other and neither ran. `http://169.254.169.254/`\n  // reached IMDS, from a base URL that can come from a file rather than from\n  // operator intent.\n  if (isIPv4(normalized) || isIPv6(normalized)) {\n    return classifyLiteral(hostname, normalized);\n  }\n\n  // Only `address` is read; the resolver's `family` is intentionally NOT\n  // trusted — `classifyIpAddress` re-derives v4/v6 from the address string, so\n  // a mislabeled family in the lookup result cannot let a private IP slip past.\n  let addresses: ReadonlyArray<{ readonly address: string }>;\n  try {\n    addresses = await dnsLookup(hostname, { all: true });\n  } catch (error) {\n    // Fail OPEN: transient/NXDOMAIN/network errors must not break legit\n    // gateways. The sync string guard already ran; this is additive only.\n    logger.debug('custom-api SSRF resolve check: DNS lookup failed, skipping (fail-open)', {\n      hostname,\n      error: error instanceof Error ? error.message : String(error),\n    });\n    return ok(undefined);\n  }\n\n  const rejection = firstPrivateAddress(addresses);\n  if (rejection !== null) {\n    return err(\n      new ConfigError(\n        `Custom API base URL rejected (SSRF resolve guard, reason=\"${rejection.reason}\"): ` +\n          `hostname \"${hostname}\" resolved to ${rejection.message}. ` +\n          `Set ${CUSTOM_API_ALLOW_PRIVATE_ENV}=1 to bypass if the gateway runs on a trusted internal host.`\n      )\n    );\n  }\n\n  return ok(undefined);\n}\n\n/**\n * Returns the {@link RejectionDetail} for the first resolved address that\n * classifies as private/loopback/link-local/reserved, or `null` if every\n * address is public. Fail-closed: any single private hit trips the guard.\n */\nfunction firstPrivateAddress(\n  addresses: ReadonlyArray<{ readonly address: string }>\n): RejectionDetail | null {\n  for (const { address } of addresses) {\n    const rejection = classifyIpAddress(address.toLowerCase());\n    if (rejection !== null && rejection !== 'not_an_ip') {\n      return rejection;\n    }\n  }\n  return null;\n}\n\n/** IPv4 ranges the SSRF guard rejects, in order of specificity. */\nconst IPV4_RULES: ReadonlyArray<{\n  readonly match: (a: number, b: number) => boolean;\n  readonly reason: BaseUrlRejectionReason;\n  readonly label: string;\n}> = [\n  { match: (a) => a === 127, reason: 'loopback', label: 'IPv4 loopback' },\n  { match: (a) => a === 10, reason: 'private_range', label: 'IPv4 private (10/8)' },\n  {\n    match: (a, b) => a === 172 && b >= 16 && b <= 31,\n    reason: 'private_range',\n    label: 'IPv4 private (172.16/12)',\n  },\n  {\n    match: (a, b) => a === 192 && b === 168,\n    reason: 'private_range',\n    label: 'IPv4 private (192.168/16)',\n  },\n  {\n    match: (a, b) => a === 169 && b === 254,\n    reason: 'link_local',\n    label: 'IPv4 link-local (169.254/16 — AWS IMDS)',\n  },\n  { match: (a) => a === 0, reason: 'reserved', label: 'IPv4 reserved (0/8)' },\n];\n\nfunction classifyIPv4(ip: string): RejectionDetail | null {\n  const parts = ip.split('.').map((p) => Number.parseInt(p, 10));\n  if (parts.length !== 4 || parts.some((n) => Number.isNaN(n))) return null;\n  const [a, b] = parts as [number, number, number, number];\n  for (const rule of IPV4_RULES) {\n    if (rule.match(a, b)) {\n      return { reason: rule.reason, message: `${rule.label} (${ip})` };\n    }\n  }\n  return null;\n}\n\n/**\n * Expand an IPv6 literal to its eight 16-bit groups, or null if unparseable.\n *\n * A trailing dotted quad (`::ffff:1.2.3.4`) is folded into two groups first,\n * so callers see one representation regardless of spelling.\n */\nfunction foldTrailingQuad(s: string): string | null {\n  const dotted = /(?:^|:)((?:\\d{1,3}\\.){3}\\d{1,3})$/.exec(s);\n  if (dotted?.[1] === undefined) return s;\n  const q = dotted[1].split('.').map((n) => Number.parseInt(n, 10));\n  if (q.length !== 4 || q.some((n) => Number.isNaN(n) || n < 0 || n > 255)) return null;\n  const hi = (((q[0] ?? 0) << 8) | (q[1] ?? 0)).toString(16);\n  const lo = (((q[2] ?? 0) << 8) | (q[3] ?? 0)).toString(16);\n  return `${s.slice(0, s.length - dotted[1].length)}${hi}:${lo}`;\n}\n\nfunction toHextets(ip: string): number[] | null {\n  const s = foldTrailingQuad(ip.toLowerCase());\n  if (s === null) return null;\n  const halves = s.split('::');\n  if (halves.length > 2) return null;\n  const head = halves[0] === '' || halves[0] === undefined ? [] : halves[0].split(':');\n  const tail = halves[1] === '' || halves[1] === undefined ? [] : halves[1].split(':');\n  const groups =\n    halves.length === 1\n      ? head\n      : [...head, ...Array<string>(8 - head.length - tail.length).fill('0'), ...tail];\n  if (groups.length !== 8) return null;\n  const out = groups.map((g) => Number.parseInt(g === '' ? '0' : g, 16));\n  return out.some((n) => Number.isNaN(n) || n < 0 || n > 0xffff) ? null : out;\n}\n\n/**\n * The IPv4 address embedded in an IPv6 literal, in dotted form, or null.\n *\n * Covers every prefix that carries a routable IPv4 payload: IPv4-mapped\n * (`::ffff:0:0/96`), IPv4-translated (`::ffff:0:0:0/96`), the NAT64\n * well-known prefix (`64:ff9b::/96`), and the deprecated IPv4-compatible\n * form (`::a.b.c.d`). Each is the same destination under a different\n * spelling, and the IPv4 rules must apply to all of them.\n */\nfunction embeddedIPv4(g: readonly number[]): string | null {\n  const top = g.slice(0, 6);\n  const prefixes: ReadonlyArray<readonly number[]> = [\n    [0, 0, 0, 0, 0, 0xffff], // ::ffff:0:0/96    — IPv4-mapped\n    [0, 0, 0, 0, 0xffff, 0], // ::ffff:0:0:0/96  — IPv4-translated\n    [0x64, 0xff9b, 0, 0, 0, 0], // 64:ff9b::/96  — NAT64 well-known\n    [0, 0, 0, 0, 0, 0], // ::a.b.c.d           — deprecated IPv4-compatible\n  ];\n  const matched = prefixes.some((p) => p.every((v, i) => top[i] === v));\n  if (!matched) return null;\n  const g6 = g[6] ?? 0;\n  const g7 = g[7] ?? 0;\n  // `::` and `::1` are their own addresses, not embedded IPv4.\n  if (top.every((v) => v === 0) && g6 === 0 && g7 <= 1) return null;\n  const octets = [(g6 >> 8) & 255, g6 & 255, (g7 >> 8) & 255, g7 & 255];\n  return octets.join('.');\n}\n\nfunction classifyIPv6(ip: string): RejectionDetail | null {\n  const lower = ip.toLowerCase();\n  if (lower === '::1') return { reason: 'loopback', message: `IPv6 loopback (${ip})` };\n  if (lower.startsWith('fe80:'))\n    return { reason: 'link_local', message: `IPv6 link-local (${ip})` };\n  // Unique-local: fc00::/7 → first byte has high bit set and second-high bit set\n  if (/^fc|^fd/.test(lower)) {\n    return { reason: 'private_range', message: `IPv6 unique-local (${ip}, fc00::/7)` };\n  }\n\n  const groups = toHextets(lower);\n  if (groups === null) return null;\n\n  if (groups.every((n) => n === 0)) {\n    return { reason: 'reserved', message: `IPv6 unspecified (${ip}) — routes to localhost` };\n  }\n\n  // An IPv4 address written in IPv6 form is still that IPv4 address, and\n  // `isIPv6` is true for it so it never reached the IPv4 rules — IMDS,\n  // loopback and RFC1918 were all reachable this way. Note the URL parser\n  // normalises the dotted spelling to hex, so the hex form is the one that\n  // actually arrives.\n  const v4 = embeddedIPv4(groups);\n  if (v4 === null) return null;\n  const detail = classifyIPv4(v4);\n  return detail === null\n    ? null\n    : { reason: detail.reason, message: `${detail.message} via IPv6 (${ip})` };\n}\n"],"mappings":";;;;;;;;AA2CO,IAAM,oBAAmD;AAAA,EAC9D,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,iBAAiB;AACnB;AAMO,IAAM,0BAA0B;AAQhC,IAAM,+BAA+B;;;AC/C5C,SAAS,QAAQ,cAAc;AAC/B,SAAS,UAAU,iBAAiB;AAIpC,IAAM,SAAS,aAAa,EAAE,QAAQ,wBAAwB,CAAC;AA6BxD,SAAS,yBACd,KACA,OAA4C,CAAC,GACnB;AAC1B,MAAI,QAAQ,UAAa,IAAI,KAAK,MAAM,IAAI;AAC1C,WAAO;AAAA,MACL,IAAI;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,GAAG;AAAA,EACnB,QAAQ;AACN,WAAO,IAAI,IAAI,YAAY,2CAA2C,GAAG,EAAE,CAAC;AAAA,EAC9E;AAEA,MAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU;AACzD,WAAO;AAAA,MACL,IAAI,YAAY,oDAAoD,IAAI,QAAQ,QAAQ,GAAG,EAAE;AAAA,IAC/F;AAAA,EACF;AAEA,QAAM,eAAe,KAAK,iBAAiB,QAAQ,2BAA2B;AAC9E,MAAI,CAAC,cAAc;AACjB,UAAM,YAAY,oBAAoB,IAAI,QAAQ;AAClD,QAAI,cAAc,MAAM;AACtB,aAAO;AAAA,QACL,IAAI;AAAA,UACF,qDAAqD,UAAU,MAAM,OAAO,UAAU,OAAO,SACpF,4BAA4B;AAAA,QACvC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,GAAG,GAAG;AACf;AAEA,SAAS,6BAAsC;AAI7C,QAAM,IAAI,QAAQ,IAAI,4BAA4B;AAClD,SAAO,MAAM,OAAO,MAAM;AAC5B;AAYA,SAAS,oBAAoB,UAA0C;AACrE,QAAM,aAAa,cAAc,QAAQ;AAGzC,QAAM,UAAU,kBAAkB,UAAU;AAC5C,MAAI,YAAY,aAAa;AAC3B,WAAO;AAAA,EACT;AAGA,MACE,eAAe,eACf,WAAW,SAAS,YAAY,KAChC,WAAW,SAAS,QAAQ,GAC5B;AACA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,SAAS,aAAa,QAAQ;AAAA,IAChC;AAAA,EACF;AAEA,SAAO;AACT;AAOA,SAAS,cAAc,UAA0B;AAC/C,QAAM,WACJ,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;AAC/E,SAAO,SAAS,YAAY;AAC9B;AAcA,SAAS,kBAAkB,YAA0D;AACnF,MAAI,OAAO,UAAU,GAAG;AACtB,WAAO,aAAa,UAAU;AAAA,EAChC;AACA,MAAI,OAAO,UAAU,GAAG;AACtB,WAAO,aAAa,UAAU;AAAA,EAChC;AACA,SAAO;AACT;AAGA,SAAS,gBAAgB,UAAkB,YAA+C;AACxF,QAAM,UAAU,kBAAkB,UAAU;AAC5C,MAAI,YAAY,QAAQ,YAAY,YAAa,QAAO,GAAG,MAAS;AACpE,SAAO;AAAA,IACL,IAAI;AAAA,MACF,oBAAoB,QAAQ,UAAU,QAAQ,MAAM,aAAa,QAAQ,OAAO;AAAA,IAClF;AAAA,EACF;AACF;AA8BA,eAAsB,kCACpB,UACA,OAA4C,CAAC,GACT;AACpC,QAAM,eAAe,KAAK,iBAAiB,QAAQ,2BAA2B;AAC9E,MAAI,cAAc;AAChB,WAAO,GAAG,MAAS;AAAA,EACrB;AAEA,QAAM,aAAa,cAAc,QAAQ;AASzC,MAAI,OAAO,UAAU,KAAK,OAAO,UAAU,GAAG;AAC5C,WAAO,gBAAgB,UAAU,UAAU;AAAA,EAC7C;AAKA,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,UAAU,UAAU,EAAE,KAAK,KAAK,CAAC;AAAA,EACrD,SAAS,OAAO;AAGd,WAAO,MAAM,0EAA0E;AAAA,MACrF;AAAA,MACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AACD,WAAO,GAAG,MAAS;AAAA,EACrB;AAEA,QAAM,YAAY,oBAAoB,SAAS;AAC/C,MAAI,cAAc,MAAM;AACtB,WAAO;AAAA,MACL,IAAI;AAAA,QACF,6DAA6D,UAAU,MAAM,iBAC9D,QAAQ,iBAAiB,UAAU,OAAO,SAChD,4BAA4B;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAEA,SAAO,GAAG,MAAS;AACrB;AAOA,SAAS,oBACP,WACwB;AACxB,aAAW,EAAE,QAAQ,KAAK,WAAW;AACnC,UAAM,YAAY,kBAAkB,QAAQ,YAAY,CAAC;AACzD,QAAI,cAAc,QAAQ,cAAc,aAAa;AACnD,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAGA,IAAM,aAID;AAAA,EACH,EAAE,OAAO,CAAC,MAAM,MAAM,KAAK,QAAQ,YAAY,OAAO,gBAAgB;AAAA,EACtE,EAAE,OAAO,CAAC,MAAM,MAAM,IAAI,QAAQ,iBAAiB,OAAO,sBAAsB;AAAA,EAChF;AAAA,IACE,OAAO,CAAC,GAAG,MAAM,MAAM,OAAO,KAAK,MAAM,KAAK;AAAA,IAC9C,QAAQ;AAAA,IACR,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,OAAO,CAAC,GAAG,MAAM,MAAM,OAAO,MAAM;AAAA,IACpC,QAAQ;AAAA,IACR,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,OAAO,CAAC,GAAG,MAAM,MAAM,OAAO,MAAM;AAAA,IACpC,QAAQ;AAAA,IACR,OAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO,CAAC,MAAM,MAAM,GAAG,QAAQ,YAAY,OAAO,sBAAsB;AAC5E;AAEA,SAAS,aAAa,IAAoC;AACxD,QAAM,QAAQ,GAAG,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,OAAO,SAAS,GAAG,EAAE,CAAC;AAC7D,MAAI,MAAM,WAAW,KAAK,MAAM,KAAK,CAAC,MAAM,OAAO,MAAM,CAAC,CAAC,EAAG,QAAO;AACrE,QAAM,CAAC,GAAG,CAAC,IAAI;AACf,aAAW,QAAQ,YAAY;AAC7B,QAAI,KAAK,MAAM,GAAG,CAAC,GAAG;AACpB,aAAO,EAAE,QAAQ,KAAK,QAAQ,SAAS,GAAG,KAAK,KAAK,KAAK,EAAE,IAAI;AAAA,IACjE;AAAA,EACF;AACA,SAAO;AACT;AAQA,SAAS,iBAAiB,GAA0B;AAClD,QAAM,SAAS,oCAAoC,KAAK,CAAC;AACzD,MAAI,SAAS,CAAC,MAAM,OAAW,QAAO;AACtC,QAAM,IAAI,OAAO,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,OAAO,SAAS,GAAG,EAAE,CAAC;AAChE,MAAI,EAAE,WAAW,KAAK,EAAE,KAAK,CAAC,MAAM,OAAO,MAAM,CAAC,KAAK,IAAI,KAAK,IAAI,GAAG,EAAG,QAAO;AACjF,QAAM,OAAQ,EAAE,CAAC,KAAK,MAAM,KAAM,EAAE,CAAC,KAAK,IAAI,SAAS,EAAE;AACzD,QAAM,OAAQ,EAAE,CAAC,KAAK,MAAM,KAAM,EAAE,CAAC,KAAK,IAAI,SAAS,EAAE;AACzD,SAAO,GAAG,EAAE,MAAM,GAAG,EAAE,SAAS,OAAO,CAAC,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE;AAC9D;AAEA,SAAS,UAAU,IAA6B;AAC9C,QAAM,IAAI,iBAAiB,GAAG,YAAY,CAAC;AAC3C,MAAI,MAAM,KAAM,QAAO;AACvB,QAAM,SAAS,EAAE,MAAM,IAAI;AAC3B,MAAI,OAAO,SAAS,EAAG,QAAO;AAC9B,QAAM,OAAO,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,MAAM,SAAY,CAAC,IAAI,OAAO,CAAC,EAAE,MAAM,GAAG;AACnF,QAAM,OAAO,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,MAAM,SAAY,CAAC,IAAI,OAAO,CAAC,EAAE,MAAM,GAAG;AACnF,QAAM,SACJ,OAAO,WAAW,IACd,OACA,CAAC,GAAG,MAAM,GAAG,MAAc,IAAI,KAAK,SAAS,KAAK,MAAM,EAAE,KAAK,GAAG,GAAG,GAAG,IAAI;AAClF,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,QAAM,MAAM,OAAO,IAAI,CAAC,MAAM,OAAO,SAAS,MAAM,KAAK,MAAM,GAAG,EAAE,CAAC;AACrE,SAAO,IAAI,KAAK,CAAC,MAAM,OAAO,MAAM,CAAC,KAAK,IAAI,KAAK,IAAI,KAAM,IAAI,OAAO;AAC1E;AAWA,SAAS,aAAa,GAAqC;AACzD,QAAM,MAAM,EAAE,MAAM,GAAG,CAAC;AACxB,QAAM,WAA6C;AAAA,IACjD,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,KAAM;AAAA;AAAA,IACtB,CAAC,GAAG,GAAG,GAAG,GAAG,OAAQ,CAAC;AAAA;AAAA,IACtB,CAAC,KAAM,OAAQ,GAAG,GAAG,GAAG,CAAC;AAAA;AAAA,IACzB,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AAAA;AAAA,EACnB;AACA,QAAM,UAAU,SAAS,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;AACpE,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,KAAK,EAAE,CAAC,KAAK;AACnB,QAAM,KAAK,EAAE,CAAC,KAAK;AAEnB,MAAI,IAAI,MAAM,CAAC,MAAM,MAAM,CAAC,KAAK,OAAO,KAAK,MAAM,EAAG,QAAO;AAC7D,QAAM,SAAS,CAAE,MAAM,IAAK,KAAK,KAAK,KAAM,MAAM,IAAK,KAAK,KAAK,GAAG;AACpE,SAAO,OAAO,KAAK,GAAG;AACxB;AAEA,SAAS,aAAa,IAAoC;AACxD,QAAM,QAAQ,GAAG,YAAY;AAC7B,MAAI,UAAU,MAAO,QAAO,EAAE,QAAQ,YAAY,SAAS,kBAAkB,EAAE,IAAI;AACnF,MAAI,MAAM,WAAW,OAAO;AAC1B,WAAO,EAAE,QAAQ,cAAc,SAAS,oBAAoB,EAAE,IAAI;AAEpE,MAAI,UAAU,KAAK,KAAK,GAAG;AACzB,WAAO,EAAE,QAAQ,iBAAiB,SAAS,sBAAsB,EAAE,cAAc;AAAA,EACnF;AAEA,QAAM,SAAS,UAAU,KAAK;AAC9B,MAAI,WAAW,KAAM,QAAO;AAE5B,MAAI,OAAO,MAAM,CAAC,MAAM,MAAM,CAAC,GAAG;AAChC,WAAO,EAAE,QAAQ,YAAY,SAAS,qBAAqB,EAAE,+BAA0B;AAAA,EACzF;AAOA,QAAM,KAAK,aAAa,MAAM;AAC9B,MAAI,OAAO,KAAM,QAAO;AACxB,QAAM,SAAS,aAAa,EAAE;AAC9B,SAAO,WAAW,OACd,OACA,EAAE,QAAQ,OAAO,QAAQ,SAAS,GAAG,OAAO,OAAO,cAAc,EAAE,IAAI;AAC7E;","names":[]}

package/dist/{chunk-QDYDMKNY.js → chunk-Z3XRX5G6.js}

@@ -1,7 +1,7 @@
 import {
   computeCostDetail,
   priceBasisOf
-} from "./chunk-L47G4NGG.js";
+} from "./chunk-D7NQCYON.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -22,20 +22,20 @@ import {
   toolSuccess,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-7ZCZDRTJ.js";
+} from "./chunk-MWJLA3SK.js";
 import {
   createEvent,
   getGlobalRegistry
-} from "./chunk-NMQSNJPT.js";
+} from "./chunk-SIDH6NYX.js";
 import {
   getToolMemory
-} from "./chunk-SZB4YAPS.js";
+} from "./chunk-Q6TVHHJS.js";
 import {
   authRemediation,
   delay,
   getAvailableClis,
   withTimeout
-} from "./chunk-5ML6GHQX.js";
+} from "./chunk-WFZGUWWQ.js";
 import {
   AgentError,
   CLI_NAMES,
@@ -64,7 +64,7 @@ import {
   resolveClassGuardMs,
   resolveModelIdentitySync,
   resolveVoteTimeout
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 import {
   ensureLearningDir,
   getOutcomesFile
@@ -6162,7 +6162,7 @@ async function processVotesWithCascade(engineVotes, opts) {
 var CONTRARIAN_ESCALATION_THRESHOLD = 0.8;
 async function runContrarianCheck(proposal, log) {
   try {
-    const { executeExpert } = await import("./expert-bridge-YL4XVDGZ.js");
+    const { executeExpert } = await import("./expert-bridge-XCOFEAAH.js");
     const prompt = [
       "You are a contrarian analyst. Your job is to find reasons this proposal should be REJECTED.",
       "Look for: YAGNI (not needed), MISALIGNED (wrong tech/architecture), SECURITY_RISK, SCOPE_CREEP.",
@@ -6728,4 +6728,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-QDYDMKNY.js.map
+//# sourceMappingURL=chunk-Z3XRX5G6.js.map

package/dist/{chunk-RGCNKORY.js → chunk-Z46NIT6Y.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-4KMXUSDA.js";
+} from "./chunk-JDX7FSEE.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -721,4 +721,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-RGCNKORY.js.map
+//# sourceMappingURL=chunk-Z46NIT6Y.js.map

package/dist/{cli-circuit-breaker-46QD5K4X.js → cli-circuit-breaker-O3SRTC2D.js}

@@ -3,8 +3,8 @@ import {
   createCliCircuitBreakerIntegration,
   getCliCircuitBreakerSnapshot,
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-M5BG7NYZ.js";
-import "./chunk-4KMXUSDA.js";
+} from "./chunk-UGXR3FGB.js";
+import "./chunk-JDX7FSEE.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -14,4 +14,4 @@ export {
   getCliCircuitBreakerSnapshot,
   getDefaultCliCircuitBreakerRegistry
 };
-//# sourceMappingURL=cli-circuit-breaker-46QD5K4X.js.map
+//# sourceMappingURL=cli-circuit-breaker-O3SRTC2D.js.map