nexus-agents 6.3.7 → 6.3.9

package/dist/{chunk-FXIIOJVB.js → chunk-DUSWBAR3.js}

@@ -1,6 +1,6 @@
 import {
   getTimeProvider
-} from "./chunk-DGR76SIA.js";
+} from "./chunk-CS3CTH6Z.js";
 
 // src/security/audit-trail.ts
 var MAX_EVENTS = 1e4;
@@ -205,4 +205,4 @@ export {
   createGraphAuditBridge,
   createAuditTrail
 };
-//# sourceMappingURL=chunk-FXIIOJVB.js.map
+//# sourceMappingURL=chunk-DUSWBAR3.js.map

package/dist/{chunk-IJWT67PX.js → chunk-EXLZUQBM.js}

@@ -1,7 +1,7 @@
 import {
   computeCostDetail,
   priceBasisOf
-} from "./chunk-HIEGEDIH.js";
+} from "./chunk-QLY24IMC.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -23,22 +23,22 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-J3WENFBH.js";
+} from "./chunk-VQGF7OCB.js";
 import {
   assessPanelIndependence,
   countDistinctModels,
   createEvent,
   getGlobalRegistry
-} from "./chunk-O6RUN5DT.js";
+} from "./chunk-6RLHAZ2Z.js";
 import {
   getToolMemory
-} from "./chunk-GVB4SDMJ.js";
+} from "./chunk-TAZO6OGY.js";
 import {
   authRemediation,
   delay,
   getAvailableClis,
   withTimeout
-} from "./chunk-MGFZE3G4.js";
+} from "./chunk-MCGNISFP.js";
 import {
   AgentError,
   CLI_NAMES,
@@ -66,7 +66,7 @@ import {
   registerPersistentOutcomeStoreFactory,
   resolveClassGuardMs,
   resolveVoteTimeout
-} from "./chunk-DGR76SIA.js";
+} from "./chunk-CS3CTH6Z.js";
 import {
   ensureLearningDir,
   getOutcomesFile
@@ -6300,7 +6300,7 @@ function logPartialProposal(bounded, log) {
 }
 async function runContrarianCheck(proposal, log) {
   try {
-    const { executeExpert } = await import("./expert-bridge-Z4BFSQHJ.js");
+    const { executeExpert } = await import("./expert-bridge-5FURMSX4.js");
     const bounded = boundArtifactForReview(proposal, CONTRARIAN_PROPOSAL_BUDGET, "proposal");
     logPartialProposal(bounded, log);
     const result = await executeExpert("architecture", buildContrarianPrompt(bounded));
@@ -6878,4 +6878,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-IJWT67PX.js.map
+//# sourceMappingURL=chunk-EXLZUQBM.js.map

package/dist/{chunk-3FVDZVHH.js → chunk-GFYZ4CCY.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-GM2XCOCX.js";
+} from "./chunk-LBSGUT2I.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -11,20 +11,20 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-RUR43YSR.js";
+} from "./chunk-5DABNRM3.js";
 import {
   emitPolicyEvent
-} from "./chunk-FXIIOJVB.js";
+} from "./chunk-DUSWBAR3.js";
 import {
   hasToken
-} from "./chunk-VGE32VIA.js";
+} from "./chunk-TZKKIKCO.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-DGR76SIA.js";
+} from "./chunk-CS3CTH6Z.js";
 
 // src/security/trust-classifier.ts
 function mapAuthorAssociation(association) {
@@ -1247,4 +1247,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-3FVDZVHH.js.map
+//# sourceMappingURL=chunk-GFYZ4CCY.js.map

package/dist/{chunk-YA3P5PPJ.js → chunk-GJZRAD7V.js}

@@ -1,6 +1,6 @@
 import {
   getErrorMessage
-} from "./chunk-DGR76SIA.js";
+} from "./chunk-CS3CTH6Z.js";
 
 // src/cli/setup-config.ts
 import { copyFileSync, existsSync, mkdirSync, writeFileSync } from "fs";
@@ -77,4 +77,4 @@ function ensureBackup(outputPath) {
 export {
   runConfigInitSync
 };
-//# sourceMappingURL=chunk-YA3P5PPJ.js.map
+//# sourceMappingURL=chunk-GJZRAD7V.js.map

package/dist/{chunk-RTJ6SEII.js → chunk-JA4DHEZA.js}

@@ -1,11 +1,11 @@
 import {
   resolveCliSlot
-} from "./chunk-TYZGLBNL.js";
+} from "./chunk-KK4RYSKM.js";
 import {
   createLogger,
   getTimeProvider,
   isRateLimitText
-} from "./chunk-DGR76SIA.js";
+} from "./chunk-CS3CTH6Z.js";
 
 // src/pipeline/expert-bridge.ts
 function resolveCliFromModelString(model) {
@@ -21,7 +21,7 @@ async function getMcpConfigPath() {
   if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;
   mcpConfigInitPromise ??= (async () => {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-LFYYHUGS.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-WW467CLM.js");
       const config = await generateMcpConfig();
       cachedMcpConfigPath = config.configPath;
       cachedMcpConfigCleanup = config.cleanup;
@@ -93,8 +93,8 @@ var routerInitPromise = null;
 async function getRouter() {
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-R7VN5762.js");
-    const { createCompositeRouter } = await import("./composite-router-APL5XGOM.js");
+    const { createAllAdapters } = await import("./factory-PDVZUWO2.js");
+    const { createCompositeRouter } = await import("./composite-router-WRPUSJIL.js");
     const adapters = createAllAdapters();
     if (adapters.size === 0) {
       routerInitPromise = null;
@@ -102,7 +102,7 @@ async function getRouter() {
     }
     cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-HJF2QANR.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-KEOY72R6.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
@@ -213,4 +213,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-RTJ6SEII.js.map
+//# sourceMappingURL=chunk-JA4DHEZA.js.map

package/dist/{chunk-G3WXFKYJ.js → chunk-JJAWYGXE.js}

@@ -1,7 +1,7 @@
 import {
   getRandomProvider,
   getTimeProvider
-} from "./chunk-DGR76SIA.js";
+} from "./chunk-CS3CTH6Z.js";
 
 // src/utils/id-utils.ts
 import { randomUUID } from "crypto";
@@ -24,4 +24,4 @@ export {
   generateHyphenId,
   generateUUID
 };
-//# sourceMappingURL=chunk-G3WXFKYJ.js.map
+//# sourceMappingURL=chunk-JJAWYGXE.js.map

package/dist/{chunk-7RDIWG36.js → chunk-K4NQ7WJK.js}

@@ -1,6 +1,6 @@
 import {
   generateSecurityPlan
-} from "./chunk-5UAZH43I.js";
+} from "./chunk-U2LGNV3Y.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-HFOQKCD2.js";
@@ -21,10 +21,10 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-RJTESNRY.js";
+} from "./chunk-2R2YHWE7.js";
 import {
   executeExpert
-} from "./chunk-RTJ6SEII.js";
+} from "./chunk-JA4DHEZA.js";
 import {
   JobStatusSchema,
   VOTER_ROLES,
@@ -47,24 +47,24 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-IJWT67PX.js";
+} from "./chunk-EXLZUQBM.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-GBRPYQPS.js";
+} from "./chunk-WZOLLGZ7.js";
 import {
   IssueTriage
-} from "./chunk-3FVDZVHH.js";
+} from "./chunk-GFYZ4CCY.js";
 import {
   resolveEnvMode,
   sanitizeInput
-} from "./chunk-RUR43YSR.js";
+} from "./chunk-5DABNRM3.js";
 import {
   withPrerequisite
-} from "./chunk-2XQWOM45.js";
+} from "./chunk-7B7JZWHX.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -88,18 +88,18 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-J3WENFBH.js";
+} from "./chunk-VQGF7OCB.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
   emitPipelinePolicyEvent
-} from "./chunk-FXIIOJVB.js";
+} from "./chunk-DUSWBAR3.js";
 import {
   EventTopics,
   createEvent,
   getGlobalEventBus,
   getGlobalRegistry
-} from "./chunk-O6RUN5DT.js";
+} from "./chunk-6RLHAZ2Z.js";
 import {
   IDENTIFIER_RE,
   LANG_VALUES,
@@ -132,29 +132,29 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-P5FDXBV5.js";
+} from "./chunk-M3OBVLTW.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   resolveInsideRoot
-} from "./chunk-3GMPJYT4.js";
+} from "./chunk-ASDCSVIG.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-VGE32VIA.js";
+} from "./chunk-TZKKIKCO.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-GVB4SDMJ.js";
+} from "./chunk-TAZO6OGY.js";
 import {
   STOPWORDS,
   truncateWithInfo
 } from "./chunk-6T3EPABN.js";
 import {
   createSessionMemory
-} from "./chunk-P4Q76KFZ.js";
+} from "./chunk-WTA7B64W.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -172,25 +172,25 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-MGFZE3G4.js";
+} from "./chunk-MCGNISFP.js";
 import {
   BaseAdapter,
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-AASDZAZV.js";
+} from "./chunk-X2RJGZJ7.js";
 import {
   DEFAULTS
-} from "./chunk-NNDJMR4B.js";
+} from "./chunk-K57G35GD.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-TYZGLBNL.js";
+} from "./chunk-KK4RYSKM.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-G3WXFKYJ.js";
+} from "./chunk-JJAWYGXE.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -296,7 +296,7 @@ import {
   selectStrategyByManifest,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-DGR76SIA.js";
+} from "./chunk-CS3CTH6Z.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
@@ -29692,7 +29692,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-M67ALRDI.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-VYXMBBYJ.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -45529,7 +45529,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-SQKNCOCG.js");
+    const { createIssueTriage } = await import("./issue-triage-EG7CJFLL.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -45557,7 +45557,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-Z4BFSQHJ.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-5FURMSX4.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -46410,11 +46410,11 @@ Verdict: PASS/NEEDS_WORK/REJECT`;
 import { z as z99 } from "zod";
 var SarifLocationSchema = z99.object({
   physicalLocation: z99.object({
-    artifactLocation: z99.object({ uri: z99.string().min(1).optional() }).optional(),
+    artifactLocation: z99.object({ uri: z99.string().optional().catch(void 0) }).optional(),
     region: z99.object({
-      startLine: z99.number().int().min(1).optional(),
-      endLine: z99.number().int().min(1).optional(),
-      snippet: z99.object({ text: z99.string().optional() }).optional()
+      startLine: z99.number().optional().catch(void 0),
+      endLine: z99.number().int().min(1).optional().catch(void 0),
+      snippet: z99.object({ text: z99.string().optional().catch(void 0) }).optional().catch(void 0)
     }).optional()
   }).optional()
 });
@@ -46426,15 +46426,17 @@ var SarifResultSchema = z99.object({
 });
 var SarifRuleSchema = z99.object({
   id: z99.string(),
-  shortDescription: z99.object({ text: z99.string().optional() }).optional(),
-  defaultConfiguration: z99.object({ level: z99.string().optional() }).optional(),
+  shortDescription: z99.object({ text: z99.string().optional().catch(void 0) }).optional(),
+  defaultConfiguration: z99.object({ level: z99.string().optional().catch(void 0) }).optional(),
   properties: z99.object({
-    precision: z99.string().optional(),
-    tags: z99.array(z99.string()).optional(),
-    "security-severity": z99.string().optional()
-  }).optional(),
-  helpUri: z99.string().optional(),
-  help: z99.object({ markdown: z99.string().optional() }).optional()
+    precision: z99.string().optional().catch(void 0),
+    tags: z99.array(z99.string()).optional().catch(void 0),
+    // Accept the number form and normalize; `resolveSeverityFromScore`
+    // parses it either way.
+    "security-severity": z99.union([z99.string(), z99.number()]).optional().catch(void 0)
+  }).optional().catch(void 0),
+  helpUri: z99.string().optional().catch(void 0),
+  help: z99.object({ markdown: z99.string().optional().catch(void 0) }).optional()
 });
 var SarifRunSchema = z99.object({
   tool: z99.object({
@@ -46543,14 +46545,27 @@ function buildLocation(file, startLine, phys) {
   if (snippetText !== void 0) loc.snippet = snippetText.slice(0, 500);
   return loc;
 }
-function extractLocation(result) {
+function extractLocation(result, ruleId, errors) {
   const phys = getFirstPhysicalLocation(result);
   if (phys === null) return null;
   const file = phys.artifactLocation?.uri;
-  const startLine = phys.region?.startLine;
-  if (file === void 0 || file === "" || startLine === void 0) return null;
+  const rawStartLine = phys.region?.startLine;
+  if (file === void 0 || file === "" || rawStartLine === void 0) return null;
+  const startLine = usableStartLine(rawStartLine);
+  if (startLine !== rawStartLine) {
+    errors.push(
+      `Finding ${ruleId}: startLine ${String(rawStartLine)} is not a valid 1-based line; recorded as ${String(startLine)} \u2014 the location is unknown, not measured`
+    );
+  }
   return buildLocation(file, startLine, phys);
 }
+function firstNonEmpty(value) {
+  if (value === null || value === void 0) return void 0;
+  return value.length > 0 ? value : void 0;
+}
+function usableStartLine(line) {
+  return Number.isInteger(line) && line >= 1 ? line : 1;
+}
 function severityWithDisclosure(result, rule, ruleId, errors) {
   const { severity, unmappedLevel } = resolveSeverity(result.level ?? void 0, rule);
   if (unmappedLevel !== void 0) {
@@ -46561,14 +46576,14 @@ function severityWithDisclosure(result, rule, ruleId, errors) {
   return severity;
 }
 function parseResult(result, scanner, ruleMap, errors) {
-  const ruleId = result.ruleId ?? "unknown";
+  const ruleId = firstNonEmpty(result.ruleId) ?? "unknown";
   const rule = ruleMap.get(ruleId);
-  const loc = extractLocation(result);
+  const loc = extractLocation(result, ruleId, errors);
   if (loc === null) {
     errors.push(`Skipped finding ${ruleId}: missing location`);
     return null;
   }
-  const rawMessage = result.message?.text ?? rule?.shortDescription?.text ?? ruleId;
+  const rawMessage = firstNonEmpty(result.message?.text) ?? firstNonEmpty(rule?.shortDescription?.text) ?? ruleId;
   const message = rawMessage.slice(0, MAX_MESSAGE_LENGTH);
   const severity = severityWithDisclosure(result, rule, ruleId, errors);
   return {
@@ -46611,7 +46626,7 @@ function resolveSeverityFromScore(rule) {
   if (props === void 0) return null;
   const secSeverity = props["security-severity"];
   if (secSeverity === void 0) return null;
-  const score = parseFloat(secSeverity);
+  const score = typeof secSeverity === "number" ? secSeverity : parseFloat(secSeverity);
   if (isNaN(score)) return null;
   return scoreToSeverity(score);
 }
@@ -46832,13 +46847,15 @@ async function runSecurityPipeline(sarifResult, targetDir, config, start) {
     sarifResult.totalFindings,
     blocking.length,
     osvVulns.length,
-    osv
+    osv,
+    sarifResult.errors.length
   );
   logger45.info("Security gate complete", {
     total: sarifResult.totalFindings,
     blocking: blocking.length,
     osvVulns: osvVulns.length,
-    osvFailedLookups: osv.failedLookups
+    osvFailedLookups: osv.failedLookups,
+    sarifParseErrors: sarifResult.errors.length
   });
   const failed = blocking.length > 0 || osvVulns.some((v) => v.severity === "CRITICAL");
   return {
@@ -46901,8 +46918,13 @@ function osvCoverageNote(blocking, osvCount, osv) {
   if (blocking === 0 && osvCount === 0) return "none blocking";
   return "";
 }
-function buildScanSummary(total, blocking, osvCount, osv) {
+function buildScanSummary(total, blocking, osvCount, osv, sarifParseErrors = 0) {
   const parts = [`${String(total)} SAST findings`];
+  if (sarifParseErrors > 0) {
+    parts.push(
+      `${String(sarifParseErrors)} scanner output line(s) unreadable \u2014 SAST coverage is partial`
+    );
+  }
   if (blocking > 0) parts.push(`${String(blocking)} blocking`);
   if (osvCount > 0) parts.push(`${String(osvCount)} OSV dependency vulnerabilities`);
   parts.push(osvCoverageNote(blocking, osvCount, osv));
@@ -47226,7 +47248,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-OGEHQE7S.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-A6SCTXHY.js");
     const { getLearningDir } = await import("./learning-persistence-7O5QYDM7.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -47288,7 +47310,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-GR5AJJEM.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-QNFWRBSH.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -47322,7 +47344,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-7WIWX53H.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-D25OVFUE.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -47340,7 +47362,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-OGEHQE7S.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-A6SCTXHY.js");
     const { getLearningDir } = await import("./learning-persistence-7O5QYDM7.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -47459,7 +47481,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-G27UOZWA.js");
+        const { executeVoting } = await import("./consensus-vote-YEM3AKUS.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -47888,7 +47910,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-EOLHDADB.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-2ACEYSZ5.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -47959,7 +47981,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-CCQEA4VF.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-3TXL46ND.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -51103,7 +51125,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-YPOKS35N.js");
+    const { createScmProvider } = await import("./factory-YEI7VFFB.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -52018,7 +52040,7 @@ async function probeSource(source, includeModelIds) {
   }
 }
 async function defaultSources(includeOpenRouter) {
-  const { createAllAdapters: createAllAdapters2 } = await import("./factory-R7VN5762.js");
+  const { createAllAdapters: createAllAdapters2 } = await import("./factory-PDVZUWO2.js");
   const adapters = createAllAdapters2();
   return buildDefaultModelSources(adapters, { includeOpenRouter });
 }
@@ -56090,4 +56112,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-7RDIWG36.js.map
+//# sourceMappingURL=chunk-K4NQ7WJK.js.map