nexus-agents 4.32.3 → 4.32.4

package/dist/chunk-3NJFOC3L.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "4.32.4" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-3NJFOC3L.js.map

package/dist/{chunk-GJ5XPWVR.js → chunk-HIXWQWNA.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-OQB3XC5O.js";
 import {
   VERSION
-} from "./chunk-XHNXEV3M.js";
+} from "./chunk-3NJFOC3L.js";
 import {
   capitalize
 } from "./chunk-6T3EPABN.js";
@@ -1201,7 +1201,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-HUAM3YOS.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-JQC5RC3M.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1303,4 +1303,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-GJ5XPWVR.js.map
+//# sourceMappingURL=chunk-HIXWQWNA.js.map

package/dist/{chunk-FYXHSU6S.js → chunk-MUTREHSB.js}

@@ -213,4 +213,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-FYXHSU6S.js.map
+//# sourceMappingURL=chunk-MUTREHSB.js.map

package/dist/{chunk-FYXHSU6S.js.map → chunk-MUTREHSB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/pipeline/expert-bridge.ts"],"sourcesContent":["/**\n * Expert Bridge — Programmatic access to the execute_expert pipeline (#1693)\n *\n * Provides a clean wrapper for calling experts with the full pipeline:\n * timeout, fallback cascade, degradation detection, heartbeat, outcome recording.\n *\n * DRY: reuses createBuiltInExpert + CompositeRouter instead of reimplementing.\n *\n * @module pipeline/expert-bridge\n */\n\nimport { createLogger, getTimeProvider } from '../core/index.js';\nimport type { BuiltInExpertType } from '../agents/experts/expert-config.js';\nimport { isRateLimitText } from '../adapters/rate-limit-detector.js';\nimport { resolveCliSlot } from '../config/model-availability.js';\nimport type { CliNameLiteral } from '../config/model-capabilities-types.js';\n\n/**\n * Resolves a CLI slot from the model string a (CLI or API) adapter returned.\n * Known models resolve to their exact slot; **unknown** models — new releases\n * or API/openrouter models not in the curated registry — fall back to the\n * vendor-derived slot (#3317 / #3293) so the outcome is recorded against a real\n * slot instead of being dropped with an undefined cli (the api-mode gap).\n * Returns undefined only when no model is present (the bridge failed before\n * dispatch — no execution to attribute).\n */\nfunction resolveCliFromModelString(model: string | undefined): CliNameLiteral | undefined {\n  return resolveCliSlot(model);\n}\n\nconst logger = createLogger({ component: 'expert-bridge' });\n\n/** Base delay for rate limit retry backoff (ms). Scales linearly: 3s, 6s, 9s. */\nconst RATE_LIMIT_BASE_DELAY_MS = 3000;\n\n/** Result of an expert execution. */\nexport interface ExpertBridgeResult {\n  readonly success: boolean;\n  readonly text: string;\n  readonly expertType: BuiltInExpertType;\n  readonly durationMs: number;\n  readonly error?: string;\n  /**\n   * CLI that actually executed the task, resolved from the underlying\n   * `CliResponse.model` via `getCliForModelId`. Undefined when the bridge\n   * failed before dispatch (no adapters / circuit-open / rate-limit cap).\n   * Callers writing to OutcomeStore should use this rather than hardcoding\n   * a cli — see #2823 (#1154 regression).\n   */\n  readonly cli?: CliNameLiteral;\n  /**\n   * Total tokens (input + output) the underlying CLI/adapter reported for this\n   * call, when available (#3396). Best-effort: `CliResponse.usage` is optional\n   * — CLI-subprocess paths whose `extractUsage` returns null leave this\n   * undefined. Consumers (budget enforcement #3395, model.called attribution\n   * #3387, routing-experience metrics) must tolerate `undefined`.\n   */\n  readonly tokensUsed?: number;\n  /**\n   * Concrete model id the underlying adapter reported (`CliResponse.model`),\n   * when present (#3387). Distinct from {@link cli} (the slot): one CLI can run\n   * several models. Undefined when the adapter didn't report a model or the\n   * bridge failed before dispatch. Required to emit a `model.called` event.\n   */\n  readonly model?: string;\n  /**\n   * Input/output token split from the adapter's `CliResponse.usage` (#3387),\n   * when reported. Best-effort like {@link tokensUsed}; both undefined together\n   * when no usage was available. `tokensIn + tokensOut` reconciles with\n   * `tokensUsed` (single source of truth — both derive from the same record).\n   */\n  readonly tokensIn?: number;\n  readonly tokensOut?: number;\n}\n\n/**\n * Execute an expert task with the full nexus-agents expert pipeline.\n *\n * Creates a built-in expert, executes via CompositeRouter (for intelligent\n * CLI routing), and records outcomes. Falls back gracefully on failure.\n *\n * @param expertType - Built-in expert type (code, architecture, security, qa, etc.)\n * @param prompt - Task prompt for the expert\n * @returns Expert result with text output\n */\n/** Minimal router interface for the bridge. */\ninterface RouterLike {\n  executeTask(task: { content: string; options?: Record<string, unknown> | undefined }): Promise<{\n    ok: boolean;\n    value: {\n      text: string;\n      cli?: CliNameLiteral;\n      tokensUsed?: number;\n      model?: string;\n      tokensIn?: number;\n      tokensOut?: number;\n    };\n    error: { message: string };\n  }>;\n}\n\n// Cached router — lazily initialized, reused across calls within a session\nlet cachedRouter: RouterLike | null = null;\n\n// Cached MCP config — generated once, reused across expert calls (#1708)\nlet cachedMcpConfigPath: string | null = null;\n// Cached cleanup for the cached config's tempdir (closes #2946). Previously\n// the cleanup returned by `generateMcpConfig` was thrown away, so\n// `/tmp/nexus-mcp-XXXXXX/` accumulated one entry per MCP server lifetime.\n// Stored here + invoked by `shutdownExpertBridge()` from the server's\n// graceful-shutdown path.\nlet cachedMcpConfigCleanup: (() => Promise<void>) | null = null;\n// Coalesces concurrent init under voter fan-out (closes #2969). consensus_vote\n// fans out N=7 callers on cold start; without this each one ran the full init\n// including a mkdtemp() that the loser N-1 instances never cleaned up.\nlet mcpConfigInitPromise: Promise<string | null> | null = null;\n\n/** Get or create cached MCP config path for expert CLI sessions (#1708). */\nasync function getMcpConfigPath(): Promise<string | null> {\n  if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;\n  mcpConfigInitPromise ??= (async (): Promise<string | null> => {\n    try {\n      const { generateMcpConfig } = await import('../cli-adapters/child-mcp-config.js');\n      const config = await generateMcpConfig();\n      cachedMcpConfigPath = config.configPath;\n      cachedMcpConfigCleanup = config.cleanup;\n      return cachedMcpConfigPath;\n    } catch {\n      mcpConfigInitPromise = null; // allow retry on next call\n      return null; // MCP config not available — experts run without tools\n    }\n  })();\n  return mcpConfigInitPromise;\n}\n\n/**\n * Removes the cached MCP-config tempdir (closes #2946). Invoke from the\n * server's graceful-shutdown path so stale nexus-mcp-* tempdirs (under\n * the OS tmpdir, see child-mcp-config.ts) don't accumulate across daemon\n * restarts. Idempotent; safe to call multiple times. Never throws —\n * cleanup failures are logged and swallowed.\n */\nexport async function shutdownExpertBridge(): Promise<void> {\n  const cleanup = cachedMcpConfigCleanup;\n  if (cleanup === null) return;\n  cachedMcpConfigCleanup = null;\n  cachedMcpConfigPath = null;\n  mcpConfigInitPromise = null;\n  try {\n    await cleanup();\n  } catch (error: unknown) {\n    const msg = error instanceof Error ? error.message : String(error);\n    logger.debug('Expert-bridge MCP-config cleanup failed', { error: msg });\n  }\n}\n\n/** Cached circuit breaker for health monitoring (#1766). */\nlet cachedCircuitBreaker: {\n  getHealthStatus(): {\n    systemHealthy: boolean;\n    healthyCount: number;\n    clis: ReadonlyArray<{ name: string; healthy: boolean }>;\n  };\n} | null = null;\n\n/**\n * Adapt a CompositeRouter to the narrower RouterLike interface used by this\n * bridge. Previously did `as unknown as RouterLike` which hid any structural\n * mismatch between CompositeRouter's `Result<CliResponse, CliError>` and\n * RouterLike's flat `{ ok, value: { text }, error: { message } }` shape.\n * If CliResponse renames `.text` → `.output` (or similar), this adapter\n * breaks at compile time instead of silently returning wrong data (#1921).\n */\n/**\n * Total tokens from a best-effort `CliResponse.usage` record (#3396). Prefers\n * the reported `totalTokens`; falls back to input+output; returns undefined\n * when no usage was reported (so callers can distinguish \"0 tokens\" — which\n * never happens for a real call — from \"unknown\").\n */\nexport function totalTokensFromUsage(\n  usage: { totalTokens?: number; inputTokens?: number; outputTokens?: number } | undefined\n): number | undefined {\n  if (usage === undefined) return undefined;\n  if (typeof usage.totalTokens === 'number') return usage.totalTokens;\n  const total = (usage.inputTokens ?? 0) + (usage.outputTokens ?? 0);\n  return total > 0 ? total : undefined;\n}\n\n/**\n * Per-direction token split from a best-effort `CliResponse.usage` record\n * (#3387). Unlike {@link totalTokensFromUsage} this keeps `tokensIn`/`tokensOut`\n * separate — the granularity `ModelCalledEvent` requires for attribution.\n * Returns undefined when no usage was reported or both directions are zero (no\n * real call), so callers skip emitting a noise event instead of recording\n * zeros. Reconciles with the total: `tokensIn + tokensOut === totalTokensFromUsage`.\n */\nexport function tokenSplitFromUsage(\n  usage: { inputTokens?: number; outputTokens?: number; totalTokens?: number } | undefined\n): { tokensIn: number; tokensOut: number } | undefined {\n  if (usage === undefined) return undefined;\n  const tokensIn = usage.inputTokens ?? 0;\n  const tokensOut = usage.outputTokens ?? 0;\n  if (tokensIn + tokensOut === 0) return undefined;\n  return { tokensIn, tokensOut };\n}\n\nfunction adaptCompositeRouter(\n  compositeRouter: import('../cli-adapters/composite-router.js').ICompositeRouter\n): RouterLike {\n  return {\n    async executeTask(task): Promise<{\n      ok: boolean;\n      value: {\n        text: string;\n        cli?: CliNameLiteral;\n        tokensUsed?: number;\n        model?: string;\n        tokensIn?: number;\n        tokensOut?: number;\n      };\n      error: { message: string };\n    }> {\n      const cliTask: import('../cli-adapters/types.js').CliTask = {\n        content: task.content,\n        ...(task.options !== undefined ? { options: task.options } : {}),\n      };\n      const result = await compositeRouter.executeTask(cliTask);\n      if (result.ok) {\n        // #2823: surface which CLI actually executed so callers writing to\n        // OutcomeStore don't have to hardcode 'claude' (the bug #1154 fixed\n        // and that regressed into the pipeline/ tree). Derive via the\n        // canonical model→cli mapping in the registry — if the underlying\n        // adapter didn't set `model` or the model isn't in the registry,\n        // cli stays undefined and downstream code can skip the record\n        // rather than lie.\n        const cli = resolveCliFromModelString(result.value.model);\n        // #3396: surface token usage (best-effort) so budget enforcement,\n        // attribution, and routing-experience metrics get real numbers instead\n        // of zeros. `usage` is optional and `totalTokens` may be absent — fall\n        // back to input+output, and leave undefined when no usage was reported.\n        const tokensUsed = totalTokensFromUsage(result.value.usage);\n        // #3387: also surface the concrete model + per-direction token split so\n        // a meaningful `model.called` event can be emitted. Both derive from the\n        // same CliResponse, so tokensIn+tokensOut reconciles with tokensUsed.\n        const model = result.value.model;\n        const split = tokenSplitFromUsage(result.value.usage);\n        return {\n          ok: true,\n          value: {\n            text: result.value.text,\n            ...(cli !== undefined && { cli }),\n            ...(tokensUsed !== undefined && { tokensUsed }),\n            ...(model !== undefined && { model }),\n            ...(split !== undefined && { tokensIn: split.tokensIn, tokensOut: split.tokensOut }),\n          },\n          error: { message: '' },\n        };\n      }\n      return { ok: false, value: { text: '' }, error: { message: result.error.message } };\n    },\n  };\n}\n\n// Coalesces concurrent router init the same way mcpConfigInitPromise does\n// (closes #2969). N=7 voter fan-out previously ran createAllAdapters() N times\n// — N sets of CLI probe subprocesses, all but one discarded.\nlet routerInitPromise: Promise<RouterLike | null> | null = null;\n\n/** Get or create a cached CompositeRouter with circuit breaker monitoring. */\nasync function getRouter(): Promise<RouterLike | null> {\n  if (cachedRouter !== null) return cachedRouter;\n  routerInitPromise ??= (async (): Promise<RouterLike | null> => {\n    const { createAllAdapters } = await import('../cli-adapters/factory.js');\n    const { createCompositeRouter } = await import('../cli-adapters/composite-router.js');\n    const adapters = createAllAdapters();\n    if (adapters.size === 0) {\n      routerInitPromise = null; // allow retry once adapters become available\n      return null;\n    }\n    cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));\n\n    // Initialize circuit breaker monitoring (#1766)\n    try {\n      const { createCliCircuitBreakerIntegration } =\n        await import('../cli-adapters/cli-circuit-breaker.js');\n      cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);\n    } catch (error: unknown) {\n      // Circuit breaker not available — continue without it. Log so we can\n      // notice if initialization silently stops working (#1913 Class B).\n      const msg = error instanceof Error ? error.message : String(error);\n      logger.debug('Circuit breaker init failed; continuing without it', { error: msg });\n    }\n\n    return cachedRouter;\n  })();\n  return routerInitPromise;\n}\n\n/** Check CLI health before dispatch (#1766). */\nfunction checkCircuitHealth(): { healthy: boolean; message: string } {\n  if (cachedCircuitBreaker === null) return { healthy: true, message: '' };\n  const status = cachedCircuitBreaker.getHealthStatus();\n  if (!status.systemHealthy) {\n    return {\n      healthy: false,\n      message: `All CLI circuits open (${String(status.healthyCount)}/${String(status.clis.length)} healthy)`,\n    };\n  }\n  return { healthy: true, message: '' };\n}\n\n/** Dispatch task to router with rate limit retry (#1802). */\nasync function dispatchWithRateLimitRetry(\n  router: RouterLike,\n  task: { content: string; options?: Record<string, unknown> | undefined },\n  expertType: BuiltInExpertType,\n  start: number\n): Promise<ExpertBridgeResult> {\n  const maxAttempts = 3;\n  for (let attempt = 0; attempt < maxAttempts; attempt++) {\n    const result = await router.executeTask(task);\n    const durationMs = getTimeProvider().now() - start;\n\n    if (result.ok) {\n      logger.info('Expert executed successfully', {\n        expertType,\n        durationMs,\n        cli: result.value.cli,\n      });\n      return {\n        success: true,\n        text: result.value.text,\n        expertType,\n        durationMs,\n        ...(result.value.cli !== undefined && { cli: result.value.cli }),\n        ...(result.value.tokensUsed !== undefined && { tokensUsed: result.value.tokensUsed }),\n        ...(result.value.model !== undefined && { model: result.value.model }),\n        ...(result.value.tokensIn !== undefined && { tokensIn: result.value.tokensIn }),\n        ...(result.value.tokensOut !== undefined && { tokensOut: result.value.tokensOut }),\n      };\n    }\n\n    const isRateLimit = isRateLimitText(result.error.message);\n    if (isRateLimit && attempt < maxAttempts - 1) {\n      const backoffMs = RATE_LIMIT_BASE_DELAY_MS * (attempt + 1);\n      logger.warn('Expert rate limited, retrying', { expertType, attempt: attempt + 1, backoffMs });\n      await new Promise((resolve) => setTimeout(resolve, backoffMs));\n      continue;\n    }\n\n    logger.warn('Expert execution failed', { expertType, error: result.error.message });\n    return { success: false, text: '', expertType, durationMs, error: result.error.message };\n  }\n\n  return {\n    success: false,\n    text: '',\n    expertType,\n    durationMs: getTimeProvider().now() - start,\n    error: 'Max retry attempts exceeded',\n  };\n}\n\nexport async function executeExpert(\n  expertType: BuiltInExpertType,\n  prompt: string\n): Promise<ExpertBridgeResult> {\n  const start = getTimeProvider().now();\n  try {\n    const { BUILT_IN_EXPERTS } = await import('../agents/experts/expert-config.js');\n    const config = BUILT_IN_EXPERTS[expertType];\n    const fullPrompt = `${config.systemPrompt}\\n\\n${prompt}`;\n\n    const router = await getRouter();\n    if (router === null) {\n      return {\n        success: false,\n        text: `[No adapters] ${prompt}`,\n        expertType,\n        durationMs: getTimeProvider().now() - start,\n        error: 'No CLI adapters available',\n      };\n    }\n\n    // Check circuit breaker health before dispatch (#1766)\n    const health = checkCircuitHealth();\n    if (!health.healthy) {\n      logger.warn('Circuit breaker: all CLIs unavailable', { expertType, reason: health.message });\n      return {\n        success: false,\n        text: '',\n        expertType,\n        durationMs: getTimeProvider().now() - start,\n        error: health.message,\n      };\n    }\n\n    // Pass MCP config so CLI experts can call nexus-agents tools (#1708)\n    const mcpConfigPath = await getMcpConfigPath();\n    const task: { content: string; options?: Record<string, unknown> | undefined } = {\n      content: fullPrompt,\n    };\n    if (mcpConfigPath !== null) task.options = { mcpConfigPath };\n\n    return await dispatchWithRateLimitRetry(router, task, expertType, start);\n  } catch (error) {\n    const durationMs = getTimeProvider().now() - start;\n    const msg = error instanceof Error ? error.message : String(error);\n    logger.warn('Expert bridge error', { expertType, error: msg });\n    return { success: false, text: '', expertType, durationMs, error: msg };\n  }\n}\n"],"mappings":";;;;;;;;;;AA0BA,SAAS,0BAA0B,OAAuD;AACxF,SAAO,eAAe,KAAK;AAC7B;AAEA,IAAM,SAAS,aAAa,EAAE,WAAW,gBAAgB,CAAC;AAG1D,IAAM,2BAA2B;AAqEjC,IAAI,eAAkC;AAGtC,IAAI,sBAAqC;AAMzC,IAAI,yBAAuD;AAI3D,IAAI,uBAAsD;AAG1D,eAAe,mBAA2C;AACxD,MAAI,wBAAwB,KAAM,QAAO;AACzC,4BAA0B,YAAoC;AAC5D,QAAI;AACF,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,gCAAqC;AAChF,YAAM,SAAS,MAAM,kBAAkB;AACvC,4BAAsB,OAAO;AAC7B,+BAAyB,OAAO;AAChC,aAAO;AAAA,IACT,QAAQ;AACN,6BAAuB;AACvB,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,SAAO;AACT;AASA,eAAsB,uBAAsC;AAC1D,QAAM,UAAU;AAChB,MAAI,YAAY,KAAM;AACtB,2BAAyB;AACzB,wBAAsB;AACtB,yBAAuB;AACvB,MAAI;AACF,UAAM,QAAQ;AAAA,EAChB,SAAS,OAAgB;AACvB,UAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,WAAO,MAAM,2CAA2C,EAAE,OAAO,IAAI,CAAC;AAAA,EACxE;AACF;AAGA,IAAI,uBAMO;AAgBJ,SAAS,qBACd,OACoB;AACpB,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,MAAM,gBAAgB,SAAU,QAAO,MAAM;AACxD,QAAM,SAAS,MAAM,eAAe,MAAM,MAAM,gBAAgB;AAChE,SAAO,QAAQ,IAAI,QAAQ;AAC7B;AAUO,SAAS,oBACd,OACqD;AACrD,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,WAAW,MAAM,eAAe;AACtC,QAAM,YAAY,MAAM,gBAAgB;AACxC,MAAI,WAAW,cAAc,EAAG,QAAO;AACvC,SAAO,EAAE,UAAU,UAAU;AAC/B;AAEA,SAAS,qBACP,iBACY;AACZ,SAAO;AAAA,IACL,MAAM,YAAY,MAWf;AACD,YAAM,UAAsD;AAAA,QAC1D,SAAS,KAAK;AAAA,QACd,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAChE;AACA,YAAM,SAAS,MAAM,gBAAgB,YAAY,OAAO;AACxD,UAAI,OAAO,IAAI;AAQb,cAAM,MAAM,0BAA0B,OAAO,MAAM,KAAK;AAKxD,cAAM,aAAa,qBAAqB,OAAO,MAAM,KAAK;AAI1D,cAAM,QAAQ,OAAO,MAAM;AAC3B,cAAM,QAAQ,oBAAoB,OAAO,MAAM,KAAK;AACpD,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM,OAAO,MAAM;AAAA,YACnB,GAAI,QAAQ,UAAa,EAAE,IAAI;AAAA,YAC/B,GAAI,eAAe,UAAa,EAAE,WAAW;AAAA,YAC7C,GAAI,UAAU,UAAa,EAAE,MAAM;AAAA,YACnC,GAAI,UAAU,UAAa,EAAE,UAAU,MAAM,UAAU,WAAW,MAAM,UAAU;AAAA,UACpF;AAAA,UACA,OAAO,EAAE,SAAS,GAAG;AAAA,QACvB;AAAA,MACF;AACA,aAAO,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,GAAG,GAAG,OAAO,EAAE,SAAS,OAAO,MAAM,QAAQ,EAAE;AAAA,IACpF;AAAA,EACF;AACF;AAKA,IAAI,oBAAuD;AAG3D,eAAe,YAAwC;AACrD,MAAI,iBAAiB,KAAM,QAAO;AAClC,yBAAuB,YAAwC;AAC7D,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,uBAA4B;AACvE,UAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,gCAAqC;AACpF,UAAM,WAAW,kBAAkB;AACnC,QAAI,SAAS,SAAS,GAAG;AACvB,0BAAoB;AACpB,aAAO;AAAA,IACT;AACA,mBAAe,qBAAqB,sBAAsB,QAAQ,CAAC;AAGnE,QAAI;AACF,YAAM,EAAE,mCAAmC,IACzC,MAAM,OAAO,mCAAwC;AACvD,6BAAuB,mCAAmC,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;AAAA,IAClF,SAAS,OAAgB;AAGvB,YAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,aAAO,MAAM,sDAAsD,EAAE,OAAO,IAAI,CAAC;AAAA,IACnF;AAEA,WAAO;AAAA,EACT,GAAG;AACH,SAAO;AACT;AAGA,SAAS,qBAA4D;AACnE,MAAI,yBAAyB,KAAM,QAAO,EAAE,SAAS,MAAM,SAAS,GAAG;AACvE,QAAM,SAAS,qBAAqB,gBAAgB;AACpD,MAAI,CAAC,OAAO,eAAe;AACzB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,0BAA0B,OAAO,OAAO,YAAY,CAAC,IAAI,OAAO,OAAO,KAAK,MAAM,CAAC;AAAA,IAC9F;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,SAAS,GAAG;AACtC;AAGA,eAAe,2BACb,QACA,MACA,YACA,OAC6B;AAC7B,QAAM,cAAc;AACpB,WAAS,UAAU,GAAG,UAAU,aAAa,WAAW;AACtD,UAAM,SAAS,MAAM,OAAO,YAAY,IAAI;AAC5C,UAAM,aAAa,gBAAgB,EAAE,IAAI,IAAI;AAE7C,QAAI,OAAO,IAAI;AACb,aAAO,KAAK,gCAAgC;AAAA,QAC1C;AAAA,QACA;AAAA,QACA,KAAK,OAAO,MAAM;AAAA,MACpB,CAAC;AACD,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM,OAAO,MAAM;AAAA,QACnB;AAAA,QACA;AAAA,QACA,GAAI,OAAO,MAAM,QAAQ,UAAa,EAAE,KAAK,OAAO,MAAM,IAAI;AAAA,QAC9D,GAAI,OAAO,MAAM,eAAe,UAAa,EAAE,YAAY,OAAO,MAAM,WAAW;AAAA,QACnF,GAAI,OAAO,MAAM,UAAU,UAAa,EAAE,OAAO,OAAO,MAAM,MAAM;AAAA,QACpE,GAAI,OAAO,MAAM,aAAa,UAAa,EAAE,UAAU,OAAO,MAAM,SAAS;AAAA,QAC7E,GAAI,OAAO,MAAM,cAAc,UAAa,EAAE,WAAW,OAAO,MAAM,UAAU;AAAA,MAClF;AAAA,IACF;AAEA,UAAM,cAAc,gBAAgB,OAAO,MAAM,OAAO;AACxD,QAAI,eAAe,UAAU,cAAc,GAAG;AAC5C,YAAM,YAAY,4BAA4B,UAAU;AACxD,aAAO,KAAK,iCAAiC,EAAE,YAAY,SAAS,UAAU,GAAG,UAAU,CAAC;AAC5F,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,SAAS,CAAC;AAC7D;AAAA,IACF;AAEA,WAAO,KAAK,2BAA2B,EAAE,YAAY,OAAO,OAAO,MAAM,QAAQ,CAAC;AAClF,WAAO,EAAE,SAAS,OAAO,MAAM,IAAI,YAAY,YAAY,OAAO,OAAO,MAAM,QAAQ;AAAA,EACzF;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN;AAAA,IACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,IACtC,OAAO;AAAA,EACT;AACF;AAEA,eAAsB,cACpB,YACA,QAC6B;AAC7B,QAAM,QAAQ,gBAAgB,EAAE,IAAI;AACpC,MAAI;AACF,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAAoC;AAC9E,UAAM,SAAS,iBAAiB,UAAU;AAC1C,UAAM,aAAa,GAAG,OAAO,YAAY;AAAA;AAAA,EAAO,MAAM;AAEtD,UAAM,SAAS,MAAM,UAAU;AAC/B,QAAI,WAAW,MAAM;AACnB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM,iBAAiB,MAAM;AAAA,QAC7B;AAAA,QACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,QACtC,OAAO;AAAA,MACT;AAAA,IACF;AAGA,UAAM,SAAS,mBAAmB;AAClC,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,KAAK,yCAAyC,EAAE,YAAY,QAAQ,OAAO,QAAQ,CAAC;AAC3F,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM;AAAA,QACN;AAAA,QACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,QACtC,OAAO,OAAO;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,gBAAgB,MAAM,iBAAiB;AAC7C,UAAM,OAA2E;AAAA,MAC/E,SAAS;AAAA,IACX;AACA,QAAI,kBAAkB,KAAM,MAAK,UAAU,EAAE,cAAc;AAE3D,WAAO,MAAM,2BAA2B,QAAQ,MAAM,YAAY,KAAK;AAAA,EACzE,SAAS,OAAO;AACd,UAAM,aAAa,gBAAgB,EAAE,IAAI,IAAI;AAC7C,UAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,WAAO,KAAK,uBAAuB,EAAE,YAAY,OAAO,IAAI,CAAC;AAC7D,WAAO,EAAE,SAAS,OAAO,MAAM,IAAI,YAAY,YAAY,OAAO,IAAI;AAAA,EACxE;AACF;","names":[]}
+{"version":3,"sources":["../src/pipeline/expert-bridge.ts"],"sourcesContent":["/**\n * Expert Bridge — Programmatic access to the execute_expert pipeline (#1693)\n *\n * Provides a clean wrapper for calling experts with the full pipeline:\n * timeout, fallback cascade, degradation detection, heartbeat, outcome recording.\n *\n * DRY: reuses createBuiltInExpert + CompositeRouter instead of reimplementing.\n *\n * @module pipeline/expert-bridge\n */\n\nimport { createLogger, getTimeProvider } from '../core/index.js';\nimport type { BuiltInExpertType } from '../agents/experts/expert-config.js';\nimport { isRateLimitText } from '../adapters/rate-limit-detector.js';\nimport { resolveCliSlot } from '../config/model-availability.js';\nimport type { CliNameLiteral } from '../config/model-capabilities-types.js';\n\n/**\n * Resolves a CLI slot from the model string a (CLI or API) adapter returned.\n * Known models resolve to their exact slot; **unknown** models — new releases\n * or API/openrouter models not in the curated registry — fall back to the\n * vendor-derived slot (#3317 / #3293) so the outcome is recorded against a real\n * slot instead of being dropped with an undefined cli (the api-mode gap).\n * Returns undefined only when no model is present (the bridge failed before\n * dispatch — no execution to attribute).\n */\nfunction resolveCliFromModelString(model: string | undefined): CliNameLiteral | undefined {\n  return resolveCliSlot(model);\n}\n\nconst logger = createLogger({ component: 'expert-bridge' });\n\n/** Base delay for rate limit retry backoff (ms). Scales linearly: 3s, 6s, 9s. */\nconst RATE_LIMIT_BASE_DELAY_MS = 3000;\n\n/** Result of an expert execution. */\nexport interface ExpertBridgeResult {\n  readonly success: boolean;\n  readonly text: string;\n  readonly expertType: BuiltInExpertType;\n  readonly durationMs: number;\n  readonly error?: string;\n  /**\n   * CLI that actually executed the task, resolved from the underlying\n   * `CliResponse.model` via `getCliForModelId`. Undefined when the bridge\n   * failed before dispatch (no adapters / circuit-open / rate-limit cap).\n   * Callers writing to OutcomeStore should use this rather than hardcoding\n   * a cli — see #2823 (#1154 regression).\n   */\n  readonly cli?: CliNameLiteral;\n  /**\n   * Total tokens (input + output) the underlying CLI/adapter reported for this\n   * call, when available (#3396). Best-effort: `CliResponse.usage` is optional\n   * — CLI-subprocess paths whose `extractUsage` returns null leave this\n   * undefined. Consumers (budget enforcement #3395, model.called attribution\n   * #3387, routing-experience metrics) must tolerate `undefined`.\n   */\n  readonly tokensUsed?: number;\n  /**\n   * Concrete model id the underlying adapter reported (`CliResponse.model`),\n   * when present (#3387). Distinct from {@link cli} (the slot): one CLI can run\n   * several models. Undefined when the adapter didn't report a model or the\n   * bridge failed before dispatch. Required to emit a `model.called` event.\n   */\n  readonly model?: string;\n  /**\n   * Input/output token split from the adapter's `CliResponse.usage` (#3387),\n   * when reported. Best-effort like {@link tokensUsed}; both undefined together\n   * when no usage was available. `tokensIn + tokensOut` reconciles with\n   * `tokensUsed` (single source of truth — both derive from the same record).\n   */\n  readonly tokensIn?: number;\n  readonly tokensOut?: number;\n}\n\n/**\n * Execute an expert task with the full nexus-agents expert pipeline.\n *\n * Creates a built-in expert, executes via CompositeRouter (for intelligent\n * CLI routing), and records outcomes. Falls back gracefully on failure.\n *\n * @param expertType - Built-in expert type (code, architecture, security, qa, etc.)\n * @param prompt - Task prompt for the expert\n * @returns Expert result with text output\n */\n/** Minimal router interface for the bridge. */\ninterface RouterLike {\n  executeTask(task: { content: string; options?: Record<string, unknown> | undefined }): Promise<{\n    ok: boolean;\n    value: {\n      text: string;\n      cli?: CliNameLiteral;\n      tokensUsed?: number;\n      model?: string;\n      tokensIn?: number;\n      tokensOut?: number;\n    };\n    error: { message: string };\n  }>;\n}\n\n// Cached router — lazily initialized, reused across calls within a session\nlet cachedRouter: RouterLike | null = null;\n\n// Cached MCP config — generated once, reused across expert calls (#1708)\nlet cachedMcpConfigPath: string | null = null;\n// Cached cleanup for the cached config's tempdir (closes #2946). Previously\n// the cleanup returned by `generateMcpConfig` was thrown away, so\n// `/tmp/nexus-mcp-XXXXXX/` accumulated one entry per MCP server lifetime.\n// Stored here + invoked by `shutdownExpertBridge()` from the server's\n// graceful-shutdown path.\nlet cachedMcpConfigCleanup: (() => Promise<void>) | null = null;\n// Coalesces concurrent init under voter fan-out (closes #2969). consensus_vote\n// fans out N=7 callers on cold start; without this each one ran the full init\n// including a mkdtemp() that the loser N-1 instances never cleaned up.\nlet mcpConfigInitPromise: Promise<string | null> | null = null;\n\n/** Get or create cached MCP config path for expert CLI sessions (#1708). */\nasync function getMcpConfigPath(): Promise<string | null> {\n  if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;\n  mcpConfigInitPromise ??= (async (): Promise<string | null> => {\n    try {\n      const { generateMcpConfig } = await import('../cli-adapters/child-mcp-config.js');\n      const config = await generateMcpConfig();\n      cachedMcpConfigPath = config.configPath;\n      cachedMcpConfigCleanup = config.cleanup;\n      return cachedMcpConfigPath;\n    } catch {\n      mcpConfigInitPromise = null; // allow retry on next call\n      return null; // MCP config not available — experts run without tools\n    }\n  })();\n  return mcpConfigInitPromise;\n}\n\n/**\n * Removes the cached MCP-config tempdir (closes #2946). Invoke from the\n * server's graceful-shutdown path so stale nexus-mcp-* tempdirs (under\n * the OS tmpdir, see child-mcp-config.ts) don't accumulate across daemon\n * restarts. Idempotent; safe to call multiple times. Never throws —\n * cleanup failures are logged and swallowed.\n */\nexport async function shutdownExpertBridge(): Promise<void> {\n  const cleanup = cachedMcpConfigCleanup;\n  if (cleanup === null) return;\n  cachedMcpConfigCleanup = null;\n  cachedMcpConfigPath = null;\n  mcpConfigInitPromise = null;\n  try {\n    await cleanup();\n  } catch (error: unknown) {\n    const msg = error instanceof Error ? error.message : String(error);\n    logger.debug('Expert-bridge MCP-config cleanup failed', { error: msg });\n  }\n}\n\n/** Cached circuit breaker for health monitoring (#1766). */\nlet cachedCircuitBreaker: {\n  getHealthStatus(): {\n    systemHealthy: boolean;\n    healthyCount: number;\n    clis: ReadonlyArray<{ name: string; healthy: boolean }>;\n  };\n} | null = null;\n\n/**\n * Adapt a CompositeRouter to the narrower RouterLike interface used by this\n * bridge. Previously did `as unknown as RouterLike` which hid any structural\n * mismatch between CompositeRouter's `Result<CliResponse, CliError>` and\n * RouterLike's flat `{ ok, value: { text }, error: { message } }` shape.\n * If CliResponse renames `.text` → `.output` (or similar), this adapter\n * breaks at compile time instead of silently returning wrong data (#1921).\n */\n/**\n * Total tokens from a best-effort `CliResponse.usage` record (#3396). Prefers\n * the reported `totalTokens`; falls back to input+output; returns undefined\n * when no usage was reported (so callers can distinguish \"0 tokens\" — which\n * never happens for a real call — from \"unknown\").\n */\nexport function totalTokensFromUsage(\n  usage: { totalTokens?: number; inputTokens?: number; outputTokens?: number } | undefined\n): number | undefined {\n  if (usage === undefined) return undefined;\n  if (typeof usage.totalTokens === 'number') return usage.totalTokens;\n  const total = (usage.inputTokens ?? 0) + (usage.outputTokens ?? 0);\n  return total > 0 ? total : undefined;\n}\n\n/**\n * Per-direction token split from a best-effort `CliResponse.usage` record\n * (#3387). Unlike {@link totalTokensFromUsage} this keeps `tokensIn`/`tokensOut`\n * separate — the granularity `ModelCalledEvent` requires for attribution.\n * Returns undefined when no usage was reported or both directions are zero (no\n * real call), so callers skip emitting a noise event instead of recording\n * zeros. Reconciles with the total: `tokensIn + tokensOut === totalTokensFromUsage`.\n */\nexport function tokenSplitFromUsage(\n  usage: { inputTokens?: number; outputTokens?: number; totalTokens?: number } | undefined\n): { tokensIn: number; tokensOut: number } | undefined {\n  if (usage === undefined) return undefined;\n  const tokensIn = usage.inputTokens ?? 0;\n  const tokensOut = usage.outputTokens ?? 0;\n  if (tokensIn + tokensOut === 0) return undefined;\n  return { tokensIn, tokensOut };\n}\n\nfunction adaptCompositeRouter(\n  compositeRouter: import('../cli-adapters/composite-router.js').ICompositeRouter\n): RouterLike {\n  return {\n    async executeTask(task): Promise<{\n      ok: boolean;\n      value: {\n        text: string;\n        cli?: CliNameLiteral;\n        tokensUsed?: number;\n        model?: string;\n        tokensIn?: number;\n        tokensOut?: number;\n      };\n      error: { message: string };\n    }> {\n      const cliTask: import('../cli-adapters/types.js').CliTask = {\n        content: task.content,\n        ...(task.options !== undefined ? { options: task.options } : {}),\n      };\n      const result = await compositeRouter.executeTask(cliTask);\n      if (result.ok) {\n        // #2823: surface which CLI actually executed so callers writing to\n        // OutcomeStore don't have to hardcode 'claude' (the bug #1154 fixed\n        // and that regressed into the pipeline/ tree). Derive via the\n        // canonical model→cli mapping in the registry — if the underlying\n        // adapter didn't set `model` or the model isn't in the registry,\n        // cli stays undefined and downstream code can skip the record\n        // rather than lie.\n        const cli = resolveCliFromModelString(result.value.model);\n        // #3396: surface token usage (best-effort) so budget enforcement,\n        // attribution, and routing-experience metrics get real numbers instead\n        // of zeros. `usage` is optional and `totalTokens` may be absent — fall\n        // back to input+output, and leave undefined when no usage was reported.\n        const tokensUsed = totalTokensFromUsage(result.value.usage);\n        // #3387: also surface the concrete model + per-direction token split so\n        // a meaningful `model.called` event can be emitted. Both derive from the\n        // same CliResponse, so tokensIn+tokensOut reconciles with tokensUsed.\n        const model = result.value.model;\n        const split = tokenSplitFromUsage(result.value.usage);\n        return {\n          ok: true,\n          value: {\n            text: result.value.text,\n            ...(cli !== undefined && { cli }),\n            ...(tokensUsed !== undefined && { tokensUsed }),\n            ...(model !== undefined && { model }),\n            ...(split !== undefined && { tokensIn: split.tokensIn, tokensOut: split.tokensOut }),\n          },\n          error: { message: '' },\n        };\n      }\n      return { ok: false, value: { text: '' }, error: { message: result.error.message } };\n    },\n  };\n}\n\n// Coalesces concurrent router init the same way mcpConfigInitPromise does\n// (closes #2969). N=7 voter fan-out previously ran createAllAdapters() N times\n// — N sets of CLI probe subprocesses, all but one discarded.\nlet routerInitPromise: Promise<RouterLike | null> | null = null;\n\n/** Get or create a cached CompositeRouter with circuit breaker monitoring. */\nasync function getRouter(): Promise<RouterLike | null> {\n  if (cachedRouter !== null) return cachedRouter;\n  routerInitPromise ??= (async (): Promise<RouterLike | null> => {\n    // ROUTER CONSTRUCTION, a distinct operation from adapter acquisition\n    // (#5191, ratified 5/6). `createCompositeRouter` needs\n    // `Map<RoutingArmId, ICliAdapter>`; `getGlobalRegistry()` returns\n    // `IResilientAdapter` (extends `IModelAdapter`) one CLI at a time, so the\n    // canonical path cannot type-check here.\n    //\n    // It also should not be used: the router IS the selection/failover layer,\n    // so resilient-wrapped arms would nest two failover mechanisms, and the\n    // shared circuit breaker would make an arm report unavailable without the\n    // router ever testing it. That is the doctor-probe defect (#5209) applied\n    // to routing — and this map is the LinUCB arm space, so a coupled arm\n    // availability would distort exploration signals.\n    //\n    // Pinned by `router-operation.test.ts`.\n    const { createAllAdapters } = await import('../cli-adapters/factory.js');\n    const { createCompositeRouter } = await import('../cli-adapters/composite-router.js');\n    const adapters = createAllAdapters();\n    if (adapters.size === 0) {\n      routerInitPromise = null; // allow retry once adapters become available\n      return null;\n    }\n    cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));\n\n    // Initialize circuit breaker monitoring (#1766)\n    try {\n      const { createCliCircuitBreakerIntegration } =\n        await import('../cli-adapters/cli-circuit-breaker.js');\n      cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);\n    } catch (error: unknown) {\n      // Circuit breaker not available — continue without it. Log so we can\n      // notice if initialization silently stops working (#1913 Class B).\n      const msg = error instanceof Error ? error.message : String(error);\n      logger.debug('Circuit breaker init failed; continuing without it', { error: msg });\n    }\n\n    return cachedRouter;\n  })();\n  return routerInitPromise;\n}\n\n/** Check CLI health before dispatch (#1766). */\nfunction checkCircuitHealth(): { healthy: boolean; message: string } {\n  if (cachedCircuitBreaker === null) return { healthy: true, message: '' };\n  const status = cachedCircuitBreaker.getHealthStatus();\n  if (!status.systemHealthy) {\n    return {\n      healthy: false,\n      message: `All CLI circuits open (${String(status.healthyCount)}/${String(status.clis.length)} healthy)`,\n    };\n  }\n  return { healthy: true, message: '' };\n}\n\n/** Dispatch task to router with rate limit retry (#1802). */\nasync function dispatchWithRateLimitRetry(\n  router: RouterLike,\n  task: { content: string; options?: Record<string, unknown> | undefined },\n  expertType: BuiltInExpertType,\n  start: number\n): Promise<ExpertBridgeResult> {\n  const maxAttempts = 3;\n  for (let attempt = 0; attempt < maxAttempts; attempt++) {\n    const result = await router.executeTask(task);\n    const durationMs = getTimeProvider().now() - start;\n\n    if (result.ok) {\n      logger.info('Expert executed successfully', {\n        expertType,\n        durationMs,\n        cli: result.value.cli,\n      });\n      return {\n        success: true,\n        text: result.value.text,\n        expertType,\n        durationMs,\n        ...(result.value.cli !== undefined && { cli: result.value.cli }),\n        ...(result.value.tokensUsed !== undefined && { tokensUsed: result.value.tokensUsed }),\n        ...(result.value.model !== undefined && { model: result.value.model }),\n        ...(result.value.tokensIn !== undefined && { tokensIn: result.value.tokensIn }),\n        ...(result.value.tokensOut !== undefined && { tokensOut: result.value.tokensOut }),\n      };\n    }\n\n    const isRateLimit = isRateLimitText(result.error.message);\n    if (isRateLimit && attempt < maxAttempts - 1) {\n      const backoffMs = RATE_LIMIT_BASE_DELAY_MS * (attempt + 1);\n      logger.warn('Expert rate limited, retrying', { expertType, attempt: attempt + 1, backoffMs });\n      await new Promise((resolve) => setTimeout(resolve, backoffMs));\n      continue;\n    }\n\n    logger.warn('Expert execution failed', { expertType, error: result.error.message });\n    return { success: false, text: '', expertType, durationMs, error: result.error.message };\n  }\n\n  return {\n    success: false,\n    text: '',\n    expertType,\n    durationMs: getTimeProvider().now() - start,\n    error: 'Max retry attempts exceeded',\n  };\n}\n\nexport async function executeExpert(\n  expertType: BuiltInExpertType,\n  prompt: string\n): Promise<ExpertBridgeResult> {\n  const start = getTimeProvider().now();\n  try {\n    const { BUILT_IN_EXPERTS } = await import('../agents/experts/expert-config.js');\n    const config = BUILT_IN_EXPERTS[expertType];\n    const fullPrompt = `${config.systemPrompt}\\n\\n${prompt}`;\n\n    const router = await getRouter();\n    if (router === null) {\n      return {\n        success: false,\n        text: `[No adapters] ${prompt}`,\n        expertType,\n        durationMs: getTimeProvider().now() - start,\n        error: 'No CLI adapters available',\n      };\n    }\n\n    // Check circuit breaker health before dispatch (#1766)\n    const health = checkCircuitHealth();\n    if (!health.healthy) {\n      logger.warn('Circuit breaker: all CLIs unavailable', { expertType, reason: health.message });\n      return {\n        success: false,\n        text: '',\n        expertType,\n        durationMs: getTimeProvider().now() - start,\n        error: health.message,\n      };\n    }\n\n    // Pass MCP config so CLI experts can call nexus-agents tools (#1708)\n    const mcpConfigPath = await getMcpConfigPath();\n    const task: { content: string; options?: Record<string, unknown> | undefined } = {\n      content: fullPrompt,\n    };\n    if (mcpConfigPath !== null) task.options = { mcpConfigPath };\n\n    return await dispatchWithRateLimitRetry(router, task, expertType, start);\n  } catch (error) {\n    const durationMs = getTimeProvider().now() - start;\n    const msg = error instanceof Error ? error.message : String(error);\n    logger.warn('Expert bridge error', { expertType, error: msg });\n    return { success: false, text: '', expertType, durationMs, error: msg };\n  }\n}\n"],"mappings":";;;;;;;;;;AA0BA,SAAS,0BAA0B,OAAuD;AACxF,SAAO,eAAe,KAAK;AAC7B;AAEA,IAAM,SAAS,aAAa,EAAE,WAAW,gBAAgB,CAAC;AAG1D,IAAM,2BAA2B;AAqEjC,IAAI,eAAkC;AAGtC,IAAI,sBAAqC;AAMzC,IAAI,yBAAuD;AAI3D,IAAI,uBAAsD;AAG1D,eAAe,mBAA2C;AACxD,MAAI,wBAAwB,KAAM,QAAO;AACzC,4BAA0B,YAAoC;AAC5D,QAAI;AACF,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,gCAAqC;AAChF,YAAM,SAAS,MAAM,kBAAkB;AACvC,4BAAsB,OAAO;AAC7B,+BAAyB,OAAO;AAChC,aAAO;AAAA,IACT,QAAQ;AACN,6BAAuB;AACvB,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,SAAO;AACT;AASA,eAAsB,uBAAsC;AAC1D,QAAM,UAAU;AAChB,MAAI,YAAY,KAAM;AACtB,2BAAyB;AACzB,wBAAsB;AACtB,yBAAuB;AACvB,MAAI;AACF,UAAM,QAAQ;AAAA,EAChB,SAAS,OAAgB;AACvB,UAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,WAAO,MAAM,2CAA2C,EAAE,OAAO,IAAI,CAAC;AAAA,EACxE;AACF;AAGA,IAAI,uBAMO;AAgBJ,SAAS,qBACd,OACoB;AACpB,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,MAAM,gBAAgB,SAAU,QAAO,MAAM;AACxD,QAAM,SAAS,MAAM,eAAe,MAAM,MAAM,gBAAgB;AAChE,SAAO,QAAQ,IAAI,QAAQ;AAC7B;AAUO,SAAS,oBACd,OACqD;AACrD,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,WAAW,MAAM,eAAe;AACtC,QAAM,YAAY,MAAM,gBAAgB;AACxC,MAAI,WAAW,cAAc,EAAG,QAAO;AACvC,SAAO,EAAE,UAAU,UAAU;AAC/B;AAEA,SAAS,qBACP,iBACY;AACZ,SAAO;AAAA,IACL,MAAM,YAAY,MAWf;AACD,YAAM,UAAsD;AAAA,QAC1D,SAAS,KAAK;AAAA,QACd,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAChE;AACA,YAAM,SAAS,MAAM,gBAAgB,YAAY,OAAO;AACxD,UAAI,OAAO,IAAI;AAQb,cAAM,MAAM,0BAA0B,OAAO,MAAM,KAAK;AAKxD,cAAM,aAAa,qBAAqB,OAAO,MAAM,KAAK;AAI1D,cAAM,QAAQ,OAAO,MAAM;AAC3B,cAAM,QAAQ,oBAAoB,OAAO,MAAM,KAAK;AACpD,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM,OAAO,MAAM;AAAA,YACnB,GAAI,QAAQ,UAAa,EAAE,IAAI;AAAA,YAC/B,GAAI,eAAe,UAAa,EAAE,WAAW;AAAA,YAC7C,GAAI,UAAU,UAAa,EAAE,MAAM;AAAA,YACnC,GAAI,UAAU,UAAa,EAAE,UAAU,MAAM,UAAU,WAAW,MAAM,UAAU;AAAA,UACpF;AAAA,UACA,OAAO,EAAE,SAAS,GAAG;AAAA,QACvB;AAAA,MACF;AACA,aAAO,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,GAAG,GAAG,OAAO,EAAE,SAAS,OAAO,MAAM,QAAQ,EAAE;AAAA,IACpF;AAAA,EACF;AACF;AAKA,IAAI,oBAAuD;AAG3D,eAAe,YAAwC;AACrD,MAAI,iBAAiB,KAAM,QAAO;AAClC,yBAAuB,YAAwC;AAe7D,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,uBAA4B;AACvE,UAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,gCAAqC;AACpF,UAAM,WAAW,kBAAkB;AACnC,QAAI,SAAS,SAAS,GAAG;AACvB,0BAAoB;AACpB,aAAO;AAAA,IACT;AACA,mBAAe,qBAAqB,sBAAsB,QAAQ,CAAC;AAGnE,QAAI;AACF,YAAM,EAAE,mCAAmC,IACzC,MAAM,OAAO,mCAAwC;AACvD,6BAAuB,mCAAmC,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;AAAA,IAClF,SAAS,OAAgB;AAGvB,YAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,aAAO,MAAM,sDAAsD,EAAE,OAAO,IAAI,CAAC;AAAA,IACnF;AAEA,WAAO;AAAA,EACT,GAAG;AACH,SAAO;AACT;AAGA,SAAS,qBAA4D;AACnE,MAAI,yBAAyB,KAAM,QAAO,EAAE,SAAS,MAAM,SAAS,GAAG;AACvE,QAAM,SAAS,qBAAqB,gBAAgB;AACpD,MAAI,CAAC,OAAO,eAAe;AACzB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,0BAA0B,OAAO,OAAO,YAAY,CAAC,IAAI,OAAO,OAAO,KAAK,MAAM,CAAC;AAAA,IAC9F;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,SAAS,GAAG;AACtC;AAGA,eAAe,2BACb,QACA,MACA,YACA,OAC6B;AAC7B,QAAM,cAAc;AACpB,WAAS,UAAU,GAAG,UAAU,aAAa,WAAW;AACtD,UAAM,SAAS,MAAM,OAAO,YAAY,IAAI;AAC5C,UAAM,aAAa,gBAAgB,EAAE,IAAI,IAAI;AAE7C,QAAI,OAAO,IAAI;AACb,aAAO,KAAK,gCAAgC;AAAA,QAC1C;AAAA,QACA;AAAA,QACA,KAAK,OAAO,MAAM;AAAA,MACpB,CAAC;AACD,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM,OAAO,MAAM;AAAA,QACnB;AAAA,QACA;AAAA,QACA,GAAI,OAAO,MAAM,QAAQ,UAAa,EAAE,KAAK,OAAO,MAAM,IAAI;AAAA,QAC9D,GAAI,OAAO,MAAM,eAAe,UAAa,EAAE,YAAY,OAAO,MAAM,WAAW;AAAA,QACnF,GAAI,OAAO,MAAM,UAAU,UAAa,EAAE,OAAO,OAAO,MAAM,MAAM;AAAA,QACpE,GAAI,OAAO,MAAM,aAAa,UAAa,EAAE,UAAU,OAAO,MAAM,SAAS;AAAA,QAC7E,GAAI,OAAO,MAAM,cAAc,UAAa,EAAE,WAAW,OAAO,MAAM,UAAU;AAAA,MAClF;AAAA,IACF;AAEA,UAAM,cAAc,gBAAgB,OAAO,MAAM,OAAO;AACxD,QAAI,eAAe,UAAU,cAAc,GAAG;AAC5C,YAAM,YAAY,4BAA4B,UAAU;AACxD,aAAO,KAAK,iCAAiC,EAAE,YAAY,SAAS,UAAU,GAAG,UAAU,CAAC;AAC5F,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,SAAS,CAAC;AAC7D;AAAA,IACF;AAEA,WAAO,KAAK,2BAA2B,EAAE,YAAY,OAAO,OAAO,MAAM,QAAQ,CAAC;AAClF,WAAO,EAAE,SAAS,OAAO,MAAM,IAAI,YAAY,YAAY,OAAO,OAAO,MAAM,QAAQ;AAAA,EACzF;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN;AAAA,IACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,IACtC,OAAO;AAAA,EACT;AACF;AAEA,eAAsB,cACpB,YACA,QAC6B;AAC7B,QAAM,QAAQ,gBAAgB,EAAE,IAAI;AACpC,MAAI;AACF,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAAoC;AAC9E,UAAM,SAAS,iBAAiB,UAAU;AAC1C,UAAM,aAAa,GAAG,OAAO,YAAY;AAAA;AAAA,EAAO,MAAM;AAEtD,UAAM,SAAS,MAAM,UAAU;AAC/B,QAAI,WAAW,MAAM;AACnB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM,iBAAiB,MAAM;AAAA,QAC7B;AAAA,QACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,QACtC,OAAO;AAAA,MACT;AAAA,IACF;AAGA,UAAM,SAAS,mBAAmB;AAClC,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,KAAK,yCAAyC,EAAE,YAAY,QAAQ,OAAO,QAAQ,CAAC;AAC3F,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM;AAAA,QACN;AAAA,QACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,QACtC,OAAO,OAAO;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,gBAAgB,MAAM,iBAAiB;AAC7C,UAAM,OAA2E;AAAA,MAC/E,SAAS;AAAA,IACX;AACA,QAAI,kBAAkB,KAAM,MAAK,UAAU,EAAE,cAAc;AAE3D,WAAO,MAAM,2BAA2B,QAAQ,MAAM,YAAY,KAAK;AAAA,EACzE,SAAS,OAAO;AACd,UAAM,aAAa,gBAAgB,EAAE,IAAI,IAAI;AAC7C,UAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,WAAO,KAAK,uBAAuB,EAAE,YAAY,OAAO,IAAI,CAAC;AAC7D,WAAO,EAAE,SAAS,OAAO,MAAM,IAAI,YAAY,YAAY,OAAO,IAAI;AAAA,EACxE;AACF;","names":[]}

package/dist/{chunk-VWLFVDVW.js → chunk-O2RQZFOJ.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-XHNXEV3M.js";
+} from "./chunk-3NJFOC3L.js";
 import {
   emitClawGuardViolation
 } from "./chunk-3U6L7DBT.js";
@@ -2116,4 +2116,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-VWLFVDVW.js.map
+//# sourceMappingURL=chunk-O2RQZFOJ.js.map

package/dist/{chunk-2YOYMLRN.js → chunk-OFEXOT56.js}

@@ -21,10 +21,10 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-GJ5XPWVR.js";
+} from "./chunk-HIXWQWNA.js";
 import {
   executeExpert
-} from "./chunk-FYXHSU6S.js";
+} from "./chunk-MUTREHSB.js";
 import {
   JobStatusSchema,
   VOTER_ROLES,
@@ -47,7 +47,7 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-J4NQLEBM.js";
+} from "./chunk-VDA4B6NO.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -64,7 +64,7 @@ import {
 } from "./chunk-6FD2ANO6.js";
 import {
   withPrerequisite
-} from "./chunk-UFJNPPWT.js";
+} from "./chunk-SYVBAREH.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -88,7 +88,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-VWLFVDVW.js";
+} from "./chunk-O2RQZFOJ.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -45527,7 +45527,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-FX2IHQPZ.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-JHRGVFMI.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -47541,7 +47541,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-IGRDOZ4K.js");
+        const { executeVoting } = await import("./consensus-vote-YMHPKKZV.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -56169,4 +56169,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-2YOYMLRN.js.map
+//# sourceMappingURL=chunk-OFEXOT56.js.map

package/dist/{chunk-UFJNPPWT.js → chunk-SYVBAREH.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-VWLFVDVW.js";
+} from "./chunk-O2RQZFOJ.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2159,4 +2159,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-UFJNPPWT.js.map
+//# sourceMappingURL=chunk-SYVBAREH.js.map

package/dist/{chunk-J4NQLEBM.js → chunk-VDA4B6NO.js}

@@ -23,7 +23,7 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-VWLFVDVW.js";
+} from "./chunk-O2RQZFOJ.js";
 import {
   assessPanelIndependence,
   countDistinctModels,
@@ -6216,7 +6216,7 @@ async function processVotesWithCascade(engineVotes, opts) {
 var CONTRARIAN_ESCALATION_THRESHOLD = 0.8;
 async function runContrarianCheck(proposal, log) {
   try {
-    const { executeExpert } = await import("./expert-bridge-FX2IHQPZ.js");
+    const { executeExpert } = await import("./expert-bridge-JHRGVFMI.js");
     const prompt = [
       "You are a contrarian analyst. Your job is to find reasons this proposal should be REJECTED.",
       "Look for: YAGNI (not needed), MISALIGNED (wrong tech/architecture), SECURITY_RISK, SCOPE_CREEP.",
@@ -6803,4 +6803,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-J4NQLEBM.js.map
+//# sourceMappingURL=chunk-VDA4B6NO.js.map

package/dist/cli.js

@@ -152,7 +152,7 @@ import {
   validateNexusEnv,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-2YOYMLRN.js";
+} from "./chunk-OFEXOT56.js";
 import "./chunk-TKEO2CET.js";
 import "./chunk-HFOQKCD2.js";
 import "./chunk-RSMG2DPB.js";
@@ -171,14 +171,14 @@ import {
   doctorCommand,
   initDataDirectories,
   runDoctor
-} from "./chunk-GJ5XPWVR.js";
+} from "./chunk-HIXWQWNA.js";
 import {
   buildOpenAICompatAdapters,
   readOpenAICompatEnv
 } from "./chunk-QPV34W5L.js";
 import {
   shutdownExpertBridge
-} from "./chunk-FYXHSU6S.js";
+} from "./chunk-MUTREHSB.js";
 import {
   ConsensusVoteInputSchema,
   DEFAULT_VOTE_TIMEOUT_MS,
@@ -190,7 +190,7 @@ import {
   recordAuthenticVote,
   registerConsensusVoteTool,
   toRecordDecision
-} from "./chunk-J4NQLEBM.js";
+} from "./chunk-VDA4B6NO.js";
 import {
   loadUsageEvents,
   rollupByModel
@@ -226,15 +226,15 @@ import {
   registerImprovementReviewTool,
   runImprovementReview,
   scanForSecrets
-} from "./chunk-UFJNPPWT.js";
+} from "./chunk-SYVBAREH.js";
 import {
   createDefaultPolicyFirewall,
   setGlobalPolicyFirewall,
   stagePolicyFirewallForRollout
-} from "./chunk-VWLFVDVW.js";
+} from "./chunk-O2RQZFOJ.js";
 import {
   VERSION
-} from "./chunk-XHNXEV3M.js";
+} from "./chunk-3NJFOC3L.js";
 import "./chunk-3U6L7DBT.js";
 import {
   createUnifiedRegistry,
@@ -19553,7 +19553,7 @@ function startImprovementReviewScheduler(options) {
   let running = false;
   const runOnce = async () => {
     try {
-      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-5SERWMDP.js");
+      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-BTPKYYYU.js");
       const input = ImprovementReviewInputSchema2.parse({ fileIssues });
       const result = await runImprovementReview2(input, { logger: logger22 });
       logger22.info("Scheduled improvement_review complete", {