nexus-agents 8.101.0 → 8.102.1

package/dist/{ast-rule-runner-JVKSVDZN.js → ast-rule-runner-WWUOS722.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-DFF4PQWN.js";
-import "./chunk-OLPKHKVI.js";
+} from "./chunk-XROOAW6C.js";
+import "./chunk-ZR5JWLC5.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -26,4 +26,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-JVKSVDZN.js.map
+//# sourceMappingURL=ast-rule-runner-WWUOS722.js.map

package/dist/{child-mcp-config-GGKIZUCK.js → child-mcp-config-U3I7K7BT.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-OITVVSWO.js";
 import {
   createLogger
-} from "./chunk-OLPKHKVI.js";
+} from "./chunk-ZR5JWLC5.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -56,4 +56,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-GGKIZUCK.js.map
+//# sourceMappingURL=child-mcp-config-U3I7K7BT.js.map

package/dist/{chunk-B7WPNSR7.js → chunk-2I2I3DRA.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-W654ME6B.js";
 import {
   resolveToken
-} from "./chunk-5RFWS5YF.js";
+} from "./chunk-KMY3NA44.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
@@ -11,10 +11,10 @@ import {
   loadTechniquesRegistry,
   resolveInsideRoot,
   savePapersRegistry
-} from "./chunk-TFB36ENN.js";
+} from "./chunk-NACTU45C.js";
 import {
   getToolMemory
-} from "./chunk-TFDCAESD.js";
+} from "./chunk-PAICM2DX.js";
 import {
   capitalizeWords,
   tokenizeFiltered,
@@ -43,7 +43,7 @@ import {
   ok,
   registerPersistentDistillerFactory,
   sigmoidConfidence
-} from "./chunk-OLPKHKVI.js";
+} from "./chunk-ZR5JWLC5.js";
 import {
   ensureLearningDir,
   getRulesFile
@@ -4275,4 +4275,4 @@ export {
   DEFAULT_CONTEXT_BUDGET_TOKENS,
   getContextPromptPrefix
 };
-//# sourceMappingURL=chunk-B7WPNSR7.js.map
+//# sourceMappingURL=chunk-2I2I3DRA.js.map

package/dist/{chunk-NQYVJNE3.js → chunk-3LKDZORV.js}

@@ -1,14 +1,14 @@
 import {
   SERVES_PROBE_PROMPT
-} from "./chunk-3QGKGM37.js";
+} from "./chunk-BYRIEU5S.js";
 import {
   printVoterTransportCheck
-} from "./chunk-LSS5ZIBM.js";
+} from "./chunk-ZYMOKZ5S.js";
 import {
   NODE_ENGINE_RANGE,
   VERSION,
   isNodeVersionSupported
-} from "./chunk-FFF4ORRN.js";
+} from "./chunk-JQAXGIDL.js";
 import {
   allOf
 } from "./chunk-EZNIYU5T.js";
@@ -18,10 +18,10 @@ import {
   discoverGatewayCatalog,
   readOpenAICompatEndpoint,
   readOpenAICompatEnv
-} from "./chunk-WSE5Q3W5.js";
+} from "./chunk-QHMUW6G7.js";
 import {
   claimGlobalRegistry
-} from "./chunk-HWROQN3Y.js";
+} from "./chunk-6NYFFN42.js";
 import {
   capitalize
 } from "./chunk-7LP6VJRP.js";
@@ -33,13 +33,13 @@ import {
   createAllAdapters,
   isCliDisabled,
   probeCli
-} from "./chunk-5K4JAZ67.js";
+} from "./chunk-C4T7UI2R.js";
 import {
   gatewayProxyUrl
-} from "./chunk-7PLT45J4.js";
+} from "./chunk-D5EDP3EQ.js";
 import {
   resolveGatewayEnv
-} from "./chunk-ISEB4I5X.js";
+} from "./chunk-YKC7ICXJ.js";
 import {
   getNexusTmpDir
 } from "./chunk-OITVVSWO.js";
@@ -65,7 +65,7 @@ import {
   resolveGatewayCostDeclaration,
   symbols,
   writeLine
-} from "./chunk-OLPKHKVI.js";
+} from "./chunk-ZR5JWLC5.js";
 import {
   getLearningDir,
   getOutcomesFile,
@@ -1487,7 +1487,7 @@ async function doctorCommand(options = {}) {
   const result = await runDoctor({ gatewayProbe: options.probe === true });
   printDoctorResults(result);
   if (options.gateway === true || options.probe === true) {
-    const { formatGatewayReport } = await import("./doctor-gateway-report-5YKA34JJ.js");
+    const { formatGatewayReport } = await import("./doctor-gateway-report-6L7K7KQR.js");
     for (const line of formatGatewayReport(result.gateway)) process.stdout.write(line + "\n");
   }
   if (options.fix === true) {
@@ -1504,13 +1504,13 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-NA7CWUKX.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-4PF7KCEJ.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
   }
   if (!result.configFile.found) {
-    const { runConfigInitSync } = await import("./setup-config-226V7DOY.js");
+    const { runConfigInitSync } = await import("./setup-config-EZ5SSK6U.js");
     const configResult = runConfigInitSync(process.cwd(), false, false);
     if (configResult.success && configResult.created) {
       writeLine2(`\u2713 Generated config: ${configResult.path}`);
@@ -1606,4 +1606,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-NQYVJNE3.js.map
+//# sourceMappingURL=chunk-3LKDZORV.js.map

package/dist/{chunk-GWG6GMTY.js → chunk-5ML3THNH.js}

@@ -1,11 +1,11 @@
 import {
   resolveCliSlot
-} from "./chunk-ZPMZ7QSF.js";
+} from "./chunk-UA3TQ773.js";
 import {
   createLogger,
   getTimeProvider,
   isRateLimitText
-} from "./chunk-OLPKHKVI.js";
+} from "./chunk-ZR5JWLC5.js";
 
 // src/pipeline/expert-bridge.ts
 function resolveCliFromModelString(model) {
@@ -30,7 +30,7 @@ async function getMcpConfigPath() {
   if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;
   mcpConfigInitPromise ??= (async () => {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-GGKIZUCK.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-U3I7K7BT.js");
       const config = await generateMcpConfig();
       cachedMcpConfigPath = config.configPath;
       cachedMcpConfigCleanup = config.cleanup;
@@ -110,8 +110,8 @@ var routerInitPromise = null;
 async function getRouter() {
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-IK53LZGG.js");
-    const { createCompositeRouter } = await import("./composite-router-LB53V3BZ.js");
+    const { createAllAdapters } = await import("./factory-ZPHF32DK.js");
+    const { createCompositeRouter } = await import("./composite-router-RX3JZYIE.js");
     const adapters = createAllAdapters();
     if (adapters.size === 0) {
       routerInitPromise = null;
@@ -119,7 +119,7 @@ async function getRouter() {
     }
     cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-Z3VTFZRB.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-V2BTK5ZW.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
@@ -252,4 +252,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-GWG6GMTY.js.map
+//# sourceMappingURL=chunk-5ML3THNH.js.map

package/dist/{chunk-HWROQN3Y.js → chunk-6NYFFN42.js}

@@ -1,10 +1,10 @@
 import {
   createAutoAdapter
-} from "./chunk-5K4JAZ67.js";
+} from "./chunk-C4T7UI2R.js";
 import {
   getDefaultCliCircuitBreakerRegistry,
   mapModelErrorToCategory
-} from "./chunk-VDPPDXLU.js";
+} from "./chunk-AWUTGAQN.js";
 import {
   CircularBuffer,
   ConfigError,
@@ -30,7 +30,7 @@ import {
   resolveModelIdentitySync,
   toRateLimitError,
   warnIfGatewayCostUndeclared
-} from "./chunk-OLPKHKVI.js";
+} from "./chunk-ZR5JWLC5.js";
 
 // src/config/model-equivalence.ts
 var VARIANT_QUIRKS = /* @__PURE__ */ new Set(["small", "image"]);
@@ -1050,4 +1050,4 @@ export {
   getGlobalRegistry,
   resetGlobalRegistry
 };
-//# sourceMappingURL=chunk-HWROQN3Y.js.map
+//# sourceMappingURL=chunk-6NYFFN42.js.map

package/dist/{chunk-5QXPIYZC.js → chunk-7YPSWDOV.js}

@@ -1,7 +1,7 @@
 import {
   getRandomProvider,
   getTimeProvider
-} from "./chunk-OLPKHKVI.js";
+} from "./chunk-ZR5JWLC5.js";
 
 // src/utils/id-utils.ts
 import { randomUUID } from "node:crypto";
@@ -24,4 +24,4 @@ export {
   generateHyphenId,
   generateUUID
 };
-//# sourceMappingURL=chunk-5QXPIYZC.js.map
+//# sourceMappingURL=chunk-7YPSWDOV.js.map

package/dist/{chunk-VDPPDXLU.js → chunk-AWUTGAQN.js}

@@ -1,16 +1,19 @@
 import {
   ErrorCode,
   NexusError,
+  ValidationError,
   createLogger,
   err,
   getErrorMessage,
   getFallbackChainForCategory,
   getTimeProvider,
   isCliName,
+  isDurableCapacityText,
   isRateLimitText,
   observedArmDisplaySlot,
-  ok
-} from "./chunk-OLPKHKVI.js";
+  ok,
+  parseRetryAfterMs
+} from "./chunk-ZR5JWLC5.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -208,6 +211,14 @@ var CliCircuitBreaker = class {
     this.halfOpenRequests++;
     return ok(true);
   }
+  /**
+   * Releases a half-open probe request without recording success or failure (#6613).
+   */
+  releaseHalfOpenProbe() {
+    if (this.state === "half-open" && this.halfOpenRequests > 0) {
+      this.halfOpenRequests--;
+    }
+  }
   checkStateTransition() {
     if (this.state === "open") {
       const elapsed = getTimeProvider().now() - this.lastStateChange;
@@ -421,6 +432,39 @@ function mapModelErrorToCategory(error) {
   }
 }
 
+// src/cli-adapters/cli-error-helpers.ts
+var RETRYABLE_ERROR_CODES = /* @__PURE__ */ new Set([
+  "TIMEOUT",
+  "RATE_LIMITED",
+  "CONNECTION_ERROR"
+]);
+function isRetryableErrorCode(code) {
+  return RETRYABLE_ERROR_CODES.has(code);
+}
+var TIMEOUT_TEXT_PATTERNS = ["timeout", "timed out", "etimedout"];
+function isTimeoutText(text) {
+  const lower = text.toLowerCase();
+  return TIMEOUT_TEXT_PATTERNS.some((p) => lower.includes(p));
+}
+function createCliError(code, message, cli, cause) {
+  const retryable = isRetryableErrorCode(code) && !isDurableCapacityText(message);
+  const retryAfterMs = retryable ? parseRetryAfterMs(message) : void 0;
+  return {
+    code,
+    message,
+    cli,
+    retryable,
+    ...retryAfterMs !== void 0 && { retryAfterMs },
+    ...cause !== void 0 && { cause }
+  };
+}
+function createCallerInputCliError(message, cli) {
+  return createCliError("EXECUTION_ERROR", message, cli, new ValidationError(message));
+}
+function isCallerInputCliError(error) {
+  return error.cause instanceof ValidationError;
+}
+
 // src/cli-adapters/cli-circuit-breaker.ts
 var CATEGORY_TO_FALLBACK = {
   code_generation: "code",
@@ -554,23 +598,35 @@ var CliCircuitBreakerIntegration = class {
   }
   async executeWithBreaker(adapter, task) {
     const breaker = this.registry.getBreaker(adapter.name);
-    const result = await breaker.execute(async () => {
-      const execResult = await adapter.execute(task);
-      if (!execResult.ok) {
-        breaker.recordFailure(mapCliErrorToCategory(execResult.error.code));
-        const wrappedError = new Error(execResult.error.message);
-        wrappedError.cliError = execResult.error;
-        throw wrappedError;
+    const canRun = breaker.canExecute();
+    if (!canRun.ok) {
+      return canRun;
+    }
+    let execResult;
+    try {
+      execResult = await adapter.execute(task);
+    } catch (error) {
+      breaker.recordFailure("unknown");
+      return err(
+        new CircuitError(`CLI execution threw unexpectedly: ${getErrorMessage(error)}`, {
+          circuitErrorCode: CircuitErrorCode.EXECUTION_FAILED,
+          cliName: adapter.name,
+          armId: adapter.name,
+          circuitState: breaker.getState(),
+          cause: error instanceof Error ? error : new Error(String(error))
+        })
+      );
+    }
+    if (!execResult.ok) {
+      if (isCallerInputCliError(execResult.error)) {
+        breaker.releaseHalfOpenProbe();
+        return err(execResult.error);
       }
-      return execResult.value;
-    });
-    if (!result.ok) {
-      if (result.error.circuitErrorCode === "CIRCUIT_OPEN") return err(result.error);
-      const wrapped = result.error.cause;
-      if (wrapped?.cliError) return err(wrapped.cliError);
-      return err(result.error);
+      breaker.recordFailure(mapCliErrorToCategory(execResult.error.code));
+      return err(execResult.error);
     }
-    return ok(result.value);
+    breaker.recordSuccess();
+    return ok(execResult.value);
   }
   getFallbackClis(excludeCli, taskCategory) {
     const chain = taskCategory !== void 0 ? getFallbackChainForCategory(taskCategory, CATEGORY_TO_FALLBACK[taskCategory]) : this.config.fallbackChain;
@@ -587,9 +643,14 @@ export {
   DEFAULT_CIRCUIT_BREAKER_CONFIG,
   CliCircuitBreaker,
   mapModelErrorToCategory,
+  RETRYABLE_ERROR_CODES,
+  isTimeoutText,
+  createCliError,
+  createCallerInputCliError,
+  isCallerInputCliError,
   getDefaultCliCircuitBreakerRegistry,
   getCliCircuitBreakerSnapshot,
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-VDPPDXLU.js.map
+//# sourceMappingURL=chunk-AWUTGAQN.js.map

package/dist/chunk-AWUTGAQN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli-adapters/circuit-breaker-types.ts","../src/cli-adapters/circuit-breaker.ts","../src/cli-adapters/cli-error-helpers.ts","../src/cli-adapters/cli-circuit-breaker.ts"],"sourcesContent":["/**\n * nexus-agents/cli-adapters - Circuit Breaker Types\n *\n * Type definitions and error classes for the circuit breaker pattern.\n *\n * (Source: Issue #81 - Circuit breaker for CLI failures)\n */\n\nimport { NexusError, ErrorCode } from '../core/errors.js';\nimport { isRateLimitText } from '../adapters/rate-limit-detector.js';\nimport type { CliName, ObservedArmId } from './types.js';\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Circuit breaker states.\n */\nexport type CircuitState = 'closed' | 'open' | 'half-open';\n\n/**\n * Categories of failures for circuit breaker decisions.\n */\nexport type FailureCategory =\n  | 'timeout' // CLI didn't respond in time\n  | 'crash' // Process crashed or exited unexpectedly\n  | 'authentication' // OAuth/auth failure\n  | 'rate_limit' // Rate limit exceeded\n  | 'connection' // MCP connection failed\n  | 'unknown'; // Uncategorized failure\n\n/**\n * Configuration options for circuit breaker.\n */\nexport interface CircuitBreakerConfig {\n  /** Number of failures before opening circuit (default: 5) */\n  readonly failureThreshold: number;\n  /** Time in ms before attempting recovery (default: 30000) */\n  readonly resetTimeoutMs: number;\n  /** Successful calls needed in half-open to close (default: 2) */\n  readonly halfOpenSuccessThreshold: number;\n  /** Whether to count timeouts as failures (default: true) */\n  readonly countTimeoutsAsFailures: boolean;\n  /** Whether to count auth failures as failures (default: false) */\n  readonly countAuthFailuresAsFailures: boolean;\n  /** Whether to count rate limit errors as failures (default: false) */\n  readonly countRateLimitsAsFailures: boolean;\n  /** Maximum number of requests allowed in half-open state (default: 3) */\n  readonly halfOpenMaxRequests: number;\n}\n\n/**\n * Circuit breaker state snapshot.\n */\nexport interface CircuitBreakerSnapshot {\n  /** Current state */\n  readonly state: CircuitState;\n  /** Total failure count since last closed */\n  readonly failureCount: number;\n  /** Success count in half-open state */\n  readonly successCount: number;\n  /** Timestamp of last failure */\n  readonly lastFailureTime: number | null;\n  /** Timestamp of last state change */\n  readonly lastStateChange: number;\n  /** Requests in current half-open window */\n  readonly halfOpenRequests: number;\n  /** Configuration */\n  readonly config: CircuitBreakerConfig;\n}\n\n/**\n * Event emitted on circuit state changes.\n */\nexport interface CircuitStateChangeEvent {\n  /**\n   * Display slot of the guarded arm: identity for a CLI slot, the collapsed\n   * slot for an `api:*` arm (#4392). Always `observedArmDisplaySlot(armId)`;\n   * read {@link armId} to tell an endpoint arm from the slot it displays under.\n   */\n  readonly cliName: CliName;\n  /**\n   * Arm the breaker guards — a CLI slot, a built-in `api:*` arm or a\n   * registered endpoint arm (#4392). The breaker is the only producer of this\n   * event in tree; a listener that builds one by hand must supply it.\n   */\n  readonly armId: ObservedArmId;\n  /** Previous state */\n  readonly previousState: CircuitState;\n  /** New state */\n  readonly newState: CircuitState;\n  /** Timestamp of change */\n  readonly timestamp: number;\n  /** Failure count at time of change */\n  readonly failureCount: number;\n  /** Reason for state change */\n  readonly reason: string;\n}\n\n/**\n * Event listener for circuit state changes.\n */\nexport type CircuitStateChangeListener = (event: CircuitStateChangeEvent) => void;\n\n/**\n * Interface for circuit breaker operations.\n */\nexport interface ICircuitBreaker {\n  /**\n   * Executes a function with circuit breaker protection.\n   */\n  execute<T>(fn: () => Promise<T>): Promise<import('../core/index.js').Result<T, CircuitError>>;\n\n  /**\n   * Gets the current circuit state.\n   */\n  getState(): CircuitState;\n\n  /**\n   * Gets a full snapshot of circuit breaker state.\n   */\n  getSnapshot(): CircuitBreakerSnapshot;\n\n  /**\n   * Manually resets the circuit breaker to closed state.\n   */\n  reset(): void;\n\n  /**\n   * Records a failure manually (for external failure detection).\n   */\n  recordFailure(category: FailureCategory): void;\n\n  /**\n   * Records a success manually (for external success detection).\n   */\n  recordSuccess(): void;\n\n  /**\n   * Checks whether an execution can proceed under current circuit state.\n   */\n  canExecute(): import('../core/index.js').Result<true, CircuitError>;\n\n  /**\n   * Releases a half-open probe request without recording success or failure (#6613).\n   */\n  releaseHalfOpenProbe(): void;\n}\n\n// ============================================================================\n// Error Codes\n// ============================================================================\n\n/**\n * Error codes specific to circuit breaker.\n */\nexport const CircuitErrorCode = {\n  CIRCUIT_OPEN: 'CIRCUIT_OPEN',\n  CIRCUIT_HALF_OPEN_REJECTED: 'CIRCUIT_HALF_OPEN_REJECTED',\n  EXECUTION_FAILED: 'EXECUTION_FAILED',\n} as const;\n\nexport type CircuitErrorCode = (typeof CircuitErrorCode)[keyof typeof CircuitErrorCode];\n\n// ============================================================================\n// Error Class\n// ============================================================================\n\n/**\n * Error thrown when circuit breaker blocks a request.\n */\nexport class CircuitError extends NexusError {\n  readonly circuitErrorCode: CircuitErrorCode;\n  /** Display slot of {@link armId} — never the raw `api:*` id. */\n  readonly cliName: CliName;\n  /**\n   * Arm whose circuit blocked the request — a CLI slot, a built-in `api:*` arm\n   * or a registered endpoint arm (#4392). Defaults to `cliName` when the\n   * constructor is called with the pre-#4392 option shape.\n   */\n  readonly armId: ObservedArmId;\n  readonly circuitState: CircuitState;\n  readonly failureCategory?: FailureCategory;\n\n  constructor(\n    message: string,\n    options: {\n      circuitErrorCode: CircuitErrorCode;\n      /** Display slot; the breaker passes `observedArmDisplaySlot(armId)`. */\n      cliName: CliName;\n      /** The guarded arm (#4392). Optional so the pre-#4392 option shape still compiles; defaults to `cliName`. */\n      armId?: ObservedArmId;\n      circuitState: CircuitState;\n      failureCategory?: FailureCategory;\n      cause?: Error;\n    }\n  ) {\n    const armId: ObservedArmId = options.armId ?? options.cliName;\n    const baseOptions: { code: ErrorCode; cause?: Error; context: Record<string, unknown> } = {\n      code: ErrorCode.INTERNAL_ERROR,\n      context: {\n        circuitErrorCode: options.circuitErrorCode,\n        cliName: options.cliName,\n        armId,\n        circuitState: options.circuitState,\n      },\n    };\n    if (options.cause !== undefined) {\n      baseOptions.cause = options.cause;\n    }\n    if (options.failureCategory !== undefined) {\n      baseOptions.context['failureCategory'] = options.failureCategory;\n    }\n    super(message, baseOptions);\n    this.name = 'CircuitError';\n    this.circuitErrorCode = options.circuitErrorCode;\n    this.cliName = options.cliName;\n    this.armId = armId;\n    this.circuitState = options.circuitState;\n    if (options.failureCategory !== undefined) {\n      this.failureCategory = options.failureCategory;\n    }\n  }\n}\n\n// ============================================================================\n// Default Configuration\n// ============================================================================\n\n/**\n * Default circuit breaker configuration.\n */\nexport const DEFAULT_CIRCUIT_BREAKER_CONFIG: CircuitBreakerConfig = {\n  failureThreshold: 5,\n  resetTimeoutMs: 30_000,\n  halfOpenSuccessThreshold: 2,\n  countTimeoutsAsFailures: true,\n  countAuthFailuresAsFailures: false,\n  countRateLimitsAsFailures: true,\n  halfOpenMaxRequests: 3,\n} as const;\n\n// ============================================================================\n// Error Categorization Patterns\n// ============================================================================\n\n/**\n * Pattern matchers for categorizing errors.\n */\nconst TIMEOUT_PATTERNS = ['timeout', 'timed out'];\nconst AUTH_PATTERNS = ['auth', 'unauthorized', 'forbidden', 'oauth'];\nconst CONNECTION_PATTERNS = [\n  'connection',\n  'econnrefused',\n  'enotfound',\n  'mcp',\n  'eaddrinuse',\n  'address already in use',\n];\nconst CRASH_PATTERNS = ['crash', 'exited', 'killed', 'sigterm', 'sigkill'];\n\n/**\n * Checks if text contains any of the patterns.\n */\nfunction matchesPatterns(text: string, patterns: string[]): boolean {\n  return patterns.some((pattern) => text.includes(pattern));\n}\n\n/**\n * Categorizes an error into a failure category.\n */\nexport function categorizeError(error: unknown): FailureCategory {\n  if (!(error instanceof Error)) {\n    return 'unknown';\n  }\n\n  const message = error.message.toLowerCase();\n  const name = error.name.toLowerCase();\n  const combined = `${message} ${name}`;\n\n  if (matchesPatterns(combined, TIMEOUT_PATTERNS)) return 'timeout';\n  if (matchesPatterns(combined, AUTH_PATTERNS)) return 'authentication';\n  if (isRateLimitText(combined)) return 'rate_limit';\n  if (matchesPatterns(combined, CONNECTION_PATTERNS)) return 'connection';\n  if (matchesPatterns(combined, CRASH_PATTERNS)) return 'crash';\n\n  return 'unknown';\n}\n","/**\n * nexus-agents/cli-adapters - Circuit Breaker Implementation\n *\n * Implements the circuit breaker pattern to handle CLI failures gracefully\n * and prevent cascade failures in the multi-CLI mesh.\n *\n * (Source: Issue #81 - Circuit breaker for CLI failures)\n * (Source: Martin Fowler's Circuit Breaker pattern)\n */\n\nimport type { Result } from '../core/index.js';\nimport { getErrorMessage, err, ok, getTimeProvider } from '../core/index.js';\n\nimport { ErrorCode, type ModelError } from '../core/errors.js';\n\nimport type { CliName, ObservedArmId, CliErrorCode } from './types.js';\nimport { isCliName, observedArmDisplaySlot } from './types.js';\nimport {\n  CircuitError,\n  CircuitErrorCode,\n  DEFAULT_CIRCUIT_BREAKER_CONFIG,\n  categorizeError,\n  type CircuitState,\n  type FailureCategory,\n  type CircuitBreakerConfig,\n  type CircuitBreakerSnapshot,\n  type CircuitStateChangeEvent,\n  type CircuitStateChangeListener,\n  type ICircuitBreaker,\n} from './circuit-breaker-types.js';\n\n// Re-export all types for convenience\nexport {\n  CircuitError,\n  CircuitErrorCode,\n  DEFAULT_CIRCUIT_BREAKER_CONFIG,\n  categorizeError,\n  type CircuitState,\n  type FailureCategory,\n  type CircuitBreakerConfig,\n  type CircuitBreakerSnapshot,\n  type CircuitStateChangeEvent,\n  type CircuitStateChangeListener,\n  type ICircuitBreaker,\n} from './circuit-breaker-types.js';\n\n// ============================================================================\n// Circuit Breaker Implementation\n// ============================================================================\n\n/**\n * Circuit breaker implementation for CLI adapters.\n *\n * Provides protection against cascading failures by:\n * 1. Tracking failure counts\n * 2. Opening circuit when threshold exceeded\n * 3. Allowing gradual recovery through half-open state\n */\nexport class CliCircuitBreaker implements ICircuitBreaker {\n  private state: CircuitState = 'closed';\n  private failureCount = 0;\n  private successCount = 0;\n  private lastFailureTime: number | null = null;\n  private lastStateChange: number;\n  private halfOpenRequests = 0;\n  private readonly listeners: Set<CircuitStateChangeListener> = new Set();\n\n  /** Display slot of {@link armId}; what `cliName` fields on events and errors carry. */\n  private readonly cliName: CliName;\n\n  constructor(\n    private readonly armId: ObservedArmId,\n    private readonly config: CircuitBreakerConfig = DEFAULT_CIRCUIT_BREAKER_CONFIG\n  ) {\n    this.cliName = observedArmDisplaySlot(armId);\n    this.lastStateChange = getTimeProvider().now();\n  }\n\n  /**\n   * Executes a function with circuit breaker protection.\n   */\n  async execute<T>(fn: () => Promise<T>): Promise<Result<T, CircuitError>> {\n    const canExecute = this.canExecute();\n    if (!canExecute.ok) {\n      return canExecute;\n    }\n\n    try {\n      const result = await fn();\n      this.onSuccess();\n      return ok(result);\n    } catch (error) {\n      const category = categorizeError(error);\n      if (this.shouldCountFailure(category)) {\n        this.onFailure(category);\n      }\n      return err(this.createExecutionError(error, category));\n    }\n  }\n\n  getState(): CircuitState {\n    this.checkStateTransition();\n    return this.state;\n  }\n\n  getSnapshot(): CircuitBreakerSnapshot {\n    this.checkStateTransition();\n    return {\n      state: this.state,\n      failureCount: this.failureCount,\n      successCount: this.successCount,\n      lastFailureTime: this.lastFailureTime,\n      lastStateChange: this.lastStateChange,\n      halfOpenRequests: this.halfOpenRequests,\n      config: this.config,\n    };\n  }\n\n  reset(): void {\n    const previousState = this.state;\n    this.state = 'closed';\n    this.failureCount = 0;\n    this.successCount = 0;\n    this.lastFailureTime = null;\n    this.halfOpenRequests = 0;\n    this.lastStateChange = getTimeProvider().now();\n\n    if (previousState !== 'closed') {\n      this.emitStateChange(previousState, 'closed', 'Manual reset');\n    }\n  }\n\n  recordFailure(category: FailureCategory): void {\n    if (this.shouldCountFailure(category)) {\n      this.onFailure(category);\n    }\n  }\n\n  recordSuccess(): void {\n    this.onSuccess();\n  }\n\n  addStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.listeners.add(listener);\n  }\n\n  removeStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.listeners.delete(listener);\n  }\n\n  // -------------------------------------------------------------------------\n  // Private Methods\n  // -------------------------------------------------------------------------\n\n  canExecute(): Result<true, CircuitError> {\n    this.checkStateTransition();\n\n    if (this.state === 'closed') {\n      return ok(true);\n    }\n\n    if (this.state === 'open') {\n      return err(\n        new CircuitError(`Circuit is open for CLI: ${this.armId}`, {\n          circuitErrorCode: CircuitErrorCode.CIRCUIT_OPEN,\n          cliName: this.cliName,\n          armId: this.armId,\n          circuitState: this.state,\n        })\n      );\n    }\n\n    // half-open state\n    if (this.halfOpenRequests >= this.config.halfOpenMaxRequests) {\n      return err(\n        new CircuitError(`Circuit half-open request limit reached for CLI: ${this.armId}`, {\n          circuitErrorCode: CircuitErrorCode.CIRCUIT_HALF_OPEN_REJECTED,\n          cliName: this.cliName,\n          armId: this.armId,\n          circuitState: this.state,\n        })\n      );\n    }\n    this.halfOpenRequests++;\n    return ok(true);\n  }\n\n  /**\n   * Releases a half-open probe request without recording success or failure (#6613).\n   */\n  releaseHalfOpenProbe(): void {\n    if (this.state === 'half-open' && this.halfOpenRequests > 0) {\n      this.halfOpenRequests--;\n    }\n  }\n\n  private checkStateTransition(): void {\n    if (this.state === 'open') {\n      // #5011: measured from the TRANSITION, not from the last failure. Keyed\n      // on `lastFailureTime` the window restarted on every failure recorded\n      // while open — and an open circuit does not shed load on the default\n      // paths (`base-adapter` and `resilient-adapter` never consult\n      // `canExecute`), so traffic kept arriving, kept failing occasionally, and\n      // kept pushing the half-open probe another 30s out. A CLI serving 95% of\n      // requests correctly stayed evicted from every voter panel until a manual\n      // `reset()`. Panel choice: fix the timer, leave load-shedding alone\n      // (7-voter panel, Option A, 4 of 5 approvers, audit record #79).\n      const elapsed = getTimeProvider().now() - this.lastStateChange;\n      if (elapsed >= this.config.resetTimeoutMs) {\n        this.transitionTo('half-open', 'Reset timeout elapsed');\n      }\n    }\n  }\n\n  private onSuccess(): void {\n    if (this.state === 'closed') {\n      this.failureCount = 0;\n    } else if (this.state === 'half-open') {\n      this.successCount++;\n      if (this.successCount >= this.config.halfOpenSuccessThreshold) {\n        const reason = `${String(this.successCount)} consecutive successes in half-open state`;\n        this.transitionTo('closed', reason);\n      }\n    }\n  }\n\n  private onFailure(category: FailureCategory): void {\n    // #5011: a failure recorded while the circuit is already open carries no\n    // information — the circuit is open, that is the verdict — and updating\n    // `lastFailureTime` here is what delayed recovery.\n    //\n    // #5034: this line is the LOAD-BEARING half, and the tests now say so:\n    // dropping it alone fails two assertions. The `lastStateChange` change in\n    // `checkStateTransition` is genuinely redundant given this return —\n    // reverting THAT alone fails nothing, because with `lastFailureTime`\n    // frozen the two fields are set microseconds apart at the open transition\n    // and never diverge. It is kept because measuring recovery from the\n    // transition is what the window means, not because any behaviour\n    // distinguishes it. Saying which half is pinned, and admitting the other\n    // cannot be, beats a mutation table that implies two clean kills.\n    //\n    // `failureCount` stays put too: it drives the closed-state threshold and\n    // is reset on the transition back to closed.\n    if (this.state === 'open') return;\n\n    this.failureCount++;\n    this.lastFailureTime = getTimeProvider().now();\n\n    if (this.state === 'closed' && this.failureCount >= this.config.failureThreshold) {\n      const reason = `Failure threshold (${String(this.config.failureThreshold)}) exceeded`;\n      this.transitionTo('open', reason);\n    } else if (this.state === 'half-open') {\n      this.transitionTo('open', `Failure during half-open recovery (category: ${category})`);\n    }\n  }\n\n  private transitionTo(newState: CircuitState, reason: string): void {\n    const previousState = this.state;\n    this.state = newState;\n    this.lastStateChange = getTimeProvider().now();\n\n    if (newState === 'closed') {\n      this.failureCount = 0;\n      this.successCount = 0;\n      this.halfOpenRequests = 0;\n    } else if (newState === 'half-open') {\n      // #3026 finding 5: pre-fix `failureCount` carried over across\n      // recovery cycles. transitionTo('open',…) only zeroes counts on\n      // 'closed', so a half-open→open→half-open flaky pattern grew\n      // `failureCount` monotonically across cycles. The count served\n      // its threshold purpose when we opened the circuit; resetting on\n      // 'half-open' restores the documented per-cycle semantic that\n      // operator dashboards / alerts read from `getSnapshot()`.\n      this.failureCount = 0;\n      this.successCount = 0;\n      this.halfOpenRequests = 0;\n    }\n\n    this.emitStateChange(previousState, newState, reason);\n  }\n\n  private emitStateChange(\n    previousState: CircuitState,\n    newState: CircuitState,\n    reason: string\n  ): void {\n    const event: CircuitStateChangeEvent = {\n      cliName: this.cliName,\n      armId: this.armId,\n      previousState,\n      newState,\n      timestamp: this.lastStateChange,\n      failureCount: this.failureCount,\n      reason,\n    };\n\n    for (const listener of this.listeners) {\n      try {\n        listener(event);\n      } catch {\n        // Ignore listener errors to prevent cascade\n      }\n    }\n  }\n\n  private shouldCountFailure(category: FailureCategory): boolean {\n    if (category === 'timeout') return this.config.countTimeoutsAsFailures;\n    if (category === 'authentication') return this.config.countAuthFailuresAsFailures;\n    if (category === 'rate_limit') return this.config.countRateLimitsAsFailures;\n    return true;\n  }\n\n  private createExecutionError(error: unknown, category: FailureCategory): CircuitError {\n    const message = getErrorMessage(error);\n    const cause = error instanceof Error ? error : new Error(String(error));\n    return new CircuitError(`CLI execution failed: ${message}`, {\n      circuitErrorCode: CircuitErrorCode.EXECUTION_FAILED,\n      cliName: this.cliName,\n      armId: this.armId,\n      circuitState: this.state,\n      failureCategory: category,\n      cause,\n    });\n  }\n}\n\n// ============================================================================\n// Registry\n// ============================================================================\n\n/**\n * Registry for managing per-arm circuit breakers.\n *\n * Keyed by {@link ObservedArmId} since #4392 — a published `RoutingArmId` or a\n * registered `EndpointArmId`: a CLI slot and an `api:*` arm are distinct keys,\n * so an endpoint opening never speaks for the CLI slot it displays under. The `*Arm*` methods are the source of truth over that map;\n * the older `CliName`-typed methods keep their signatures and are FILTERED\n * VIEWS of the same map, restricted to the four CLI slots — an `api:*` arm\n * never appears in `getHealthyClis()` / `getUnhealthyClis()` /\n * `getAllSnapshots()`, only in their `*Arms` siblings (#6290 panel; the\n * narrow methods are removed in 9.0, #6291).\n */\nexport class CircuitBreakerRegistry {\n  private readonly breakers: Map<ObservedArmId, CliCircuitBreaker> = new Map();\n  private readonly globalListeners: Set<CircuitStateChangeListener> = new Set();\n\n  constructor(private readonly defaultConfig: Partial<CircuitBreakerConfig> = {}) {}\n\n  /** Breaker for any routing arm, created on first request (#4392). */\n  getArmBreaker(armId: ObservedArmId, config?: Partial<CircuitBreakerConfig>): CliCircuitBreaker {\n    let breaker = this.breakers.get(armId);\n\n    if (!breaker) {\n      const mergedConfig: CircuitBreakerConfig = {\n        ...DEFAULT_CIRCUIT_BREAKER_CONFIG,\n        ...this.defaultConfig,\n        ...config,\n      };\n      breaker = new CliCircuitBreaker(armId, mergedConfig);\n\n      for (const listener of this.globalListeners) {\n        breaker.addStateChangeListener(listener);\n      }\n\n      this.breakers.set(armId, breaker);\n    }\n\n    return breaker;\n  }\n\n  /** CLI-slot view of {@link getArmBreaker}: the same breaker, same map. */\n  getBreaker(cliName: CliName, config?: Partial<CircuitBreakerConfig>): CliCircuitBreaker {\n    return this.getArmBreaker(cliName, config);\n  }\n\n  isArmOpen(armId: ObservedArmId): boolean {\n    return this.breakers.get(armId)?.getState() === 'open';\n  }\n\n  /** CLI-slot view of {@link isArmOpen}. */\n  isOpen(cliName: CliName): boolean {\n    return this.isArmOpen(cliName);\n  }\n\n  /** Snapshot of every arm the registry holds, CLI slots and `api:*` arms alike. */\n  getAllArmSnapshots(): Map<ObservedArmId, CircuitBreakerSnapshot> {\n    const snapshots = new Map<ObservedArmId, CircuitBreakerSnapshot>();\n    for (const [name, breaker] of this.breakers) {\n      snapshots.set(name, breaker.getSnapshot());\n    }\n    return snapshots;\n  }\n\n  /** CLI-slot view of {@link getAllArmSnapshots}: `api:*` arms are filtered out. */\n  getAllSnapshots(): Map<CliName, CircuitBreakerSnapshot> {\n    const snapshots = new Map<CliName, CircuitBreakerSnapshot>();\n    for (const [name, snapshot] of this.getAllArmSnapshots()) {\n      if (isCliName(name)) snapshots.set(name, snapshot);\n    }\n    return snapshots;\n  }\n\n  resetAll(): void {\n    for (const breaker of this.breakers.values()) {\n      breaker.reset();\n    }\n  }\n\n  resetArm(armId: ObservedArmId): void {\n    this.breakers.get(armId)?.reset();\n  }\n\n  /** CLI-slot view of {@link resetArm}. */\n  reset(cliName: CliName): void {\n    this.resetArm(cliName);\n  }\n\n  addGlobalStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.globalListeners.add(listener);\n    for (const breaker of this.breakers.values()) {\n      breaker.addStateChangeListener(listener);\n    }\n  }\n\n  removeGlobalStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.globalListeners.delete(listener);\n    for (const breaker of this.breakers.values()) {\n      breaker.removeStateChangeListener(listener);\n    }\n  }\n\n  /** Every arm whose circuit is closed. Empty registry: `[]` — nothing is known healthy. */\n  getHealthyArms(): ObservedArmId[] {\n    const healthy: ObservedArmId[] = [];\n    for (const [name, breaker] of this.breakers) {\n      if (breaker.getState() === 'closed') {\n        healthy.push(name);\n      }\n    }\n    return healthy;\n  }\n\n  /** CLI-slot view of {@link getHealthyArms}: `api:*` arms are filtered out. */\n  getHealthyClis(): CliName[] {\n    return this.getHealthyArms().filter(isCliName);\n  }\n\n  /** Every arm whose circuit is open or half-open. Empty registry: `[]`. */\n  getUnhealthyArms(): ObservedArmId[] {\n    const unhealthy: ObservedArmId[] = [];\n    for (const [name, breaker] of this.breakers) {\n      const state = breaker.getState();\n      if (state === 'open' || state === 'half-open') {\n        unhealthy.push(name);\n      }\n    }\n    return unhealthy;\n  }\n\n  /** CLI-slot view of {@link getUnhealthyArms}: `api:*` arms are filtered out. */\n  getUnhealthyClis(): CliName[] {\n    return this.getUnhealthyArms().filter(isCliName);\n  }\n}\n\n// ============================================================================\n// Utility Functions\n// ============================================================================\n\n/**\n * Maps CLI error codes to failure categories.\n */\nexport function mapCliErrorToCategory(errorCode: CliErrorCode): FailureCategory {\n  const mapping: Record<string, FailureCategory> = {\n    TIMEOUT: 'timeout',\n    NOT_AUTHENTICATED: 'authentication',\n    RATE_LIMITED: 'rate_limit',\n    CONNECTION_ERROR: 'connection',\n  };\n  return mapping[errorCode] ?? 'unknown';\n}\n\n/**\n * Maps a direct-API {@link ModelError} to a circuit-breaker failure category.\n *\n * Mirrors {@link mapCliErrorToCategory} for the IModelAdapter layer (#3423):\n * API failures must drive the same breaker degradation/failover learning that\n * CLI subprocess failures already get. Maps by the structured `error.code`\n * first, then falls back to message-pattern categorization via\n * {@link categorizeError} (which returns `'unknown'` if nothing matches).\n *\n * The fallback is what turns a generic `MODEL_ERROR` whose message reads\n * \"connection refused\" into a `connection` category instead of `unknown`.\n */\nexport function mapModelErrorToCategory(error: ModelError): FailureCategory {\n  switch (error.code) {\n    case ErrorCode.MODEL_TIMEOUT:\n    case ErrorCode.TIMEOUT_ERROR:\n      return 'timeout';\n    case ErrorCode.UNAUTHORIZED:\n      return 'authentication';\n    case ErrorCode.MODEL_RATE_LIMITED:\n    case ErrorCode.RATE_LIMIT_ERROR:\n      return 'rate_limit';\n    case ErrorCode.MODEL_UNAVAILABLE:\n    case ErrorCode.MODEL_NOT_FOUND:\n      // Intentional reuse of `connection`: there is no dedicated \"endpoint gone /\n      // model retired\" category, and `connection` is a counted, failover-driving\n      // category — the right behaviour for an unavailable/missing model.\n      return 'connection';\n    default:\n      // MODEL_ERROR and any other code: fall back to message-pattern matching.\n      return categorizeError(error);\n  }\n}\n\n// `createCircuitBreakerRegistryWithMetrics` and the\n// `Capacity Monitor Integration` section\n// (`integrateCapacityMonitorWithCircuitBreaker` + the\n// `CapacityMonitorIntegrationConfig` interface and its default config)\n// were removed in #3018 — both had only test-file callers in the tree.\n// The `CircuitBreakerRegistry` above is what production adapters use;\n// if metrics-logging integration comes back as a real requirement,\n// reintroduce it alongside the consumer code in the same PR\n// (activation-or-delete YAGNI — same pattern as #2937–#2940).\n//\n// The capacity-monitor half of that sentence is gone: the provider-header\n// monitor it referred to was removed in #4532 after 7 months unwired, so\n// there is nothing to \"come back\". Header parsing is now a BUILD.\n","/**\n * Canonical helpers for constructing CliError values with the correct\n * `retryable` flag.\n *\n * Consolidates three previously-duplicated copies:\n * - `cli-retry-loop.ts` (as a module-local set + `isRetryableError`)\n * - `adapters/codex-adapter-helpers.ts` (as `createCodexError`)\n * - `adapters/codex-mcp-adapter-helpers.ts` (as `createCliError`)\n * - `testing/adapters/mock-adapter-helpers.ts` (as `createCliError`)\n *\n * Every call path that classifies retryable CLI errors should now flow\n * through here. Adding a new retryable code is a one-line change in one\n * place instead of four.\n *\n * (Issue #2181 — adapter harness consolidation)\n *\n * @module cli-adapters/cli-error-helpers\n */\n\nimport { parseRetryAfterMs, isDurableCapacityText } from '../adapters/rate-limit-detector.js';\nimport type { CliError, CliErrorCode, CliName } from './types.js';\nimport { ValidationError } from '../core/errors.js';\n\n/** Error codes the retry machinery treats as transient. */\nexport const RETRYABLE_ERROR_CODES: ReadonlySet<CliErrorCode> = new Set<CliErrorCode>([\n  'TIMEOUT',\n  'RATE_LIMITED',\n  'CONNECTION_ERROR',\n]);\n\n/** Whether a given CLI error code should be retried. */\nexport function isRetryableErrorCode(code: CliErrorCode): boolean {\n  return RETRYABLE_ERROR_CODES.has(code);\n}\n\n/**\n * Text patterns that classify a CLI failure as `TIMEOUT`. One list, shared by\n * the subprocess stderr classifier and the voter fallover disclosure (#6115)\n * so the reason a seat fell over is the class the adapter layer assigned.\n */\nconst TIMEOUT_TEXT_PATTERNS = ['timeout', 'timed out', 'etimedout'] as const;\n\n/** Whether an error message names a timeout (the `TIMEOUT` code's text signature). */\nexport function isTimeoutText(text: string): boolean {\n  const lower = text.toLowerCase();\n  return TIMEOUT_TEXT_PATTERNS.some((p) => lower.includes(p));\n}\n\n/**\n * Constructs a CliError with `retryable` auto-derived from the code.\n * Every adapter that needs to surface a CliError should prefer this\n * helper (or the `createError` method on `BaseCliAdapter`, which calls\n * into the same logic) rather than building the shape inline.\n *\n * A durable capacity cap is `retryable: false` even under a retryable code\n * (#6120): it arrives as RATE_LIMITED, but a spend ceiling does not clear on\n * a retry (#5359), and a flag that says otherwise sends every retry layer\n * back at the same dead model.\n */\nexport function createCliError(\n  code: CliErrorCode,\n  message: string,\n  cli: CliName,\n  cause?: Error\n): CliError {\n  const retryable = isRetryableErrorCode(code) && !isDurableCapacityText(message);\n  // #4373: honor a provider-stated retry window here too, so the shared helper\n  // and BaseCliAdapter.createError produce the same shape — otherwise which\n  // construction path an adapter happened to use would decide whether the hint\n  // survived.\n  const retryAfterMs = retryable ? parseRetryAfterMs(message) : undefined;\n  return {\n    code,\n    message,\n    cli,\n    retryable,\n    ...(retryAfterMs !== undefined && { retryAfterMs }),\n    ...(cause !== undefined && { cause }),\n  };\n}\n\n/**\n * A CliError caused by the caller's input — e.g. a requested model the CLI\n * cannot resolve or has in cooldown (#6599) — rather than by the CLI's health.\n * Marked by a {@link ValidationError} cause so every layer can tell it apart:\n * the model bridge maps it to `ErrorCode.INVALID_INPUT`, and circuit breakers\n * must not count it, or one bad model preference opens the breaker for every\n * caller of that CLI. Non-retryable: the same input fails the same way.\n */\nexport function createCallerInputCliError(message: string, cli: CliName): CliError {\n  return createCliError('EXECUTION_ERROR', message, cli, new ValidationError(message));\n}\n\n/** Whether `error` was built by {@link createCallerInputCliError}. */\nexport function isCallerInputCliError(error: CliError): boolean {\n  return error.cause instanceof ValidationError;\n}\n","/**\n * nexus-agents/cli-adapters - CLI Circuit Breaker Integration\n *\n * Wraps CLI adapter calls with circuit breaker pattern for resilient\n * multi-CLI execution with automatic fallback on failures.\n *\n * (Source: Issue #359 - Integrate circuit breaker with CLI adapters)\n */\n\nimport type { Result, ILogger } from '../core/index.js';\nimport { ok, err, createLogger, getTimeProvider, getErrorMessage } from '../core/index.js';\nimport type { TaskCategory } from '../config/task-specialization-types.js';\nimport type { FallbackTaskType } from './task-classifier.js';\nimport { getFallbackChainForCategory } from './fallback-chains.js';\nimport type { ICliAdapter, CliName, CliTask, CliResponse, CliError } from './types.js';\nimport {\n  CircuitBreakerRegistry,\n  CircuitError,\n  CircuitErrorCode,\n  mapCliErrorToCategory,\n  type CircuitBreakerConfig,\n  type CircuitBreakerSnapshot,\n  type CircuitStateChangeListener,\n} from './circuit-breaker.js';\nimport { isCallerInputCliError } from './cli-error-helpers.js';\n\n/** Maps canonical TaskCategory (10 types) to FallbackTaskType (5 types). */\nconst CATEGORY_TO_FALLBACK: Record<TaskCategory, FallbackTaskType> = {\n  code_generation: 'code',\n  code_review: 'code',\n  testing: 'code',\n  research: 'research',\n  exploration: 'research',\n  documentation: 'documentation',\n  architecture: 'analysis',\n  security_review: 'analysis',\n  planning: 'analysis',\n  devops: 'general',\n};\n\n/** Configuration for CLI circuit breaker integration. */\nexport interface CliCircuitBreakerConfig {\n  readonly perCliConfig?: Partial<Record<CliName, Partial<CircuitBreakerConfig>>>;\n  readonly fallbackChain?: ReadonlyArray<CliName>;\n  readonly enableFallback?: boolean;\n  readonly maxFallbackAttempts?: number;\n}\n\n/** Result of a circuit-protected execution with fallback info. */\nexport interface CircuitProtectedResult {\n  readonly response: CliResponse;\n  readonly executedBy: CliName;\n  readonly usedFallback: boolean;\n  readonly fallbackAttempts?: ReadonlyArray<CliName>;\n}\n\n/** Health status for all CLIs with circuit state. */\nexport interface CliCircuitHealthStatus {\n  readonly clis: ReadonlyArray<{\n    readonly name: CliName;\n    readonly healthy: boolean;\n    readonly circuitState: 'closed' | 'open' | 'half-open';\n    readonly failureCount: number;\n    readonly lastFailureTime: number | null;\n  }>;\n  readonly systemHealthy: boolean;\n  readonly healthyCount: number;\n  readonly timestamp: number;\n}\n\n/** Interface for CLI circuit breaker integration. */\nexport interface ICliCircuitBreakerIntegration {\n  execute(\n    adapter: ICliAdapter,\n    task: CliTask,\n    taskCategory?: TaskCategory\n  ): Promise<Result<CircuitProtectedResult, CircuitError | CliError>>;\n  getHealthStatus(): CliCircuitHealthStatus;\n  getCircuitSnapshots(): Map<CliName, CircuitBreakerSnapshot>;\n  resetCircuit(cliName: CliName): void;\n  resetAllCircuits(): void;\n  addStateChangeListener(listener: CircuitStateChangeListener): void;\n}\n\nconst DEFAULT_FALLBACK_CHAIN: ReadonlyArray<CliName> = ['claude', 'gemini', 'codex', 'opencode'];\nconst DEFAULT_CONFIG: Required<CliCircuitBreakerConfig> = {\n  perCliConfig: {},\n  fallbackChain: DEFAULT_FALLBACK_CHAIN,\n  enableFallback: true,\n  maxFallbackAttempts: 2,\n};\nconst defaultCliCircuitBreakerRegistry = new CircuitBreakerRegistry();\n\n// #4330: the shared registry now gates voter-panel availability, so a CLI can\n// vanish from a panel roster because its circuit opened. Log every transition —\n// otherwise the next person debugging a \"missing voter\" has no trail, and a\n// misclassified transient error silently costs the panel its diversity.\nconst registryLogger = createLogger({ component: 'cli-circuit-breaker' });\ndefaultCliCircuitBreakerRegistry.addGlobalStateChangeListener((event) => {\n  registryLogger.warn('CLI circuit state changed', {\n    cli: event.cliName,\n    previousState: event.previousState,\n    newState: event.newState,\n    failureCount: event.failureCount,\n    reason: event.reason,\n  });\n});\n\n/** Returns the shared CLI circuit-breaker registry used by default integrations. */\nexport function getDefaultCliCircuitBreakerRegistry(): CircuitBreakerRegistry {\n  return defaultCliCircuitBreakerRegistry;\n}\n\n/**\n * Reads the current snapshot for a CLI without creating a new breaker.\n *\n * `undefined` means no circuit state is known yet, so callers should fail open.\n */\nexport function getCliCircuitBreakerSnapshot(cliName: CliName): CircuitBreakerSnapshot | undefined {\n  return defaultCliCircuitBreakerRegistry.getAllSnapshots().get(cliName);\n}\n\n/**\n * Integrates circuit breaker pattern with CLI adapters.\n * Provides automatic fallback when a CLI's circuit opens.\n */\nexport class CliCircuitBreakerIntegration implements ICliCircuitBreakerIntegration {\n  private readonly registry: CircuitBreakerRegistry;\n  private readonly adapters: Map<CliName, ICliAdapter> = new Map();\n  private readonly config: Required<CliCircuitBreakerConfig>;\n  private readonly logger: ILogger;\n\n  constructor(\n    adapters: ReadonlyArray<ICliAdapter>,\n    config?: CliCircuitBreakerConfig,\n    logger?: ILogger\n  ) {\n    this.config = { ...DEFAULT_CONFIG, ...config };\n    this.logger = logger ?? createLogger({ component: 'cli-circuit-breaker-integration' });\n    this.registry =\n      config === undefined ? defaultCliCircuitBreakerRegistry : new CircuitBreakerRegistry();\n    for (const adapter of adapters) {\n      this.adapters.set(adapter.name, adapter);\n      this.registry.getBreaker(adapter.name, this.config.perCliConfig[adapter.name]);\n    }\n  }\n\n  async execute(\n    adapter: ICliAdapter,\n    task: CliTask,\n    taskCategory?: TaskCategory\n  ): Promise<Result<CircuitProtectedResult, CircuitError | CliError>> {\n    const primaryCli = adapter.name;\n    const fallbackAttempts: CliName[] = [];\n    let lastError: CircuitError | CliError | undefined;\n\n    const primaryResult = await this.executeWithBreaker(adapter, task);\n    if (primaryResult.ok) {\n      return ok({ response: primaryResult.value, executedBy: primaryCli, usedFallback: false });\n    }\n    lastError = primaryResult.error;\n\n    if (!this.config.enableFallback || !(lastError instanceof CircuitError)) {\n      return err(lastError);\n    }\n\n    for (const cli of this.getFallbackClis(primaryCli, taskCategory).slice(\n      0,\n      this.config.maxFallbackAttempts\n    )) {\n      const fallbackAdapter = this.adapters.get(cli);\n      if (!fallbackAdapter) continue;\n      fallbackAttempts.push(cli);\n      this.logger.info('Attempting fallback', { from: primaryCli, to: cli });\n      const result = await this.executeWithBreaker(fallbackAdapter, task);\n      if (result.ok) {\n        return ok({\n          response: result.value,\n          executedBy: cli,\n          usedFallback: true,\n          fallbackAttempts,\n        });\n      }\n      lastError = result.error;\n    }\n\n    this.logger.warn('All fallback attempts failed', { primaryCli, fallbackAttempts });\n    return err(lastError);\n  }\n\n  getHealthStatus(): CliCircuitHealthStatus {\n    const snapshots = this.registry.getAllSnapshots();\n    const clis: CliCircuitHealthStatus['clis'][number][] = [];\n    let healthyCount = 0;\n    for (const name of this.adapters.keys()) {\n      const snapshot = snapshots.get(name);\n      if (!snapshot) continue;\n      const healthy = snapshot.state === 'closed';\n      if (healthy) healthyCount++;\n      clis.push({\n        name,\n        healthy,\n        circuitState: snapshot.state,\n        failureCount: snapshot.failureCount,\n        lastFailureTime: snapshot.lastFailureTime,\n      });\n    }\n    return {\n      clis,\n      systemHealthy: healthyCount > 0,\n      healthyCount,\n      timestamp: getTimeProvider().now(),\n    };\n  }\n\n  getCircuitSnapshots(): Map<CliName, CircuitBreakerSnapshot> {\n    const allSnapshots = this.registry.getAllSnapshots();\n    const snapshots = new Map<CliName, CircuitBreakerSnapshot>();\n    for (const name of this.adapters.keys()) {\n      const snapshot = allSnapshots.get(name);\n      if (snapshot !== undefined) {\n        snapshots.set(name, snapshot);\n      }\n    }\n    return snapshots;\n  }\n\n  resetCircuit(cliName: CliName): void {\n    this.registry.reset(cliName);\n    this.logger.info('Circuit reset', { cliName });\n  }\n\n  resetAllCircuits(): void {\n    this.registry.resetAll();\n    this.logger.info('All circuits reset');\n  }\n\n  addStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.registry.addGlobalStateChangeListener(listener);\n  }\n\n  private async executeWithBreaker(\n    adapter: ICliAdapter,\n    task: CliTask\n  ): Promise<Result<CliResponse, CircuitError | CliError>> {\n    const breaker = this.registry.getBreaker(adapter.name);\n    const canRun = breaker.canExecute();\n    if (!canRun.ok) {\n      return canRun;\n    }\n\n    let execResult: Result<CliResponse, CliError>;\n    try {\n      execResult = await adapter.execute(task);\n    } catch (error) {\n      breaker.recordFailure('unknown');\n      return err(\n        new CircuitError(`CLI execution threw unexpectedly: ${getErrorMessage(error)}`, {\n          circuitErrorCode: CircuitErrorCode.EXECUTION_FAILED,\n          cliName: adapter.name,\n          armId: adapter.name,\n          circuitState: breaker.getState(),\n          cause: error instanceof Error ? error : new Error(String(error)),\n        })\n      );\n    }\n\n    if (!execResult.ok) {\n      // #6613: caller-input errors (e.g. invalid model requested) must not count\n      // against the breaker or exhaust half-open probe capacity.\n      if (isCallerInputCliError(execResult.error)) {\n        breaker.releaseHalfOpenProbe();\n        return err(execResult.error);\n      }\n      breaker.recordFailure(mapCliErrorToCategory(execResult.error.code));\n      return err(execResult.error);\n    }\n\n    breaker.recordSuccess();\n    return ok(execResult.value);\n  }\n\n  private getFallbackClis(excludeCli: CliName, taskCategory?: TaskCategory): CliName[] {\n    const chain =\n      taskCategory !== undefined\n        ? getFallbackChainForCategory(taskCategory, CATEGORY_TO_FALLBACK[taskCategory])\n        : this.config.fallbackChain;\n    return [...chain].filter(\n      (cli) => cli !== excludeCli && !this.registry.isOpen(cli) && this.adapters.has(cli)\n    );\n  }\n}\n\n/** Creates a CLI circuit breaker integration with the specified adapters. */\nexport function createCliCircuitBreakerIntegration(\n  adapters: ReadonlyArray<ICliAdapter>,\n  config?: CliCircuitBreakerConfig,\n  logger?: ILogger\n): CliCircuitBreakerIntegration {\n  return new CliCircuitBreakerIntegration(adapters, config, logger);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA6JO,IAAM,mBAAmB;AAAA,EAC9B,cAAc;AAAA,EACd,4BAA4B;AAAA,EAC5B,kBAAkB;AACpB;AAWO,IAAM,eAAN,cAA2B,WAAW;AAAA,EAClC;AAAA;AAAA,EAEA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YACE,SACA,SAUA;AACA,UAAM,QAAuB,QAAQ,SAAS,QAAQ;AACtD,UAAM,cAAoF;AAAA,MACxF,MAAM,UAAU;AAAA,MAChB,SAAS;AAAA,QACP,kBAAkB,QAAQ;AAAA,QAC1B,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA,cAAc,QAAQ;AAAA,MACxB;AAAA,IACF;AACA,QAAI,QAAQ,UAAU,QAAW;AAC/B,kBAAY,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACzC,kBAAY,QAAQ,iBAAiB,IAAI,QAAQ;AAAA,IACnD;AACA,UAAM,SAAS,WAAW;AAC1B,SAAK,OAAO;AACZ,SAAK,mBAAmB,QAAQ;AAChC,SAAK,UAAU,QAAQ;AACvB,SAAK,QAAQ;AACb,SAAK,eAAe,QAAQ;AAC5B,QAAI,QAAQ,oBAAoB,QAAW;AACzC,WAAK,kBAAkB,QAAQ;AAAA,IACjC;AAAA,EACF;AACF;AASO,IAAM,iCAAuD;AAAA,EAClE,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,0BAA0B;AAAA,EAC1B,yBAAyB;AAAA,EACzB,6BAA6B;AAAA,EAC7B,2BAA2B;AAAA,EAC3B,qBAAqB;AACvB;AASA,IAAM,mBAAmB,CAAC,WAAW,WAAW;AAChD,IAAM,gBAAgB,CAAC,QAAQ,gBAAgB,aAAa,OAAO;AACnE,IAAM,sBAAsB;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,IAAM,iBAAiB,CAAC,SAAS,UAAU,UAAU,WAAW,SAAS;AAKzE,SAAS,gBAAgB,MAAc,UAA6B;AAClE,SAAO,SAAS,KAAK,CAAC,YAAY,KAAK,SAAS,OAAO,CAAC;AAC1D;AAKO,SAAS,gBAAgB,OAAiC;AAC/D,MAAI,EAAE,iBAAiB,QAAQ;AAC7B,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,MAAM,QAAQ,YAAY;AAC1C,QAAM,OAAO,MAAM,KAAK,YAAY;AACpC,QAAM,WAAW,GAAG,OAAO,IAAI,IAAI;AAEnC,MAAI,gBAAgB,UAAU,gBAAgB,EAAG,QAAO;AACxD,MAAI,gBAAgB,UAAU,aAAa,EAAG,QAAO;AACrD,MAAI,gBAAgB,QAAQ,EAAG,QAAO;AACtC,MAAI,gBAAgB,UAAU,mBAAmB,EAAG,QAAO;AAC3D,MAAI,gBAAgB,UAAU,cAAc,EAAG,QAAO;AAEtD,SAAO;AACT;;;ACtOO,IAAM,oBAAN,MAAmD;AAAA,EAYxD,YACmB,OACA,SAA+B,gCAChD;AAFiB;AACA;AAEjB,SAAK,UAAU,uBAAuB,KAAK;AAC3C,SAAK,kBAAkB,gBAAgB,EAAE,IAAI;AAAA,EAC/C;AAAA,EALmB;AAAA,EACA;AAAA,EAbX,QAAsB;AAAA,EACtB,eAAe;AAAA,EACf,eAAe;AAAA,EACf,kBAAiC;AAAA,EACjC;AAAA,EACA,mBAAmB;AAAA,EACV,YAA6C,oBAAI,IAAI;AAAA;AAAA,EAGrD;AAAA;AAAA;AAAA;AAAA,EAajB,MAAM,QAAW,IAAwD;AACvE,UAAM,aAAa,KAAK,WAAW;AACnC,QAAI,CAAC,WAAW,IAAI;AAClB,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,GAAG;AACxB,WAAK,UAAU;AACf,aAAO,GAAG,MAAM;AAAA,IAClB,SAAS,OAAO;AACd,YAAM,WAAW,gBAAgB,KAAK;AACtC,UAAI,KAAK,mBAAmB,QAAQ,GAAG;AACrC,aAAK,UAAU,QAAQ;AAAA,MACzB;AACA,aAAO,IAAI,KAAK,qBAAqB,OAAO,QAAQ,CAAC;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,WAAyB;AACvB,SAAK,qBAAqB;AAC1B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,cAAsC;AACpC,SAAK,qBAAqB;AAC1B,WAAO;AAAA,MACL,OAAO,KAAK;AAAA,MACZ,cAAc,KAAK;AAAA,MACnB,cAAc,KAAK;AAAA,MACnB,iBAAiB,KAAK;AAAA,MACtB,iBAAiB,KAAK;AAAA,MACtB,kBAAkB,KAAK;AAAA,MACvB,QAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAAA,EAEA,QAAc;AACZ,UAAM,gBAAgB,KAAK;AAC3B,SAAK,QAAQ;AACb,SAAK,eAAe;AACpB,SAAK,eAAe;AACpB,SAAK,kBAAkB;AACvB,SAAK,mBAAmB;AACxB,SAAK,kBAAkB,gBAAgB,EAAE,IAAI;AAE7C,QAAI,kBAAkB,UAAU;AAC9B,WAAK,gBAAgB,eAAe,UAAU,cAAc;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,cAAc,UAAiC;AAC7C,QAAI,KAAK,mBAAmB,QAAQ,GAAG;AACrC,WAAK,UAAU,QAAQ;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,gBAAsB;AACpB,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,uBAAuB,UAA4C;AACjE,SAAK,UAAU,IAAI,QAAQ;AAAA,EAC7B;AAAA,EAEA,0BAA0B,UAA4C;AACpE,SAAK,UAAU,OAAO,QAAQ;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA,EAMA,aAAyC;AACvC,SAAK,qBAAqB;AAE1B,QAAI,KAAK,UAAU,UAAU;AAC3B,aAAO,GAAG,IAAI;AAAA,IAChB;AAEA,QAAI,KAAK,UAAU,QAAQ;AACzB,aAAO;AAAA,QACL,IAAI,aAAa,4BAA4B,KAAK,KAAK,IAAI;AAAA,UACzD,kBAAkB,iBAAiB;AAAA,UACnC,SAAS,KAAK;AAAA,UACd,OAAO,KAAK;AAAA,UACZ,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH;AAAA,IACF;AAGA,QAAI,KAAK,oBAAoB,KAAK,OAAO,qBAAqB;AAC5D,aAAO;AAAA,QACL,IAAI,aAAa,oDAAoD,KAAK,KAAK,IAAI;AAAA,UACjF,kBAAkB,iBAAiB;AAAA,UACnC,SAAS,KAAK;AAAA,UACd,OAAO,KAAK;AAAA,UACZ,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH;AAAA,IACF;AACA,SAAK;AACL,WAAO,GAAG,IAAI;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,uBAA6B;AAC3B,QAAI,KAAK,UAAU,eAAe,KAAK,mBAAmB,GAAG;AAC3D,WAAK;AAAA,IACP;AAAA,EACF;AAAA,EAEQ,uBAA6B;AACnC,QAAI,KAAK,UAAU,QAAQ;AAUzB,YAAM,UAAU,gBAAgB,EAAE,IAAI,IAAI,KAAK;AAC/C,UAAI,WAAW,KAAK,OAAO,gBAAgB;AACzC,aAAK,aAAa,aAAa,uBAAuB;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,YAAkB;AACxB,QAAI,KAAK,UAAU,UAAU;AAC3B,WAAK,eAAe;AAAA,IACtB,WAAW,KAAK,UAAU,aAAa;AACrC,WAAK;AACL,UAAI,KAAK,gBAAgB,KAAK,OAAO,0BAA0B;AAC7D,cAAM,SAAS,GAAG,OAAO,KAAK,YAAY,CAAC;AAC3C,aAAK,aAAa,UAAU,MAAM;AAAA,MACpC;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,UAAU,UAAiC;AAiBjD,QAAI,KAAK,UAAU,OAAQ;AAE3B,SAAK;AACL,SAAK,kBAAkB,gBAAgB,EAAE,IAAI;AAE7C,QAAI,KAAK,UAAU,YAAY,KAAK,gBAAgB,KAAK,OAAO,kBAAkB;AAChF,YAAM,SAAS,sBAAsB,OAAO,KAAK,OAAO,gBAAgB,CAAC;AACzE,WAAK,aAAa,QAAQ,MAAM;AAAA,IAClC,WAAW,KAAK,UAAU,aAAa;AACrC,WAAK,aAAa,QAAQ,gDAAgD,QAAQ,GAAG;AAAA,IACvF;AAAA,EACF;AAAA,EAEQ,aAAa,UAAwB,QAAsB;AACjE,UAAM,gBAAgB,KAAK;AAC3B,SAAK,QAAQ;AACb,SAAK,kBAAkB,gBAAgB,EAAE,IAAI;AAE7C,QAAI,aAAa,UAAU;AACzB,WAAK,eAAe;AACpB,WAAK,eAAe;AACpB,WAAK,mBAAmB;AAAA,IAC1B,WAAW,aAAa,aAAa;AAQnC,WAAK,eAAe;AACpB,WAAK,eAAe;AACpB,WAAK,mBAAmB;AAAA,IAC1B;AAEA,SAAK,gBAAgB,eAAe,UAAU,MAAM;AAAA,EACtD;AAAA,EAEQ,gBACN,eACA,UACA,QACM;AACN,UAAM,QAAiC;AAAA,MACrC,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ;AAAA,MACA;AAAA,MACA,WAAW,KAAK;AAAA,MAChB,cAAc,KAAK;AAAA,MACnB;AAAA,IACF;AAEA,eAAW,YAAY,KAAK,WAAW;AACrC,UAAI;AACF,iBAAS,KAAK;AAAA,MAChB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,mBAAmB,UAAoC;AAC7D,QAAI,aAAa,UAAW,QAAO,KAAK,OAAO;AAC/C,QAAI,aAAa,iBAAkB,QAAO,KAAK,OAAO;AACtD,QAAI,aAAa,aAAc,QAAO,KAAK,OAAO;AAClD,WAAO;AAAA,EACT;AAAA,EAEQ,qBAAqB,OAAgB,UAAyC;AACpF,UAAM,UAAU,gBAAgB,KAAK;AACrC,UAAM,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACtE,WAAO,IAAI,aAAa,yBAAyB,OAAO,IAAI;AAAA,MAC1D,kBAAkB,iBAAiB;AAAA,MACnC,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,cAAc,KAAK;AAAA,MACnB,iBAAiB;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAkBO,IAAM,yBAAN,MAA6B;AAAA,EAIlC,YAA6B,gBAA+C,CAAC,GAAG;AAAnD;AAAA,EAAoD;AAAA,EAApD;AAAA,EAHZ,WAAkD,oBAAI,IAAI;AAAA,EAC1D,kBAAmD,oBAAI,IAAI;AAAA;AAAA,EAK5E,cAAc,OAAsB,QAA2D;AAC7F,QAAI,UAAU,KAAK,SAAS,IAAI,KAAK;AAErC,QAAI,CAAC,SAAS;AACZ,YAAM,eAAqC;AAAA,QACzC,GAAG;AAAA,QACH,GAAG,KAAK;AAAA,QACR,GAAG;AAAA,MACL;AACA,gBAAU,IAAI,kBAAkB,OAAO,YAAY;AAEnD,iBAAW,YAAY,KAAK,iBAAiB;AAC3C,gBAAQ,uBAAuB,QAAQ;AAAA,MACzC;AAEA,WAAK,SAAS,IAAI,OAAO,OAAO;AAAA,IAClC;AAEA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,WAAW,SAAkB,QAA2D;AACtF,WAAO,KAAK,cAAc,SAAS,MAAM;AAAA,EAC3C;AAAA,EAEA,UAAU,OAA+B;AACvC,WAAO,KAAK,SAAS,IAAI,KAAK,GAAG,SAAS,MAAM;AAAA,EAClD;AAAA;AAAA,EAGA,OAAO,SAA2B;AAChC,WAAO,KAAK,UAAU,OAAO;AAAA,EAC/B;AAAA;AAAA,EAGA,qBAAiE;AAC/D,UAAM,YAAY,oBAAI,IAA2C;AACjE,eAAW,CAAC,MAAM,OAAO,KAAK,KAAK,UAAU;AAC3C,gBAAU,IAAI,MAAM,QAAQ,YAAY,CAAC;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,kBAAwD;AACtD,UAAM,YAAY,oBAAI,IAAqC;AAC3D,eAAW,CAAC,MAAM,QAAQ,KAAK,KAAK,mBAAmB,GAAG;AACxD,UAAI,UAAU,IAAI,EAAG,WAAU,IAAI,MAAM,QAAQ;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AAAA,EAEA,WAAiB;AACf,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC5C,cAAQ,MAAM;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,SAAS,OAA4B;AACnC,SAAK,SAAS,IAAI,KAAK,GAAG,MAAM;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,SAAwB;AAC5B,SAAK,SAAS,OAAO;AAAA,EACvB;AAAA,EAEA,6BAA6B,UAA4C;AACvE,SAAK,gBAAgB,IAAI,QAAQ;AACjC,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC5C,cAAQ,uBAAuB,QAAQ;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,gCAAgC,UAA4C;AAC1E,SAAK,gBAAgB,OAAO,QAAQ;AACpC,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC5C,cAAQ,0BAA0B,QAAQ;AAAA,IAC5C;AAAA,EACF;AAAA;AAAA,EAGA,iBAAkC;AAChC,UAAM,UAA2B,CAAC;AAClC,eAAW,CAAC,MAAM,OAAO,KAAK,KAAK,UAAU;AAC3C,UAAI,QAAQ,SAAS,MAAM,UAAU;AACnC,gBAAQ,KAAK,IAAI;AAAA,MACnB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,iBAA4B;AAC1B,WAAO,KAAK,eAAe,EAAE,OAAO,SAAS;AAAA,EAC/C;AAAA;AAAA,EAGA,mBAAoC;AAClC,UAAM,YAA6B,CAAC;AACpC,eAAW,CAAC,MAAM,OAAO,KAAK,KAAK,UAAU;AAC3C,YAAM,QAAQ,QAAQ,SAAS;AAC/B,UAAI,UAAU,UAAU,UAAU,aAAa;AAC7C,kBAAU,KAAK,IAAI;AAAA,MACrB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,mBAA8B;AAC5B,WAAO,KAAK,iBAAiB,EAAE,OAAO,SAAS;AAAA,EACjD;AACF;AASO,SAAS,sBAAsB,WAA0C;AAC9E,QAAM,UAA2C;AAAA,IAC/C,SAAS;AAAA,IACT,mBAAmB;AAAA,IACnB,cAAc;AAAA,IACd,kBAAkB;AAAA,EACpB;AACA,SAAO,QAAQ,SAAS,KAAK;AAC/B;AAcO,SAAS,wBAAwB,OAAoC;AAC1E,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK,UAAU;AAAA,IACf,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AAAA,IACf,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AAAA,IACf,KAAK,UAAU;AAIb,aAAO;AAAA,IACT;AAEE,aAAO,gBAAgB,KAAK;AAAA,EAChC;AACF;;;AC1eO,IAAM,wBAAmD,oBAAI,IAAkB;AAAA,EACpF;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,SAAS,qBAAqB,MAA6B;AAChE,SAAO,sBAAsB,IAAI,IAAI;AACvC;AAOA,IAAM,wBAAwB,CAAC,WAAW,aAAa,WAAW;AAG3D,SAAS,cAAc,MAAuB;AACnD,QAAM,QAAQ,KAAK,YAAY;AAC/B,SAAO,sBAAsB,KAAK,CAAC,MAAM,MAAM,SAAS,CAAC,CAAC;AAC5D;AAaO,SAAS,eACd,MACA,SACA,KACA,OACU;AACV,QAAM,YAAY,qBAAqB,IAAI,KAAK,CAAC,sBAAsB,OAAO;AAK9E,QAAM,eAAe,YAAY,kBAAkB,OAAO,IAAI;AAC9D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,iBAAiB,UAAa,EAAE,aAAa;AAAA,IACjD,GAAI,UAAU,UAAa,EAAE,MAAM;AAAA,EACrC;AACF;AAUO,SAAS,0BAA0B,SAAiB,KAAwB;AACjF,SAAO,eAAe,mBAAmB,SAAS,KAAK,IAAI,gBAAgB,OAAO,CAAC;AACrF;AAGO,SAAS,sBAAsB,OAA0B;AAC9D,SAAO,MAAM,iBAAiB;AAChC;;;ACrEA,IAAM,uBAA+D;AAAA,EACnE,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,SAAS;AAAA,EACT,UAAU;AAAA,EACV,aAAa;AAAA,EACb,eAAe;AAAA,EACf,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,UAAU;AAAA,EACV,QAAQ;AACV;AA8CA,IAAM,yBAAiD,CAAC,UAAU,UAAU,SAAS,UAAU;AAC/F,IAAM,iBAAoD;AAAA,EACxD,cAAc,CAAC;AAAA,EACf,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,qBAAqB;AACvB;AACA,IAAM,mCAAmC,IAAI,uBAAuB;AAMpE,IAAM,iBAAiB,aAAa,EAAE,WAAW,sBAAsB,CAAC;AACxE,iCAAiC,6BAA6B,CAAC,UAAU;AACvE,iBAAe,KAAK,6BAA6B;AAAA,IAC/C,KAAK,MAAM;AAAA,IACX,eAAe,MAAM;AAAA,IACrB,UAAU,MAAM;AAAA,IAChB,cAAc,MAAM;AAAA,IACpB,QAAQ,MAAM;AAAA,EAChB,CAAC;AACH,CAAC;AAGM,SAAS,sCAA8D;AAC5E,SAAO;AACT;AAOO,SAAS,6BAA6B,SAAsD;AACjG,SAAO,iCAAiC,gBAAgB,EAAE,IAAI,OAAO;AACvE;AAMO,IAAM,+BAAN,MAA4E;AAAA,EAChE;AAAA,EACA,WAAsC,oBAAI,IAAI;AAAA,EAC9C;AAAA,EACA;AAAA,EAEjB,YACE,UACA,QACA,QACA;AACA,SAAK,SAAS,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAC7C,SAAK,SAAS,UAAU,aAAa,EAAE,WAAW,kCAAkC,CAAC;AACrF,SAAK,WACH,WAAW,SAAY,mCAAmC,IAAI,uBAAuB;AACvF,eAAW,WAAW,UAAU;AAC9B,WAAK,SAAS,IAAI,QAAQ,MAAM,OAAO;AACvC,WAAK,SAAS,WAAW,QAAQ,MAAM,KAAK,OAAO,aAAa,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,SACA,MACA,cACkE;AAClE,UAAM,aAAa,QAAQ;AAC3B,UAAM,mBAA8B,CAAC;AACrC,QAAI;AAEJ,UAAM,gBAAgB,MAAM,KAAK,mBAAmB,SAAS,IAAI;AACjE,QAAI,cAAc,IAAI;AACpB,aAAO,GAAG,EAAE,UAAU,cAAc,OAAO,YAAY,YAAY,cAAc,MAAM,CAAC;AAAA,IAC1F;AACA,gBAAY,cAAc;AAE1B,QAAI,CAAC,KAAK,OAAO,kBAAkB,EAAE,qBAAqB,eAAe;AACvE,aAAO,IAAI,SAAS;AAAA,IACtB;AAEA,eAAW,OAAO,KAAK,gBAAgB,YAAY,YAAY,EAAE;AAAA,MAC/D;AAAA,MACA,KAAK,OAAO;AAAA,IACd,GAAG;AACD,YAAM,kBAAkB,KAAK,SAAS,IAAI,GAAG;AAC7C,UAAI,CAAC,gBAAiB;AACtB,uBAAiB,KAAK,GAAG;AACzB,WAAK,OAAO,KAAK,uBAAuB,EAAE,MAAM,YAAY,IAAI,IAAI,CAAC;AACrE,YAAM,SAAS,MAAM,KAAK,mBAAmB,iBAAiB,IAAI;AAClE,UAAI,OAAO,IAAI;AACb,eAAO,GAAG;AAAA,UACR,UAAU,OAAO;AAAA,UACjB,YAAY;AAAA,UACZ,cAAc;AAAA,UACd;AAAA,QACF,CAAC;AAAA,MACH;AACA,kBAAY,OAAO;AAAA,IACrB;AAEA,SAAK,OAAO,KAAK,gCAAgC,EAAE,YAAY,iBAAiB,CAAC;AACjF,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA,EAEA,kBAA0C;AACxC,UAAM,YAAY,KAAK,SAAS,gBAAgB;AAChD,UAAM,OAAiD,CAAC;AACxD,QAAI,eAAe;AACnB,eAAW,QAAQ,KAAK,SAAS,KAAK,GAAG;AACvC,YAAM,WAAW,UAAU,IAAI,IAAI;AACnC,UAAI,CAAC,SAAU;AACf,YAAM,UAAU,SAAS,UAAU;AACnC,UAAI,QAAS;AACb,WAAK,KAAK;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,iBAAiB,SAAS;AAAA,MAC5B,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL;AAAA,MACA,eAAe,eAAe;AAAA,MAC9B;AAAA,MACA,WAAW,gBAAgB,EAAE,IAAI;AAAA,IACnC;AAAA,EACF;AAAA,EAEA,sBAA4D;AAC1D,UAAM,eAAe,KAAK,SAAS,gBAAgB;AACnD,UAAM,YAAY,oBAAI,IAAqC;AAC3D,eAAW,QAAQ,KAAK,SAAS,KAAK,GAAG;AACvC,YAAM,WAAW,aAAa,IAAI,IAAI;AACtC,UAAI,aAAa,QAAW;AAC1B,kBAAU,IAAI,MAAM,QAAQ;AAAA,MAC9B;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,SAAwB;AACnC,SAAK,SAAS,MAAM,OAAO;AAC3B,SAAK,OAAO,KAAK,iBAAiB,EAAE,QAAQ,CAAC;AAAA,EAC/C;AAAA,EAEA,mBAAyB;AACvB,SAAK,SAAS,SAAS;AACvB,SAAK,OAAO,KAAK,oBAAoB;AAAA,EACvC;AAAA,EAEA,uBAAuB,UAA4C;AACjE,SAAK,SAAS,6BAA6B,QAAQ;AAAA,EACrD;AAAA,EAEA,MAAc,mBACZ,SACA,MACuD;AACvD,UAAM,UAAU,KAAK,SAAS,WAAW,QAAQ,IAAI;AACrD,UAAM,SAAS,QAAQ,WAAW;AAClC,QAAI,CAAC,OAAO,IAAI;AACd,aAAO;AAAA,IACT;AAEA,QAAI;AACJ,QAAI;AACF,mBAAa,MAAM,QAAQ,QAAQ,IAAI;AAAA,IACzC,SAAS,OAAO;AACd,cAAQ,cAAc,SAAS;AAC/B,aAAO;AAAA,QACL,IAAI,aAAa,qCAAqC,gBAAgB,KAAK,CAAC,IAAI;AAAA,UAC9E,kBAAkB,iBAAiB;AAAA,UACnC,SAAS,QAAQ;AAAA,UACjB,OAAO,QAAQ;AAAA,UACf,cAAc,QAAQ,SAAS;AAAA,UAC/B,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,QACjE,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,CAAC,WAAW,IAAI;AAGlB,UAAI,sBAAsB,WAAW,KAAK,GAAG;AAC3C,gBAAQ,qBAAqB;AAC7B,eAAO,IAAI,WAAW,KAAK;AAAA,MAC7B;AACA,cAAQ,cAAc,sBAAsB,WAAW,MAAM,IAAI,CAAC;AAClE,aAAO,IAAI,WAAW,KAAK;AAAA,IAC7B;AAEA,YAAQ,cAAc;AACtB,WAAO,GAAG,WAAW,KAAK;AAAA,EAC5B;AAAA,EAEQ,gBAAgB,YAAqB,cAAwC;AACnF,UAAM,QACJ,iBAAiB,SACb,4BAA4B,cAAc,qBAAqB,YAAY,CAAC,IAC5E,KAAK,OAAO;AAClB,WAAO,CAAC,GAAG,KAAK,EAAE;AAAA,MAChB,CAAC,QAAQ,QAAQ,cAAc,CAAC,KAAK,SAAS,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,GAAG;AAAA,IACpF;AAAA,EACF;AACF;AAGO,SAAS,mCACd,UACA,QACA,QAC8B;AAC9B,SAAO,IAAI,6BAA6B,UAAU,QAAQ,MAAM;AAClE;","names":[]}

package/dist/{chunk-ZHTH6YFI.js → chunk-BY5SXMN5.js}

@@ -2,7 +2,7 @@ import {
   CACHE_TIMEOUTS,
   createLogger,
   getTimeProvider
-} from "./chunk-OLPKHKVI.js";
+} from "./chunk-ZR5JWLC5.js";
 
 // src/security/trust-types.ts
 import { z } from "zod";
@@ -610,4 +610,4 @@ export {
   resolveReputationGatingMode,
   gateWithReputation
 };
-//# sourceMappingURL=chunk-ZHTH6YFI.js.map
+//# sourceMappingURL=chunk-BY5SXMN5.js.map

package/dist/{chunk-3QGKGM37.js → chunk-BYRIEU5S.js}

@@ -1,6 +1,6 @@
 import {
   resolveClassGuardMs
-} from "./chunk-OLPKHKVI.js";
+} from "./chunk-ZR5JWLC5.js";
 
 // src/cli/cli-readiness.ts
 var READINESS_LEVELS = ["installed", "authenticated", "serves"];
@@ -90,4 +90,4 @@ export {
   SERVES_PROBE_PROMPT,
   probeServes
 };
-//# sourceMappingURL=chunk-3QGKGM37.js.map
+//# sourceMappingURL=chunk-BYRIEU5S.js.map