nexus-agents 8.112.2 → 8.114.0

package/dist/{ast-rule-runner-UEQO7V4Y.js → ast-rule-runner-ROCJS5V5.js}

@@ -9,9 +9,9 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-DAWGZNLK.js";
+} from "./chunk-MW7YAOG7.js";
 import "./chunk-XEPZSDN5.js";
-import "./chunk-Y4ZLHASZ.js";
+import "./chunk-7S7DKO4D.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -27,4 +27,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-UEQO7V4Y.js.map
+//# sourceMappingURL=ast-rule-runner-ROCJS5V5.js.map

package/dist/{child-mcp-config-BYNNNVZF.js → child-mcp-config-CLT4G6JV.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-OITVVSWO.js";
 import {
   createLogger
-} from "./chunk-Y4ZLHASZ.js";
+} from "./chunk-7S7DKO4D.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -17,12 +17,14 @@ function resolveCliPath(override) {
   const distDir = join(__dirname, "..");
   return join(distDir, "cli.js");
 }
+var MCP_CHILD_ENV = "NEXUS_MCP_CHILD";
 function buildConfig(options) {
   const cliPath = resolveCliPath(options?.cliPath);
   const entry = {
     command: "node",
     args: [cliPath, "--mode=server"],
-    ...options?.env !== void 0 ? { env: options.env } : {}
+    // The child marker is applied LAST so caller-supplied env cannot unset it.
+    env: { ...options?.env, [MCP_CHILD_ENV]: "1" }
   };
   return {
     mcpServers: {
@@ -47,4 +49,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-BYNNNVZF.js.map
+//# sourceMappingURL=child-mcp-config-CLT4G6JV.js.map

package/dist/child-mcp-config-CLT4G6JV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli-adapters/child-mcp-config.ts"],"sourcesContent":["/**\n * nexus-agents/cli-adapters - Child CLI MCP Config Generator\n *\n * Generates MCP server configuration for child Claude CLI sessions so\n * spawned agents can call back into nexus-agents' MCP tools (memory,\n * research, etc.). Used by `pipeline/expert-bridge.ts` to give expert\n * agents tool access. Originally lived under `swe-bench/` (#1413);\n * relocated here in #2515 — the helper is generic CLI-spawn\n * infrastructure, not benchmark-specific.\n *\n * The generated config grants NO tool approvals. It only tells the child\n * where the nexus-agents MCP server is; whether an expert may actually call\n * one of its tools follows the host's Claude permission settings (for\n * example `defaultMode`). Measured 2026-09-24: in auto mode the calls run,\n * in default mode they are refused (#6784). An unused `allowedTools` list\n * that read like a guard but was never passed to the CLI was removed then.\n *\n * @module cli-adapters/child-mcp-config\n */\n\nimport { writeFile, rm } from 'node:fs/promises';\nimport { nexusMkdtemp } from '../config/nexus-tmp-dir.js';\nimport { join } from 'node:path';\nimport { createLogger } from '../core/index.js';\n\nconst logger = createLogger({ component: 'swe-bench-mcp-config' });\n\n/**\n * MCP server entry in Claude CLI config format.\n */\ninterface McpServerEntry {\n  readonly command: string;\n  readonly args: readonly string[];\n  readonly env?: Readonly<Record<string, string>>;\n}\n\n/**\n * MCP config file format for Claude CLI (--mcp-config).\n */\ninterface McpConfigFile {\n  readonly mcpServers: Readonly<Record<string, McpServerEntry>>;\n}\n\n/**\n * Options for generating MCP config.\n */\nexport interface McpConfigOptions {\n  /** Path to nexus-agents CLI entry point. */\n  readonly cliPath?: string;\n  /** Additional environment variables for the MCP server. */\n  readonly env?: Readonly<Record<string, string>>;\n}\n\n/**\n * Resolves the nexus-agents CLI path.\n * Uses the built dist/cli.js relative to this package.\n */\nfunction resolveCliPath(override?: string): string {\n  if (override !== undefined) return override;\n  // Resolve relative to this file: src/swe-bench/ → dist/cli.js\n  // At runtime we're in dist/swe-bench/, so go up one level\n  const distDir = join(__dirname, '..');\n  return join(distDir, 'cli.js');\n}\n\n/**\n * Env marker naming a child server (#6795). The child's stdio caller is an\n * expert CLI driven by a model, not the operator, so the child must not\n * measure it at tier 1; `connectTransport` reads this and records the caller\n * as unmeasured.\n */\nconst MCP_CHILD_ENV = 'NEXUS_MCP_CHILD';\n\n/**\n * Builds the MCP config object for a nexus-agents server.\n */\nfunction buildConfig(options?: McpConfigOptions): McpConfigFile {\n  const cliPath = resolveCliPath(options?.cliPath);\n\n  const entry: McpServerEntry = {\n    command: 'node',\n    args: [cliPath, '--mode=server'],\n    // The child marker is applied LAST so caller-supplied env cannot unset it.\n    env: { ...options?.env, [MCP_CHILD_ENV]: '1' },\n  };\n\n  return {\n    mcpServers: {\n      'nexus-agents': entry,\n    },\n  };\n}\n\n/**\n * Generated MCP config with path and cleanup function.\n */\nexport interface GeneratedMcpConfig {\n  /** Path to the generated config file. */\n  readonly configPath: string;\n  /** Cleanup function to remove temp files. */\n  readonly cleanup: () => Promise<void>;\n}\n\n/**\n * Generates an MCP config file for Claude CLI child sessions.\n *\n * Creates a temporary JSON file that can be passed to `claude --mcp-config`.\n * Returns the file path and a cleanup function.\n */\nexport async function generateMcpConfig(options?: McpConfigOptions): Promise<GeneratedMcpConfig> {\n  const config = buildConfig(options);\n\n  const tempDir = await nexusMkdtemp('nexus-mcp-');\n  const configPath = join(tempDir, 'mcp-config.json');\n\n  await writeFile(configPath, JSON.stringify(config, null, 2), 'utf-8');\n\n  const cleanup = async (): Promise<void> => {\n    await rm(tempDir, { recursive: true, force: true }).catch((e: unknown) => {\n      logger.debug('Best-effort cleanup failed', {\n        error: e instanceof Error ? e.message : String(e),\n      });\n    });\n  };\n\n  return { configPath, cleanup };\n}\n"],"mappings":";;;;;;;;;;;AAoBA,SAAS,WAAW,UAAU;AAE9B,SAAS,YAAY;AAGrB,IAAM,SAAS,aAAa,EAAE,WAAW,uBAAuB,CAAC;AAgCjE,SAAS,eAAe,UAA2B;AACjD,MAAI,aAAa,OAAW,QAAO;AAGnC,QAAM,UAAU,KAAK,WAAW,IAAI;AACpC,SAAO,KAAK,SAAS,QAAQ;AAC/B;AAQA,IAAM,gBAAgB;AAKtB,SAAS,YAAY,SAA2C;AAC9D,QAAM,UAAU,eAAe,SAAS,OAAO;AAE/C,QAAM,QAAwB;AAAA,IAC5B,SAAS;AAAA,IACT,MAAM,CAAC,SAAS,eAAe;AAAA;AAAA,IAE/B,KAAK,EAAE,GAAG,SAAS,KAAK,CAAC,aAAa,GAAG,IAAI;AAAA,EAC/C;AAEA,SAAO;AAAA,IACL,YAAY;AAAA,MACV,gBAAgB;AAAA,IAClB;AAAA,EACF;AACF;AAkBA,eAAsB,kBAAkB,SAAyD;AAC/F,QAAM,SAAS,YAAY,OAAO;AAElC,QAAM,UAAU,MAAM,aAAa,YAAY;AAC/C,QAAM,aAAa,KAAK,SAAS,iBAAiB;AAElD,QAAM,UAAU,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,OAAO;AAEpE,QAAM,UAAU,YAA2B;AACzC,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC,EAAE,MAAM,CAAC,MAAe;AACxE,aAAO,MAAM,8BAA8B;AAAA,QACzC,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,MAClD,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,YAAY,QAAQ;AAC/B;","names":[]}

package/dist/{chunk-DAYX7FLQ.js → chunk-2PTEHHTT.js}

@@ -4,7 +4,7 @@ import {
 import {
   assessReputation,
   sanitizeInput
-} from "./chunk-27E5O3GY.js";
+} from "./chunk-F2MBHW5Y.js";
 import {
   allOf
 } from "./chunk-EZNIYU5T.js";
@@ -13,7 +13,7 @@ import {
   err,
   getTimeProvider,
   ok
-} from "./chunk-Y4ZLHASZ.js";
+} from "./chunk-7S7DKO4D.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
 import { randomUUID } from "node:crypto";
@@ -477,4 +477,4 @@ export {
   createFailedReview,
   reviewPostingBlock
 };
-//# sourceMappingURL=chunk-DAYX7FLQ.js.map
+//# sourceMappingURL=chunk-2PTEHHTT.js.map

package/dist/{chunk-JLOW2KAD.js → chunk-2RXTHEUD.js}

@@ -1,20 +1,20 @@
 import {
   ensureGatewayDiscovered,
   gatewayDiscoveryGeneration
-} from "./chunk-LYZ2OXI7.js";
+} from "./chunk-X3S62T3S.js";
 import {
   createAutoAdapter
-} from "./chunk-3E4J3EE6.js";
+} from "./chunk-VWXR7HKU.js";
 import {
   getDefaultCliCircuitBreakerRegistry,
   mapModelErrorToCategory
-} from "./chunk-GFNUYOCY.js";
+} from "./chunk-NMJV4JR4.js";
 import {
   CircularBuffer,
   ConfigError,
   ModelError,
   TASK_SPECIALIZATION_MATRIX,
-  canonicalVersionKey,
+  UNRESOLVED_MODEL_ID,
   createLogger,
   detectTaskCategory,
   err,
@@ -31,42 +31,9 @@ import {
   isRateLimitLikeError,
   ok,
   recordRateLimitEvent,
-  resolveModelIdentitySync,
   toRateLimitError,
   warnIfGatewayCostUndeclared
-} from "./chunk-Y4ZLHASZ.js";
-
-// src/config/model-equivalence.ts
-var VARIANT_QUIRKS = /* @__PURE__ */ new Set(["small", "image"]);
-function canonicalModelKey(modelId) {
-  if (modelId === "") return null;
-  const identity = resolveModelIdentitySync(modelId);
-  if (identity.vendor === "unknown" || identity.family === "unknown") return null;
-  const version = identity.version === void 0 ? "" : canonicalVersionKey(identity.version);
-  const variant = identity.quirks.filter((q) => VARIANT_QUIRKS.has(q)).sort().join("-");
-  return variant === "" ? `${identity.vendor}|${identity.family}|${version}` : `${identity.vendor}|${identity.family}|${version}|${variant}`;
-}
-function countDistinctModels(modelIds) {
-  const distinct = /* @__PURE__ */ new Set();
-  for (const id of modelIds) {
-    const key = canonicalModelKey(id);
-    distinct.add(key ?? `raw:${id}`);
-  }
-  return distinct.size;
-}
-var UNRESOLVED_MODEL_ID = "pending-detection";
-function assessPanelIndependence(modelIds) {
-  const resolved = modelIds.filter(
-    (id) => typeof id === "string" && id !== "" && id !== UNRESOLVED_MODEL_ID
-  );
-  const unresolved = modelIds.length - resolved.length;
-  if (unresolved > 0 || modelIds.length === 0) {
-    return { kind: "unmeasured", unresolved, total: modelIds.length };
-  }
-  const distinct = countDistinctModels(resolved);
-  if (distinct === 1) return { kind: "collapsed", model: resolved[0] ?? "" };
-  return { kind: "diverse", distinct };
-}
+} from "./chunk-7S7DKO4D.js";
 
 // src/agents/collaboration/event-bus-helpers.ts
 import { randomUUID } from "node:crypto";
@@ -1062,10 +1029,6 @@ function resetGlobalRegistry() {
 }
 
 export {
-  canonicalModelKey,
-  countDistinctModels,
-  UNRESOLVED_MODEL_ID,
-  assessPanelIndependence,
   getGlobalEventBus,
   createEvent,
   EventTopics,
@@ -1076,4 +1039,4 @@ export {
   getGlobalRegistry,
   resetGlobalRegistry
 };
-//# sourceMappingURL=chunk-JLOW2KAD.js.map
+//# sourceMappingURL=chunk-2RXTHEUD.js.map

package/dist/chunk-2RXTHEUD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agents/collaboration/event-bus-helpers.ts","../src/agents/collaboration/event-bus.ts","../src/agents/collaboration/event-bus-topics.ts","../src/adapters/resilient-adapter.ts","../src/adapters/model-bound-adapter.ts","../src/adapters/unified-registry.ts"],"sourcesContent":["/**\n * Event Bus Helper Functions\n *\n * Pure utility functions for event bus operations.\n * Extracted from event-bus.ts to maintain file size limits.\n *\n * @module agents/collaboration/event-bus-helpers\n * (Source: Issue #182, ARCHITECTURE.md Hybrid Architecture)\n */\n\nimport { randomUUID } from 'node:crypto';\nimport { getTimeProvider } from '../../core/index.js';\nimport type { SubscriptionId, TopicPattern, DomainEvent, EventFilter } from './event-bus-types.js';\n\n/** Default maximum history size */\nexport const DEFAULT_MAX_HISTORY_SIZE = 1000;\n\n/** Maximum number of subscriptions per bus */\nexport const MAX_SUBSCRIPTIONS = 500;\n\n/**\n * Internal subscription record.\n */\nexport interface SubscriptionRecord {\n  readonly id: SubscriptionId;\n  readonly pattern: TopicPattern;\n  readonly regex: RegExp;\n  readonly listener: (event: DomainEvent) => void | Promise<void>;\n}\n\n/** Maximum allowed topic pattern length */\nconst MAX_TOPIC_PATTERN_LENGTH = 200;\n\n/**\n * Convert a topic pattern to a regex for matching.\n * Supports wildcard patterns:\n * - 'session.created' -> exact match\n * - 'session.*' -> matches session.anything\n * - '*' -> matches everything\n *\n * Security Note (Issue #341): This function is safe from ReDoS because:\n * 1. The input is fully escaped before regex construction\n * 2. Only `*` wildcards are converted to `[^.]+` (bounded, non-greedy)\n * 3. Pattern length is bounded to prevent memory issues\n *\n * @throws Error if pattern exceeds MAX_TOPIC_PATTERN_LENGTH\n */\nexport function patternToRegex(pattern: TopicPattern): RegExp {\n  // Validate length to prevent memory issues (Issue #341)\n  if (pattern.length > MAX_TOPIC_PATTERN_LENGTH) {\n    throw new Error(`Topic pattern exceeds maximum length of ${String(MAX_TOPIC_PATTERN_LENGTH)}`);\n  }\n\n  if (pattern === '*') {\n    return /^.+$/;\n  }\n  // Use placeholder for * before escaping, then restore as regex wildcard\n  // WILDCARD_PLACEHOLDER is a static constant, safe for RegExp (Issue #341)\n  const WILDCARD_PLACEHOLDER = '\\x00WILDCARD\\x00';\n  const withPlaceholder = pattern.replace(/\\*/g, WILDCARD_PLACEHOLDER);\n  // Escape all regex special characters - this makes the pattern safe\n  const escaped = withPlaceholder.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&');\n  // Replace placeholder with bounded wildcard - safe since input was escaped\n  const withWildcards = escaped.replace(new RegExp(WILDCARD_PLACEHOLDER, 'g'), '[^.]+');\n  return new RegExp(`^${withWildcards}$`);\n}\n\n/**\n * Check if a topic matches a pattern.\n */\nexport function topicMatchesPattern(topic: string, regex: RegExp): boolean {\n  return regex.test(topic);\n}\n\n/**\n * Generate a unique event ID.\n */\nexport function generateEventId(): string {\n  return `evt-${String(getTimeProvider().now())}-${randomUUID().slice(0, 8)}`;\n}\n\n/**\n * Generate a unique subscription ID.\n */\nexport function generateSubscriptionId(): SubscriptionId {\n  return `sub-${String(getTimeProvider().now())}-${randomUUID().slice(0, 8)}`;\n}\n\n/**\n * Generate a unique correlation ID for request tracing.\n * (Source: Issue #224, Sprint #228)\n *\n * @example\n * ```typescript\n * const correlationId = generateCorrelationId();\n * // -> 'cor_a1b2c3d4'\n * ```\n */\nexport function generateCorrelationId(): string {\n  return `cor_${randomUUID().slice(0, 8)}`;\n}\n\n/**\n * Create a child correlation ID that chains to a parent.\n * Enables hierarchical tracing of subtasks.\n * (Source: Issue #224, Sprint #228)\n *\n * @param parentCorrelationId - The parent correlation ID to chain from\n * @returns A new correlation ID in format 'parentId.child_xxxxxxxx'\n *\n * @example\n * ```typescript\n * const parentId = generateCorrelationId();\n * // -> 'cor_a1b2c3d4'\n *\n * const childId = createChildCorrelationId(parentId);\n * // -> 'cor_a1b2c3d4.child_e5f6g7h8'\n * ```\n */\nexport function createChildCorrelationId(parentCorrelationId: string): string {\n  return `${parentCorrelationId}.child_${randomUUID().slice(0, 8)}`;\n}\n\n/**\n * Apply topic, session, correlation, and timestamp filters to events.\n */\nexport function applyHistoryFilters(history: DomainEvent[], filter: EventFilter): DomainEvent[] {\n  let result: DomainEvent[] = history;\n\n  if (filter.topic !== undefined && filter.topic !== '') {\n    const regex = patternToRegex(filter.topic);\n    result = result.filter((e) => topicMatchesPattern(e.topic, regex));\n  }\n\n  if (filter.sessionId !== undefined && filter.sessionId !== '') {\n    result = result.filter((e) => e.sessionId === filter.sessionId);\n  }\n\n  if (filter.correlationId !== undefined && filter.correlationId !== '') {\n    result = result.filter((e) => e.correlationId === filter.correlationId);\n  }\n\n  return applyTimestampFilters(result, filter);\n}\n\n/**\n * Apply timestamp-based filters to events.\n */\nexport function applyTimestampFilters(result: DomainEvent[], filter: EventFilter): DomainEvent[] {\n  let filtered = result;\n\n  if (filter.after !== undefined && filter.after !== '') {\n    const afterTimestamp = filter.after;\n    filtered = filtered.filter((e) => e.timestamp > afterTimestamp);\n  }\n\n  if (filter.before !== undefined && filter.before !== '') {\n    const beforeTimestamp = filter.before;\n    filtered = filtered.filter((e) => e.timestamp < beforeTimestamp);\n  }\n\n  return filtered;\n}\n\n/**\n * Apply limit to history results.\n */\nexport function applyHistoryLimit(result: DomainEvent[], filter: EventFilter): DomainEvent[] {\n  if (filter.limit !== undefined && filter.limit > 0) {\n    return result.slice(-filter.limit);\n  }\n  return result;\n}\n\n/**\n * Enrich event with generated fields if missing.\n */\nexport function enrichEvent(event: DomainEvent): DomainEvent {\n  return {\n    ...event,\n    eventId: event.eventId || generateEventId(),\n    timestamp: event.timestamp || getTimeProvider().nowIso(),\n  };\n}\n\n/**\n * Count subscribers matching a topic from a subscription map.\n */\nexport function countMatchingSubscribers(\n  topic: string,\n  subscriptions: Map<SubscriptionId, SubscriptionRecord>\n): number {\n  let count = 0;\n  for (const record of subscriptions.values()) {\n    if (topicMatchesPattern(topic, record.regex)) {\n      count++;\n    }\n  }\n  return count;\n}\n","/**\n * Event Bus Implementation\n *\n * Async message passing for agent-to-agent communication.\n * Supports topic-based routing, wildcard patterns, and event history.\n *\n * @module agents/collaboration/event-bus\n * (Source: Issue #182, ARCHITECTURE.md Hybrid Architecture)\n */\n\nimport { getTimeProvider } from '../../core/index.js';\nimport type {\n  ICollaborationEventBus,\n  DomainEvent,\n  EventListener,\n  Subscription,\n  SubscriptionId,\n  TopicPattern,\n  EventFilter,\n  EventBusOptions,\n  EventBusStats,\n} from './event-bus-types.js';\n\nimport {\n  DEFAULT_MAX_HISTORY_SIZE,\n  MAX_SUBSCRIPTIONS,\n  type SubscriptionRecord,\n  patternToRegex,\n  topicMatchesPattern,\n  generateEventId,\n  generateSubscriptionId,\n  applyHistoryFilters,\n  applyHistoryLimit,\n  enrichEvent,\n  countMatchingSubscribers,\n} from './event-bus-helpers.js';\n\nimport { CircularBuffer } from '../../core/circular-buffer.js';\n\n// Re-export correlation ID helpers for public API\nexport { generateCorrelationId, createChildCorrelationId } from './event-bus-helpers.js';\n\n/**\n * Event Bus for agent-to-agent communication.\n *\n * Features:\n * - Topic-based pub/sub with wildcard support\n * - Async and sync event emission\n * - Event history with filtering\n * - Error isolation (one listener failure doesn't block others)\n *\n * @example\n * ```typescript\n * const bus = new CollaborationEventBus();\n *\n * // Subscribe to all session events\n * const sub = bus.subscribe('session.*', (event) => {\n *   console.log('Session event:', event.topic);\n * });\n *\n * // Emit an event\n * bus.emit(createSessionCreatedEvent({ sessionId: '123', ... }));\n *\n * // Cleanup\n * sub.unsubscribe();\n * ```\n */\nexport class CollaborationEventBus implements ICollaborationEventBus {\n  private readonly subscriptions: Map<SubscriptionId, SubscriptionRecord> = new Map();\n  private readonly history: CircularBuffer<DomainEvent>;\n  private readonly asyncHandling: boolean;\n  private readonly logger?: EventBusOptions['logger'];\n\n  private stats: EventBusStats = {\n    eventsEmitted: 0,\n    subscriptionsCreated: 0,\n    activeSubscriptions: 0,\n    historySize: 0,\n    errorCount: 0,\n  };\n\n  constructor(options: EventBusOptions = {}) {\n    const maxHistorySize = options.maxHistorySize ?? DEFAULT_MAX_HISTORY_SIZE;\n    this.history = new CircularBuffer<DomainEvent>(maxHistorySize);\n    this.asyncHandling = options.asyncHandling ?? false;\n    this.logger = options.logger;\n  }\n\n  /**\n   * Emit an event synchronously to all matching subscribers.\n   */\n  emit(event: DomainEvent): void {\n    const enrichedEvent = enrichEvent(event);\n    this.addToHistory(enrichedEvent);\n    this.stats.eventsEmitted++;\n\n    this.logger?.debug('Event emitted', {\n      topic: enrichedEvent.topic,\n      eventId: enrichedEvent.eventId,\n      subscriberCount: countMatchingSubscribers(enrichedEvent.topic, this.subscriptions),\n    });\n\n    for (const record of this.subscriptions.values()) {\n      if (topicMatchesPattern(enrichedEvent.topic, record.regex)) {\n        this.invokeListener(record, enrichedEvent);\n      }\n    }\n  }\n\n  /**\n   * Emit an event and wait for all async handlers to complete.\n   */\n  async emitAsync(event: DomainEvent): Promise<void> {\n    const enrichedEvent = enrichEvent(event);\n    this.addToHistory(enrichedEvent);\n    this.stats.eventsEmitted++;\n\n    this.logger?.debug('Async event emitted', {\n      topic: enrichedEvent.topic,\n      eventId: enrichedEvent.eventId,\n    });\n\n    const promises: Promise<void>[] = [];\n\n    for (const record of this.subscriptions.values()) {\n      if (topicMatchesPattern(enrichedEvent.topic, record.regex)) {\n        promises.push(this.invokeListenerAsync(record, enrichedEvent));\n      }\n    }\n\n    await Promise.all(promises);\n  }\n\n  /**\n   * Subscribe to events matching a topic pattern.\n   */\n  subscribe<T extends DomainEvent = DomainEvent>(\n    pattern: TopicPattern,\n    listener: EventListener<T>\n  ): Subscription {\n    if (this.subscriptions.size >= MAX_SUBSCRIPTIONS) {\n      throw new Error(\n        `Maximum subscription limit reached (${String(MAX_SUBSCRIPTIONS)}). ` +\n          'Unsubscribe from unused patterns before adding new ones.'\n      );\n    }\n\n    const id = generateSubscriptionId();\n    const regex = patternToRegex(pattern);\n\n    const record: SubscriptionRecord = {\n      id,\n      pattern,\n      regex,\n      listener: listener as EventListener,\n    };\n\n    this.subscriptions.set(id, record);\n    this.stats.subscriptionsCreated++;\n    this.stats.activeSubscriptions = this.subscriptions.size;\n\n    this.logger?.debug('Subscription created', { id, pattern });\n\n    return {\n      id,\n      pattern,\n      unsubscribe: () => {\n        this.unsubscribe(id);\n      },\n    };\n  }\n\n  /**\n   * Unsubscribe from events.\n   */\n  unsubscribe(subscriptionId: SubscriptionId): void {\n    const existed = this.subscriptions.delete(subscriptionId);\n    if (existed) {\n      this.stats.activeSubscriptions = this.subscriptions.size;\n      this.logger?.debug('Subscription removed', { subscriptionId });\n    }\n  }\n\n  /**\n   * Get event history matching filter criteria.\n   */\n  getHistory(filter?: EventFilter): readonly DomainEvent[] {\n    const historyArray = this.history.toArray();\n    if (filter === undefined) {\n      return historyArray;\n    }\n\n    const filtered = applyHistoryFilters(historyArray, filter);\n    return applyHistoryLimit(filtered, filter);\n  }\n\n  /**\n   * Clear event history.\n   */\n  clearHistory(): void {\n    this.history.clear();\n    this.stats.historySize = 0;\n    this.logger?.debug('History cleared');\n  }\n\n  /**\n   * Get event bus statistics.\n   */\n  getStats(): EventBusStats {\n    return { ...this.stats };\n  }\n\n  /**\n   * Check if a topic pattern has any subscribers.\n   */\n  hasSubscribers(pattern: TopicPattern): boolean {\n    const regex = patternToRegex(pattern);\n    for (const record of this.subscriptions.values()) {\n      // Check if the patterns could overlap\n      if (\n        topicMatchesPattern(pattern, record.regex) ||\n        topicMatchesPattern(record.pattern, regex)\n      ) {\n        return true;\n      }\n    }\n    return false;\n  }\n\n  /**\n   * Add event to history, maintaining size limit via O(1) circular buffer.\n   * @see Issue #407 - Performance optimization\n   */\n  private addToHistory(event: DomainEvent): void {\n    this.history.push(event);\n    this.stats.historySize = this.history.size;\n  }\n\n  /**\n   * Invoke a listener synchronously with error isolation.\n   */\n  private invokeListener(record: SubscriptionRecord, event: DomainEvent): void {\n    try {\n      const result = record.listener(event);\n      // If async handling is enabled and listener returns a promise, don't wait\n      if (this.asyncHandling && result instanceof Promise) {\n        result.catch((error: unknown) => {\n          this.handleListenerError(record, event, error);\n        });\n      }\n    } catch (error) {\n      this.handleListenerError(record, event, error);\n    }\n  }\n\n  /**\n   * Invoke a listener asynchronously.\n   */\n  private async invokeListenerAsync(record: SubscriptionRecord, event: DomainEvent): Promise<void> {\n    try {\n      await record.listener(event);\n    } catch (error) {\n      this.handleListenerError(record, event, error);\n    }\n  }\n\n  /**\n   * Handle listener errors without disrupting other listeners.\n   */\n  private handleListenerError(\n    record: SubscriptionRecord,\n    event: DomainEvent,\n    error: unknown\n  ): void {\n    this.stats.errorCount++;\n    const errorObj = error instanceof Error ? error : new Error(String(error));\n    this.logger?.error('Event listener error', errorObj, {\n      subscriptionId: record.id,\n      pattern: record.pattern,\n      eventTopic: event.topic,\n      eventId: event.eventId,\n    });\n  }\n}\n\n/**\n * Create a singleton event bus instance for global coordination.\n * Use with caution - prefer dependency injection for testability.\n */\nlet globalBus: CollaborationEventBus | null = null;\n\nexport function getGlobalEventBus(options?: EventBusOptions): CollaborationEventBus {\n  globalBus ??= new CollaborationEventBus(options);\n  return globalBus;\n}\n\n/**\n * Reset the global event bus (for testing).\n */\nexport function resetGlobalEventBus(): void {\n  globalBus = null;\n}\n\n/**\n * Factory functions for creating typed events.\n */\nexport function createEvent<T extends DomainEvent>(\n  topic: T['topic'],\n  payload: T['payload'],\n  options?: {\n    sessionId?: string;\n    correlationId?: string;\n  }\n): T {\n  return {\n    eventId: generateEventId(),\n    timestamp: getTimeProvider().nowIso(),\n    topic,\n    payload,\n    sessionId: options?.sessionId,\n    correlationId: options?.correlationId,\n  } as T;\n}\n","/**\n * Event Bus Topic Constants\n *\n * Type-safe topic constants for event subscription.\n *\n * @module agents/collaboration/event-bus-topics\n * (Source: Issue #182, ARCHITECTURE.md Hybrid Architecture)\n */\n\n/**\n * Topic constants for type-safe subscription.\n */\nexport const EventTopics = {\n  // Session events\n  SESSION_CREATED: 'session.created',\n  SESSION_STATUS_CHANGED: 'session.status_changed',\n  SESSION_PARTICIPANT_JOINED: 'session.participant_joined',\n  SESSION_RESULT_SUBMITTED: 'session.result_submitted',\n  SESSION_FINALIZED: 'session.finalized',\n  SESSION_ALL: 'session.*',\n\n  // Message events\n  MESSAGE_SENT: 'message.sent',\n  MESSAGE_RECEIVED: 'message.received',\n  MESSAGE_ALL: 'message.*',\n\n  // Agent events\n  AGENT_TASK_DELEGATED: 'agent.task_delegated',\n  AGENT_RESULT_BROADCAST: 'agent.result_broadcast',\n  AGENT_ALL: 'agent.*',\n\n  // Consensus events\n  CONSENSUS_VOTE_REQUESTED: 'consensus.vote_requested',\n  CONSENSUS_VOTE_CAST: 'consensus.vote_cast',\n  CONSENSUS_REACHED: 'consensus.reached',\n  CONSENSUS_ALL: 'consensus.*',\n\n  // Protocol events\n  PROTOCOL_STARTED: 'protocol.started',\n  PROTOCOL_ITERATION: 'protocol.iteration',\n  PROTOCOL_COMPLETED: 'protocol.completed',\n  PROTOCOL_ALL: 'protocol.*',\n\n  // Aegean phase events (Issue #216)\n  AEGEAN_ROUND_STARTED: 'protocol.aegean.round_started',\n  AEGEAN_VOTE_COLLECTED: 'protocol.aegean.vote_collected',\n  AEGEAN_QUORUM_DETECTED: 'protocol.aegean.quorum_detected',\n  AEGEAN_ALL: 'protocol.aegean.*',\n\n  // Reflexion phase events (Issue #216)\n  REFLEXION_CRITIQUE_STARTED: 'protocol.reflexion.critique_started',\n  REFLEXION_CRITIQUE_COMPLETED: 'protocol.reflexion.critique_completed',\n  REFLEXION_SYNTHESIS: 'protocol.reflexion.synthesis',\n  REFLEXION_ALL: 'protocol.reflexion.*',\n\n  // Trinity phase events (Issue #216)\n  TRINITY_PHASE_STARTED: 'protocol.trinity.phase_started',\n  TRINITY_PHASE_COMPLETED: 'protocol.trinity.phase_completed',\n  TRINITY_ALL: 'protocol.trinity.*',\n\n  // Byzantine detection events (Issue #218)\n  BYZANTINE_WEIGHT_UPDATED: 'byzantine.weight_updated',\n  BYZANTINE_PATTERN_DETECTED: 'byzantine.pattern_detected',\n  BYZANTINE_AGENT_FLAGGED: 'byzantine.agent_flagged',\n  BYZANTINE_COLLUSION_SUSPECTED: 'byzantine.collusion_suspected',\n  BYZANTINE_ALL: 'byzantine.*',\n\n  // Wildcard\n  ALL: '*',\n} as const;\n","/**\n * Resilient Model Adapter\n *\n * Transparent proxy implementing IModelAdapter with lazy detection,\n * automatic failover on circuit breaker events, and observable health.\n *\n * Key design: ResilientAdapter IS an IModelAdapter. Every existing consumer\n * works unchanged. The health/failover API lives on IResilientAdapter for\n * dashboard and monitoring consumers only.\n *\n * @module adapters/resilient-adapter\n * (Source: Issue #811 - Resilient model adapter architecture)\n */\n\nimport type {\n  IModelAdapter,\n  CompletionRequest,\n  CompletionResponse,\n  StreamChunk,\n  ModelCapability,\n} from '../core/types/model.js';\nimport type { Result } from '../core/result.js';\nimport { ok, err } from '../core/result.js';\nimport { ModelError, ConfigError } from '../core/errors.js';\nimport type { ILogger } from '../core/index.js';\nimport { getTimeProvider, getRandomProvider } from '../core/index.js';\nimport { getErrorMessage, createLogger } from '../core/index.js';\nimport { UNRESOLVED_MODEL_ID } from '../config/model-equivalence.js';\n\nimport { createAutoAdapter, type AdapterSelection } from './auto-adapter.js';\nimport { isCallerCancelled } from './abort-utils.js';\nimport { ensureGatewayDiscovered, gatewayDiscoveryGeneration } from './gateway-rediscovery.js';\nimport {\n  isRateLimitLikeError,\n  isDurableCapacityError,\n  toRateLimitError,\n  recordRateLimitEvent,\n} from './rate-limit-detector.js';\nimport type { CliName, EndpointArmId } from '../cli-adapters/types.js';\nimport { isEndpointArmId } from '../cli-adapters/types.js';\nimport type {\n  IResilientAdapter,\n  AdapterHealthInfo,\n  ResilientAdapterConfig,\n} from './resilient-adapter-types.js';\nimport type { CircuitStateChangeEvent } from '../cli-adapters/circuit-breaker-types.js';\nimport type { CircuitBreakerRegistry } from '../cli-adapters/circuit-breaker.js';\nimport { mapModelErrorToCategory } from '../cli-adapters/circuit-breaker.js';\nimport { getGlobalEventBus } from '../core/event-bus.js';\n\n// ============================================================================\n// Factory\n// ============================================================================\n\n/**\n * Creates a resilient adapter with lazy detection and automatic failover.\n *\n * @example\n * ```typescript\n * const adapter = createResilientAdapter({ logger });\n * // No detection at creation time — detection happens on first use\n * const result = await adapter.complete(request); // triggers detection\n * ```\n */\nexport function createResilientAdapter(config?: ResilientAdapterConfig): IResilientAdapter {\n  return new ResilientAdapter(config);\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Resilient adapter proxy. Implements IModelAdapter transparently.\n */\nexport class ResilientAdapter implements IResilientAdapter {\n  private readonly logger: ILogger;\n  private currentAdapter: IModelAdapter | undefined;\n  private currentSelection: AdapterSelection | undefined;\n  private hasEverDetected = false;\n  private health: AdapterHealthInfo | undefined;\n  private preferredCli: CliName | undefined;\n  private readonly failoverCallbacks = new Set<(info: AdapterHealthInfo) => void>();\n  private circuitBreakerRegistry: CircuitBreakerRegistry | undefined;\n  private circuitListener: ((event: CircuitStateChangeEvent) => void) | undefined;\n  private disposed = false;\n  private readonly defaultCliTimeoutMs: number | undefined;\n  /** Inflight detection promise for coalescing concurrent calls (Issue #1423). */\n  private detectionPromise: Promise<IModelAdapter | undefined> | undefined;\n  /** The {@link gatewayDiscoveryGeneration} the current selection was made under (#6659). */\n  private detectedAtGeneration = 0;\n\n  constructor(config?: ResilientAdapterConfig) {\n    this.logger = config?.logger ?? createLogger({ component: 'resilient-adapter' });\n    this.preferredCli = config?.preferredCli;\n    this.defaultCliTimeoutMs = config?.defaultCliTimeoutMs;\n\n    // #4659: arm at construction. The previous `attach`-only API was not on\n    // IResilientAdapter, so neither production construction site could reach\n    // it and the breaker never fired.\n    if (config?.circuitBreakerRegistry !== undefined) {\n      this.attachCircuitBreakerRegistry(config.circuitBreakerRegistry);\n    }\n  }\n\n  // --- IModelAdapter properties (forwarded) ---\n\n  /**\n   * Before detection a CLI-pinned proxy identifies as the CLI it was asked\n   * for (`cli-<name>`, the id its detected `CliToModelAdapter` will carry);\n   * an unpinned proxy stays `resilient-proxy`.\n   *\n   * #6119: the voter fallover (#3587) keys seats by this id and skips a seat\n   * whose key equals the fallback's. When codex never detected, the pinned\n   * seat and the unpinned default were BOTH `resilient-proxy`, so the seat was\n   * read as \"already on the fallback\" and errored instead of falling over.\n   */\n  get providerId(): string {\n    if (this.currentAdapter !== undefined) return this.currentAdapter.providerId;\n    return this.preferredCli === undefined ? 'resilient-proxy' : `cli-${this.preferredCli}`;\n  }\n\n  get modelId(): string {\n    return this.currentAdapter?.modelId ?? UNRESOLVED_MODEL_ID;\n  }\n\n  get capabilities(): readonly ModelCapability[] {\n    return this.currentAdapter?.capabilities ?? [];\n  }\n\n  /**\n   * The gateway arm of the adapter currently serving this proxy, when a\n   * gateway model serves it (#6604 family slots); otherwise undefined. A\n   * telemetry writer handed this proxy reads it (`isGatewayModelAdapter`) to\n   * price the call by the gateway's `NEXUS_GATEWAY_COST` declaration instead\n   * of a list price.\n   */\n  get gatewayArm(): EndpointArmId | undefined {\n    const arm: unknown = (this.currentAdapter as { gatewayArm?: unknown } | undefined)?.gatewayArm;\n    return typeof arm === 'string' && isEndpointArmId(arm) ? arm : undefined;\n  }\n\n  // --- IModelAdapter methods ---\n\n  async complete(request: CompletionRequest): Promise<Result<CompletionResponse, ModelError>> {\n    const adapter = await this.ensureAdapter();\n    if (adapter === undefined) {\n      return err(new ModelError('No model adapter available'));\n    }\n    const result = await adapter.complete(request);\n    if (!result.ok) {\n      if (isRateLimitLikeError(result.error)) {\n        const rlError = toRateLimitError(result.error, adapter.providerId);\n        recordRateLimitEvent({\n          provider: adapter.providerId,\n          timestamp: getTimeProvider().now(),\n          retryAfterMs: rlError.retryAfterMs,\n        });\n        this.logger.warn('Rate limit detected', {\n          provider: adapter.providerId,\n          retryAfterMs: rlError.retryAfterMs,\n        });\n      }\n      this.recordBreakerFailure(adapter, result.error);\n    }\n    return result;\n  }\n\n  async *stream(request: CompletionRequest): AsyncIterable<StreamChunk> {\n    const adapter = await this.ensureAdapter();\n    if (adapter === undefined) {\n      // #3105: error like complete() rather than yielding an empty stream — a\n      // silent-empty stream masks \"no adapter available\" as a clean empty\n      // completion, so streamWithFallback can't tell failure from a\n      // legitimately-empty result.\n      throw new ModelError('No model adapter available');\n    }\n    yield* adapter.stream(request);\n  }\n\n  async countTokens(text: string): Promise<number> {\n    const adapter = await this.ensureAdapter();\n    if (adapter === undefined) {\n      return 0;\n    }\n    return adapter.countTokens(text);\n  }\n\n  validateConfig(): Result<void, ConfigError> {\n    if (this.currentAdapter !== undefined) {\n      return this.currentAdapter.validateConfig();\n    }\n    // Before first use, config is trivially valid\n    return ok(undefined);\n  }\n\n  // --- IResilientAdapter methods ---\n\n  getHealth(): AdapterHealthInfo | undefined {\n    return this.health;\n  }\n\n  async refresh(): Promise<void> {\n    this.currentAdapter = undefined;\n    this.currentSelection = undefined;\n    this.detectionPromise = undefined;\n    await this.ensureAdapter();\n  }\n\n  setPreferredCli(cli: CliName | undefined): void {\n    this.preferredCli = cli;\n    this.currentAdapter = undefined;\n    this.currentSelection = undefined;\n  }\n\n  onFailover(cb: (info: AdapterHealthInfo) => void): () => void {\n    this.failoverCallbacks.add(cb);\n    return () => {\n      this.failoverCallbacks.delete(cb);\n    };\n  }\n\n  /**\n   * Attach a circuit breaker registry for automatic failover.\n   * When the current adapter's circuit opens, the cached adapter\n   * is cleared so the next call triggers re-detection.\n   */\n  /** The registry arming failover, or undefined if this adapter is unarmed (#4659). */\n  getCircuitBreakerRegistry(): CircuitBreakerRegistry | undefined {\n    return this.circuitBreakerRegistry;\n  }\n\n  attachCircuitBreakerRegistry(registry: CircuitBreakerRegistry): void {\n    this.detachCircuitBreakerRegistry();\n    this.circuitBreakerRegistry = registry;\n    this.circuitListener = (event: CircuitStateChangeEvent) => {\n      this.handleCircuitStateChange(event);\n    };\n    registry.addGlobalStateChangeListener(this.circuitListener);\n  }\n\n  dispose(): void {\n    if (this.disposed) return;\n    this.disposed = true;\n    this.detachCircuitBreakerRegistry();\n    this.failoverCallbacks.clear();\n  }\n\n  // --- Private methods ---\n\n  private async ensureAdapter(): Promise<IModelAdapter | undefined> {\n    // #6659: the shared acquisition seam re-discovers a gateway that was down\n    // at boot (backoff-bounded, one shared attempt; a no-op unless armed).\n    // Once one is found, an adapter detected before it re-detects ONCE, so the\n    // default and the family slots move onto the gateway. Not a failover: the\n    // adapter left behind did not fail.\n    // An adapter that already serves calls never waits on discovery: it fires\n    // the attempt and keeps serving, and the generation check below switches\n    // it on a LATER call. Only an adapter with nothing to serve yet waits,\n    // since the discovery may be what gives it something (#6671 review).\n    if (this.currentAdapter === undefined) {\n      await ensureGatewayDiscovered();\n    } else {\n      void ensureGatewayDiscovered();\n    }\n    if (\n      this.currentAdapter !== undefined &&\n      this.detectedAtGeneration !== gatewayDiscoveryGeneration()\n    ) {\n      this.currentAdapter = undefined;\n      this.currentSelection = undefined;\n      this.hasEverDetected = false;\n    }\n    if (this.currentAdapter !== undefined) {\n      return this.currentAdapter;\n    }\n    // Coalesce concurrent detection calls into a single probe (Issue #1423)\n    this.detectionPromise ??= this.detectAdapter().finally(() => {\n      this.detectionPromise = undefined;\n    });\n    return this.detectionPromise;\n  }\n\n  private async detectAdapter(): Promise<IModelAdapter | undefined> {\n    // Read BEFORE detecting: a discovery that lands mid-detection leaves this\n    // selection tagged stale, so the next call re-detects instead of keeping it.\n    const generation = gatewayDiscoveryGeneration();\n    try {\n      this.logger.info('Detecting model adapter (lazy)');\n      const config = {\n        logger: this.logger,\n        ...(this.preferredCli !== undefined && { preferredCli: this.preferredCli }),\n        ...(this.defaultCliTimeoutMs !== undefined && {\n          defaultCliTimeoutMs: this.defaultCliTimeoutMs,\n        }),\n      };\n      const selection = await createAutoAdapter(config);\n      this.applySelection(selection);\n      this.detectedAtGeneration = generation;\n      return this.currentAdapter;\n    } catch (error) {\n      const message = getErrorMessage(error);\n      this.logger.warn('No model adapter available', { error: message });\n      this.health = {\n        source: 'api',\n        state: 'unavailable',\n        selectedAt: new Date(),\n        failoverCount: this.health?.failoverCount ?? 0,\n        lastError: message,\n      };\n      return undefined;\n    }\n  }\n\n  private applySelection(selection: AdapterSelection): void {\n    const isFailover = this.hasEverDetected;\n    // #4670: capture the OUTGOING health before it is overwritten below. The\n    // failover signal is about the adapter we are leaving — `unhealthyCliFrom`\n    // reads `payload.source` as \"which CLI is unhealthy\" — and that state was\n    // being destroyed one statement before `emitFailover` read it.\n    const outgoingHealth = this.health;\n    this.currentAdapter = selection.adapter;\n    this.currentSelection = selection;\n    this.hasEverDetected = true;\n\n    const source = mapSelectionSource(selection);\n    const failoverCount = (this.health?.failoverCount ?? 0) + (isFailover ? 1 : 0);\n\n    this.health = {\n      source,\n      state: 'healthy',\n      selectedAt: new Date(),\n      failoverCount,\n    };\n\n    this.logger.info('Adapter selected', {\n      source: selection.source,\n      name: selection.name,\n      model: selection.adapter.modelId,\n      provider: selection.adapter.providerId,\n      failover: isFailover,\n    });\n\n    if (isFailover) {\n      // The state/source describe the adapter we LEFT; `failoverCount` is a\n      // run-level counter, so it carries the post-increment value.\n      this.emitFailover(\n        outgoingHealth === undefined ? undefined : { ...outgoingHealth, failoverCount }\n      );\n    }\n  }\n\n  /**\n   * Record a direct-API failure to the circuit breaker so API adapters get the\n   * same degradation/failover learning that CLI subprocess failures get (#3423).\n   *\n   * The breaker key is `currentSelection.name` — distinct from the `api:<vendor>`\n   * arm key used by the ModelToCliAdapter path (#3422).\n   *\n   * A CLI selection is NOT recorded here (#6712). Its CLI adapter's retry loop\n   * (`executeCliRetryLoop`) has already recorded the failure in the same\n   * registry under the same key, the CLI name, with the category taken from\n   * the CliError code. Recording it again counted every CLI failure twice (the\n   * second time usually as `unknown`), so the breaker opened at about half its\n   * configured threshold. Only a direct-API selection, which has no inner\n   * recorder, is recorded by this layer.\n   *\n   * Rate-limit failures are deliberately skipped here: they are already recorded\n   * by the `recordRateLimitEvent` telemetry branch in `complete()`, and the\n   * breaker counts rate limits as failures by default\n   * (`countRateLimitsAsFailures`), so recording them again would double-count.\n   *\n   * Security (#3422 constraint): the logged payload carries only `provider` and\n   * `category` — never `error.message`, the request, or the ModelError object,\n   * any of which could embed credentials.\n   */\n  private recordBreakerFailure(adapter: IModelAdapter, error: ModelError): void {\n    if (this.circuitBreakerRegistry === undefined || this.currentSelection === undefined) {\n      return;\n    }\n    // #6712: the CLI adapter's retry loop owns recording for a CLI selection.\n    if (this.currentSelection.source === 'cli') return;\n\n    // #6691: a call its caller cancelled (cancel_job) is not a health signal.\n    if (isCallerCancelled(error)) return;\n\n    const category = mapModelErrorToCategory(error);\n    // Skip rate limits: already accounted for by the rate-limit telemetry branch\n    // (and the breaker counts them by default). Check BOTH the mapped category\n    // AND the telemetry predicate — their rate-limit pattern lists differ\n    // (`isRateLimitLikeError` matches \"quota exceeded\"/\"throttl\"/… that\n    // `categorizeError` does not), so a code-less MODEL_ERROR could otherwise\n    // fire the telemetry branch yet fall through to a counted failure here,\n    // double-counting against the threshold (#3423 review).\n    // #5359: a DURABLE capacity cap is excluded from this exemption. The\n    // exemption is right for a transient throttle — an ordinary panel trips a\n    // per-minute limit while plenty of quota remains, and opening a breaker on\n    // that would empty the candidate pool for a condition clearing within the\n    // minute. It is wrong for an exhausted credential, which does not clear:\n    // never counting it means the breaker never opens, so every subsequent call\n    // pays the same futile retries against the same dead key.\n    if (isDurableCapacityError(error)) {\n      this.circuitBreakerRegistry\n        .getBreaker(this.currentSelection.name as CliName)\n        .recordFailure(category);\n      this.logger.warn('Durable capacity cap recorded to circuit breaker', {\n        provider: adapter.providerId,\n        category,\n      });\n      return;\n    }\n\n    if (category === 'rate_limit' || isRateLimitLikeError(error)) {\n      return;\n    }\n\n    this.circuitBreakerRegistry\n      .getBreaker(this.currentSelection.name as CliName)\n      .recordFailure(category);\n\n    this.logger.warn('API failure recorded to circuit breaker', {\n      provider: adapter.providerId,\n      category,\n    });\n  }\n\n  private handleCircuitStateChange(event: CircuitStateChangeEvent): void {\n    if (event.newState !== 'open') return;\n\n    const currentSource = this.currentSelection?.name;\n    if (currentSource === undefined || currentSource !== event.cliName) {\n      return; // Not our current adapter\n    }\n\n    this.logger.warn('Current adapter circuit opened, clearing cache for re-detection', {\n      cli: event.cliName,\n      reason: event.reason,\n    });\n\n    this.currentAdapter = undefined;\n    this.currentSelection = undefined;\n\n    if (this.health !== undefined) {\n      this.health = {\n        ...this.health,\n        state: 'degraded',\n        lastError: event.reason,\n      };\n    }\n  }\n\n  /**\n   * Emit the failover signal describing the adapter we failed AWAY FROM (#4670).\n   *\n   * This used to read `this.health`, which `applySelection` had just replaced\n   * with the incoming adapter's `state: 'healthy'`. So every `adapter.failover`\n   * payload said healthy, `unhealthyCliFrom` (`observability/failover-signals.ts`)\n   * returned undefined for all of them, and `signal.swarm_unhealthy` was never\n   * produced by this — the more reliable of its two producers.\n   *\n   * An undefined outgoing health emits NOTHING rather than falling back to the\n   * current one. Falling back would silently restore the old behaviour, and a\n   * failover whose prior state we cannot describe is not evidence that the\n   * prior adapter was healthy.\n   */\n  private emitFailover(outgoingHealth: AdapterHealthInfo | undefined): void {\n    const info = outgoingHealth;\n    if (info === undefined) return;\n\n    for (const cb of this.failoverCallbacks) {\n      try {\n        cb(info);\n      } catch (error: unknown) {\n        this.logger.debug('Failover callback error', { error: getErrorMessage(error) });\n      }\n    }\n\n    try {\n      const eventBus = getGlobalEventBus();\n      eventBus.emit({\n        eventId: `failover-${getTimeProvider().now().toString(36)}-${getRandomProvider().random().toString(36).slice(2, 8)}`,\n        timestamp: new Date().toISOString(),\n        topic: 'adapter.failover',\n        payload: info,\n      });\n    } catch (error: unknown) {\n      this.logger.debug('CollaborationEventBus emit failed during failover', {\n        error: getErrorMessage(error),\n      });\n    }\n  }\n\n  private detachCircuitBreakerRegistry(): void {\n    if (this.circuitBreakerRegistry !== undefined && this.circuitListener !== undefined) {\n      this.circuitBreakerRegistry.removeGlobalStateChangeListener(this.circuitListener);\n    }\n    this.circuitBreakerRegistry = undefined;\n    this.circuitListener = undefined;\n  }\n}\n\n// ============================================================================\n// Helpers\n// ============================================================================\n\nfunction mapSelectionSource(selection: AdapterSelection): CliName | 'api' {\n  if (selection.source === 'cli') {\n    return selection.name as CliName;\n  }\n  return 'api';\n}\n","/**\n * A CLI slot adapter bound to one requested model (#6599).\n *\n * `UnifiedAdapterRegistry.getAdapterForModel` resolves a model preference to\n * its CLI slot, and the slot adapter is shared and CLI-scoped: it has no\n * model of its own beyond the CLI default. Returning it bare dropped the\n * model, so `execute_expert` ran the CLI's default whatever was asked for.\n * This view stamps the model onto every request that does not name its own,\n * and delegates everything else to the shared slot adapter, which the\n * registry still owns.\n *\n * @module adapters/model-bound-adapter\n */\n\nimport type {\n  CompletionRequest,\n  CompletionResponse,\n  ConfigError,\n  ModelCapability,\n  ModelError,\n  Result,\n} from '../core/index.js';\nimport type { StreamChunk } from '../core/types/model.js';\nimport type { CliName } from '../cli-adapters/types.js';\nimport type { CircuitBreakerRegistry } from '../cli-adapters/circuit-breaker.js';\nimport type { AdapterHealthInfo, IResilientAdapter } from './resilient-adapter-types.js';\n\nexport class ModelBoundAdapter implements IResilientAdapter {\n  constructor(\n    private readonly slot: IResilientAdapter,\n    /** Canonical registry id every unmodelled request is sent with. */\n    readonly boundModel: string\n  ) {}\n\n  get providerId(): string {\n    return this.slot.providerId;\n  }\n\n  get modelId(): string {\n    return this.slot.modelId;\n  }\n\n  get capabilities(): readonly ModelCapability[] {\n    return this.slot.capabilities;\n  }\n\n  private bind(request: CompletionRequest): CompletionRequest {\n    return request.model !== undefined ? request : { ...request, model: this.boundModel };\n  }\n\n  complete(request: CompletionRequest): Promise<Result<CompletionResponse, ModelError>> {\n    return this.slot.complete(this.bind(request));\n  }\n\n  stream(request: CompletionRequest): AsyncIterable<StreamChunk> {\n    return this.slot.stream(this.bind(request));\n  }\n\n  countTokens(text: string): Promise<number> {\n    return this.slot.countTokens(text);\n  }\n\n  validateConfig(): Result<void, ConfigError> {\n    return this.slot.validateConfig();\n  }\n\n  getHealth(): AdapterHealthInfo | undefined {\n    return this.slot.getHealth();\n  }\n\n  refresh(): Promise<void> {\n    return this.slot.refresh();\n  }\n\n  setPreferredCli(cli: CliName | undefined): void {\n    this.slot.setPreferredCli(cli);\n  }\n\n  onFailover(cb: (info: AdapterHealthInfo) => void): () => void {\n    return this.slot.onFailover(cb);\n  }\n\n  getCircuitBreakerRegistry(): CircuitBreakerRegistry | undefined {\n    return this.slot.getCircuitBreakerRegistry?.();\n  }\n\n  /** No-op: the shared slot adapter belongs to the registry, which disposes it. */\n  dispose(): void {\n    // Intentionally empty — disposing the view must not dispose the slot.\n  }\n}\n","/**\n * Unified Adapter Registry — single entry point for all model adapter access.\n *\n * Pre-computes task-to-CLI routing from the canonical model registry and\n * task specialization matrix at creation time. All consumers get adapters\n * through this registry instead of calling createAutoAdapter/createResilientAdapter\n * directly.\n *\n * Design:\n * - One IResilientAdapter per CLI (claude/gemini/codex), created lazily on first access\n * - One \"default\" adapter for unscoped requests (uses createAutoAdapter priority)\n * - Task routing is deterministic: category → primary CLI → cached adapter\n * - Session-scoped: create once at MCP startup, reuse for the session lifetime\n *\n * @module adapters/unified-registry\n * (Source: Issue #1149 — Unified Adapter Registry)\n * (Source: Issue #1151 — Single adapter entry point)\n */\n\nimport type { ILogger } from '../core/index.js';\nimport { ConfigError } from '../core/errors.js';\nimport { getDefaultCliCircuitBreakerRegistry } from '../cli-adapters/cli-circuit-breaker.js';\nimport { createLogger } from '../core/index.js';\nimport { createResilientAdapter } from './resilient-adapter.js';\nimport { ModelBoundAdapter } from './model-bound-adapter.js';\nimport { isGatewayArmId, warnIfGatewayCostUndeclared } from './sdk/gateway-cost.js';\nimport type { IResilientAdapter } from './resilient-adapter-types.js';\nimport type { CliName, EndpointArmId, ObservedArmId } from '../cli-adapters/types.js';\nimport { isCliName, isEndpointArmId } from '../cli-adapters/types.js';\nimport { TASK_SPECIALIZATION_MATRIX, detectTaskCategory } from '../config/task-specialization.js';\nimport type { TaskCategory } from '../config/task-specialization-types.js';\nimport {\n  getDefaultModelForCli,\n  getInTreeCapabilitiesMatrix,\n} from '../config/model-config-helpers.js';\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/** Configuration for the unified registry. */\nexport interface UnifiedRegistryConfig {\n  /** Logger instance */\n  readonly logger?: ILogger;\n  /** Default CLI timeout for subprocess calls (ms) */\n  readonly defaultCliTimeoutMs?: number;\n}\n\n/** Summary of the pre-computed task routing table. */\nexport interface TaskRoutingEntry {\n  readonly category: TaskCategory;\n  readonly primaryCli: CliName;\n  readonly secondaryCli: CliName;\n  readonly primaryModel: string;\n}\n\n/** Snapshot of registry state for observability. */\nexport interface RegistrySnapshot {\n  readonly taskRouting: readonly TaskRoutingEntry[];\n  /**\n   * CLI-slot view of {@link cachedArms}: the lazily created CLI slots only.\n   * A registered `api:*` arm is never listed here (#6290 panel: this field\n   * keeps its `CliName[]` type; it is retired in 9.0, #6291).\n   */\n  readonly cachedAdapters: readonly CliName[];\n  /** Every cached arm: lazily created CLI slots and registered `api:*` endpoint arms (#4392). */\n  readonly cachedArms: readonly ObservedArmId[];\n  readonly availableModels: number;\n}\n\n// ============================================================================\n// Registry\n// ============================================================================\n\n/**\n * Unified adapter registry. Centralizes all adapter creation and task routing.\n *\n * Usage:\n * ```typescript\n * const registry = createUnifiedRegistry({ logger });\n * const adapter = registry.getAdapter('code_generation'); // → codex adapter\n * const adapter2 = registry.getAdapterForCli('claude');   // → claude adapter\n * const adapter3 = registry.getDefault();                 // → best available\n * ```\n */\n\nexport class UnifiedAdapterRegistry {\n  private readonly logger: ILogger;\n  private readonly defaultCliTimeoutMs: number | undefined;\n\n  /**\n   * Per-arm adapter cache. CLI slots are created lazily by\n   * {@link getAdapterForCli}; `api:*` arms enter only through\n   * {@link registerApiArm} and are never synthesised (#4392).\n   */\n  private readonly cliAdapters = new Map<ObservedArmId, IResilientAdapter>();\n\n  /** Default adapter for unscoped requests. */\n  private defaultAdapter: IResilientAdapter | undefined;\n\n  constructor(config?: UnifiedRegistryConfig) {\n    this.logger = config?.logger ?? createLogger({ component: 'unified-registry' });\n    this.defaultCliTimeoutMs = config?.defaultCliTimeoutMs;\n    this.logger.info('UnifiedAdapterRegistry initialized', {\n      categories: TASK_SPECIALIZATION_MATRIX.length,\n      models: getInTreeCapabilitiesMatrix().models.length,\n    });\n  }\n\n  // --------------------------------------------------------------------------\n  // Public API\n  // --------------------------------------------------------------------------\n\n  /** Logger used by this registry. Exposed so singleton helpers can warn. */\n  getLogger(): ILogger {\n    return this.logger;\n  }\n\n  /**\n   * Get adapter for a task category. Routing is re-resolved on every read\n   * (#3185) so a post-startup overlay/registry update propagates without a\n   * restart. Falls back to default adapter if category unknown.\n   */\n  getAdapter(category: TaskCategory): IResilientAdapter {\n    const routing = this.getRouting(category);\n    if (routing === undefined) {\n      this.logger.warn('Unknown task category, using default', { category });\n      return this.getDefault();\n    }\n    return this.getAdapterForCli(routing.primaryCli);\n  }\n\n  /**\n   * Get adapter for a free-text task description.\n   * Detects category from keywords, falls back to default.\n   */\n  getAdapterForTask(taskDescription: string): IResilientAdapter {\n    const match = detectTaskCategory(taskDescription);\n    if (match !== null) {\n      this.logger.debug('Task category detected', {\n        category: match.category,\n        cli: match.primaryCli,\n      });\n      return this.getAdapterForCli(match.primaryCli);\n    }\n    return this.getDefault();\n  }\n\n  /**\n   * Get adapter pinned to a specific CLI.\n   * Creates and caches one IResilientAdapter per CLI.\n   */\n  getAdapterForCli(cli: CliName): IResilientAdapter {\n    const cached = this.cliAdapters.get(cli);\n    if (cached !== undefined) return cached;\n\n    const raw = createResilientAdapter({\n      logger: this.logger,\n      preferredCli: cli,\n      // #4659: the SHARED registry — the same one that already gates\n      // voter-panel availability (#4330). Per-adapter registries would let one\n      // adapter keep routing to a CLI another has already seen fail.\n      circuitBreakerRegistry: getDefaultCliCircuitBreakerRegistry(),\n      ...(this.defaultCliTimeoutMs !== undefined && {\n        defaultCliTimeoutMs: this.defaultCliTimeoutMs,\n      }),\n    });\n    const adapter = raw;\n    this.cliAdapters.set(cli, adapter);\n    this.logger.info('Created CLI-specific adapter', {\n      cli,\n    });\n    return adapter;\n  }\n\n  /**\n   * Get the adapter for a routing arm (#4392). A CLI slot resolves exactly as\n   * {@link getAdapterForCli} (created lazily, cached, armed with the shared\n   * breaker registry). An `api:*` arm resolves to what {@link registerApiArm}\n   * supplied, or `undefined` — never to a CLI slot, and never by creating one.\n   */\n  getAdapterForArm(arm: ObservedArmId): IResilientAdapter | undefined {\n    // Split on CLI-slot membership, not on the validator: an `api:` string\n    // that fails validation must read as \"not registered\", never be handed\n    // to getAdapterForCli to mint a slot adapter under a garbage name.\n    if (isCliName(arm)) {\n      return this.getAdapterForCli(arm);\n    }\n    return this.cliAdapters.get(arm);\n  }\n\n  /**\n   * Register an `api:*` arm's adapter under its endpoint identity (#4392).\n   * Refuses built-in vendor arms (`api:anthropic`, `api:openai`, `api:google`, `api:gemini`)\n   * to prevent hijacking or redirecting vendor traffic without authorization.\n   * Accepts a dynamic `EndpointArmId`; the id is re-validated at runtime\n   * because the `EndpointArmId` type admits any `api:` string, so a cast from an\n   * unvalidated name is exactly what this refuses.\n   * Registering an id twice replaces (and disposes) the earlier adapter.\n   * CLI-slot behaviour is untouched. A registered endpoint arm is observable\n   * here and in the breaker registry but is NOT a `RoutingArmId`: it cannot\n   * enter outcome records until #6291. A gateway arm registered without a\n   * `NEXUS_GATEWAY_COST` declaration is warned about here, once, at the\n   * moment it becomes routable (#4392 increment 2).\n   */\n  registerApiArm(arm: EndpointArmId, adapter: IResilientAdapter): void {\n    if (!isEndpointArmId(arm)) {\n      throw new Error(`Invalid api arm id: ${JSON.stringify(arm)} (expected api:<endpoint>)`);\n    }\n    if (!isGatewayArmId(arm) || arm === 'api:gemini') {\n      throw new Error(`Cannot overwrite built-in vendor arm: ${arm}`);\n    }\n    this.cliAdapters.get(arm)?.dispose();\n    this.cliAdapters.set(arm, adapter);\n    this.logger.info('Registered api arm adapter', { arm });\n    warnIfGatewayCostUndeclared(arm, this.logger);\n  }\n\n  /**\n   * Get adapter for a model preference string (e.g., \"claude-opus-4-6\").\n   * Resolves the model to its CLI via the canonical registry.\n   * Falls back to default adapter if model not recognized.\n   *\n   * An exact match returns the CLI slot adapter bound to the matched registry\n   * id, so the model reaches the CLI instead of its default (#6599). A prefix\n   * match routes to the CLI only, as before: the name was not an entry.\n   */\n  getAdapterForModel(modelPreference: string): IResilientAdapter {\n    // Prefer exact matches (id / cliAlias / cliModelName) over prefix matches.\n    // For prefix fallback, longest-prefix-wins so a future registry containing\n    // both 'gemini-pro' and 'gemini-pro-experimental' resolves correctly even\n    // though the registry's natural array order isn't sorted by id length.\n    // Defense-in-depth — no current registry has prefix overlaps. (#2192)\n    const allModels = getInTreeCapabilitiesMatrix().models;\n    const exact = allModels.find(\n      (m) =>\n        m.id === modelPreference ||\n        m.cliAlias === modelPreference ||\n        m.cliModelName === modelPreference\n    );\n    const prefix =\n      exact ??\n      [...allModels]\n        .filter((m) => modelPreference.startsWith(m.id))\n        .sort((a, b) => b.id.length - a.id.length)[0];\n    const model = prefix;\n    if (model !== undefined) {\n      this.logger.debug('Model resolved to CLI', {\n        model: modelPreference,\n        cli: model.cliName,\n      });\n      const slot = this.getAdapterForCli(model.cliName as CliName);\n      return exact !== undefined ? new ModelBoundAdapter(slot, exact.id) : slot;\n    }\n    this.logger.debug('Model not in registry, using default', {\n      model: modelPreference,\n    });\n    return this.getDefault();\n  }\n\n  /**\n   * Get adapter for an expert role (e.g., \"code_expert\").\n   * Uses ROLE_TO_TASK_CATEGORY mapping → task specialization → CLI.\n   */\n  getAdapterForRole(role: string): IResilientAdapter {\n    const category = ROLE_TO_CATEGORY[role];\n    if (category !== undefined) return this.getAdapter(category);\n    return this.getDefault();\n  }\n\n  /**\n   * Get the default adapter (no CLI preference — auto-detection priority).\n   */\n  getDefault(): IResilientAdapter {\n    if (this.defaultAdapter !== undefined) return this.defaultAdapter;\n    const raw = createResilientAdapter({\n      logger: this.logger,\n      circuitBreakerRegistry: getDefaultCliCircuitBreakerRegistry(),\n      ...(this.defaultCliTimeoutMs !== undefined && {\n        defaultCliTimeoutMs: this.defaultCliTimeoutMs,\n      }),\n    });\n    this.defaultAdapter = raw;\n    return this.defaultAdapter;\n  }\n\n  /**\n   * Get snapshot of registry state for observability/debugging. Routing is\n   * re-resolved on read (#3185) so the snapshot reflects the live registry.\n   */\n  getSnapshot(): RegistrySnapshot {\n    return {\n      taskRouting: TASK_SPECIALIZATION_MATRIX.map((spec) => this.resolveRouting(spec)),\n      cachedAdapters: [...this.cliAdapters.keys()].filter(isCliName),\n      cachedArms: [...this.cliAdapters.keys()],\n      availableModels: getInTreeCapabilitiesMatrix().models.length,\n    };\n  }\n\n  /**\n   * Resolve the routing for a specific category.\n   *\n   * Computed on every read (#3185) rather than cached at construction, so a\n   * post-startup model-registry / overlay update (e.g. a default-model change\n   * surfaced via `getDefaultModelForCli`) propagates to routing decisions\n   * without a process restart. The matrix is ~10 categories — the per-read\n   * resolution cost is negligible.\n   */\n  getRouting(category: TaskCategory): TaskRoutingEntry | undefined {\n    const spec = TASK_SPECIALIZATION_MATRIX.find((s) => s.category === category);\n    if (spec === undefined) return undefined;\n    return this.resolveRouting(spec);\n  }\n\n  /**\n   * Dispose all cached adapters.\n   */\n  dispose(): void {\n    for (const adapter of this.cliAdapters.values()) {\n      adapter.dispose();\n    }\n    this.cliAdapters.clear();\n    this.defaultAdapter?.dispose();\n    this.defaultAdapter = undefined;\n    this.logger.info('UnifiedAdapterRegistry disposed');\n  }\n\n  // --------------------------------------------------------------------------\n  // Private\n  // --------------------------------------------------------------------------\n\n  /**\n   * Resolve one specialization-matrix row into a routing entry, re-reading the\n   * primary model from the (overlay-aware) model registry each call (#3185).\n   */\n  private resolveRouting(spec: (typeof TASK_SPECIALIZATION_MATRIX)[number]): TaskRoutingEntry {\n    return {\n      category: spec.category,\n      primaryCli: spec.primaryCli,\n      secondaryCli: spec.secondaryCli,\n      primaryModel: resolveDefaultModel(spec.primaryCli),\n    };\n  }\n}\n\n// ============================================================================\n// Role → Category Mapping (consolidated from create-expert-routing.ts)\n// ============================================================================\n\n/** Maps expert roles to task categories for CLI specialization. */\nconst ROLE_TO_CATEGORY: Record<string, TaskCategory> = {\n  code_expert: 'code_generation',\n  architecture_expert: 'architecture',\n  security_expert: 'security_review',\n  documentation_expert: 'documentation',\n  testing_expert: 'testing',\n  devops_expert: 'devops',\n  research_expert: 'research',\n  pm_expert: 'planning',\n  ux_expert: 'planning',\n  infrastructure_expert: 'devops',\n};\n\n// ============================================================================\n// Helpers\n// ============================================================================\n\n/** Resolve the default model name for a CLI from the canonical registry. */\nfunction resolveDefaultModel(cli: string): string {\n  if (isCliName(cli)) {\n    return getDefaultModelForCli(cli);\n  }\n  return cli;\n}\n\n// ============================================================================\n// Factory & Singleton\n// ============================================================================\n\nlet globalRegistry: UnifiedAdapterRegistry | undefined;\n\n/**\n * Create a new UnifiedAdapterRegistry instance.\n * For most uses, prefer `getGlobalRegistry()` instead.\n */\nexport function createUnifiedRegistry(config?: UnifiedRegistryConfig): UnifiedAdapterRegistry {\n  return new UnifiedAdapterRegistry(config);\n}\n\n/**\n * Claim the global registry for a process entry point, choosing its logger\n * (#6012). Idempotent and SILENT when the registry already exists — unlike\n * {@link getGlobalRegistry} with a config, which warns.\n *\n * That difference is the point. There is not exactly one composition root: the\n * bundled CLI enters through `cli.ts main()`, and an embedder can start the MCP\n * server directly without it. Both should be able to claim, first-one-wins,\n * without the second producing a warning an operator cannot act on — which is\n * what a config-passing `getGlobalRegistry` call does, and is the noise this\n * whole change removes.\n *\n * This does NOT provide per-caller log attribution: the singleton has one\n * logger. It makes that one logger a deliberate choice rather than a\n * consequence of which module happened to run first.\n */\nexport function claimGlobalRegistry(logger: ILogger): UnifiedAdapterRegistry {\n  globalRegistry ??= new UnifiedAdapterRegistry({ logger });\n  return globalRegistry;\n}\n\n/**\n * Thrown by {@link getGlobalRegistry} when a non-empty config arrives after\n * the singleton exists (#5211). The registry has no way to apply it — the\n * logger and `defaultCliTimeoutMs` are fixed at construction — so until this\n * error existed the config was logged at `warn` and dropped, and the caller\n * went on with a registry built from someone else's settings. A config that is\n * accepted and ignored is an instrument that misreports what it was given.\n *\n * The check is on presence, not on equality with the live config: the registry\n * does not keep the config it was built from, and a caller re-supplying the\n * same values is still a caller that believes it configured something.\n */\nexport class RegistryAlreadyInitializedError extends ConfigError {\n  constructor(providedKeys: readonly string[]) {\n    super(\n      'UnifiedAdapterRegistry singleton is already initialized, so getGlobalRegistry() cannot ' +\n        `apply the supplied config (keys: ${providedKeys.join(', ')}). Call resetGlobalRegistry() ` +\n        'first if reconfiguration is intentional, or getGlobalRegistry() with no config to use the ' +\n        'existing instance; claimGlobalRegistry(logger) is the idempotent way to name the logger.',\n      { context: { providedKeys: [...providedKeys] } }\n    );\n    this.name = 'RegistryAlreadyInitializedError';\n  }\n}\n\n/**\n * Get the global singleton registry.\n * Creates it on first access with default config.\n *\n * If the singleton already exists and a non-empty config is supplied, this\n * throws {@link RegistryAlreadyInitializedError} — the config cannot be\n * applied, and returning the existing instance would silently hand the caller\n * a registry configured by whoever ran first (#5211). Omitting the config, or\n * passing an empty object, returns the existing instance as before.\n */\nexport function getGlobalRegistry(config?: UnifiedRegistryConfig): UnifiedAdapterRegistry {\n  if (globalRegistry === undefined) {\n    globalRegistry = new UnifiedAdapterRegistry(config);\n    return globalRegistry;\n  }\n  if (config !== undefined && Object.keys(config).length > 0) {\n    throw new RegistryAlreadyInitializedError(Object.keys(config));\n  }\n  return globalRegistry;\n}\n\n/** Reset the global registry (for testing). */\nexport function resetGlobalRegistry(): void {\n  globalRegistry?.dispose();\n  globalRegistry = undefined;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,SAAS,kBAAkB;AAKpB,IAAM,2BAA2B;AAGjC,IAAM,oBAAoB;AAajC,IAAM,2BAA2B;AAgB1B,SAAS,eAAe,SAA+B;AAE5D,MAAI,QAAQ,SAAS,0BAA0B;AAC7C,UAAM,IAAI,MAAM,2CAA2C,OAAO,wBAAwB,CAAC,EAAE;AAAA,EAC/F;AAEA,MAAI,YAAY,KAAK;AACnB,WAAO;AAAA,EACT;AAGA,QAAM,uBAAuB;AAC7B,QAAM,kBAAkB,QAAQ,QAAQ,OAAO,oBAAoB;AAEnE,QAAM,UAAU,gBAAgB,QAAQ,sBAAsB,MAAM;AAEpE,QAAM,gBAAgB,QAAQ,QAAQ,IAAI,OAAO,sBAAsB,GAAG,GAAG,OAAO;AACpF,SAAO,IAAI,OAAO,IAAI,aAAa,GAAG;AACxC;AAKO,SAAS,oBAAoB,OAAe,OAAwB;AACzE,SAAO,MAAM,KAAK,KAAK;AACzB;AAKO,SAAS,kBAA0B;AACxC,SAAO,OAAO,OAAO,gBAAgB,EAAE,IAAI,CAAC,CAAC,IAAI,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AAC3E;AAKO,SAAS,yBAAyC;AACvD,SAAO,OAAO,OAAO,gBAAgB,EAAE,IAAI,CAAC,CAAC,IAAI,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AAC3E;AAwCO,SAAS,oBAAoB,SAAwB,QAAoC;AAC9F,MAAI,SAAwB;AAE5B,MAAI,OAAO,UAAU,UAAa,OAAO,UAAU,IAAI;AACrD,UAAM,QAAQ,eAAe,OAAO,KAAK;AACzC,aAAS,OAAO,OAAO,CAAC,MAAM,oBAAoB,EAAE,OAAO,KAAK,CAAC;AAAA,EACnE;AAEA,MAAI,OAAO,cAAc,UAAa,OAAO,cAAc,IAAI;AAC7D,aAAS,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,OAAO,SAAS;AAAA,EAChE;AAEA,MAAI,OAAO,kBAAkB,UAAa,OAAO,kBAAkB,IAAI;AACrE,aAAS,OAAO,OAAO,CAAC,MAAM,EAAE,kBAAkB,OAAO,aAAa;AAAA,EACxE;AAEA,SAAO,sBAAsB,QAAQ,MAAM;AAC7C;AAKO,SAAS,sBAAsB,QAAuB,QAAoC;AAC/F,MAAI,WAAW;AAEf,MAAI,OAAO,UAAU,UAAa,OAAO,UAAU,IAAI;AACrD,UAAM,iBAAiB,OAAO;AAC9B,eAAW,SAAS,OAAO,CAAC,MAAM,EAAE,YAAY,cAAc;AAAA,EAChE;AAEA,MAAI,OAAO,WAAW,UAAa,OAAO,WAAW,IAAI;AACvD,UAAM,kBAAkB,OAAO;AAC/B,eAAW,SAAS,OAAO,CAAC,MAAM,EAAE,YAAY,eAAe;AAAA,EACjE;AAEA,SAAO;AACT;AAKO,SAAS,kBAAkB,QAAuB,QAAoC;AAC3F,MAAI,OAAO,UAAU,UAAa,OAAO,QAAQ,GAAG;AAClD,WAAO,OAAO,MAAM,CAAC,OAAO,KAAK;AAAA,EACnC;AACA,SAAO;AACT;AAKO,SAAS,YAAY,OAAiC;AAC3D,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS,MAAM,WAAW,gBAAgB;AAAA,IAC1C,WAAW,MAAM,aAAa,gBAAgB,EAAE,OAAO;AAAA,EACzD;AACF;AAKO,SAAS,yBACd,OACA,eACQ;AACR,MAAI,QAAQ;AACZ,aAAW,UAAU,cAAc,OAAO,GAAG;AAC3C,QAAI,oBAAoB,OAAO,OAAO,KAAK,GAAG;AAC5C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;;;ACpIO,IAAM,wBAAN,MAA8D;AAAA,EAClD,gBAAyD,oBAAI,IAAI;AAAA,EACjE;AAAA,EACA;AAAA,EACA;AAAA,EAET,QAAuB;AAAA,IAC7B,eAAe;AAAA,IACf,sBAAsB;AAAA,IACtB,qBAAqB;AAAA,IACrB,aAAa;AAAA,IACb,YAAY;AAAA,EACd;AAAA,EAEA,YAAY,UAA2B,CAAC,GAAG;AACzC,UAAM,iBAAiB,QAAQ,kBAAkB;AACjD,SAAK,UAAU,IAAI,eAA4B,cAAc;AAC7D,SAAK,gBAAgB,QAAQ,iBAAiB;AAC9C,SAAK,SAAS,QAAQ;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA,EAKA,KAAK,OAA0B;AAC7B,UAAM,gBAAgB,YAAY,KAAK;AACvC,SAAK,aAAa,aAAa;AAC/B,SAAK,MAAM;AAEX,SAAK,QAAQ,MAAM,iBAAiB;AAAA,MAClC,OAAO,cAAc;AAAA,MACrB,SAAS,cAAc;AAAA,MACvB,iBAAiB,yBAAyB,cAAc,OAAO,KAAK,aAAa;AAAA,IACnF,CAAC;AAED,eAAW,UAAU,KAAK,cAAc,OAAO,GAAG;AAChD,UAAI,oBAAoB,cAAc,OAAO,OAAO,KAAK,GAAG;AAC1D,aAAK,eAAe,QAAQ,aAAa;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAU,OAAmC;AACjD,UAAM,gBAAgB,YAAY,KAAK;AACvC,SAAK,aAAa,aAAa;AAC/B,SAAK,MAAM;AAEX,SAAK,QAAQ,MAAM,uBAAuB;AAAA,MACxC,OAAO,cAAc;AAAA,MACrB,SAAS,cAAc;AAAA,IACzB,CAAC;AAED,UAAM,WAA4B,CAAC;AAEnC,eAAW,UAAU,KAAK,cAAc,OAAO,GAAG;AAChD,UAAI,oBAAoB,cAAc,OAAO,OAAO,KAAK,GAAG;AAC1D,iBAAS,KAAK,KAAK,oBAAoB,QAAQ,aAAa,CAAC;AAAA,MAC/D;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI,QAAQ;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKA,UACE,SACA,UACc;AACd,QAAI,KAAK,cAAc,QAAQ,mBAAmB;AAChD,YAAM,IAAI;AAAA,QACR,uCAAuC,OAAO,iBAAiB,CAAC;AAAA,MAElE;AAAA,IACF;AAEA,UAAM,KAAK,uBAAuB;AAClC,UAAM,QAAQ,eAAe,OAAO;AAEpC,UAAM,SAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,SAAK,cAAc,IAAI,IAAI,MAAM;AACjC,SAAK,MAAM;AACX,SAAK,MAAM,sBAAsB,KAAK,cAAc;AAEpD,SAAK,QAAQ,MAAM,wBAAwB,EAAE,IAAI,QAAQ,CAAC;AAE1D,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa,MAAM;AACjB,aAAK,YAAY,EAAE;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,gBAAsC;AAChD,UAAM,UAAU,KAAK,cAAc,OAAO,cAAc;AACxD,QAAI,SAAS;AACX,WAAK,MAAM,sBAAsB,KAAK,cAAc;AACpD,WAAK,QAAQ,MAAM,wBAAwB,EAAE,eAAe,CAAC;AAAA,IAC/D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,WAAW,QAA8C;AACvD,UAAM,eAAe,KAAK,QAAQ,QAAQ;AAC1C,QAAI,WAAW,QAAW;AACxB,aAAO;AAAA,IACT;AAEA,UAAM,WAAW,oBAAoB,cAAc,MAAM;AACzD,WAAO,kBAAkB,UAAU,MAAM;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA,EAKA,eAAqB;AACnB,SAAK,QAAQ,MAAM;AACnB,SAAK,MAAM,cAAc;AACzB,SAAK,QAAQ,MAAM,iBAAiB;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,WAA0B;AACxB,WAAO,EAAE,GAAG,KAAK,MAAM;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKA,eAAe,SAAgC;AAC7C,UAAM,QAAQ,eAAe,OAAO;AACpC,eAAW,UAAU,KAAK,cAAc,OAAO,GAAG;AAEhD,UACE,oBAAoB,SAAS,OAAO,KAAK,KACzC,oBAAoB,OAAO,SAAS,KAAK,GACzC;AACA,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,aAAa,OAA0B;AAC7C,SAAK,QAAQ,KAAK,KAAK;AACvB,SAAK,MAAM,cAAc,KAAK,QAAQ;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA,EAKQ,eAAe,QAA4B,OAA0B;AAC3E,QAAI;AACF,YAAM,SAAS,OAAO,SAAS,KAAK;AAEpC,UAAI,KAAK,iBAAiB,kBAAkB,SAAS;AACnD,eAAO,MAAM,CAAC,UAAmB;AAC/B,eAAK,oBAAoB,QAAQ,OAAO,KAAK;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,IACF,SAAS,OAAO;AACd,WAAK,oBAAoB,QAAQ,OAAO,KAAK;AAAA,IAC/C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,oBAAoB,QAA4B,OAAmC;AAC/F,QAAI;AACF,YAAM,OAAO,SAAS,KAAK;AAAA,IAC7B,SAAS,OAAO;AACd,WAAK,oBAAoB,QAAQ,OAAO,KAAK;AAAA,IAC/C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,oBACN,QACA,OACA,OACM;AACN,SAAK,MAAM;AACX,UAAM,WAAW,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACzE,SAAK,QAAQ,MAAM,wBAAwB,UAAU;AAAA,MACnD,gBAAgB,OAAO;AAAA,MACvB,SAAS,OAAO;AAAA,MAChB,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,IACjB,CAAC;AAAA,EACH;AACF;AAMA,IAAI,YAA0C;AAEvC,SAAS,kBAAkB,SAAkD;AAClF,gBAAc,IAAI,sBAAsB,OAAO;AAC/C,SAAO;AACT;AAYO,SAAS,YACd,OACA,SACA,SAIG;AACH,SAAO;AAAA,IACL,SAAS,gBAAgB;AAAA,IACzB,WAAW,gBAAgB,EAAE,OAAO;AAAA,IACpC;AAAA,IACA;AAAA,IACA,WAAW,SAAS;AAAA,IACpB,eAAe,SAAS;AAAA,EAC1B;AACF;;;ACtTO,IAAM,cAAc;AAAA;AAAA,EAEzB,iBAAiB;AAAA,EACjB,wBAAwB;AAAA,EACxB,4BAA4B;AAAA,EAC5B,0BAA0B;AAAA,EAC1B,mBAAmB;AAAA,EACnB,aAAa;AAAA;AAAA,EAGb,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,aAAa;AAAA;AAAA,EAGb,sBAAsB;AAAA,EACtB,wBAAwB;AAAA,EACxB,WAAW;AAAA;AAAA,EAGX,0BAA0B;AAAA,EAC1B,qBAAqB;AAAA,EACrB,mBAAmB;AAAA,EACnB,eAAe;AAAA;AAAA,EAGf,kBAAkB;AAAA,EAClB,oBAAoB;AAAA,EACpB,oBAAoB;AAAA,EACpB,cAAc;AAAA;AAAA,EAGd,sBAAsB;AAAA,EACtB,uBAAuB;AAAA,EACvB,wBAAwB;AAAA,EACxB,YAAY;AAAA;AAAA,EAGZ,4BAA4B;AAAA,EAC5B,8BAA8B;AAAA,EAC9B,qBAAqB;AAAA,EACrB,eAAe;AAAA;AAAA,EAGf,uBAAuB;AAAA,EACvB,yBAAyB;AAAA,EACzB,aAAa;AAAA;AAAA,EAGb,0BAA0B;AAAA,EAC1B,4BAA4B;AAAA,EAC5B,yBAAyB;AAAA,EACzB,+BAA+B;AAAA,EAC/B,eAAe;AAAA;AAAA,EAGf,KAAK;AACP;;;ACLO,SAAS,uBAAuB,QAAoD;AACzF,SAAO,IAAI,iBAAiB,MAAM;AACpC;AASO,IAAM,mBAAN,MAAoD;AAAA,EACxC;AAAA,EACT;AAAA,EACA;AAAA,EACA,kBAAkB;AAAA,EAClB;AAAA,EACA;AAAA,EACS,oBAAoB,oBAAI,IAAuC;AAAA,EACxE;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACF;AAAA;AAAA,EAET;AAAA;AAAA,EAEA,uBAAuB;AAAA,EAE/B,YAAY,QAAiC;AAC3C,SAAK,SAAS,QAAQ,UAAU,aAAa,EAAE,WAAW,oBAAoB,CAAC;AAC/E,SAAK,eAAe,QAAQ;AAC5B,SAAK,sBAAsB,QAAQ;AAKnC,QAAI,QAAQ,2BAA2B,QAAW;AAChD,WAAK,6BAA6B,OAAO,sBAAsB;AAAA,IACjE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,IAAI,aAAqB;AACvB,QAAI,KAAK,mBAAmB,OAAW,QAAO,KAAK,eAAe;AAClE,WAAO,KAAK,iBAAiB,SAAY,oBAAoB,OAAO,KAAK,YAAY;AAAA,EACvF;AAAA,EAEA,IAAI,UAAkB;AACpB,WAAO,KAAK,gBAAgB,WAAW;AAAA,EACzC;AAAA,EAEA,IAAI,eAA2C;AAC7C,WAAO,KAAK,gBAAgB,gBAAgB,CAAC;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,IAAI,aAAwC;AAC1C,UAAM,MAAgB,KAAK,gBAAyD;AACpF,WAAO,OAAO,QAAQ,YAAY,gBAAgB,GAAG,IAAI,MAAM;AAAA,EACjE;AAAA;AAAA,EAIA,MAAM,SAAS,SAA6E;AAC1F,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,QAAI,YAAY,QAAW;AACzB,aAAO,IAAI,IAAI,WAAW,4BAA4B,CAAC;AAAA,IACzD;AACA,UAAM,SAAS,MAAM,QAAQ,SAAS,OAAO;AAC7C,QAAI,CAAC,OAAO,IAAI;AACd,UAAI,qBAAqB,OAAO,KAAK,GAAG;AACtC,cAAM,UAAU,iBAAiB,OAAO,OAAO,QAAQ,UAAU;AACjE,6BAAqB;AAAA,UACnB,UAAU,QAAQ;AAAA,UAClB,WAAW,gBAAgB,EAAE,IAAI;AAAA,UACjC,cAAc,QAAQ;AAAA,QACxB,CAAC;AACD,aAAK,OAAO,KAAK,uBAAuB;AAAA,UACtC,UAAU,QAAQ;AAAA,UAClB,cAAc,QAAQ;AAAA,QACxB,CAAC;AAAA,MACH;AACA,WAAK,qBAAqB,SAAS,OAAO,KAAK;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,OAAO,SAAwD;AACpE,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,QAAI,YAAY,QAAW;AAKzB,YAAM,IAAI,WAAW,4BAA4B;AAAA,IACnD;AACA,WAAO,QAAQ,OAAO,OAAO;AAAA,EAC/B;AAAA,EAEA,MAAM,YAAY,MAA+B;AAC/C,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,QAAI,YAAY,QAAW;AACzB,aAAO;AAAA,IACT;AACA,WAAO,QAAQ,YAAY,IAAI;AAAA,EACjC;AAAA,EAEA,iBAA4C;AAC1C,QAAI,KAAK,mBAAmB,QAAW;AACrC,aAAO,KAAK,eAAe,eAAe;AAAA,IAC5C;AAEA,WAAO,GAAG,MAAS;AAAA,EACrB;AAAA;AAAA,EAIA,YAA2C;AACzC,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,UAAyB;AAC7B,SAAK,iBAAiB;AACtB,SAAK,mBAAmB;AACxB,SAAK,mBAAmB;AACxB,UAAM,KAAK,cAAc;AAAA,EAC3B;AAAA,EAEA,gBAAgB,KAAgC;AAC9C,SAAK,eAAe;AACpB,SAAK,iBAAiB;AACtB,SAAK,mBAAmB;AAAA,EAC1B;AAAA,EAEA,WAAW,IAAmD;AAC5D,SAAK,kBAAkB,IAAI,EAAE;AAC7B,WAAO,MAAM;AACX,WAAK,kBAAkB,OAAO,EAAE;AAAA,IAClC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,4BAAgE;AAC9D,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,6BAA6B,UAAwC;AACnE,SAAK,6BAA6B;AAClC,SAAK,yBAAyB;AAC9B,SAAK,kBAAkB,CAAC,UAAmC;AACzD,WAAK,yBAAyB,KAAK;AAAA,IACrC;AACA,aAAS,6BAA6B,KAAK,eAAe;AAAA,EAC5D;AAAA,EAEA,UAAgB;AACd,QAAI,KAAK,SAAU;AACnB,SAAK,WAAW;AAChB,SAAK,6BAA6B;AAClC,SAAK,kBAAkB,MAAM;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAc,gBAAoD;AAUhE,QAAI,KAAK,mBAAmB,QAAW;AACrC,YAAM,wBAAwB;AAAA,IAChC,OAAO;AACL,WAAK,wBAAwB;AAAA,IAC/B;AACA,QACE,KAAK,mBAAmB,UACxB,KAAK,yBAAyB,2BAA2B,GACzD;AACA,WAAK,iBAAiB;AACtB,WAAK,mBAAmB;AACxB,WAAK,kBAAkB;AAAA,IACzB;AACA,QAAI,KAAK,mBAAmB,QAAW;AACrC,aAAO,KAAK;AAAA,IACd;AAEA,SAAK,qBAAqB,KAAK,cAAc,EAAE,QAAQ,MAAM;AAC3D,WAAK,mBAAmB;AAAA,IAC1B,CAAC;AACD,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAc,gBAAoD;AAGhE,UAAM,aAAa,2BAA2B;AAC9C,QAAI;AACF,WAAK,OAAO,KAAK,gCAAgC;AACjD,YAAM,SAAS;AAAA,QACb,QAAQ,KAAK;AAAA,QACb,GAAI,KAAK,iBAAiB,UAAa,EAAE,cAAc,KAAK,aAAa;AAAA,QACzE,GAAI,KAAK,wBAAwB,UAAa;AAAA,UAC5C,qBAAqB,KAAK;AAAA,QAC5B;AAAA,MACF;AACA,YAAM,YAAY,MAAM,kBAAkB,MAAM;AAChD,WAAK,eAAe,SAAS;AAC7B,WAAK,uBAAuB;AAC5B,aAAO,KAAK;AAAA,IACd,SAAS,OAAO;AACd,YAAM,UAAU,gBAAgB,KAAK;AACrC,WAAK,OAAO,KAAK,8BAA8B,EAAE,OAAO,QAAQ,CAAC;AACjE,WAAK,SAAS;AAAA,QACZ,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,YAAY,oBAAI,KAAK;AAAA,QACrB,eAAe,KAAK,QAAQ,iBAAiB;AAAA,QAC7C,WAAW;AAAA,MACb;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,eAAe,WAAmC;AACxD,UAAM,aAAa,KAAK;AAKxB,UAAM,iBAAiB,KAAK;AAC5B,SAAK,iBAAiB,UAAU;AAChC,SAAK,mBAAmB;AACxB,SAAK,kBAAkB;AAEvB,UAAM,SAAS,mBAAmB,SAAS;AAC3C,UAAM,iBAAiB,KAAK,QAAQ,iBAAiB,MAAM,aAAa,IAAI;AAE5E,SAAK,SAAS;AAAA,MACZ;AAAA,MACA,OAAO;AAAA,MACP,YAAY,oBAAI,KAAK;AAAA,MACrB;AAAA,IACF;AAEA,SAAK,OAAO,KAAK,oBAAoB;AAAA,MACnC,QAAQ,UAAU;AAAA,MAClB,MAAM,UAAU;AAAA,MAChB,OAAO,UAAU,QAAQ;AAAA,MACzB,UAAU,UAAU,QAAQ;AAAA,MAC5B,UAAU;AAAA,IACZ,CAAC;AAED,QAAI,YAAY;AAGd,WAAK;AAAA,QACH,mBAAmB,SAAY,SAAY,EAAE,GAAG,gBAAgB,cAAc;AAAA,MAChF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA0BQ,qBAAqB,SAAwB,OAAyB;AAC5E,QAAI,KAAK,2BAA2B,UAAa,KAAK,qBAAqB,QAAW;AACpF;AAAA,IACF;AAEA,QAAI,KAAK,iBAAiB,WAAW,MAAO;AAG5C,QAAI,kBAAkB,KAAK,EAAG;AAE9B,UAAM,WAAW,wBAAwB,KAAK;AAe9C,QAAI,uBAAuB,KAAK,GAAG;AACjC,WAAK,uBACF,WAAW,KAAK,iBAAiB,IAAe,EAChD,cAAc,QAAQ;AACzB,WAAK,OAAO,KAAK,oDAAoD;AAAA,QACnE,UAAU,QAAQ;AAAA,QAClB;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,QAAI,aAAa,gBAAgB,qBAAqB,KAAK,GAAG;AAC5D;AAAA,IACF;AAEA,SAAK,uBACF,WAAW,KAAK,iBAAiB,IAAe,EAChD,cAAc,QAAQ;AAEzB,SAAK,OAAO,KAAK,2CAA2C;AAAA,MAC1D,UAAU,QAAQ;AAAA,MAClB;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,yBAAyB,OAAsC;AACrE,QAAI,MAAM,aAAa,OAAQ;AAE/B,UAAM,gBAAgB,KAAK,kBAAkB;AAC7C,QAAI,kBAAkB,UAAa,kBAAkB,MAAM,SAAS;AAClE;AAAA,IACF;AAEA,SAAK,OAAO,KAAK,mEAAmE;AAAA,MAClF,KAAK,MAAM;AAAA,MACX,QAAQ,MAAM;AAAA,IAChB,CAAC;AAED,SAAK,iBAAiB;AACtB,SAAK,mBAAmB;AAExB,QAAI,KAAK,WAAW,QAAW;AAC7B,WAAK,SAAS;AAAA,QACZ,GAAG,KAAK;AAAA,QACR,OAAO;AAAA,QACP,WAAW,MAAM;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,aAAa,gBAAqD;AACxE,UAAM,OAAO;AACb,QAAI,SAAS,OAAW;AAExB,eAAW,MAAM,KAAK,mBAAmB;AACvC,UAAI;AACF,WAAG,IAAI;AAAA,MACT,SAAS,OAAgB;AACvB,aAAK,OAAO,MAAM,2BAA2B,EAAE,OAAO,gBAAgB,KAAK,EAAE,CAAC;AAAA,MAChF;AAAA,IACF;AAEA,QAAI;AACF,YAAM,WAAW,kBAAkB;AACnC,eAAS,KAAK;AAAA,QACZ,SAAS,YAAY,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,QAClH,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,OAAO;AAAA,QACP,SAAS;AAAA,MACX,CAAC;AAAA,IACH,SAAS,OAAgB;AACvB,WAAK,OAAO,MAAM,qDAAqD;AAAA,QACrE,OAAO,gBAAgB,KAAK;AAAA,MAC9B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,+BAAqC;AAC3C,QAAI,KAAK,2BAA2B,UAAa,KAAK,oBAAoB,QAAW;AACnF,WAAK,uBAAuB,gCAAgC,KAAK,eAAe;AAAA,IAClF;AACA,SAAK,yBAAyB;AAC9B,SAAK,kBAAkB;AAAA,EACzB;AACF;AAMA,SAAS,mBAAmB,WAA8C;AACxE,MAAI,UAAU,WAAW,OAAO;AAC9B,WAAO,UAAU;AAAA,EACnB;AACA,SAAO;AACT;;;ACneO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,YACmB,MAER,YACT;AAHiB;AAER;AAAA,EACR;AAAA,EAHgB;AAAA,EAER;AAAA,EAGX,IAAI,aAAqB;AACvB,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEA,IAAI,UAAkB;AACpB,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEA,IAAI,eAA2C;AAC7C,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEQ,KAAK,SAA+C;AAC1D,WAAO,QAAQ,UAAU,SAAY,UAAU,EAAE,GAAG,SAAS,OAAO,KAAK,WAAW;AAAA,EACtF;AAAA,EAEA,SAAS,SAA6E;AACpF,WAAO,KAAK,KAAK,SAAS,KAAK,KAAK,OAAO,CAAC;AAAA,EAC9C;AAAA,EAEA,OAAO,SAAwD;AAC7D,WAAO,KAAK,KAAK,OAAO,KAAK,KAAK,OAAO,CAAC;AAAA,EAC5C;AAAA,EAEA,YAAY,MAA+B;AACzC,WAAO,KAAK,KAAK,YAAY,IAAI;AAAA,EACnC;AAAA,EAEA,iBAA4C;AAC1C,WAAO,KAAK,KAAK,eAAe;AAAA,EAClC;AAAA,EAEA,YAA2C;AACzC,WAAO,KAAK,KAAK,UAAU;AAAA,EAC7B;AAAA,EAEA,UAAyB;AACvB,WAAO,KAAK,KAAK,QAAQ;AAAA,EAC3B;AAAA,EAEA,gBAAgB,KAAgC;AAC9C,SAAK,KAAK,gBAAgB,GAAG;AAAA,EAC/B;AAAA,EAEA,WAAW,IAAmD;AAC5D,WAAO,KAAK,KAAK,WAAW,EAAE;AAAA,EAChC;AAAA,EAEA,4BAAgE;AAC9D,WAAO,KAAK,KAAK,4BAA4B;AAAA,EAC/C;AAAA;AAAA,EAGA,UAAgB;AAAA,EAEhB;AACF;;;ACJO,IAAM,yBAAN,MAA6B;AAAA,EACjB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,cAAc,oBAAI,IAAsC;AAAA;AAAA,EAGjE;AAAA,EAER,YAAY,QAAgC;AAC1C,SAAK,SAAS,QAAQ,UAAU,aAAa,EAAE,WAAW,mBAAmB,CAAC;AAC9E,SAAK,sBAAsB,QAAQ;AACnC,SAAK,OAAO,KAAK,sCAAsC;AAAA,MACrD,YAAY,2BAA2B;AAAA,MACvC,QAAQ,4BAA4B,EAAE,OAAO;AAAA,IAC/C,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,UAA2C;AACpD,UAAM,UAAU,KAAK,WAAW,QAAQ;AACxC,QAAI,YAAY,QAAW;AACzB,WAAK,OAAO,KAAK,wCAAwC,EAAE,SAAS,CAAC;AACrE,aAAO,KAAK,WAAW;AAAA,IACzB;AACA,WAAO,KAAK,iBAAiB,QAAQ,UAAU;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAkB,iBAA4C;AAC5D,UAAM,QAAQ,mBAAmB,eAAe;AAChD,QAAI,UAAU,MAAM;AAClB,WAAK,OAAO,MAAM,0BAA0B;AAAA,QAC1C,UAAU,MAAM;AAAA,QAChB,KAAK,MAAM;AAAA,MACb,CAAC;AACD,aAAO,KAAK,iBAAiB,MAAM,UAAU;AAAA,IAC/C;AACA,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAiB,KAAiC;AAChD,UAAM,SAAS,KAAK,YAAY,IAAI,GAAG;AACvC,QAAI,WAAW,OAAW,QAAO;AAEjC,UAAM,MAAM,uBAAuB;AAAA,MACjC,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA;AAAA;AAAA;AAAA,MAId,wBAAwB,oCAAoC;AAAA,MAC5D,GAAI,KAAK,wBAAwB,UAAa;AAAA,QAC5C,qBAAqB,KAAK;AAAA,MAC5B;AAAA,IACF,CAAC;AACD,UAAM,UAAU;AAChB,SAAK,YAAY,IAAI,KAAK,OAAO;AACjC,SAAK,OAAO,KAAK,gCAAgC;AAAA,MAC/C;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,iBAAiB,KAAmD;AAIlE,QAAI,UAAU,GAAG,GAAG;AAClB,aAAO,KAAK,iBAAiB,GAAG;AAAA,IAClC;AACA,WAAO,KAAK,YAAY,IAAI,GAAG;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,eAAe,KAAoB,SAAkC;AACnE,QAAI,CAAC,gBAAgB,GAAG,GAAG;AACzB,YAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,GAAG,CAAC,4BAA4B;AAAA,IACxF;AACA,QAAI,CAAC,eAAe,GAAG,KAAK,QAAQ,cAAc;AAChD,YAAM,IAAI,MAAM,yCAAyC,GAAG,EAAE;AAAA,IAChE;AACA,SAAK,YAAY,IAAI,GAAG,GAAG,QAAQ;AACnC,SAAK,YAAY,IAAI,KAAK,OAAO;AACjC,SAAK,OAAO,KAAK,8BAA8B,EAAE,IAAI,CAAC;AACtD,gCAA4B,KAAK,KAAK,MAAM;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,mBAAmB,iBAA4C;AAM7D,UAAM,YAAY,4BAA4B,EAAE;AAChD,UAAM,QAAQ,UAAU;AAAA,MACtB,CAAC,MACC,EAAE,OAAO,mBACT,EAAE,aAAa,mBACf,EAAE,iBAAiB;AAAA,IACvB;AACA,UAAM,SACJ,SACA,CAAC,GAAG,SAAS,EACV,OAAO,CAAC,MAAM,gBAAgB,WAAW,EAAE,EAAE,CAAC,EAC9C,KAAK,CAAC,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC;AAChD,UAAM,QAAQ;AACd,QAAI,UAAU,QAAW;AACvB,WAAK,OAAO,MAAM,yBAAyB;AAAA,QACzC,OAAO;AAAA,QACP,KAAK,MAAM;AAAA,MACb,CAAC;AACD,YAAM,OAAO,KAAK,iBAAiB,MAAM,OAAkB;AAC3D,aAAO,UAAU,SAAY,IAAI,kBAAkB,MAAM,MAAM,EAAE,IAAI;AAAA,IACvE;AACA,SAAK,OAAO,MAAM,wCAAwC;AAAA,MACxD,OAAO;AAAA,IACT,CAAC;AACD,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAkB,MAAiC;AACjD,UAAM,WAAW,iBAAiB,IAAI;AACtC,QAAI,aAAa,OAAW,QAAO,KAAK,WAAW,QAAQ;AAC3D,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAgC;AAC9B,QAAI,KAAK,mBAAmB,OAAW,QAAO,KAAK;AACnD,UAAM,MAAM,uBAAuB;AAAA,MACjC,QAAQ,KAAK;AAAA,MACb,wBAAwB,oCAAoC;AAAA,MAC5D,GAAI,KAAK,wBAAwB,UAAa;AAAA,QAC5C,qBAAqB,KAAK;AAAA,MAC5B;AAAA,IACF,CAAC;AACD,SAAK,iBAAiB;AACtB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,cAAgC;AAC9B,WAAO;AAAA,MACL,aAAa,2BAA2B,IAAI,CAAC,SAAS,KAAK,eAAe,IAAI,CAAC;AAAA,MAC/E,gBAAgB,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,EAAE,OAAO,SAAS;AAAA,MAC7D,YAAY,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC;AAAA,MACvC,iBAAiB,4BAA4B,EAAE,OAAO;AAAA,IACxD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,WAAW,UAAsD;AAC/D,UAAM,OAAO,2BAA2B,KAAK,CAAC,MAAM,EAAE,aAAa,QAAQ;AAC3E,QAAI,SAAS,OAAW,QAAO;AAC/B,WAAO,KAAK,eAAe,IAAI;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA,EAKA,UAAgB;AACd,eAAW,WAAW,KAAK,YAAY,OAAO,GAAG;AAC/C,cAAQ,QAAQ;AAAA,IAClB;AACA,SAAK,YAAY,MAAM;AACvB,SAAK,gBAAgB,QAAQ;AAC7B,SAAK,iBAAiB;AACtB,SAAK,OAAO,KAAK,iCAAiC;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,eAAe,MAAqE;AAC1F,WAAO;AAAA,MACL,UAAU,KAAK;AAAA,MACf,YAAY,KAAK;AAAA,MACjB,cAAc,KAAK;AAAA,MACnB,cAAc,oBAAoB,KAAK,UAAU;AAAA,IACnD;AAAA,EACF;AACF;AAOA,IAAM,mBAAiD;AAAA,EACrD,aAAa;AAAA,EACb,qBAAqB;AAAA,EACrB,iBAAiB;AAAA,EACjB,sBAAsB;AAAA,EACtB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,WAAW;AAAA,EACX,uBAAuB;AACzB;AAOA,SAAS,oBAAoB,KAAqB;AAChD,MAAI,UAAU,GAAG,GAAG;AAClB,WAAO,sBAAsB,GAAG;AAAA,EAClC;AACA,SAAO;AACT;AAMA,IAAI;AAMG,SAAS,sBAAsB,QAAwD;AAC5F,SAAO,IAAI,uBAAuB,MAAM;AAC1C;AAkBO,SAAS,oBAAoB,QAAyC;AAC3E,qBAAmB,IAAI,uBAAuB,EAAE,OAAO,CAAC;AACxD,SAAO;AACT;AAcO,IAAM,kCAAN,cAA8C,YAAY;AAAA,EAC/D,YAAY,cAAiC;AAC3C;AAAA,MACE,2HACsC,aAAa,KAAK,IAAI,CAAC;AAAA,MAG7D,EAAE,SAAS,EAAE,cAAc,CAAC,GAAG,YAAY,EAAE,EAAE;AAAA,IACjD;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAYO,SAAS,kBAAkB,QAAwD;AACxF,MAAI,mBAAmB,QAAW;AAChC,qBAAiB,IAAI,uBAAuB,MAAM;AAClD,WAAO;AAAA,EACT;AACA,MAAI,WAAW,UAAa,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC1D,UAAM,IAAI,gCAAgC,OAAO,KAAK,MAAM,CAAC;AAAA,EAC/D;AACA,SAAO;AACT;AAGO,SAAS,sBAA4B;AAC1C,kBAAgB,QAAQ;AACxB,mBAAiB;AACnB;","names":[]}

package/dist/{chunk-I2FZPV7P.js → chunk-5TRZCY36.js}

@@ -1,6 +1,6 @@
 import {
   resolveClassGuardMs
-} from "./chunk-Y4ZLHASZ.js";
+} from "./chunk-7S7DKO4D.js";
 
 // src/cli/cli-readiness.ts
 var READINESS_LEVELS = ["installed", "authenticated", "serves"];
@@ -107,4 +107,4 @@ export {
   SERVES_PROBE_PROMPT,
   probeServes
 };
-//# sourceMappingURL=chunk-I2FZPV7P.js.map
+//# sourceMappingURL=chunk-5TRZCY36.js.map

package/dist/{chunk-LLG4XR6P.js → chunk-67GC5TY5.js}

@@ -3,14 +3,14 @@ import {
 } from "./chunk-W654ME6B.js";
 import {
   resolveToken
-} from "./chunk-QDDTFVW7.js";
+} from "./chunk-PWWOIE47.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
   loadPapersRegistry,
   loadTechniquesRegistry,
   savePapersRegistry
-} from "./chunk-76XX7NPA.js";
+} from "./chunk-IS2PAAEU.js";
 import {
   resolveInsideRoot
 } from "./chunk-XEPZSDN5.js";
@@ -21,7 +21,7 @@ import {
   rankedItemTrustTier,
   trustTierLabel,
   withoutUntrustedMemory
-} from "./chunk-7JKUA5X6.js";
+} from "./chunk-DP7JQSU7.js";
 import {
   capitalizeWords,
   tokenizeFiltered,
@@ -50,7 +50,7 @@ import {
   ok,
   registerPersistentDistillerFactory,
   sigmoidConfidence
-} from "./chunk-Y4ZLHASZ.js";
+} from "./chunk-7S7DKO4D.js";
 import {
   ensureLearningDir,
   getRulesFile
@@ -4287,4 +4287,4 @@ export {
   DEFAULT_CONTEXT_BUDGET_TOKENS,
   getContextPromptPrefix
 };
-//# sourceMappingURL=chunk-LLG4XR6P.js.map
+//# sourceMappingURL=chunk-67GC5TY5.js.map

package/dist/{chunk-6RYPMOR6.js → chunk-6RN764V2.js}

@@ -1,21 +1,58 @@
 import {
   ensureGatewayDiscovered,
   gatewayDiscoveryGeneration
-} from "./chunk-LYZ2OXI7.js";
+} from "./chunk-X3S62T3S.js";
 import {
   resolveCliSlot
-} from "./chunk-3SY2GPU3.js";
+} from "./chunk-RWKINNVG.js";
 import {
   createLogger,
   getTimeProvider,
   isRateLimitText
-} from "./chunk-Y4ZLHASZ.js";
+} from "./chunk-7S7DKO4D.js";
+
+// src/pipeline/expert-access-mode.ts
+var logger = createLogger({ component: "expert-bridge" });
+function servedAccessOf(value) {
+  return {
+    ...value.accessMode !== void 0 && { accessMode: value.accessMode },
+    ...value.textOnly === true && { textOnly: true },
+    ...value.permissionDenials !== void 0 && { permissionDenials: value.permissionDenials }
+  };
+}
+var EXECUTION_ACCESS_MODES = {
+  default: true,
+  "read-only-analysis": true,
+  "workspace-edit": true
+};
+function assertAccessMode(accessMode) {
+  if (accessMode === void 0) return;
+  if (typeof accessMode === "string" && Object.hasOwn(EXECUTION_ACCESS_MODES, accessMode)) return;
+  throw new TypeError(
+    `executeExpert: unknown accessMode ${JSON.stringify(accessMode)}; expected one of ${Object.keys(
+      EXECUTION_ACCESS_MODES
+    ).join(", ")}`
+  );
+}
+function withRequestedAccessMode(result, requestedAccessMode, expertType) {
+  logger.debug("Expert call access mode", {
+    expertType,
+    requestedAccessMode,
+    accessMode: result.accessMode,
+    servedBy: result.routedArm ?? result.cli,
+    textOnly: result.textOnly === true
+  });
+  return { ...result, requestedAccessMode };
+}
+function requestedAccessModeOf(options) {
+  return options?.accessMode ?? "default";
+}
 
 // src/pipeline/expert-bridge.ts
 function resolveCliFromModelString(model) {
   return resolveCliSlot(model);
 }
-var logger = createLogger({ component: "expert-bridge" });
+var logger2 = createLogger({ component: "expert-bridge" });
 var RATE_LIMIT_BASE_DELAY_MS = 3e3;
 function routedAttribution(routed, model) {
   const cli = routed.routedCli ?? resolveCliFromModelString(model);
@@ -34,7 +71,7 @@ async function getMcpConfigPath() {
   if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;
   mcpConfigInitPromise ??= (async () => {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-BYNNNVZF.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-CLT4G6JV.js");
       const config = await generateMcpConfig();
       cachedMcpConfigPath = config.configPath;
       cachedMcpConfigCleanup = config.cleanup;
@@ -56,7 +93,7 @@ async function shutdownExpertBridge() {
     await cleanup();
   } catch (error) {
     const msg = error instanceof Error ? error.message : String(error);
-    logger.debug("Expert-bridge MCP-config cleanup failed", { error: msg });
+    logger2.debug("Expert-bridge MCP-config cleanup failed", { error: msg });
   }
 }
 var cachedCircuitBreaker = null;
@@ -100,7 +137,9 @@ function adaptCompositeRouter(compositeRouter) {
             ...split !== void 0 && { tokensIn: split.tokensIn, tokensOut: split.tokensOut },
             // #6624: which gateway served the model, so its cost is priced by
             // the gateway's declaration.
-            ...result.value.gatewayArm !== void 0 && { gatewayArm: result.value.gatewayArm }
+            ...result.value.gatewayArm !== void 0 && { gatewayArm: result.value.gatewayArm },
+            // #6792: what the served arm reported about its host access.
+            ...servedAccessOf(result.value)
           },
           error: { message: "" }
         };
@@ -126,8 +165,8 @@ async function getRouter() {
   }
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-ZGYUWL2O.js");
-    const { createCompositeRouter } = await import("./composite-router-OEN6DCPK.js");
+    const { createAllAdapters } = await import("./factory-NCCP3VNN.js");
+    const { createCompositeRouter } = await import("./composite-router-FCW4AZCS.js");
     const adapters = createAllAdapters();
     const superseded = generation !== routerGeneration;
     if (adapters.size === 0) {
@@ -138,11 +177,11 @@ async function getRouter() {
     if (superseded) return router;
     cachedRouter = router;
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-KR72NLMQ.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-NY4BI2M4.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
-      logger.debug("Circuit breaker init failed; continuing without it", { error: msg });
+      logger2.debug("Circuit breaker init failed; continuing without it", { error: msg });
     }
     return router;
   })();
@@ -178,7 +217,8 @@ function toSuccessResult(value, expertType, durationMs) {
     ...value.model !== void 0 && { model: value.model },
     ...value.tokensIn !== void 0 && { tokensIn: value.tokensIn },
     ...value.tokensOut !== void 0 && { tokensOut: value.tokensOut },
-    ...value.gatewayArm !== void 0 && { gatewayArm: value.gatewayArm }
+    ...value.gatewayArm !== void 0 && { gatewayArm: value.gatewayArm },
+    ...servedAccessOf(value)
   };
 }
 async function dispatchWithRateLimitRetry(router, task, expertType, start, signal) {
@@ -187,7 +227,7 @@ async function dispatchWithRateLimitRetry(router, task, expertType, start, signa
     const result = signal === void 0 ? await router.executeTask(task) : await router.executeTask(task, { signal });
     const durationMs = getTimeProvider().now() - start;
     if (result.ok) {
-      logger.info("Expert executed successfully", {
+      logger2.info("Expert executed successfully", {
         expertType,
         durationMs,
         cli: result.value.cli
@@ -197,11 +237,11 @@ async function dispatchWithRateLimitRetry(router, task, expertType, start, signa
     const isRateLimit = isRateLimitText(result.error.message);
     if (isRateLimit && attempt < maxAttempts - 1 && signal?.aborted !== true) {
       const backoffMs = RATE_LIMIT_BASE_DELAY_MS * (attempt + 1);
-      logger.warn("Expert rate limited, retrying", { expertType, attempt: attempt + 1, backoffMs });
+      logger2.warn("Expert rate limited, retrying", { expertType, attempt: attempt + 1, backoffMs });
       await new Promise((resolve) => setTimeout(resolve, backoffMs));
       continue;
     }
-    logger.warn("Expert execution failed", { expertType, error: result.error.message });
+    logger2.warn("Expert execution failed", { expertType, error: result.error.message });
     return {
       success: false,
       text: "",
@@ -219,23 +259,10 @@ async function dispatchWithRateLimitRetry(router, task, expertType, start, signa
     error: "Max retry attempts exceeded"
   };
 }
-var EXECUTION_ACCESS_MODES = {
-  default: true,
-  "read-only-analysis": true
-};
-function assertAccessMode(accessMode) {
-  if (accessMode === void 0) return;
-  if (typeof accessMode === "string" && Object.hasOwn(EXECUTION_ACCESS_MODES, accessMode)) return;
-  throw new TypeError(
-    `executeExpert: unknown accessMode ${JSON.stringify(accessMode)}; expected one of ${Object.keys(
-      EXECUTION_ACCESS_MODES
-    ).join(", ")}`
-  );
-}
 async function buildBridgeTask(content, options) {
   const task = { content };
-  const readOnly = options?.accessMode === "read-only-analysis";
-  const mcpConfigPath = readOnly ? null : await getMcpConfigPath();
+  const restricted = requestedAccessModeOf(options) !== "default";
+  const mcpConfigPath = restricted ? null : await getMcpConfigPath();
   if (mcpConfigPath !== null) task.options = { mcpConfigPath };
   if (options?.workDir !== void 0) {
     task.options = { ...task.options, workDir: options.workDir };
@@ -245,6 +272,10 @@ async function buildBridgeTask(content, options) {
 }
 async function executeExpert(expertType, prompt, options) {
   assertAccessMode(options?.accessMode);
+  const result = await runExpertCall(expertType, prompt, options);
+  return withRequestedAccessMode(result, requestedAccessModeOf(options), expertType);
+}
+async function runExpertCall(expertType, prompt, options) {
   const start = getTimeProvider().now();
   try {
     const { BUILT_IN_EXPERTS } = await import("./expert-config-JSQTCTSE.js");
@@ -264,7 +295,7 @@ ${prompt}`;
     }
     const health = checkCircuitHealth();
     if (!health.healthy) {
-      logger.warn("Circuit breaker: all CLIs unavailable", { expertType, reason: health.message });
+      logger2.warn("Circuit breaker: all CLIs unavailable", { expertType, reason: health.message });
       return {
         success: false,
         text: "",
@@ -283,7 +314,7 @@ ${prompt}`;
   } catch (error) {
     const durationMs = getTimeProvider().now() - start;
     const msg = error instanceof Error ? error.message : String(error);
-    logger.warn("Expert bridge error", { expertType, error: msg });
+    logger2.warn("Expert bridge error", { expertType, error: msg });
     return { success: false, text: "", expertType, durationMs, error: msg };
   }
 }
@@ -294,4 +325,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-6RYPMOR6.js.map
+//# sourceMappingURL=chunk-6RN764V2.js.map