nexus-agents 8.52.0 → 8.52.2

package/dist/{composite-router-UOSLHVQC.js → composite-router-JRFBB5YP.js}

@@ -4,7 +4,7 @@ import {
   CompositeRoutingError,
   DEFAULT_COMPOSITE_CONFIG,
   createCompositeRouter
-} from "./chunk-JHHSNZDT.js";
+} from "./chunk-NGXHFMA6.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -15,4 +15,4 @@ export {
   DEFAULT_COMPOSITE_CONFIG,
   createCompositeRouter
 };
-//# sourceMappingURL=composite-router-UOSLHVQC.js.map
+//# sourceMappingURL=composite-router-JRFBB5YP.js.map

package/dist/{consensus-vote-NBU47KVJ.js → consensus-vote-G2EQDVSI.js}

@@ -11,28 +11,28 @@ import {
   resetCorrelationTracker,
   runConsensusForGoal,
   unwrapVoteOrThrow
-} from "./chunk-M2327EET.js";
-import "./chunk-5DYRHSCE.js";
+} from "./chunk-LJMPYBT5.js";
+import "./chunk-ELBJDCC7.js";
 import "./chunk-OQB3XC5O.js";
-import "./chunk-DR2ZJHCO.js";
-import "./chunk-6IBZN5NI.js";
-import "./chunk-R2Z4HK4B.js";
-import "./chunk-PT36V4VS.js";
-import "./chunk-BZUFLIVF.js";
+import "./chunk-NFKNTZYT.js";
+import "./chunk-THEK5N2A.js";
+import "./chunk-SKUIP3ER.js";
+import "./chunk-3JFRPAYE.js";
+import "./chunk-THPZO2XW.js";
 import "./chunk-7LP6VJRP.js";
-import "./chunk-HJQSY4XL.js";
+import "./chunk-N6NHQWQR.js";
 import "./chunk-M26JTGBL.js";
 import "./chunk-MUJCGBZW.js";
-import "./chunk-ELRBAHJ7.js";
-import "./chunk-D3YWV3NR.js";
-import "./chunk-PVGI2ZFN.js";
-import "./chunk-D7CLVTZM.js";
+import "./chunk-USHZGWDJ.js";
+import "./chunk-X5R6QOF2.js";
+import "./chunk-X5IOLM33.js";
+import "./chunk-XMMRINZK.js";
 import "./chunk-T46RV7Y7.js";
-import "./chunk-4PWPBNDP.js";
+import "./chunk-TS4GGKYN.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-VCSFP3ZN.js";
-import "./chunk-F5JVNA4I.js";
-import "./chunk-JHHSNZDT.js";
+import "./chunk-YKCVPCLR.js";
+import "./chunk-5EEP73OA.js";
+import "./chunk-NGXHFMA6.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -50,4 +50,4 @@ export {
   runConsensusForGoal,
   unwrapVoteOrThrow
 };
-//# sourceMappingURL=consensus-vote-NBU47KVJ.js.map
+//# sourceMappingURL=consensus-vote-G2EQDVSI.js.map

package/dist/{context-retriever-XOEH7NZY.js → context-retriever-BIAAVT6X.js}

@@ -6,17 +6,17 @@ import {
   inferTaskCategory,
   selectRelevantResearch,
   summarizeContextForPrompt
-} from "./chunk-RVWAMRVN.js";
-import "./chunk-DSAY7HRZ.js";
-import "./chunk-MGQROE5U.js";
-import "./chunk-BZUFLIVF.js";
+} from "./chunk-CTLBZ33K.js";
+import "./chunk-GE4KNPPO.js";
+import "./chunk-3PLSFD3D.js";
+import "./chunk-THPZO2XW.js";
 import "./chunk-7LP6VJRP.js";
-import "./chunk-HJQSY4XL.js";
+import "./chunk-N6NHQWQR.js";
 import "./chunk-M26JTGBL.js";
 import "./chunk-MUJCGBZW.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-VCSFP3ZN.js";
-import "./chunk-JHHSNZDT.js";
+import "./chunk-YKCVPCLR.js";
+import "./chunk-NGXHFMA6.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -29,4 +29,4 @@ export {
   selectRelevantResearch,
   summarizeContextForPrompt
 };
-//# sourceMappingURL=context-retriever-XOEH7NZY.js.map
+//# sourceMappingURL=context-retriever-BIAAVT6X.js.map

package/dist/{doctor-deep-XXYYPYEJ.js → doctor-deep-PLJHEYWB.js}

@@ -1,8 +1,8 @@
 import {
   formatDeepDiagnostics,
   runDeepDiagnostics
-} from "./chunk-36MBJVGG.js";
-import "./chunk-JHHSNZDT.js";
+} from "./chunk-J45ABSJ6.js";
+import "./chunk-NGXHFMA6.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -10,4 +10,4 @@ export {
   formatDeepDiagnostics,
   runDeepDiagnostics
 };
-//# sourceMappingURL=doctor-deep-XXYYPYEJ.js.map
+//# sourceMappingURL=doctor-deep-PLJHEYWB.js.map

package/dist/doctor-live-JTSQWZ2L.js

@@ -0,0 +1,81 @@
+import {
+  detectCliBinary
+} from "./chunk-4QHAMZLU.js";
+import {
+  buildReadiness,
+  formatReadiness,
+  probeServes
+} from "./chunk-XBSPEJ23.js";
+import {
+  createAllAdapters,
+  probeAllClis
+} from "./chunk-USHZGWDJ.js";
+import "./chunk-X5R6QOF2.js";
+import "./chunk-X5IOLM33.js";
+import "./chunk-XMMRINZK.js";
+import "./chunk-T46RV7Y7.js";
+import "./chunk-TS4GGKYN.js";
+import "./chunk-QZUG667L.js";
+import "./chunk-YKCVPCLR.js";
+import "./chunk-5EEP73OA.js";
+import "./chunk-NGXHFMA6.js";
+import "./chunk-MTYJPPIG.js";
+import "./chunk-BTYRPZON.js";
+import "./chunk-ZPWHCABL.js";
+
+// src/cli/doctor-live.ts
+var NOT_REACHED = "earlier level did not pass, so this was not attempted";
+async function runLiveReadiness(deps = {}) {
+  const adapters = deps.adapters ?? createAllAdapters();
+  const authStates = deps.authStates ?? await readAuthStates();
+  const isInstalled = deps.isInstalled ?? ((cli) => detectCliBinary(cli).installed);
+  const results = [];
+  for (const [cli, adapter] of adapters) {
+    results.push(await ladderFor(cli, adapter, authStates.get(cli), isInstalled(cli)));
+  }
+  return results;
+}
+async function ladderFor(cli, adapter, auth, binaryPresent) {
+  if (!binaryPresent) {
+    return buildReadiness(cli, {
+      installed: { status: "failed", reason: "binary not found on PATH" },
+      authenticated: { status: "not-attempted", reason: NOT_REACHED },
+      serves: { status: "not-attempted", reason: NOT_REACHED }
+    });
+  }
+  const installed = { status: "verified" };
+  const authenticated = auth === "not-ok" ? { status: "failed", reason: "no usable credentials found" } : { status: "verified" };
+  if (authenticated.status !== "verified") {
+    return buildReadiness(cli, {
+      installed,
+      authenticated,
+      serves: { status: "not-attempted", reason: NOT_REACHED }
+    });
+  }
+  return buildReadiness(cli, { installed, authenticated, serves: await probeServes(adapter) });
+}
+async function readAuthStates() {
+  const probes = await probeAllClis();
+  const states = /* @__PURE__ */ new Map();
+  for (const probe of probes) {
+    if (probe.state === "authenticated") states.set(probe.cli, "authenticated");
+    else if (probe.state === "unknown") states.set(probe.cli, "unknown");
+    else states.set(probe.cli, "not-ok");
+  }
+  return states;
+}
+function formatLiveReadiness(report) {
+  if (report.length === 0) {
+    return "\nLive readiness: no adapters configured \u2014 nothing was probed.";
+  }
+  return [
+    "",
+    "Live readiness (--live: a real completion per adapter)",
+    ...report.map(formatReadiness)
+  ].join("\n");
+}
+export {
+  formatLiveReadiness,
+  runLiveReadiness
+};
+//# sourceMappingURL=doctor-live-JTSQWZ2L.js.map

package/dist/doctor-live-JTSQWZ2L.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/doctor-live.ts"],"sourcesContent":["/**\n * The `serves` readiness level for `nexus-agents doctor --live` (#4376).\n *\n * Runs a real completion against every configured adapter and reports whether\n * content actually came back. This is the only level that can catch #4351 —\n * every voter returning `stop_sequence` with zero tokens while `healthCheck()`\n * and the auth probe both reported healthy — and the only one that spends the\n * resource it measures, which is why it is opt-in.\n *\n * @module cli/doctor-live\n * (Source: Issue #4376)\n */\n\nimport { createAllAdapters } from '../cli-adapters/factory.js';\nimport type { CliName } from '../cli-adapters/types.js';\nimport { probeAllClis } from './cli-auth-probe.js';\nimport { detectCliBinary } from './setup-cli-detection.js';\nimport {\n  buildReadiness,\n  formatReadiness,\n  probeServes,\n  type CliReadiness,\n  type LevelOutcome,\n  type ServesProbeTarget,\n} from './cli-readiness.js';\n\n/** Reason recorded when a level is skipped because an earlier one failed. */\nconst NOT_REACHED = 'earlier level did not pass, so this was not attempted';\n\n/**\n * Run the full ladder for every adapter.\n *\n * The ladder short-circuits: a CLI that is not installed is not probed for\n * auth, and one that is not authenticated is not billed for a completion. The\n * skipped levels report `not-attempted`, never `failed` — nothing was learned\n * about them, and saying otherwise would invent a measurement.\n */\nexport async function runLiveReadiness(\n  deps: {\n    readonly adapters?: Map<CliName, ServesProbeTarget>;\n    readonly authStates?: ReadonlyMap<CliName, 'authenticated' | 'unknown' | 'not-ok'>;\n    /**\n     * Whether a CLI's binary is on PATH. Defaults to a real `which` +\n     * `--version` probe (#4840); overridable so the ladder can be exercised\n     * without the host's actual toolchain.\n     */\n    readonly isInstalled?: (cli: CliName) => boolean;\n  } = {}\n): Promise<readonly CliReadiness[]> {\n  // DELIBERATE raw-adapter probe — same reasoning as `doctor.ts:checkCli`\n  // (#5191). Readiness must reflect the CLI's actual state, not shared\n  // circuit-breaker state another caller populated.\n  const adapters =\n    deps.adapters ?? (createAllAdapters() as unknown as Map<CliName, ServesProbeTarget>);\n  const authStates = deps.authStates ?? (await readAuthStates());\n  const isInstalled = deps.isInstalled ?? ((cli: CliName) => detectCliBinary(cli).installed);\n\n  const results: CliReadiness[] = [];\n  for (const [cli, adapter] of adapters) {\n    results.push(await ladderFor(cli, adapter, authStates.get(cli), isInstalled(cli)));\n  }\n  return results;\n}\n\nasync function ladderFor(\n  cli: CliName,\n  adapter: ServesProbeTarget,\n  auth: 'authenticated' | 'unknown' | 'not-ok' | undefined,\n  binaryPresent: boolean\n): Promise<CliReadiness> {\n  // Was the literal `{ status: 'verified' }` — the first rung of a readiness\n  // ladder asserting itself (#4840). It also made the auth rung report \"no\n  // usable credentials found\" for a CLI that simply is not installed.\n  if (!binaryPresent) {\n    return buildReadiness(cli, {\n      installed: { status: 'failed', reason: 'binary not found on PATH' },\n      authenticated: { status: 'not-attempted', reason: NOT_REACHED },\n      serves: { status: 'not-attempted', reason: NOT_REACHED },\n    });\n  }\n  const installed: LevelOutcome = { status: 'verified' };\n\n  // `unknown` (#4391: a CLI exposing no readable auth signal) is admitted\n  // optimistically at this level, exactly as the auth probe requires — but it\n  // is the live probe below that then actually settles the question.\n  const authenticated: LevelOutcome =\n    auth === 'not-ok'\n      ? { status: 'failed', reason: 'no usable credentials found' }\n      : { status: 'verified' };\n\n  if (authenticated.status !== 'verified') {\n    return buildReadiness(cli, {\n      installed,\n      authenticated,\n      serves: { status: 'not-attempted', reason: NOT_REACHED },\n    });\n  }\n\n  return buildReadiness(cli, { installed, authenticated, serves: await probeServes(adapter) });\n}\n\n/** Collapse the auth probe's states into what the ladder needs. */\nasync function readAuthStates(): Promise<\n  ReadonlyMap<CliName, 'authenticated' | 'unknown' | 'not-ok'>\n> {\n  const probes = await probeAllClis();\n  const states = new Map<CliName, 'authenticated' | 'unknown' | 'not-ok'>();\n  for (const probe of probes) {\n    if (probe.state === 'authenticated') states.set(probe.cli, 'authenticated');\n    else if (probe.state === 'unknown') states.set(probe.cli, 'unknown');\n    else states.set(probe.cli, 'not-ok');\n  }\n  return states;\n}\n\n/** Render the live report, with a heading that says what was and was not proven. */\nexport function formatLiveReadiness(report: readonly CliReadiness[]): string {\n  if (report.length === 0) {\n    return '\\nLive readiness: no adapters configured — nothing was probed.';\n  }\n  return [\n    '',\n    'Live readiness (--live: a real completion per adapter)',\n    ...report.map(formatReadiness),\n  ].join('\\n');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,IAAM,cAAc;AAUpB,eAAsB,iBACpB,OASI,CAAC,GAC6B;AAIlC,QAAM,WACJ,KAAK,YAAa,kBAAkB;AACtC,QAAM,aAAa,KAAK,cAAe,MAAM,eAAe;AAC5D,QAAM,cAAc,KAAK,gBAAgB,CAAC,QAAiB,gBAAgB,GAAG,EAAE;AAEhF,QAAM,UAA0B,CAAC;AACjC,aAAW,CAAC,KAAK,OAAO,KAAK,UAAU;AACrC,YAAQ,KAAK,MAAM,UAAU,KAAK,SAAS,WAAW,IAAI,GAAG,GAAG,YAAY,GAAG,CAAC,CAAC;AAAA,EACnF;AACA,SAAO;AACT;AAEA,eAAe,UACb,KACA,SACA,MACA,eACuB;AAIvB,MAAI,CAAC,eAAe;AAClB,WAAO,eAAe,KAAK;AAAA,MACzB,WAAW,EAAE,QAAQ,UAAU,QAAQ,2BAA2B;AAAA,MAClE,eAAe,EAAE,QAAQ,iBAAiB,QAAQ,YAAY;AAAA,MAC9D,QAAQ,EAAE,QAAQ,iBAAiB,QAAQ,YAAY;AAAA,IACzD,CAAC;AAAA,EACH;AACA,QAAM,YAA0B,EAAE,QAAQ,WAAW;AAKrD,QAAM,gBACJ,SAAS,WACL,EAAE,QAAQ,UAAU,QAAQ,8BAA8B,IAC1D,EAAE,QAAQ,WAAW;AAE3B,MAAI,cAAc,WAAW,YAAY;AACvC,WAAO,eAAe,KAAK;AAAA,MACzB;AAAA,MACA;AAAA,MACA,QAAQ,EAAE,QAAQ,iBAAiB,QAAQ,YAAY;AAAA,IACzD,CAAC;AAAA,EACH;AAEA,SAAO,eAAe,KAAK,EAAE,WAAW,eAAe,QAAQ,MAAM,YAAY,OAAO,EAAE,CAAC;AAC7F;AAGA,eAAe,iBAEb;AACA,QAAM,SAAS,MAAM,aAAa;AAClC,QAAM,SAAS,oBAAI,IAAqD;AACxE,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,UAAU,gBAAiB,QAAO,IAAI,MAAM,KAAK,eAAe;AAAA,aACjE,MAAM,UAAU,UAAW,QAAO,IAAI,MAAM,KAAK,SAAS;AAAA,QAC9D,QAAO,IAAI,MAAM,KAAK,QAAQ;AAAA,EACrC;AACA,SAAO;AACT;AAGO,SAAS,oBAAoB,QAAyC;AAC3E,MAAI,OAAO,WAAW,GAAG;AACvB,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAG,OAAO,IAAI,eAAe;AAAA,EAC/B,EAAE,KAAK,IAAI;AACb;","names":[]}

package/dist/{expert-bridge-NWVCSOA5.js → expert-bridge-VLEDZGPA.js}

@@ -3,9 +3,9 @@ import {
   shutdownExpertBridge,
   tokenSplitFromUsage,
   totalTokensFromUsage
-} from "./chunk-Q64M3PDU.js";
-import "./chunk-4PWPBNDP.js";
-import "./chunk-JHHSNZDT.js";
+} from "./chunk-WAVAOSH5.js";
+import "./chunk-TS4GGKYN.js";
+import "./chunk-NGXHFMA6.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -15,4 +15,4 @@ export {
   tokenSplitFromUsage,
   totalTokensFromUsage
 };
-//# sourceMappingURL=expert-bridge-NWVCSOA5.js.map
+//# sourceMappingURL=expert-bridge-VLEDZGPA.js.map

package/dist/{factory-QZJFG56H.js → factory-EUZWJNFU.js}

@@ -3,16 +3,16 @@ import {
   createCliAdapter,
   getAvailableClis,
   isCliAvailable
-} from "./chunk-ELRBAHJ7.js";
-import "./chunk-D3YWV3NR.js";
-import "./chunk-PVGI2ZFN.js";
-import "./chunk-D7CLVTZM.js";
+} from "./chunk-USHZGWDJ.js";
+import "./chunk-X5R6QOF2.js";
+import "./chunk-X5IOLM33.js";
+import "./chunk-XMMRINZK.js";
 import "./chunk-T46RV7Y7.js";
-import "./chunk-4PWPBNDP.js";
+import "./chunk-TS4GGKYN.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-VCSFP3ZN.js";
-import "./chunk-F5JVNA4I.js";
-import "./chunk-JHHSNZDT.js";
+import "./chunk-YKCVPCLR.js";
+import "./chunk-5EEP73OA.js";
+import "./chunk-NGXHFMA6.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -22,4 +22,4 @@ export {
   getAvailableClis,
   isCliAvailable
 };
-//# sourceMappingURL=factory-QZJFG56H.js.map
+//# sourceMappingURL=factory-EUZWJNFU.js.map

package/dist/{factory-3FLN5V36.js → factory-KBUTXBHE.js}

@@ -1,10 +1,10 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-Q35UI2VQ.js";
-import "./chunk-ZXRSBMNL.js";
-import "./chunk-MGQROE5U.js";
-import "./chunk-JHHSNZDT.js";
+} from "./chunk-R4ITN2N2.js";
+import "./chunk-54YTICHC.js";
+import "./chunk-3PLSFD3D.js";
+import "./chunk-NGXHFMA6.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -12,4 +12,4 @@ export {
   createGitHubProvider,
   createScmProvider
 };
-//# sourceMappingURL=factory-3FLN5V36.js.map
+//# sourceMappingURL=factory-KBUTXBHE.js.map

package/dist/{improvement-review-HAK57UYN.js → improvement-review-JXP4EZ5W.js}

@@ -11,11 +11,11 @@ import {
   loadSelfEvalSignals,
   registerImprovementReviewTool,
   runImprovementReview
-} from "./chunk-FTDEM664.js";
-import "./chunk-DR2ZJHCO.js";
-import "./chunk-6IBZN5NI.js";
-import "./chunk-R2Z4HK4B.js";
-import "./chunk-JHHSNZDT.js";
+} from "./chunk-6WLN4WLY.js";
+import "./chunk-NFKNTZYT.js";
+import "./chunk-THEK5N2A.js";
+import "./chunk-SKUIP3ER.js";
+import "./chunk-NGXHFMA6.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -33,4 +33,4 @@ export {
   registerImprovementReviewTool,
   runImprovementReview
 };
-//# sourceMappingURL=improvement-review-HAK57UYN.js.map
+//# sourceMappingURL=improvement-review-JXP4EZ5W.js.map

package/dist/index.d.ts

@@ -1044,6 +1044,15 @@ interface CliResponse {
     readonly costUsd?: number;
     /** Model used for generation */
     readonly model?: string;
+    /**
+     * The model the caller asked for, when the adapter answered with a
+     * different one from the same CLI family (#6120). Present only on a
+     * substituted response — the claude adapter sets it after an
+     * out-of-credits envelope for the requested model made it retry the next
+     * registry alias — so a record consumer (#6115) can say which model
+     * actually voted. Absent means the requested model answered.
+     */
+    readonly fallbackFrom?: string;
     /** Duration in milliseconds */
     readonly durationMs?: number;
     /** Raw response (for debugging) */
@@ -29039,6 +29048,23 @@ declare class ClaudeCliAdapter extends SubprocessCliAdapter {
      * (current Opus pricing).
      */
     getModelInfo(): ModelInfo;
+    /**
+     * Run the task, and on an out-of-credits envelope for the requested model
+     * retry ONCE with the next claude alias the registry lists (#6120).
+     *
+     * The credit exhaustion the claude CLI reports is per MODEL — `fable`
+     * answered "You're out of usage credits" while `sonnet` answered the same
+     * prompt — so it is not evidence against the CLI, and it must not reach the
+     * per-CLI circuit breaker as one. The breaker records what leaves this
+     * method: a substituted success records nothing, and a second capacity
+     * error propagates as the typed error and counts once, because by then the
+     * family, not one model, has failed. A non-capacity `is_error` (auth, a
+     * server error) is returned as-is; another model would not fix it.
+     *
+     * The substitution is stamped on the response as `fallbackFrom` so a vote
+     * record can say which model actually answered (#6115).
+     */
+    executeTask(task: CliTask, options: ResolvedExecutionOptions): Promise<Result<CliResponse, CliError>>;
     /** Appends optional string-type task options to CLI args. */
     private appendTaskOptions;
     /**
@@ -29416,6 +29442,8 @@ interface ClaudeCliResponse {
     readonly type: 'result';
     readonly subtype?: 'success' | 'error';
     readonly is_error: boolean;
+    /** Why generation stopped — `end_turn` on an answer, `stop_sequence` on the measured error envelope (#6120). */
+    readonly stop_reason?: string;
     readonly duration_ms?: number;
     readonly result: string;
     readonly session_id?: string;
@@ -29451,6 +29479,24 @@ declare class ClaudeResponseParser implements ICliResponseParser<ClaudeCliRespon
      * Returns null if the response contains an error.
      */
     extractResponse(raw: string): string | null;
+    /**
+     * The error text of an `is_error: true` envelope, with its `stop_reason`
+     * (#6120).
+     *
+     * Before this the envelope reached the adapter only through the generic
+     * unparseable-output path, whose first step scans the WHOLE stdout for
+     * rate-limit text. The out-of-credits envelope carries `api_error_status:
+     * 429`, so that scan matched and the error message became the first 500
+     * characters of the envelope — `{"duration_api_ms":0,…` — while the one
+     * field that names the cause, `result`, never reached anyone. Surfacing it
+     * here routes the envelope through `classifyErrorOnlyStream`, which
+     * classifies the message text rather than the envelope bytes.
+     *
+     * `null` when the envelope is not an error, or when `result` is empty: an
+     * empty error text is not a message, and the caller's recovery order handles
+     * it as before.
+     */
+    extractErrorMessage(raw: string): string | null;
     /**
      * Extracts token usage from response.
      */

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-Q35UI2VQ.js";
+} from "./chunk-R4ITN2N2.js";
 import {
   ALLOWED_COMMANDS,
   ARTIFACT_TYPES,
@@ -552,7 +552,7 @@ import {
   withLogging,
   withRetry,
   withRetryWrapper
-} from "./chunk-SA7P7PYY.js";
+} from "./chunk-RWK5XSUL.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -560,7 +560,7 @@ import {
   generateSecurityPlan,
   getRegistryManifest,
   resolveScannerData
-} from "./chunk-YEM7GMVB.js";
+} from "./chunk-XM5MYAMC.js";
 import {
   analyzeGitHubRepo,
   analyzeRepo,
@@ -578,23 +578,24 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-XC6CDASQ.js";
+} from "./chunk-33RHZITC.js";
 import "./chunk-3KDQKVCJ.js";
 import {
   closeServer,
   connectTransport,
   createServer,
   startStdioServer
-} from "./chunk-CIHUGM4T.js";
+} from "./chunk-QU37LE3Y.js";
+import "./chunk-XBSPEJ23.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
   OpenAIAdapter,
   createOpenAIAdapter
-} from "./chunk-DEVIH4AT.js";
+} from "./chunk-2WCWSJES.js";
 import {
   executeExpert
-} from "./chunk-Q64M3PDU.js";
+} from "./chunk-WAVAOSH5.js";
 import {
   AgentFindingSchema,
   ConsensusEngine,
@@ -643,12 +644,12 @@ import {
   generateProposalId,
   parseAgentPairKey,
   registerConsensusVoteTool
-} from "./chunk-M2327EET.js";
-import "./chunk-5DYRHSCE.js";
+} from "./chunk-LJMPYBT5.js";
+import "./chunk-ELBJDCC7.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
-import "./chunk-E4VUJZGC.js";
+import "./chunk-WWZKWC2Z.js";
 import {
   AgentActionSchema,
   DEFAULT_FIREWALL_POLICY_MODE,
@@ -678,11 +679,11 @@ import {
   resolveFirewallPolicyMode,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-QD3T5DUB.js";
+} from "./chunk-NBQ457TC.js";
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-ZXRSBMNL.js";
+} from "./chunk-54YTICHC.js";
 import {
   GitHubUserRoleSchema,
   InjectionFlagSchema,
@@ -697,11 +698,11 @@ import {
   assessReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-SNQF2GZA.js";
+} from "./chunk-XYK2GPUF.js";
 import {
   ImprovementReviewInputSchema,
   registerImprovementReviewTool
-} from "./chunk-FTDEM664.js";
+} from "./chunk-6WLN4WLY.js";
 import {
   AgentPerformanceSchema,
   ConsensusAlgorithmSchema,
@@ -737,10 +738,10 @@ import {
   toolSuccess,
   toolSuccessStructured,
   validateToolInput
-} from "./chunk-DR2ZJHCO.js";
+} from "./chunk-NFKNTZYT.js";
 import {
   VERSION
-} from "./chunk-6IBZN5NI.js";
+} from "./chunk-THEK5N2A.js";
 import {
   AuditTrail,
   createAuditTrail,
@@ -751,13 +752,13 @@ import {
   emitReputationEvent,
   emitSanitizationEvent,
   emitTrustEvent
-} from "./chunk-R2Z4HK4B.js";
+} from "./chunk-SKUIP3ER.js";
 import {
   UnifiedAdapterRegistry,
   createUnifiedRegistry,
   getGlobalRegistry,
   resetGlobalRegistry
-} from "./chunk-PT36V4VS.js";
+} from "./chunk-3JFRPAYE.js";
 import {
   PersistentStrategyDistiller,
   RulesSnapshotSchema,
@@ -765,18 +766,18 @@ import {
   TokenCounter,
   TokenCounterProvider,
   createTokenCounter
-} from "./chunk-RVWAMRVN.js";
-import "./chunk-DSAY7HRZ.js";
+} from "./chunk-CTLBZ33K.js";
+import "./chunk-GE4KNPPO.js";
 import {
   getTokenEnvVars,
   hasToken,
   resolveToken
-} from "./chunk-MGQROE5U.js";
+} from "./chunk-3PLSFD3D.js";
 import {
   MemoryError
-} from "./chunk-BZUFLIVF.js";
+} from "./chunk-THPZO2XW.js";
 import "./chunk-7LP6VJRP.js";
-import "./chunk-HJQSY4XL.js";
+import "./chunk-N6NHQWQR.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -821,7 +822,7 @@ import {
   isCliAvailable,
   isRetryableError,
   sleep
-} from "./chunk-ELRBAHJ7.js";
+} from "./chunk-USHZGWDJ.js";
 import {
   AdapterModelError,
   BaseAdapter,
@@ -843,11 +844,11 @@ import {
   tapStream,
   transformStream,
   withTimeout
-} from "./chunk-D3YWV3NR.js";
-import "./chunk-PVGI2ZFN.js";
+} from "./chunk-X5R6QOF2.js";
+import "./chunk-X5IOLM33.js";
 import {
   PROVIDER_ENV_KEYS
-} from "./chunk-D7CLVTZM.js";
+} from "./chunk-XMMRINZK.js";
 import "./chunk-T46RV7Y7.js";
 import {
   AvailabilityCache,
@@ -857,13 +858,13 @@ import {
   getFallbackChain,
   resetAvailabilityCache,
   resolveFallback
-} from "./chunk-4PWPBNDP.js";
+} from "./chunk-TS4GGKYN.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-VCSFP3ZN.js";
+import "./chunk-YKCVPCLR.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-F5JVNA4I.js";
+} from "./chunk-5EEP73OA.js";
 import {
   AgentCapability,
   AgentError,
@@ -942,7 +943,7 @@ import {
   toError,
   unwrap,
   unwrapOr
-} from "./chunk-JHHSNZDT.js";
+} from "./chunk-NGXHFMA6.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";