nexus-agents 7.0.2 → 8.0.1

package/dist/cli.js

@@ -3,7 +3,7 @@ import {
   detectCliBinary,
   detectionRecoveryHint,
   formatDetectionMessage
-} from "./chunk-W4Q5NZYZ.js";
+} from "./chunk-4QHAMZLU.js";
 import {
   calculateConsensus,
   countByCategory,
@@ -19,11 +19,11 @@ import {
   parseFindings,
   reviewPostingBlock,
   sumFindings
-} from "./chunk-JJT7NVNY.js";
-import "./chunk-3CGUPSBW.js";
+} from "./chunk-LTTUQNP2.js";
+import "./chunk-6MPT2NRF.js";
 import {
   runConfigInitSync
-} from "./chunk-Y5GYBP52.js";
+} from "./chunk-FKWMYLSZ.js";
 import {
   AuthHandler,
   CustomExpertDefinitionSchema,
@@ -153,10 +153,10 @@ import {
   validateNexusEnv,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-KUYKSKPV.js";
-import "./chunk-VYAXMVI5.js";
-import "./chunk-HFOQKCD2.js";
-import "./chunk-RSMG2DPB.js";
+} from "./chunk-GHIHBN4J.js";
+import "./chunk-ZYPEHPRM.js";
+import "./chunk-DGWT7DXX.js";
+import "./chunk-64GMIUM5.js";
 import {
   CATEGORY_DISPLAY_NAMES,
   DEFAULT_PR_REVIEW_CONFIG
@@ -172,14 +172,14 @@ import {
   doctorCommand,
   initDataDirectories,
   runDoctor
-} from "./chunk-WLIXCNZ6.js";
+} from "./chunk-RB3X45G5.js";
 import {
   buildOpenAICompatAdapters,
   readOpenAICompatEnv
-} from "./chunk-VVXHIUFQ.js";
+} from "./chunk-T7XKLZPC.js";
 import {
   shutdownExpertBridge
-} from "./chunk-KJWD2V4K.js";
+} from "./chunk-CCRTVIXF.js";
 import {
   ConsensusVoteInputSchema,
   DEFAULT_VOTE_TIMEOUT_MS,
@@ -191,29 +191,29 @@ import {
   recordAuthenticVote,
   registerConsensusVoteTool,
   toRecordDecision
-} from "./chunk-OHULIRP6.js";
+} from "./chunk-VMMMRHCW.js";
 import {
   loadUsageEvents,
   rollupByModel
-} from "./chunk-RBF64DXJ.js";
+} from "./chunk-6LDUEA4I.js";
 import {
   allOf,
   anyOf
 } from "./chunk-OQB3XC5O.js";
 import {
   synthesizeResearch
-} from "./chunk-UVO673OY.js";
+} from "./chunk-2XXKUAQS.js";
 import {
   classifyTrust,
   createFullGitHubProvider,
   evaluatePolicy,
   parsePRUrl
-} from "./chunk-Q6IODDEA.js";
-import "./chunk-IWTK6FDT.js";
+} from "./chunk-FBVOBOHS.js";
+import "./chunk-QP423I4T.js";
 import {
   ReputationCache,
   sanitizeInput
-} from "./chunk-RLBJTZHA.js";
+} from "./chunk-HS43MFL4.js";
 import {
   ImprovementReviewInputSchema,
   calculateFitnessScore,
@@ -227,20 +227,20 @@ import {
   registerImprovementReviewTool,
   runImprovementReview,
   scanForSecrets
-} from "./chunk-AGFXJUTS.js";
+} from "./chunk-4VZ5GK5B.js";
 import {
   createDefaultPolicyFirewall,
   setGlobalPolicyFirewall,
   stagePolicyFirewallForRollout
-} from "./chunk-GAYSJGKD.js";
+} from "./chunk-INNWBLE4.js";
 import {
   VERSION
-} from "./chunk-37JIYDVH.js";
-import "./chunk-6Q3KSZVI.js";
+} from "./chunk-227USJYZ.js";
+import "./chunk-U5YJKJK2.js";
 import {
   createUnifiedRegistry,
   getGlobalRegistry
-} from "./chunk-D6TL5GZV.js";
+} from "./chunk-F4AT3BCP.js";
 import {
   CodebaseIndexSchema,
   PaperStatusSchema,
@@ -266,29 +266,29 @@ import {
   loadSourcesRegistry,
   rankDiscoveredItems,
   saveSourcesRegistry
-} from "./chunk-QAHGHWC7.js";
+} from "./chunk-F33RCSOC.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   savePapersRegistry
-} from "./chunk-K2AWJGQO.js";
+} from "./chunk-K6EHC227.js";
 import {
   resolveToken
-} from "./chunk-XZEYSIGG.js";
+} from "./chunk-5YC3SC34.js";
 import {
   MemoryError,
   shutdownToolMemory
-} from "./chunk-7U7HAYPB.js";
+} from "./chunk-4U62WRPL.js";
 import {
   capitalize,
   capitalizeKebab
 } from "./chunk-6T3EPABN.js";
-import "./chunk-JNZ3D5B5.js";
+import "./chunk-HBHTXBA4.js";
 import {
   BUILT_IN_EXPERTS
 } from "./chunk-43SVUIPL.js";
-import "./chunk-JEAKVUWM.js";
-import "./chunk-KSQSWEFH.js";
+import "./chunk-ODBLHHTP.js";
+import "./chunk-YYJFZ7TO.js";
 import {
   NEXUS_SUBPROCESS_DEPTH_ENV,
   createAllAdapters,
@@ -296,19 +296,19 @@ import {
   isRecord,
   probeAllClis,
   readSubprocessDepth
-} from "./chunk-BTWKDT4F.js";
-import "./chunk-LVYRGNOC.js";
+} from "./chunk-UZULX2DZ.js";
+import "./chunk-FFZNRJ5Q.js";
 import {
   DEFAULTS
-} from "./chunk-ZD4VEHEG.js";
-import "./chunk-ZGEDIKAM.js";
+} from "./chunk-Y5I3F3YC.js";
+import "./chunk-TO5LX5VU.js";
 import {
   nexusMkdtempSync
-} from "./chunk-4OW67KT2.js";
-import "./chunk-6GYTTWNM.js";
+} from "./chunk-4HXPNLZS.js";
+import "./chunk-OM5BVTVF.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-33FI7W3G.js";
-import "./chunk-S2Z7CME3.js";
+import "./chunk-7RLFZ6OB.js";
+import "./chunk-W2R6UVZJ.js";
 import {
   API_TIMEOUTS,
   AgentCapability,
@@ -368,6 +368,7 @@ import {
   logger,
   lookupInTreeCapability,
   ok,
+  openSqliteDatabase,
   parseBoolEnv,
   parseIntEnv,
   parseTierOverrides,
@@ -385,8 +386,8 @@ import {
   validateTimeout,
   writeEmptyLine,
   writeLine
-} from "./chunk-Y742U2YM.js";
-import "./chunk-GBHJ37V3.js";
+} from "./chunk-3MBGQAO2.js";
+import "./chunk-ITCKXMOH.js";
 import {
   applyPortableMode,
   detectSandbox,
@@ -397,11 +398,11 @@ import {
   nexusSharedPath,
   sessionsDbPath,
   setActiveWorkspaceRoot
-} from "./chunk-OGHEKPLD.js";
+} from "./chunk-MM223CVS.js";
 import "./chunk-ZPWHCABL.js";
 
 // src/cli/cli-log-bootstrap.ts
-import { argv, env } from "process";
+import { argv, env } from "node:process";
 var SERVER_COMMANDS = /* @__PURE__ */ new Set(["server"]);
 var VERBOSE_FLAGS = /* @__PURE__ */ new Set(["--verbose", "-v", "--debug"]);
 function findSubcommand(args) {
@@ -428,13 +429,33 @@ function applyCliLogDefault(args) {
 applyCliLogDefault(argv.slice(2));
 applyPortableMode();
 
+// src/cli/suppress-sqlite-warning.ts
+var SQLITE_WARNING_FRAGMENT = "SQLite is an experimental feature";
+function suppressSqliteExperimentalWarning() {
+  const proc = process;
+  if (proc.__nexusSqliteWarningFiltered === true) return;
+  proc.__nexusSqliteWarningFiltered = true;
+  const original = process.emitWarning.bind(process);
+  function filtered(...args) {
+    const [warning, second] = args;
+    const message = typeof warning === "string" ? warning : warning?.message;
+    const name = typeof second === "string" ? second : second?.type ?? warning?.name;
+    if (name === "ExperimentalWarning" && message?.includes(SQLITE_WARNING_FRAGMENT) === true) {
+      return;
+    }
+    original(...args);
+  }
+  process.emitWarning = filtered;
+}
+suppressSqliteExperimentalWarning();
+
 // src/cli.ts
-import { parseArgs } from "util";
+import { parseArgs } from "node:util";
 
 // src/cli/setup-gemini.ts
-import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";
-import { join } from "path";
-import { homedir } from "os";
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
 var logger2 = createLogger({ component: "setup-gemini" });
 function detectGeminiCli() {
   return detectCliBinary("gemini");
@@ -517,9 +538,9 @@ function configureGemini(force, dryRun, scope = "user", projectRoot) {
 }
 
 // src/cli/setup-opencode.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2 } from "fs";
-import { join as join2, resolve } from "path";
-import { homedir as homedir2 } from "os";
+import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2 } from "node:fs";
+import { join as join2, resolve } from "node:path";
+import { homedir as homedir2 } from "node:os";
 import { parse as jsoncParse, modify, applyEdits } from "jsonc-parser";
 var logger3 = createLogger({ component: "setup-opencode" });
 function detectOpenCodeCli() {
@@ -630,7 +651,7 @@ function configureOpenCodeInner(force, dryRun, options) {
 }
 
 // src/cli/setup-codex.ts
-import { execFileSync } from "child_process";
+import { execFileSync } from "node:child_process";
 var logger4 = createLogger({ component: "setup-codex" });
 function detectCodexCli() {
   return detectCliBinary("codex");
@@ -755,9 +776,9 @@ function helloCommand() {
 }
 
 // src/cli/config-init.ts
-import { existsSync as existsSync3 } from "fs";
-import { writeFile, mkdir } from "fs/promises";
-import { dirname, resolve as resolve2 } from "path";
+import { existsSync as existsSync3 } from "node:fs";
+import { writeFile, mkdir } from "node:fs/promises";
+import { dirname, resolve as resolve2 } from "node:path";
 var DEFAULT_CONFIG_FILE = "nexus-agents.yaml";
 var DEFAULT_CONFIG_REL_PATH = `.nexus-agents/${DEFAULT_CONFIG_FILE}`;
 function qualifiesPowerful(m) {
@@ -944,8 +965,8 @@ function resolveOutputPath(output2) {
   }
   return resolve2(process.cwd(), DEFAULT_CONFIG_REL_PATH);
 }
-function fileExists(path18) {
-  return existsSync3(path18);
+function fileExists(path17) {
+  return existsSync3(path17);
 }
 async function ensureDirectory(filePath) {
   const dir = dirname(filePath);
@@ -953,9 +974,9 @@ async function ensureDirectory(filePath) {
     await mkdir(dir, { recursive: true });
   }
 }
-async function writeConfigFile(path18) {
-  await ensureDirectory(path18);
-  await writeFile(path18, renderConfigTemplate() + CONFIG_TEMPLATE_TAIL, "utf-8");
+async function writeConfigFile(path17) {
+  await ensureDirectory(path17);
+  await writeFile(path17, renderConfigTemplate() + CONFIG_TEMPLATE_TAIL, "utf-8");
 }
 async function runConfigInit(options = {}) {
   const outputPath = resolveOutputPath(options.output);
@@ -1013,7 +1034,7 @@ async function configInitCommand(options = {}) {
 }
 
 // src/cli/custom-expert-validation.ts
-import { resolve as resolve3, sep } from "path";
+import { resolve as resolve3, sep } from "node:path";
 function validateConfigPath(userPath, allowedRoot) {
   const resolvedRoot = resolve3(allowedRoot);
   const resolved = resolve3(allowedRoot, userPath);
@@ -1084,8 +1105,8 @@ function formatValidationErrors(errors) {
 }
 
 // src/cli/custom-expert-parsing.ts
-import { readFileSync as readFileSync3, existsSync as existsSync4 } from "fs";
-import { resolve as resolve4 } from "path";
+import { readFileSync as readFileSync3, existsSync as existsSync4 } from "node:fs";
+import { resolve as resolve4 } from "node:path";
 import * as yaml from "yaml";
 var DEFAULT_CONFIG_FILE2 = "nexus-agents.yaml";
 function findConfigPath() {
@@ -1408,8 +1429,8 @@ function expertListCommand(options = {}) {
 }
 
 // src/cli/workflow-run.ts
-import fs from "fs";
-import path from "path";
+import fs from "node:fs";
+import path from "node:path";
 
 // src/cli/workflow-run-formatters.ts
 function writeLine2(text) {
@@ -1691,7 +1712,7 @@ async function workflowRunCommand(options) {
 }
 
 // src/cli/repl.ts
-import * as readline from "readline";
+import * as readline from "node:readline";
 
 // src/cli/repl-types.ts
 var HANDLED = { handled: true, exit: false };
@@ -1971,9 +1992,9 @@ async function replCommand(options = {}) {
 }
 
 // src/self-eval/component-scanner.ts
-import { readFileSync as readFileSync4 } from "fs";
-import { readdir, readFile, stat } from "fs/promises";
-import { join as join3, basename, extname, relative } from "path";
+import { readFileSync as readFileSync4 } from "node:fs";
+import { readdir, readFile, stat } from "node:fs/promises";
+import { join as join3, basename, extname, relative } from "node:path";
 var DEFAULT_EXTENSIONS = [".ts"];
 var DEFAULT_MAX_FILE_SIZE = 1024 * 1024;
 var COMPLEXITY_PATTERNS = [
@@ -3072,9 +3093,9 @@ async function evaluateDirectory(target, timeoutMs, store = getOutcomeStore()) {
   }
   const aggregator = createAggregator();
   const results = [];
-  for (const [path18, evaluations] of evaluationsByComponent) {
+  for (const [path17, evaluations] of evaluationsByComponent) {
     if (evaluations.length > 0) {
-      results.push(aggregator.aggregate(path18, evaluations));
+      results.push(aggregator.aggregate(path17, evaluations));
     }
   }
   const priority = { deprecate: 0, refactor: 1, review: 2, retain: 3 };
@@ -4438,7 +4459,7 @@ ${file.patch}
         violations: policyResult.violations
       });
     }
-    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-KBOP72XG.js");
+    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-XRAYFBTQ.js");
     const body = formatReviewComment2(result);
     const postResult = await provider.createReview(pr.prNumber, body, result.decision);
     if (!postResult.ok) {
@@ -4532,7 +4553,7 @@ function createPRReviewer(config, adapter) {
 var logger6 = createLogger({ component: "ReviewCommand" });
 
 // src/cli/sandbox-exec.ts
-import { execSync } from "child_process";
+import { execSync } from "node:child_process";
 var logger7 = createLogger({ component: "sandbox-exec" });
 function isOpeningQuote(char, state) {
   return !state.inQuote && (char === '"' || char === "'");
@@ -5494,7 +5515,7 @@ function routingAuditCommand(options) {
 }
 
 // src/cli/orchestrate-puppeteer.ts
-import * as fs2 from "fs";
+import * as fs2 from "node:fs";
 
 // src/cli/cli-adapter-agent.ts
 var CliAdapterAgent = class {
@@ -5552,27 +5573,27 @@ var CliAdapterAgent = class {
 };
 
 // src/cli/orchestrate-puppeteer.ts
-function loadPolicyParameters(path18, logger22) {
+function loadPolicyParameters(path17, logger22) {
   try {
-    if (fs2.existsSync(path18)) {
-      const content = fs2.readFileSync(path18, "utf-8");
+    if (fs2.existsSync(path17)) {
+      const content = fs2.readFileSync(path17, "utf-8");
       const params = JSON.parse(content);
-      logger22.info("Loaded policy parameters", { path: path18 });
+      logger22.info("Loaded policy parameters", { path: path17 });
       return params;
     }
   } catch (error) {
     const message = getErrorMessage(error);
-    logger22.warn("Failed to load policy parameters", { path: path18, error: message });
+    logger22.warn("Failed to load policy parameters", { path: path17, error: message });
   }
   return void 0;
 }
-function savePolicyParameters(path18, params, logger22) {
+function savePolicyParameters(path17, params, logger22) {
   try {
-    fs2.writeFileSync(path18, JSON.stringify(params, null, 2));
-    logger22.info("Saved policy parameters", { path: path18 });
+    fs2.writeFileSync(path17, JSON.stringify(params, null, 2));
+    logger22.info("Saved policy parameters", { path: path17 });
   } catch (error) {
     const message = getErrorMessage(error);
-    logger22.warn("Failed to save policy parameters", { path: path18, error: message });
+    logger22.warn("Failed to save policy parameters", { path: path17, error: message });
   }
 }
 function createAgentsFromAdapters(adapters) {
@@ -5954,8 +5975,8 @@ async function orchestrateCommand(options) {
 }
 
 // src/cli/session-commands.ts
-import * as fs3 from "fs";
-import * as path2 from "path";
+import * as fs3 from "node:fs";
+import * as path2 from "node:path";
 
 // src/cli/session-storage-types.ts
 import { z } from "zod";
@@ -6150,25 +6171,14 @@ var SQLiteSessionStorage = class {
     this.logger.info("SQLiteSessionStorage initialized", { dbPath: this.dbPath });
   }
   /** Initialize the storage backend. */
+  // Stays async: this is a published Promise-returning API and its callers
+  // await it. The only await was the dynamic `better-sqlite3` import, which
+  // #5388 removed because `node:sqlite` is a synchronous builtin.
+  // eslint-disable-next-line @typescript-eslint/require-await
   async initialize() {
     if (this.initialized) return ok(void 0);
     try {
-      const betterSqlite3Module = await import("better-sqlite3").catch((error) => {
-        this.logger.debug("Failed to import better-sqlite3", { error: String(error) });
-        return null;
-      });
-      if (betterSqlite3Module === null) {
-        return err(
-          new SessionStorageError(
-            "better-sqlite3 not installed. Install: npm install better-sqlite3",
-            {
-              context: { dbPath: this.dbPath }
-            }
-          )
-        );
-      }
-      const Database = betterSqlite3Module.default;
-      this.db = new Database(this.dbPath);
+      this.db = openSqliteDatabase(this.dbPath);
       this.createTables();
       this.initialized = true;
       this.logger.info("SQLiteSessionStorage initialized", { dbPath: this.dbPath });
@@ -6647,8 +6657,8 @@ async function sessionCommand(subcommand, args, logger22) {
 }
 
 // src/cli/system-review.ts
-import * as fs5 from "fs";
-import * as path4 from "path";
+import * as fs5 from "node:fs";
+import * as path4 from "node:path";
 
 // src/cli/system-review-types.ts
 var SYSTEM_REVIEW_CONSTANTS = {
@@ -6884,8 +6894,8 @@ ${colors.bold}Nexus Agents System Review${colors.reset}`);
 }
 
 // src/indexer/freshness-analyzer.ts
-import * as path3 from "path";
-import * as fs4 from "fs";
+import * as path3 from "node:path";
+import * as fs4 from "node:fs";
 var DEFAULT_TRACKED_DOCUMENTS = [
   {
     path: "README.md",
@@ -7323,7 +7333,7 @@ function systemReviewCommand(options = {}) {
 }
 
 // src/cli/vote-command.ts
-import * as crypto from "crypto";
+import * as crypto from "node:crypto";
 
 // src/cli/vote-audit-line.ts
 function auditLineFor(outcome) {
@@ -8602,9 +8612,9 @@ async function executePrioritize(options) {
 }
 
 // src/cli/research-index-command.ts
-import * as fs8 from "fs/promises";
-import * as fsSync from "fs";
-import * as path7 from "path";
+import * as fs8 from "node:fs/promises";
+import * as fsSync from "node:fs";
+import * as path7 from "node:path";
 import * as yaml3 from "yaml";
 
 // src/research/research-schemas.ts
@@ -8786,9 +8796,9 @@ function isIntegrationFileRequired(file) {
 }
 
 // src/research/research-index-generator.ts
-import * as crypto2 from "crypto";
-import * as fs6 from "fs";
-import * as path5 from "path";
+import * as crypto2 from "node:crypto";
+import * as fs6 from "node:fs";
+import * as path5 from "node:path";
 import * as yaml2 from "yaml";
 
 // src/research/research-index-types.ts
@@ -9168,8 +9178,8 @@ var DEFAULT_VALIDATOR_OPTIONS = {
 };
 
 // src/research/research-validator-helpers.ts
-import * as fs7 from "fs";
-import * as path6 from "path";
+import * as fs7 from "node:fs";
+import * as path6 from "node:path";
 function createIssue2(options) {
   const { severity, code, message, file, issuePath, suggestion } = options;
   const base = { severity, code, message, file };
@@ -9694,8 +9704,8 @@ async function researchIndexCommand(options) {
 }
 
 // src/cli/research-import-command.ts
-import * as fs9 from "fs/promises";
-import { resolve as resolve6 } from "path";
+import * as fs9 from "node:fs/promises";
+import { resolve as resolve6 } from "node:path";
 var VALID_TYPES = ["paper", "repo", "tool", "blog"];
 function parseCsvLine(line) {
   const fields = [];
@@ -9955,8 +9965,8 @@ async function handleImportCommand(args, options) {
 }
 
 // src/cli/auto-file-suggestions.ts
-import { execFile } from "child_process";
-import { promisify } from "util";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
 var execFileAsync = promisify(execFile);
 var logger12 = createLogger({ component: "auto-file-suggestions" });
 var MACHINE_SUGGESTED_LABEL = "machine-suggested";
@@ -10352,13 +10362,11 @@ async function researchCommand(subcommand, args, options) {
 }
 
 // src/cli/index-command.ts
-import * as fs13 from "fs/promises";
-import * as path14 from "path";
+import * as fs12 from "node:fs/promises";
+import * as path13 from "node:path";
 import * as yaml6 from "yaml";
 
 // src/indexer/generator.ts
-import * as fs10 from "fs/promises";
-import * as path8 from "path";
 import * as yaml4 from "yaml";
 function indexToYaml(index) {
   const doc = new yaml4.Document(index);
@@ -10535,7 +10543,7 @@ var DEFAULT_ENTRYPOINT_EXTRACTOR_OPTIONS = {
 
 // src/indexer/entrypoint-extractor.ts
 import { Project } from "ts-morph";
-import * as path11 from "path";
+import * as path10 from "node:path";
 import * as yaml5 from "yaml";
 
 // src/indexer/entrypoint-sanitizer.ts
@@ -10632,7 +10640,7 @@ function sanitizeTool(tool) {
 
 // src/indexer/entrypoint-cli-extractor.ts
 import { SyntaxKind } from "ts-morph";
-import * as path9 from "path";
+import * as path8 from "node:path";
 function extractCliOptions(sourceFile) {
   const options = /* @__PURE__ */ new Map();
   const configVar = sourceFile.getVariableDeclaration("PARSE_ARGS_CONFIG");
@@ -10748,7 +10756,7 @@ function buildCommandSpec(entry, ctx) {
   return cmdSpec;
 }
 function extractCliCommands(project, packageRoot, cliCommandsPath, cliTypesPath, warnings) {
-  const typesFullPath = path9.join(packageRoot, cliTypesPath);
+  const typesFullPath = path8.join(packageRoot, cliTypesPath);
   const typesFile = project.getSourceFile(typesFullPath);
   if (typesFile === void 0 && warnings !== void 0) {
     warnings.push(
@@ -10756,7 +10764,7 @@ function extractCliCommands(project, packageRoot, cliCommandsPath, cliTypesPath,
     );
   }
   const cliOptions = typesFile !== void 0 ? extractCliOptions(typesFile) : /* @__PURE__ */ new Map();
-  const commandsFullPath = path9.join(packageRoot, cliCommandsPath);
+  const commandsFullPath = path8.join(packageRoot, cliCommandsPath);
   const commandsFile = project.getSourceFile(commandsFullPath);
   if (commandsFile === void 0) {
     if (warnings !== void 0) {
@@ -10768,7 +10776,7 @@ function extractCliCommands(project, packageRoot, cliCommandsPath, cliTypesPath,
   }
   const ctx = {
     commandsFile,
-    relativePath: path9.relative(process.cwd(), commandsFullPath),
+    relativePath: path8.relative(process.cwd(), commandsFullPath),
     cliOptions,
     cliCommandsPath,
     ...warnings !== void 0 && { warnings }
@@ -10778,7 +10786,7 @@ function extractCliCommands(project, packageRoot, cliCommandsPath, cliTypesPath,
 
 // src/indexer/entrypoint-mcp-extractor.ts
 import { SyntaxKind as SyntaxKind2 } from "ts-morph";
-import * as path10 from "path";
+import * as path9 from "node:path";
 function inferZodType(zodExpr) {
   if (zodExpr.includes("z.string()")) return "string";
   if (zodExpr.includes("z.number()")) return "number";
@@ -10821,7 +10829,7 @@ function extractZodParameters(schemaObj) {
 }
 function extractMcpTools(project, packageRoot, mcpToolsPath, warnings) {
   const tools = [];
-  const toolsDir = path10.join(packageRoot, mcpToolsPath);
+  const toolsDir = path9.join(packageRoot, mcpToolsPath);
   const toolFiles = project.getSourceFiles(`${toolsDir}/*.ts`);
   if (toolFiles.length === 0 && warnings !== void 0) {
     warnings.push(
@@ -10830,9 +10838,9 @@ function extractMcpTools(project, packageRoot, mcpToolsPath, warnings) {
   }
   for (const sourceFile of toolFiles) {
     const filePath = sourceFile.getFilePath();
-    const fileName = path10.basename(filePath);
+    const fileName = path9.basename(filePath);
     if (fileName.endsWith(".test.ts") || fileName === "index.ts") continue;
-    const relativePath = path10.relative(process.cwd(), filePath);
+    const relativePath = path9.relative(process.cwd(), filePath);
     const extractedTools = extractToolsFromFile(sourceFile, relativePath, warnings);
     tools.push(...extractedTools);
   }
@@ -10961,18 +10969,18 @@ function generateTimestamp() {
 }
 function createProject(opts) {
   const project = new Project({
-    tsConfigFilePath: path11.join(opts.packageRoot, "tsconfig.json"),
+    tsConfigFilePath: path10.join(opts.packageRoot, "tsconfig.json"),
     skipAddingFilesFromTsConfig: true
   });
   project.addSourceFilesAtPaths([
-    path11.join(opts.packageRoot, opts.cliCommandsPath),
-    path11.join(opts.packageRoot, "src/cli-types.ts"),
+    path10.join(opts.packageRoot, opts.cliCommandsPath),
+    path10.join(opts.packageRoot, "src/cli-types.ts"),
     // HELP_TEXT was extracted to cli-help-text.ts in #293 (Jan 2026) and
     // cli-types.ts now only re-exports it. The extractor reads it via AST,
     // so we have to load the defining file — a bare re-export isn't enough.
     // Without this line the CLI command list silently came back empty.
-    path11.join(opts.packageRoot, "src/cli-help-text.ts"),
-    path11.join(opts.packageRoot, opts.mcpToolsPath, "*.ts")
+    path10.join(opts.packageRoot, "src/cli-help-text.ts"),
+    path10.join(opts.packageRoot, opts.mcpToolsPath, "*.ts")
   ]);
   return project;
 }
@@ -11018,20 +11026,20 @@ function manifestToJson(manifest) {
 }
 
 // src/cli/index-command-link-validator.ts
-import * as fs12 from "fs/promises";
-import * as path13 from "path";
+import * as fs11 from "node:fs/promises";
+import * as path12 from "node:path";
 
 // src/cli/index-command-link-validation-helpers.ts
-import * as fs11 from "fs/promises";
-import * as path12 from "path";
+import * as fs10 from "node:fs/promises";
+import * as path11 from "node:path";
 async function validateInternalLink(url, sourceFile) {
   const [filePath, anchor] = url.split("#");
   if (filePath === void 0 || filePath === "") {
     return { valid: true };
   }
-  const resolvedPath = path12.resolve(path12.dirname(sourceFile), filePath);
+  const resolvedPath = path11.resolve(path11.dirname(sourceFile), filePath);
   try {
-    await fs11.access(resolvedPath);
+    await fs10.access(resolvedPath);
     if (anchor !== void 0 && anchor !== "") {
       const anchorResult = await validateAnchorInFile(anchor, resolvedPath);
       if (!anchorResult.valid) {
@@ -11105,7 +11113,7 @@ function headingToAnchor(heading) {
 }
 async function validateAnchorInFile(anchor, targetFile) {
   try {
-    const content = await fs11.readFile(targetFile, "utf-8");
+    const content = await fs10.readFile(targetFile, "utf-8");
     const headingRegex = /^#{1,6}\s+(.+)$/gm;
     let match;
     while ((match = headingRegex.exec(content)) !== null) {
@@ -11114,9 +11122,9 @@ async function validateAnchorInFile(anchor, targetFile) {
         return { valid: true };
       }
     }
-    return { valid: false, error: `Anchor '#${anchor}' not found in ${path12.basename(targetFile)}` };
+    return { valid: false, error: `Anchor '#${anchor}' not found in ${path11.basename(targetFile)}` };
   } catch {
-    return { valid: false, error: `Failed to read ${path12.basename(targetFile)} for anchor check` };
+    return { valid: false, error: `Failed to read ${path11.basename(targetFile)} for anchor check` };
   }
 }
 async function validateAnchorLink(anchor, sourceFile) {
@@ -11206,9 +11214,9 @@ var REFERENCE_DEF_REGEX = /^\[([^\]]+)\]:\s*(.+)$/gm;
 async function findMarkdownFiles(dir) {
   const files = [];
   try {
-    const entries = await fs12.readdir(dir, { withFileTypes: true });
+    const entries = await fs11.readdir(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = path13.join(dir, entry.name);
+      const fullPath = path12.join(dir, entry.name);
       if (entry.name === "node_modules" || entry.name === "dist") {
         continue;
       }
@@ -11302,7 +11310,7 @@ function extractLinks(content) {
 }
 async function validateFileLinks(filePath, checkExternal, counters) {
   try {
-    const content = await fs12.readFile(filePath, "utf-8");
+    const content = await fs11.readFile(filePath, "utf-8");
     const links = extractLinks(content);
     const brokenLinksInFile = [];
     for (const link of links) {
@@ -11403,10 +11411,10 @@ async function generateIndex(options) {
     `Extracted ${String(extraction.files.length)} files in ${String(extraction.durationMs)}ms`
   );
   const index = buildIndex(extraction.files);
-  const outputDir = path14.dirname(outputPath);
-  await fs13.mkdir(outputDir, { recursive: true });
+  const outputDir = path13.dirname(outputPath);
+  await fs12.mkdir(outputDir, { recursive: true });
   const content = format === "yaml" ? indexToYaml(index) : indexToJson(index);
-  await fs13.writeFile(outputPath, content, "utf-8");
+  await fs12.writeFile(outputPath, content, "utf-8");
   logger13.info(`Wrote index to ${outputPath}`);
   return {
     success: true,
@@ -11421,14 +11429,14 @@ async function generateIndex(options) {
 async function checkIndex(options) {
   const indexPath = options.output ?? "docs/codebase-index.yaml";
   try {
-    await fs13.access(indexPath);
+    await fs12.access(indexPath);
   } catch {
     return {
       success: false,
       message: `Index file not found: ${indexPath}. Run 'nexus-agents index generate' first.`
     };
   }
-  const content = await fs13.readFile(indexPath, "utf-8");
+  const content = await fs12.readFile(indexPath, "utf-8");
   let existingIndex;
   try {
     const parsed = indexPath.endsWith(".json") ? JSON.parse(content) : yaml6.parse(content);
@@ -11464,20 +11472,20 @@ async function generateDiagram(options) {
   const indexPath = "docs/codebase-index.yaml";
   const diagramPath = options.output ?? "docs/dependency-graph.md";
   try {
-    await fs13.access(indexPath);
+    await fs12.access(indexPath);
   } catch {
     logger13.info("Index not found, generating...");
     const indexOptions = { ...options, subcommand: "generate" };
     delete indexOptions.output;
     await generateIndex(indexOptions);
   }
-  const content = await fs13.readFile(indexPath, "utf-8");
+  const content = await fs12.readFile(indexPath, "utf-8");
   const parsed = indexPath.endsWith(".json") ? JSON.parse(content) : yaml6.parse(content);
   CodebaseIndexSchema.parse(parsed);
   const index = parsed;
   const diagram = generateDiagramMarkdown(index);
-  await fs13.mkdir(path14.dirname(diagramPath), { recursive: true });
-  await fs13.writeFile(diagramPath, diagram, "utf-8");
+  await fs12.mkdir(path13.dirname(diagramPath), { recursive: true });
+  await fs12.writeFile(diagramPath, diagram, "utf-8");
   logger13.info(`Wrote diagram to ${diagramPath}`);
   return {
     success: true,
@@ -11506,7 +11514,7 @@ function extractDocumentedModules(architectureContent) {
 }
 async function getActualModules(srcPath) {
   try {
-    const entries = await fs13.readdir(srcPath, { withFileTypes: true });
+    const entries = await fs12.readdir(srcPath, { withFileTypes: true });
     return entries.filter((e) => e.isDirectory() && !e.name.startsWith(".") && !e.name.startsWith("__")).map((e) => e.name);
   } catch (error) {
     logger13.debug("Failed to read source modules", { srcPath, error: getErrorMessage(error) });
@@ -11542,12 +11550,12 @@ async function validateArchitecture(options) {
   const srcPath = "packages/nexus-agents/src";
   let architectureContent;
   try {
-    architectureContent = await fs13.readFile(architecturePath, "utf-8");
+    architectureContent = await fs12.readFile(architecturePath, "utf-8");
   } catch {
     return { success: false, message: `ARCHITECTURE.md not found at ${architecturePath}` };
   }
   try {
-    await fs13.access(srcPath);
+    await fs12.access(srcPath);
   } catch {
     return { success: false, message: `Source directory not found: ${srcPath}` };
   }
@@ -11582,10 +11590,10 @@ async function entrypointsCommand(options) {
   for (const warning of result.warnings) {
     logger13.warn(warning);
   }
-  const outputDir = path14.dirname(outputPath);
-  await fs13.mkdir(outputDir, { recursive: true });
+  const outputDir = path13.dirname(outputPath);
+  await fs12.mkdir(outputDir, { recursive: true });
   const content = format === "yaml" ? manifestToYaml(manifest) : manifestToJson(manifest);
-  await fs13.writeFile(outputPath, content, "utf-8");
+  await fs12.writeFile(outputPath, content, "utf-8");
   logger13.info(`Wrote entrypoints manifest to ${outputPath}`);
   const total = manifest.cli_commands.length + manifest.mcp_tools.length;
   return {
@@ -11604,9 +11612,9 @@ async function freshnessCommand(options) {
   const hasIssues = summary.stale > 0 || summary.warning > 0 || summary.unknown > 0;
   const output2 = options.format === "json" ? formatFreshnessJson(result) : formatFreshnessTable(result);
   if (options.output !== void 0) {
-    const outputDir = path14.dirname(options.output);
-    await fs13.mkdir(outputDir, { recursive: true });
-    await fs13.writeFile(options.output, output2, "utf-8");
+    const outputDir = path13.dirname(options.output);
+    await fs12.mkdir(outputDir, { recursive: true });
+    await fs12.writeFile(options.output, output2, "utf-8");
     logger13.info(`Wrote freshness report to ${options.output}`);
   } else {
     process.stdout.write(output2 + "\n");
@@ -11638,9 +11646,9 @@ async function linksCommand(options) {
   const hasBrokenLinks = summary.brokenLinks > 0;
   const output2 = options.format === "json" ? formatLinkValidationJson(result) : formatLinkValidationTable(result);
   if (options.output !== void 0) {
-    const outputDir = path14.dirname(options.output);
-    await fs13.mkdir(outputDir, { recursive: true });
-    await fs13.writeFile(options.output, output2, "utf-8");
+    const outputDir = path13.dirname(options.output);
+    await fs12.mkdir(outputDir, { recursive: true });
+    await fs12.writeFile(options.output, output2, "utf-8");
     logger13.info(`Wrote link validation report to ${options.output}`);
   } else {
     process.stdout.write(output2 + "\n");
@@ -11904,15 +11912,15 @@ async function checkSqliteAvailability() {
     return {
       name: "SQLite Storage",
       passed: true,
-      message: "better-sqlite3 loaded (memory backends available)"
+      message: "node:sqlite available (memory backends available)"
     };
   }
   return {
     name: "SQLite Storage",
     passed: false,
     severity: "warn",
-    message: result.error ?? "better-sqlite3 not available",
-    fix: 'Run "pnpm rebuild better-sqlite3" or reinstall nexus-agents'
+    message: result.error ?? "node:sqlite not available",
+    fix: "Upgrade to Node >= 22.5.0 (node:sqlite is a builtin; nothing to install)"
   };
 }
 function checkDataDirs() {
@@ -12075,7 +12083,7 @@ async function verifyCommand(options) {
 }
 
 // src/cli/learning-metrics-command.ts
-import { writeFileSync as writeFileSync5 } from "fs";
+import { writeFileSync as writeFileSync5 } from "node:fs";
 
 // src/cli/learning-metrics-logic.ts
 function gatherLearningMetrics(bandit, metricsCollector, feedbackIntegration, options) {
@@ -12390,7 +12398,7 @@ function learningMetricsCommand(options, context) {
 }
 
 // src/cli/setup-command.ts
-import { existsSync as existsSync13 } from "fs";
+import { existsSync as existsSync13 } from "node:fs";
 
 // src/cli/setup-types.ts
 import { z as z5 } from "zod";
@@ -12422,10 +12430,10 @@ var SetupOptionsSchema = z5.object({
 });
 
 // src/cli/setup-environment.ts
-import { execSync as execSync2 } from "child_process";
-import { existsSync as existsSync12, readFileSync as readFileSync9 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join12, basename as basename4 } from "path";
+import { execSync as execSync2 } from "node:child_process";
+import { existsSync as existsSync12, readFileSync as readFileSync9 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { join as join12, basename as basename4 } from "node:path";
 function parseClaudeVersion(output2) {
   const match = output2.match(/(\d+\.\d+\.\d+)/);
   return match?.[1];
@@ -12470,8 +12478,8 @@ function extractProjectServers(config) {
   }
   return [...allServers];
 }
-function buildMcpInfo(path18, servers) {
-  return { exists: true, path: path18, hasNexusAgents: servers.includes("nexus-agents"), servers };
+function buildMcpInfo(path17, servers) {
+  return { exists: true, path: path17, hasNexusAgents: servers.includes("nexus-agents"), servers };
 }
 function detectMcpConfig(mcpJsonPath) {
   if (!existsSync12(mcpJsonPath)) return void 0;
@@ -12555,9 +12563,7 @@ function detectEnvironment(projectRoot) {
 }
 
 // src/cli/setup-mcp.ts
-import { execSync as execSync3, execFileSync as execFileSync2 } from "child_process";
-import { homedir as homedir4 } from "os";
-import { join as join13 } from "path";
+import { execSync as execSync3, execFileSync as execFileSync2 } from "node:child_process";
 var NEXUS_AGENTS_MCP_ENTRY = {
   command: "nexus-agents",
   args: ["--mode=server"]
@@ -12790,8 +12796,8 @@ function generateHookSnippet() {
 }
 
 // src/cli/setup-rules.ts
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync6, mkdirSync as mkdirSync4 } from "fs";
-import { join as join14, dirname as dirname7 } from "path";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync6, mkdirSync as mkdirSync4 } from "node:fs";
+import { join as join13, dirname as dirname6 } from "node:path";
 function generateRulesContent() {
   return `# Nexus-Agents Integration
 
@@ -12858,13 +12864,13 @@ Run the code-review workflow with the current changes
 `;
 }
 function getRulesFilePath(projectRoot) {
-  return join14(projectRoot, ".rules", "nexus-agents.md");
+  return join13(projectRoot, ".rules", "nexus-agents.md");
 }
 function createRulesFile(projectRoot, dryRun) {
   const rulesPath = getRulesFilePath(projectRoot);
   const content = generateRulesContent();
   if (!dryRun) {
-    const rulesDir = dirname7(rulesPath);
+    const rulesDir = dirname6(rulesPath);
     mkdirSync4(rulesDir, { recursive: true });
     writeFileSync6(rulesPath, content, "utf-8");
   }
@@ -12880,7 +12886,7 @@ function isInteractive() {
 }
 
 // src/cli/setup-wizard.ts
-import { createInterface as createInterface2 } from "readline";
+import { createInterface as createInterface2 } from "node:readline";
 function createReadline() {
   return createInterface2({
     input: process.stdin,
@@ -13768,9 +13774,7 @@ function isValidConfigAction(value) {
 }
 
 // src/cli/config-command-helpers.ts
-import * as fs14 from "fs/promises";
-import * as path15 from "path";
-import { existsSync as existsSync14 } from "fs";
+import * as path14 from "node:path";
 
 // src/cli/config-command-formatting.ts
 function formatSource(source) {
@@ -14037,10 +14041,10 @@ function parseValueFromString(stringValue, defaultValue) {
 }
 function resolveFilePath(filePath, allowedBase) {
   const base = allowedBase ?? process.cwd();
-  const resolved = path15.isAbsolute(filePath) ? filePath : path15.resolve(base, filePath);
-  const normalizedResolved = path15.normalize(resolved);
-  const normalizedBase = path15.normalize(base);
-  const isWithinBase = normalizedResolved === normalizedBase || normalizedResolved.startsWith(normalizedBase + path15.sep);
+  const resolved = path14.isAbsolute(filePath) ? filePath : path14.resolve(base, filePath);
+  const normalizedResolved = path14.normalize(resolved);
+  const normalizedBase = path14.normalize(base);
+  const isWithinBase = normalizedResolved === normalizedBase || normalizedResolved.startsWith(normalizedBase + path14.sep);
   if (!isWithinBase) {
     throw new ConfigCommandError(
       "PATH_TRAVERSAL",
@@ -14051,12 +14055,12 @@ function resolveFilePath(filePath, allowedBase) {
 }
 function getDefaultExportPath(format) {
   const extension = format === "json" ? "json" : "yaml";
-  return path15.resolve(process.cwd(), `nexus-config.${extension}`);
+  return path14.resolve(process.cwd(), `nexus-config.${extension}`);
 }
 
 // src/cli/config-command-handlers.ts
-import * as fs15 from "fs/promises";
-import { existsSync as existsSync15 } from "fs";
+import * as fs13 from "node:fs/promises";
+import { existsSync as existsSync14 } from "node:fs";
 async function handleGet(key) {
   const parsed = parseConfigKey(key);
   const config = getConfigManager();
@@ -14157,7 +14161,7 @@ function buildConfigEntries() {
 }
 async function writeConfigFile2(filePath, content) {
   try {
-    await fs15.writeFile(filePath, content, "utf-8");
+    await fs13.writeFile(filePath, content, "utf-8");
   } catch (error) {
     const message = getErrorMessage(error);
     throw new ConfigCommandError("WRITE_ERROR", `Failed to write file: ${message}`);
@@ -14178,12 +14182,12 @@ async function handleExport2(file, format = "json") {
   };
 }
 async function readImportFile(filePath) {
-  if (!existsSync15(filePath)) {
+  if (!existsSync14(filePath)) {
     throw new ConfigCommandError("FILE_NOT_FOUND", `File not found: ${filePath}`);
   }
   const format = filePath.endsWith(".yaml") || filePath.endsWith(".yml") ? "yaml" : "json";
   try {
-    const content = await fs15.readFile(filePath, "utf-8");
+    const content = await fs13.readFile(filePath, "utf-8");
     return { content, format };
   } catch (error) {
     const message = getErrorMessage(error);
@@ -15012,8 +15016,8 @@ async function exportSessionMetrics(storage, sessionId, exportPath) {
     const session = sessionResult.value;
     const metrics = buildMetricsObject(session, sessionId);
     if (exportPath !== void 0) {
-      const { writeFile: writeFile7 } = await import("fs/promises");
-      await writeFile7(exportPath, JSON.stringify(metrics, null, 2));
+      const { writeFile: writeFile6 } = await import("node:fs/promises");
+      await writeFile6(exportPath, JSON.stringify(metrics, null, 2));
       logger17.info("Metrics exported", { path: exportPath });
     } else {
       logger17.debug("Session metrics", summarizeMetricsForDebug(metrics));
@@ -16057,7 +16061,7 @@ async function demoCommand(subcommand, args, options) {
 }
 
 // src/cli/tour-command.ts
-import { createInterface as createInterface3 } from "readline";
+import { createInterface as createInterface3 } from "node:readline";
 var STEP_WELCOME = {
   title: "Welcome",
   intro: [
@@ -16231,7 +16235,6 @@ function scriptedIO() {
 }
 
 // src/governance/claims-registry.ts
-import { existsSync as existsSync16, readFileSync as readFileSync11 } from "fs";
 import { parse as parseYaml2 } from "yaml";
 import { z as z8 } from "zod";
 var VerificationMethodSchema = z8.enum([
@@ -16328,10 +16331,6 @@ var ClaimsRegistrySchema = z8.object({
   })
 }).strict();
 
-// src/governance/claims-verify.ts
-import { existsSync as existsSync17, readFileSync as readFileSync12 } from "fs";
-import { isAbsolute as isAbsolute2, join as join15 } from "path";
-
 // src/cli/fitness-audit.ts
 var COLORS = colors;
 function formatScore(score, max) {
@@ -16499,7 +16498,7 @@ var CATEGORY_ORDER = [
 ];
 
 // src/cli/release-notes-helpers.ts
-import { execFileSync as execFileSync3 } from "child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 function getLatestTag() {
   try {
     const result = execFileSync3("git", ["describe", "--tags", "--abbrev=0"], {
@@ -16792,14 +16791,14 @@ async function releaseNotesCommand(args) {
 }
 
 // src/cli/release-validate-command.ts
-import { readFileSync as readFileSync14 } from "fs";
+import { readFileSync as readFileSync12 } from "node:fs";
 
 // src/cli/release-validate-helpers.ts
-import { execSync as execSync5 } from "child_process";
-import { existsSync as existsSync18, readFileSync as readFileSync13 } from "fs";
+import { execSync as execSync5 } from "node:child_process";
+import { existsSync as existsSync15, readFileSync as readFileSync11 } from "node:fs";
 
 // src/cli/release-secret-scan.ts
-import { execSync as execSync4 } from "child_process";
+import { execSync as execSync4 } from "node:child_process";
 var SECRET_LINE_PATTERN = /api[_-]?key|secret|password|token/i;
 var MAX_REPORTED_MATCHES = 5;
 function scanRecentCommitsForSecrets(options = {}) {
@@ -16838,7 +16837,7 @@ async function validateSecurity(options) {
       remediation: "Run npm audit fix or review and update vulnerable dependencies."
     });
   }
-  if (existsSync18(".env")) {
+  if (existsSync15(".env")) {
     findings.push({
       severity: "error",
       category: "security",
@@ -16935,7 +16934,7 @@ async function validateArchitecture2(options) {
 async function validateDocumentation(options) {
   const startTime = Date.now();
   const findings = [];
-  if (!existsSync18("CHANGELOG.md")) {
+  if (!existsSync15("CHANGELOG.md")) {
     findings.push({
       severity: "error",
       category: "docs",
@@ -16943,7 +16942,7 @@ async function validateDocumentation(options) {
       description: "No CHANGELOG.md found in repository root.",
       remediation: "Create CHANGELOG.md following Keep a Changelog format."
     });
-  } else if (!readFileSync13("CHANGELOG.md", "utf-8").includes(options.version)) {
+  } else if (!readFileSync11("CHANGELOG.md", "utf-8").includes(options.version)) {
     findings.push({
       severity: "warning",
       category: "docs",
@@ -16953,7 +16952,7 @@ async function validateDocumentation(options) {
     });
   }
   const pkgCl = "packages/nexus-agents/CHANGELOG.md";
-  if (existsSync18(pkgCl) && !readFileSync13(pkgCl, "utf-8").includes(options.version)) {
+  if (existsSync15(pkgCl) && !readFileSync11(pkgCl, "utf-8").includes(options.version)) {
     findings.push({
       severity: "warning",
       category: "docs",
@@ -16962,7 +16961,7 @@ async function validateDocumentation(options) {
       remediation: "Run pnpm changeset:version to generate changelog from pending changesets."
     });
   }
-  if (!existsSync18("README.md")) {
+  if (!existsSync15("README.md")) {
     findings.push({
       severity: "error",
       category: "docs",
@@ -16971,8 +16970,8 @@ async function validateDocumentation(options) {
       remediation: "Create README.md with project overview and usage instructions."
     });
   }
-  if (existsSync18("CLAUDE.md")) {
-    const claudeMd = readFileSync13("CLAUDE.md", "utf-8");
+  if (existsSync15("CLAUDE.md")) {
+    const claudeMd = readFileSync11("CLAUDE.md", "utf-8");
     const match = claudeMd.match(/Governance Version: (\d{4}-\d{2}-\d{2})/);
     if (match?.[1]) {
       const governanceDate = new Date(match[1]);
@@ -17080,7 +17079,7 @@ var DEFAULT_OPTIONS2 = {
 };
 function readVersionFromPackage() {
   try {
-    const raw = JSON.parse(readFileSync14("package.json", "utf-8"));
+    const raw = JSON.parse(readFileSync12("package.json", "utf-8"));
     if (typeof raw === "object" && raw !== null && "version" in raw) {
       const pkg = raw;
       return typeof pkg.version === "string" ? pkg.version : "unknown";
@@ -17194,7 +17193,7 @@ async function releaseValidateCommand(args) {
 }
 
 // src/cli/release-announce-command.ts
-import { readFileSync as readFileSync15, existsSync as existsSync19 } from "fs";
+import { readFileSync as readFileSync13, existsSync as existsSync16 } from "node:fs";
 
 // src/cli/release-announce-types.ts
 var BLUESKY_LIMITS = {
@@ -17261,8 +17260,8 @@ var DEFAULT_OPTIONS3 = {
   verbose: false
 };
 function extractHighlightsFromChangelog(version) {
-  if (!existsSync19("CHANGELOG.md")) return [];
-  const changelog = readFileSync15("CHANGELOG.md", "utf-8");
+  if (!existsSync16("CHANGELOG.md")) return [];
+  const changelog = readFileSync13("CHANGELOG.md", "utf-8");
   const escaped = version.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   const versionRegex = new RegExp(`## \\[${escaped}\\][^#]*`, "s");
   const match = changelog.match(versionRegex);
@@ -17532,7 +17531,7 @@ async function releaseAnnounceCommand(args) {
     version = args.options.version;
   } else {
     try {
-      const pkg = JSON.parse(readFileSync15("package.json", "utf-8"));
+      const pkg = JSON.parse(readFileSync13("package.json", "utf-8"));
       if (!pkg.version) {
         console.error(`${colors.red}Error: Could not determine version${colors.reset}`);
         return 1;
@@ -17565,8 +17564,8 @@ async function releaseAnnounceCommand(args) {
 }
 
 // src/cli/scaffold.ts
-import * as fs16 from "fs";
-import * as path16 from "path";
+import * as fs14 from "node:fs";
+import * as path15 from "node:path";
 
 // src/cli/scaffold-templates.ts
 function toolImportsAndSchema(name, pascal) {
@@ -17902,17 +17901,17 @@ ${lines}`;
 function writeFiles(files) {
   const createdPaths = [];
   for (const file of files) {
-    const fullPath = path16.resolve(process.cwd(), file.path);
-    const dir = path16.dirname(fullPath);
-    fs16.mkdirSync(dir, { recursive: true });
-    if (fs16.existsSync(fullPath)) {
+    const fullPath = path15.resolve(process.cwd(), file.path);
+    const dir = path15.dirname(fullPath);
+    fs14.mkdirSync(dir, { recursive: true });
+    if (fs14.existsSync(fullPath)) {
       return {
         success: false,
         filesCreated: createdPaths,
         message: `File already exists: ${file.path}. Use a different name.`
       };
     }
-    fs16.writeFileSync(fullPath, file.content, "utf-8");
+    fs14.writeFileSync(fullPath, file.content, "utf-8");
     createdPaths.push(file.path);
   }
   const lines = createdPaths.map((p) => `  ${p}`).join("\n");
@@ -18484,7 +18483,7 @@ function formatEvalDetails(baseline, reflective, improvement, datasetSize) {
 }
 
 // src/cli/auth-command.ts
-import { existsSync as existsSync21, statSync, chmodSync } from "fs";
+import { existsSync as existsSync18, statSync, chmodSync } from "node:fs";
 function isValidAuthSubcommand(value) {
   return value === "init" || value === "show" || value === "rotate" || value === "help" || value === "status";
 }
@@ -18504,7 +18503,7 @@ function fixPermissions(filePath) {
 }
 function runAuthInit(options) {
   const tokenFile = options.tokenFile ?? getDefaultTokenPath();
-  const tokenExists = existsSync21(tokenFile);
+  const tokenExists = existsSync18(tokenFile);
   if (tokenExists && options.force !== true) {
     return {
       success: false,
@@ -18528,7 +18527,7 @@ function runAuthInit(options) {
 }
 function runAuthShow(options) {
   const tokenFile = options.tokenFile ?? getDefaultTokenPath();
-  const tokenExists = existsSync21(tokenFile);
+  const tokenExists = existsSync18(tokenFile);
   const token = readStoredToken(tokenFile);
   if (!tokenExists || token === void 0) {
     return {
@@ -18549,7 +18548,7 @@ function runAuthShow(options) {
 }
 function runAuthRotate(options) {
   const tokenFile = options.tokenFile ?? getDefaultTokenPath();
-  const tokenExists = existsSync21(tokenFile);
+  const tokenExists = existsSync18(tokenFile);
   if (!tokenExists) {
     return {
       success: false,
@@ -18585,14 +18584,14 @@ function runAuthCommand(options) {
         success: true,
         operation: "help",
         tokenFile: getDefaultTokenPath(),
-        tokenExists: existsSync21(getDefaultTokenPath())
+        tokenExists: existsSync18(getDefaultTokenPath())
       };
     default:
       return {
         success: false,
         operation: "help",
         tokenFile: getDefaultTokenPath(),
-        tokenExists: existsSync21(getDefaultTokenPath()),
+        tokenExists: existsSync18(getDefaultTokenPath()),
         error: `Unknown subcommand: ${subcommand}`
       };
   }
@@ -18707,18 +18706,18 @@ function authCommand(subcommand, options) {
 
 // src/cli/init-portable.ts
 import {
-  existsSync as existsSync25,
+  existsSync as existsSync22,
   mkdirSync as mkdirSync8,
   readdirSync,
   statSync as statSync2,
   appendFileSync as appendFileSync2,
-  readFileSync as readFileSync18
-} from "fs";
-import { resolve as resolve10, join as join19, isAbsolute as isAbsolute3 } from "path";
+  readFileSync as readFileSync16
+} from "node:fs";
+import { resolve as resolve10, join as join17, isAbsolute as isAbsolute2 } from "node:path";
 
 // src/cli/mcp-config-emitter.ts
-import { existsSync as existsSync22, readFileSync as readFileSync16, writeFileSync as writeFileSync8, appendFileSync } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync19, readFileSync as readFileSync14, writeFileSync as writeFileSync8, appendFileSync } from "node:fs";
+import { join as join14 } from "node:path";
 var MCP_CONFIG_FILENAME = ".mcp.json";
 var NEXUS_SERVER_KEY = "nexus-agents";
 function buildNexusServerEntry(dataDir, commandPath) {
@@ -18740,23 +18739,23 @@ function entriesEqual(a, b) {
   for (const k of aKeys) if (aEnv[k] !== bEnv[k]) return false;
   return true;
 }
-function loadExistingConfig(path18) {
-  if (!existsSync22(path18)) return { ok: true, value: void 0 };
+function loadExistingConfig(path17) {
+  if (!existsSync19(path17)) return { ok: true, value: void 0 };
   let raw;
   try {
-    raw = readFileSync16(path18, "utf-8");
+    raw = readFileSync14(path17, "utf-8");
   } catch (e) {
     return { ok: false, error: e instanceof Error ? e.message : String(e) };
   }
   try {
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) {
-      return { ok: false, error: `${path18}: top-level JSON must be an object` };
+      return { ok: false, error: `${path17}: top-level JSON must be an object` };
     }
     return { ok: true, value: parsed };
   } catch (e) {
     const msg = e instanceof Error ? e.message : String(e);
-    return { ok: false, error: `${path18}: invalid JSON \u2014 ${msg}` };
+    return { ok: false, error: `${path17}: invalid JSON \u2014 ${msg}` };
   }
 }
 function decideEmission(existing, desired, force) {
@@ -18778,12 +18777,12 @@ function decideEmission(existing, desired, force) {
   return { kind: "write", nextConfig: { ...existing, mcpServers: nextServers } };
 }
 function autoGitignoreMcpConfig(workspaceDir, dryRun) {
-  const gitDir = join16(workspaceDir, ".git");
-  if (!existsSync22(gitDir)) return false;
-  const gitignorePath = join16(workspaceDir, ".gitignore");
+  const gitDir = join14(workspaceDir, ".git");
+  if (!existsSync19(gitDir)) return false;
+  const gitignorePath = join14(workspaceDir, ".gitignore");
   let existing = "";
-  if (existsSync22(gitignorePath)) {
-    existing = readFileSync16(gitignorePath, "utf-8");
+  if (existsSync19(gitignorePath)) {
+    existing = readFileSync14(gitignorePath, "utf-8");
     const already = existing.split("\n").some((l) => l.trim() === MCP_CONFIG_FILENAME || l.trim() === `/${MCP_CONFIG_FILENAME}`);
     if (already) return false;
   }
@@ -18795,7 +18794,7 @@ function autoGitignoreMcpConfig(workspaceDir, dryRun) {
   return true;
 }
 function emitMcpConfig(options) {
-  const mcpConfigPath = join16(options.workspaceDir, MCP_CONFIG_FILENAME);
+  const mcpConfigPath = join14(options.workspaceDir, MCP_CONFIG_FILENAME);
   const dryRun = options.dryRun === true;
   const force = options.force === true;
   const desired = buildNexusServerEntry(options.dataDir, options.commandPath);
@@ -18832,14 +18831,14 @@ function makeFailure(mcpConfigPath, error) {
 }
 
 // src/cli/portable-installer.ts
-import { execFile as execFile2 } from "child_process";
-import { existsSync as existsSync24, mkdirSync as mkdirSync7, rmSync, writeFileSync as writeFileSync10 } from "fs";
-import { join as join18 } from "path";
-import { promisify as promisify2 } from "util";
+import { execFile as execFile2 } from "node:child_process";
+import { existsSync as existsSync21, mkdirSync as mkdirSync7, rmSync, writeFileSync as writeFileSync10 } from "node:fs";
+import { join as join16 } from "node:path";
+import { promisify as promisify2 } from "node:util";
 
 // src/cli/bin-shim.ts
-import { existsSync as existsSync23, readFileSync as readFileSync17, writeFileSync as writeFileSync9, chmodSync as chmodSync2, mkdirSync as mkdirSync6 } from "fs";
-import { join as join17 } from "path";
+import { existsSync as existsSync20, readFileSync as readFileSync15, writeFileSync as writeFileSync9, chmodSync as chmodSync2, mkdirSync as mkdirSync6 } from "node:fs";
+import { join as join15 } from "node:path";
 var SHIM_BASENAME = "nexus-agents";
 var SHIM_MODE = 493;
 function buildShimContents(cliEntryPath) {
@@ -18853,18 +18852,18 @@ function buildShimContents(cliEntryPath) {
   return lines.join("\n");
 }
 function writeBinShim(options) {
-  const shimPath = join17(options.binDir, SHIM_BASENAME);
+  const shimPath = join15(options.binDir, SHIM_BASENAME);
   const desired = buildShimContents(options.cliEntryPath);
   const dryRun = options.dryRun === true;
   try {
-    if (existsSync23(shimPath)) {
-      const current = readFileSync17(shimPath, "utf-8");
+    if (existsSync20(shimPath)) {
+      const current = readFileSync15(shimPath, "utf-8");
       if (current === desired) {
         return { success: true, shimPath, written: false, alreadyMatched: true, error: null };
       }
     }
     if (!dryRun) {
-      if (!existsSync23(options.binDir)) mkdirSync6(options.binDir, { recursive: true });
+      if (!existsSync20(options.binDir)) mkdirSync6(options.binDir, { recursive: true });
       writeFileSync9(shimPath, desired, "utf-8");
       chmodSync2(shimPath, SHIM_MODE);
     }
@@ -18899,10 +18898,10 @@ function writeInstallManifest(cliDir, version) {
     description: "Local install root for portable nexus-agents (generated; do not commit)",
     dependencies: { "nexus-agents": version }
   };
-  writeFileSync10(join18(cliDir, "package.json"), JSON.stringify(manifest, null, 2) + "\n", "utf-8");
+  writeFileSync10(join16(cliDir, "package.json"), JSON.stringify(manifest, null, 2) + "\n", "utf-8");
 }
 function isAlreadyInstalled(cliDir) {
-  return existsSync24(join18(cliDir, "node_modules", "nexus-agents", "package.json"));
+  return existsSync21(join16(cliDir, "node_modules", "nexus-agents", "package.json"));
 }
 async function spawnNpmInstall(cliDir) {
   await execFileAsync2("npm", ["install", "--no-audit", "--no-fund", "--silent"], {
@@ -18918,7 +18917,7 @@ function cleanupOnFailure(cliDir) {
 }
 async function runNpmStep(ctx) {
   try {
-    if (!existsSync24(ctx.cliDir)) mkdirSync7(ctx.cliDir, { recursive: true });
+    if (!existsSync21(ctx.cliDir)) mkdirSync7(ctx.cliDir, { recursive: true });
     writeInstallManifest(ctx.cliDir, ctx.version);
     await spawnNpmInstall(ctx.cliDir);
     return void 0;
@@ -18929,8 +18928,8 @@ async function runNpmStep(ctx) {
   }
 }
 async function installPortable(options) {
-  const cliDir = join18(options.dataDir, CLI_SUBDIR);
-  const binDir = join18(options.dataDir, BIN_SUBDIR);
+  const cliDir = join16(options.dataDir, CLI_SUBDIR);
+  const binDir = join16(options.dataDir, BIN_SUBDIR);
   const versionResolution = resolveInstallVersion(options.version);
   if (!versionResolution.ok) {
     return {
@@ -18951,7 +18950,7 @@ async function installPortable(options) {
   }
   const npmFailure = await runNpmStep(ctx);
   if (npmFailure !== void 0) return npmFailure;
-  const shim = writeBinShim({ binDir, cliEntryPath: join18(cliDir, CLI_ENTRY_RELATIVE) });
+  const shim = writeBinShim({ binDir, cliEntryPath: join16(cliDir, CLI_ENTRY_RELATIVE) });
   if (!shim.success) {
     cleanupOnFailure(cliDir);
     return {
@@ -18965,14 +18964,14 @@ async function installPortable(options) {
   return { success: true, ...ctx, shim, skipped: false, error: null };
 }
 function uninstallPortable(options) {
-  const cliDir = join18(options.dataDir, CLI_SUBDIR);
-  const binDir = join18(options.dataDir, BIN_SUBDIR);
+  const cliDir = join16(options.dataDir, CLI_SUBDIR);
+  const binDir = join16(options.dataDir, BIN_SUBDIR);
   const removed = [];
   const notPresent = [];
   const dryRun = options.dryRun === true;
   try {
     for (const dir of [cliDir, binDir]) {
-      if (!existsSync24(dir)) {
+      if (!existsSync21(dir)) {
         notPresent.push(dir);
         continue;
       }
@@ -18986,8 +18985,8 @@ function uninstallPortable(options) {
   }
 }
 function findBinShim(dataDir) {
-  const shimPath = join18(dataDir, BIN_SUBDIR, "nexus-agents");
-  return existsSync24(shimPath) ? shimPath : void 0;
+  const shimPath = join16(dataDir, BIN_SUBDIR, "nexus-agents");
+  return existsSync21(shimPath) ? shimPath : void 0;
 }
 
 // src/cli/init-portable.ts
@@ -18997,32 +18996,32 @@ function resolveTargetPath(rawPath) {
   if (rawPath === void 0 || rawPath === "") {
     return resolve10(process.cwd(), DEFAULT_PORTABLE_DIRNAME);
   }
-  return isAbsolute3(rawPath) ? rawPath : resolve10(process.cwd(), rawPath);
+  return isAbsolute2(rawPath) ? rawPath : resolve10(process.cwd(), rawPath);
 }
 function isNonEmpty(dir) {
-  if (!existsSync25(dir)) return false;
+  if (!existsSync22(dir)) return false;
   const stat2 = statSync2(dir);
   if (!stat2.isDirectory()) return true;
   return readdirSync(dir).length > 0;
 }
-function ensureDir(path18, dryRun, created, alreadyExisted, mode) {
-  if (existsSync25(path18)) {
-    alreadyExisted.push(path18);
+function ensureDir(path17, dryRun, created, alreadyExisted, mode) {
+  if (existsSync22(path17)) {
+    alreadyExisted.push(path17);
     return;
   }
   if (!dryRun) {
-    mkdirSync8(path18, { recursive: true, ...mode !== void 0 ? { mode } : {} });
+    mkdirSync8(path17, { recursive: true, ...mode !== void 0 ? { mode } : {} });
   }
-  created.push(path18);
+  created.push(path17);
 }
 function maybeUpdateGitignore(workspaceDir, portableDirName, dryRun) {
-  const gitDir = join19(workspaceDir, ".git");
-  if (!existsSync25(gitDir)) return false;
-  const gitignorePath = join19(workspaceDir, ".gitignore");
+  const gitDir = join17(workspaceDir, ".git");
+  if (!existsSync22(gitDir)) return false;
+  const gitignorePath = join17(workspaceDir, ".gitignore");
   const entry = `${portableDirName}/`;
   let existing = "";
-  if (existsSync25(gitignorePath)) {
-    existing = readFileSync18(gitignorePath, "utf-8");
+  if (existsSync22(gitignorePath)) {
+    existing = readFileSync16(gitignorePath, "utf-8");
     if (existing.split("\n").some((l) => l.trim() === entry || l.trim() === portableDirName)) {
       return false;
     }
@@ -19035,18 +19034,18 @@ function maybeUpdateGitignore(workspaceDir, portableDirName, dryRun) {
   return true;
 }
 function inspectTarget(target) {
-  const exists = existsSync25(target);
+  const exists = existsSync22(target);
   if (!exists) return { exists: false, nonEmpty: false, isExistingNexusDir: false };
   const nonEmpty = isNonEmpty(target);
   const stat2 = statSync2(target);
-  const isExistingNexusDir = stat2.isDirectory() && existsSync25(join19(target, "audit"));
+  const isExistingNexusDir = stat2.isDirectory() && existsSync22(join17(target, "audit"));
   return { exists, nonEmpty, isExistingNexusDir };
 }
 function createDataLayout(target, dryRun, created, alreadyExisted) {
   ensureDir(target, dryRun, created, alreadyExisted);
   for (const subdir of DATA_SUBDIRECTORIES) {
     const mode = RESTRICTED_SUBDIRS.has(subdir) ? 448 : void 0;
-    ensureDir(join19(target, subdir), dryRun, created, alreadyExisted, mode);
+    ensureDir(join17(target, subdir), dryRun, created, alreadyExisted, mode);
   }
 }
 function makeResult(opts) {
@@ -19587,7 +19586,7 @@ function startImprovementReviewScheduler(options) {
   let running = false;
   const runOnce = async () => {
     try {
-      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-QUU5HR7Z.js");
+      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-UV42QAVL.js");
       const input = ImprovementReviewInputSchema2.parse({ fileIssues });
       const result = await runImprovementReview2(input, { logger: logger22 });
       logger22.info("Scheduled improvement_review complete", {
@@ -20297,22 +20296,22 @@ function registerMcpTools(options) {
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
 // src/mcp/workspace-roots.ts
-import { existsSync as existsSync26 } from "fs";
-import { join as join20 } from "path";
-import { fileURLToPath } from "url";
+import { existsSync as existsSync23 } from "node:fs";
+import { join as join18 } from "node:path";
+import { fileURLToPath } from "node:url";
 function deriveWorkspaceRootFromRoots(roots) {
   let first = null;
   let gitRoot = null;
   for (const root of roots) {
     if (typeof root.uri !== "string" || !root.uri.startsWith("file://")) continue;
-    let path18;
+    let path17;
     try {
-      path18 = fileURLToPath(root.uri);
+      path17 = fileURLToPath(root.uri);
     } catch {
       continue;
     }
-    first ??= path18;
-    if (gitRoot === null && existsSync26(join20(path18, ".git"))) gitRoot = path18;
+    first ??= path17;
+    if (gitRoot === null && existsSync23(join18(path17, ".git"))) gitRoot = path17;
   }
   return gitRoot ?? first;
 }
@@ -20472,7 +20471,7 @@ function logFinalEventBusStats(logger22) {
 }
 
 // src/cli-orchestrator.ts
-import * as readline2 from "readline";
+import * as readline2 from "node:readline";
 async function executeReplTask(task, options, logger22, rl) {
   try {
     await orchestrateCommand({
@@ -21672,7 +21671,7 @@ function adaptConfigToLibrary(config) {
 }
 function createBeliefPromoter() {
   return async (event) => {
-    const { getToolMemory } = await import("./tool-memory-GUPG2M25.js");
+    const { getToolMemory } = await import("./tool-memory-RSRUWJFE.js");
     const tm = getToolMemory();
     await tm.recordBelief(
       `skill:${event.name}`,
@@ -22893,7 +22892,7 @@ async function handleResearchCommand(args) {
   }
 }
 async function handleRegistryCommand(args) {
-  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-ZK4NQ2MX.js");
+  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-O7TLGMNL.js");
   const subcommand = args.subcommand;
   if (!isValidRegistrySubcommand(subcommand)) {
     process.stdout.write(`${formatRegistryUsage()}
@@ -22941,12 +22940,12 @@ async function handleVerifyCommand(args) {
 async function handleDoctorCommand(args) {
   const exitCode = await doctorCommand({ fix: args.options.fix });
   if (args.options.deep) {
-    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-6WHVRRVQ.js");
+    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-WLVSUPFA.js");
     const diag = runDeepDiagnostics2();
     process.stdout.write(formatDeepDiagnostics2(diag) + "\n");
   }
   if (args.options.live) {
-    const { runLiveReadiness, formatLiveReadiness } = await import("./doctor-live-J7JIZH3T.js");
+    const { runLiveReadiness, formatLiveReadiness } = await import("./doctor-live-5L4RI4GW.js");
     const report = await runLiveReadiness();
     process.stdout.write(formatLiveReadiness(report) + "\n");
     if (report.some((r) => r.levels.serves.status === "failed")) {
@@ -22999,7 +22998,7 @@ async function runInitPortableFlow(args) {
   return cliExit(result.success ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runInitOpencodeFlow(args) {
-  const { runInitOpencode } = await import("./init-opencode-GDPE4U65.js");
+  const { runInitOpencode } = await import("./init-opencode-73YZUQQX.js");
   const opencodePath = args.options.opencode;
   if (opencodePath === void 0 || opencodePath === "") {
     process.stderr.write("Error: --opencode requires a path argument.\n");
@@ -23025,7 +23024,7 @@ async function runInitOpencodeFlow(args) {
   return cliExit(EXIT_CODES.SUCCESS);
 }
 async function renderOpencodeValidate(opencodePath) {
-  const { runOpencodeValidate } = await import("./init-opencode-GDPE4U65.js");
+  const { runOpencodeValidate } = await import("./init-opencode-73YZUQQX.js");
   const result = await runOpencodeValidate(opencodePath);
   if (!result.ok) {
     process.stderr.write(`init --opencode --validate: ${result.reason ?? "failed"}
@@ -23064,7 +23063,7 @@ async function handleSetupCommandAsync(args) {
   return cliExitFromStatus(exitCode);
 }
 async function runCustomApiSetup(args) {
-  const { configureCustomApi } = await import("./setup-custom-api-ZSBUIJID.js");
+  const { configureCustomApi } = await import("./setup-custom-api-EETAAEAD.js");
   const baseUrl = args.options.customApi;
   if (baseUrl === void 0) return EXIT_CODES.SERVER_START_FAILED;
   const input = {
@@ -23430,25 +23429,25 @@ function handleScaffoldCommand(args) {
 }
 
 // src/cli/visualize-summary.ts
-import * as fs17 from "fs";
-import * as path17 from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import * as fs15 from "node:fs";
+import * as path16 from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 function findPackageRoot(startDir) {
   let dir = startDir;
   for (let i = 0; i < 5; i++) {
-    if (fs17.existsSync(path17.join(dir, "package.json"))) return dir;
-    const parent = path17.dirname(dir);
+    if (fs15.existsSync(path16.join(dir, "package.json"))) return dir;
+    const parent = path16.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   return startDir;
 }
 function countFiles(dir, pattern) {
-  if (!fs17.existsSync(dir)) return 0;
+  if (!fs15.existsSync(dir)) return 0;
   let count = 0;
-  for (const entry of fs17.readdirSync(dir, { withFileTypes: true })) {
+  for (const entry of fs15.readdirSync(dir, { withFileTypes: true })) {
     if (entry.isDirectory() && entry.name !== "node_modules" && entry.name !== "dist") {
-      count += countFiles(path17.join(dir, entry.name), pattern);
+      count += countFiles(path16.join(dir, entry.name), pattern);
     } else if (entry.isFile() && pattern.test(entry.name)) {
       count++;
     }
@@ -23457,7 +23456,7 @@ function countFiles(dir, pattern) {
 }
 function readVersion(pkgRoot) {
   try {
-    const raw = fs17.readFileSync(path17.join(pkgRoot, "package.json"), "utf-8");
+    const raw = fs15.readFileSync(path16.join(pkgRoot, "package.json"), "utf-8");
     const pkg = JSON.parse(raw);
     return pkg.version ?? "unknown";
   } catch {
@@ -23478,13 +23477,13 @@ var LAYER_DIRS = [
 ];
 function gatherSystemSummary() {
   const thisFile = fileURLToPath2(import.meta.url);
-  const pkgRoot = findPackageRoot(path17.dirname(thisFile));
-  const srcDir = path17.resolve(pkgRoot, "src");
+  const pkgRoot = findPackageRoot(path16.dirname(thisFile));
+  const srcDir = path16.resolve(pkgRoot, "src");
   const allTs = countFiles(srcDir, /\.ts$/);
   const testTs = countFiles(srcDir, /\.test\.ts$/);
   const layers = LAYER_DIRS.map(({ name, dir }) => ({
     name,
-    files: countFiles(path17.join(srcDir, dir), /\.ts$/)
+    files: countFiles(path16.join(srcDir, dir), /\.ts$/)
   })).filter((l) => l.files > 0);
   return {
     version: readVersion(pkgRoot),
@@ -23735,8 +23734,8 @@ function generateDiagramOutput(subcommand, format) {
 async function writeOutput(output2, outputPath) {
   if (outputPath !== void 0) {
     try {
-      const fs18 = await import("fs");
-      fs18.writeFileSync(outputPath, output2 + "\n", "utf-8");
+      const fs16 = await import("node:fs");
+      fs16.writeFileSync(outputPath, output2 + "\n", "utf-8");
       process.stdout.write(`Diagram written to ${outputPath}
 `);
     } catch (e) {
@@ -24553,7 +24552,7 @@ async function handleMemoryBenchmarkCommand(args) {
 }
 
 // src/cli/status-command.ts
-import { execFileSync as execFileSync4 } from "child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 var FITNESS_TARGET = 90;
 var API_ADAPTER_CHECKS = [
   { name: "Claude", envVar: "ANTHROPIC_API_KEY" },
@@ -24660,11 +24659,11 @@ function handleStatusCommand2(args) {
 }
 
 // src/cli/scenario-command.ts
-import { readdir as readdir4 } from "fs/promises";
-import { join as join22, resolve as resolve12 } from "path";
+import { readdir as readdir4 } from "node:fs/promises";
+import { join as join20, resolve as resolve12 } from "node:path";
 
 // src/testing/e2e/scenario-runner.ts
-import { readFile as readFile7 } from "fs/promises";
+import { readFile as readFile7 } from "node:fs/promises";
 import * as yaml7 from "yaml";
 
 // src/testing/e2e/types.ts
@@ -24792,9 +24791,9 @@ function checkCircularDependencies(workflow) {
   for (const step of workflow.steps) {
     stepMap.set(step.id, step);
   }
-  const visit = (stepId, path18) => {
+  const visit = (stepId, path17) => {
     if (visiting.has(stepId)) {
-      errors.push(`Circular dependency detected: ${[...path18, stepId].join(" -> ")}`);
+      errors.push(`Circular dependency detected: ${[...path17, stepId].join(" -> ")}`);
       return false;
     }
     if (visited.has(stepId)) return true;
@@ -24802,7 +24801,7 @@ function checkCircularDependencies(workflow) {
     const step = stepMap.get(stepId);
     if (step?.dependsOn) {
       for (const dep of step.dependsOn) {
-        if (!visit(dep, [...path18, stepId])) {
+        if (!visit(dep, [...path17, stepId])) {
           return false;
         }
       }
@@ -24846,8 +24845,8 @@ var ScenarioRunner = class {
   /**
    * Load a scenario fixture from a YAML file.
    */
-  async loadFixture(path18) {
-    const content = await readFile7(path18, "utf-8");
+  async loadFixture(path17) {
+    const content = await readFile7(path17, "utf-8");
     const data = yaml7.parse(content);
     return ScenarioFixtureSchema.parse(data);
   }
@@ -25031,7 +25030,7 @@ async function handleRun(args) {
     return cliExit(EXIT_CODES.SERVER_START_FAILED);
   }
   const runner = createScenarioRunner();
-  const fixturePath = join22(FIXTURES_DIR, `${name}${SCENARIO_SUFFIX}`);
+  const fixturePath = join20(FIXTURES_DIR, `${name}${SCENARIO_SUFFIX}`);
   try {
     const fixture = await runner.loadFixture(fixturePath);
     const result = await runner.run(fixture);
@@ -25520,8 +25519,8 @@ function makeVoteAdapter(runner, logger22 = createLogger({ tool: "auto-remediati
 }
 
 // src/mcp/tools/auto-remediation-lease.ts
-import { execFile as execFile3 } from "child_process";
-import { promisify as promisify3 } from "util";
+import { execFile as execFile3 } from "node:child_process";
+import { promisify as promisify3 } from "node:util";
 var execFileAsync3 = promisify3(execFile3);
 function lockRef(key) {
   return `refs/locks/${key}`;
@@ -25583,10 +25582,10 @@ function stripRefsPrefix(ref) {
 }
 
 // src/mcp/tools/remediation-proposal-pr.ts
-import { execFile as execFile4 } from "child_process";
-import { promisify as promisify4 } from "util";
-import { writeFile as writeFile6, mkdir as mkdir5 } from "fs/promises";
-import { join as join23, dirname as dirname10 } from "path";
+import { execFile as execFile4 } from "node:child_process";
+import { promisify as promisify4 } from "node:util";
+import { writeFile as writeFile5, mkdir as mkdir4 } from "node:fs/promises";
+import { join as join21, dirname as dirname9 } from "node:path";
 
 // src/mcp/tools/improvement-remediation-capability.ts
 import { z as z9 } from "zod";
@@ -25745,14 +25744,14 @@ function makeGitWorktreeOps(repoRoot) {
   };
   return {
     async addWorktree(branch, baseBranch) {
-      const path18 = join23(repoRoot, ".nexus-worktrees", branch.replace(/\//g, "_"));
-      await git2(["worktree", "add", "-b", branch, path18, baseBranch], repoRoot);
-      return path18;
+      const path17 = join21(repoRoot, ".nexus-worktrees", branch.replace(/\//g, "_"));
+      await git2(["worktree", "add", "-b", branch, path17, baseBranch], repoRoot);
+      return path17;
     },
     async writeFileIn(worktreePath, relPath, content) {
-      const abs = join23(worktreePath, relPath);
-      await mkdir5(dirname10(abs), { recursive: true });
-      await writeFile6(abs, content, "utf8");
+      const abs = join21(worktreePath, relPath);
+      await mkdir4(dirname9(abs), { recursive: true });
+      await writeFile5(abs, content, "utf8");
     },
     async commitAll(worktreePath, message) {
       await git2(["add", "-A"], worktreePath);
@@ -25945,18 +25944,18 @@ function buildAutoRemediationDeps(opts = {}) {
 }
 
 // src/mcp/tools/codepr-soak-consumer.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash4 } from "node:crypto";
 
 // src/mcp/tools/codepr-orchestrator.ts
-import { createHash as createHash3 } from "crypto";
-import { mkdirSync as mkdirSync9, writeFileSync as writeFileSync11, rmSync as rmSync2, realpathSync as realpathSync2 } from "fs";
-import { dirname as dirname12, join as join24 } from "path";
-import { execFileSync as execFileSync5 } from "child_process";
+import { createHash as createHash3 } from "node:crypto";
+import { mkdirSync as mkdirSync9, writeFileSync as writeFileSync11, rmSync as rmSync2, realpathSync as realpathSync2 } from "node:fs";
+import { dirname as dirname11, join as join22 } from "node:path";
+import { execFileSync as execFileSync5 } from "node:child_process";
 import { z as z12 } from "zod";
 
 // src/mcp/tools/codepr-guards.ts
-import { realpathSync } from "fs";
-import { isAbsolute as isAbsolute4, resolve as resolve13, relative as relative4, sep as sep3, dirname as dirname11, basename as basename5 } from "path";
+import { realpathSync } from "node:fs";
+import { isAbsolute as isAbsolute3, resolve as resolve13, relative as relative4, sep as sep3, dirname as dirname10, basename as basename5 } from "node:path";
 import { z as z11 } from "zod";
 function deny(reason, detail) {
   return { ok: false, reason, detail };
@@ -25969,7 +25968,7 @@ function errnoCode(err2) {
   return void 0;
 }
 function confinePath(worktreeRoot, candidatePath, realpath = realpathSync) {
-  if (!isAbsolute4(worktreeRoot)) {
+  if (!isAbsolute3(worktreeRoot)) {
     return deny("path_escape", "worktreeRoot must be an absolute path");
   }
   let resolvedRoot;
@@ -25978,7 +25977,7 @@ function confinePath(worktreeRoot, candidatePath, realpath = realpathSync) {
   } catch {
     return deny("path_escape", "worktreeRoot could not be resolved (fail-closed)");
   }
-  const joined = isAbsolute4(candidatePath) ? candidatePath : resolve13(resolvedRoot, candidatePath);
+  const joined = isAbsolute3(candidatePath) ? candidatePath : resolve13(resolvedRoot, candidatePath);
   const reassembled = resolveNewFilePath(joined, realpath);
   if (reassembled === void 0) {
     return deny("path_escape", "candidate path could not be resolved (fail-closed)");
@@ -25997,7 +25996,7 @@ function resolveNewFilePath(joined, realpath) {
       break;
     } catch (err2) {
       if (errnoCode(err2) !== "ENOENT") return void 0;
-      const parent = dirname11(existing);
+      const parent = dirname10(existing);
       if (parent === existing) return void 0;
       trailing.push(basename5(existing));
       existing = parent;
@@ -26010,7 +26009,7 @@ function isWithin(parent, child) {
   const rel = relative4(parent, child);
   if (rel === "") return true;
   if (rel === ".." || rel.startsWith(".." + sep3)) return false;
-  if (isAbsolute4(rel)) return false;
+  if (isAbsolute3(rel)) return false;
   return true;
 }
 function basenamePosix(relPathPosix) {
@@ -26284,9 +26283,9 @@ function parseNumstat(numstat) {
     if (parts.length < 3) continue;
     const added = parts[0] === "-" ? 0 : Number.parseInt(parts[0] ?? "0", 10);
     const removed = parts[1] === "-" ? 0 : Number.parseInt(parts[1] ?? "0", 10);
-    const path18 = parts.slice(2).join("	");
+    const path17 = parts.slice(2).join("	");
     files.push({
-      path: path18,
+      path: path17,
       addedLines: Number.isFinite(added) ? added : 0,
       removedLines: Number.isFinite(removed) ? removed : 0
     });
@@ -26345,7 +26344,7 @@ function applyChanges(worktreeRoot, run) {
   for (const change of run.changes) {
     const confined = confinePath(worktreeRoot, change.relPath);
     if (!confined.ok) throw new Error(`apply: ${confined.detail}`);
-    mkdirSync9(dirname12(confined.resolvedPath), { recursive: true });
+    mkdirSync9(dirname11(confined.resolvedPath), { recursive: true });
     writeFileSync11(confined.resolvedPath, change.newContent);
   }
 }
@@ -26408,7 +26407,7 @@ function runInWorktree(run, logger22, options, handle) {
   const fault = options.faultInjector;
   const repoRoot = options.repoRoot ?? process.cwd();
   handle.tempParent = realpathSync2(nexusMkdtempSync("codepr-orchestrator-"));
-  handle.worktreeRoot = join24(handle.tempParent, "wt");
+  handle.worktreeRoot = join22(handle.tempParent, "wt");
   git(repoRoot, ["worktree", "add", "--detach", handle.worktreeRoot]);
   fault?.("after-worktree");
   const precheck = precheckChanges(handle.worktreeRoot, run, logger22);
@@ -26553,11 +26552,11 @@ function deriveProposedChanges(plan) {
   const changes = [];
   for (const step of plan.steps) {
     if (!CODE_TOUCHING_KINDS.has(step.kind)) continue;
-    const path18 = step.targetPath !== void 0 && step.targetPath !== "" ? step.targetPath : placeholderPathFor(plan, step.kind);
-    if (seen.has(path18)) continue;
-    seen.add(path18);
+    const path17 = step.targetPath !== void 0 && step.targetPath !== "" ? step.targetPath : placeholderPathFor(plan, step.kind);
+    if (seen.has(path17)) continue;
+    seen.add(path17);
     changes.push({
-      relPath: path18,
+      relPath: path17,
       newContent: `// codepr soak dry-run placeholder for ${plan.signalKey} (${step.kind})
 `
     });
@@ -26833,11 +26832,11 @@ var PROTECTED_PATH_FRAGMENTS = [
   "secret",
   "credential"
 ];
-function normalize2(path18) {
-  return path18.replace(/\\/g, "/").replace(/^\.\//, "").toLowerCase();
+function normalize2(path17) {
+  return path17.replace(/\\/g, "/").replace(/^\.\//, "").toLowerCase();
 }
-function isProtectedPath(path18) {
-  const p = normalize2(path18);
+function isProtectedPath(path17) {
+  const p = normalize2(path17);
   return PROTECTED_PATH_FRAGMENTS.some((frag) => p.includes(frag));
 }
 function planTouchesProtectedPath(plan) {
@@ -27275,18 +27274,18 @@ async function handleRemediationReviewCommand(args) {
 }
 
 // src/cli/migrate-command.ts
-import { cpSync, existsSync as existsSync28, mkdirSync as mkdirSync10, readdirSync as readdirSync3 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join25 } from "path";
+import { cpSync, existsSync as existsSync25, mkdirSync as mkdirSync10, readdirSync as readdirSync3 } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { join as join23 } from "node:path";
 var logger21 = createLogger({ component: "migrate-command" });
-var HOMEDIR_DEFAULT_BASE = join25(homedir5(), ".nexus-agents");
+var HOMEDIR_DEFAULT_BASE = join23(homedir4(), ".nexus-agents");
 function countItems(dir) {
-  if (!existsSync28(dir)) return 0;
+  if (!existsSync25(dir)) return 0;
   try {
     const entries = readdirSync3(dir, { withFileTypes: true });
     let n = 0;
     for (const e of entries) {
-      const p = join25(dir, e.name);
+      const p = join23(dir, e.name);
       if (e.isDirectory()) {
         n += countItems(p);
       } else {
@@ -27328,7 +27327,7 @@ function checkEarlyExits(fromBase, toBase, dryRun) {
       summary: "No git repo detected from cwd. Run from inside a repo or pass --to <path> to choose an explicit destination."
     };
   }
-  if (!existsSync28(fromBase)) {
+  if (!existsSync25(fromBase)) {
     return {
       fromBase,
       toBase,
@@ -27341,8 +27340,8 @@ function checkEarlyExits(fromBase, toBase, dryRun) {
   return null;
 }
 function planAndExecuteEntry(name, fromBase, toBase, perRepoSet, dryRun) {
-  const source = join25(fromBase, name);
-  const target = join25(toBase, name);
+  const source = join23(fromBase, name);
+  const target = join23(toBase, name);
   if (!perRepoSet.has(name)) {
     return { subdir: name, status: "skipped-not-per-repo", source, target: "", itemsCopied: 0 };
   }
@@ -27350,7 +27349,7 @@ function planAndExecuteEntry(name, fromBase, toBase, perRepoSet, dryRun) {
   if (items === 0) {
     return { subdir: name, status: "skipped-empty", source, target, itemsCopied: 0 };
   }
-  if (existsSync28(target) && readdirSync3(target).length > 0) {
+  if (existsSync25(target) && readdirSync3(target).length > 0) {
     return { subdir: name, status: "skipped-exists", source, target, itemsCopied: 0 };
   }
   if (!dryRun) {
@@ -27362,7 +27361,7 @@ function planAndExecuteEntry(name, fromBase, toBase, perRepoSet, dryRun) {
 function resolveDefaultTarget(cwd) {
   const repoRoot = findRepoRoot(cwd);
   if (repoRoot === null) return null;
-  return join25(repoRoot, ".nexus-agents");
+  return join23(repoRoot, ".nexus-agents");
 }
 function formatMigrationResult(result) {
   if (!result.success) {
@@ -27404,8 +27403,8 @@ async function handleMigrateCommand(args) {
 }
 
 // src/cli/first-run-hint.ts
-import { existsSync as existsSync29, mkdirSync as mkdirSync11, writeFileSync as writeFileSync12 } from "fs";
-import { dirname as dirname13 } from "path";
+import { existsSync as existsSync26, mkdirSync as mkdirSync11, writeFileSync as writeFileSync12 } from "node:fs";
+import { dirname as dirname12 } from "node:path";
 var HINT_SUPPRESSED_COMMANDS = /* @__PURE__ */ new Set(["version", "help", "setup"]);
 function firstRunMarkerPath() {
   return nexusSharedPath(".first-run-done");
@@ -27415,14 +27414,14 @@ function maybeShowFirstRunHint(command) {
   if (!process.stderr.isTTY) return;
   const marker = firstRunMarkerPath();
   try {
-    if (existsSync29(marker)) return;
+    if (existsSync26(marker)) return;
   } catch {
   }
   process.stderr.write(
     "\x1B[36mnexus-agents\x1B[0m: First time? Run \x1B[1mnexus-agents setup\x1B[0m to configure.\n  (This one-time hint is now dismissed.)\n"
   );
   try {
-    mkdirSync11(dirname13(marker), { recursive: true });
+    mkdirSync11(dirname12(marker), { recursive: true });
     writeFileSync12(marker, `${(/* @__PURE__ */ new Date()).toISOString()}
 `, { flag: "w" });
   } catch {