nexus-agents 8.110.1 → 8.111.1

package/dist/{ast-rule-runner-ZO3T66KP.js → ast-rule-runner-QMJBY2DU.js}

@@ -9,9 +9,9 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-CDPPWCGO.js";
+} from "./chunk-PPOWAM44.js";
 import "./chunk-XEPZSDN5.js";
-import "./chunk-RIF7TUYH.js";
+import "./chunk-KWMENWRB.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -27,4 +27,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-ZO3T66KP.js.map
+//# sourceMappingURL=ast-rule-runner-QMJBY2DU.js.map

package/dist/{child-mcp-config-M4MRFMP3.js → child-mcp-config-FYHJS7OK.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-OITVVSWO.js";
 import {
   createLogger
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -56,4 +56,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-M4MRFMP3.js.map
+//# sourceMappingURL=child-mcp-config-FYHJS7OK.js.map

package/dist/{chunk-WKNSD7YL.js → chunk-2K5PKVFE.js}

@@ -1,6 +1,6 @@
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-ZEDLXDDY.js";
+} from "./chunk-2UUZKZ2U.js";
 import {
   AdapterModelError,
   BaseAdapter,
@@ -10,7 +10,7 @@ import {
   readGatewayTransport,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-OM4JSIPB.js";
+} from "./chunk-WTHWCJEE.js";
 import {
   assertCustomApiHostResolvesPublic,
   hostnameOf,
@@ -19,22 +19,22 @@ import {
   readGatewayEnv,
   redactApiKey,
   validateCustomApiBaseUrl
-} from "./chunk-DNXEQKBR.js";
+} from "./chunk-RG4J5IBH.js";
 import {
   sanitizeOutput
-} from "./chunk-22AF7TYV.js";
+} from "./chunk-CIA3WNBQ.js";
 import {
   nexusMkdtempSync
 } from "./chunk-OITVVSWO.js";
 import {
   getAvailabilityCache
-} from "./chunk-FE2VYSSA.js";
+} from "./chunk-K43RR3EW.js";
 import {
   extractSystemPrompt
 } from "./chunk-QZUG667L.js";
 import {
   generateHyphenId
-} from "./chunk-5O4KT2WO.js";
+} from "./chunk-YFJFCHIT.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG,
@@ -47,7 +47,7 @@ import {
   isCallerCancelled,
   isCallerInputCliError,
   isTimeoutText
-} from "./chunk-ZTOTKIAO.js";
+} from "./chunk-WAZC4MM7.js";
 import {
   CLI_NAMES,
   CLI_SUBPROCESS_TIMEOUTS,
@@ -103,7 +103,7 @@ import {
   resolveRetryAfterMs,
   toModelTokenUsage,
   warnIfGatewayCostUndeclared
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 import {
   parseBoolValue
 } from "./chunk-LWOX65CP.js";
@@ -5299,4 +5299,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-WKNSD7YL.js.map
+//# sourceMappingURL=chunk-2K5PKVFE.js.map

package/dist/{chunk-ZEDLXDDY.js → chunk-2UUZKZ2U.js}

@@ -8,7 +8,7 @@ import {
   MCP_TIMEOUTS,
   TEST_TIMEOUTS,
   WORKFLOW_TIMEOUTS
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 import {
   createGetToolRateLimit
 } from "./chunk-LWOX65CP.js";
@@ -223,4 +223,4 @@ export {
   CUSTOM_API_DEFAULT_MODEL,
   DEFAULTS
 };
-//# sourceMappingURL=chunk-ZEDLXDDY.js.map
+//# sourceMappingURL=chunk-2UUZKZ2U.js.map

package/dist/{chunk-CGPKV4KH.js → chunk-2WW5OIKD.js}

@@ -1,15 +1,15 @@
 import {
   ensureGatewayDiscovered,
   gatewayDiscoveryGeneration
-} from "./chunk-O4QDBQI6.js";
+} from "./chunk-RP3RG4SV.js";
 import {
   createAutoAdapter
-} from "./chunk-WKNSD7YL.js";
+} from "./chunk-2K5PKVFE.js";
 import {
   getDefaultCliCircuitBreakerRegistry,
   isCallerCancelled,
   mapModelErrorToCategory
-} from "./chunk-ZTOTKIAO.js";
+} from "./chunk-WAZC4MM7.js";
 import {
   CircularBuffer,
   ConfigError,
@@ -34,7 +34,7 @@ import {
   resolveModelIdentitySync,
   toRateLimitError,
   warnIfGatewayCostUndeclared
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 
 // src/config/model-equivalence.ts
 var VARIANT_QUIRKS = /* @__PURE__ */ new Set(["small", "image"]);
@@ -1076,4 +1076,4 @@ export {
   getGlobalRegistry,
   resetGlobalRegistry
 };
-//# sourceMappingURL=chunk-CGPKV4KH.js.map
+//# sourceMappingURL=chunk-2WW5OIKD.js.map

package/dist/{chunk-JRDNNCM7.js → chunk-4YQZELVY.js}

@@ -3,14 +3,14 @@ import {
 } from "./chunk-W654ME6B.js";
 import {
   resolveToken
-} from "./chunk-METD44P2.js";
+} from "./chunk-KIA5SC44.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
   loadPapersRegistry,
   loadTechniquesRegistry,
   savePapersRegistry
-} from "./chunk-D6LZY3W7.js";
+} from "./chunk-66IWQNWP.js";
 import {
   resolveInsideRoot
 } from "./chunk-XEPZSDN5.js";
@@ -21,7 +21,7 @@ import {
   rankedItemTrustTier,
   trustTierLabel,
   withoutUntrustedMemory
-} from "./chunk-BE6L6MIE.js";
+} from "./chunk-57IM5TNR.js";
 import {
   capitalizeWords,
   tokenizeFiltered,
@@ -50,7 +50,7 @@ import {
   ok,
   registerPersistentDistillerFactory,
   sigmoidConfidence
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 import {
   ensureLearningDir,
   getRulesFile
@@ -4287,4 +4287,4 @@ export {
   DEFAULT_CONTEXT_BUDGET_TOKENS,
   getContextPromptPrefix
 };
-//# sourceMappingURL=chunk-JRDNNCM7.js.map
+//# sourceMappingURL=chunk-4YQZELVY.js.map

package/dist/{chunk-BE6L6MIE.js → chunk-57IM5TNR.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-SX5DB6UR.js";
 import {
   SessionMemory
-} from "./chunk-J2QYPARH.js";
+} from "./chunk-KXMEPCFU.js";
 import {
   TRUST_TIER_NUMERIC,
   TrustTierSchema
@@ -19,7 +19,7 @@ import {
 } from "./chunk-MUJCGBZW.js";
 import {
   generateId
-} from "./chunk-5O4KT2WO.js";
+} from "./chunk-YFJFCHIT.js";
 import {
   ErrorCode,
   NexusError,
@@ -33,7 +33,7 @@ import {
   ok,
   openSqliteDatabase,
   setSharedMobiMemDbPathResolver
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 import {
   nexusDataPath
 } from "./chunk-LWOX65CP.js";
@@ -5858,4 +5858,4 @@ export {
   shutdownToolMemory,
   ToolMemoryManager
 };
-//# sourceMappingURL=chunk-BE6L6MIE.js.map
+//# sourceMappingURL=chunk-57IM5TNR.js.map

package/dist/{chunk-D6LZY3W7.js → chunk-66IWQNWP.js}

@@ -8,7 +8,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 import {
   findRepoRoot,
   getActiveWorkspaceRoot,
@@ -213,4 +213,4 @@ export {
   loadPapersRegistry,
   savePapersRegistry
 };
-//# sourceMappingURL=chunk-D6LZY3W7.js.map
+//# sourceMappingURL=chunk-66IWQNWP.js.map

package/dist/{chunk-G4UBTYE3.js → chunk-6NMURF4A.js}

@@ -1,6 +1,6 @@
 import {
   resolveClassGuardMs
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 
 // src/cli/cli-readiness.ts
 var READINESS_LEVELS = ["installed", "authenticated", "serves"];
@@ -27,7 +27,7 @@ function buildGatewayReadiness(cli, gateway, serves) {
 function readinessSummary(readiness) {
   const g = readiness.gateway;
   if (g !== void 0) {
-    const why = g.cliState === "disabled" ? "CLI disabled by NEXUS_DISABLED_CLIS" : "CLI not available";
+    const why = g.cliState === "disabled" ? "CLI disabled by NEXUS_DISABLED_CLIS" : g.cliListAdmitted === true ? "CLI not available: its health/auth check failed in this live run, but the CLI list above admitted it" : "CLI not available";
     const verdict = readiness.reached === "serves" ? "serves" : "not ready";
     return `served by gateway model ${g.gatewayModel} (${why}) \u2014 ${verdict}`;
   }
@@ -107,4 +107,4 @@ export {
   SERVES_PROBE_PROMPT,
   probeServes
 };
-//# sourceMappingURL=chunk-G4UBTYE3.js.map
+//# sourceMappingURL=chunk-6NMURF4A.js.map

package/dist/chunk-6NMURF4A.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/cli-readiness.ts"],"sourcesContent":["/**\n * Readiness levels for a CLI adapter (#4376, #4351 criterion 7).\n *\n * Nothing in the tree could confirm that an adapter which *looks* healthy can\n * actually serve a completion. `healthCheck()` proves the binary exists at an\n * acceptable version; `cli-auth-probe` proves credentials are present and\n * unexpired, and says so explicitly — \"No live API calls.\" Neither proves the\n * adapter serves anything.\n *\n * That is the state #4351 reported: every voter returned `stop_sequence` with\n * zero tokens while every available check said healthy. The checks were not\n * wrong; they were answering a narrower question than the caller assumed.\n *\n * ## Levels, and what each one actually proves\n *\n * | level           | proves                                    | costs |\n * | --------------- | ----------------------------------------- | ----- |\n * | `installed`     | the binary exists at a supported version  | none  |\n * | `authenticated` | credentials are present and unexpired     | none  |\n * | `serves`        | a real completion came back with content  | quota |\n *\n * `serves` is the only level that can catch #4351, and the only one that\n * spends the resource it is measuring. It therefore runs **only when\n * explicitly invoked** (`doctor --live`). Decided by a 7-voter `higher_order`\n * panel on #4376 (5 of 6 approvers): the rejected alternative cached a probe\n * result behind a TTL on the default path, which is a stale measurement\n * presented as current readiness — the same defect this module exists to fix.\n *\n * ## Not-attempted is not a failure\n *\n * The load-bearing distinction. A level that was never run reports\n * `not-attempted`, never `failed`. A reader must be able to tell \"we checked\n * and it does not serve\" from \"we did not check\", because the second is the\n * default state of every run that does not pass `--live`, and reporting it as\n * either healthy or broken would be a claim nobody measured.\n *\n * @module cli/cli-readiness\n * (Source: Issue #4376)\n */\n\nimport { resolveClassGuardMs } from '../config/timeouts.js';\nimport type { CliName } from '../cli-adapters/types.js';\n\n/** Ordered weakest to strongest. Each level subsumes the ones before it. */\nexport const READINESS_LEVELS = ['installed', 'authenticated', 'serves'] as const;\n\nexport type ReadinessLevel = (typeof READINESS_LEVELS)[number];\n\n/** What a single level's check concluded. */\nexport type LevelOutcome =\n  | { readonly status: 'verified' }\n  | { readonly status: 'failed'; readonly reason: string }\n  /** Not run. Carries why, so the report can distinguish opt-out from error. */\n  | { readonly status: 'not-attempted'; readonly reason: string };\n\n/**\n * The slot is served by a gateway model, not the CLI (#6720). Its CLI levels\n * are not measured — the CLI is disabled or not available, and is not run —\n * so only `serves` says anything, and it says it about the gateway model.\n */\nexport interface GatewayServedReadiness {\n  readonly gatewayModel: string;\n  /** Why the CLI does not serve the slot. */\n  readonly cliState: 'disabled' | 'not-available';\n  /**\n   * The main doctor CLI list admitted this CLI, while this run's own\n   * availability check found it not available (#6781). The two are separate\n   * health checks; this records that they disagreed.\n   */\n  readonly cliListAdmitted?: true;\n}\n\nexport interface CliReadiness {\n  readonly cli: CliName;\n  readonly levels: Readonly<Record<ReadinessLevel, LevelOutcome>>;\n  /** Present when a gateway model serves the slot; the levels then describe it. */\n  readonly gateway?: GatewayServedReadiness;\n  /**\n   * The strongest level actually VERIFIED, or undefined when even `installed`\n   * failed. Never inferred from a level that was not attempted.\n   */\n  readonly reached?: ReadinessLevel;\n}\n\n/** Human-readable statement of what a level does and does not prove. */\nexport const LEVEL_MEANING: Readonly<Record<ReadinessLevel, string>> = {\n  installed: 'binary present at a supported version — proves nothing about auth or serving',\n  authenticated: 'credentials present and unexpired, read locally — no API call was made',\n  serves: 'a real completion returned content — the only level that proves the adapter works',\n};\n\n/**\n * The strongest verified level, stopping at the first gap.\n *\n * Stops rather than scanning for any verified level, because the ladder is\n * cumulative: a `serves` verification below a failed `authenticated` would\n * mean the two checks disagree, and reporting the higher one would paper over\n * that. A `not-attempted` level stops the ladder exactly like a failure —\n * absence of a check is not a pass.\n */\nexport function highestVerified(\n  levels: Readonly<Record<ReadinessLevel, LevelOutcome>>\n): ReadinessLevel | undefined {\n  let reached: ReadinessLevel | undefined;\n  for (const level of READINESS_LEVELS) {\n    if (levels[level].status !== 'verified') break;\n    reached = level;\n  }\n  return reached;\n}\n\n/** Assemble a readiness result, deriving `reached` from the outcomes. */\nexport function buildReadiness(\n  cli: CliName,\n  levels: Readonly<Record<ReadinessLevel, LevelOutcome>>\n): CliReadiness {\n  const reached = highestVerified(levels);\n  return { cli, levels, ...(reached !== undefined ? { reached } : {}) };\n}\n\n/**\n * Readiness of a slot a gateway model serves (#6720). `installed` and\n * `authenticated` are the CLI's rungs and were not run — the CLI is not what\n * serves — so they are `not-attempted` with that reason, and `reached` is\n * `serves` exactly when the gateway model's completion came back.\n */\nexport function buildGatewayReadiness(\n  cli: CliName,\n  gateway: GatewayServedReadiness,\n  serves: LevelOutcome\n): CliReadiness {\n  const notRun: LevelOutcome = {\n    status: 'not-attempted',\n    reason: `the CLI is not run: gateway model ${gateway.gatewayModel} serves this slot`,\n  };\n  const levels = { installed: notRun, authenticated: notRun, serves };\n  return { cli, levels, gateway, ...(serves.status === 'verified' ? { reached: 'serves' } : {}) };\n}\n\n/** The header of one readiness entry. */\nfunction readinessSummary(readiness: CliReadiness): string {\n  const g = readiness.gateway;\n  if (g !== undefined) {\n    const why =\n      g.cliState === 'disabled'\n        ? 'CLI disabled by NEXUS_DISABLED_CLIS'\n        : g.cliListAdmitted === true\n          ? 'CLI not available: its health/auth check failed in this live run, but the CLI list above admitted it'\n          : 'CLI not available';\n    const verdict = readiness.reached === 'serves' ? 'serves' : 'not ready';\n    return `served by gateway model ${g.gatewayModel} (${why}) — ${verdict}`;\n  }\n  return readiness.reached === undefined ? 'not ready' : `ready through \"${readiness.reached}\"`;\n}\n\n/**\n * Render one CLI's ladder, naming every level's state.\n *\n * Every level is printed, including the ones that did not run. A report that\n * silently omitted `serves` would read as a clean bill of health from a run\n * that never tested serving — which is precisely how #4351 went unnoticed.\n */\nexport function formatReadiness(readiness: CliReadiness): string {\n  // Exhaustive rather than a ternary chain (#4563): a new LevelOutcome status\n  // would otherwise fall into the '·' arm and render as \"not attempted\",\n  // quietly misreporting whatever the new state actually means.\n  const icon = (o: LevelOutcome): string => {\n    switch (o.status) {\n      case 'verified':\n        return '✓';\n      case 'failed':\n        return '✗';\n      case 'not-attempted':\n        return '·';\n      default: {\n        const exhaustive: never = o;\n        throw new Error(`Unhandled level outcome: ${JSON.stringify(exhaustive)}`);\n      }\n    }\n  };\n\n  const lines = READINESS_LEVELS.map((level) => {\n    const outcome = readiness.levels[level];\n    const detail = outcome.status === 'verified' ? '' : ` — ${outcome.reason}`;\n    return `      ${icon(outcome)} ${level}${detail}`;\n  });\n\n  return [`  ${readiness.cli}: ${readinessSummary(readiness)}`, ...lines].join('\\n');\n}\n\n/** The minimal adapter surface the `serves` probe needs. */\nexport interface ServesProbeTarget {\n  execute(task: {\n    content: string;\n    maxTokens?: number;\n  }): Promise<{ ok: true; value: { text: string } } | { ok: false; error: { message: string } }>;\n}\n\n/**\n * The smallest prompt that still proves generation happened.\n *\n * Short on purpose — this level spends real quota, so it asks for the least\n * that can distinguish \"served content\" from \"returned nothing\".\n */\nexport const SERVES_PROBE_PROMPT = 'Reply with the single word: ok';\n\n/**\n * Probe whether an adapter actually serves a completion.\n *\n * The check that matters is **non-empty content**, not a successful exit.\n * #4351's signature was every voter returning `stop_sequence` with zero\n * tokens: the call succeeded and produced nothing. An adapter that returns\n * `ok` with empty text has not served, and saying otherwise would reproduce\n * the exact reading that made the incident invisible.\n *\n * Bounded by the `interactive` operation-class guard. Found by running it: an\n * unbounded ladder over four adapters hung past two minutes with no output,\n * and a readiness check that never returns is worse than one that reports a\n * failure — the operator learns nothing either way, but waits for it. A\n * timeout is itself a legitimate not-ready result, not an error.\n *\n * @param adapter - The adapter to probe.\n * @param timeoutMs - Per-adapter ceiling; defaults to the interactive guard.\n */\nexport async function probeServes(\n  adapter: ServesProbeTarget,\n  timeoutMs: number = resolveClassGuardMs('interactive')\n): Promise<LevelOutcome> {\n  let result: Awaited<ReturnType<ServesProbeTarget['execute']>>;\n  try {\n    result = await withDeadline(\n      adapter.execute({ content: SERVES_PROBE_PROMPT, maxTokens: 16 }),\n      timeoutMs\n    );\n  } catch (caught: unknown) {\n    if (caught instanceof ProbeTimeout) {\n      return {\n        status: 'failed',\n        reason: `no response within ${String(Math.round(timeoutMs / 1000))}s`,\n      };\n    }\n    const message = caught instanceof Error ? caught.message : String(caught);\n    return { status: 'failed', reason: `probe threw: ${message}` };\n  }\n\n  if (!result.ok) {\n    return { status: 'failed', reason: result.error.message };\n  }\n  if (result.value.text.trim() === '') {\n    return {\n      status: 'failed',\n      reason: 'call succeeded but returned no content — the #4351 signature',\n    };\n  }\n  return { status: 'verified' };\n}\n\n/** Raised when a probe outlives its ceiling. */\nclass ProbeTimeout extends Error {}\n\n/**\n * Race a promise against a deadline.\n *\n * The underlying call is not cancelled — a CLI subprocess keeps running until\n * its own guard reaps it. What this bounds is how long the OPERATOR waits,\n * which is the thing that made an unbounded ladder unusable.\n */\nasync function withDeadline<T>(work: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: NodeJS.Timeout | undefined;\n  const deadline = new Promise<never>((_resolve, reject) => {\n    timer = setTimeout(() => {\n      reject(new ProbeTimeout());\n    }, timeoutMs);\n    // Deliberately NOT unref'd. An unref'd timer does not hold the event loop\n    // open, so if the probed call never settles and nothing else is pending,\n    // Node can exit at the await before the deadline fires — the guarantee\n    // voiding itself in precisely the case it exists for. `clearTimeout` in\n    // the finally is what stops it outliving a call that did settle.\n  });\n\n  try {\n    return await Promise.race([work, deadline]);\n  } finally {\n    if (timer !== undefined) clearTimeout(timer);\n  }\n}\n"],"mappings":";;;;;AA4CO,IAAM,mBAAmB,CAAC,aAAa,iBAAiB,QAAQ;AAwDhE,SAAS,gBACd,QAC4B;AAC5B,MAAI;AACJ,aAAW,SAAS,kBAAkB;AACpC,QAAI,OAAO,KAAK,EAAE,WAAW,WAAY;AACzC,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAGO,SAAS,eACd,KACA,QACc;AACd,QAAM,UAAU,gBAAgB,MAAM;AACtC,SAAO,EAAE,KAAK,QAAQ,GAAI,YAAY,SAAY,EAAE,QAAQ,IAAI,CAAC,EAAG;AACtE;AAQO,SAAS,sBACd,KACA,SACA,QACc;AACd,QAAM,SAAuB;AAAA,IAC3B,QAAQ;AAAA,IACR,QAAQ,qCAAqC,QAAQ,YAAY;AAAA,EACnE;AACA,QAAM,SAAS,EAAE,WAAW,QAAQ,eAAe,QAAQ,OAAO;AAClE,SAAO,EAAE,KAAK,QAAQ,SAAS,GAAI,OAAO,WAAW,aAAa,EAAE,SAAS,SAAS,IAAI,CAAC,EAAG;AAChG;AAGA,SAAS,iBAAiB,WAAiC;AACzD,QAAM,IAAI,UAAU;AACpB,MAAI,MAAM,QAAW;AACnB,UAAM,MACJ,EAAE,aAAa,aACX,wCACA,EAAE,oBAAoB,OACpB,yGACA;AACR,UAAM,UAAU,UAAU,YAAY,WAAW,WAAW;AAC5D,WAAO,2BAA2B,EAAE,YAAY,KAAK,GAAG,YAAO,OAAO;AAAA,EACxE;AACA,SAAO,UAAU,YAAY,SAAY,cAAc,kBAAkB,UAAU,OAAO;AAC5F;AASO,SAAS,gBAAgB,WAAiC;AAI/D,QAAM,OAAO,CAAC,MAA4B;AACxC,YAAQ,EAAE,QAAQ;AAAA,MAChB,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,SAAS;AACP,cAAM,aAAoB;AAC1B,cAAM,IAAI,MAAM,4BAA4B,KAAK,UAAU,UAAU,CAAC,EAAE;AAAA,MAC1E;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,iBAAiB,IAAI,CAAC,UAAU;AAC5C,UAAM,UAAU,UAAU,OAAO,KAAK;AACtC,UAAM,SAAS,QAAQ,WAAW,aAAa,KAAK,WAAM,QAAQ,MAAM;AACxE,WAAO,SAAS,KAAK,OAAO,CAAC,IAAI,KAAK,GAAG,MAAM;AAAA,EACjD,CAAC;AAED,SAAO,CAAC,KAAK,UAAU,GAAG,KAAK,iBAAiB,SAAS,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,IAAI;AACnF;AAgBO,IAAM,sBAAsB;AAoBnC,eAAsB,YACpB,SACA,YAAoB,oBAAoB,aAAa,GAC9B;AACvB,MAAI;AACJ,MAAI;AACF,aAAS,MAAM;AAAA,MACb,QAAQ,QAAQ,EAAE,SAAS,qBAAqB,WAAW,GAAG,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF,SAAS,QAAiB;AACxB,QAAI,kBAAkB,cAAc;AAClC,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,sBAAsB,OAAO,KAAK,MAAM,YAAY,GAAI,CAAC,CAAC;AAAA,MACpE;AAAA,IACF;AACA,UAAM,UAAU,kBAAkB,QAAQ,OAAO,UAAU,OAAO,MAAM;AACxE,WAAO,EAAE,QAAQ,UAAU,QAAQ,gBAAgB,OAAO,GAAG;AAAA,EAC/D;AAEA,MAAI,CAAC,OAAO,IAAI;AACd,WAAO,EAAE,QAAQ,UAAU,QAAQ,OAAO,MAAM,QAAQ;AAAA,EAC1D;AACA,MAAI,OAAO,MAAM,KAAK,KAAK,MAAM,IAAI;AACnC,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO,EAAE,QAAQ,WAAW;AAC9B;AAGA,IAAM,eAAN,cAA2B,MAAM;AAAC;AASlC,eAAe,aAAgB,MAAkB,WAA+B;AAC9E,MAAI;AACJ,QAAM,WAAW,IAAI,QAAe,CAAC,UAAU,WAAW;AACxD,YAAQ,WAAW,MAAM;AACvB,aAAO,IAAI,aAAa,CAAC;AAAA,IAC3B,GAAG,SAAS;AAAA,EAMd,CAAC;AAED,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,QAAQ,CAAC;AAAA,EAC5C,UAAE;AACA,QAAI,UAAU,OAAW,cAAa,KAAK;AAAA,EAC7C;AACF;","names":[]}

package/dist/{chunk-W3EXUWFG.js → chunk-72CRUGJD.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "8.110.1" : "dev";
+var VERSION = true ? "8.111.1" : "dev";
 var NODE_ENGINE_RANGE = ">=22.5.0";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -11,4 +11,4 @@ export {
   NODE_ENGINE_RANGE,
   isNodeVersionSupported
 };
-//# sourceMappingURL=chunk-W3EXUWFG.js.map
+//# sourceMappingURL=chunk-72CRUGJD.js.map

package/dist/{chunk-SSIS5P24.js → chunk-AI6WEQ23.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-WKKSNJV3.js";
+} from "./chunk-B4NMODAJ.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -21,7 +21,7 @@ import {
   hasMeasuredCategory,
   isDeclaredNeverDeprecate,
   isRegisteredToolName
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 import {
   getNexusDataDir,
   nexusDataPath
@@ -2293,4 +2293,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-SSIS5P24.js.map
+//# sourceMappingURL=chunk-AI6WEQ23.js.map

package/dist/{chunk-WKKSNJV3.js → chunk-B4NMODAJ.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-W3EXUWFG.js";
+} from "./chunk-72CRUGJD.js";
 import {
   resolveInsideRoot
 } from "./chunk-XEPZSDN5.js";
@@ -10,7 +10,7 @@ import {
 import {
   sanitizeErrorDetails,
   sanitizeStringLeaves
-} from "./chunk-22AF7TYV.js";
+} from "./chunk-CIA3WNBQ.js";
 import {
   CACHE_TIMEOUTS,
   MCP_TIMEOUTS,
@@ -27,7 +27,7 @@ import {
   getTimeProvider,
   ok,
   resolveToolClassGuardMs
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 import {
   getNexusDataDir,
   parseBoolValue
@@ -2329,4 +2329,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-WKKSNJV3.js.map
+//# sourceMappingURL=chunk-B4NMODAJ.js.map

package/dist/{chunk-22AF7TYV.js → chunk-CIA3WNBQ.js}

@@ -1,6 +1,6 @@
 import {
   redactCredentialShapes
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 
 // src/security/output-sanitizer.ts
 var REDACTED_KEY_PLACEHOLDER = "[REDACTED_KEY]";
@@ -54,4 +54,4 @@ export {
   sanitizeErrorDetails,
   sanitizeStringLeaves
 };
-//# sourceMappingURL=chunk-22AF7TYV.js.map
+//# sourceMappingURL=chunk-CIA3WNBQ.js.map

package/dist/{chunk-TAGJV5NH.js → chunk-D5H6HJFW.js}

@@ -19,16 +19,16 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-WKKSNJV3.js";
+} from "./chunk-B4NMODAJ.js";
 import {
   VERSION
-} from "./chunk-W3EXUWFG.js";
+} from "./chunk-72CRUGJD.js";
 import {
   allOf
 } from "./chunk-EZNIYU5T.js";
 import {
   isGatewayModelAdapter
-} from "./chunk-BJJOZV7O.js";
+} from "./chunk-YSHMDDDZ.js";
 import {
   UNRESOLVED_MODEL_ID,
   assessPanelIndependence,
@@ -36,29 +36,29 @@ import {
   countDistinctModels,
   createEvent,
   getGlobalRegistry
-} from "./chunk-CGPKV4KH.js";
+} from "./chunk-2WW5OIKD.js";
 import {
   ensureGatewayDiscovered
-} from "./chunk-O4QDBQI6.js";
+} from "./chunk-RP3RG4SV.js";
 import {
   getToolMemory
-} from "./chunk-BE6L6MIE.js";
+} from "./chunk-57IM5TNR.js";
 import {
   delay,
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-WKNSD7YL.js";
+} from "./chunk-2K5PKVFE.js";
 import {
   sanitizeErrorDetails,
   sanitizeOutput,
   sanitizeStringLeaves
-} from "./chunk-22AF7TYV.js";
+} from "./chunk-CIA3WNBQ.js";
 import {
   isTimeoutAbortReason,
   isTimeoutText,
   raceAbort
-} from "./chunk-ZTOTKIAO.js";
+} from "./chunk-WAZC4MM7.js";
 import {
   AgentError,
   CLI_NAMES,
@@ -100,7 +100,7 @@ import {
   resolveVoteTimeout,
   servedCostDetail,
   stepBus
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 import {
   ensureLearningDir,
   getOutcomesFile
@@ -6637,7 +6637,7 @@ function logPartialProposal(bounded, log) {
 }
 async function runContrarianCheck(proposal, log, opts) {
   try {
-    const { executeExpert } = await import("./expert-bridge-R4AM2VPK.js");
+    const { executeExpert } = await import("./expert-bridge-SL7JURER.js");
     const bounded = boundArtifactForReview(proposal, CONTRARIAN_PROPOSAL_BUDGET, "proposal");
     logPartialProposal(bounded, log);
     const result = await executeExpert("architecture", buildContrarianPrompt(bounded, opts), {
@@ -10061,4 +10061,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-TAGJV5NH.js.map
+//# sourceMappingURL=chunk-D5H6HJFW.js.map

package/dist/{chunk-LNPSEZUE.js → chunk-F7CBJAVN.js}

@@ -1,6 +1,6 @@
 import {
   SERVES_PROBE_PROMPT
-} from "./chunk-G4UBTYE3.js";
+} from "./chunk-6NMURF4A.js";
 import {
   checkGatewayHealth,
   cliFailsVerdict,
@@ -8,22 +8,22 @@ import {
   gatewaySlotServing,
   gatewayVerdict,
   printVoterTransportCheck
-} from "./chunk-C4OZ4F67.js";
+} from "./chunk-M7FBZLI5.js";
 import {
   NODE_ENGINE_RANGE,
   VERSION,
   isNodeVersionSupported
-} from "./chunk-W3EXUWFG.js";
+} from "./chunk-72CRUGJD.js";
 import {
   allOf
 } from "./chunk-EZNIYU5T.js";
 import {
   readOpenAICompatEndpoint,
   readOpenAICompatEnv
-} from "./chunk-BJJOZV7O.js";
+} from "./chunk-YSHMDDDZ.js";
 import {
   claimGlobalRegistry
-} from "./chunk-CGPKV4KH.js";
+} from "./chunk-2WW5OIKD.js";
 import {
   capitalize
 } from "./chunk-SX5DB6UR.js";
@@ -35,10 +35,10 @@ import {
   createAllAdapters,
   isCliAdmitted,
   probeCli
-} from "./chunk-WKNSD7YL.js";
+} from "./chunk-2K5PKVFE.js";
 import {
   resolveGatewayEnv
-} from "./chunk-DNXEQKBR.js";
+} from "./chunk-RG4J5IBH.js";
 import {
   getNexusTmpDir
 } from "./chunk-OITVVSWO.js";
@@ -63,7 +63,7 @@ import {
   resolveGatewayCostDeclaration,
   symbols,
   writeLine
-} from "./chunk-RIF7TUYH.js";
+} from "./chunk-KWMENWRB.js";
 import {
   getLearningDir,
   getOutcomesFile,
@@ -1383,9 +1383,10 @@ async function runDoctor(deps = {}) {
 }
 async function doctorCommand(options = {}) {
   const result = await runDoctor({ gatewayProbe: options.probe === true });
+  options.onResult?.(result);
   printDoctorResults(result);
   if (options.gateway === true || options.probe === true) {
-    const { formatGatewayReport } = await import("./doctor-gateway-report-N4H4LV2Q.js");
+    const { formatGatewayReport } = await import("./doctor-gateway-report-OQRLJBPJ.js");
     for (const line of formatGatewayReport(result.gateway, result.clis)) {
       process.stdout.write(line + "\n");
     }
@@ -1404,13 +1405,13 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-62R3ZQI4.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-BNP6T36S.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
   }
   if (!result.configFile.found) {
-    const { runConfigInitSync } = await import("./setup-config-J6YHOKO3.js");
+    const { runConfigInitSync } = await import("./setup-config-EBXHA4ZI.js");
     const configResult = runConfigInitSync(process.cwd(), false, false);
     if (configResult.success && configResult.created) {
       writeLine2(`\u2713 Generated config: ${configResult.path}`);
@@ -1506,4 +1507,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-LNPSEZUE.js.map
+//# sourceMappingURL=chunk-F7CBJAVN.js.map