nexus-agents 4.22.4 → 4.26.1

package/dist/{chunk-QQS6FVTQ.js → chunk-IIQZ77BJ.js}

@@ -1,7 +1,7 @@
 import {
   getRandomProvider,
   getTimeProvider
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 
 // src/utils/id-utils.ts
 import { randomUUID } from "crypto";
@@ -24,4 +24,4 @@ export {
   generateHyphenId,
   generateUUID
 };
-//# sourceMappingURL=chunk-QQS6FVTQ.js.map
+//# sourceMappingURL=chunk-IIQZ77BJ.js.map

package/dist/{chunk-AXG2IGOK.js → chunk-IWGOE6JT.js}

@@ -1,17 +1,17 @@
 import {
   computeCostDetail,
   recordUsageEvent
-} from "./chunk-PX7AYAHF.js";
+} from "./chunk-MMN77SDX.js";
 import {
   BaseAdapter,
   createStream,
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-MCCN5UUW.js";
+} from "./chunk-VFBNMNDY.js";
 import {
   assertCustomApiHostResolvesPublic
-} from "./chunk-SJPZHT6D.js";
+} from "./chunk-BAYBBQKK.js";
 import {
   ConfigError,
   ModelCapability,
@@ -22,7 +22,7 @@ import {
   getTimeProvider,
   getTokenEstimator,
   ok
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 
 // src/adapters/openai-types.ts
 var OPENAI_MODELS = {
@@ -833,4 +833,4 @@ export {
   discoverModels,
   buildOpenAICompatAdapters
 };
-//# sourceMappingURL=chunk-AXG2IGOK.js.map
+//# sourceMappingURL=chunk-IWGOE6JT.js.map

package/dist/{chunk-QS5K3PAY.js → chunk-JBOKMCJB.js}

@@ -1,10 +1,10 @@
 import {
   createAutoAdapter
-} from "./chunk-SBWVYOTV.js";
+} from "./chunk-HCI3SOTV.js";
 import {
   getDefaultCliCircuitBreakerRegistry,
   mapModelErrorToCategory
-} from "./chunk-N45MVUY7.js";
+} from "./chunk-NSKEVAK2.js";
 import {
   CLI_NAMES,
   CircularBuffer,
@@ -23,7 +23,7 @@ import {
   recordRateLimitEvent,
   resolveModelIdentitySync,
   toRateLimitError
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 
 // src/config/model-equivalence.ts
 function canonicalModelKey(modelId) {
@@ -895,4 +895,4 @@ export {
   getGlobalRegistry,
   resetGlobalRegistry
 };
-//# sourceMappingURL=chunk-QS5K3PAY.js.map
+//# sourceMappingURL=chunk-JBOKMCJB.js.map

package/dist/{chunk-KGFFEQTN.js → chunk-JEAKVUWM.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-KSQSWEFH.js";
 import {
   nexusDataPath
-} from "./chunk-NBMWONHE.js";
+} from "./chunk-OGHEKPLD.js";
 
 // src/mcp/tools/tool-memory-registry-adapters.ts
 var DEFAULT_SEARCH_LIMIT = 10;
@@ -93,4 +93,4 @@ export {
   StatsOnlyAdapter,
   ensureSharedMemoryRegistry
 };
-//# sourceMappingURL=chunk-KGFFEQTN.js.map
+//# sourceMappingURL=chunk-JEAKVUWM.js.map

package/dist/{chunk-3PVG7CQS.js → chunk-K3UKVFL4.js}

@@ -5,13 +5,13 @@ import {
   loadTechniquesRegistry,
   resolveInsideRoot,
   savePapersRegistry
-} from "./chunk-EPOKODTI.js";
+} from "./chunk-RDJWMBUQ.js";
 import {
   resolveToken
-} from "./chunk-5YBFBXEB.js";
+} from "./chunk-TG5SQK44.js";
 import {
   getToolMemory
-} from "./chunk-IBW6CJ4G.js";
+} from "./chunk-SLDESHM5.js";
 import {
   capitalizeWords,
   tokenizeFiltered,
@@ -37,14 +37,14 @@ import {
   getTimeProvider,
   ok,
   registerPersistentDistillerFactory
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 import {
   ensureLearningDir,
   getRulesFile
-} from "./chunk-HHLCAWAV.js";
+} from "./chunk-GBHJ37V3.js";
 import {
   nexusDataPath
-} from "./chunk-NBMWONHE.js";
+} from "./chunk-OGHEKPLD.js";
 
 // src/learning/strategy-distiller-persistence.ts
 import { writeFileSync, readFileSync, renameSync, unlinkSync, existsSync } from "fs";
@@ -4132,4 +4132,4 @@ export {
   DEFAULT_CONTEXT_BUDGET_TOKENS,
   getContextPromptPrefix
 };
-//# sourceMappingURL=chunk-3PVG7CQS.js.map
+//# sourceMappingURL=chunk-K3UKVFL4.js.map

package/dist/{chunk-ANVPNLZE.js → chunk-KUNQLRUR.js}

@@ -1,14 +1,14 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-5RC54HVU.js";
+} from "./chunk-7POSQDHD.js";
 import {
   resolveToken
-} from "./chunk-5YBFBXEB.js";
+} from "./chunk-TG5SQK44.js";
 import {
   err,
   ok
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 
 // src/scm/factory.ts
 async function createScmProvider(config) {
@@ -41,4 +41,4 @@ export {
   createScmProvider,
   createGitHubProvider
 };
-//# sourceMappingURL=chunk-ANVPNLZE.js.map
+//# sourceMappingURL=chunk-KUNQLRUR.js.map

package/dist/{chunk-DXWF7V74.js → chunk-LJHRFULQ.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-PLO6VSSN.js";
+} from "./chunk-5D6BGZDT.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -19,11 +19,11 @@ import {
   getPipelineEventBus,
   getTimeProvider,
   isDeclaredNeverDeprecate
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 import {
   getNexusDataDir,
   nexusDataPath
-} from "./chunk-NBMWONHE.js";
+} from "./chunk-OGHEKPLD.js";
 
 // src/mcp/tools/improvement-review.ts
 import { execFile as execFile2 } from "child_process";
@@ -2132,4 +2132,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-DXWF7V74.js.map
+//# sourceMappingURL=chunk-LJHRFULQ.js.map

package/dist/{chunk-RF5N4HME.js → chunk-MLX4CMGD.js}

@@ -2,7 +2,7 @@ import {
   TASK_CATEGORIES,
   getAdaptiveBonus,
   getOutcomeStore
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 
 // src/cli/doctor-deep.ts
 var CLI_NAMES = ["claude", "gemini", "codex", "opencode"];
@@ -106,4 +106,4 @@ export {
   runDeepDiagnostics,
   formatDeepDiagnostics
 };
-//# sourceMappingURL=chunk-RF5N4HME.js.map
+//# sourceMappingURL=chunk-MLX4CMGD.js.map

package/dist/{chunk-PX7AYAHF.js → chunk-MMN77SDX.js}

@@ -1,9 +1,9 @@
 import {
   getDefaultRegistry
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 import {
   getNexusDataDir
-} from "./chunk-NBMWONHE.js";
+} from "./chunk-OGHEKPLD.js";
 
 // src/learning/usage-log.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync } from "fs";
@@ -128,4 +128,4 @@ export {
   loadUsageEvents,
   rollupByModel
 };
-//# sourceMappingURL=chunk-PX7AYAHF.js.map
+//# sourceMappingURL=chunk-MMN77SDX.js.map

package/dist/{chunk-N45MVUY7.js → chunk-NSKEVAK2.js}

@@ -8,7 +8,7 @@ import {
   getTimeProvider,
   isRateLimitText,
   ok
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -541,4 +541,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-N45MVUY7.js.map
+//# sourceMappingURL=chunk-NSKEVAK2.js.map

package/dist/chunk-NSKEVAK2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli-adapters/circuit-breaker-types.ts","../src/cli-adapters/circuit-breaker.ts","../src/cli-adapters/cli-circuit-breaker.ts"],"sourcesContent":["/**\n * nexus-agents/cli-adapters - Circuit Breaker Types\n *\n * Type definitions and error classes for the circuit breaker pattern.\n *\n * (Source: Issue #81 - Circuit breaker for CLI failures)\n */\n\nimport { NexusError, ErrorCode } from '../core/errors.js';\nimport { isRateLimitText } from '../adapters/rate-limit-detector.js';\nimport type { CliName } from './types.js';\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Circuit breaker states.\n */\nexport type CircuitState = 'closed' | 'open' | 'half-open';\n\n/**\n * Categories of failures for circuit breaker decisions.\n */\nexport type FailureCategory =\n  | 'timeout' // CLI didn't respond in time\n  | 'crash' // Process crashed or exited unexpectedly\n  | 'authentication' // OAuth/auth failure\n  | 'rate_limit' // Rate limit exceeded\n  | 'connection' // MCP connection failed\n  | 'unknown'; // Uncategorized failure\n\n/**\n * Configuration options for circuit breaker.\n */\nexport interface CircuitBreakerConfig {\n  /** Number of failures before opening circuit (default: 5) */\n  readonly failureThreshold: number;\n  /** Time in ms before attempting recovery (default: 30000) */\n  readonly resetTimeoutMs: number;\n  /** Successful calls needed in half-open to close (default: 2) */\n  readonly halfOpenSuccessThreshold: number;\n  /** Whether to count timeouts as failures (default: true) */\n  readonly countTimeoutsAsFailures: boolean;\n  /** Whether to count auth failures as failures (default: false) */\n  readonly countAuthFailuresAsFailures: boolean;\n  /** Whether to count rate limit errors as failures (default: false) */\n  readonly countRateLimitsAsFailures: boolean;\n  /** Maximum number of requests allowed in half-open state (default: 3) */\n  readonly halfOpenMaxRequests: number;\n}\n\n/**\n * Circuit breaker state snapshot.\n */\nexport interface CircuitBreakerSnapshot {\n  /** Current state */\n  readonly state: CircuitState;\n  /** Total failure count since last closed */\n  readonly failureCount: number;\n  /** Success count in half-open state */\n  readonly successCount: number;\n  /** Timestamp of last failure */\n  readonly lastFailureTime: number | null;\n  /** Timestamp of last state change */\n  readonly lastStateChange: number;\n  /** Requests in current half-open window */\n  readonly halfOpenRequests: number;\n  /** Configuration */\n  readonly config: CircuitBreakerConfig;\n}\n\n/**\n * Event emitted on circuit state changes.\n */\nexport interface CircuitStateChangeEvent {\n  /** CLI name */\n  readonly cliName: CliName;\n  /** Previous state */\n  readonly previousState: CircuitState;\n  /** New state */\n  readonly newState: CircuitState;\n  /** Timestamp of change */\n  readonly timestamp: number;\n  /** Failure count at time of change */\n  readonly failureCount: number;\n  /** Reason for state change */\n  readonly reason: string;\n}\n\n/**\n * Event listener for circuit state changes.\n */\nexport type CircuitStateChangeListener = (event: CircuitStateChangeEvent) => void;\n\n/**\n * Interface for circuit breaker operations.\n */\nexport interface ICircuitBreaker {\n  /**\n   * Executes a function with circuit breaker protection.\n   */\n  execute<T>(fn: () => Promise<T>): Promise<import('../core/index.js').Result<T, CircuitError>>;\n\n  /**\n   * Gets the current circuit state.\n   */\n  getState(): CircuitState;\n\n  /**\n   * Gets a full snapshot of circuit breaker state.\n   */\n  getSnapshot(): CircuitBreakerSnapshot;\n\n  /**\n   * Manually resets the circuit breaker to closed state.\n   */\n  reset(): void;\n\n  /**\n   * Records a failure manually (for external failure detection).\n   */\n  recordFailure(category: FailureCategory): void;\n\n  /**\n   * Records a success manually (for external success detection).\n   */\n  recordSuccess(): void;\n}\n\n// ============================================================================\n// Error Codes\n// ============================================================================\n\n/**\n * Error codes specific to circuit breaker.\n */\nexport const CircuitErrorCode = {\n  CIRCUIT_OPEN: 'CIRCUIT_OPEN',\n  CIRCUIT_HALF_OPEN_REJECTED: 'CIRCUIT_HALF_OPEN_REJECTED',\n  EXECUTION_FAILED: 'EXECUTION_FAILED',\n} as const;\n\nexport type CircuitErrorCode = (typeof CircuitErrorCode)[keyof typeof CircuitErrorCode];\n\n// ============================================================================\n// Error Class\n// ============================================================================\n\n/**\n * Error thrown when circuit breaker blocks a request.\n */\nexport class CircuitError extends NexusError {\n  readonly circuitErrorCode: CircuitErrorCode;\n  readonly cliName: CliName;\n  readonly circuitState: CircuitState;\n  readonly failureCategory?: FailureCategory;\n\n  constructor(\n    message: string,\n    options: {\n      circuitErrorCode: CircuitErrorCode;\n      cliName: CliName;\n      circuitState: CircuitState;\n      failureCategory?: FailureCategory;\n      cause?: Error;\n    }\n  ) {\n    const baseOptions: { code: ErrorCode; cause?: Error; context: Record<string, unknown> } = {\n      code: ErrorCode.INTERNAL_ERROR,\n      context: {\n        circuitErrorCode: options.circuitErrorCode,\n        cliName: options.cliName,\n        circuitState: options.circuitState,\n      },\n    };\n    if (options.cause !== undefined) {\n      baseOptions.cause = options.cause;\n    }\n    if (options.failureCategory !== undefined) {\n      baseOptions.context['failureCategory'] = options.failureCategory;\n    }\n    super(message, baseOptions);\n    this.name = 'CircuitError';\n    this.circuitErrorCode = options.circuitErrorCode;\n    this.cliName = options.cliName;\n    this.circuitState = options.circuitState;\n    if (options.failureCategory !== undefined) {\n      this.failureCategory = options.failureCategory;\n    }\n  }\n}\n\n// ============================================================================\n// Default Configuration\n// ============================================================================\n\n/**\n * Default circuit breaker configuration.\n */\nexport const DEFAULT_CIRCUIT_BREAKER_CONFIG: CircuitBreakerConfig = {\n  failureThreshold: 5,\n  resetTimeoutMs: 30_000,\n  halfOpenSuccessThreshold: 2,\n  countTimeoutsAsFailures: true,\n  countAuthFailuresAsFailures: false,\n  countRateLimitsAsFailures: true,\n  halfOpenMaxRequests: 3,\n} as const;\n\n// ============================================================================\n// Error Categorization Patterns\n// ============================================================================\n\n/**\n * Pattern matchers for categorizing errors.\n */\nconst TIMEOUT_PATTERNS = ['timeout', 'timed out'];\nconst AUTH_PATTERNS = ['auth', 'unauthorized', 'forbidden', 'oauth'];\nconst CONNECTION_PATTERNS = [\n  'connection',\n  'econnrefused',\n  'enotfound',\n  'mcp',\n  'eaddrinuse',\n  'address already in use',\n];\nconst CRASH_PATTERNS = ['crash', 'exited', 'killed', 'sigterm', 'sigkill'];\n\n/**\n * Checks if text contains any of the patterns.\n */\nfunction matchesPatterns(text: string, patterns: string[]): boolean {\n  return patterns.some((pattern) => text.includes(pattern));\n}\n\n/**\n * Categorizes an error into a failure category.\n */\nexport function categorizeError(error: unknown): FailureCategory {\n  if (!(error instanceof Error)) {\n    return 'unknown';\n  }\n\n  const message = error.message.toLowerCase();\n  const name = error.name.toLowerCase();\n  const combined = `${message} ${name}`;\n\n  if (matchesPatterns(combined, TIMEOUT_PATTERNS)) return 'timeout';\n  if (matchesPatterns(combined, AUTH_PATTERNS)) return 'authentication';\n  if (isRateLimitText(combined)) return 'rate_limit';\n  if (matchesPatterns(combined, CONNECTION_PATTERNS)) return 'connection';\n  if (matchesPatterns(combined, CRASH_PATTERNS)) return 'crash';\n\n  return 'unknown';\n}\n","/**\n * nexus-agents/cli-adapters - Circuit Breaker Implementation\n *\n * Implements the circuit breaker pattern to handle CLI failures gracefully\n * and prevent cascade failures in the multi-CLI mesh.\n *\n * (Source: Issue #81 - Circuit breaker for CLI failures)\n * (Source: Martin Fowler's Circuit Breaker pattern)\n */\n\nimport type { Result } from '../core/index.js';\nimport { getErrorMessage, err, ok, getTimeProvider } from '../core/index.js';\n\nimport { ErrorCode, type ModelError } from '../core/errors.js';\n\nimport type { CliName, CliErrorCode } from './types.js';\nimport {\n  CircuitError,\n  CircuitErrorCode,\n  DEFAULT_CIRCUIT_BREAKER_CONFIG,\n  categorizeError,\n  type CircuitState,\n  type FailureCategory,\n  type CircuitBreakerConfig,\n  type CircuitBreakerSnapshot,\n  type CircuitStateChangeEvent,\n  type CircuitStateChangeListener,\n  type ICircuitBreaker,\n} from './circuit-breaker-types.js';\n\n// Re-export all types for convenience\nexport {\n  CircuitError,\n  CircuitErrorCode,\n  DEFAULT_CIRCUIT_BREAKER_CONFIG,\n  categorizeError,\n  type CircuitState,\n  type FailureCategory,\n  type CircuitBreakerConfig,\n  type CircuitBreakerSnapshot,\n  type CircuitStateChangeEvent,\n  type CircuitStateChangeListener,\n  type ICircuitBreaker,\n} from './circuit-breaker-types.js';\n\n// ============================================================================\n// Circuit Breaker Implementation\n// ============================================================================\n\n/**\n * Circuit breaker implementation for CLI adapters.\n *\n * Provides protection against cascading failures by:\n * 1. Tracking failure counts\n * 2. Opening circuit when threshold exceeded\n * 3. Allowing gradual recovery through half-open state\n */\nexport class CliCircuitBreaker implements ICircuitBreaker {\n  private state: CircuitState = 'closed';\n  private failureCount = 0;\n  private successCount = 0;\n  private lastFailureTime: number | null = null;\n  private lastStateChange: number;\n  private halfOpenRequests = 0;\n  private readonly listeners: Set<CircuitStateChangeListener> = new Set();\n\n  constructor(\n    private readonly cliName: CliName,\n    private readonly config: CircuitBreakerConfig = DEFAULT_CIRCUIT_BREAKER_CONFIG\n  ) {\n    this.lastStateChange = getTimeProvider().now();\n  }\n\n  /**\n   * Executes a function with circuit breaker protection.\n   */\n  async execute<T>(fn: () => Promise<T>): Promise<Result<T, CircuitError>> {\n    const canExecute = this.canExecute();\n    if (!canExecute.ok) {\n      return canExecute;\n    }\n\n    try {\n      const result = await fn();\n      this.onSuccess();\n      return ok(result);\n    } catch (error) {\n      const category = categorizeError(error);\n      if (this.shouldCountFailure(category)) {\n        this.onFailure(category);\n      }\n      return err(this.createExecutionError(error, category));\n    }\n  }\n\n  getState(): CircuitState {\n    this.checkStateTransition();\n    return this.state;\n  }\n\n  getSnapshot(): CircuitBreakerSnapshot {\n    this.checkStateTransition();\n    return {\n      state: this.state,\n      failureCount: this.failureCount,\n      successCount: this.successCount,\n      lastFailureTime: this.lastFailureTime,\n      lastStateChange: this.lastStateChange,\n      halfOpenRequests: this.halfOpenRequests,\n      config: this.config,\n    };\n  }\n\n  reset(): void {\n    const previousState = this.state;\n    this.state = 'closed';\n    this.failureCount = 0;\n    this.successCount = 0;\n    this.lastFailureTime = null;\n    this.halfOpenRequests = 0;\n    this.lastStateChange = getTimeProvider().now();\n\n    if (previousState !== 'closed') {\n      this.emitStateChange(previousState, 'closed', 'Manual reset');\n    }\n  }\n\n  recordFailure(category: FailureCategory): void {\n    if (this.shouldCountFailure(category)) {\n      this.onFailure(category);\n    }\n  }\n\n  recordSuccess(): void {\n    this.onSuccess();\n  }\n\n  addStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.listeners.add(listener);\n  }\n\n  removeStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.listeners.delete(listener);\n  }\n\n  // -------------------------------------------------------------------------\n  // Private Methods\n  // -------------------------------------------------------------------------\n\n  private canExecute(): Result<true, CircuitError> {\n    this.checkStateTransition();\n\n    if (this.state === 'closed') {\n      return ok(true);\n    }\n\n    if (this.state === 'open') {\n      return err(\n        new CircuitError(`Circuit is open for CLI: ${this.cliName}`, {\n          circuitErrorCode: CircuitErrorCode.CIRCUIT_OPEN,\n          cliName: this.cliName,\n          circuitState: this.state,\n        })\n      );\n    }\n\n    // half-open state\n    if (this.halfOpenRequests >= this.config.halfOpenMaxRequests) {\n      return err(\n        new CircuitError(`Circuit half-open request limit reached for CLI: ${this.cliName}`, {\n          circuitErrorCode: CircuitErrorCode.CIRCUIT_HALF_OPEN_REJECTED,\n          cliName: this.cliName,\n          circuitState: this.state,\n        })\n      );\n    }\n    this.halfOpenRequests++;\n    return ok(true);\n  }\n\n  private checkStateTransition(): void {\n    if (this.state === 'open') {\n      // #5011: measured from the TRANSITION, not from the last failure. Keyed\n      // on `lastFailureTime` the window restarted on every failure recorded\n      // while open — and an open circuit does not shed load on the default\n      // paths (`base-adapter` and `resilient-adapter` never consult\n      // `canExecute`), so traffic kept arriving, kept failing occasionally, and\n      // kept pushing the half-open probe another 30s out. A CLI serving 95% of\n      // requests correctly stayed evicted from every voter panel until a manual\n      // `reset()`. Panel choice: fix the timer, leave load-shedding alone\n      // (7-voter panel, Option A, 4 of 5 approvers, audit record #79).\n      const elapsed = getTimeProvider().now() - this.lastStateChange;\n      if (elapsed >= this.config.resetTimeoutMs) {\n        this.transitionTo('half-open', 'Reset timeout elapsed');\n      }\n    }\n  }\n\n  private onSuccess(): void {\n    if (this.state === 'closed') {\n      this.failureCount = 0;\n    } else if (this.state === 'half-open') {\n      this.successCount++;\n      if (this.successCount >= this.config.halfOpenSuccessThreshold) {\n        const reason = `${String(this.successCount)} consecutive successes in half-open state`;\n        this.transitionTo('closed', reason);\n      }\n    }\n  }\n\n  private onFailure(category: FailureCategory): void {\n    // #5011: a failure recorded while the circuit is already open carries no\n    // information — the circuit is open, that is the verdict — and updating\n    // `lastFailureTime` here is what delayed recovery.\n    //\n    // #5034: this line is the LOAD-BEARING half, and the tests now say so:\n    // dropping it alone fails two assertions. The `lastStateChange` change in\n    // `checkStateTransition` is genuinely redundant given this return —\n    // reverting THAT alone fails nothing, because with `lastFailureTime`\n    // frozen the two fields are set microseconds apart at the open transition\n    // and never diverge. It is kept because measuring recovery from the\n    // transition is what the window means, not because any behaviour\n    // distinguishes it. Saying which half is pinned, and admitting the other\n    // cannot be, beats a mutation table that implies two clean kills.\n    //\n    // `failureCount` stays put too: it drives the closed-state threshold and\n    // is reset on the transition back to closed.\n    if (this.state === 'open') return;\n\n    this.failureCount++;\n    this.lastFailureTime = getTimeProvider().now();\n\n    if (this.state === 'closed' && this.failureCount >= this.config.failureThreshold) {\n      const reason = `Failure threshold (${String(this.config.failureThreshold)}) exceeded`;\n      this.transitionTo('open', reason);\n    } else if (this.state === 'half-open') {\n      this.transitionTo('open', `Failure during half-open recovery (category: ${category})`);\n    }\n  }\n\n  private transitionTo(newState: CircuitState, reason: string): void {\n    const previousState = this.state;\n    this.state = newState;\n    this.lastStateChange = getTimeProvider().now();\n\n    if (newState === 'closed') {\n      this.failureCount = 0;\n      this.successCount = 0;\n      this.halfOpenRequests = 0;\n    } else if (newState === 'half-open') {\n      // #3026 finding 5: pre-fix `failureCount` carried over across\n      // recovery cycles. transitionTo('open',…) only zeroes counts on\n      // 'closed', so a half-open→open→half-open flaky pattern grew\n      // `failureCount` monotonically across cycles. The count served\n      // its threshold purpose when we opened the circuit; resetting on\n      // 'half-open' restores the documented per-cycle semantic that\n      // operator dashboards / alerts read from `getSnapshot()`.\n      this.failureCount = 0;\n      this.successCount = 0;\n      this.halfOpenRequests = 0;\n    }\n\n    this.emitStateChange(previousState, newState, reason);\n  }\n\n  private emitStateChange(\n    previousState: CircuitState,\n    newState: CircuitState,\n    reason: string\n  ): void {\n    const event: CircuitStateChangeEvent = {\n      cliName: this.cliName,\n      previousState,\n      newState,\n      timestamp: this.lastStateChange,\n      failureCount: this.failureCount,\n      reason,\n    };\n\n    for (const listener of this.listeners) {\n      try {\n        listener(event);\n      } catch {\n        // Ignore listener errors to prevent cascade\n      }\n    }\n  }\n\n  private shouldCountFailure(category: FailureCategory): boolean {\n    if (category === 'timeout') return this.config.countTimeoutsAsFailures;\n    if (category === 'authentication') return this.config.countAuthFailuresAsFailures;\n    if (category === 'rate_limit') return this.config.countRateLimitsAsFailures;\n    return true;\n  }\n\n  private createExecutionError(error: unknown, category: FailureCategory): CircuitError {\n    const message = getErrorMessage(error);\n    const cause = error instanceof Error ? error : new Error(String(error));\n    return new CircuitError(`CLI execution failed: ${message}`, {\n      circuitErrorCode: CircuitErrorCode.EXECUTION_FAILED,\n      cliName: this.cliName,\n      circuitState: this.state,\n      failureCategory: category,\n      cause,\n    });\n  }\n}\n\n// ============================================================================\n// Registry\n// ============================================================================\n\n/**\n * Registry for managing per-CLI circuit breakers.\n */\nexport class CircuitBreakerRegistry {\n  private readonly breakers: Map<CliName, CliCircuitBreaker> = new Map();\n  private readonly globalListeners: Set<CircuitStateChangeListener> = new Set();\n\n  constructor(private readonly defaultConfig: Partial<CircuitBreakerConfig> = {}) {}\n\n  getBreaker(cliName: CliName, config?: Partial<CircuitBreakerConfig>): CliCircuitBreaker {\n    let breaker = this.breakers.get(cliName);\n\n    if (!breaker) {\n      const mergedConfig: CircuitBreakerConfig = {\n        ...DEFAULT_CIRCUIT_BREAKER_CONFIG,\n        ...this.defaultConfig,\n        ...config,\n      };\n      breaker = new CliCircuitBreaker(cliName, mergedConfig);\n\n      for (const listener of this.globalListeners) {\n        breaker.addStateChangeListener(listener);\n      }\n\n      this.breakers.set(cliName, breaker);\n    }\n\n    return breaker;\n  }\n\n  isOpen(cliName: CliName): boolean {\n    return this.breakers.get(cliName)?.getState() === 'open';\n  }\n\n  getAllSnapshots(): Map<CliName, CircuitBreakerSnapshot> {\n    const snapshots = new Map<CliName, CircuitBreakerSnapshot>();\n    for (const [name, breaker] of this.breakers) {\n      snapshots.set(name, breaker.getSnapshot());\n    }\n    return snapshots;\n  }\n\n  resetAll(): void {\n    for (const breaker of this.breakers.values()) {\n      breaker.reset();\n    }\n  }\n\n  reset(cliName: CliName): void {\n    this.breakers.get(cliName)?.reset();\n  }\n\n  addGlobalStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.globalListeners.add(listener);\n    for (const breaker of this.breakers.values()) {\n      breaker.addStateChangeListener(listener);\n    }\n  }\n\n  removeGlobalStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.globalListeners.delete(listener);\n    for (const breaker of this.breakers.values()) {\n      breaker.removeStateChangeListener(listener);\n    }\n  }\n\n  getHealthyClis(): CliName[] {\n    const healthy: CliName[] = [];\n    for (const [name, breaker] of this.breakers) {\n      if (breaker.getState() === 'closed') {\n        healthy.push(name);\n      }\n    }\n    return healthy;\n  }\n\n  getUnhealthyClis(): CliName[] {\n    const unhealthy: CliName[] = [];\n    for (const [name, breaker] of this.breakers) {\n      const state = breaker.getState();\n      if (state === 'open' || state === 'half-open') {\n        unhealthy.push(name);\n      }\n    }\n    return unhealthy;\n  }\n}\n\n// ============================================================================\n// Utility Functions\n// ============================================================================\n\n/**\n * Maps CLI error codes to failure categories.\n */\nexport function mapCliErrorToCategory(errorCode: CliErrorCode): FailureCategory {\n  const mapping: Record<string, FailureCategory> = {\n    TIMEOUT: 'timeout',\n    NOT_AUTHENTICATED: 'authentication',\n    RATE_LIMITED: 'rate_limit',\n    CONNECTION_ERROR: 'connection',\n  };\n  return mapping[errorCode] ?? 'unknown';\n}\n\n/**\n * Maps a direct-API {@link ModelError} to a circuit-breaker failure category.\n *\n * Mirrors {@link mapCliErrorToCategory} for the IModelAdapter layer (#3423):\n * API failures must drive the same breaker degradation/failover learning that\n * CLI subprocess failures already get. Maps by the structured `error.code`\n * first, then falls back to message-pattern categorization via\n * {@link categorizeError} (which returns `'unknown'` if nothing matches).\n *\n * The fallback is what turns a generic `MODEL_ERROR` whose message reads\n * \"connection refused\" into a `connection` category instead of `unknown`.\n */\nexport function mapModelErrorToCategory(error: ModelError): FailureCategory {\n  switch (error.code) {\n    case ErrorCode.MODEL_TIMEOUT:\n    case ErrorCode.TIMEOUT_ERROR:\n      return 'timeout';\n    case ErrorCode.UNAUTHORIZED:\n      return 'authentication';\n    case ErrorCode.MODEL_RATE_LIMITED:\n    case ErrorCode.RATE_LIMIT_ERROR:\n      return 'rate_limit';\n    case ErrorCode.MODEL_UNAVAILABLE:\n    case ErrorCode.MODEL_NOT_FOUND:\n      // Intentional reuse of `connection`: there is no dedicated \"endpoint gone /\n      // model retired\" category, and `connection` is a counted, failover-driving\n      // category — the right behaviour for an unavailable/missing model.\n      return 'connection';\n    default:\n      // MODEL_ERROR and any other code: fall back to message-pattern matching.\n      return categorizeError(error);\n  }\n}\n\n// `createCircuitBreakerRegistryWithMetrics` and the\n// `Capacity Monitor Integration` section\n// (`integrateCapacityMonitorWithCircuitBreaker` + the\n// `CapacityMonitorIntegrationConfig` interface and its default config)\n// were removed in #3018 — both had only test-file callers in the tree.\n// The `CircuitBreakerRegistry` above is what production adapters use;\n// if metrics-logging integration comes back as a real requirement,\n// reintroduce it alongside the consumer code in the same PR\n// (activation-or-delete YAGNI — same pattern as #2937–#2940).\n//\n// The capacity-monitor half of that sentence is gone: the provider-header\n// monitor it referred to was removed in #4532 after 7 months unwired, so\n// there is nothing to \"come back\". Header parsing is now a BUILD.\n","/**\n * nexus-agents/cli-adapters - CLI Circuit Breaker Integration\n *\n * Wraps CLI adapter calls with circuit breaker pattern for resilient\n * multi-CLI execution with automatic fallback on failures.\n *\n * (Source: Issue #359 - Integrate circuit breaker with CLI adapters)\n */\n\nimport type { Result, ILogger } from '../core/index.js';\nimport { ok, err, createLogger, getTimeProvider } from '../core/index.js';\nimport type { TaskCategory } from '../config/task-specialization-types.js';\nimport type { FallbackTaskType } from './task-classifier.js';\nimport { getFallbackChainForCategory } from './fallback-chains.js';\nimport type { ICliAdapter, CliName, CliTask, CliResponse, CliError } from './types.js';\nimport {\n  CircuitBreakerRegistry,\n  CircuitError,\n  mapCliErrorToCategory,\n  type CircuitBreakerConfig,\n  type CircuitBreakerSnapshot,\n  type CircuitStateChangeListener,\n} from './circuit-breaker.js';\n\n/** Maps canonical TaskCategory (10 types) to FallbackTaskType (5 types). */\nconst CATEGORY_TO_FALLBACK: Record<TaskCategory, FallbackTaskType> = {\n  code_generation: 'code',\n  code_review: 'code',\n  testing: 'code',\n  research: 'research',\n  exploration: 'research',\n  documentation: 'documentation',\n  architecture: 'analysis',\n  security_review: 'analysis',\n  planning: 'analysis',\n  devops: 'general',\n};\n\n/** Configuration for CLI circuit breaker integration. */\nexport interface CliCircuitBreakerConfig {\n  readonly perCliConfig?: Partial<Record<CliName, Partial<CircuitBreakerConfig>>>;\n  readonly fallbackChain?: ReadonlyArray<CliName>;\n  readonly enableFallback?: boolean;\n  readonly maxFallbackAttempts?: number;\n}\n\n/** Result of a circuit-protected execution with fallback info. */\nexport interface CircuitProtectedResult {\n  readonly response: CliResponse;\n  readonly executedBy: CliName;\n  readonly usedFallback: boolean;\n  readonly fallbackAttempts?: ReadonlyArray<CliName>;\n}\n\n/** Health status for all CLIs with circuit state. */\nexport interface CliCircuitHealthStatus {\n  readonly clis: ReadonlyArray<{\n    readonly name: CliName;\n    readonly healthy: boolean;\n    readonly circuitState: 'closed' | 'open' | 'half-open';\n    readonly failureCount: number;\n    readonly lastFailureTime: number | null;\n  }>;\n  readonly systemHealthy: boolean;\n  readonly healthyCount: number;\n  readonly timestamp: number;\n}\n\n/** Interface for CLI circuit breaker integration. */\nexport interface ICliCircuitBreakerIntegration {\n  execute(\n    adapter: ICliAdapter,\n    task: CliTask,\n    taskCategory?: TaskCategory\n  ): Promise<Result<CircuitProtectedResult, CircuitError | CliError>>;\n  getHealthStatus(): CliCircuitHealthStatus;\n  getCircuitSnapshots(): Map<CliName, CircuitBreakerSnapshot>;\n  resetCircuit(cliName: CliName): void;\n  resetAllCircuits(): void;\n  addStateChangeListener(listener: CircuitStateChangeListener): void;\n}\n\nconst DEFAULT_FALLBACK_CHAIN: ReadonlyArray<CliName> = ['claude', 'gemini', 'codex', 'opencode'];\nconst DEFAULT_CONFIG: Required<CliCircuitBreakerConfig> = {\n  perCliConfig: {},\n  fallbackChain: DEFAULT_FALLBACK_CHAIN,\n  enableFallback: true,\n  maxFallbackAttempts: 2,\n};\nconst defaultCliCircuitBreakerRegistry = new CircuitBreakerRegistry();\n\n// #4330: the shared registry now gates voter-panel availability, so a CLI can\n// vanish from a panel roster because its circuit opened. Log every transition —\n// otherwise the next person debugging a \"missing voter\" has no trail, and a\n// misclassified transient error silently costs the panel its diversity.\nconst registryLogger = createLogger({ component: 'cli-circuit-breaker' });\ndefaultCliCircuitBreakerRegistry.addGlobalStateChangeListener((event) => {\n  registryLogger.warn('CLI circuit state changed', {\n    cli: event.cliName,\n    previousState: event.previousState,\n    newState: event.newState,\n    failureCount: event.failureCount,\n    reason: event.reason,\n  });\n});\n\n/** Returns the shared CLI circuit-breaker registry used by default integrations. */\nexport function getDefaultCliCircuitBreakerRegistry(): CircuitBreakerRegistry {\n  return defaultCliCircuitBreakerRegistry;\n}\n\n/**\n * Reads the current snapshot for a CLI without creating a new breaker.\n *\n * `undefined` means no circuit state is known yet, so callers should fail open.\n */\nexport function getCliCircuitBreakerSnapshot(cliName: CliName): CircuitBreakerSnapshot | undefined {\n  return defaultCliCircuitBreakerRegistry.getAllSnapshots().get(cliName);\n}\n\n/**\n * Integrates circuit breaker pattern with CLI adapters.\n * Provides automatic fallback when a CLI's circuit opens.\n */\nexport class CliCircuitBreakerIntegration implements ICliCircuitBreakerIntegration {\n  private readonly registry: CircuitBreakerRegistry;\n  private readonly adapters: Map<CliName, ICliAdapter> = new Map();\n  private readonly config: Required<CliCircuitBreakerConfig>;\n  private readonly logger: ILogger;\n\n  constructor(\n    adapters: ReadonlyArray<ICliAdapter>,\n    config?: CliCircuitBreakerConfig,\n    logger?: ILogger\n  ) {\n    this.config = { ...DEFAULT_CONFIG, ...config };\n    this.logger = logger ?? createLogger({ component: 'cli-circuit-breaker-integration' });\n    this.registry =\n      config === undefined ? defaultCliCircuitBreakerRegistry : new CircuitBreakerRegistry();\n    for (const adapter of adapters) {\n      this.adapters.set(adapter.name, adapter);\n      this.registry.getBreaker(adapter.name, this.config.perCliConfig[adapter.name]);\n    }\n  }\n\n  async execute(\n    adapter: ICliAdapter,\n    task: CliTask,\n    taskCategory?: TaskCategory\n  ): Promise<Result<CircuitProtectedResult, CircuitError | CliError>> {\n    const primaryCli = adapter.name;\n    const fallbackAttempts: CliName[] = [];\n    let lastError: CircuitError | CliError | undefined;\n\n    const primaryResult = await this.executeWithBreaker(adapter, task);\n    if (primaryResult.ok) {\n      return ok({ response: primaryResult.value, executedBy: primaryCli, usedFallback: false });\n    }\n    lastError = primaryResult.error;\n\n    if (!this.config.enableFallback || !(lastError instanceof CircuitError)) {\n      return err(lastError);\n    }\n\n    for (const cli of this.getFallbackClis(primaryCli, taskCategory).slice(\n      0,\n      this.config.maxFallbackAttempts\n    )) {\n      const fallbackAdapter = this.adapters.get(cli);\n      if (!fallbackAdapter) continue;\n      fallbackAttempts.push(cli);\n      this.logger.info('Attempting fallback', { from: primaryCli, to: cli });\n      const result = await this.executeWithBreaker(fallbackAdapter, task);\n      if (result.ok) {\n        return ok({\n          response: result.value,\n          executedBy: cli,\n          usedFallback: true,\n          fallbackAttempts,\n        });\n      }\n      lastError = result.error;\n    }\n\n    this.logger.warn('All fallback attempts failed', { primaryCli, fallbackAttempts });\n    return err(lastError);\n  }\n\n  getHealthStatus(): CliCircuitHealthStatus {\n    const snapshots = this.registry.getAllSnapshots();\n    const clis: CliCircuitHealthStatus['clis'][number][] = [];\n    let healthyCount = 0;\n    for (const name of this.adapters.keys()) {\n      const snapshot = snapshots.get(name);\n      if (!snapshot) continue;\n      const healthy = snapshot.state === 'closed';\n      if (healthy) healthyCount++;\n      clis.push({\n        name,\n        healthy,\n        circuitState: snapshot.state,\n        failureCount: snapshot.failureCount,\n        lastFailureTime: snapshot.lastFailureTime,\n      });\n    }\n    return {\n      clis,\n      systemHealthy: healthyCount > 0,\n      healthyCount,\n      timestamp: getTimeProvider().now(),\n    };\n  }\n\n  getCircuitSnapshots(): Map<CliName, CircuitBreakerSnapshot> {\n    const allSnapshots = this.registry.getAllSnapshots();\n    const snapshots = new Map<CliName, CircuitBreakerSnapshot>();\n    for (const name of this.adapters.keys()) {\n      const snapshot = allSnapshots.get(name);\n      if (snapshot !== undefined) {\n        snapshots.set(name, snapshot);\n      }\n    }\n    return snapshots;\n  }\n\n  resetCircuit(cliName: CliName): void {\n    this.registry.reset(cliName);\n    this.logger.info('Circuit reset', { cliName });\n  }\n\n  resetAllCircuits(): void {\n    this.registry.resetAll();\n    this.logger.info('All circuits reset');\n  }\n\n  addStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.registry.addGlobalStateChangeListener(listener);\n  }\n\n  private async executeWithBreaker(\n    adapter: ICliAdapter,\n    task: CliTask\n  ): Promise<Result<CliResponse, CircuitError | CliError>> {\n    const breaker = this.registry.getBreaker(adapter.name);\n    const result = await breaker.execute(async () => {\n      const execResult = await adapter.execute(task);\n      if (!execResult.ok) {\n        breaker.recordFailure(mapCliErrorToCategory(execResult.error.code));\n        const wrappedError = new Error(execResult.error.message);\n        (wrappedError as Error & { cliError: CliError }).cliError = execResult.error;\n        throw wrappedError;\n      }\n      return execResult.value;\n    });\n\n    if (!result.ok) {\n      if (result.error.circuitErrorCode === 'CIRCUIT_OPEN') return err(result.error);\n      const wrapped = result.error.cause as (Error & { cliError?: CliError }) | undefined;\n      if (wrapped?.cliError) return err(wrapped.cliError);\n      return err(result.error);\n    }\n    return ok(result.value);\n  }\n\n  private getFallbackClis(excludeCli: CliName, taskCategory?: TaskCategory): CliName[] {\n    const chain =\n      taskCategory !== undefined\n        ? getFallbackChainForCategory(taskCategory, CATEGORY_TO_FALLBACK[taskCategory])\n        : this.config.fallbackChain;\n    return [...chain].filter(\n      (cli) => cli !== excludeCli && !this.registry.isOpen(cli) && this.adapters.has(cli)\n    );\n  }\n}\n\n/** Creates a CLI circuit breaker integration with the specified adapters. */\nexport function createCliCircuitBreakerIntegration(\n  adapters: ReadonlyArray<ICliAdapter>,\n  config?: CliCircuitBreakerConfig,\n  logger?: ILogger\n): CliCircuitBreakerIntegration {\n  return new CliCircuitBreakerIntegration(adapters, config, logger);\n}\n"],"mappings":";;;;;;;;;;;;;AAyIO,IAAM,mBAAmB;AAAA,EAC9B,cAAc;AAAA,EACd,4BAA4B;AAAA,EAC5B,kBAAkB;AACpB;AAWO,IAAM,eAAN,cAA2B,WAAW;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YACE,SACA,SAOA;AACA,UAAM,cAAoF;AAAA,MACxF,MAAM,UAAU;AAAA,MAChB,SAAS;AAAA,QACP,kBAAkB,QAAQ;AAAA,QAC1B,SAAS,QAAQ;AAAA,QACjB,cAAc,QAAQ;AAAA,MACxB;AAAA,IACF;AACA,QAAI,QAAQ,UAAU,QAAW;AAC/B,kBAAY,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACzC,kBAAY,QAAQ,iBAAiB,IAAI,QAAQ;AAAA,IACnD;AACA,UAAM,SAAS,WAAW;AAC1B,SAAK,OAAO;AACZ,SAAK,mBAAmB,QAAQ;AAChC,SAAK,UAAU,QAAQ;AACvB,SAAK,eAAe,QAAQ;AAC5B,QAAI,QAAQ,oBAAoB,QAAW;AACzC,WAAK,kBAAkB,QAAQ;AAAA,IACjC;AAAA,EACF;AACF;AASO,IAAM,iCAAuD;AAAA,EAClE,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,0BAA0B;AAAA,EAC1B,yBAAyB;AAAA,EACzB,6BAA6B;AAAA,EAC7B,2BAA2B;AAAA,EAC3B,qBAAqB;AACvB;AASA,IAAM,mBAAmB,CAAC,WAAW,WAAW;AAChD,IAAM,gBAAgB,CAAC,QAAQ,gBAAgB,aAAa,OAAO;AACnE,IAAM,sBAAsB;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,IAAM,iBAAiB,CAAC,SAAS,UAAU,UAAU,WAAW,SAAS;AAKzE,SAAS,gBAAgB,MAAc,UAA6B;AAClE,SAAO,SAAS,KAAK,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAC1D;AAKO,SAAS,gBAAgB,OAAiC;AAC/D,MAAI,EAAE,iBAAiB,QAAQ;AAC7B,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,MAAM,QAAQ,YAAY;AAC1C,QAAM,OAAO,MAAM,KAAK,YAAY;AACpC,QAAM,WAAW,GAAG,OAAO,IAAI,IAAI;AAEnC,MAAI,gBAAgB,UAAU,gBAAgB,EAAG,QAAO;AACxD,MAAI,gBAAgB,UAAU,aAAa,EAAG,QAAO;AACrD,MAAI,gBAAgB,QAAQ,EAAG,QAAO;AACtC,MAAI,gBAAgB,UAAU,mBAAmB,EAAG,QAAO;AAC3D,MAAI,gBAAgB,UAAU,cAAc,EAAG,QAAO;AAEtD,SAAO;AACT;;;ACtMO,IAAM,oBAAN,MAAmD;AAAA,EASxD,YACmB,SACA,SAA+B,gCAChD;AAFiB;AACA;AAEjB,SAAK,kBAAkB,gBAAgB,EAAE,IAAI;AAAA,EAC/C;AAAA,EAJmB;AAAA,EACA;AAAA,EAVX,QAAsB;AAAA,EACtB,eAAe;AAAA,EACf,eAAe;AAAA,EACf,kBAAiC;AAAA,EACjC;AAAA,EACA,mBAAmB;AAAA,EACV,YAA6C,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA,EAYtE,MAAM,QAAW,IAAwD;AACvE,UAAM,aAAa,KAAK,WAAW;AACnC,QAAI,CAAC,WAAW,IAAI;AAClB,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,GAAG;AACxB,WAAK,UAAU;AACf,aAAO,GAAG,MAAM;AAAA,IAClB,SAAS,OAAO;AACd,YAAM,WAAW,gBAAgB,KAAK;AACtC,UAAI,KAAK,mBAAmB,QAAQ,GAAG;AACrC,aAAK,UAAU,QAAQ;AAAA,MACzB;AACA,aAAO,IAAI,KAAK,qBAAqB,OAAO,QAAQ,CAAC;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,WAAyB;AACvB,SAAK,qBAAqB;AAC1B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,cAAsC;AACpC,SAAK,qBAAqB;AAC1B,WAAO;AAAA,MACL,OAAO,KAAK;AAAA,MACZ,cAAc,KAAK;AAAA,MACnB,cAAc,KAAK;AAAA,MACnB,iBAAiB,KAAK;AAAA,MACtB,iBAAiB,KAAK;AAAA,MACtB,kBAAkB,KAAK;AAAA,MACvB,QAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAAA,EAEA,QAAc;AACZ,UAAM,gBAAgB,KAAK;AAC3B,SAAK,QAAQ;AACb,SAAK,eAAe;AACpB,SAAK,eAAe;AACpB,SAAK,kBAAkB;AACvB,SAAK,mBAAmB;AACxB,SAAK,kBAAkB,gBAAgB,EAAE,IAAI;AAE7C,QAAI,kBAAkB,UAAU;AAC9B,WAAK,gBAAgB,eAAe,UAAU,cAAc;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,cAAc,UAAiC;AAC7C,QAAI,KAAK,mBAAmB,QAAQ,GAAG;AACrC,WAAK,UAAU,QAAQ;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,gBAAsB;AACpB,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,uBAAuB,UAA4C;AACjE,SAAK,UAAU,IAAI,QAAQ;AAAA,EAC7B;AAAA,EAEA,0BAA0B,UAA4C;AACpE,SAAK,UAAU,OAAO,QAAQ;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA,EAMQ,aAAyC;AAC/C,SAAK,qBAAqB;AAE1B,QAAI,KAAK,UAAU,UAAU;AAC3B,aAAO,GAAG,IAAI;AAAA,IAChB;AAEA,QAAI,KAAK,UAAU,QAAQ;AACzB,aAAO;AAAA,QACL,IAAI,aAAa,4BAA4B,KAAK,OAAO,IAAI;AAAA,UAC3D,kBAAkB,iBAAiB;AAAA,UACnC,SAAS,KAAK;AAAA,UACd,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH;AAAA,IACF;AAGA,QAAI,KAAK,oBAAoB,KAAK,OAAO,qBAAqB;AAC5D,aAAO;AAAA,QACL,IAAI,aAAa,oDAAoD,KAAK,OAAO,IAAI;AAAA,UACnF,kBAAkB,iBAAiB;AAAA,UACnC,SAAS,KAAK;AAAA,UACd,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH;AAAA,IACF;AACA,SAAK;AACL,WAAO,GAAG,IAAI;AAAA,EAChB;AAAA,EAEQ,uBAA6B;AACnC,QAAI,KAAK,UAAU,QAAQ;AAUzB,YAAM,UAAU,gBAAgB,EAAE,IAAI,IAAI,KAAK;AAC/C,UAAI,WAAW,KAAK,OAAO,gBAAgB;AACzC,aAAK,aAAa,aAAa,uBAAuB;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,YAAkB;AACxB,QAAI,KAAK,UAAU,UAAU;AAC3B,WAAK,eAAe;AAAA,IACtB,WAAW,KAAK,UAAU,aAAa;AACrC,WAAK;AACL,UAAI,KAAK,gBAAgB,KAAK,OAAO,0BAA0B;AAC7D,cAAM,SAAS,GAAG,OAAO,KAAK,YAAY,CAAC;AAC3C,aAAK,aAAa,UAAU,MAAM;AAAA,MACpC;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,UAAU,UAAiC;AAiBjD,QAAI,KAAK,UAAU,OAAQ;AAE3B,SAAK;AACL,SAAK,kBAAkB,gBAAgB,EAAE,IAAI;AAE7C,QAAI,KAAK,UAAU,YAAY,KAAK,gBAAgB,KAAK,OAAO,kBAAkB;AAChF,YAAM,SAAS,sBAAsB,OAAO,KAAK,OAAO,gBAAgB,CAAC;AACzE,WAAK,aAAa,QAAQ,MAAM;AAAA,IAClC,WAAW,KAAK,UAAU,aAAa;AACrC,WAAK,aAAa,QAAQ,gDAAgD,QAAQ,GAAG;AAAA,IACvF;AAAA,EACF;AAAA,EAEQ,aAAa,UAAwB,QAAsB;AACjE,UAAM,gBAAgB,KAAK;AAC3B,SAAK,QAAQ;AACb,SAAK,kBAAkB,gBAAgB,EAAE,IAAI;AAE7C,QAAI,aAAa,UAAU;AACzB,WAAK,eAAe;AACpB,WAAK,eAAe;AACpB,WAAK,mBAAmB;AAAA,IAC1B,WAAW,aAAa,aAAa;AAQnC,WAAK,eAAe;AACpB,WAAK,eAAe;AACpB,WAAK,mBAAmB;AAAA,IAC1B;AAEA,SAAK,gBAAgB,eAAe,UAAU,MAAM;AAAA,EACtD;AAAA,EAEQ,gBACN,eACA,UACA,QACM;AACN,UAAM,QAAiC;AAAA,MACrC,SAAS,KAAK;AAAA,MACd;AAAA,MACA;AAAA,MACA,WAAW,KAAK;AAAA,MAChB,cAAc,KAAK;AAAA,MACnB;AAAA,IACF;AAEA,eAAW,YAAY,KAAK,WAAW;AACrC,UAAI;AACF,iBAAS,KAAK;AAAA,MAChB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,mBAAmB,UAAoC;AAC7D,QAAI,aAAa,UAAW,QAAO,KAAK,OAAO;AAC/C,QAAI,aAAa,iBAAkB,QAAO,KAAK,OAAO;AACtD,QAAI,aAAa,aAAc,QAAO,KAAK,OAAO;AAClD,WAAO;AAAA,EACT;AAAA,EAEQ,qBAAqB,OAAgB,UAAyC;AACpF,UAAM,UAAU,gBAAgB,KAAK;AACrC,UAAM,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACtE,WAAO,IAAI,aAAa,yBAAyB,OAAO,IAAI;AAAA,MAC1D,kBAAkB,iBAAiB;AAAA,MACnC,SAAS,KAAK;AAAA,MACd,cAAc,KAAK;AAAA,MACnB,iBAAiB;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH;AACF;AASO,IAAM,yBAAN,MAA6B;AAAA,EAIlC,YAA6B,gBAA+C,CAAC,GAAG;AAAnD;AAAA,EAAoD;AAAA,EAApD;AAAA,EAHZ,WAA4C,oBAAI,IAAI;AAAA,EACpD,kBAAmD,oBAAI,IAAI;AAAA,EAI5E,WAAW,SAAkB,QAA2D;AACtF,QAAI,UAAU,KAAK,SAAS,IAAI,OAAO;AAEvC,QAAI,CAAC,SAAS;AACZ,YAAM,eAAqC;AAAA,QACzC,GAAG;AAAA,QACH,GAAG,KAAK;AAAA,QACR,GAAG;AAAA,MACL;AACA,gBAAU,IAAI,kBAAkB,SAAS,YAAY;AAErD,iBAAW,YAAY,KAAK,iBAAiB;AAC3C,gBAAQ,uBAAuB,QAAQ;AAAA,MACzC;AAEA,WAAK,SAAS,IAAI,SAAS,OAAO;AAAA,IACpC;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,SAA2B;AAChC,WAAO,KAAK,SAAS,IAAI,OAAO,GAAG,SAAS,MAAM;AAAA,EACpD;AAAA,EAEA,kBAAwD;AACtD,UAAM,YAAY,oBAAI,IAAqC;AAC3D,eAAW,CAAC,MAAM,OAAO,KAAK,KAAK,UAAU;AAC3C,gBAAU,IAAI,MAAM,QAAQ,YAAY,CAAC;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AAAA,EAEA,WAAiB;AACf,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC5C,cAAQ,MAAM;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,SAAwB;AAC5B,SAAK,SAAS,IAAI,OAAO,GAAG,MAAM;AAAA,EACpC;AAAA,EAEA,6BAA6B,UAA4C;AACvE,SAAK,gBAAgB,IAAI,QAAQ;AACjC,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC5C,cAAQ,uBAAuB,QAAQ;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,gCAAgC,UAA4C;AAC1E,SAAK,gBAAgB,OAAO,QAAQ;AACpC,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC5C,cAAQ,0BAA0B,QAAQ;AAAA,IAC5C;AAAA,EACF;AAAA,EAEA,iBAA4B;AAC1B,UAAM,UAAqB,CAAC;AAC5B,eAAW,CAAC,MAAM,OAAO,KAAK,KAAK,UAAU;AAC3C,UAAI,QAAQ,SAAS,MAAM,UAAU;AACnC,gBAAQ,KAAK,IAAI;AAAA,MACnB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,mBAA8B;AAC5B,UAAM,YAAuB,CAAC;AAC9B,eAAW,CAAC,MAAM,OAAO,KAAK,KAAK,UAAU;AAC3C,YAAM,QAAQ,QAAQ,SAAS;AAC/B,UAAI,UAAU,UAAU,UAAU,aAAa;AAC7C,kBAAU,KAAK,IAAI;AAAA,MACrB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,sBAAsB,WAA0C;AAC9E,QAAM,UAA2C;AAAA,IAC/C,SAAS;AAAA,IACT,mBAAmB;AAAA,IACnB,cAAc;AAAA,IACd,kBAAkB;AAAA,EACpB;AACA,SAAO,QAAQ,SAAS,KAAK;AAC/B;AAcO,SAAS,wBAAwB,OAAoC;AAC1E,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK,UAAU;AAAA,IACf,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AAAA,IACf,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AAAA,IACf,KAAK,UAAU;AAIb,aAAO;AAAA,IACT;AAEE,aAAO,gBAAgB,KAAK;AAAA,EAChC;AACF;;;ACxaA,IAAM,uBAA+D;AAAA,EACnE,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,SAAS;AAAA,EACT,UAAU;AAAA,EACV,aAAa;AAAA,EACb,eAAe;AAAA,EACf,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,UAAU;AAAA,EACV,QAAQ;AACV;AA8CA,IAAM,yBAAiD,CAAC,UAAU,UAAU,SAAS,UAAU;AAC/F,IAAM,iBAAoD;AAAA,EACxD,cAAc,CAAC;AAAA,EACf,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,qBAAqB;AACvB;AACA,IAAM,mCAAmC,IAAI,uBAAuB;AAMpE,IAAM,iBAAiB,aAAa,EAAE,WAAW,sBAAsB,CAAC;AACxE,iCAAiC,6BAA6B,CAAC,UAAU;AACvE,iBAAe,KAAK,6BAA6B;AAAA,IAC/C,KAAK,MAAM;AAAA,IACX,eAAe,MAAM;AAAA,IACrB,UAAU,MAAM;AAAA,IAChB,cAAc,MAAM;AAAA,IACpB,QAAQ,MAAM;AAAA,EAChB,CAAC;AACH,CAAC;AAGM,SAAS,sCAA8D;AAC5E,SAAO;AACT;AAOO,SAAS,6BAA6B,SAAsD;AACjG,SAAO,iCAAiC,gBAAgB,EAAE,IAAI,OAAO;AACvE;AAMO,IAAM,+BAAN,MAA4E;AAAA,EAChE;AAAA,EACA,WAAsC,oBAAI,IAAI;AAAA,EAC9C;AAAA,EACA;AAAA,EAEjB,YACE,UACA,QACA,QACA;AACA,SAAK,SAAS,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAC7C,SAAK,SAAS,UAAU,aAAa,EAAE,WAAW,kCAAkC,CAAC;AACrF,SAAK,WACH,WAAW,SAAY,mCAAmC,IAAI,uBAAuB;AACvF,eAAW,WAAW,UAAU;AAC9B,WAAK,SAAS,IAAI,QAAQ,MAAM,OAAO;AACvC,WAAK,SAAS,WAAW,QAAQ,MAAM,KAAK,OAAO,aAAa,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,SACA,MACA,cACkE;AAClE,UAAM,aAAa,QAAQ;AAC3B,UAAM,mBAA8B,CAAC;AACrC,QAAI;AAEJ,UAAM,gBAAgB,MAAM,KAAK,mBAAmB,SAAS,IAAI;AACjE,QAAI,cAAc,IAAI;AACpB,aAAO,GAAG,EAAE,UAAU,cAAc,OAAO,YAAY,YAAY,cAAc,MAAM,CAAC;AAAA,IAC1F;AACA,gBAAY,cAAc;AAE1B,QAAI,CAAC,KAAK,OAAO,kBAAkB,EAAE,qBAAqB,eAAe;AACvE,aAAO,IAAI,SAAS;AAAA,IACtB;AAEA,eAAW,OAAO,KAAK,gBAAgB,YAAY,YAAY,EAAE;AAAA,MAC/D;AAAA,MACA,KAAK,OAAO;AAAA,IACd,GAAG;AACD,YAAM,kBAAkB,KAAK,SAAS,IAAI,GAAG;AAC7C,UAAI,CAAC,gBAAiB;AACtB,uBAAiB,KAAK,GAAG;AACzB,WAAK,OAAO,KAAK,uBAAuB,EAAE,MAAM,YAAY,IAAI,IAAI,CAAC;AACrE,YAAM,SAAS,MAAM,KAAK,mBAAmB,iBAAiB,IAAI;AAClE,UAAI,OAAO,IAAI;AACb,eAAO,GAAG;AAAA,UACR,UAAU,OAAO;AAAA,UACjB,YAAY;AAAA,UACZ,cAAc;AAAA,UACd;AAAA,QACF,CAAC;AAAA,MACH;AACA,kBAAY,OAAO;AAAA,IACrB;AAEA,SAAK,OAAO,KAAK,gCAAgC,EAAE,YAAY,iBAAiB,CAAC;AACjF,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA,EAEA,kBAA0C;AACxC,UAAM,YAAY,KAAK,SAAS,gBAAgB;AAChD,UAAM,OAAiD,CAAC;AACxD,QAAI,eAAe;AACnB,eAAW,QAAQ,KAAK,SAAS,KAAK,GAAG;AACvC,YAAM,WAAW,UAAU,IAAI,IAAI;AACnC,UAAI,CAAC,SAAU;AACf,YAAM,UAAU,SAAS,UAAU;AACnC,UAAI,QAAS;AACb,WAAK,KAAK;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,iBAAiB,SAAS;AAAA,MAC5B,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL;AAAA,MACA,eAAe,eAAe;AAAA,MAC9B;AAAA,MACA,WAAW,gBAAgB,EAAE,IAAI;AAAA,IACnC;AAAA,EACF;AAAA,EAEA,sBAA4D;AAC1D,UAAM,eAAe,KAAK,SAAS,gBAAgB;AACnD,UAAM,YAAY,oBAAI,IAAqC;AAC3D,eAAW,QAAQ,KAAK,SAAS,KAAK,GAAG;AACvC,YAAM,WAAW,aAAa,IAAI,IAAI;AACtC,UAAI,aAAa,QAAW;AAC1B,kBAAU,IAAI,MAAM,QAAQ;AAAA,MAC9B;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,SAAwB;AACnC,SAAK,SAAS,MAAM,OAAO;AAC3B,SAAK,OAAO,KAAK,iBAAiB,EAAE,QAAQ,CAAC;AAAA,EAC/C;AAAA,EAEA,mBAAyB;AACvB,SAAK,SAAS,SAAS;AACvB,SAAK,OAAO,KAAK,oBAAoB;AAAA,EACvC;AAAA,EAEA,uBAAuB,UAA4C;AACjE,SAAK,SAAS,6BAA6B,QAAQ;AAAA,EACrD;AAAA,EAEA,MAAc,mBACZ,SACA,MACuD;AACvD,UAAM,UAAU,KAAK,SAAS,WAAW,QAAQ,IAAI;AACrD,UAAM,SAAS,MAAM,QAAQ,QAAQ,YAAY;AAC/C,YAAM,aAAa,MAAM,QAAQ,QAAQ,IAAI;AAC7C,UAAI,CAAC,WAAW,IAAI;AAClB,gBAAQ,cAAc,sBAAsB,WAAW,MAAM,IAAI,CAAC;AAClE,cAAM,eAAe,IAAI,MAAM,WAAW,MAAM,OAAO;AACvD,QAAC,aAAgD,WAAW,WAAW;AACvE,cAAM;AAAA,MACR;AACA,aAAO,WAAW;AAAA,IACpB,CAAC;AAED,QAAI,CAAC,OAAO,IAAI;AACd,UAAI,OAAO,MAAM,qBAAqB,eAAgB,QAAO,IAAI,OAAO,KAAK;AAC7E,YAAM,UAAU,OAAO,MAAM;AAC7B,UAAI,SAAS,SAAU,QAAO,IAAI,QAAQ,QAAQ;AAClD,aAAO,IAAI,OAAO,KAAK;AAAA,IACzB;AACA,WAAO,GAAG,OAAO,KAAK;AAAA,EACxB;AAAA,EAEQ,gBAAgB,YAAqB,cAAwC;AACnF,UAAM,QACJ,iBAAiB,SACb,4BAA4B,cAAc,qBAAqB,YAAY,CAAC,IAC5E,KAAK,OAAO;AAClB,WAAO,CAAC,GAAG,KAAK,EAAE;AAAA,MAChB,CAAC,QAAQ,QAAQ,cAAc,CAAC,KAAK,SAAS,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,GAAG;AAAA,IACpF;AAAA,EACF;AACF;AAGO,SAAS,mCACd,UACA,QACA,QAC8B;AAC9B,SAAO,IAAI,6BAA6B,UAAU,QAAQ,MAAM;AAClE;","names":[]}

package/dist/{chunk-NBMWONHE.js → chunk-OGHEKPLD.js}

@@ -127,6 +127,10 @@ function inSandboxEnv() {
   }
   return false;
 }
+function sandboxRootFromEnv() {
+  const raw = process.env["NEXUS_SANDBOX_ROOT"]?.trim();
+  return raw !== void 0 && raw !== "" ? resolve2(raw) : void 0;
+}
 function checkExplicitEnv(cwd) {
   const fromEnv = process.env["NEXUS_DATA_DIR"]?.trim();
   if (fromEnv !== void 0 && fromEnv !== "") {
@@ -146,7 +150,12 @@ function checkHeuristics(cwd) {
     return { portable: true, dataDir: join(cwd, ".nexus-agents"), reason: "home-unwritable" };
   }
   if (inSandboxEnv()) {
-    return { portable: true, dataDir: join(cwd, ".nexus-agents"), reason: "container-env" };
+    const declaredRoot = sandboxRootFromEnv();
+    return {
+      portable: true,
+      dataDir: join(declaredRoot ?? cwd, ".nexus-agents"),
+      reason: "container-env"
+    };
   }
   return null;
 }
@@ -383,4 +392,4 @@ export {
   getPerRepoSubdirs,
   sessionsDbPath
 };
-//# sourceMappingURL=chunk-NBMWONHE.js.map
+//# sourceMappingURL=chunk-OGHEKPLD.js.map

package/dist/{chunk-NBMWONHE.js.map → chunk-OGHEKPLD.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/config/nexus-data-dir.ts","../src/config/sandbox-detection.ts","../src/config/repo-root-detection.ts","../src/config/portable-mode.ts"],"sourcesContent":["/**\n * Nexus runtime data directory resolver (#2302, child of #2301).\n *\n * Returns the absolute path under which nexus-agents stores runtime state.\n * Two categories of state exist (epic #2872, vote #2876):\n *\n * - **Per-repo** state (sessions, checkpoints, traces, runs, audit,\n *   pipeline, tasks) — tied to the work happening in a specific codebase.\n *   When `NEXUS_REPO_PREFERRED=1` is set and the caller is inside a git\n *   repo, these resolve to `<repo-root>/.nexus-agents/<subdir>/`.\n * - **Cross-repo** state (learning, voting, memory, weather, research,\n *   auth, usage, models manifest) — accumulates across the operator's\n *   whole workflow. Always resolves to `~/.nexus-agents/<subdir>/` so the\n *   learning/routing feedback loop from #1389 / #1407 keeps working.\n *\n * Resolution order (first match wins):\n * 1. `NEXUS_DATA_DIR` env var if set + non-empty. Wins for both categories\n *    — the operator's explicit choice overrides the split.\n * 2. Sandbox-mode default (#2501): when `NEXUS_SANDBOX` is set, use\n *    `${NEXUS_SANDBOX_ROOT ?? '/'}/.nexus-agents`. Sandboxed deployments\n *    typically mount a multi-repo root; state goes there, shared across\n *    repo subfolders rather than buried inside one.\n * 3. Per-repo subdirs (when a repo root is known AND `NEXUS_REPO_PREFERRED`\n *    is not explicitly `'0'`): `<repo-root>/.nexus-agents/<subdir>/`. The\n *    repo root is the active workspace root when one has been set via\n *    `setActiveWorkspaceRoot()` (the MCP server derives it from the client's\n *    declared `roots`, MCP spec — see #3991), otherwise `findRepoRoot(cwd)`.\n *    The active-root path exists because a globally-installed MCP server runs\n *    with `process.cwd()` outside the repo, so cwd-based detection would\n *    wrongly route per-repo state to homedir. Auto-adds `.nexus-agents/` to\n *    the repo's `.gitignore` on first resolution (fail-closed).\n * 4. Cross-repo subdirs when `~/.nexus-agents/` is unwritable AND we're\n *    in a repo: per-repo fallback at `<repo-root>/.nexus-agents/<subdir>/`\n *    with one-time stderr announce. Issue #2888 — gives sandbox users\n *    a working `research/`, `memory/`, etc. without env-var wrangling\n *    while preserving the vote #2876 default for normal-machine users.\n * 5. `<homedir>/.nexus-agents` (cross-repo state on normal machines,\n *    plus everything when not in a git repo or when\n *    `NEXUS_REPO_PREFERRED=0`).\n *\n * `NEXUS_REPO_PREFERRED` defaults **ON** as of this release per vote\n * #2876. Escape hatches preserved:\n *   - `NEXUS_REPO_PREFERRED=0` — fully opt out (homedir for everything).\n *   - `NEXUS_DATA_DIR=~/.nexus-agents` — explicit override wins over\n *     the tier and the categorization both.\n *   - `nexus-agents migrate` (#2879) — relocate existing homedir state\n *     into `<repo>/.nexus-agents/` before flipping in production.\n *\n * @module config/nexus-data-dir\n */\n\nimport {\n  accessSync,\n  constants as fsConstants,\n  copyFileSync,\n  existsSync,\n  mkdirSync,\n  realpathSync,\n  renameSync,\n  statSync,\n  unlinkSync,\n} from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, isAbsolute, join, resolve } from 'node:path';\n\nimport { detectSandbox } from './sandbox-detection.js';\nimport { findRepoRoot } from './repo-root-detection.js';\nimport { ensureGitignored } from './portable-mode.js';\n\n/**\n * Subdirs scoped to a single repo's work (per the epic #2872 vote).\n * When `NEXUS_REPO_PREFERRED=1` and the caller is inside a git repo, these\n * route to `<repo-root>/.nexus-agents/`; otherwise homedir. The complement\n * (everything not in this set) always goes to homedir so cross-project\n * learning state stays intact.\n *\n * Source-of-truth for the categorization: vote #2876 conditions + audit\n * thread on epic #2872. Adding a new entry here is the appropriate way to\n * mark new state as per-repo — do that as a deliberate decision, not by\n * default.\n */\nconst PER_REPO_SUBDIRS: ReadonlySet<string> = new Set([\n  // Scratch space for short-lived work (worktrees, prompt files, MCP configs).\n  // Per-repo because a throwaway worktree of repo A is meaningless to repo B,\n  // and because containing it here keeps it inside the already-gitignored\n  // `.nexus-agents/` tree instead of accumulating in a shared `/tmp` nobody\n  // reaps. A full `/tmp` is not a theoretical problem: it silently broke this\n  // repo's own test suite, with ~1,100 files failing to COLLECT and zero\n  // assertion failures, which reads like a code fault and is not one.\n  'tmp',\n  'sessions',\n  'checkpoints',\n  'traces',\n  'runs',\n  'audit',\n  'pipeline',\n  'tasks',\n  // Async-mode job results (#3042 / epic #2631). Tied to work happening\n  // in a specific codebase — a job dispatched on repo A shouldn't be\n  // polled-against on repo B, which would happen if jobs/ were homedir-scoped.\n  'jobs',\n  // CI health-check events (#3076 / #3084). Per-repo because outages\n  // reported via `ci_health_check({ repo })` are repo-correlated; a wedge\n  // on repo A's queue does not predict repo B's health.\n  'ci-health',\n  // Governance artifacts — the runtime authentic-vote-record ledger\n  // (`governance/vote-records.jsonl`, #3897/#3927/#3991). Per-repo because a\n  // promotion proposal is scoped to the codebase being changed; with\n  // `NEXUS_REPO_PREFERRED=1` (default) these route to\n  // `<repo>/.nexus-agents/governance/` (gitignored), and to\n  // `~/.nexus-agents/governance/` otherwise (global / non-repo install). This\n  // is DISTINCT from the committed `<repo>/governance/vote-records.jsonl`\n  // ledger the promotion gate reads — that artifact is reached only via the\n  // explicit `NEXUS_VOTE_RECORDS_PATH` override (#3991).\n  'governance',\n]);\n\n/** Returns the absolute path to the nexus-agents data directory. */\nexport function getNexusDataDir(): string {\n  const fromEnv = process.env['NEXUS_DATA_DIR']?.trim();\n  if (fromEnv !== undefined && fromEnv !== '') {\n    return resolve(fromEnv);\n  }\n  const sandbox = detectSandbox();\n  if (sandbox.active) {\n    return resolve(sandbox.root ?? '/', '.nexus-agents');\n  }\n  return join(homedir(), '.nexus-agents');\n}\n\n/**\n * No-op kept for source-compatibility with consumers that called this\n * earlier in development. The resolver is no longer cached, so resetting\n * is unnecessary. Kept exported (rather than removed) to avoid breaking\n * imports in tests that may have already adopted it.\n */\nexport function resetNexusDataDirCache(): void {\n  // intentionally empty — see module docstring\n}\n\n/**\n * Tracks per-process state for the auto-gitignore wiring: we only need\n * to (a) probe + append to `.gitignore` once per repo, and (b) bail\n * cleanly if the operator has explicitly silenced the auto-add via\n * `NEXUS_GITIGNORE_AUTO=0`. Reset in tests via the helper below.\n */\nconst gitignoredRoots = new Set<string>();\n\n/** Test helper — clears the auto-gitignore \"already did this\" memo. */\nexport function _resetGitignoreMemoForTests(): void {\n  gitignoredRoots.clear();\n}\n\n/**\n * Active workspace root, when known from a source more authoritative than\n * `process.cwd()`. Set by the MCP server (#3991) from the client's declared\n * `roots` (MCP spec) once the initialize handshake completes, because a\n * globally-installed server runs with cwd OUTSIDE the repo being worked on —\n * so cwd-based repo detection would route per-repo `.nexus-agents` state to\n * homedir instead of `<repo>/.nexus-agents/`. CLI / in-repo callers never set\n * this, so they keep resolving via `findRepoRoot(cwd)` exactly as before.\n */\nlet activeWorkspaceRoot: string | undefined;\n\n/**\n * Records the active workspace root for repo-scoped data resolution. The\n * value is cross-trust-boundary input (it arrives over the MCP transport from\n * the client), so it is validated before use: resolved to an absolute path,\n * canonicalized via `realpathSync` (defeats symlink games), and required to\n * be an existing directory. Returns `true` when accepted, `false` when the\n * value is empty/invalid (in which case the previous root is left untouched).\n * Passing `null`/empty explicitly clears any previously-set root.\n */\nexport function setActiveWorkspaceRoot(root: string | null | undefined): boolean {\n  const trimmed = root?.trim();\n  if (trimmed === undefined || trimmed === '') {\n    activeWorkspaceRoot = undefined;\n    return false;\n  }\n  try {\n    const canonical = realpathSync(resolve(trimmed));\n    if (!isAbsolute(canonical) || !statSync(canonical).isDirectory()) return false;\n    activeWorkspaceRoot = canonical;\n    return true;\n  } catch {\n    // Nonexistent path, permission error, or broken symlink — reject and keep\n    // whatever was set before so a bad late signal can't corrupt resolution.\n    return false;\n  }\n}\n\n/** Returns the active workspace root if one has been set, else `undefined`. */\nexport function getActiveWorkspaceRoot(): string | undefined {\n  return activeWorkspaceRoot;\n}\n\n/** Test helper — clears the active workspace root memo. */\nexport function _resetActiveWorkspaceRootForTests(): void {\n  activeWorkspaceRoot = undefined;\n}\n\n/**\n * Returns the repo-scoped `.nexus-agents/` directory if all of the\n * following hold: `NEXUS_REPO_PREFERRED` is NOT explicitly `'0'` (it\n * defaults ON as of vote #2876), `NEXUS_DATA_DIR` is not explicitly set\n * (explicit override always wins), no sandbox is active, and a repo root is\n * known — either the active workspace root (set via\n * `setActiveWorkspaceRoot()`) or an ancestor `.git` found by\n * `findRepoRoot(cwd)`.\n *\n * Side effect: on the first successful resolution per process per repo,\n * appends `.nexus-agents/` to the repo's `.gitignore` if not already\n * present. The operator can silence this with `NEXUS_GITIGNORE_AUTO=0`\n * (e.g. on CI runners with a frozen working tree).\n *\n * Returns `null` when any precondition fails; callers fall back to\n * `getNexusDataDir()` (homedir).\n */\nexport function getNexusRepoDir(): string | null {\n  if (process.env['NEXUS_REPO_PREFERRED'] === '0') return null;\n  const fromEnv = process.env['NEXUS_DATA_DIR']?.trim();\n  if (fromEnv !== undefined && fromEnv !== '') return null;\n  if (detectSandbox().active) return null;\n  // Prefer the MCP-client-declared workspace root (#3991) when the server has\n  // set it; fall back to walking up from cwd for CLI / in-repo callers.\n  const root = activeWorkspaceRoot ?? findRepoRoot(process.cwd());\n  if (root === null) return null;\n  maybeAutoGitignore(root);\n  return join(root, '.nexus-agents');\n}\n\n/**\n * Best-effort fail-closed wiring: once per process per repo, ensure\n * `.nexus-agents/` is in `<repo>/.gitignore`. Silenced via\n * `NEXUS_GITIGNORE_AUTO=0`. Failures are non-fatal — the helper logs\n * to stderr and continues.\n */\nfunction maybeAutoGitignore(repoRoot: string): void {\n  if (process.env['NEXUS_GITIGNORE_AUTO'] === '0') return;\n  if (gitignoredRoots.has(repoRoot)) return;\n  gitignoredRoots.add(repoRoot);\n  // Only attempt when the repo root looks real — avoid spamming stderr\n  // from temp-dir test fixtures that race the lifecycle.\n  if (!existsSync(repoRoot)) return;\n  ensureGitignored(repoRoot, '.nexus-agents/');\n}\n\n/**\n * Per-process memo: was the homedir base directory found writable on first\n * probe? Used to short-circuit the sandbox-fallback decision in\n * `nexusDataPath()` without spending a syscall on every call.\n */\nlet homedirWritable: boolean | undefined;\n\n/** Per-process memo: have we already announced a fallback for this subdir? */\nconst announcedFallbacks = new Set<string>();\n\n/** Test helper — clears the homedir-writability + announcement memos. */\nexport function _resetWritabilityMemoForTests(): void {\n  homedirWritable = undefined;\n  announcedFallbacks.clear();\n}\n\n/**\n * Returns true if `getNexusDataDir()` resolves to a writable location. Probed\n * once per process and memo'd — flips the sandbox-fallback on/off for\n * cross-repo subdirs. `mkdirSync(recursive: true)` is the safest probe\n * because it both creates the dir if missing and surfaces ENOENT/EACCES\n * issues at the same point. Failures here are non-fatal — they just route\n * cross-repo state to the per-repo fallback (issue #2888).\n */\nfunction isHomedirBaseWritable(): boolean {\n  if (homedirWritable !== undefined) return homedirWritable;\n  const base = getNexusDataDir();\n  try {\n    mkdirSync(base, { recursive: true });\n    accessSync(base, fsConstants.W_OK);\n    homedirWritable = true;\n  } catch {\n    homedirWritable = false;\n  }\n  return homedirWritable;\n}\n\n/**\n * Emit a one-time stderr warning when a cross-repo subdir falls back to\n * the per-repo location. Operators in sandboxes get a clear signal about\n * what happened without per-call noise.\n */\nfunction announceCrossRepoFallback(subdir: string, repoPath: string): void {\n  if (announcedFallbacks.has(subdir)) return;\n  announcedFallbacks.add(subdir);\n  process.stderr.write(\n    `[nexus] ${subdir}: homedir ~/.nexus-agents is not writable; ` +\n      `using per-repo fallback at ${repoPath}. See docs/guides/SANDBOXED-USAGE.md.\\n`\n  );\n}\n\n/**\n * Returns a path joined under the appropriate data directory for the\n * given subdir.\n *\n * Routing decision (first match wins):\n * 1. **Per-repo subdir + in a repo + `NEXUS_REPO_PREFERRED` not '0'** →\n *    `<repo>/.nexus-agents/<subdir>/...`. Standard behavior since #2884.\n * 2. **Cross-repo subdir + homedir unwritable + in a repo** →\n *    `<repo>/.nexus-agents/<subdir>/...` as a sandbox-friendly fallback\n *    (issue #2888). Emits a one-time stderr warning per subdir.\n * 3. **Otherwise** → `<homedir>/.nexus-agents/<subdir>/...`. If homedir\n *    is also unwritable, the actual write will surface the error.\n *\n * Existing callers don't need to change — the routing decision is driven\n * by the first segment, not by caller-declared intent.\n */\nexport function nexusDataPath(...segments: string[]): string {\n  const first = segments[0];\n\n  // Tier 1: per-repo subdir + repo-preferred default.\n  if (first !== undefined && PER_REPO_SUBDIRS.has(first)) {\n    const repoDir = getNexusRepoDir();\n    if (repoDir !== null) {\n      return join(repoDir, ...segments);\n    }\n  }\n\n  // Tier 2: cross-repo subdir but homedir isn't reachable. Fall back to\n  // the per-repo location if we're in a repo, so sandbox users get a\n  // working `research/`, `memory/`, etc. without manual env-var setup.\n  // Vote #2876 preserved: this only fires when homedir is physically\n  // unreachable; normal-machine users see no change.\n  if (first !== undefined && !isHomedirBaseWritable()) {\n    const repoDir = getNexusRepoDir();\n    if (repoDir !== null) {\n      const fallbackPath = join(repoDir, ...segments);\n      announceCrossRepoFallback(first, fallbackPath);\n      return fallbackPath;\n    }\n    // No repo to fall back to AND homedir unreachable — return the\n    // homedir path anyway. The caller's eventual write will surface\n    // the underlying EACCES/ENOENT, which is the right error to show\n    // because the environment is genuinely broken at that point.\n  }\n\n  return join(getNexusDataDir(), ...segments);\n}\n\n/**\n * Like `nexusDataPath()` but eagerly creates the parent directory so\n * callers don't have to remember `mkdirSync(dirname(p), { recursive: true })`\n * before every write. Issue #2890. Use when the returned path will be\n * written to immediately; for read-only resolution prefer `nexusDataPath()`.\n *\n * If the call resolves to a directory (single segment or no segments),\n * the target IS the resolved path. If it resolves to a file (multiple\n * segments), the target is its parent.\n */\nexport function nexusDataPathEnsure(...segments: string[]): string {\n  const resolved = nexusDataPath(...segments);\n  const target = segments.length > 1 ? dirname(resolved) : resolved;\n  mkdirSync(target, { recursive: true });\n  return resolved;\n}\n\n/**\n * Explicitly homedir-scoped path. Use this in code that handles\n * cross-project state (routing memory, model registry cache, auth,\n * research catalog) where you want a hard guarantee that the resolver\n * never routes per-repo, even if a new subdir gets accidentally added\n * to the `PER_REPO_SUBDIRS` allowlist later.\n */\nexport function nexusSharedPath(...segments: string[]): string {\n  return join(getNexusDataDir(), ...segments);\n}\n\n/**\n * Returns the read-only categorization used by `nexusDataPath()`.\n * Exposed for tests and for tooling that wants to introspect which\n * subdirs are per-repo (e.g. the `nexus-agents migrate` command).\n */\nexport function getPerRepoSubdirs(): ReadonlySet<string> {\n  return PER_REPO_SUBDIRS;\n}\n\n/** Per-process memo — the legacy session-DB relocation runs at most once. */\nlet legacySessionsDbMigrated = false;\n\n/** Test helper — clears the session-DB migration \"already did this\" memo. */\nexport function _resetSessionsDbMigrationMemoForTests(): void {\n  legacySessionsDbMigrated = false;\n}\n\n/** SQLite sidecar suffixes that must travel with the main DB file. */\nconst SQLITE_SIDECAR_SUFFIXES = ['', '-wal', '-shm', '-journal'] as const;\n\n/**\n * Resolves the session-database path, performing a one-time relocation\n * of any pre-#2902 database on the first call per process.\n *\n * The session DB is per-repo episodic state and belongs in the\n * `sessions/` bucket alongside the session journals — vote #2876\n * categorized `sessions/` as per-repo, and issue #2902 (consensus\n * 3/3) extended that to the DB. Before #2902 the DB resolved via\n * `nexusDataPath('sessions.db')`; because `sessions.db` is not a\n * per-repo first segment, that landed cross-repo at\n * `~/.nexus-agents/sessions.db`, so a DB started in one repo leaked\n * into every other repo.\n *\n * If a legacy DB exists at the old location and none exists at the\n * new one, the legacy file (and any SQLite sidecars) is moved so\n * existing session history is preserved rather than silently\n * orphaned. The move is best-effort: a failure leaves the legacy DB\n * untouched for manual recovery and the caller gets a fresh DB at the\n * new path. `NEXUS_DATA_DIR` / `NEXUS_REPO_PREFERRED` / the\n * `NEXUS_SESSIONS_DB` override all sit upstream of this resolver.\n */\nexport function sessionsDbPath(): string {\n  const target = nexusDataPath('sessions', 'sessions.db');\n  if (!legacySessionsDbMigrated) {\n    legacySessionsDbMigrated = true;\n    migrateLegacySessionsDb(target);\n  }\n  return target;\n}\n\n/** One-time relocation of a pre-#2902 session DB. Best-effort — see `sessionsDbPath`. */\nfunction migrateLegacySessionsDb(target: string): void {\n  const legacy = nexusDataPath('sessions.db'); // pre-#2902 resolution\n  if (legacy === target || !existsSync(legacy) || existsSync(target)) return;\n  try {\n    mkdirSync(dirname(target), { recursive: true });\n    for (const suffix of SQLITE_SIDECAR_SUFFIXES) {\n      const from = `${legacy}${suffix}`;\n      if (existsSync(from)) moveFile(from, `${target}${suffix}`);\n    }\n  } catch {\n    // Best-effort — a migration failure must never break session storage.\n  }\n}\n\n/** Moves a file, falling back to copy+unlink across a filesystem boundary. */\nfunction moveFile(from: string, to: string): void {\n  try {\n    renameSync(from, to);\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== 'EXDEV') throw err;\n    copyFileSync(from, to);\n    unlinkSync(from);\n  }\n}\n","/**\n * Sandbox detection (#2501, child 1 of epic #2500).\n *\n * nexus-agents needs to know whether it's running inside a host-provided\n * sandbox (Docker Desktop Sandbox + OpenCode, Codex sandbox, locked-down\n * CI runner) so it can adjust behaviour:\n *\n *   - default `NEXUS_DATA_DIR` to the multi-repo root rather than `~/...`\n *   - skip CLI subprocess detection (binaries aren't there)\n *   - fail-fast when the gateway is unreachable instead of degrading\n *   - suppress diagnostics that don't apply\n *\n * The signal is **explicit**: the image author (Dockerfile, devcontainer,\n * harness wrapper) sets `NEXUS_SANDBOX=<flavor>`. The flavor string is\n * for diagnostics + per-flavor branching (`docker-opencode`, `codex`,\n * `claude-code`, `ci-restricted`, …); presence is the on/off signal.\n *\n * A heuristic check runs alongside for verification — if `NEXUS_SANDBOX`\n * claims `docker-opencode` but `/.dockerenv` is missing, that's a\n * misconfiguration worth surfacing to the operator.\n *\n * @module config/sandbox-detection\n */\n\nimport { existsSync, readFileSync } from 'node:fs';\n\n/**\n * Heuristic detection result. Independent from the explicit\n * `NEXUS_SANDBOX` env var; produced by inspecting filesystem markers.\n */\nexport type SandboxHeuristic = 'docker' | 'podman' | 'unknown' | null;\n\nexport interface SandboxInfo {\n  /**\n   * True iff `NEXUS_SANDBOX` is set + non-empty. The explicit signal\n   * the rest of the codebase keys off — never `true` by heuristic alone.\n   */\n  readonly active: boolean;\n  /**\n   * Operator-supplied flavor string, e.g. `docker-opencode`. Undefined\n   * when `active === false` or the env var is empty.\n   */\n  readonly flavor: string | undefined;\n  /**\n   * Multi-repo root the user mounted. From `NEXUS_SANDBOX_ROOT`. Undefined\n   * when unset; consumers that need a default substitute `/`.\n   */\n  readonly root: string | undefined;\n  /**\n   * Independent heuristic match — `null` when we couldn't run the check,\n   * `'unknown'` when ran but no marker matched. Used by `doctor` to flag\n   * mismatches between the explicit signal and the runtime environment.\n   */\n  readonly heuristicMatch: SandboxHeuristic;\n}\n\n/**\n * Detect whether nexus-agents is running inside a host-provided sandbox.\n * Pure read of env + filesystem; no caching (cheap enough to recompute,\n * and tests routinely mutate process.env).\n */\nexport function detectSandbox(): SandboxInfo {\n  const flavorRaw = process.env['NEXUS_SANDBOX']?.trim();\n  const flavor = flavorRaw !== undefined && flavorRaw !== '' ? flavorRaw : undefined;\n  const active = flavor !== undefined;\n\n  const rootRaw = process.env['NEXUS_SANDBOX_ROOT']?.trim();\n  const root = rootRaw !== undefined && rootRaw !== '' ? rootRaw : undefined;\n\n  return {\n    active,\n    flavor,\n    root,\n    heuristicMatch: detectContainerHeuristic(),\n  };\n}\n\n/**\n * Look for filesystem markers indicating a container runtime. Used as a\n * cross-check against the explicit `NEXUS_SANDBOX` signal.\n *\n * Order of checks:\n *   1. `/.dockerenv` (Docker)\n *   2. `/run/.containerenv` (Podman)\n *   3. `/proc/1/cgroup` containing `docker` or `containerd` strings\n *\n * Returns `null` when none of the checks could run (non-Linux host with\n * no `/proc`, sandbox blocks `existsSync`, etc.) — distinct from\n * `'unknown'` (checks ran, no marker matched) so the doctor message can\n * differentiate \"we couldn't tell\" from \"we checked, no container\".\n */\nfunction detectContainerHeuristic(): SandboxHeuristic {\n  try {\n    if (existsSync('/.dockerenv')) return 'docker';\n    if (existsSync('/run/.containerenv')) return 'podman';\n    if (existsSync('/proc/1/cgroup')) {\n      const cgroup = readFileSync('/proc/1/cgroup', 'utf8');\n      if (/\\bdocker\\b/.test(cgroup)) return 'docker';\n      if (/\\bcontainerd\\b/.test(cgroup)) return 'docker';\n    }\n    return 'unknown';\n  } catch {\n    return null;\n  }\n}\n","/**\n * Repo-root detection — walks upward from a starting directory looking for\n * `.git` so callers can scope state to the current git repo. Built for\n * epic #2872 (issue #2882) to support the per-repo `.nexus-agents/` data\n * directory ratified by vote #2876.\n *\n * Defenses adopted:\n *   - Walks upward but stops at filesystem root (no infinite loop on\n *     symlinks-to-self).\n *   - Stops at filesystem boundary (different `stat.dev`) — refuses to\n *     escape across mount points. Prevents a sandboxed workdir from\n *     resolving a `.git` on the host filesystem.\n *   - Detects git worktrees: `.git` may be a *file* containing\n *     `gitdir: <path>` rather than a directory.\n *   - Realpath's the final root and rejects results that escape the\n *     starting cwd by symlink.\n *\n * Deferred (tracked separately; not blocking #2882):\n *   - CVE-2022-24765-style ownership check (refuse `.git` owned by a\n *     different uid than the running process). The git CLI added\n *     `safe.directory` for this; we don't have a comparable allowlist\n *     surface yet. In CI the heuristic is too noisy to be useful\n *     (runners often clone as a different uid than the workload).\n *     File-system isolation (the `stat.dev` check above) covers the\n *     bulk of the attack class.\n *\n * @module config/repo-root-detection\n */\n\nimport { existsSync, readFileSync, realpathSync, statSync } from 'node:fs';\nimport { dirname, isAbsolute, resolve } from 'node:path';\n\n/**\n * Walks upward from `start` looking for `.git` (file or directory).\n * Returns the absolute path to the directory containing it, or `null`.\n *\n * Worktrees: a `.git` file (not dir) with contents `gitdir: <path>` is\n * still recognised as marking the repo root. The pointed-to gitdir is\n * NOT followed — we just need the worktree's own root.\n *\n * Filesystem boundary: stops walking if the next ancestor lives on a\n * different filesystem (different `stat.dev`). This prevents a workdir\n * mounted inside a sandbox from finding a host-side `.git`.\n */\nexport function findRepoRoot(start: string): string | null {\n  if (!isAbsolute(start)) {\n    start = resolve(start);\n  }\n\n  let current: string;\n  try {\n    current = realpathSync(start);\n  } catch {\n    return null;\n  }\n\n  let startDev: number | undefined;\n  try {\n    startDev = statSync(current).dev;\n  } catch {\n    return null;\n  }\n\n  // Walk up. Depth cap is paranoid but bounds the loop on pathological\n  // symlinks even though realpathSync above should already prevent cycles.\n  for (let i = 0; i < 64; i++) {\n    if (isRepoRoot(current)) {\n      return current;\n    }\n    const parent = dirname(current);\n    if (parent === current) {\n      // Hit filesystem root.\n      return null;\n    }\n    try {\n      if (statSync(parent).dev !== startDev) {\n        // Crossed a mount point; refuse to escape.\n        return null;\n      }\n    } catch {\n      return null;\n    }\n    current = parent;\n  }\n  return null;\n}\n\n/** True iff `dir/.git` exists as a directory or a git-worktree marker file. */\nexport function isRepoRoot(dir: string): boolean {\n  const gitPath = `${dir}/.git`;\n  if (!existsSync(gitPath)) return false;\n  try {\n    const st = statSync(gitPath);\n    if (st.isDirectory()) return true;\n    if (st.isFile()) {\n      // Worktree: first line should be `gitdir: <path>`.\n      const head = readFileSync(gitPath, 'utf-8').slice(0, 256);\n      return head.startsWith('gitdir:');\n    }\n  } catch {\n    return false;\n  }\n  return false;\n}\n","/**\n * portable-mode — auto-detect sandboxed execution environments and\n * redirect nexus-agents data to a workspace-local directory.\n *\n * The existing `getNexusDataDir()` already respects `NEXUS_DATA_DIR` and\n * `NEXUS_PORTABLE_MODE`. This module wires up the *auto-detection* path\n * so operators running inside a Docker / restricted-FS / sandboxed\n * environment don't have to set the env vars manually — nexus-agents\n * notices and announces the flip.\n *\n * Source: Issue #2471 (epic #2467 child).\n *\n * Detection rules (first match wins):\n *   1. `NEXUS_DATA_DIR` already set → respect, no auto-detect\n *   2. `NEXUS_PORTABLE_MODE=0` → operator opted out, no auto-detect\n *   3. `NEXUS_PORTABLE_MODE=1` → portable mode, no detection needed\n *   4. Heuristic: home directory not writable\n *   5. Heuristic: container env vars set (KUBERNETES_SERVICE_HOST,\n *      DOCKER_CONTAINER, ECS_CONTAINER_METADATA_URI, SANDBOX, etc.)\n *\n * When portable mode fires:\n *   - Sets `process.env.NEXUS_DATA_DIR` to `<cwd>/.nexus-agents`\n *   - Announces once on stderr (subsequent calls are silent)\n *   - If cwd is a git repo, appends `.nexus-agents/` to .gitignore\n *\n * To force off: `NEXUS_PORTABLE_MODE=0`. To force on without heuristics:\n * `NEXUS_PORTABLE_MODE=1`. To override target dir: `NEXUS_DATA_DIR=...`.\n */\n\nimport { accessSync, constants, existsSync, readFileSync, appendFileSync, statSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join, resolve } from 'node:path';\n\n/** Container / sandbox environment variables that strongly imply portable mode. */\nconst SANDBOX_ENV_VARS: readonly string[] = [\n  'KUBERNETES_SERVICE_HOST',\n  'DOCKER_CONTAINER',\n  'ECS_CONTAINER_METADATA_URI',\n  'ECS_CONTAINER_METADATA_URI_V4',\n  'SANDBOX',\n  'NEXUS_SANDBOX',\n];\n\nlet DETECTED = false;\n\ninterface DetectionResult {\n  readonly portable: boolean;\n  readonly dataDir: string;\n  readonly reason:\n    | 'env-data-dir'\n    | 'env-opt-out'\n    | 'env-opt-in'\n    | 'home-unwritable'\n    | 'container-env'\n    | 'default';\n}\n\nfunction isHomeWritable(): boolean {\n  try {\n    const home = homedir();\n    if (!existsSync(home)) return false;\n    accessSync(home, constants.W_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction inSandboxEnv(): boolean {\n  for (const v of SANDBOX_ENV_VARS) {\n    const val = process.env[v];\n    if (val !== undefined && val !== '') return true;\n  }\n  return false;\n}\n\nfunction checkExplicitEnv(cwd: string): DetectionResult | null {\n  const fromEnv = process.env['NEXUS_DATA_DIR']?.trim();\n  if (fromEnv !== undefined && fromEnv !== '') {\n    return { portable: false, dataDir: resolve(fromEnv), reason: 'env-data-dir' };\n  }\n  const portableEnv = process.env['NEXUS_PORTABLE_MODE'];\n  if (portableEnv === '0' || portableEnv === 'false') {\n    return { portable: false, dataDir: join(homedir(), '.nexus-agents'), reason: 'env-opt-out' };\n  }\n  if (portableEnv === '1' || portableEnv === 'true') {\n    return { portable: true, dataDir: join(cwd, '.nexus-agents'), reason: 'env-opt-in' };\n  }\n  return null;\n}\n\nfunction checkHeuristics(cwd: string): DetectionResult | null {\n  if (!isHomeWritable()) {\n    return { portable: true, dataDir: join(cwd, '.nexus-agents'), reason: 'home-unwritable' };\n  }\n  if (inSandboxEnv()) {\n    return { portable: true, dataDir: join(cwd, '.nexus-agents'), reason: 'container-env' };\n  }\n  return null;\n}\n\n/**\n * Decide whether to flip nexus-agents to portable mode and what data dir\n * to use. Pure function; no side effects beyond reading env + filesystem.\n */\nexport function detectPortableMode(cwd: string = process.cwd()): DetectionResult {\n  return (\n    checkExplicitEnv(cwd) ??\n    checkHeuristics(cwd) ?? {\n      portable: false,\n      dataDir: join(homedir(), '.nexus-agents'),\n      reason: 'default',\n    }\n  );\n}\n\n/**\n * Apply detected portable mode at process startup. Idempotent (subsequent\n * calls are no-ops). Announces on stderr once when the auto-detection\n * heuristic triggers — env-opt-in/out doesn't announce because the\n * operator already knows.\n */\nexport function applyPortableMode(cwd: string = process.cwd()): void {\n  if (DETECTED) return;\n  DETECTED = true;\n\n  const result = detectPortableMode(cwd);\n\n  // No env, no heuristic match — nothing to do.\n  if (!result.portable) return;\n\n  // The heuristic-driven cases announce; explicit opt-in is silent.\n  if (result.reason === 'home-unwritable' || result.reason === 'container-env') {\n    process.stderr.write(\n      `[portable-mode] Sandbox detected (${result.reason}). Using ${result.dataDir} for all nexus-agents data.\\n` +\n        `                Set NEXUS_PORTABLE_MODE=0 to override; see docs/guides/SANDBOXED-USAGE.md\\n`\n    );\n  }\n\n  process.env['NEXUS_DATA_DIR'] = result.dataDir;\n\n  if (isInsideGitRepo(cwd)) {\n    ensureGitignored(cwd, '.nexus-agents/');\n  }\n}\n\nfunction isInsideGitRepo(cwd: string): boolean {\n  try {\n    const gitDir = join(cwd, '.git');\n    return existsSync(gitDir) && statSync(gitDir).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Append `entry` to `<cwd>/.gitignore` if not already present. Stderr\n * announce on the first append. Exported because the repo-preferred\n * resolver in `nexus-data-dir.ts` reuses the same auto-gitignore behavior\n * when `<repo>/.nexus-agents/` becomes the active data dir (epic #2872).\n */\nexport function ensureGitignored(cwd: string, entry: string): void {\n  const path = join(cwd, '.gitignore');\n  try {\n    const existing = existsSync(path) ? readFileSync(path, 'utf-8') : '';\n    const lines = existing.split('\\n').map((l) => l.trim());\n    if (lines.includes(entry) || lines.includes(entry.replace(/\\/$/, ''))) return;\n    const sep = existing.length > 0 && !existing.endsWith('\\n') ? '\\n' : '';\n    appendFileSync(path, `${sep}${entry}\\n`, 'utf-8');\n    process.stderr.write(\n      `[portable-mode] Added '${entry}' to ${path} so nexus-agents data is gitignored.\\n`\n    );\n  } catch (e: unknown) {\n    // Non-fatal — operator can add the line themselves.\n    const msg = e instanceof Error ? e.message : String(e);\n    process.stderr.write(\n      `[portable-mode] Could not auto-update ${path} (${msg}). Add '${entry}' manually if you don't want nexus-agents data tracked by git.\\n`\n    );\n  }\n}\n\n/** Test-only reset of the once-only state. */\nexport function _resetDetectedForTests(): void {\n  DETECTED = false;\n}\n"],"mappings":";AAmDA;AAAA,EACE,cAAAA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA,cAAAC;AAAA,EACA;AAAA,EACA,gBAAAC;AAAA,EACA;AAAA,EACA,YAAAC;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAAC,gBAAe;AACxB,SAAS,WAAAC,UAAS,cAAAC,aAAY,QAAAC,OAAM,WAAAC,gBAAe;;;ACvCnD,SAAS,YAAY,oBAAoB;AAqClC,SAAS,gBAA6B;AAC3C,QAAM,YAAY,QAAQ,IAAI,eAAe,GAAG,KAAK;AACrD,QAAM,SAAS,cAAc,UAAa,cAAc,KAAK,YAAY;AACzE,QAAM,SAAS,WAAW;AAE1B,QAAM,UAAU,QAAQ,IAAI,oBAAoB,GAAG,KAAK;AACxD,QAAM,OAAO,YAAY,UAAa,YAAY,KAAK,UAAU;AAEjE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,yBAAyB;AAAA,EAC3C;AACF;AAgBA,SAAS,2BAA6C;AACpD,MAAI;AACF,QAAI,WAAW,aAAa,EAAG,QAAO;AACtC,QAAI,WAAW,oBAAoB,EAAG,QAAO;AAC7C,QAAI,WAAW,gBAAgB,GAAG;AAChC,YAAM,SAAS,aAAa,kBAAkB,MAAM;AACpD,UAAI,aAAa,KAAK,MAAM,EAAG,QAAO;AACtC,UAAI,iBAAiB,KAAK,MAAM,EAAG,QAAO;AAAA,IAC5C;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AC3EA,SAAS,cAAAC,aAAY,gBAAAC,eAAc,cAAc,gBAAgB;AACjE,SAAS,SAAS,YAAY,eAAe;AActC,SAAS,aAAa,OAA8B;AACzD,MAAI,CAAC,WAAW,KAAK,GAAG;AACtB,YAAQ,QAAQ,KAAK;AAAA,EACvB;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,aAAa,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,eAAW,SAAS,OAAO,EAAE;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AAIA,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,QAAI,WAAW,OAAO,GAAG;AACvB,aAAO;AAAA,IACT;AACA,UAAM,SAAS,QAAQ,OAAO;AAC9B,QAAI,WAAW,SAAS;AAEtB,aAAO;AAAA,IACT;AACA,QAAI;AACF,UAAI,SAAS,MAAM,EAAE,QAAQ,UAAU;AAErC,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AACN,aAAO;AAAA,IACT;AACA,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAGO,SAAS,WAAW,KAAsB;AAC/C,QAAM,UAAU,GAAG,GAAG;AACtB,MAAI,CAACD,YAAW,OAAO,EAAG,QAAO;AACjC,MAAI;AACF,UAAM,KAAK,SAAS,OAAO;AAC3B,QAAI,GAAG,YAAY,EAAG,QAAO;AAC7B,QAAI,GAAG,OAAO,GAAG;AAEf,YAAM,OAAOC,cAAa,SAAS,OAAO,EAAE,MAAM,GAAG,GAAG;AACxD,aAAO,KAAK,WAAW,SAAS;AAAA,IAClC;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;AC1EA,SAAS,YAAY,WAAW,cAAAC,aAAY,gBAAAC,eAAc,gBAAgB,YAAAC,iBAAgB;AAC1F,SAAS,eAAe;AACxB,SAAS,MAAM,WAAAC,gBAAe;AAG9B,IAAM,mBAAsC;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAI,WAAW;AAcf,SAAS,iBAA0B;AACjC,MAAI;AACF,UAAM,OAAO,QAAQ;AACrB,QAAI,CAACH,YAAW,IAAI,EAAG,QAAO;AAC9B,eAAW,MAAM,UAAU,IAAI;AAC/B,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAwB;AAC/B,aAAW,KAAK,kBAAkB;AAChC,UAAM,MAAM,QAAQ,IAAI,CAAC;AACzB,QAAI,QAAQ,UAAa,QAAQ,GAAI,QAAO;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,KAAqC;AAC7D,QAAM,UAAU,QAAQ,IAAI,gBAAgB,GAAG,KAAK;AACpD,MAAI,YAAY,UAAa,YAAY,IAAI;AAC3C,WAAO,EAAE,UAAU,OAAO,SAASG,SAAQ,OAAO,GAAG,QAAQ,eAAe;AAAA,EAC9E;AACA,QAAM,cAAc,QAAQ,IAAI,qBAAqB;AACrD,MAAI,gBAAgB,OAAO,gBAAgB,SAAS;AAClD,WAAO,EAAE,UAAU,OAAO,SAAS,KAAK,QAAQ,GAAG,eAAe,GAAG,QAAQ,cAAc;AAAA,EAC7F;AACA,MAAI,gBAAgB,OAAO,gBAAgB,QAAQ;AACjD,WAAO,EAAE,UAAU,MAAM,SAAS,KAAK,KAAK,eAAe,GAAG,QAAQ,aAAa;AAAA,EACrF;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,KAAqC;AAC5D,MAAI,CAAC,eAAe,GAAG;AACrB,WAAO,EAAE,UAAU,MAAM,SAAS,KAAK,KAAK,eAAe,GAAG,QAAQ,kBAAkB;AAAA,EAC1F;AACA,MAAI,aAAa,GAAG;AAClB,WAAO,EAAE,UAAU,MAAM,SAAS,KAAK,KAAK,eAAe,GAAG,QAAQ,gBAAgB;AAAA,EACxF;AACA,SAAO;AACT;AAMO,SAAS,mBAAmB,MAAc,QAAQ,IAAI,GAAoB;AAC/E,SACE,iBAAiB,GAAG,KACpB,gBAAgB,GAAG,KAAK;AAAA,IACtB,UAAU;AAAA,IACV,SAAS,KAAK,QAAQ,GAAG,eAAe;AAAA,IACxC,QAAQ;AAAA,EACV;AAEJ;AAQO,SAAS,kBAAkB,MAAc,QAAQ,IAAI,GAAS;AACnE,MAAI,SAAU;AACd,aAAW;AAEX,QAAM,SAAS,mBAAmB,GAAG;AAGrC,MAAI,CAAC,OAAO,SAAU;AAGtB,MAAI,OAAO,WAAW,qBAAqB,OAAO,WAAW,iBAAiB;AAC5E,YAAQ,OAAO;AAAA,MACb,qCAAqC,OAAO,MAAM,YAAY,OAAO,OAAO;AAAA;AAAA;AAAA,IAE9E;AAAA,EACF;AAEA,UAAQ,IAAI,gBAAgB,IAAI,OAAO;AAEvC,MAAI,gBAAgB,GAAG,GAAG;AACxB,qBAAiB,KAAK,gBAAgB;AAAA,EACxC;AACF;AAEA,SAAS,gBAAgB,KAAsB;AAC7C,MAAI;AACF,UAAM,SAAS,KAAK,KAAK,MAAM;AAC/B,WAAOH,YAAW,MAAM,KAAKE,UAAS,MAAM,EAAE,YAAY;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQO,SAAS,iBAAiB,KAAa,OAAqB;AACjE,QAAM,OAAO,KAAK,KAAK,YAAY;AACnC,MAAI;AACF,UAAM,WAAWF,YAAW,IAAI,IAAIC,cAAa,MAAM,OAAO,IAAI;AAClE,UAAM,QAAQ,SAAS,MAAM,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACtD,QAAI,MAAM,SAAS,KAAK,KAAK,MAAM,SAAS,MAAM,QAAQ,OAAO,EAAE,CAAC,EAAG;AACvE,UAAM,MAAM,SAAS,SAAS,KAAK,CAAC,SAAS,SAAS,IAAI,IAAI,OAAO;AACrE,mBAAe,MAAM,GAAG,GAAG,GAAG,KAAK;AAAA,GAAM,OAAO;AAChD,YAAQ,OAAO;AAAA,MACb,0BAA0B,KAAK,QAAQ,IAAI;AAAA;AAAA,IAC7C;AAAA,EACF,SAAS,GAAY;AAEnB,UAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,YAAQ,OAAO;AAAA,MACb,yCAAyC,IAAI,KAAK,GAAG,WAAW,KAAK;AAAA;AAAA,IACvE;AAAA,EACF;AACF;;;AHlGA,IAAM,mBAAwC,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA;AACF,CAAC;AAGM,SAAS,kBAA0B;AACxC,QAAM,UAAU,QAAQ,IAAI,gBAAgB,GAAG,KAAK;AACpD,MAAI,YAAY,UAAa,YAAY,IAAI;AAC3C,WAAOG,SAAQ,OAAO;AAAA,EACxB;AACA,QAAM,UAAU,cAAc;AAC9B,MAAI,QAAQ,QAAQ;AAClB,WAAOA,SAAQ,QAAQ,QAAQ,KAAK,eAAe;AAAA,EACrD;AACA,SAAOC,MAAKC,SAAQ,GAAG,eAAe;AACxC;AAkBA,IAAM,kBAAkB,oBAAI,IAAY;AAgBxC,IAAI;AAWG,SAAS,uBAAuB,MAA0C;AAC/E,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,YAAY,UAAa,YAAY,IAAI;AAC3C,0BAAsB;AACtB,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,YAAYC,cAAaC,SAAQ,OAAO,CAAC;AAC/C,QAAI,CAACC,YAAW,SAAS,KAAK,CAACC,UAAS,SAAS,EAAE,YAAY,EAAG,QAAO;AACzE,0BAAsB;AACtB,WAAO;AAAA,EACT,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AA6BO,SAAS,kBAAiC;AAC/C,MAAI,QAAQ,IAAI,sBAAsB,MAAM,IAAK,QAAO;AACxD,QAAM,UAAU,QAAQ,IAAI,gBAAgB,GAAG,KAAK;AACpD,MAAI,YAAY,UAAa,YAAY,GAAI,QAAO;AACpD,MAAI,cAAc,EAAE,OAAQ,QAAO;AAGnC,QAAM,OAAO,uBAAuB,aAAa,QAAQ,IAAI,CAAC;AAC9D,MAAI,SAAS,KAAM,QAAO;AAC1B,qBAAmB,IAAI;AACvB,SAAOC,MAAK,MAAM,eAAe;AACnC;AAQA,SAAS,mBAAmB,UAAwB;AAClD,MAAI,QAAQ,IAAI,sBAAsB,MAAM,IAAK;AACjD,MAAI,gBAAgB,IAAI,QAAQ,EAAG;AACnC,kBAAgB,IAAI,QAAQ;AAG5B,MAAI,CAACC,YAAW,QAAQ,EAAG;AAC3B,mBAAiB,UAAU,gBAAgB;AAC7C;AAOA,IAAI;AAGJ,IAAM,qBAAqB,oBAAI,IAAY;AAgB3C,SAAS,wBAAiC;AACxC,MAAI,oBAAoB,OAAW,QAAO;AAC1C,QAAM,OAAO,gBAAgB;AAC7B,MAAI;AACF,cAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AACnC,IAAAC,YAAW,MAAM,YAAY,IAAI;AACjC,sBAAkB;AAAA,EACpB,QAAQ;AACN,sBAAkB;AAAA,EACpB;AACA,SAAO;AACT;AAOA,SAAS,0BAA0B,QAAgB,UAAwB;AACzE,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,qBAAmB,IAAI,MAAM;AAC7B,UAAQ,OAAO;AAAA,IACb,WAAW,MAAM,yEACe,QAAQ;AAAA;AAAA,EAC1C;AACF;AAkBO,SAAS,iBAAiB,UAA4B;AAC3D,QAAM,QAAQ,SAAS,CAAC;AAGxB,MAAI,UAAU,UAAa,iBAAiB,IAAI,KAAK,GAAG;AACtD,UAAM,UAAU,gBAAgB;AAChC,QAAI,YAAY,MAAM;AACpB,aAAOC,MAAK,SAAS,GAAG,QAAQ;AAAA,IAClC;AAAA,EACF;AAOA,MAAI,UAAU,UAAa,CAAC,sBAAsB,GAAG;AACnD,UAAM,UAAU,gBAAgB;AAChC,QAAI,YAAY,MAAM;AACpB,YAAM,eAAeA,MAAK,SAAS,GAAG,QAAQ;AAC9C,gCAA0B,OAAO,YAAY;AAC7C,aAAO;AAAA,IACT;AAAA,EAKF;AAEA,SAAOA,MAAK,gBAAgB,GAAG,GAAG,QAAQ;AAC5C;AAYO,SAAS,uBAAuB,UAA4B;AACjE,QAAM,WAAW,cAAc,GAAG,QAAQ;AAC1C,QAAM,SAAS,SAAS,SAAS,IAAIC,SAAQ,QAAQ,IAAI;AACzD,YAAU,QAAQ,EAAE,WAAW,KAAK,CAAC;AACrC,SAAO;AACT;AASO,SAAS,mBAAmB,UAA4B;AAC7D,SAAOD,MAAK,gBAAgB,GAAG,GAAG,QAAQ;AAC5C;AAOO,SAAS,oBAAyC;AACvD,SAAO;AACT;AAGA,IAAI,2BAA2B;AAQ/B,IAAM,0BAA0B,CAAC,IAAI,QAAQ,QAAQ,UAAU;AAuBxD,SAAS,iBAAyB;AACvC,QAAM,SAAS,cAAc,YAAY,aAAa;AACtD,MAAI,CAAC,0BAA0B;AAC7B,+BAA2B;AAC3B,4BAAwB,MAAM;AAAA,EAChC;AACA,SAAO;AACT;AAGA,SAAS,wBAAwB,QAAsB;AACrD,QAAM,SAAS,cAAc,aAAa;AAC1C,MAAI,WAAW,UAAU,CAACE,YAAW,MAAM,KAAKA,YAAW,MAAM,EAAG;AACpE,MAAI;AACF,cAAUC,SAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAC9C,eAAW,UAAU,yBAAyB;AAC5C,YAAM,OAAO,GAAG,MAAM,GAAG,MAAM;AAC/B,UAAID,YAAW,IAAI,EAAG,UAAS,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE;AAAA,IAC3D;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAGA,SAAS,SAAS,MAAc,IAAkB;AAChD,MAAI;AACF,eAAW,MAAM,EAAE;AAAA,EACrB,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,QAAS,OAAM;AAC3D,iBAAa,MAAM,EAAE;AACrB,eAAW,IAAI;AAAA,EACjB;AACF;","names":["accessSync","existsSync","realpathSync","statSync","homedir","dirname","isAbsolute","join","resolve","existsSync","readFileSync","existsSync","readFileSync","statSync","resolve","resolve","join","homedir","realpathSync","resolve","isAbsolute","statSync","join","existsSync","accessSync","join","dirname","existsSync","dirname"]}
+{"version":3,"sources":["../src/config/nexus-data-dir.ts","../src/config/sandbox-detection.ts","../src/config/repo-root-detection.ts","../src/config/portable-mode.ts"],"sourcesContent":["/**\n * Nexus runtime data directory resolver (#2302, child of #2301).\n *\n * Returns the absolute path under which nexus-agents stores runtime state.\n * Two categories of state exist (epic #2872, vote #2876):\n *\n * - **Per-repo** state (sessions, checkpoints, traces, runs, audit,\n *   pipeline, tasks) — tied to the work happening in a specific codebase.\n *   When `NEXUS_REPO_PREFERRED=1` is set and the caller is inside a git\n *   repo, these resolve to `<repo-root>/.nexus-agents/<subdir>/`.\n * - **Cross-repo** state (learning, voting, memory, weather, research,\n *   auth, usage, models manifest) — accumulates across the operator's\n *   whole workflow. Always resolves to `~/.nexus-agents/<subdir>/` so the\n *   learning/routing feedback loop from #1389 / #1407 keeps working.\n *\n * Resolution order (first match wins):\n * 1. `NEXUS_DATA_DIR` env var if set + non-empty. Wins for both categories\n *    — the operator's explicit choice overrides the split.\n * 2. Sandbox-mode default (#2501): when `NEXUS_SANDBOX` is set, use\n *    `${NEXUS_SANDBOX_ROOT ?? '/'}/.nexus-agents`. Sandboxed deployments\n *    typically mount a multi-repo root; state goes there, shared across\n *    repo subfolders rather than buried inside one.\n * 3. Per-repo subdirs (when a repo root is known AND `NEXUS_REPO_PREFERRED`\n *    is not explicitly `'0'`): `<repo-root>/.nexus-agents/<subdir>/`. The\n *    repo root is the active workspace root when one has been set via\n *    `setActiveWorkspaceRoot()` (the MCP server derives it from the client's\n *    declared `roots`, MCP spec — see #3991), otherwise `findRepoRoot(cwd)`.\n *    The active-root path exists because a globally-installed MCP server runs\n *    with `process.cwd()` outside the repo, so cwd-based detection would\n *    wrongly route per-repo state to homedir. Auto-adds `.nexus-agents/` to\n *    the repo's `.gitignore` on first resolution (fail-closed).\n * 4. Cross-repo subdirs when `~/.nexus-agents/` is unwritable AND we're\n *    in a repo: per-repo fallback at `<repo-root>/.nexus-agents/<subdir>/`\n *    with one-time stderr announce. Issue #2888 — gives sandbox users\n *    a working `research/`, `memory/`, etc. without env-var wrangling\n *    while preserving the vote #2876 default for normal-machine users.\n * 5. `<homedir>/.nexus-agents` (cross-repo state on normal machines,\n *    plus everything when not in a git repo or when\n *    `NEXUS_REPO_PREFERRED=0`).\n *\n * `NEXUS_REPO_PREFERRED` defaults **ON** as of this release per vote\n * #2876. Escape hatches preserved:\n *   - `NEXUS_REPO_PREFERRED=0` — fully opt out (homedir for everything).\n *   - `NEXUS_DATA_DIR=~/.nexus-agents` — explicit override wins over\n *     the tier and the categorization both.\n *   - `nexus-agents migrate` (#2879) — relocate existing homedir state\n *     into `<repo>/.nexus-agents/` before flipping in production.\n *\n * @module config/nexus-data-dir\n */\n\nimport {\n  accessSync,\n  constants as fsConstants,\n  copyFileSync,\n  existsSync,\n  mkdirSync,\n  realpathSync,\n  renameSync,\n  statSync,\n  unlinkSync,\n} from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, isAbsolute, join, resolve } from 'node:path';\n\nimport { detectSandbox } from './sandbox-detection.js';\nimport { findRepoRoot } from './repo-root-detection.js';\nimport { ensureGitignored } from './portable-mode.js';\n\n/**\n * Subdirs scoped to a single repo's work (per the epic #2872 vote).\n * When `NEXUS_REPO_PREFERRED=1` and the caller is inside a git repo, these\n * route to `<repo-root>/.nexus-agents/`; otherwise homedir. The complement\n * (everything not in this set) always goes to homedir so cross-project\n * learning state stays intact.\n *\n * Source-of-truth for the categorization: vote #2876 conditions + audit\n * thread on epic #2872. Adding a new entry here is the appropriate way to\n * mark new state as per-repo — do that as a deliberate decision, not by\n * default.\n */\nconst PER_REPO_SUBDIRS: ReadonlySet<string> = new Set([\n  // Scratch space for short-lived work (worktrees, prompt files, MCP configs).\n  // Per-repo because a throwaway worktree of repo A is meaningless to repo B,\n  // and because containing it here keeps it inside the already-gitignored\n  // `.nexus-agents/` tree instead of accumulating in a shared `/tmp` nobody\n  // reaps. A full `/tmp` is not a theoretical problem: it silently broke this\n  // repo's own test suite, with ~1,100 files failing to COLLECT and zero\n  // assertion failures, which reads like a code fault and is not one.\n  'tmp',\n  'sessions',\n  'checkpoints',\n  'traces',\n  'runs',\n  'audit',\n  'pipeline',\n  'tasks',\n  // Async-mode job results (#3042 / epic #2631). Tied to work happening\n  // in a specific codebase — a job dispatched on repo A shouldn't be\n  // polled-against on repo B, which would happen if jobs/ were homedir-scoped.\n  'jobs',\n  // CI health-check events (#3076 / #3084). Per-repo because outages\n  // reported via `ci_health_check({ repo })` are repo-correlated; a wedge\n  // on repo A's queue does not predict repo B's health.\n  'ci-health',\n  // Governance artifacts — the runtime authentic-vote-record ledger\n  // (`governance/vote-records.jsonl`, #3897/#3927/#3991). Per-repo because a\n  // promotion proposal is scoped to the codebase being changed; with\n  // `NEXUS_REPO_PREFERRED=1` (default) these route to\n  // `<repo>/.nexus-agents/governance/` (gitignored), and to\n  // `~/.nexus-agents/governance/` otherwise (global / non-repo install). This\n  // is DISTINCT from the committed `<repo>/governance/vote-records.jsonl`\n  // ledger the promotion gate reads — that artifact is reached only via the\n  // explicit `NEXUS_VOTE_RECORDS_PATH` override (#3991).\n  'governance',\n]);\n\n/** Returns the absolute path to the nexus-agents data directory. */\nexport function getNexusDataDir(): string {\n  const fromEnv = process.env['NEXUS_DATA_DIR']?.trim();\n  if (fromEnv !== undefined && fromEnv !== '') {\n    return resolve(fromEnv);\n  }\n  const sandbox = detectSandbox();\n  if (sandbox.active) {\n    return resolve(sandbox.root ?? '/', '.nexus-agents');\n  }\n  return join(homedir(), '.nexus-agents');\n}\n\n/**\n * No-op kept for source-compatibility with consumers that called this\n * earlier in development. The resolver is no longer cached, so resetting\n * is unnecessary. Kept exported (rather than removed) to avoid breaking\n * imports in tests that may have already adopted it.\n */\nexport function resetNexusDataDirCache(): void {\n  // intentionally empty — see module docstring\n}\n\n/**\n * Tracks per-process state for the auto-gitignore wiring: we only need\n * to (a) probe + append to `.gitignore` once per repo, and (b) bail\n * cleanly if the operator has explicitly silenced the auto-add via\n * `NEXUS_GITIGNORE_AUTO=0`. Reset in tests via the helper below.\n */\nconst gitignoredRoots = new Set<string>();\n\n/** Test helper — clears the auto-gitignore \"already did this\" memo. */\nexport function _resetGitignoreMemoForTests(): void {\n  gitignoredRoots.clear();\n}\n\n/**\n * Active workspace root, when known from a source more authoritative than\n * `process.cwd()`. Set by the MCP server (#3991) from the client's declared\n * `roots` (MCP spec) once the initialize handshake completes, because a\n * globally-installed server runs with cwd OUTSIDE the repo being worked on —\n * so cwd-based repo detection would route per-repo `.nexus-agents` state to\n * homedir instead of `<repo>/.nexus-agents/`. CLI / in-repo callers never set\n * this, so they keep resolving via `findRepoRoot(cwd)` exactly as before.\n */\nlet activeWorkspaceRoot: string | undefined;\n\n/**\n * Records the active workspace root for repo-scoped data resolution. The\n * value is cross-trust-boundary input (it arrives over the MCP transport from\n * the client), so it is validated before use: resolved to an absolute path,\n * canonicalized via `realpathSync` (defeats symlink games), and required to\n * be an existing directory. Returns `true` when accepted, `false` when the\n * value is empty/invalid (in which case the previous root is left untouched).\n * Passing `null`/empty explicitly clears any previously-set root.\n */\nexport function setActiveWorkspaceRoot(root: string | null | undefined): boolean {\n  const trimmed = root?.trim();\n  if (trimmed === undefined || trimmed === '') {\n    activeWorkspaceRoot = undefined;\n    return false;\n  }\n  try {\n    const canonical = realpathSync(resolve(trimmed));\n    if (!isAbsolute(canonical) || !statSync(canonical).isDirectory()) return false;\n    activeWorkspaceRoot = canonical;\n    return true;\n  } catch {\n    // Nonexistent path, permission error, or broken symlink — reject and keep\n    // whatever was set before so a bad late signal can't corrupt resolution.\n    return false;\n  }\n}\n\n/** Returns the active workspace root if one has been set, else `undefined`. */\nexport function getActiveWorkspaceRoot(): string | undefined {\n  return activeWorkspaceRoot;\n}\n\n/** Test helper — clears the active workspace root memo. */\nexport function _resetActiveWorkspaceRootForTests(): void {\n  activeWorkspaceRoot = undefined;\n}\n\n/**\n * Returns the repo-scoped `.nexus-agents/` directory if all of the\n * following hold: `NEXUS_REPO_PREFERRED` is NOT explicitly `'0'` (it\n * defaults ON as of vote #2876), `NEXUS_DATA_DIR` is not explicitly set\n * (explicit override always wins), no sandbox is active, and a repo root is\n * known — either the active workspace root (set via\n * `setActiveWorkspaceRoot()`) or an ancestor `.git` found by\n * `findRepoRoot(cwd)`.\n *\n * Side effect: on the first successful resolution per process per repo,\n * appends `.nexus-agents/` to the repo's `.gitignore` if not already\n * present. The operator can silence this with `NEXUS_GITIGNORE_AUTO=0`\n * (e.g. on CI runners with a frozen working tree).\n *\n * Returns `null` when any precondition fails; callers fall back to\n * `getNexusDataDir()` (homedir).\n */\nexport function getNexusRepoDir(): string | null {\n  if (process.env['NEXUS_REPO_PREFERRED'] === '0') return null;\n  const fromEnv = process.env['NEXUS_DATA_DIR']?.trim();\n  if (fromEnv !== undefined && fromEnv !== '') return null;\n  if (detectSandbox().active) return null;\n  // Prefer the MCP-client-declared workspace root (#3991) when the server has\n  // set it; fall back to walking up from cwd for CLI / in-repo callers.\n  const root = activeWorkspaceRoot ?? findRepoRoot(process.cwd());\n  if (root === null) return null;\n  maybeAutoGitignore(root);\n  return join(root, '.nexus-agents');\n}\n\n/**\n * Best-effort fail-closed wiring: once per process per repo, ensure\n * `.nexus-agents/` is in `<repo>/.gitignore`. Silenced via\n * `NEXUS_GITIGNORE_AUTO=0`. Failures are non-fatal — the helper logs\n * to stderr and continues.\n */\nfunction maybeAutoGitignore(repoRoot: string): void {\n  if (process.env['NEXUS_GITIGNORE_AUTO'] === '0') return;\n  if (gitignoredRoots.has(repoRoot)) return;\n  gitignoredRoots.add(repoRoot);\n  // Only attempt when the repo root looks real — avoid spamming stderr\n  // from temp-dir test fixtures that race the lifecycle.\n  if (!existsSync(repoRoot)) return;\n  ensureGitignored(repoRoot, '.nexus-agents/');\n}\n\n/**\n * Per-process memo: was the homedir base directory found writable on first\n * probe? Used to short-circuit the sandbox-fallback decision in\n * `nexusDataPath()` without spending a syscall on every call.\n */\nlet homedirWritable: boolean | undefined;\n\n/** Per-process memo: have we already announced a fallback for this subdir? */\nconst announcedFallbacks = new Set<string>();\n\n/** Test helper — clears the homedir-writability + announcement memos. */\nexport function _resetWritabilityMemoForTests(): void {\n  homedirWritable = undefined;\n  announcedFallbacks.clear();\n}\n\n/**\n * Returns true if `getNexusDataDir()` resolves to a writable location. Probed\n * once per process and memo'd — flips the sandbox-fallback on/off for\n * cross-repo subdirs. `mkdirSync(recursive: true)` is the safest probe\n * because it both creates the dir if missing and surfaces ENOENT/EACCES\n * issues at the same point. Failures here are non-fatal — they just route\n * cross-repo state to the per-repo fallback (issue #2888).\n */\nfunction isHomedirBaseWritable(): boolean {\n  if (homedirWritable !== undefined) return homedirWritable;\n  const base = getNexusDataDir();\n  try {\n    mkdirSync(base, { recursive: true });\n    accessSync(base, fsConstants.W_OK);\n    homedirWritable = true;\n  } catch {\n    homedirWritable = false;\n  }\n  return homedirWritable;\n}\n\n/**\n * Emit a one-time stderr warning when a cross-repo subdir falls back to\n * the per-repo location. Operators in sandboxes get a clear signal about\n * what happened without per-call noise.\n */\nfunction announceCrossRepoFallback(subdir: string, repoPath: string): void {\n  if (announcedFallbacks.has(subdir)) return;\n  announcedFallbacks.add(subdir);\n  process.stderr.write(\n    `[nexus] ${subdir}: homedir ~/.nexus-agents is not writable; ` +\n      `using per-repo fallback at ${repoPath}. See docs/guides/SANDBOXED-USAGE.md.\\n`\n  );\n}\n\n/**\n * Returns a path joined under the appropriate data directory for the\n * given subdir.\n *\n * Routing decision (first match wins):\n * 1. **Per-repo subdir + in a repo + `NEXUS_REPO_PREFERRED` not '0'** →\n *    `<repo>/.nexus-agents/<subdir>/...`. Standard behavior since #2884.\n * 2. **Cross-repo subdir + homedir unwritable + in a repo** →\n *    `<repo>/.nexus-agents/<subdir>/...` as a sandbox-friendly fallback\n *    (issue #2888). Emits a one-time stderr warning per subdir.\n * 3. **Otherwise** → `<homedir>/.nexus-agents/<subdir>/...`. If homedir\n *    is also unwritable, the actual write will surface the error.\n *\n * Existing callers don't need to change — the routing decision is driven\n * by the first segment, not by caller-declared intent.\n */\nexport function nexusDataPath(...segments: string[]): string {\n  const first = segments[0];\n\n  // Tier 1: per-repo subdir + repo-preferred default.\n  if (first !== undefined && PER_REPO_SUBDIRS.has(first)) {\n    const repoDir = getNexusRepoDir();\n    if (repoDir !== null) {\n      return join(repoDir, ...segments);\n    }\n  }\n\n  // Tier 2: cross-repo subdir but homedir isn't reachable. Fall back to\n  // the per-repo location if we're in a repo, so sandbox users get a\n  // working `research/`, `memory/`, etc. without manual env-var setup.\n  // Vote #2876 preserved: this only fires when homedir is physically\n  // unreachable; normal-machine users see no change.\n  if (first !== undefined && !isHomedirBaseWritable()) {\n    const repoDir = getNexusRepoDir();\n    if (repoDir !== null) {\n      const fallbackPath = join(repoDir, ...segments);\n      announceCrossRepoFallback(first, fallbackPath);\n      return fallbackPath;\n    }\n    // No repo to fall back to AND homedir unreachable — return the\n    // homedir path anyway. The caller's eventual write will surface\n    // the underlying EACCES/ENOENT, which is the right error to show\n    // because the environment is genuinely broken at that point.\n  }\n\n  return join(getNexusDataDir(), ...segments);\n}\n\n/**\n * Like `nexusDataPath()` but eagerly creates the parent directory so\n * callers don't have to remember `mkdirSync(dirname(p), { recursive: true })`\n * before every write. Issue #2890. Use when the returned path will be\n * written to immediately; for read-only resolution prefer `nexusDataPath()`.\n *\n * If the call resolves to a directory (single segment or no segments),\n * the target IS the resolved path. If it resolves to a file (multiple\n * segments), the target is its parent.\n */\nexport function nexusDataPathEnsure(...segments: string[]): string {\n  const resolved = nexusDataPath(...segments);\n  const target = segments.length > 1 ? dirname(resolved) : resolved;\n  mkdirSync(target, { recursive: true });\n  return resolved;\n}\n\n/**\n * Explicitly homedir-scoped path. Use this in code that handles\n * cross-project state (routing memory, model registry cache, auth,\n * research catalog) where you want a hard guarantee that the resolver\n * never routes per-repo, even if a new subdir gets accidentally added\n * to the `PER_REPO_SUBDIRS` allowlist later.\n */\nexport function nexusSharedPath(...segments: string[]): string {\n  return join(getNexusDataDir(), ...segments);\n}\n\n/**\n * Returns the read-only categorization used by `nexusDataPath()`.\n * Exposed for tests and for tooling that wants to introspect which\n * subdirs are per-repo (e.g. the `nexus-agents migrate` command).\n */\nexport function getPerRepoSubdirs(): ReadonlySet<string> {\n  return PER_REPO_SUBDIRS;\n}\n\n/** Per-process memo — the legacy session-DB relocation runs at most once. */\nlet legacySessionsDbMigrated = false;\n\n/** Test helper — clears the session-DB migration \"already did this\" memo. */\nexport function _resetSessionsDbMigrationMemoForTests(): void {\n  legacySessionsDbMigrated = false;\n}\n\n/** SQLite sidecar suffixes that must travel with the main DB file. */\nconst SQLITE_SIDECAR_SUFFIXES = ['', '-wal', '-shm', '-journal'] as const;\n\n/**\n * Resolves the session-database path, performing a one-time relocation\n * of any pre-#2902 database on the first call per process.\n *\n * The session DB is per-repo episodic state and belongs in the\n * `sessions/` bucket alongside the session journals — vote #2876\n * categorized `sessions/` as per-repo, and issue #2902 (consensus\n * 3/3) extended that to the DB. Before #2902 the DB resolved via\n * `nexusDataPath('sessions.db')`; because `sessions.db` is not a\n * per-repo first segment, that landed cross-repo at\n * `~/.nexus-agents/sessions.db`, so a DB started in one repo leaked\n * into every other repo.\n *\n * If a legacy DB exists at the old location and none exists at the\n * new one, the legacy file (and any SQLite sidecars) is moved so\n * existing session history is preserved rather than silently\n * orphaned. The move is best-effort: a failure leaves the legacy DB\n * untouched for manual recovery and the caller gets a fresh DB at the\n * new path. `NEXUS_DATA_DIR` / `NEXUS_REPO_PREFERRED` / the\n * `NEXUS_SESSIONS_DB` override all sit upstream of this resolver.\n */\nexport function sessionsDbPath(): string {\n  const target = nexusDataPath('sessions', 'sessions.db');\n  if (!legacySessionsDbMigrated) {\n    legacySessionsDbMigrated = true;\n    migrateLegacySessionsDb(target);\n  }\n  return target;\n}\n\n/** One-time relocation of a pre-#2902 session DB. Best-effort — see `sessionsDbPath`. */\nfunction migrateLegacySessionsDb(target: string): void {\n  const legacy = nexusDataPath('sessions.db'); // pre-#2902 resolution\n  if (legacy === target || !existsSync(legacy) || existsSync(target)) return;\n  try {\n    mkdirSync(dirname(target), { recursive: true });\n    for (const suffix of SQLITE_SIDECAR_SUFFIXES) {\n      const from = `${legacy}${suffix}`;\n      if (existsSync(from)) moveFile(from, `${target}${suffix}`);\n    }\n  } catch {\n    // Best-effort — a migration failure must never break session storage.\n  }\n}\n\n/** Moves a file, falling back to copy+unlink across a filesystem boundary. */\nfunction moveFile(from: string, to: string): void {\n  try {\n    renameSync(from, to);\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== 'EXDEV') throw err;\n    copyFileSync(from, to);\n    unlinkSync(from);\n  }\n}\n","/**\n * Sandbox detection (#2501, child 1 of epic #2500).\n *\n * nexus-agents needs to know whether it's running inside a host-provided\n * sandbox (Docker Desktop Sandbox + OpenCode, Codex sandbox, locked-down\n * CI runner) so it can adjust behaviour:\n *\n *   - default `NEXUS_DATA_DIR` to the multi-repo root rather than `~/...`\n *   - skip CLI subprocess detection (binaries aren't there)\n *   - fail-fast when the gateway is unreachable instead of degrading\n *   - suppress diagnostics that don't apply\n *\n * The signal is **explicit**: the image author (Dockerfile, devcontainer,\n * harness wrapper) sets `NEXUS_SANDBOX=<flavor>`. The flavor string is\n * for diagnostics + per-flavor branching (`docker-opencode`, `codex`,\n * `claude-code`, `ci-restricted`, …); presence is the on/off signal.\n *\n * A heuristic check runs alongside for verification — if `NEXUS_SANDBOX`\n * claims `docker-opencode` but `/.dockerenv` is missing, that's a\n * misconfiguration worth surfacing to the operator.\n *\n * @module config/sandbox-detection\n */\n\nimport { existsSync, readFileSync } from 'node:fs';\n\n/**\n * Heuristic detection result. Independent from the explicit\n * `NEXUS_SANDBOX` env var; produced by inspecting filesystem markers.\n */\nexport type SandboxHeuristic = 'docker' | 'podman' | 'unknown' | null;\n\nexport interface SandboxInfo {\n  /**\n   * True iff `NEXUS_SANDBOX` is set + non-empty. The explicit signal\n   * the rest of the codebase keys off — never `true` by heuristic alone.\n   */\n  readonly active: boolean;\n  /**\n   * Operator-supplied flavor string, e.g. `docker-opencode`. Undefined\n   * when `active === false` or the env var is empty.\n   */\n  readonly flavor: string | undefined;\n  /**\n   * Multi-repo root the user mounted. From `NEXUS_SANDBOX_ROOT`. Undefined\n   * when unset; consumers that need a default substitute `/`.\n   */\n  readonly root: string | undefined;\n  /**\n   * Independent heuristic match — `null` when we couldn't run the check,\n   * `'unknown'` when ran but no marker matched. Used by `doctor` to flag\n   * mismatches between the explicit signal and the runtime environment.\n   */\n  readonly heuristicMatch: SandboxHeuristic;\n}\n\n/**\n * Detect whether nexus-agents is running inside a host-provided sandbox.\n * Pure read of env + filesystem; no caching (cheap enough to recompute,\n * and tests routinely mutate process.env).\n */\nexport function detectSandbox(): SandboxInfo {\n  const flavorRaw = process.env['NEXUS_SANDBOX']?.trim();\n  const flavor = flavorRaw !== undefined && flavorRaw !== '' ? flavorRaw : undefined;\n  const active = flavor !== undefined;\n\n  const rootRaw = process.env['NEXUS_SANDBOX_ROOT']?.trim();\n  const root = rootRaw !== undefined && rootRaw !== '' ? rootRaw : undefined;\n\n  return {\n    active,\n    flavor,\n    root,\n    heuristicMatch: detectContainerHeuristic(),\n  };\n}\n\n/**\n * Look for filesystem markers indicating a container runtime. Used as a\n * cross-check against the explicit `NEXUS_SANDBOX` signal.\n *\n * Order of checks:\n *   1. `/.dockerenv` (Docker)\n *   2. `/run/.containerenv` (Podman)\n *   3. `/proc/1/cgroup` containing `docker` or `containerd` strings\n *\n * Returns `null` when none of the checks could run (non-Linux host with\n * no `/proc`, sandbox blocks `existsSync`, etc.) — distinct from\n * `'unknown'` (checks ran, no marker matched) so the doctor message can\n * differentiate \"we couldn't tell\" from \"we checked, no container\".\n */\nfunction detectContainerHeuristic(): SandboxHeuristic {\n  try {\n    if (existsSync('/.dockerenv')) return 'docker';\n    if (existsSync('/run/.containerenv')) return 'podman';\n    if (existsSync('/proc/1/cgroup')) {\n      const cgroup = readFileSync('/proc/1/cgroup', 'utf8');\n      if (/\\bdocker\\b/.test(cgroup)) return 'docker';\n      if (/\\bcontainerd\\b/.test(cgroup)) return 'docker';\n    }\n    return 'unknown';\n  } catch {\n    return null;\n  }\n}\n","/**\n * Repo-root detection — walks upward from a starting directory looking for\n * `.git` so callers can scope state to the current git repo. Built for\n * epic #2872 (issue #2882) to support the per-repo `.nexus-agents/` data\n * directory ratified by vote #2876.\n *\n * Defenses adopted:\n *   - Walks upward but stops at filesystem root (no infinite loop on\n *     symlinks-to-self).\n *   - Stops at filesystem boundary (different `stat.dev`) — refuses to\n *     escape across mount points. Prevents a sandboxed workdir from\n *     resolving a `.git` on the host filesystem.\n *   - Detects git worktrees: `.git` may be a *file* containing\n *     `gitdir: <path>` rather than a directory.\n *   - Realpath's the final root and rejects results that escape the\n *     starting cwd by symlink.\n *\n * Deferred (tracked separately; not blocking #2882):\n *   - CVE-2022-24765-style ownership check (refuse `.git` owned by a\n *     different uid than the running process). The git CLI added\n *     `safe.directory` for this; we don't have a comparable allowlist\n *     surface yet. In CI the heuristic is too noisy to be useful\n *     (runners often clone as a different uid than the workload).\n *     File-system isolation (the `stat.dev` check above) covers the\n *     bulk of the attack class.\n *\n * @module config/repo-root-detection\n */\n\nimport { existsSync, readFileSync, realpathSync, statSync } from 'node:fs';\nimport { dirname, isAbsolute, resolve } from 'node:path';\n\n/**\n * Walks upward from `start` looking for `.git` (file or directory).\n * Returns the absolute path to the directory containing it, or `null`.\n *\n * Worktrees: a `.git` file (not dir) with contents `gitdir: <path>` is\n * still recognised as marking the repo root. The pointed-to gitdir is\n * NOT followed — we just need the worktree's own root.\n *\n * Filesystem boundary: stops walking if the next ancestor lives on a\n * different filesystem (different `stat.dev`). This prevents a workdir\n * mounted inside a sandbox from finding a host-side `.git`.\n */\nexport function findRepoRoot(start: string): string | null {\n  if (!isAbsolute(start)) {\n    start = resolve(start);\n  }\n\n  let current: string;\n  try {\n    current = realpathSync(start);\n  } catch {\n    return null;\n  }\n\n  let startDev: number | undefined;\n  try {\n    startDev = statSync(current).dev;\n  } catch {\n    return null;\n  }\n\n  // Walk up. Depth cap is paranoid but bounds the loop on pathological\n  // symlinks even though realpathSync above should already prevent cycles.\n  for (let i = 0; i < 64; i++) {\n    if (isRepoRoot(current)) {\n      return current;\n    }\n    const parent = dirname(current);\n    if (parent === current) {\n      // Hit filesystem root.\n      return null;\n    }\n    try {\n      if (statSync(parent).dev !== startDev) {\n        // Crossed a mount point; refuse to escape.\n        return null;\n      }\n    } catch {\n      return null;\n    }\n    current = parent;\n  }\n  return null;\n}\n\n/** True iff `dir/.git` exists as a directory or a git-worktree marker file. */\nexport function isRepoRoot(dir: string): boolean {\n  const gitPath = `${dir}/.git`;\n  if (!existsSync(gitPath)) return false;\n  try {\n    const st = statSync(gitPath);\n    if (st.isDirectory()) return true;\n    if (st.isFile()) {\n      // Worktree: first line should be `gitdir: <path>`.\n      const head = readFileSync(gitPath, 'utf-8').slice(0, 256);\n      return head.startsWith('gitdir:');\n    }\n  } catch {\n    return false;\n  }\n  return false;\n}\n","/**\n * portable-mode — auto-detect sandboxed execution environments and\n * redirect nexus-agents data to a workspace-local directory.\n *\n * The existing `getNexusDataDir()` already respects `NEXUS_DATA_DIR` and\n * `NEXUS_PORTABLE_MODE`. This module wires up the *auto-detection* path\n * so operators running inside a Docker / restricted-FS / sandboxed\n * environment don't have to set the env vars manually — nexus-agents\n * notices and announces the flip.\n *\n * Source: Issue #2471 (epic #2467 child).\n *\n * Detection rules (first match wins):\n *   1. `NEXUS_DATA_DIR` already set → respect, no auto-detect\n *   2. `NEXUS_PORTABLE_MODE=0` → operator opted out, no auto-detect\n *   3. `NEXUS_PORTABLE_MODE=1` → portable mode, no detection needed\n *   4. Heuristic: home directory not writable\n *   5. Heuristic: container env vars set (KUBERNETES_SERVICE_HOST,\n *      DOCKER_CONTAINER, ECS_CONTAINER_METADATA_URI, SANDBOX, etc.)\n *\n * When portable mode fires:\n *   - Sets `process.env.NEXUS_DATA_DIR` to `<cwd>/.nexus-agents`\n *   - Announces once on stderr (subsequent calls are silent)\n *   - If cwd is a git repo, appends `.nexus-agents/` to .gitignore\n *\n * To force off: `NEXUS_PORTABLE_MODE=0`. To force on without heuristics:\n * `NEXUS_PORTABLE_MODE=1`. To override target dir: `NEXUS_DATA_DIR=...`.\n */\n\nimport { accessSync, constants, existsSync, readFileSync, appendFileSync, statSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join, resolve } from 'node:path';\n\n/** Container / sandbox environment variables that strongly imply portable mode. */\nconst SANDBOX_ENV_VARS: readonly string[] = [\n  'KUBERNETES_SERVICE_HOST',\n  'DOCKER_CONTAINER',\n  'ECS_CONTAINER_METADATA_URI',\n  'ECS_CONTAINER_METADATA_URI_V4',\n  'SANDBOX',\n  'NEXUS_SANDBOX',\n];\n\nlet DETECTED = false;\n\ninterface DetectionResult {\n  readonly portable: boolean;\n  readonly dataDir: string;\n  readonly reason:\n    'env-data-dir' | 'env-opt-out' | 'env-opt-in' | 'home-unwritable' | 'container-env' | 'default';\n}\n\nfunction isHomeWritable(): boolean {\n  try {\n    const home = homedir();\n    if (!existsSync(home)) return false;\n    accessSync(home, constants.W_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction inSandboxEnv(): boolean {\n  for (const v of SANDBOX_ENV_VARS) {\n    const val = process.env[v];\n    if (val !== undefined && val !== '') return true;\n  }\n  return false;\n}\n\n/**\n * The operator-declared sandbox root, when set (#5026).\n *\n * Read directly rather than through `detectSandbox()` to keep this module free\n * of imports — it runs as a side effect of `cli-log-bootstrap` before anything\n * else loads.\n */\nfunction sandboxRootFromEnv(): string | undefined {\n  const raw = process.env['NEXUS_SANDBOX_ROOT']?.trim();\n  return raw !== undefined && raw !== '' ? resolve(raw) : undefined;\n}\n\nfunction checkExplicitEnv(cwd: string): DetectionResult | null {\n  const fromEnv = process.env['NEXUS_DATA_DIR']?.trim();\n  if (fromEnv !== undefined && fromEnv !== '') {\n    return { portable: false, dataDir: resolve(fromEnv), reason: 'env-data-dir' };\n  }\n  const portableEnv = process.env['NEXUS_PORTABLE_MODE'];\n  if (portableEnv === '0' || portableEnv === 'false') {\n    return { portable: false, dataDir: join(homedir(), '.nexus-agents'), reason: 'env-opt-out' };\n  }\n  if (portableEnv === '1' || portableEnv === 'true') {\n    return { portable: true, dataDir: join(cwd, '.nexus-agents'), reason: 'env-opt-in' };\n  }\n  return null;\n}\n\nfunction checkHeuristics(cwd: string): DetectionResult | null {\n  if (!isHomeWritable()) {\n    return { portable: true, dataDir: join(cwd, '.nexus-agents'), reason: 'home-unwritable' };\n  }\n  if (inSandboxEnv()) {\n    // #5026: prefer an explicitly declared sandbox root over cwd. `NEXUS_SANDBOX`\n    // is one of SANDBOX_ENV_VARS, so setting it makes this heuristic fire and\n    // stamp `NEXUS_DATA_DIR = <cwd>/.nexus-agents` — which then short-circuits\n    // `getNexusDataDir`'s own sandbox branch (`nexus-data-dir.ts:124-127`)\n    // before it can honour `NEXUS_SANDBOX_ROOT`. The documented purpose of that\n    // variable (\"default NEXUS_DATA_DIR to the multi-repo root\") therefore never\n    // happened, and state fragmented per working directory across a multi-repo\n    // mount. `doctor`'s dataDirInsideRepo check exists to detect exactly that\n    // layout and reports it as operator misconfiguration.\n    const declaredRoot = sandboxRootFromEnv();\n    return {\n      portable: true,\n      dataDir: join(declaredRoot ?? cwd, '.nexus-agents'),\n      reason: 'container-env',\n    };\n  }\n  return null;\n}\n\n/**\n * Decide whether to flip nexus-agents to portable mode and what data dir\n * to use. Pure function; no side effects beyond reading env + filesystem.\n */\nexport function detectPortableMode(cwd: string = process.cwd()): DetectionResult {\n  return (\n    checkExplicitEnv(cwd) ??\n    checkHeuristics(cwd) ?? {\n      portable: false,\n      dataDir: join(homedir(), '.nexus-agents'),\n      reason: 'default',\n    }\n  );\n}\n\n/**\n * Apply detected portable mode at process startup. Idempotent (subsequent\n * calls are no-ops). Announces on stderr once when the auto-detection\n * heuristic triggers — env-opt-in/out doesn't announce because the\n * operator already knows.\n */\nexport function applyPortableMode(cwd: string = process.cwd()): void {\n  if (DETECTED) return;\n  DETECTED = true;\n\n  const result = detectPortableMode(cwd);\n\n  // No env, no heuristic match — nothing to do.\n  if (!result.portable) return;\n\n  // The heuristic-driven cases announce; explicit opt-in is silent.\n  if (result.reason === 'home-unwritable' || result.reason === 'container-env') {\n    process.stderr.write(\n      `[portable-mode] Sandbox detected (${result.reason}). Using ${result.dataDir} for all nexus-agents data.\\n` +\n        `                Set NEXUS_PORTABLE_MODE=0 to override; see docs/guides/SANDBOXED-USAGE.md\\n`\n    );\n  }\n\n  process.env['NEXUS_DATA_DIR'] = result.dataDir;\n\n  if (isInsideGitRepo(cwd)) {\n    ensureGitignored(cwd, '.nexus-agents/');\n  }\n}\n\nfunction isInsideGitRepo(cwd: string): boolean {\n  try {\n    const gitDir = join(cwd, '.git');\n    return existsSync(gitDir) && statSync(gitDir).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Append `entry` to `<cwd>/.gitignore` if not already present. Stderr\n * announce on the first append. Exported because the repo-preferred\n * resolver in `nexus-data-dir.ts` reuses the same auto-gitignore behavior\n * when `<repo>/.nexus-agents/` becomes the active data dir (epic #2872).\n */\nexport function ensureGitignored(cwd: string, entry: string): void {\n  const path = join(cwd, '.gitignore');\n  try {\n    const existing = existsSync(path) ? readFileSync(path, 'utf-8') : '';\n    const lines = existing.split('\\n').map((l) => l.trim());\n    if (lines.includes(entry) || lines.includes(entry.replace(/\\/$/, ''))) return;\n    const sep = existing.length > 0 && !existing.endsWith('\\n') ? '\\n' : '';\n    appendFileSync(path, `${sep}${entry}\\n`, 'utf-8');\n    process.stderr.write(\n      `[portable-mode] Added '${entry}' to ${path} so nexus-agents data is gitignored.\\n`\n    );\n  } catch (e: unknown) {\n    // Non-fatal — operator can add the line themselves.\n    const msg = e instanceof Error ? e.message : String(e);\n    process.stderr.write(\n      `[portable-mode] Could not auto-update ${path} (${msg}). Add '${entry}' manually if you don't want nexus-agents data tracked by git.\\n`\n    );\n  }\n}\n\n/** Test-only reset of the once-only state. */\nexport function _resetDetectedForTests(): void {\n  DETECTED = false;\n}\n"],"mappings":";AAmDA;AAAA,EACE,cAAAA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA,cAAAC;AAAA,EACA;AAAA,EACA,gBAAAC;AAAA,EACA;AAAA,EACA,YAAAC;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAAC,gBAAe;AACxB,SAAS,WAAAC,UAAS,cAAAC,aAAY,QAAAC,OAAM,WAAAC,gBAAe;;;ACvCnD,SAAS,YAAY,oBAAoB;AAqClC,SAAS,gBAA6B;AAC3C,QAAM,YAAY,QAAQ,IAAI,eAAe,GAAG,KAAK;AACrD,QAAM,SAAS,cAAc,UAAa,cAAc,KAAK,YAAY;AACzE,QAAM,SAAS,WAAW;AAE1B,QAAM,UAAU,QAAQ,IAAI,oBAAoB,GAAG,KAAK;AACxD,QAAM,OAAO,YAAY,UAAa,YAAY,KAAK,UAAU;AAEjE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,yBAAyB;AAAA,EAC3C;AACF;AAgBA,SAAS,2BAA6C;AACpD,MAAI;AACF,QAAI,WAAW,aAAa,EAAG,QAAO;AACtC,QAAI,WAAW,oBAAoB,EAAG,QAAO;AAC7C,QAAI,WAAW,gBAAgB,GAAG;AAChC,YAAM,SAAS,aAAa,kBAAkB,MAAM;AACpD,UAAI,aAAa,KAAK,MAAM,EAAG,QAAO;AACtC,UAAI,iBAAiB,KAAK,MAAM,EAAG,QAAO;AAAA,IAC5C;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AC3EA,SAAS,cAAAC,aAAY,gBAAAC,eAAc,cAAc,gBAAgB;AACjE,SAAS,SAAS,YAAY,eAAe;AActC,SAAS,aAAa,OAA8B;AACzD,MAAI,CAAC,WAAW,KAAK,GAAG;AACtB,YAAQ,QAAQ,KAAK;AAAA,EACvB;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,aAAa,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,eAAW,SAAS,OAAO,EAAE;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AAIA,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,QAAI,WAAW,OAAO,GAAG;AACvB,aAAO;AAAA,IACT;AACA,UAAM,SAAS,QAAQ,OAAO;AAC9B,QAAI,WAAW,SAAS;AAEtB,aAAO;AAAA,IACT;AACA,QAAI;AACF,UAAI,SAAS,MAAM,EAAE,QAAQ,UAAU;AAErC,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AACN,aAAO;AAAA,IACT;AACA,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAGO,SAAS,WAAW,KAAsB;AAC/C,QAAM,UAAU,GAAG,GAAG;AACtB,MAAI,CAACD,YAAW,OAAO,EAAG,QAAO;AACjC,MAAI;AACF,UAAM,KAAK,SAAS,OAAO;AAC3B,QAAI,GAAG,YAAY,EAAG,QAAO;AAC7B,QAAI,GAAG,OAAO,GAAG;AAEf,YAAM,OAAOC,cAAa,SAAS,OAAO,EAAE,MAAM,GAAG,GAAG;AACxD,aAAO,KAAK,WAAW,SAAS;AAAA,IAClC;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;AC1EA,SAAS,YAAY,WAAW,cAAAC,aAAY,gBAAAC,eAAc,gBAAgB,YAAAC,iBAAgB;AAC1F,SAAS,eAAe;AACxB,SAAS,MAAM,WAAAC,gBAAe;AAG9B,IAAM,mBAAsC;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAI,WAAW;AASf,SAAS,iBAA0B;AACjC,MAAI;AACF,UAAM,OAAO,QAAQ;AACrB,QAAI,CAACH,YAAW,IAAI,EAAG,QAAO;AAC9B,eAAW,MAAM,UAAU,IAAI;AAC/B,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAwB;AAC/B,aAAW,KAAK,kBAAkB;AAChC,UAAM,MAAM,QAAQ,IAAI,CAAC;AACzB,QAAI,QAAQ,UAAa,QAAQ,GAAI,QAAO;AAAA,EAC9C;AACA,SAAO;AACT;AASA,SAAS,qBAAyC;AAChD,QAAM,MAAM,QAAQ,IAAI,oBAAoB,GAAG,KAAK;AACpD,SAAO,QAAQ,UAAa,QAAQ,KAAKG,SAAQ,GAAG,IAAI;AAC1D;AAEA,SAAS,iBAAiB,KAAqC;AAC7D,QAAM,UAAU,QAAQ,IAAI,gBAAgB,GAAG,KAAK;AACpD,MAAI,YAAY,UAAa,YAAY,IAAI;AAC3C,WAAO,EAAE,UAAU,OAAO,SAASA,SAAQ,OAAO,GAAG,QAAQ,eAAe;AAAA,EAC9E;AACA,QAAM,cAAc,QAAQ,IAAI,qBAAqB;AACrD,MAAI,gBAAgB,OAAO,gBAAgB,SAAS;AAClD,WAAO,EAAE,UAAU,OAAO,SAAS,KAAK,QAAQ,GAAG,eAAe,GAAG,QAAQ,cAAc;AAAA,EAC7F;AACA,MAAI,gBAAgB,OAAO,gBAAgB,QAAQ;AACjD,WAAO,EAAE,UAAU,MAAM,SAAS,KAAK,KAAK,eAAe,GAAG,QAAQ,aAAa;AAAA,EACrF;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,KAAqC;AAC5D,MAAI,CAAC,eAAe,GAAG;AACrB,WAAO,EAAE,UAAU,MAAM,SAAS,KAAK,KAAK,eAAe,GAAG,QAAQ,kBAAkB;AAAA,EAC1F;AACA,MAAI,aAAa,GAAG;AAUlB,UAAM,eAAe,mBAAmB;AACxC,WAAO;AAAA,MACL,UAAU;AAAA,MACV,SAAS,KAAK,gBAAgB,KAAK,eAAe;AAAA,MAClD,QAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,mBAAmB,MAAc,QAAQ,IAAI,GAAoB;AAC/E,SACE,iBAAiB,GAAG,KACpB,gBAAgB,GAAG,KAAK;AAAA,IACtB,UAAU;AAAA,IACV,SAAS,KAAK,QAAQ,GAAG,eAAe;AAAA,IACxC,QAAQ;AAAA,EACV;AAEJ;AAQO,SAAS,kBAAkB,MAAc,QAAQ,IAAI,GAAS;AACnE,MAAI,SAAU;AACd,aAAW;AAEX,QAAM,SAAS,mBAAmB,GAAG;AAGrC,MAAI,CAAC,OAAO,SAAU;AAGtB,MAAI,OAAO,WAAW,qBAAqB,OAAO,WAAW,iBAAiB;AAC5E,YAAQ,OAAO;AAAA,MACb,qCAAqC,OAAO,MAAM,YAAY,OAAO,OAAO;AAAA;AAAA;AAAA,IAE9E;AAAA,EACF;AAEA,UAAQ,IAAI,gBAAgB,IAAI,OAAO;AAEvC,MAAI,gBAAgB,GAAG,GAAG;AACxB,qBAAiB,KAAK,gBAAgB;AAAA,EACxC;AACF;AAEA,SAAS,gBAAgB,KAAsB;AAC7C,MAAI;AACF,UAAM,SAAS,KAAK,KAAK,MAAM;AAC/B,WAAOH,YAAW,MAAM,KAAKE,UAAS,MAAM,EAAE,YAAY;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQO,SAAS,iBAAiB,KAAa,OAAqB;AACjE,QAAM,OAAO,KAAK,KAAK,YAAY;AACnC,MAAI;AACF,UAAM,WAAWF,YAAW,IAAI,IAAIC,cAAa,MAAM,OAAO,IAAI;AAClE,UAAM,QAAQ,SAAS,MAAM,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACtD,QAAI,MAAM,SAAS,KAAK,KAAK,MAAM,SAAS,MAAM,QAAQ,OAAO,EAAE,CAAC,EAAG;AACvE,UAAM,MAAM,SAAS,SAAS,KAAK,CAAC,SAAS,SAAS,IAAI,IAAI,OAAO;AACrE,mBAAe,MAAM,GAAG,GAAG,GAAG,KAAK;AAAA,GAAM,OAAO;AAChD,YAAQ,OAAO;AAAA,MACb,0BAA0B,KAAK,QAAQ,IAAI;AAAA;AAAA,IAC7C;AAAA,EACF,SAAS,GAAY;AAEnB,UAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,YAAQ,OAAO;AAAA,MACb,yCAAyC,IAAI,KAAK,GAAG,WAAW,KAAK;AAAA;AAAA,IACvE;AAAA,EACF;AACF;;;AHvHA,IAAM,mBAAwC,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA;AACF,CAAC;AAGM,SAAS,kBAA0B;AACxC,QAAM,UAAU,QAAQ,IAAI,gBAAgB,GAAG,KAAK;AACpD,MAAI,YAAY,UAAa,YAAY,IAAI;AAC3C,WAAOG,SAAQ,OAAO;AAAA,EACxB;AACA,QAAM,UAAU,cAAc;AAC9B,MAAI,QAAQ,QAAQ;AAClB,WAAOA,SAAQ,QAAQ,QAAQ,KAAK,eAAe;AAAA,EACrD;AACA,SAAOC,MAAKC,SAAQ,GAAG,eAAe;AACxC;AAkBA,IAAM,kBAAkB,oBAAI,IAAY;AAgBxC,IAAI;AAWG,SAAS,uBAAuB,MAA0C;AAC/E,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,YAAY,UAAa,YAAY,IAAI;AAC3C,0BAAsB;AACtB,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,YAAYC,cAAaC,SAAQ,OAAO,CAAC;AAC/C,QAAI,CAACC,YAAW,SAAS,KAAK,CAACC,UAAS,SAAS,EAAE,YAAY,EAAG,QAAO;AACzE,0BAAsB;AACtB,WAAO;AAAA,EACT,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AA6BO,SAAS,kBAAiC;AAC/C,MAAI,QAAQ,IAAI,sBAAsB,MAAM,IAAK,QAAO;AACxD,QAAM,UAAU,QAAQ,IAAI,gBAAgB,GAAG,KAAK;AACpD,MAAI,YAAY,UAAa,YAAY,GAAI,QAAO;AACpD,MAAI,cAAc,EAAE,OAAQ,QAAO;AAGnC,QAAM,OAAO,uBAAuB,aAAa,QAAQ,IAAI,CAAC;AAC9D,MAAI,SAAS,KAAM,QAAO;AAC1B,qBAAmB,IAAI;AACvB,SAAOC,MAAK,MAAM,eAAe;AACnC;AAQA,SAAS,mBAAmB,UAAwB;AAClD,MAAI,QAAQ,IAAI,sBAAsB,MAAM,IAAK;AACjD,MAAI,gBAAgB,IAAI,QAAQ,EAAG;AACnC,kBAAgB,IAAI,QAAQ;AAG5B,MAAI,CAACC,YAAW,QAAQ,EAAG;AAC3B,mBAAiB,UAAU,gBAAgB;AAC7C;AAOA,IAAI;AAGJ,IAAM,qBAAqB,oBAAI,IAAY;AAgB3C,SAAS,wBAAiC;AACxC,MAAI,oBAAoB,OAAW,QAAO;AAC1C,QAAM,OAAO,gBAAgB;AAC7B,MAAI;AACF,cAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AACnC,IAAAC,YAAW,MAAM,YAAY,IAAI;AACjC,sBAAkB;AAAA,EACpB,QAAQ;AACN,sBAAkB;AAAA,EACpB;AACA,SAAO;AACT;AAOA,SAAS,0BAA0B,QAAgB,UAAwB;AACzE,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,qBAAmB,IAAI,MAAM;AAC7B,UAAQ,OAAO;AAAA,IACb,WAAW,MAAM,yEACe,QAAQ;AAAA;AAAA,EAC1C;AACF;AAkBO,SAAS,iBAAiB,UAA4B;AAC3D,QAAM,QAAQ,SAAS,CAAC;AAGxB,MAAI,UAAU,UAAa,iBAAiB,IAAI,KAAK,GAAG;AACtD,UAAM,UAAU,gBAAgB;AAChC,QAAI,YAAY,MAAM;AACpB,aAAOC,MAAK,SAAS,GAAG,QAAQ;AAAA,IAClC;AAAA,EACF;AAOA,MAAI,UAAU,UAAa,CAAC,sBAAsB,GAAG;AACnD,UAAM,UAAU,gBAAgB;AAChC,QAAI,YAAY,MAAM;AACpB,YAAM,eAAeA,MAAK,SAAS,GAAG,QAAQ;AAC9C,gCAA0B,OAAO,YAAY;AAC7C,aAAO;AAAA,IACT;AAAA,EAKF;AAEA,SAAOA,MAAK,gBAAgB,GAAG,GAAG,QAAQ;AAC5C;AAYO,SAAS,uBAAuB,UAA4B;AACjE,QAAM,WAAW,cAAc,GAAG,QAAQ;AAC1C,QAAM,SAAS,SAAS,SAAS,IAAIC,SAAQ,QAAQ,IAAI;AACzD,YAAU,QAAQ,EAAE,WAAW,KAAK,CAAC;AACrC,SAAO;AACT;AASO,SAAS,mBAAmB,UAA4B;AAC7D,SAAOD,MAAK,gBAAgB,GAAG,GAAG,QAAQ;AAC5C;AAOO,SAAS,oBAAyC;AACvD,SAAO;AACT;AAGA,IAAI,2BAA2B;AAQ/B,IAAM,0BAA0B,CAAC,IAAI,QAAQ,QAAQ,UAAU;AAuBxD,SAAS,iBAAyB;AACvC,QAAM,SAAS,cAAc,YAAY,aAAa;AACtD,MAAI,CAAC,0BAA0B;AAC7B,+BAA2B;AAC3B,4BAAwB,MAAM;AAAA,EAChC;AACA,SAAO;AACT;AAGA,SAAS,wBAAwB,QAAsB;AACrD,QAAM,SAAS,cAAc,aAAa;AAC1C,MAAI,WAAW,UAAU,CAACE,YAAW,MAAM,KAAKA,YAAW,MAAM,EAAG;AACpE,MAAI;AACF,cAAUC,SAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAC9C,eAAW,UAAU,yBAAyB;AAC5C,YAAM,OAAO,GAAG,MAAM,GAAG,MAAM;AAC/B,UAAID,YAAW,IAAI,EAAG,UAAS,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE;AAAA,IAC3D;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAGA,SAAS,SAAS,MAAc,IAAkB;AAChD,MAAI;AACF,eAAW,MAAM,EAAE;AAAA,EACrB,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,QAAS,OAAM;AAC3D,iBAAa,MAAM,EAAE;AACrB,eAAW,IAAI;AAAA,EACjB;AACF;","names":["accessSync","existsSync","realpathSync","statSync","homedir","dirname","isAbsolute","join","resolve","existsSync","readFileSync","existsSync","readFileSync","statSync","resolve","resolve","join","homedir","realpathSync","resolve","isAbsolute","statSync","join","existsSync","accessSync","join","dirname","existsSync","dirname"]}

package/dist/{chunk-YSOWQJ5S.js → chunk-PHGT3XKE.js}

@@ -1,6 +1,6 @@
 import {
   getTimeProvider
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 
 // src/security/audit-trail.ts
 var MAX_EVENTS = 1e4;
@@ -205,4 +205,4 @@ export {
   createGraphAuditBridge,
   createAuditTrail
 };
-//# sourceMappingURL=chunk-YSOWQJ5S.js.map
+//# sourceMappingURL=chunk-PHGT3XKE.js.map

package/dist/{chunk-RXGHRVL2.js → chunk-QQFPLIJ4.js}

@@ -11,7 +11,7 @@ import {
   createGetRetryConfig,
   createGetTimeout,
   createGetToolRateLimit
-} from "./chunk-TBWKMKCX.js";
+} from "./chunk-7GWPLERY.js";
 
 // src/config/defaults.ts
 var CUSTOM_API_DEFAULT_MODEL = "gpt-5.5";
@@ -230,4 +230,4 @@ export {
   CUSTOM_API_DEFAULT_MODEL,
   DEFAULTS
 };
-//# sourceMappingURL=chunk-RXGHRVL2.js.map
+//# sourceMappingURL=chunk-QQFPLIJ4.js.map