nexus-agents 6.3.2 → 6.3.4

package/dist/{chunk-BT534KOS.js → chunk-DPFRPNAC.js}

@@ -1,19 +1,19 @@
 import {
   readOpenAICompatEnv
-} from "./chunk-E2TILOO3.js";
+} from "./chunk-JLA2YAGY.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
 import {
   VERSION
-} from "./chunk-5STSWEDG.js";
+} from "./chunk-AQBOZVBW.js";
 import {
   capitalize
 } from "./chunk-6T3EPABN.js";
 import {
   createAllAdapters,
   probeCli
-} from "./chunk-5YZF5DUW.js";
+} from "./chunk-R6YU33TY.js";
 import {
   getNexusTmpDir
 } from "./chunk-4OW67KT2.js";
@@ -28,7 +28,7 @@ import {
   ok,
   symbols,
   writeLine
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 import {
   getLearningDir,
   getOutcomesFile,
@@ -1201,13 +1201,13 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-NNBWZ2BK.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-VN2PMSVM.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
   }
   if (!result.configFile.found) {
-    const { runConfigInitSync } = await import("./setup-config-LZWSAEL7.js");
+    const { runConfigInitSync } = await import("./setup-config-IVLUCSF2.js");
     const configResult = runConfigInitSync(process.cwd(), false, false);
     if (configResult.success && configResult.created) {
       writeLine2(`\u2713 Generated config: ${configResult.path}`);
@@ -1303,4 +1303,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-BT534KOS.js.map
+//# sourceMappingURL=chunk-DPFRPNAC.js.map

package/dist/{chunk-MFORQ7FO.js → chunk-E6LGFJQE.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 
 // src/context/session-memory.ts
 import * as fs from "fs";
@@ -366,4 +366,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-MFORQ7FO.js.map
+//# sourceMappingURL=chunk-E6LGFJQE.js.map

package/dist/{chunk-GVRDLRJM.js → chunk-ECHZGAZO.js}

@@ -1,13 +1,15 @@
 import {
   computeTokenCost,
+  createLogger,
   getDefaultRegistry,
   roundToMicroUsd
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 import {
   getNexusDataDir
 } from "./chunk-OGHEKPLD.js";
 
 // src/learning/usage-log.ts
+import { z } from "zod";
 import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync } from "fs";
 import { dirname, join } from "path";
 function computeCostDetail(modelId, inputTokens, outputTokens) {
@@ -48,6 +50,37 @@ function listUsageFiles(dir) {
     return [];
   }
 }
+var logger = createLogger({ component: "usage-log" });
+var UsageEventSchema = z.object({
+  timestamp: z.string(),
+  modelId: z.string(),
+  providerId: z.string(),
+  inputTokens: z.number(),
+  outputTokens: z.number(),
+  usdCost: z.number(),
+  latencyMs: z.number(),
+  success: z.boolean(),
+  category: z.string().optional(),
+  errorCode: z.string().optional(),
+  priced: z.boolean().optional(),
+  priceSource: z.string().optional()
+});
+function toUsageEvent(v) {
+  return {
+    timestamp: v.timestamp,
+    modelId: v.modelId,
+    providerId: v.providerId,
+    inputTokens: v.inputTokens,
+    outputTokens: v.outputTokens,
+    usdCost: v.usdCost,
+    latencyMs: v.latencyMs,
+    success: v.success,
+    ...v.category !== void 0 && { category: v.category },
+    ...v.errorCode !== void 0 && { errorCode: v.errorCode },
+    ...v.priced !== void 0 && { priced: v.priced },
+    ...v.priceSource !== void 0 && { priceSource: v.priceSource }
+  };
+}
 function eventMatches(parsed, f) {
   const ts = Date.parse(parsed.timestamp);
   if (ts < f.sinceMs || ts >= f.untilMs) return false;
@@ -63,14 +96,26 @@ function parseFileLines(filePath, filter) {
     return [];
   }
   const out = [];
+  let rejected = 0;
   for (const line of content.split("\n")) {
     if (line.trim() === "") continue;
+    let raw;
     try {
-      const parsed = JSON.parse(line);
-      if (eventMatches(parsed, filter)) out.push(parsed);
+      raw = JSON.parse(line);
     } catch {
+      rejected++;
       continue;
     }
+    const parsed = UsageEventSchema.safeParse(raw);
+    if (!parsed.success) {
+      rejected++;
+      continue;
+    }
+    const event = toUsageEvent(parsed.data);
+    if (eventMatches(event, filter)) out.push(event);
+  }
+  if (rejected > 0) {
+    logger.warn("Usage ledger lines rejected as unreadable", { filePath, rejected });
   }
   return out;
 }
@@ -131,4 +176,4 @@ export {
   loadUsageEvents,
   rollupByModel
 };
-//# sourceMappingURL=chunk-GVRDLRJM.js.map
+//# sourceMappingURL=chunk-ECHZGAZO.js.map

package/dist/chunk-ECHZGAZO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/learning/usage-log.ts"],"sourcesContent":["/**\n * usage-log — append-only per-call usage events with cost.\n *\n * Source: Issue #2469 (epic #2467 child).\n *\n * For operators running against metered API gateways, per-call cost +\n * tokens + latency is the data they need to manage spend. This module\n * provides three things:\n *\n *   1. `recordUsageEvent(event)` — append a per-call record to a JSONL\n *      log under <NEXUS_DATA_DIR>/usage/usage-YYYY-MM.jsonl.\n *   2. `loadUsageEvents({...})` — read events for a window, filtered\n *      by model / category.\n *   3. `computeCostDetail(modelId, inputTokens, outputTokens)` (and its\n *      thin wrapper `computeCostUSD`) — compute cost from the FULL model\n *      registry pricing chain (manifest > in-tree > models.dev > generated\n *      LiteLLM catalog), including the #4164 normalized/identity resolution\n *      tier for decorated gateway model ids. A model with no pricing\n *      anywhere in the chain is reported as `priced: false` so consumers\n *      can treat the missing cost as UNMEASURED (#3855), never a real $0.\n *\n * The `usage` CLI command (cli/usage-command.ts) consumes this for the\n * operator dashboard. Existing OutcomeStore is intentionally untouched\n * — its schema is for routing/learning signals, not billing.\n */\n\nimport { z } from 'zod';\nimport { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync } from 'node:fs';\nimport { computeTokenCost, roundToMicroUsd } from './token-cost-core.js';\nimport { dirname, join } from 'node:path';\n\nimport { getNexusDataDir } from '../config/nexus-data-dir.js';\nimport { createLogger } from '../core/logger.js';\n// NOTE: only the FUNCTION is imported here — `getDefaultRegistry()` must never\n// be CALLED at module scope (#3185 bootstrap hazard: first construction reads\n// the manifest overlay/snapshot from disk). All calls happen at invocation\n// time inside computeCostDetail.\nimport { getDefaultRegistry, type MatchedVia } from '../config/model-registry.js';\nimport type { PriceBasis } from '../core/price-basis.js';\n\nexport interface UsageEvent {\n  /** ISO 8601 timestamp of the call. */\n  readonly timestamp: string;\n  /** Model identifier (e.g., 'claude-sonnet-4', 'gpt-4o'). */\n  readonly modelId: string;\n  /** Provider/adapter (e.g., 'anthropic', 'openai', 'openai-compat'). */\n  readonly providerId: string;\n  /** Token counts. */\n  readonly inputTokens: number;\n  readonly outputTokens: number;\n  /**\n   * Cost in USD. Computed at write time from the full model-registry pricing\n   * chain (see `computeCostDetail`). 0 with `priced: false` means the model\n   * was UNPRICED (cost unknown), not a real $0 — check `priced` before\n   * treating this as a measured figure.\n   */\n  readonly usdCost: number;\n  /** Wall-clock latency in milliseconds. */\n  readonly latencyMs: number;\n  /** Whether the call succeeded. */\n  readonly success: boolean;\n  /**\n   * Optional task category — populated when the call was made on behalf of\n   * a routed task (so aggregation can roll up by category).\n   */\n  readonly category?: string;\n  /** Optional failure code when success === false. */\n  readonly errorCode?: string;\n  /**\n   * Whether pricing data existed for the model at write time (#4165), so\n   * audit can distinguish a real $0 from an unpriced model. Absent on lines\n   * written before this field existed.\n   */\n  readonly priced?: boolean;\n  /**\n   * Pricing provenance: the canonical registry id whose pricing was applied\n   * (the entry's `resolvedFrom` when the #4164 fuzzy tier matched a decorated\n   * id, else the caller's model id). Present only when `priced` is true.\n   */\n  readonly priceSource?: string;\n}\n\n/** Result of a pricing-aware cost computation (#4165). */\nexport interface CostDetail {\n  /** Cost in USD. Always 0 when `priced` is false — an unknown, not a $0. */\n  readonly costUsd: number;\n  /** Whether the resolved registry entry carried pricing data. */\n  readonly priced: boolean;\n  /**\n   * Canonical id the pricing/metadata came from: the entry's `resolvedFrom`\n   * when the #4164 fuzzy tier matched a decorated id, else the caller's id.\n   */\n  readonly resolvedId: string;\n  /** Fuzzy-resolution provenance (#4164), passed through from the entry. */\n  readonly matchedVia?: MatchedVia;\n}\n\n/**\n * Compute cost in USD given a model and token counts, with pricing\n * provenance. Reads the FULL registry chain via\n * `getDefaultRegistry().getEntry()` — manifest > in-tree > models.dev >\n * generated LiteLLM catalog, plus the #4164 normalized/identity tier that\n * resolves decorated model names from OpenAI-compatible gateways to their\n * canonical entry's pricing.\n *\n * `priced: false` (with `costUsd: 0`) means NO pricing existed anywhere in\n * the chain — consumers must treat the cost as UNMEASURED (#3855), never a\n * real $0. Operators can add pricing for gateway-only models via the\n * models-manifest overlay.\n */\nexport function computeCostDetail(\n  modelId: string,\n  inputTokens: number,\n  outputTokens: number\n): CostDetail {\n  // Registry read happens at INVOCATION time, never module load — first\n  // construction touches the filesystem (#3185 bootstrap hazard).\n  const entry = getDefaultRegistry().getEntry(modelId);\n  const resolvedId = entry.resolvedFrom ?? modelId;\n  const provenance = entry.matchedVia !== undefined ? { matchedVia: entry.matchedVia } : {};\n  if (entry.pricing === undefined) {\n    return { costUsd: 0, priced: false, resolvedId, ...provenance };\n  }\n  // The arithmetic lives in the shared core (#5122); this function is the\n  // REGISTRY-BACKED, LEDGER-ROUNDED wrapper over it. Rounding to micro-USD\n  // stays here rather than in the core: it exists so this log's JSONL does not\n  // drift into floating-point noise across many small calls, which is a ledger\n  // requirement, not a property of cost.\n  const { costUsd } = computeTokenCost(\n    { input: inputTokens, output: outputTokens },\n    { inputPer1M: entry.pricing.inputPer1M, outputPer1M: entry.pricing.outputPer1M }\n  );\n  return { costUsd: roundToMicroUsd(costUsd), priced: true, resolvedId, ...provenance };\n}\n\n/**\n * The {@link PriceBasis} the cost in a {@link CostDetail} rests on (#4406).\n *\n * DELIBERATELY derived rather than stored, because `CostDetail.priced` already\n * carries the only distinction the current two-member union can express: the\n * chain resolved a rate, or it did not. A `priceBasis` property beside `priced`\n * would be a second spelling of the same boolean.\n *\n * WHAT THE `'list'` VALUE ASSERTS. Only that a rate was resolved, and that it\n * should be read as an assumed published rate. It is NOT a guarantee that the\n * number is a vendor's advertised public rate — at least two paths put\n * something else behind the label, and one puts a real published rate behind\n * `'unknown'`:\n *\n *  - The operator manifest overlay is the highest-precedence tier and passes\n *    `pricing` through; overriding pricing is its purpose. A negotiated rate\n *    entered there reports `'list'`, and the caveat then warns the reader their\n *    contract may differ over the contract rate.\n *  - The normalized/fuzzy identity tier lets a decorated gateway id inherit a\n *    DIFFERENT canonical entry's rate.\n *  - `config/models-generated-loader.ts` discards a published $0/$0 rate unless\n *    the id ends `:free`, so `'unknown'` does not mean no price exists.\n *\n * The derivation is therefore an assumption about the chain, not a fact about\n * it — conservative in the right direction (it invites a caveat rather than\n * suppressing one), and honest only if described this way. Narrowing it needs a\n * per-entry label the registry does not carry today; see {@link PriceBasis}.\n *\n * `priceSource`, the other provenance field, answers a different question: WHICH\n * registry entry supplied the number, not what KIND of rate it is. It does not\n * encode the basis, which is why the basis has to travel separately into records\n * (the decision-cost store) that persist neither field.\n */\nexport function priceBasisOf(detail: CostDetail): PriceBasis {\n  return detail.priced ? 'list' : 'unknown';\n}\n\n/**\n * Thin wrapper over {@link computeCostDetail} returning only the USD figure.\n * Returns 0 both for a genuinely free model and for a model with no pricing\n * data — callers that must tell those apart (unpriced ⇒ UNMEASURED, #3855)\n * should use `computeCostDetail` and check `priced`.\n */\nexport function computeCostUSD(modelId: string, inputTokens: number, outputTokens: number): number {\n  return computeCostDetail(modelId, inputTokens, outputTokens).costUsd;\n}\n\n/** Resolve the active usage log path for the current month. */\nexport function getUsageLogPath(date: Date = new Date()): string {\n  const year = date.getUTCFullYear();\n  const month = String(date.getUTCMonth() + 1).padStart(2, '0');\n  return join(getNexusDataDir(), 'usage', `usage-${String(year)}-${month}.jsonl`);\n}\n\n/**\n * Append a usage event to the current month's log. Best-effort — failures\n * are silent (we don't want to fail a successful model call because we\n * couldn't write a log line).\n */\nexport function recordUsageEvent(event: UsageEvent): void {\n  try {\n    const path = getUsageLogPath(new Date(event.timestamp));\n    mkdirSync(dirname(path), { recursive: true });\n    appendFileSync(path, `${JSON.stringify(event)}\\n`, 'utf-8');\n  } catch {\n    // Intentionally silent — telemetry must not break user calls.\n  }\n}\n\nexport interface LoadUsageOptions {\n  /** Restrict to events at or after this ISO timestamp. */\n  readonly sinceIso?: string;\n  /** Restrict to events before this ISO timestamp. */\n  readonly untilIso?: string;\n  /** Only events for this model. */\n  readonly modelId?: string;\n  /** Only events for this category. */\n  readonly category?: string;\n}\n\nfunction listUsageFiles(dir: string): readonly string[] {\n  if (!existsSync(dir)) return [];\n  try {\n    return readdirSync(dir).filter((f) => f.startsWith('usage-') && f.endsWith('.jsonl'));\n  } catch {\n    return [];\n  }\n}\n\ninterface LoadFilter {\n  readonly sinceMs: number;\n  readonly untilMs: number;\n  readonly modelId: string | undefined;\n  readonly category: string | undefined;\n}\n\nconst logger = createLogger({ component: 'usage-log' });\n\n/**\n * Validate a ledger line before it is trusted (#5328).\n *\n * The read path did `JSON.parse(line) as UsageEvent` — a cast. `eventMatches`\n * only inspects `timestamp` / `modelId` / `category`, so a corrupt `usdCost`\n * reached `rollupByModel`'s `reduce((s, e) => s + e.usdCost, 0)`: a string\n * concatenates, a missing value yields `NaN`, and neither throws. Every sibling\n * JSONL reader here validates; this one did not, and it is the cost ledger.\n *\n * Optional fields stay optional ON PURPOSE. `category`, `errorCode`, `priced`\n * and `priceSource` all postdate the original format — `priced` is documented\n * as \"Absent on lines written before this field existed\" — so requiring them\n * would silently discard real spend history, which is worse than the corruption\n * being fixed.\n *\n * Not `.strict()`, for the same forward-compatibility reason: a line carrying a\n * field a newer version writes must still load in an older one.\n *\n * `z.number()` already rejects `NaN` and infinities in zod v4, which is the\n * property that matters here: a cost that is not a real number cannot be summed,\n * and JSON renders `NaN` as `null`, which this also rejects.\n */\nconst UsageEventSchema = z.object({\n  timestamp: z.string(),\n  modelId: z.string(),\n  providerId: z.string(),\n  inputTokens: z.number(),\n  outputTokens: z.number(),\n  usdCost: z.number(),\n  latencyMs: z.number(),\n  success: z.boolean(),\n  category: z.string().optional(),\n  errorCode: z.string().optional(),\n  priced: z.boolean().optional(),\n  priceSource: z.string().optional(),\n});\n\n/**\n * Narrow a validated line to {@link UsageEvent}.\n *\n * Zod's `.optional()` yields `T | undefined`, which `exactOptionalPropertyTypes`\n * will not assign to a `?: T` property — an absent key and a present-but-\n * undefined key are different things under that flag, and the distinction is\n * the right one for a ledger: a line that omits `priced` is legacy, whereas one\n * that sets it to `undefined` is malformed.\n */\nfunction toUsageEvent(v: z.infer<typeof UsageEventSchema>): UsageEvent {\n  return {\n    timestamp: v.timestamp,\n    modelId: v.modelId,\n    providerId: v.providerId,\n    inputTokens: v.inputTokens,\n    outputTokens: v.outputTokens,\n    usdCost: v.usdCost,\n    latencyMs: v.latencyMs,\n    success: v.success,\n    ...(v.category !== undefined && { category: v.category }),\n    ...(v.errorCode !== undefined && { errorCode: v.errorCode }),\n    ...(v.priced !== undefined && { priced: v.priced }),\n    ...(v.priceSource !== undefined && { priceSource: v.priceSource }),\n  };\n}\n\nfunction eventMatches(parsed: UsageEvent, f: LoadFilter): boolean {\n  const ts = Date.parse(parsed.timestamp);\n  if (ts < f.sinceMs || ts >= f.untilMs) return false;\n  if (f.modelId !== undefined && parsed.modelId !== f.modelId) return false;\n  if (f.category !== undefined && parsed.category !== f.category) return false;\n  return true;\n}\n\nfunction parseFileLines(filePath: string, filter: LoadFilter): readonly UsageEvent[] {\n  let content: string;\n  try {\n    content = readFileSync(filePath, 'utf-8');\n  } catch {\n    return [];\n  }\n  const out: UsageEvent[] = [];\n  let rejected = 0;\n  for (const line of content.split('\\n')) {\n    if (line.trim() === '') continue;\n    let raw: unknown;\n    try {\n      raw = JSON.parse(line);\n    } catch {\n      // Skip malformed line; keep reading.\n      rejected++;\n      continue;\n    }\n    const parsed = UsageEventSchema.safeParse(raw);\n    if (!parsed.success) {\n      rejected++;\n      continue;\n    }\n    const event = toUsageEvent(parsed.data);\n    if (eventMatches(event, filter)) out.push(event);\n  }\n  // Say so rather than quietly returning a shorter list: a ledger that drops\n  // lines silently under-reports spend, and the operator has no way to tell.\n  if (rejected > 0) {\n    logger.warn('Usage ledger lines rejected as unreadable', { filePath, rejected });\n  }\n  return out;\n}\n\n/**\n * Load all usage events from disk that match the filter. Reads every\n * monthly log file under the data dir; for sub-second filtering at scale\n * a future PR can index by month, but linear scan is fine at the\n * \"operator dashboard\" scale this command targets.\n */\nexport function loadUsageEvents(opts: LoadUsageOptions = {}): readonly UsageEvent[] {\n  const dir = join(getNexusDataDir(), 'usage');\n  const files = listUsageFiles(dir);\n  if (files.length === 0) return [];\n  const filter: LoadFilter = {\n    sinceMs: opts.sinceIso !== undefined ? Date.parse(opts.sinceIso) : Number.NEGATIVE_INFINITY,\n    untilMs: opts.untilIso !== undefined ? Date.parse(opts.untilIso) : Number.POSITIVE_INFINITY,\n    modelId: opts.modelId,\n    category: opts.category,\n  };\n  const events: UsageEvent[] = [];\n  for (const f of files) {\n    events.push(...parseFileLines(join(dir, f), filter));\n  }\n  return events;\n}\n\nexport interface ModelRollup {\n  readonly modelId: string;\n  readonly providerId: string;\n  readonly callCount: number;\n  readonly successCount: number;\n  readonly successRate: number;\n  readonly totalInputTokens: number;\n  readonly totalOutputTokens: number;\n  readonly totalUsdCost: number;\n  readonly avgLatencyMs: number;\n  readonly costPerSuccessUsd: number;\n}\n\n/**\n * Aggregate events into per-model rollups. Sorted by total cost descending\n * — the model burning the most money at top. Useful for \"where is my spend\n * going?\" investigations.\n */\nexport function rollupByModel(events: readonly UsageEvent[]): readonly ModelRollup[] {\n  const groups = new Map<string, UsageEvent[]>();\n  for (const e of events) {\n    const arr = groups.get(e.modelId);\n    if (arr === undefined) groups.set(e.modelId, [e]);\n    else arr.push(e);\n  }\n  const rollups: ModelRollup[] = [];\n  for (const [modelId, group] of groups) {\n    const callCount = group.length;\n    const successCount = group.filter((e) => e.success).length;\n    const totalInputTokens = group.reduce((s, e) => s + e.inputTokens, 0);\n    const totalOutputTokens = group.reduce((s, e) => s + e.outputTokens, 0);\n    const totalUsdCost = group.reduce((s, e) => s + e.usdCost, 0);\n    const totalLatency = group.reduce((s, e) => s + e.latencyMs, 0);\n    const successRate = callCount === 0 ? 0 : successCount / callCount;\n    const avgLatencyMs = callCount === 0 ? 0 : totalLatency / callCount;\n    const costPerSuccessUsd = successCount === 0 ? totalUsdCost : totalUsdCost / successCount;\n    rollups.push({\n      modelId,\n      providerId: group[0]?.providerId ?? 'unknown',\n      callCount,\n      successCount,\n      successRate,\n      totalInputTokens,\n      totalOutputTokens,\n      totalUsdCost,\n      avgLatencyMs,\n      costPerSuccessUsd,\n    });\n  }\n  return rollups.sort((a, b) => b.totalUsdCost - a.totalUsdCost);\n}\n"],"mappings":";;;;;;;;;;;AA0BA,SAAS,SAAS;AAClB,SAAS,gBAAgB,YAAY,WAAW,cAAc,mBAAmB;AAEjF,SAAS,SAAS,YAAY;AAiFvB,SAAS,kBACd,SACA,aACA,cACY;AAGZ,QAAM,QAAQ,mBAAmB,EAAE,SAAS,OAAO;AACnD,QAAM,aAAa,MAAM,gBAAgB;AACzC,QAAM,aAAa,MAAM,eAAe,SAAY,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AACxF,MAAI,MAAM,YAAY,QAAW;AAC/B,WAAO,EAAE,SAAS,GAAG,QAAQ,OAAO,YAAY,GAAG,WAAW;AAAA,EAChE;AAMA,QAAM,EAAE,QAAQ,IAAI;AAAA,IAClB,EAAE,OAAO,aAAa,QAAQ,aAAa;AAAA,IAC3C,EAAE,YAAY,MAAM,QAAQ,YAAY,aAAa,MAAM,QAAQ,YAAY;AAAA,EACjF;AACA,SAAO,EAAE,SAAS,gBAAgB,OAAO,GAAG,QAAQ,MAAM,YAAY,GAAG,WAAW;AACtF;AAmCO,SAAS,aAAa,QAAgC;AAC3D,SAAO,OAAO,SAAS,SAAS;AAClC;AAaO,SAAS,gBAAgB,OAAa,oBAAI,KAAK,GAAW;AAC/D,QAAM,OAAO,KAAK,eAAe;AACjC,QAAM,QAAQ,OAAO,KAAK,YAAY,IAAI,CAAC,EAAE,SAAS,GAAG,GAAG;AAC5D,SAAO,KAAK,gBAAgB,GAAG,SAAS,SAAS,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;AAChF;AAOO,SAAS,iBAAiB,OAAyB;AACxD,MAAI;AACF,UAAM,OAAO,gBAAgB,IAAI,KAAK,MAAM,SAAS,CAAC;AACtD,cAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,mBAAe,MAAM,GAAG,KAAK,UAAU,KAAK,CAAC;AAAA,GAAM,OAAO;AAAA,EAC5D,QAAQ;AAAA,EAER;AACF;AAaA,SAAS,eAAe,KAAgC;AACtD,MAAI,CAAC,WAAW,GAAG,EAAG,QAAO,CAAC;AAC9B,MAAI;AACF,WAAO,YAAY,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ,KAAK,EAAE,SAAS,QAAQ,CAAC;AAAA,EACtF,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AASA,IAAM,SAAS,aAAa,EAAE,WAAW,YAAY,CAAC;AAwBtD,IAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,WAAW,EAAE,OAAO;AAAA,EACpB,SAAS,EAAE,OAAO;AAAA,EAClB,YAAY,EAAE,OAAO;AAAA,EACrB,aAAa,EAAE,OAAO;AAAA,EACtB,cAAc,EAAE,OAAO;AAAA,EACvB,SAAS,EAAE,OAAO;AAAA,EAClB,WAAW,EAAE,OAAO;AAAA,EACpB,SAAS,EAAE,QAAQ;AAAA,EACnB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC7B,aAAa,EAAE,OAAO,EAAE,SAAS;AACnC,CAAC;AAWD,SAAS,aAAa,GAAiD;AACrE,SAAO;AAAA,IACL,WAAW,EAAE;AAAA,IACb,SAAS,EAAE;AAAA,IACX,YAAY,EAAE;AAAA,IACd,aAAa,EAAE;AAAA,IACf,cAAc,EAAE;AAAA,IAChB,SAAS,EAAE;AAAA,IACX,WAAW,EAAE;AAAA,IACb,SAAS,EAAE;AAAA,IACX,GAAI,EAAE,aAAa,UAAa,EAAE,UAAU,EAAE,SAAS;AAAA,IACvD,GAAI,EAAE,cAAc,UAAa,EAAE,WAAW,EAAE,UAAU;AAAA,IAC1D,GAAI,EAAE,WAAW,UAAa,EAAE,QAAQ,EAAE,OAAO;AAAA,IACjD,GAAI,EAAE,gBAAgB,UAAa,EAAE,aAAa,EAAE,YAAY;AAAA,EAClE;AACF;AAEA,SAAS,aAAa,QAAoB,GAAwB;AAChE,QAAM,KAAK,KAAK,MAAM,OAAO,SAAS;AACtC,MAAI,KAAK,EAAE,WAAW,MAAM,EAAE,QAAS,QAAO;AAC9C,MAAI,EAAE,YAAY,UAAa,OAAO,YAAY,EAAE,QAAS,QAAO;AACpE,MAAI,EAAE,aAAa,UAAa,OAAO,aAAa,EAAE,SAAU,QAAO;AACvE,SAAO;AACT;AAEA,SAAS,eAAe,UAAkB,QAA2C;AACnF,MAAI;AACJ,MAAI;AACF,cAAU,aAAa,UAAU,OAAO;AAAA,EAC1C,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAAoB,CAAC;AAC3B,MAAI,WAAW;AACf,aAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,QAAI,KAAK,KAAK,MAAM,GAAI;AACxB,QAAI;AACJ,QAAI;AACF,YAAM,KAAK,MAAM,IAAI;AAAA,IACvB,QAAQ;AAEN;AACA;AAAA,IACF;AACA,UAAM,SAAS,iBAAiB,UAAU,GAAG;AAC7C,QAAI,CAAC,OAAO,SAAS;AACnB;AACA;AAAA,IACF;AACA,UAAM,QAAQ,aAAa,OAAO,IAAI;AACtC,QAAI,aAAa,OAAO,MAAM,EAAG,KAAI,KAAK,KAAK;AAAA,EACjD;AAGA,MAAI,WAAW,GAAG;AAChB,WAAO,KAAK,6CAA6C,EAAE,UAAU,SAAS,CAAC;AAAA,EACjF;AACA,SAAO;AACT;AAQO,SAAS,gBAAgB,OAAyB,CAAC,GAA0B;AAClF,QAAM,MAAM,KAAK,gBAAgB,GAAG,OAAO;AAC3C,QAAM,QAAQ,eAAe,GAAG;AAChC,MAAI,MAAM,WAAW,EAAG,QAAO,CAAC;AAChC,QAAM,SAAqB;AAAA,IACzB,SAAS,KAAK,aAAa,SAAY,KAAK,MAAM,KAAK,QAAQ,IAAI,OAAO;AAAA,IAC1E,SAAS,KAAK,aAAa,SAAY,KAAK,MAAM,KAAK,QAAQ,IAAI,OAAO;AAAA,IAC1E,SAAS,KAAK;AAAA,IACd,UAAU,KAAK;AAAA,EACjB;AACA,QAAM,SAAuB,CAAC;AAC9B,aAAW,KAAK,OAAO;AACrB,WAAO,KAAK,GAAG,eAAe,KAAK,KAAK,CAAC,GAAG,MAAM,CAAC;AAAA,EACrD;AACA,SAAO;AACT;AAoBO,SAAS,cAAc,QAAuD;AACnF,QAAM,SAAS,oBAAI,IAA0B;AAC7C,aAAW,KAAK,QAAQ;AACtB,UAAM,MAAM,OAAO,IAAI,EAAE,OAAO;AAChC,QAAI,QAAQ,OAAW,QAAO,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAAA,QAC3C,KAAI,KAAK,CAAC;AAAA,EACjB;AACA,QAAM,UAAyB,CAAC;AAChC,aAAW,CAAC,SAAS,KAAK,KAAK,QAAQ;AACrC,UAAM,YAAY,MAAM;AACxB,UAAM,eAAe,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;AACpD,UAAM,mBAAmB,MAAM,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,aAAa,CAAC;AACpE,UAAM,oBAAoB,MAAM,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,cAAc,CAAC;AACtE,UAAM,eAAe,MAAM,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,SAAS,CAAC;AAC5D,UAAM,eAAe,MAAM,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,WAAW,CAAC;AAC9D,UAAM,cAAc,cAAc,IAAI,IAAI,eAAe;AACzD,UAAM,eAAe,cAAc,IAAI,IAAI,eAAe;AAC1D,UAAM,oBAAoB,iBAAiB,IAAI,eAAe,eAAe;AAC7E,YAAQ,KAAK;AAAA,MACX;AAAA,MACA,YAAY,MAAM,CAAC,GAAG,cAAc;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,QAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,eAAe,EAAE,YAAY;AAC/D;","names":[]}

package/dist/{chunk-47TTP5PC.js → chunk-FQQYGPMC.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -721,4 +721,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-47TTP5PC.js.map
+//# sourceMappingURL=chunk-FQQYGPMC.js.map

package/dist/{chunk-5LREI4NO.js → chunk-GRLN6WL5.js}

@@ -1,9 +1,9 @@
 import {
   loadPapersRegistry
-} from "./chunk-2TP7YLBC.js";
+} from "./chunk-BE6FQ7XI.js";
 import {
   getErrorMessage
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 
 // src/cli/research-helpers-synthesize.ts
 import { z } from "zod";
@@ -886,4 +886,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=chunk-5LREI4NO.js.map
+//# sourceMappingURL=chunk-GRLN6WL5.js.map

package/dist/{chunk-5M3ZAK2V.js → chunk-HJUL6YRG.js}

@@ -1,9 +1,9 @@
 import {
   VERSION
-} from "./chunk-5STSWEDG.js";
+} from "./chunk-AQBOZVBW.js";
 import {
   emitClawGuardViolation
-} from "./chunk-QOF5S5Z5.js";
+} from "./chunk-KYHZYRMR.js";
 import {
   CACHE_TIMEOUTS,
   MCP_TIMEOUTS,
@@ -19,7 +19,7 @@ import {
   getTimeProvider,
   ok,
   resolveToolClassGuardMs
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 import {
   getNexusDataDir
 } from "./chunk-OGHEKPLD.js";
@@ -2135,4 +2135,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-5M3ZAK2V.js.map
+//# sourceMappingURL=chunk-HJUL6YRG.js.map

package/dist/{chunk-LX4DUS4M.js → chunk-ITB2NBB7.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-KFKI2M4X.js";
+} from "./chunk-UCW7IIX6.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -11,20 +11,20 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-JYTDEFY6.js";
+} from "./chunk-NQ2CC67G.js";
 import {
   emitPolicyEvent
-} from "./chunk-QOF5S5Z5.js";
+} from "./chunk-KYHZYRMR.js";
 import {
   hasToken
-} from "./chunk-YZDCUGPS.js";
+} from "./chunk-Y5ATK7BS.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 
 // src/security/trust-classifier.ts
 function mapAuthorAssociation(association) {
@@ -1247,4 +1247,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-LX4DUS4M.js.map
+//# sourceMappingURL=chunk-ITB2NBB7.js.map

package/dist/{chunk-E2TILOO3.js → chunk-JLA2YAGY.js}

@@ -1,17 +1,17 @@
 import {
   computeCostDetail,
   recordUsageEvent
-} from "./chunk-GVRDLRJM.js";
+} from "./chunk-ECHZGAZO.js";
 import {
   BaseAdapter,
   createStream,
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-UONHQ3Q3.js";
+} from "./chunk-5FHJAPIR.js";
 import {
   assertCustomApiHostResolvesPublic
-} from "./chunk-EPIRYAU3.js";
+} from "./chunk-Z2EUE6E6.js";
 import {
   ConfigError,
   ModelCapability,
@@ -22,7 +22,7 @@ import {
   getTimeProvider,
   getTokenEstimator,
   ok
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 
 // src/adapters/openai-types.ts
 var OPENAI_MODELS = {
@@ -833,4 +833,4 @@ export {
   discoverModels,
   buildOpenAICompatAdapters
 };
-//# sourceMappingURL=chunk-E2TILOO3.js.map
+//# sourceMappingURL=chunk-JLA2YAGY.js.map

package/dist/{chunk-T7NTJNCG.js → chunk-JLE24ZSP.js}

@@ -1,7 +1,7 @@
 import {
   getRandomProvider,
   getTimeProvider
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 
 // src/utils/id-utils.ts
 import { randomUUID } from "crypto";
@@ -24,4 +24,4 @@ export {
   generateHyphenId,
   generateUUID
 };
-//# sourceMappingURL=chunk-T7NTJNCG.js.map
+//# sourceMappingURL=chunk-JLE24ZSP.js.map

package/dist/{chunk-XWKL7QDH.js → chunk-KNBIEADY.js}

@@ -3,7 +3,7 @@ import {
   MODEL_IDS,
   getTimeProvider,
   resolveModelIdentitySync
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 
 // src/config/model-availability.ts
 var DEFAULT_TTL_MS = 6e4;
@@ -150,4 +150,4 @@ export {
   resetAvailabilityCache,
   filterAvailableModels
 };
-//# sourceMappingURL=chunk-XWKL7QDH.js.map
+//# sourceMappingURL=chunk-KNBIEADY.js.map

package/dist/{chunk-QOF5S5Z5.js → chunk-KYHZYRMR.js}

@@ -1,6 +1,6 @@
 import {
   getTimeProvider
-} from "./chunk-5F36KKHM.js";
+} from "./chunk-LB4UH4FF.js";
 
 // src/security/audit-trail.ts
 var MAX_EVENTS = 1e4;
@@ -205,4 +205,4 @@ export {
   createGraphAuditBridge,
   createAuditTrail
 };
-//# sourceMappingURL=chunk-QOF5S5Z5.js.map
+//# sourceMappingURL=chunk-KYHZYRMR.js.map

package/dist/{chunk-5F36KKHM.js → chunk-LB4UH4FF.js}

@@ -2319,6 +2319,27 @@ function defaultSnapshotPath() {
   const here = dirname(fileURLToPath(import.meta.url));
   return join(here, "models-dev-snapshot.json");
 }
+function stripMalformedPricing(entries, logger14, path2) {
+  let strippedPricing = 0;
+  const out = entries.map((entry) => {
+    const pricing = entry.pricing;
+    if (pricing === void 0) return entry;
+    if (typeof pricing.inputPer1M === "number" && typeof pricing.outputPer1M === "number") {
+      return entry;
+    }
+    strippedPricing++;
+    const withoutPricing = { ...entry };
+    delete withoutPricing.pricing;
+    return withoutPricing;
+  });
+  if (strippedPricing > 0) {
+    logger14.warn("models.dev snapshot entries had non-numeric pricing; treated as unpriced", {
+      path: path2,
+      strippedPricing
+    });
+  }
+  return out;
+}
 function loadModelsDevSnapshot(options) {
   const logger14 = createLogger({ component: "models-dev-snapshot" });
   const path2 = options?.path ?? defaultSnapshotPath();
@@ -2352,7 +2373,7 @@ function loadModelsDevSnapshot(options) {
     logger14.warn("models.dev snapshot missing entries array; skipping", { path: path2 });
     return { entries: [], path: path2, status: "malformed" };
   }
-  const entries = parsed.entries;
+  const entries = stripMalformedPricing(parsed.entries, logger14, path2);
   return {
     entries,
     path: path2,
@@ -2632,7 +2653,7 @@ function setDefaultRegistry(registry) {
 }
 async function reloadDefaultRegistry() {
   globalRegistry = buildDefaultRegistry();
-  const { resetGlobalRegistry } = await import("./unified-registry-YYHYITVO.js");
+  const { resetGlobalRegistry } = await import("./unified-registry-DPOXBGFQ.js");
   resetGlobalRegistry();
   return globalRegistry;
 }
@@ -15283,7 +15304,7 @@ var CompositeRouter = class _CompositeRouter {
    */
   async consultUnifiedContext(task) {
     try {
-      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-FHHESJMM.js");
+      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-UDMXESPP.js");
       const ctx = await getContextForTask({
         task: task.content,
         category: inferTaskCategory(task.content),
@@ -16891,4 +16912,4 @@ export {
   AgentCapability,
   OrchestratorError
 };
-//# sourceMappingURL=chunk-5F36KKHM.js.map
+//# sourceMappingURL=chunk-LB4UH4FF.js.map