nexus-agents 8.55.1 → 8.55.3

package/dist/{chunk-CXI5IKJY.js → chunk-6EZJZCME.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-BMAJT4TH.js";
+} from "./chunk-XQAL7KRH.js";
 import {
   executeExpert
 } from "./chunk-TYIJXEOF.js";
@@ -62,7 +62,7 @@ import {
   toJobSummary,
   updateStage,
   writeJobCancelled
-} from "./chunk-KNQJUKFP.js";
+} from "./chunk-W4BB2WJN.js";
 import {
   allOf,
   anyOf
@@ -82,7 +82,7 @@ import {
 } from "./chunk-WZIGNHRW.js";
 import {
   withPrerequisite
-} from "./chunk-MHKTXCD2.js";
+} from "./chunk-GXSRZORT.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -107,7 +107,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-YZIZY2V5.js";
+} from "./chunk-VWTEV2UR.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -27320,10 +27320,10 @@ function calculateDifferenceCI(p1, p2, total1, total2, confidence) {
   const difference = p1 - p2;
   const measured = total1 > 0 && total2 > 0;
   const seDiff = Math.sqrt(p1 * (1 - p1) / (total1 || 1) + p2 * (1 - p2) / (total2 || 1));
-  const z128 = getZScore(confidence);
+  const z129 = getZScore(confidence);
   return {
-    lower: difference - z128 * seDiff,
-    upper: difference + z128 * seDiff,
+    lower: difference - z129 * seDiff,
+    upper: difference + z129 * seDiff,
     estimate: difference,
     confidence,
     n: total1 + total2,
@@ -27351,11 +27351,11 @@ function proportionConfidenceInterval(successes, total, options = {}) {
       measured: false
     };
   }
-  const z128 = getZScore(opts.confidence);
-  const z210 = z128 * z128;
+  const z129 = getZScore(opts.confidence);
+  const z210 = z129 * z129;
   const denominator = 1 + z210 / n;
   const center = (p + z210 / (2 * n)) / denominator;
-  const margin = z128 / denominator * Math.sqrt(p * (1 - p) / n + z210 / (4 * n * n));
+  const margin = z129 / denominator * Math.sqrt(p * (1 - p) / n + z210 / (4 * n * n));
   const lower = Math.max(0, center - margin);
   const upper = Math.min(1, center + margin);
   const standardError = Math.sqrt(p * (1 - p) / n);
@@ -27393,8 +27393,8 @@ function meanConfidenceInterval(values, options = {}) {
   const variance = values.reduce((sum, v) => sum + (v - mean) ** 2, 0) / (n - 1 || 1);
   const stdDev = Math.sqrt(variance);
   const standardError = stdDev / Math.sqrt(n);
-  const z128 = getZScore(opts.confidence);
-  const margin = z128 * standardError;
+  const z129 = getZScore(opts.confidence);
+  const margin = z129 * standardError;
   return {
     lower: mean - margin,
     upper: mean + margin,
@@ -39095,7 +39095,7 @@ function registerListWorkflowsTool(server, deps) {
 }
 
 // src/mcp/tools/execute-expert.ts
-import { z as z69 } from "zod";
+import { z as z70 } from "zod";
 
 // src/mcp/tools/execute-expert-recording.ts
 var ROLE_TO_CATEGORY = {
@@ -39289,14 +39289,113 @@ function observeExpertContext(observation, logger57, threshold = resolveContextW
   }
 }
 
-// src/mcp/tools/execute-expert.ts
-var EXPERT_TIMEOUT_FLOOR_MS = EXPERT_TIMEOUTS.executeFloorMs;
-var ExecuteExpertInputSchema = z69.object({
+// src/mcp/tools/execute-expert-task-handler.ts
+import { z as z69 } from "zod";
+var EXECUTE_EXPERT_TOOL_SCHEMA = {
   expertId: z69.string().min(1).describe("Expert ID from create_expert tool"),
   task: z69.string().min(1).max(5e4).describe("Task description for the expert to execute"),
   context: z69.record(z69.string(), z69.unknown()).optional().describe("Additional context metadata for the task"),
-  timeoutMs: z69.number().int().min(EXPERT_TIMEOUT_FLOOR_MS).max(EXPERT_TIMEOUTS.maxMs).optional().describe("Optional timeout in ms (120s-900s). Overrides auto-detected timeout."),
-  previousExpertSummary: z69.string().max(2e3).optional().describe(
+  timeoutMs: z69.number().int().min(EXPERT_TIMEOUTS.executeFloorMs).max(EXPERT_TIMEOUTS.maxMs).optional().describe("Optional timeout in ms (120s-900s). Overrides auto-detected timeout.")
+};
+function createTaskHandler(deps, logger57, executor) {
+  const notifier = deps.notifier ?? NOOP_NOTIFIER;
+  return {
+    createTask: (args, extra) => {
+      const parsed = executor.inputSchema.safeParse(args);
+      if (!parsed.success) {
+        return Promise.reject(new Error(`Validation error: ${formatZodError(parsed.error)}`));
+      }
+      const validatedArgs = parsed.data;
+      const { taskStore } = extra;
+      const ttl = clampTaskTtl(DEFAULT_TASK_TTL_MS);
+      return taskStore.createTask({ ttl, pollInterval: 5e3 }).then((task) => {
+        logger57.info("Task created for execute_expert", {
+          taskId: task.taskId,
+          expertId: validatedArgs.expertId
+        });
+        void runBackgroundExpertTask({
+          deps,
+          args: validatedArgs,
+          taskId: task.taskId,
+          taskStore,
+          notifier,
+          execute: executor.execute
+        });
+        return { task };
+      });
+    },
+    getTask: (_args, extra) => {
+      return extra.taskStore.getTask(extra.taskId);
+    },
+    getTaskResult: (_args, extra) => {
+      return extra.taskStore.getTaskResult(extra.taskId);
+    }
+  };
+}
+function notifyExpertComplete(notifier, taskId, response) {
+  notifier.info("execute_expert", {
+    event: "expert_complete",
+    taskId,
+    role: response.role,
+    confidence: response.status === "success" ? 1 : 0,
+    tokenUsage: response.tokensUsed,
+    ...response.tokensMeasured !== void 0 ? { tokensMeasured: response.tokensMeasured } : {}
+  });
+}
+async function runBackgroundExpertTask(opts) {
+  const { deps, args, taskId, taskStore, notifier, execute } = opts;
+  const logger57 = deps.logger ?? createLogger({ tool: "execute_expert" });
+  try {
+    notifier.info("execute_expert", {
+      event: "expert_start",
+      taskId,
+      expertId: args.expertId
+    });
+    const result = await withProgressHeartbeat(
+      "execute_expert",
+      notifier,
+      () => execute(deps, args)
+    );
+    if (!result.ok) {
+      await taskStore.storeTaskResult(taskId, "failed", {
+        ...toolStructuredError({
+          errorCategory: "internal",
+          message: `Failed to execute expert: ${result.error}`
+        })
+      });
+      return;
+    }
+    notifyExpertComplete(notifier, taskId, result.value);
+    await taskStore.storeTaskResult(taskId, "completed", {
+      ...toolSuccess(JSON.stringify(result.value, null, 2))
+    });
+  } catch (error) {
+    const message = getErrorMessage(error);
+    logger57.warn("Background expert task failed", { taskId, error: message });
+    try {
+      await taskStore.storeTaskResult(taskId, "failed", {
+        ...toolStructuredError({
+          errorCategory: "internal",
+          message: `Expert execution error: ${message}`
+        })
+      });
+    } catch (storeError) {
+      logger57.warn("Failed to store task failure result", {
+        taskId,
+        error: getErrorMessage(storeError)
+      });
+    }
+  }
+}
+
+// src/mcp/tools/execute-expert.ts
+var EXPERT_TIMEOUT_FLOOR_MS = EXPERT_TIMEOUTS.executeFloorMs;
+var ExecuteExpertInputSchema = z70.object({
+  expertId: z70.string().min(1).describe("Expert ID from create_expert tool"),
+  task: z70.string().min(1).max(5e4).describe("Task description for the expert to execute"),
+  context: z70.record(z70.string(), z70.unknown()).optional().describe("Additional context metadata for the task"),
+  timeoutMs: z70.number().int().min(EXPERT_TIMEOUT_FLOOR_MS).max(EXPERT_TIMEOUTS.maxMs).optional().describe("Optional timeout in ms (120s-900s). Overrides auto-detected timeout."),
+  previousExpertSummary: z70.string().max(2e3).optional().describe(
     "Summary from a previous expert in the chain. Injected into prompt for context continuity."
   )
 });
@@ -39660,102 +39759,6 @@ async function handleExecuteExpert(deps, args) {
     return { ok: false, error: getErrorMessage(depthError) };
   }
 }
-var EXECUTE_EXPERT_TOOL_SCHEMA = {
-  expertId: z69.string().min(1).describe("Expert ID from create_expert tool"),
-  task: z69.string().min(1).max(5e4).describe("Task description for the expert to execute"),
-  context: z69.record(z69.string(), z69.unknown()).optional().describe("Additional context metadata for the task"),
-  timeoutMs: z69.number().int().min(EXPERT_TIMEOUT_FLOOR_MS).max(EXPERT_TIMEOUTS.maxMs).optional().describe("Optional timeout in ms (120s-900s). Overrides auto-detected timeout.")
-};
-function createTaskHandler(deps, logger57) {
-  const notifier = deps.notifier ?? NOOP_NOTIFIER;
-  return {
-    createTask: (args, extra) => {
-      const parsed = ExecuteExpertInputSchema.safeParse(args);
-      if (!parsed.success) {
-        return Promise.reject(new Error(`Validation error: ${formatZodError(parsed.error)}`));
-      }
-      const validatedArgs = parsed.data;
-      const { taskStore } = extra;
-      const ttl = clampTaskTtl(DEFAULT_TASK_TTL_MS);
-      const taskPromise = taskStore.createTask({ ttl, pollInterval: 5e3 }).then((task) => {
-        logger57.info("Task created for execute_expert", {
-          taskId: task.taskId,
-          expertId: validatedArgs.expertId
-        });
-        void runBackgroundExpertTask({
-          deps,
-          args: validatedArgs,
-          taskId: task.taskId,
-          taskStore,
-          notifier
-        });
-        return { task };
-      });
-      return taskPromise;
-    },
-    getTask: (_args, extra) => {
-      return extra.taskStore.getTask(extra.taskId);
-    },
-    getTaskResult: (_args, extra) => {
-      return extra.taskStore.getTaskResult(extra.taskId);
-    }
-  };
-}
-function notifyExpertComplete(notifier, taskId, response) {
-  notifier.info("execute_expert", {
-    event: "expert_complete",
-    taskId,
-    role: response.role,
-    confidence: response.status === "success" ? 1 : 0,
-    tokenUsage: response.tokensUsed,
-    ...response.tokensMeasured !== void 0 ? { tokensMeasured: response.tokensMeasured } : {}
-  });
-}
-async function runBackgroundExpertTask(opts) {
-  const { deps, args, taskId, taskStore, notifier } = opts;
-  const logger57 = deps.logger ?? createLogger({ tool: "execute_expert" });
-  try {
-    notifier.info("execute_expert", {
-      event: "expert_start",
-      taskId,
-      expertId: args.expertId
-    });
-    const result = await withProgressHeartbeat(
-      "execute_expert",
-      notifier,
-      () => handleExecuteExpert(deps, args)
-    );
-    if (!result.ok) {
-      await taskStore.storeTaskResult(taskId, "failed", {
-        ...toolStructuredError({
-          errorCategory: "internal",
-          message: `Failed to execute expert: ${result.error}`
-        })
-      });
-      return;
-    }
-    notifyExpertComplete(notifier, taskId, result.value);
-    await taskStore.storeTaskResult(taskId, "completed", {
-      ...toolSuccess(JSON.stringify(result.value, null, 2))
-    });
-  } catch (error) {
-    const message = getErrorMessage(error);
-    logger57.warn("Background expert task failed", { taskId, error: message });
-    try {
-      await taskStore.storeTaskResult(taskId, "failed", {
-        ...toolStructuredError({
-          errorCategory: "internal",
-          message: `Expert execution error: ${message}`
-        })
-      });
-    } catch (storeError) {
-      logger57.warn("Failed to store task failure result", {
-        taskId,
-        error: getErrorMessage(storeError)
-      });
-    }
-  }
-}
 function registerExecuteExpertTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "execute_expert" });
   const notifier = deps.notifier ?? createMcpNotifier(server);
@@ -39769,31 +39772,34 @@ function registerExecuteExpertTool(server, deps) {
       execution: { taskSupport: "optional" },
       annotations: getToolAnnotations("execute_expert")
     },
-    createTaskHandler(depsWithNotifier, logger57)
+    createTaskHandler(depsWithNotifier, logger57, {
+      inputSchema: ExecuteExpertInputSchema,
+      execute: handleExecuteExpert
+    })
   );
   logger57.info("Registered execute_expert tool with MCP Tasks support (taskSupport: optional)");
 }
 
 // src/mcp/tools/research-query.ts
-import { z as z71 } from "zod";
+import { z as z72 } from "zod";
 import { join as join6 } from "node:path";
 
 // src/research/negative-results.ts
 import { readFileSync as readFileSync5 } from "node:fs";
 import { join as join5 } from "node:path";
 import yaml3 from "yaml";
-import { z as z70 } from "zod";
+import { z as z71 } from "zod";
 var logger33 = createLogger({ component: "negative-results" });
-var NegativeResultSchema = z70.object({
-  name: z70.string(),
-  paper: z70.string(),
-  rejection_date: z70.string(),
-  failure_mode: z70.string(),
-  lessons_learned: z70.array(z70.string()),
-  reopen_conditions: z70.array(z70.string())
+var NegativeResultSchema = z71.object({
+  name: z71.string(),
+  paper: z71.string(),
+  rejection_date: z71.string(),
+  failure_mode: z71.string(),
+  lessons_learned: z71.array(z71.string()),
+  reopen_conditions: z71.array(z71.string())
 });
-var NegativeResultsRegistrySchema = z70.object({
-  negative_results: z70.record(z70.string(), NegativeResultSchema)
+var NegativeResultsRegistrySchema = z71.object({
+  negative_results: z71.record(z71.string(), NegativeResultSchema)
 });
 var NEGATIVE_RESULTS_FILE = "negative-results.yaml";
 function negativeResultsPath() {
@@ -39847,23 +39853,23 @@ function formatRejectionWarning(id, result) {
 }
 
 // src/mcp/tools/research-query.ts
-var ResearchQueryInputSchema = z71.object({
-  action: z71.enum(["status", "overlap", "stats", "search"]).describe(
+var ResearchQueryInputSchema = z72.object({
+  action: z72.enum(["status", "overlap", "stats", "search"]).describe(
     "Query action: status (technique status), overlap (find related techniques), stats (registry statistics), search (text search)"
   ),
-  techniqueId: z71.string().optional().describe("Technique ID for status/overlap queries"),
-  query: z71.string().optional().describe("Search query string for search action"),
-  status: z71.enum(["implemented", "planned", "not-started", "rejected", "all"]).optional().default("all").describe("Filter by technique status (for status action)"),
-  threshold: z71.number().min(0).max(1).optional().default(0.3).describe("Overlap threshold (0-1) for overlap action")
+  techniqueId: z72.string().optional().describe("Technique ID for status/overlap queries"),
+  query: z72.string().optional().describe("Search query string for search action"),
+  status: z72.enum(["implemented", "planned", "not-started", "rejected", "all"]).optional().default("all").describe("Filter by technique status (for status action)"),
+  threshold: z72.number().min(0).max(1).optional().default(0.3).describe("Overlap threshold (0-1) for overlap action")
 });
 var ResearchQueryOutputSchema = {
-  action: z71.string(),
-  success: z71.boolean(),
-  data: z71.unknown(),
-  rejectionNotice: z71.string().optional(),
-  negativeResults: z71.object({
-    status: z71.literal("unavailable"),
-    reason: z71.string()
+  action: z72.string(),
+  success: z72.boolean(),
+  data: z72.unknown(),
+  rejectionNotice: z72.string().optional(),
+  negativeResults: z72.object({
+    status: z72.literal("unavailable"),
+    reason: z72.string()
   }).optional()
 };
 function rejectionMetadataFor(techniqueId) {
@@ -40001,11 +40007,11 @@ function createResearchQueryHandler(deps) {
 function registerResearchQueryTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "research_query" });
   const toolSchema = {
-    action: z71.enum(["status", "overlap", "stats", "search"]).describe("Query action: status, overlap, stats, or search"),
-    techniqueId: z71.string().optional().describe("Technique ID for status/overlap queries"),
-    query: z71.string().optional().describe("Search query string for search action"),
-    status: z71.enum(["implemented", "planned", "not-started", "rejected", "all"]).optional().describe("Filter by technique status"),
-    threshold: z71.number().min(0).max(1).optional().describe("Overlap threshold (0-1) for overlap action")
+    action: z72.enum(["status", "overlap", "stats", "search"]).describe("Query action: status, overlap, stats, or search"),
+    techniqueId: z72.string().optional().describe("Technique ID for status/overlap queries"),
+    query: z72.string().optional().describe("Search query string for search action"),
+    status: z72.enum(["implemented", "planned", "not-started", "rejected", "all"]).optional().describe("Filter by technique status"),
+    threshold: z72.number().min(0).max(1).optional().describe("Overlap threshold (0-1) for overlap action")
   };
   const description = "Query the research registry for technique status, overlaps, statistics, or text search. Provides read-only access to the research tracking system.";
   const secureHandler = createSecureHandler(createResearchQueryHandler(deps), {
@@ -40032,12 +40038,12 @@ function registerResearchQueryTool(server, deps) {
 }
 
 // src/mcp/tools/research-add.ts
-import { z as z72 } from "zod";
-var ResearchAddInputSchema = z72.object({
-  arxivId: z72.string().regex(/^\d{4}\.\d{4,5}$/, "Invalid arXiv ID format (expected XXXX.XXXXX)").describe('arXiv paper ID (e.g., "2401.12345")'),
-  topic: z72.string().optional().describe("Research topic to categorize the paper under"),
-  priority: z72.enum(["P1", "P2", "P3", "P4"]).optional().describe("Priority level for the paper"),
-  dryRun: z72.boolean().optional().default(false).describe("Preview what would be added without persisting")
+import { z as z73 } from "zod";
+var ResearchAddInputSchema = z73.object({
+  arxivId: z73.string().regex(/^\d{4}\.\d{4,5}$/, "Invalid arXiv ID format (expected XXXX.XXXXX)").describe('arXiv paper ID (e.g., "2401.12345")'),
+  topic: z73.string().optional().describe("Research topic to categorize the paper under"),
+  priority: z73.enum(["P1", "P2", "P3", "P4"]).optional().describe("Priority level for the paper"),
+  dryRun: z73.boolean().optional().default(false).describe("Preview what would be added without persisting")
 });
 async function executeResearchAdd(input, logger57) {
   const exists = await paperExists(input.arxivId);
@@ -40105,10 +40111,10 @@ function createResearchAddHandler(deps) {
 function registerResearchAddTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "research_add" });
   const toolSchema = {
-    arxivId: z72.string().regex(/^\d{4}\.\d{4,5}$/).describe('arXiv paper ID (e.g., "2401.12345")'),
-    topic: z72.string().optional().describe("Research topic to categorize the paper under"),
-    priority: z72.enum(["P1", "P2", "P3", "P4"]).optional().describe("Priority level"),
-    dryRun: z72.boolean().optional().default(false).describe("Preview without persisting")
+    arxivId: z73.string().regex(/^\d{4}\.\d{4,5}$/).describe('arXiv paper ID (e.g., "2401.12345")'),
+    topic: z73.string().optional().describe("Research topic to categorize the paper under"),
+    priority: z73.enum(["P1", "P2", "P3", "P4"]).optional().describe("Priority level"),
+    dryRun: z73.boolean().optional().default(false).describe("Preview without persisting")
   };
   const description = "PAPER-only: add an arXiv preprint to the research registry by arXiv ID. Fetches metadata from arxiv.org and persists to the registry. For non-paper sources (GitHub repos, tools, blogs) use `research_add_source` instead. Use dryRun=true to preview without saving.";
   const secureHandler = createSecureHandler(createResearchAddHandler(deps), {
@@ -40122,11 +40128,11 @@ function registerResearchAddTool(server, deps) {
     logger: logger57
   });
   const outputSchema = {
-    success: z72.boolean(),
-    paperId: z72.string().optional(),
-    title: z72.string().optional(),
-    message: z72.string(),
-    dryRun: z72.boolean().optional()
+    success: z73.boolean(),
+    paperId: z73.string().optional(),
+    title: z73.string().optional(),
+    message: z73.string(),
+    dryRun: z73.boolean().optional()
   };
   server.registerTool(
     "research_add",
@@ -40142,33 +40148,33 @@ function registerResearchAddTool(server, deps) {
 }
 
 // src/mcp/tools/research-add-source.ts
-import { z as z73 } from "zod";
-var SourceTypeEnum = z73.enum([
+import { z as z74 } from "zod";
+var SourceTypeEnum = z74.enum([
   "product_docs",
   "specification",
   "research_blog",
   "code_analysis",
   "open_source_repo"
 ]);
-var VerdictEnum = z73.enum(["adopted", "partially_adopted", "rejected", "monitoring", "planned"]);
-var ResearchAddSourceInputSchema = z73.object({
-  url: z73.string().min(1).max(500).describe("Source URL (GitHub repo, docs page, blog post)"),
-  name: z73.string().min(1).max(200).describe("Display name for the source"),
+var VerdictEnum = z74.enum(["adopted", "partially_adopted", "rejected", "monitoring", "planned"]);
+var ResearchAddSourceInputSchema = z74.object({
+  url: z74.string().min(1).max(500).describe("Source URL (GitHub repo, docs page, blog post)"),
+  name: z74.string().min(1).max(200).describe("Display name for the source"),
   type: SourceTypeEnum.describe("Source type classification"),
-  vendor: z73.string().max(100).optional().describe("Vendor or organization"),
-  topics: z73.array(z73.string().max(50)).max(5).optional().describe("Research topics (max 5)"),
-  tags: z73.array(z73.string().max(50)).max(10).optional().describe("Searchable tags (max 10)"),
-  quality_signals: z73.object({
-    stars_at_review: z73.number().nonnegative().optional(),
-    language: z73.string().max(50).optional(),
-    has_tests: z73.boolean().optional(),
-    has_docs: z73.boolean().optional(),
-    has_paper: z73.boolean().optional()
+  vendor: z74.string().max(100).optional().describe("Vendor or organization"),
+  topics: z74.array(z74.string().max(50)).max(5).optional().describe("Research topics (max 5)"),
+  tags: z74.array(z74.string().max(50)).max(10).optional().describe("Searchable tags (max 10)"),
+  quality_signals: z74.object({
+    stars_at_review: z74.number().nonnegative().optional(),
+    language: z74.string().max(50).optional(),
+    has_tests: z74.boolean().optional(),
+    has_docs: z74.boolean().optional(),
+    has_paper: z74.boolean().optional()
   }).optional().describe("Quality signals used to compute quality_score; provide explicitly \u2014 no GitHub metadata is fetched"),
-  techniques_extracted: z73.array(z73.string().max(100)).max(5).optional().describe("Techniques identified in this source (max 5)"),
+  techniques_extracted: z74.array(z74.string().max(100)).max(5).optional().describe("Techniques identified in this source (max 5)"),
   verdict: VerdictEnum.optional().describe("Adoption verdict"),
-  verdict_notes: z73.string().max(500).optional().describe("Notes explaining the verdict"),
-  dryRun: z73.boolean().optional().default(false).describe("Preview without persisting")
+  verdict_notes: z74.string().max(500).optional().describe("Notes explaining the verdict"),
+  dryRun: z74.boolean().optional().default(false).describe("Preview without persisting")
 });
 function generateSourceId(url) {
   const match = /github\.com\/([^/]+)\/([^/]+)/.exec(url);
@@ -40308,23 +40314,23 @@ function createResearchAddSourceHandler(deps) {
 function registerResearchAddSourceTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "research_add_source" });
   const toolSchema = {
-    url: z73.string().min(1).describe("Source URL"),
-    name: z73.string().min(1).describe("Display name"),
+    url: z74.string().min(1).describe("Source URL"),
+    name: z74.string().min(1).describe("Display name"),
     type: SourceTypeEnum.describe("Source type"),
-    vendor: z73.string().optional().describe("Vendor"),
-    topics: z73.array(z73.string()).max(5).optional().describe("Topics"),
-    tags: z73.array(z73.string()).max(10).optional().describe("Tags"),
-    quality_signals: z73.object({
-      stars_at_review: z73.number().optional(),
-      language: z73.string().optional(),
-      has_tests: z73.boolean().optional(),
-      has_docs: z73.boolean().optional(),
-      has_paper: z73.boolean().optional()
+    vendor: z74.string().optional().describe("Vendor"),
+    topics: z74.array(z74.string()).max(5).optional().describe("Topics"),
+    tags: z74.array(z74.string()).max(10).optional().describe("Tags"),
+    quality_signals: z74.object({
+      stars_at_review: z74.number().optional(),
+      language: z74.string().optional(),
+      has_tests: z74.boolean().optional(),
+      has_docs: z74.boolean().optional(),
+      has_paper: z74.boolean().optional()
     }).optional().describe("Quality signals"),
-    techniques_extracted: z73.array(z73.string()).max(5).optional().describe("Techniques"),
+    techniques_extracted: z74.array(z74.string()).max(5).optional().describe("Techniques"),
     verdict: VerdictEnum.optional().describe("Adoption verdict"),
-    verdict_notes: z73.string().max(500).optional().describe("Verdict notes"),
-    dryRun: z73.boolean().optional().default(false).describe("Preview only")
+    verdict_notes: z74.string().max(500).optional().describe("Verdict notes"),
+    dryRun: z74.boolean().optional().default(false).describe("Preview only")
   };
   const description = "NON-PAPER source: add a GitHub repo / tool / blog URL to the research registry. Auto-computes quality_score from provided quality_signals. For arXiv papers use `research_add` instead. Use dryRun=true to preview without saving.";
   const secureHandler = createSecureHandler(createResearchAddSourceHandler(deps), {
@@ -40350,22 +40356,22 @@ function registerResearchAddSourceTool(server, deps) {
   );
 }
 var RESEARCH_ADD_SOURCE_OUTPUT_SCHEMA = {
-  success: z73.boolean(),
-  sourceId: z73.string().optional(),
-  name: z73.string().optional(),
-  quality_score: z73.number().optional(),
-  evidence_tier: z73.string().optional(),
-  message: z73.string().optional(),
-  dryRun: z73.boolean().optional()
+  success: z74.boolean(),
+  sourceId: z74.string().optional(),
+  name: z74.string().optional(),
+  quality_score: z74.number().optional(),
+  evidence_tier: z74.string().optional(),
+  message: z74.string().optional(),
+  dryRun: z74.boolean().optional()
 };
 
 // src/mcp/tools/research-discover.ts
-import { z as z74 } from "zod";
+import { z as z75 } from "zod";
 var MAX_RESULTS_PER_SOURCE = 20;
 var DEFAULT_RELEVANCE_THRESHOLD = 0.3;
-var ResearchDiscoverInputSchema = z74.object({
-  topic: z74.string().min(1).max(200).describe('Research topic to search for (e.g., "multi-agent orchestration")'),
-  source: z74.enum([
+var ResearchDiscoverInputSchema = z75.object({
+  topic: z75.string().min(1).max(200).describe('Research topic to search for (e.g., "multi-agent orchestration")'),
+  source: z75.enum([
     "arxiv",
     "github",
     "google_ai",
@@ -40379,9 +40385,9 @@ var ResearchDiscoverInputSchema = z74.object({
   ]).optional().default("all").describe(
     "Source to search: arxiv, github, google_ai, meta_fair, microsoft, deepmind, semantic_scholar, papers_with_code, openalex, or all"
   ),
-  maxResults: z74.number().min(1).max(MAX_RESULTS_PER_SOURCE).optional().default(10).describe("Maximum results to return"),
-  sinceDate: z74.string().optional().describe("Only return results after this date (YYYY-MM-DD format)"),
-  relevanceThreshold: z74.number().min(0).max(1).optional().default(DEFAULT_RELEVANCE_THRESHOLD).describe(
+  maxResults: z75.number().min(1).max(MAX_RESULTS_PER_SOURCE).optional().default(10).describe("Maximum results to return"),
+  sinceDate: z75.string().optional().describe("Only return results after this date (YYYY-MM-DD format)"),
+  relevanceThreshold: z75.number().min(0).max(1).optional().default(DEFAULT_RELEVANCE_THRESHOLD).describe(
     "Minimum relevance score (0-1) to include in results. Higher values filter more aggressively."
   )
 });
@@ -40656,8 +40662,8 @@ function createResearchDiscoverHandler(deps) {
 function registerResearchDiscoverTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "research_discover" });
   const toolSchema = {
-    topic: z74.string().min(1).max(200).describe("Research topic to search for"),
-    source: z74.enum([
+    topic: z75.string().min(1).max(200).describe("Research topic to search for"),
+    source: z75.enum([
       "arxiv",
       "github",
       "google_ai",
@@ -40669,9 +40675,9 @@ function registerResearchDiscoverTool(server, deps) {
       "openalex",
       "all"
     ]).optional().describe("Source to search"),
-    maxResults: z74.number().min(1).max(MAX_RESULTS_PER_SOURCE).optional().describe("Max results"),
-    sinceDate: z74.string().optional().describe("Only results after this date (YYYY-MM-DD)"),
-    relevanceThreshold: z74.number().min(0).max(1).optional().describe("Minimum relevance score (0-1) to include results. Higher = stricter filtering.")
+    maxResults: z75.number().min(1).max(MAX_RESULTS_PER_SOURCE).optional().describe("Max results"),
+    sinceDate: z75.string().optional().describe("Only results after this date (YYYY-MM-DD)"),
+    relevanceThreshold: z75.number().min(0).max(1).optional().describe("Minimum relevance score (0-1) to include results. Higher = stricter filtering.")
   };
   const description = "Discover new research papers and repositories from external sources. Searches arXiv, GitHub, and other sources. Filters out items already in the registry.";
   const secureHandler = createSecureHandler(createResearchDiscoverHandler(deps), {
@@ -40697,24 +40703,24 @@ function registerResearchDiscoverTool(server, deps) {
   logger57.info("Registered research_discover tool with secure handler and timeout protection");
 }
 var RESEARCH_DISCOVER_OUTPUT_SCHEMA = {
-  topic: z74.string().optional(),
-  sourcesQueried: z74.array(z74.string()).optional(),
-  failedSources: z74.array(z74.string()).optional(),
-  items: z74.array(z74.unknown()).optional(),
-  totalFound: z74.number().optional(),
-  alreadyInRegistry: z74.number().optional(),
-  registryConsulted: z74.boolean().optional(),
-  newItems: z74.number().optional(),
-  filteredByRelevance: z74.number().optional()
+  topic: z75.string().optional(),
+  sourcesQueried: z75.array(z75.string()).optional(),
+  failedSources: z75.array(z75.string()).optional(),
+  items: z75.array(z75.unknown()).optional(),
+  totalFound: z75.number().optional(),
+  alreadyInRegistry: z75.number().optional(),
+  registryConsulted: z75.boolean().optional(),
+  newItems: z75.number().optional(),
+  filteredByRelevance: z75.number().optional()
 };
 
 // src/mcp/tools/research-analyze.ts
-import { z as z75 } from "zod";
-var ResearchAnalyzeInputSchema = z75.object({
-  focus: z75.enum(["gaps", "trends", "priorities", "stale", "coverage"]).describe(
+import { z as z76 } from "zod";
+var ResearchAnalyzeInputSchema = z76.object({
+  focus: z76.enum(["gaps", "trends", "priorities", "stale", "coverage"]).describe(
     "Analysis focus: gaps (missing coverage), trends (topic distribution), priorities (P1/P2 backlog), stale (outdated entries), coverage (implementation status)"
   ),
-  topic: z75.string().optional().describe("Optional topic filter to narrow analysis")
+  topic: z76.string().optional().describe("Optional topic filter to narrow analysis")
 });
 function failureResponse(focus, registry = "techniques") {
   return {
@@ -40960,8 +40966,8 @@ function createResearchAnalyzeHandler(deps) {
 function registerResearchAnalyzeTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "research_analyze" });
   const toolSchema = {
-    focus: z75.enum(["gaps", "trends", "priorities", "stale", "coverage"]).describe("Analysis focus area"),
-    topic: z75.string().optional().describe("Optional topic filter")
+    focus: z76.enum(["gaps", "trends", "priorities", "stale", "coverage"]).describe("Analysis focus area"),
+    topic: z76.string().optional().describe("Optional topic filter")
   };
   const description = "Analyze the research registry for gaps, trends, priorities, stale entries, or coverage. Returns structured analysis with recommendations.";
   const secureHandler = createSecureHandler(createResearchAnalyzeHandler(deps), {
@@ -40975,10 +40981,10 @@ function registerResearchAnalyzeTool(server, deps) {
     logger: logger57
   });
   const outputSchema = {
-    focus: z75.string().optional(),
-    success: z75.boolean().optional(),
-    analysis: z75.unknown().optional(),
-    recommendations: z75.array(z75.string()).optional()
+    focus: z76.string().optional(),
+    success: z76.boolean().optional(),
+    analysis: z76.unknown().optional(),
+    recommendations: z76.array(z76.string()).optional()
   };
   server.registerTool(
     "research_analyze",
@@ -40994,14 +41000,14 @@ function registerResearchAnalyzeTool(server, deps) {
 }
 
 // src/mcp/tools/research-catalog-review.ts
-import { z as z76 } from "zod";
-var ResearchCatalogReviewInputSchema = z76.object({
-  action: z76.enum(["list", "approve", "dismiss", "flush"]).describe(
+import { z as z77 } from "zod";
+var ResearchCatalogReviewInputSchema = z77.object({
+  action: z77.enum(["list", "approve", "dismiss", "flush"]).describe(
     "Action: list (show pending), approve (add to registry), dismiss (remove), flush (clear all)"
   ),
-  identifier: z76.string().optional().describe("Reference identifier for approve/dismiss actions (arXiv ID or GitHub URL)"),
-  topic: z76.string().optional().describe("Topic to assign when approving an arXiv paper"),
-  createIssue: z76.boolean().optional().default(false).describe("When approving, also create a GitHub issue for the paper")
+  identifier: z77.string().optional().describe("Reference identifier for approve/dismiss actions (arXiv ID or GitHub URL)"),
+  topic: z77.string().optional().describe("Topic to assign when approving an arXiv paper"),
+  createIssue: z77.boolean().optional().default(false).describe("When approving, also create a GitHub issue for the paper")
 });
 function handleList() {
   const catalog = getAutoCatalog();
@@ -41133,10 +41139,10 @@ function createCatalogReviewHandler(deps) {
 function registerResearchCatalogReviewTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "research_catalog_review" });
   const toolSchema = {
-    action: z76.enum(["list", "approve", "dismiss", "flush"]).describe("Action to perform on cataloged references"),
-    identifier: z76.string().optional().describe("Reference identifier for approve/dismiss"),
-    topic: z76.string().optional().describe("Topic for approved papers"),
-    createIssue: z76.boolean().optional().describe("Create GitHub issue when approving")
+    action: z77.enum(["list", "approve", "dismiss", "flush"]).describe("Action to perform on cataloged references"),
+    identifier: z77.string().optional().describe("Reference identifier for approve/dismiss"),
+    topic: z77.string().optional().describe("Topic for approved papers"),
+    createIssue: z77.boolean().optional().describe("Create GitHub issue when approving")
   };
   const description = "Review auto-cataloged research references found during tool execution. List pending references, approve them for registry addition (optionally filing a GitHub issue), dismiss, or clear all.";
   const secureHandler = createSecureHandler(createCatalogReviewHandler(deps), {
@@ -41150,10 +41156,10 @@ function registerResearchCatalogReviewTool(server, deps) {
     logger: logger57
   });
   const outputSchema = {
-    action: z76.string().optional(),
-    success: z76.boolean().optional(),
-    message: z76.string().optional(),
-    data: z76.unknown().optional()
+    action: z77.string().optional(),
+    success: z77.boolean().optional(),
+    message: z77.string().optional(),
+    data: z77.unknown().optional()
   };
   server.registerTool(
     "research_catalog_review",
@@ -41169,9 +41175,9 @@ function registerResearchCatalogReviewTool(server, deps) {
 }
 
 // src/mcp/tools/research-synthesize.ts
-import { z as z77 } from "zod";
-var ResearchSynthesizeInputSchema = z77.object({
-  topic: z77.string().optional().describe("Optional topic to filter synthesis to a single cluster")
+import { z as z78 } from "zod";
+var ResearchSynthesizeInputSchema = z78.object({
+  topic: z78.string().optional().describe("Optional topic to filter synthesis to a single cluster")
 });
 function createResearchSynthesizeHandler(deps) {
   return async (args, _ctx) => {
@@ -41198,7 +41204,7 @@ function createResearchSynthesizeHandler(deps) {
 function registerResearchSynthesizeTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "research_synthesize" });
   const toolSchema = {
-    topic: z77.string().optional().describe("Optional topic filter for single-cluster synthesis")
+    topic: z78.string().optional().describe("Optional topic filter for single-cluster synthesis")
   };
   const description = "Synthesize the research registry by grouping papers into topic clusters. Returns structured summaries with common themes, key insights, techniques, implementation opportunities, and cross-cutting themes across clusters.";
   const secureHandler = createSecureHandler(createResearchSynthesizeHandler(deps), {
@@ -41212,12 +41218,12 @@ function registerResearchSynthesizeTool(server, deps) {
     logger: logger57
   });
   const outputSchema = {
-    clusters: z77.array(z77.unknown()).optional(),
-    totalPapers: z77.number().optional(),
-    topicCount: z77.number().optional(),
-    crossCuttingThemes: z77.array(z77.unknown()).optional(),
-    alignmentSummary: z77.unknown().optional(),
-    featureGates: z77.array(z77.unknown()).optional()
+    clusters: z78.array(z78.unknown()).optional(),
+    totalPapers: z78.number().optional(),
+    topicCount: z78.number().optional(),
+    crossCuttingThemes: z78.array(z78.unknown()).optional(),
+    alignmentSummary: z78.unknown().optional(),
+    featureGates: z78.array(z78.unknown()).optional()
   };
   server.registerTool(
     "research_synthesize",
@@ -41233,10 +41239,10 @@ function registerResearchSynthesizeTool(server, deps) {
 }
 
 // src/mcp/tools/issue-triage-tool.ts
-import { z as z78 } from "zod";
-var IssueTriageInputSchema = z78.object({
-  issueUrl: z78.string().min(1).refine((v) => /^https?:\/\//i.test(v), "Only HTTP/HTTPS URLs are allowed").describe("GitHub issue URL (e.g., https://github.com/owner/repo/issues/123)"),
-  dryRun: z78.boolean().optional().default(true).describe("Read-only mode (default: true). When false, may apply labels.")
+import { z as z79 } from "zod";
+var IssueTriageInputSchema = z79.object({
+  issueUrl: z79.string().min(1).refine((v) => /^https?:\/\//i.test(v), "Only HTTP/HTTPS URLs are allowed").describe("GitHub issue URL (e.g., https://github.com/owner/repo/issues/123)"),
+  dryRun: z79.boolean().optional().default(true).describe("Read-only mode (default: true). When false, may apply labels.")
 });
 function buildTriageResponse(value) {
   return {
@@ -41291,8 +41297,8 @@ function createIssueTriageHandler(_deps) {
 function registerIssueTriageTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "issue_triage" });
   const toolSchema = {
-    issueUrl: z78.string().min(1).describe("GitHub issue URL (e.g., https://github.com/owner/repo/issues/123)"),
-    dryRun: z78.boolean().optional().default(true).describe("Read-only mode (default: true)")
+    issueUrl: z79.string().min(1).describe("GitHub issue URL (e.g., https://github.com/owner/repo/issues/123)"),
+    dryRun: z79.boolean().optional().default(true).describe("Read-only mode (default: true)")
   };
   const description = "Triage a GitHub issue using the full security pipeline. Classifies the issue, assesses author trust and reputation, proposes labels and actions, and validates all outputs through policy gate and corroboration checks. Read-only by default. Requires GITHUB_TOKEN or GH_TOKEN environment variable, or gh CLI auth.";
   const secureHandler = createSecureHandler(createIssueTriageHandler(deps), {
@@ -41371,7 +41377,7 @@ function recordTriageOutcome(success, durationMs, errorMsg) {
 }
 
 // src/mcp/tools/run-graph-workflow.ts
-import { z as z79 } from "zod";
+import { z as z80 } from "zod";
 import { randomUUID as randomUUID11 } from "node:crypto";
 
 // src/mcp/tools/run-graph-workflow-events.ts
@@ -41423,11 +41429,11 @@ function formatDetail(event) {
 }
 
 // src/mcp/tools/run-graph-workflow.ts
-var RunGraphWorkflowInputSchema = z79.object({
-  workflow: z79.string().min(1).max(100).describe("Name of the predefined graph workflow to execute"),
-  inputs: z79.record(z79.string(), z79.unknown()).optional().default({}).describe("Input values for the workflow"),
-  enableCheckpointing: z79.boolean().optional().default(true).describe("Enable checkpoint saving between steps"),
-  enableAuditTrail: z79.boolean().optional().default(false).describe("Enable audit trail event logging"),
+var RunGraphWorkflowInputSchema = z80.object({
+  workflow: z80.string().min(1).max(100).describe("Name of the predefined graph workflow to execute"),
+  inputs: z80.record(z80.string(), z80.unknown()).optional().default({}).describe("Input values for the workflow"),
+  enableCheckpointing: z80.boolean().optional().default(true).describe("Enable checkpoint saving between steps"),
+  enableAuditTrail: z80.boolean().optional().default(false).describe("Enable audit trail event logging"),
   /**
    * Dispatch mode (#3732). `sync` (default) runs the graph workflow inline and
    * returns the result — but a workflow of up to ~100 expert nodes can exceed
@@ -41435,7 +41441,7 @@ var RunGraphWorkflowInputSchema = z79.object({
    * envelope immediately and runs in the background; poll
    * `get_job_result({ jobId })` for the result. Ignored for the `list` sentinel.
    */
-  dispatch: z79.enum(["sync", "async"]).optional().default("sync").describe(
+  dispatch: z80.enum(["sync", "async"]).optional().default("sync").describe(
     "Dispatch mode (#3732). 'sync' (default): run inline. 'async': return a jobId immediately + run in background (poll get_job_result)."
   )
 });
@@ -41524,13 +41530,13 @@ async function handleRunGraphWorkflow(input, logger57, auditLogger) {
 }
 var GRAPH_WORKFLOW_DESCRIPTION = "Run a DAG-shaped workflow with per-node checkpoints, event streaming, and an audit trail. Checkpoints drive the executor in-process recovery (crash-resume + selective node retry) and inspection \u2014 the MCP call is fire-and-forget with NO caller resume input, and the checkpoint store is in-memory (not durable across process restarts). For straight linear templates, use `run_workflow` instead. Supports dispatch: 'async' \u2014 returns a jobId immediately; poll get_job_result.";
 var GRAPH_WORKFLOW_SCHEMA = {
-  workflow: z79.string().min(1).max(100).describe(
+  workflow: z80.string().min(1).max(100).describe(
     'Workflow name: echo, pipeline, code-review, security-scan. Use "list" for available workflows.'
   ),
-  inputs: z79.record(z79.string(), z79.unknown()).optional().describe("Input values for the workflow"),
-  enableCheckpointing: z79.boolean().optional().describe("Enable checkpoint saving"),
-  enableAuditTrail: z79.boolean().optional().describe("Enable audit trail logging"),
-  dispatch: z79.enum(["sync", "async"]).optional().describe(
+  inputs: z80.record(z80.string(), z80.unknown()).optional().describe("Input values for the workflow"),
+  enableCheckpointing: z80.boolean().optional().describe("Enable checkpoint saving"),
+  enableAuditTrail: z80.boolean().optional().describe("Enable audit trail logging"),
+  dispatch: z80.enum(["sync", "async"]).optional().describe(
     "Dispatch mode (#3732). 'sync' (default): run inline. 'async': return a jobId immediately + run in background (poll get_job_result)."
   )
 };
@@ -42131,11 +42137,11 @@ function suggestImprovement(criterion) {
 }
 
 // src/mcp/tools/execute-spec-tool.ts
-import { z as z80 } from "zod";
+import { z as z81 } from "zod";
 import { randomUUID as randomUUID12 } from "node:crypto";
-var ExecuteSpecInputSchema = z80.object({
-  spec: z80.string().min(1).max(5e4).describe("Markdown specification to execute"),
-  dryRun: z80.boolean().optional().default(false).describe("Parse and decompose only"),
+var ExecuteSpecInputSchema = z81.object({
+  spec: z81.string().min(1).max(5e4).describe("Markdown specification to execute"),
+  dryRun: z81.boolean().optional().default(false).describe("Parse and decompose only"),
   /**
    * Dispatch mode (#3732). `sync` (default) runs the full DAG pipeline inline
    * and returns the result — but a real parse→decompose→compile→execute→
@@ -42144,7 +42150,7 @@ var ExecuteSpecInputSchema = z80.object({
    * background; poll `get_job_result({ jobId })` for the result. Ignored when
    * `dryRun` is true (parse+decompose completes fast, so dry runs stay sync).
    */
-  dispatch: z80.enum(["sync", "async"]).default("sync").describe(
+  dispatch: z81.enum(["sync", "async"]).default("sync").describe(
     "Dispatch mode (#3732). 'sync' (default): run inline. 'async': return a jobId immediately + run in background (poll get_job_result). Ignored for dryRun."
   )
 });
@@ -42246,11 +42252,11 @@ function registerExecuteSpecTool(server, deps) {
   const timeoutMs = getToolTimeout("execute_spec", deps.security);
   const wrapped = wrapToolWithTimeout("execute_spec", secureHandler, { timeoutMs, logger: logger57 });
   const toolSchema = {
-    spec: z80.string().min(1).max(5e4).describe(
+    spec: z81.string().min(1).max(5e4).describe(
       'Markdown specification to execute. Must contain "## Requirements" and "## Acceptance Criteria" sections.'
     ),
-    dryRun: z80.boolean().optional().describe("Parse and decompose only (no execution)"),
-    dispatch: z80.enum(["sync", "async"]).optional().describe(
+    dryRun: z81.boolean().optional().describe("Parse and decompose only (no execution)"),
+    dispatch: z81.enum(["sync", "async"]).optional().describe(
       "Dispatch mode (#3732). 'sync' (default): run inline. 'async': return a jobId immediately + run in background (poll get_job_result). Ignored for dryRun."
     )
   };
@@ -42320,11 +42326,11 @@ function recordSpecOutcome(success, durationMs, stage) {
 }
 
 // src/mcp/tools/memory-query.ts
-import { z as z81 } from "zod";
-var MemoryQueryInputSchema = z81.object({
-  query: z81.string().min(1).max(500).describe("Search query to match against memory contents"),
-  limit: z81.number().int().min(1).max(50).optional().default(10).describe("Maximum results to return (default: 10, max: 50)"),
-  source: z81.enum(["session", "belief", "agentic", "typed", "adaptive", "all"]).optional().default("all").describe("Filter by memory source (default: all)")
+import { z as z82 } from "zod";
+var MemoryQueryInputSchema = z82.object({
+  query: z82.string().min(1).max(500).describe("Search query to match against memory contents"),
+  limit: z82.number().int().min(1).max(50).optional().default(10).describe("Maximum results to return (default: 10, max: 50)"),
+  source: z82.enum(["session", "belief", "agentic", "typed", "adaptive", "all"]).optional().default("all").describe("Filter by memory source (default: all)")
 });
 function describeBackendCoverage(memory, source) {
   const optional = [
@@ -42431,9 +42437,9 @@ async function memoryQueryHandler(args, ctx) {
 function registerMemoryQueryTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "memory_query" });
   const toolSchema = {
-    query: z81.string().min(1).max(500).describe("Search query to match against memory contents"),
-    limit: z81.number().int().min(1).max(50).optional().describe("Maximum results to return (default: 10, max: 50)"),
-    source: z81.enum(["session", "belief", "agentic", "typed", "adaptive", "all"]).optional().describe("Filter by memory source (default: all)")
+    query: z82.string().min(1).max(500).describe("Search query to match against memory contents"),
+    limit: z82.number().int().min(1).max(50).optional().describe("Maximum results to return (default: 10, max: 50)"),
+    source: z82.enum(["session", "belief", "agentic", "typed", "adaptive", "all"]).optional().describe("Filter by memory source (default: all)")
   };
   const description = "Query across all memory backends (session, belief, agentic, adaptive, typed) with unified results. Returns memories matching the query with source attribution and relevance scores.";
   const secureHandler = createSecureHandler(memoryQueryHandler, {
@@ -42444,19 +42450,19 @@ function registerMemoryQueryTool(server, deps) {
   const timeoutMs = getToolTimeout("memory_query", deps.security);
   const wrappedHandler = wrapToolWithTimeout("memory_query", secureHandler, { timeoutMs, logger: logger57 });
   const outputSchema = {
-    query: z81.string(),
-    expandedQuery: z81.string().optional(),
-    results: z81.array(z81.unknown()),
-    count: z81.number(),
-    source: z81.string(),
+    query: z82.string(),
+    expandedQuery: z82.string().optional(),
+    results: z82.array(z82.unknown()),
+    count: z82.number(),
+    source: z82.string(),
     // #4999: the SDK validates structured content against this schema with
     // `additionalProperties: false`, so a field added to the response and not
     // declared here makes EVERY call fail with -32602 rather than merely going
     // unreported. The integration test caught that; the unit tests could not,
     // because they call the handler directly and never cross the protocol.
-    searched: z81.array(z81.string()),
-    unavailable: z81.array(z81.string()),
-    errored: z81.array(z81.string())
+    searched: z82.array(z82.string()),
+    unavailable: z82.array(z82.string()),
+    errored: z82.array(z82.string())
   };
   server.registerTool(
     "memory_query",
@@ -42472,9 +42478,9 @@ function registerMemoryQueryTool(server, deps) {
 }
 
 // src/mcp/tools/memory-stats.ts
-import { z as z82 } from "zod";
-var MemoryStatsInputSchema = z82.object({
-  includeDecay: z82.boolean().optional().default(true).describe("Include decay statistics (default: true)")
+import { z as z83 } from "zod";
+var MemoryStatsInputSchema = z83.object({
+  includeDecay: z83.boolean().optional().default(true).describe("Include decay statistics (default: true)")
 });
 function collectSessionStats(toolMemory) {
   const counts = toolMemory.getSessionCounts();
@@ -42591,7 +42597,7 @@ async function memoryStatsHandler(args, ctx) {
 function registerMemoryStatsTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "memory_stats" });
   const toolSchema = {
-    includeDecay: z82.boolean().optional().describe("Include decay statistics (default: true)")
+    includeDecay: z83.boolean().optional().describe("Include decay statistics (default: true)")
   };
   const description = "Get memory system statistics dashboard. Shows backend availability, entry counts, and decay stats across all 7 memory backends.";
   const secureHandler = createSecureHandler(memoryStatsHandler, {
@@ -42602,14 +42608,14 @@ function registerMemoryStatsTool(server, deps) {
   const timeoutMs = getToolTimeout("memory_stats", deps.security);
   const wrappedHandler = wrapToolWithTimeout("memory_stats", secureHandler, { timeoutMs, logger: logger57 });
   const outputSchema = {
-    backends: z82.unknown(),
-    session: z82.unknown().optional(),
-    belief: z82.unknown().optional(),
-    typed: z82.unknown().optional(),
-    mobimem: z82.unknown().optional(),
-    decay: z82.unknown().optional(),
-    registry: z82.array(z82.unknown()).optional(),
-    collectedAt: z82.string().optional()
+    backends: z83.unknown(),
+    session: z83.unknown().optional(),
+    belief: z83.unknown().optional(),
+    typed: z83.unknown().optional(),
+    mobimem: z83.unknown().optional(),
+    decay: z83.unknown().optional(),
+    registry: z83.array(z83.unknown()).optional(),
+    collectedAt: z83.string().optional()
   };
   server.registerTool(
     "memory_stats",
@@ -42625,15 +42631,15 @@ function registerMemoryStatsTool(server, deps) {
 }
 
 // src/mcp/tools/memory-write.ts
-import { z as z83 } from "zod";
-var MemoryWriteInputSchema = z83.object({
-  key: z83.string().min(1).max(200).describe("Memory identifier or subject"),
-  content: z83.string().min(1).max(5e3).describe("Memory content to store"),
-  backend: z83.enum(["session", "belief", "agentic", "adaptive", "typed"]).describe(
+import { z as z84 } from "zod";
+var MemoryWriteInputSchema = z84.object({
+  key: z84.string().min(1).max(200).describe("Memory identifier or subject"),
+  content: z84.string().min(1).max(5e3).describe("Memory content to store"),
+  backend: z84.enum(["session", "belief", "agentic", "adaptive", "typed"]).describe(
     "Target memory backend: session (learnings), belief (triples), agentic (knowledge), adaptive (priority-scored), typed (MIRIX-style semantic)"
   ),
-  confidence: z83.enum(["high", "medium", "low"]).optional().default("medium").describe("Confidence level (default: medium)"),
-  metadata: z83.record(z83.string().max(100), z83.string().max(500)).optional().describe("Optional key-value metadata tags")
+  confidence: z84.enum(["high", "medium", "low"]).optional().default("medium").describe("Confidence level (default: medium)"),
+  metadata: z84.record(z84.string().max(100), z84.string().max(500)).optional().describe("Optional key-value metadata tags")
 });
 function writeToSession(key, content, confidence) {
   const toolMemory = getToolMemory();
@@ -42786,13 +42792,13 @@ async function memoryWriteHandler(args, ctx) {
 function registerMemoryWriteTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "memory_write" });
   const toolSchema = {
-    key: z83.string().min(1).max(200).describe("Memory identifier or subject"),
-    content: z83.string().min(1).max(5e3).describe("Memory content to store"),
-    backend: z83.enum(["session", "belief", "agentic", "adaptive", "typed"]).describe(
+    key: z84.string().min(1).max(200).describe("Memory identifier or subject"),
+    content: z84.string().min(1).max(5e3).describe("Memory content to store"),
+    backend: z84.enum(["session", "belief", "agentic", "adaptive", "typed"]).describe(
       "Target memory backend: session (learnings), belief (triples), agentic (knowledge), adaptive (priority-scored), typed (MIRIX-style semantic)"
     ),
-    confidence: z83.enum(["high", "medium", "low"]).optional().describe("Confidence level (default: medium)"),
-    metadata: z83.record(z83.string().max(100), z83.string().max(500)).optional().describe("Optional key-value metadata tags")
+    confidence: z84.enum(["high", "medium", "low"]).optional().describe("Confidence level (default: medium)"),
+    metadata: z84.record(z84.string().max(100), z84.string().max(500)).optional().describe("Optional key-value metadata tags")
   };
   const description = "Write a memory entry to a specific backend. Supports session (learnings), belief assertions (subject + object; predicate fixed as `has_knowledge`), agentic (knowledge with attributes), adaptive (priority-scored), and typed (MIRIX-style semantic) backends.";
   const secureHandler = createSecureHandler(memoryWriteHandler, {
@@ -42804,11 +42810,11 @@ function registerMemoryWriteTool(server, deps) {
   const timeoutMs = getToolTimeout("memory_write", deps.security);
   const wrappedHandler = wrapToolWithTimeout("memory_write", guardedHandler, { timeoutMs, logger: logger57 });
   const outputSchema = {
-    success: z83.boolean(),
-    backend: z83.string(),
-    key: z83.string(),
-    deduplicated: z83.boolean().optional(),
-    error: z83.string().optional()
+    success: z84.boolean(),
+    backend: z84.string(),
+    key: z84.string(),
+    deduplicated: z84.boolean().optional(),
+    error: z84.string().optional()
   };
   server.registerTool(
     "memory_write",
@@ -42824,7 +42830,7 @@ function registerMemoryWriteTool(server, deps) {
 }
 
 // src/mcp/tools/weather-report-tool.ts
-import { z as z84 } from "zod";
+import { z as z85 } from "zod";
 function serializeReport(report) {
   return {
     ...report,
@@ -42875,8 +42881,8 @@ function weatherReportHandler(args, ctx) {
 function registerWeatherReportTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "weather_report" });
   const toolSchema = {
-    cli: z84.enum(["claude", "gemini", "codex", "opencode"]).optional().describe("Filter by CLI"),
-    category: z84.enum([
+    cli: z85.enum(["claude", "gemini", "codex", "opencode"]).optional().describe("Filter by CLI"),
+    category: z85.enum([
       "architecture",
       "code_generation",
       "code_review",
@@ -42888,7 +42894,7 @@ function registerWeatherReportTool(server, deps) {
       "devops",
       "exploration"
     ]).optional().describe("Filter by task category"),
-    includeAdaptive: z84.boolean().optional().describe("Include adaptive routing bonuses (default: true)")
+    includeAdaptive: z85.boolean().optional().describe("Include adaptive routing bonuses (default: true)")
   };
   const description = "Get multi-CLI performance weather report. Shows per-CLI success rates, per-category breakdowns, and adaptive routing bonus recommendations based on observed task outcomes.";
   const secureHandler = createSecureHandler(weatherReportHandler, {
@@ -42910,18 +42916,18 @@ function registerWeatherReportTool(server, deps) {
 }
 
 // src/mcp/tools/registry-import-types.ts
-import { z as z85 } from "zod";
-var RegistryImportInputSchema = z85.object({
+import { z as z86 } from "zod";
+var RegistryImportInputSchema = z86.object({
   /** Model provider. */
-  provider: z85.enum(["anthropic", "google", "openai"]).describe("Model provider (anthropic, google, openai)"),
+  provider: z86.enum(["anthropic", "google", "openai"]).describe("Model provider (anthropic, google, openai)"),
   /** Model identifier from the provider (e.g., "claude-4-opus-20260201"). */
-  modelId: z85.string().min(1).describe("Provider model identifier"),
+  modelId: z86.string().min(1).describe("Provider model identifier"),
   /** No-op flag echoed back in the response; the tool never persists regardless. */
-  dryRun: z85.boolean().optional().default(true).describe("No-op flag echoed back in the response; the tool never persists regardless")
+  dryRun: z86.boolean().optional().default(true).describe("No-op flag echoed back in the response; the tool never persists regardless")
 });
 
 // src/mcp/tools/registry-import-tool.ts
-import { z as z86 } from "zod";
+import { z as z87 } from "zod";
 
 // src/mcp/tools/registry-import.ts
 var PROVIDER_CLI_MAP = {
@@ -43031,9 +43037,9 @@ function registryImportHandler(args, ctx) {
 function registerRegistryImportTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "registry_import" });
   const toolSchema = {
-    provider: z86.enum(["anthropic", "google", "openai"]).describe("Model provider (anthropic, google, openai)"),
-    modelId: z86.string().min(1).describe("Provider model identifier"),
-    dryRun: z86.boolean().optional().describe("No-op flag echoed back in the response; the tool never persists regardless")
+    provider: z87.enum(["anthropic", "google", "openai"]).describe("Model provider (anthropic, google, openai)"),
+    modelId: z87.string().min(1).describe("Provider model identifier"),
+    dryRun: z87.boolean().optional().describe("No-op flag echoed back in the response; the tool never persists regardless")
   };
   const description = "Draft a registry ENTRY for a NEW model so routing can consider it later. Generates a ModelCapability YAML with conservative quality scores (5/10) for human review. Always returns a draft entry for human review (never persists). For picking among ALREADY-registered models, use `delegate_to_model`.";
   const secureHandler = createSecureHandler(registryImportHandler, {
@@ -43056,10 +43062,10 @@ function registerRegistryImportTool(server, deps) {
 }
 
 // src/mcp/tools/repo-analyze-types.ts
-import { z as z87 } from "zod";
-var RepoAnalyzeInputSchema = z87.object({
+import { z as z88 } from "zod";
+var RepoAnalyzeInputSchema = z88.object({
   /** GitHub repository in "owner/name" format or full URL. */
-  repo: z87.string().min(1).refine(
+  repo: z88.string().min(1).refine(
     (v) => !v.includes("://") || /^https?:\/\//i.test(v),
     "Only HTTP/HTTPS URLs are allowed"
   ).describe('GitHub repository in "owner/name" format (e.g., "cloudfoundry/korifi") or full URL'),
@@ -43068,13 +43074,13 @@ var RepoAnalyzeInputSchema = z87.object({
    * analysis. Both values resolve to identical behavior; retained for input-shape
    * stability until a distinct shallow path is implemented.
    */
-  depth: z87.enum(["shallow", "deep"]).optional().default("shallow").describe(
+  depth: z88.enum(["shallow", "deep"]).optional().default("shallow").describe(
     "Currently a no-op \u2014 the handler always runs the full analysis (both values identical)"
   )
 });
 
 // src/mcp/tools/repo-analyze-tool.ts
-import { z as z88 } from "zod";
+import { z as z89 } from "zod";
 async function repoAnalyzeHandler(args, ctx) {
   const parsed = RepoAnalyzeInputSchema.safeParse(args);
   if (!parsed.success) {
@@ -43093,8 +43099,8 @@ async function repoAnalyzeHandler(args, ctx) {
 function registerRepoAnalyzeTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "repo_analyze" });
   const toolSchema = {
-    repo: z88.string().min(1).describe('GitHub repository in "owner/name" format or full URL'),
-    depth: z88.enum(["shallow", "deep"]).optional().describe("Currently a no-op \u2014 the handler always runs the full analysis (both values identical)")
+    repo: z89.string().min(1).describe('GitHub repository in "owner/name" format or full URL'),
+    depth: z89.enum(["shallow", "deep"]).optional().describe("Currently a no-op \u2014 the handler always runs the full analysis (both values identical)")
   };
   const description = "Analyze a GitHub repository structure. Returns language, framework, package manager, CI provider, security tooling, Dockerfile/Helm/Makefile detection, and gap identification. Replaces multi-step manual inspection with a single structured query.";
   const secureHandler = createSecureHandler(repoAnalyzeHandler, {
@@ -43116,18 +43122,18 @@ function registerRepoAnalyzeTool(server, deps) {
 }
 
 // src/mcp/tools/repo-security-plan-types.ts
-import { z as z89 } from "zod";
-var RepoSecurityPlanInputSchema = z89.object({
+import { z as z90 } from "zod";
+var RepoSecurityPlanInputSchema = z90.object({
   /** GitHub repository in "owner/name" format or full URL. */
-  repo: z89.string().min(1).describe('GitHub repository in "owner/name" format or full URL'),
+  repo: z90.string().min(1).describe('GitHub repository in "owner/name" format or full URL'),
   /** Filter to specific scanner categories. */
-  categories: z89.array(z89.string()).optional().describe('Filter to specific categories (e.g., ["sast", "sca", "secrets"])'),
+  categories: z90.array(z90.string()).optional().describe('Filter to specific categories (e.g., ["sast", "sca", "secrets"])'),
   /** Maximum number of scanners to recommend. */
-  maxScanners: z89.number().min(1).max(20).optional().default(10).describe("Maximum scanners to recommend (default: 10)")
+  maxScanners: z90.number().min(1).max(20).optional().default(10).describe("Maximum scanners to recommend (default: 10)")
 });
 
 // src/mcp/tools/repo-security-plan-tool.ts
-import { z as z90 } from "zod";
+import { z as z91 } from "zod";
 async function handler(args, ctx) {
   const parsed = RepoSecurityPlanInputSchema.safeParse(args);
   if (!parsed.success) {
@@ -43146,9 +43152,9 @@ async function handler(args, ctx) {
 function registerRepoSecurityPlanTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "repo_security_plan" });
   const toolSchema = {
-    repo: z90.string().min(1).describe('GitHub repository in "owner/name" format or full URL'),
-    categories: z90.array(z90.string().max(50)).max(10).optional().describe('Filter to specific categories (e.g., ["sast", "sca", "secrets"])'),
-    maxScanners: z90.number().min(1).max(20).optional().describe("Maximum scanners to recommend (default: 10)")
+    repo: z91.string().min(1).describe('GitHub repository in "owner/name" format or full URL'),
+    categories: z91.array(z91.string().max(50)).max(10).optional().describe('Filter to specific categories (e.g., ["sast", "sca", "secrets"])'),
+    maxScanners: z91.number().min(1).max(20).optional().describe("Maximum scanners to recommend (default: 10)")
   };
   const description = "Generate a security scanning pipeline recommendation for a GitHub repository. Analyzes repo structure, detects languages/frameworks, and recommends specific vulnerability scanners with CI config snippets. Powered by the vulnerability scanner registry with provenance-tracked metrics.";
   const secureHandler = createSecureHandler(handler, {
@@ -43171,13 +43177,13 @@ function registerRepoSecurityPlanTool(server, deps) {
 
 // src/mcp/tools/search-codebase-tool.ts
 import { resolve as resolve6, sep as sep3 } from "node:path";
-import { z as z91 } from "zod";
-var SearchCodebaseInputSchema = z91.object({
-  query: z91.string().min(1).max(200).describe("Search query (symbol name, keyword, or pattern)"),
-  directory: z91.string().min(1).max(500).optional().describe("Directory to search (default: current working directory)"),
-  limit: z91.number().min(1).max(50).optional().describe("Max results (default: 20)"),
-  mode: z91.enum(["search", "summary", "list"]).optional().describe("search: find symbols. summary: file overview. list: list indexed files."),
-  maxDepth: z91.number().int().min(1).max(MAX_INDEX_MAX_DEPTH).optional().describe(
+import { z as z92 } from "zod";
+var SearchCodebaseInputSchema = z92.object({
+  query: z92.string().min(1).max(200).describe("Search query (symbol name, keyword, or pattern)"),
+  directory: z92.string().min(1).max(500).optional().describe("Directory to search (default: current working directory)"),
+  limit: z92.number().min(1).max(50).optional().describe("Max results (default: 20)"),
+  mode: z92.enum(["search", "summary", "list"]).optional().describe("search: find symbols. summary: file overview. list: list indexed files."),
+  maxDepth: z92.number().int().min(1).max(MAX_INDEX_MAX_DEPTH).optional().describe(
     `Max directory depth to index below "directory" (default: ${String(DEFAULT_INDEX_MAX_DEPTH)}, clamped to ${String(MAX_INDEX_MAX_DEPTH)}). Raise this if results seem incomplete for a deeply nested tree.`
   )
 });
@@ -43307,11 +43313,11 @@ async function searchCodebaseHandler(args, ctx) {
 function registerSearchCodebaseTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "search_codebase" });
   const toolSchema = {
-    query: z91.string().min(1).max(200).describe("Search query or file path"),
-    directory: z91.string().max(500).optional().describe("Directory to index"),
-    limit: z91.number().min(1).max(50).optional().describe("Max results"),
-    mode: z91.enum(["search", "summary", "list"]).optional().describe("search/summary/list"),
-    maxDepth: z91.number().int().min(1).max(MAX_INDEX_MAX_DEPTH).optional().describe(
+    query: z92.string().min(1).max(200).describe("Search query or file path"),
+    directory: z92.string().max(500).optional().describe("Directory to index"),
+    limit: z92.number().min(1).max(50).optional().describe("Max results"),
+    mode: z92.enum(["search", "summary", "list"]).optional().describe("search/summary/list"),
+    maxDepth: z92.number().int().min(1).max(MAX_INDEX_MAX_DEPTH).optional().describe(
       `Max directory depth to index (default: ${String(DEFAULT_INDEX_MAX_DEPTH)}, clamped to ${String(MAX_INDEX_MAX_DEPTH)})`
     )
   };
@@ -43333,7 +43339,7 @@ function registerSearchCodebaseTool(server, deps) {
 
 // src/mcp/tools/extract-symbols-tool.ts
 import { extname as extname3, resolve as resolve7, sep as sep4 } from "node:path";
-import { z as z92 } from "zod";
+import { z as z93 } from "zod";
 
 // src/core/task-analysis/tool-refusal-gap.ts
 function toolRefusalGapName(tool, capability) {
@@ -43359,13 +43365,13 @@ function recordToolRefusal(refusal, context, ledger = getGapLedger()) {
 // src/mcp/tools/extract-symbols-tool.ts
 var DEFAULT_EXTRACT_MAX_CHARS = 2e4;
 var DEFAULT_EXTRACT_MAX_SYMBOLS = 200;
-var ExtractSymbolsInputSchema = z92.object({
-  filePath: z92.string().min(1).max(500).describe("Path to TypeScript/JavaScript file to extract symbols from"),
-  mode: z92.enum(["index", "full"]).optional().describe("index: names+lines only (minimal tokens). full: includes source text."),
-  maxChars: z92.number().int().positive().max(1e6).optional().describe(
+var ExtractSymbolsInputSchema = z93.object({
+  filePath: z93.string().min(1).max(500).describe("Path to TypeScript/JavaScript file to extract symbols from"),
+  mode: z93.enum(["index", "full"]).optional().describe("index: names+lines only (minimal tokens). full: includes source text."),
+  maxChars: z93.number().int().positive().max(1e6).optional().describe(
     `full mode only: cap on total emitted symbol source chars (default ${String(DEFAULT_EXTRACT_MAX_CHARS)}). Excess is truncated and reported, never silently dropped.`
   ),
-  maxSymbols: z92.number().int().positive().max(1e4).optional().describe(
+  maxSymbols: z93.number().int().positive().max(1e4).optional().describe(
     `full mode only: cap on number of symbols emitted (default ${String(DEFAULT_EXTRACT_MAX_SYMBOLS)}).`
   )
 });
@@ -43509,12 +43515,12 @@ function emptyIndexMessage(reason, filePath) {
 function registerExtractSymbolsTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "extract_symbols" });
   const toolSchema = {
-    filePath: z92.string().min(1).max(500).describe("Path to TypeScript/JavaScript file"),
-    mode: z92.enum(["index", "full"]).optional().describe("index (default): names+lines. full: includes source text"),
-    maxChars: z92.number().int().positive().max(1e6).optional().describe(
+    filePath: z93.string().min(1).max(500).describe("Path to TypeScript/JavaScript file"),
+    mode: z93.enum(["index", "full"]).optional().describe("index (default): names+lines. full: includes source text"),
+    maxChars: z93.number().int().positive().max(1e6).optional().describe(
       `full mode only: cap on total emitted symbol source chars (default ${String(DEFAULT_EXTRACT_MAX_CHARS)})`
     ),
-    maxSymbols: z92.number().int().positive().max(1e4).optional().describe(
+    maxSymbols: z93.number().int().positive().max(1e4).optional().describe(
       `full mode only: cap on number of symbols emitted (default ${String(DEFAULT_EXTRACT_MAX_SYMBOLS)})`
     )
   };
@@ -43540,23 +43546,23 @@ function registerExtractSymbolsTool(server, deps) {
 // src/mcp/tools/search-usages-tool.ts
 import { readFile as readFile3 } from "node:fs/promises";
 import { relative, resolve as resolve8, sep as sep5 } from "node:path";
-import { z as z93 } from "zod";
+import { z as z94 } from "zod";
 var DEFAULT_USAGES_LIMIT = 50;
 var MAX_USAGES_LIMIT = 500;
 var DEFAULT_USAGES_MAX_DEPTH = 24;
 var MAX_USAGES_MAX_DEPTH = 64;
 var MAX_FILES_SCANNED = 5e3;
-var SearchUsagesInputSchema = z93.object({
-  symbol: z93.string().min(1).max(200).regex(IDENTIFIER_RE, "symbol must be a single JS identifier (letters, digits, _ or $)").describe("Identifier to find usages/call-sites of (a single JS identifier)"),
-  path: z93.string().min(1).max(500).optional().describe("Restrict to a single source file (takes precedence over dir)"),
-  dir: z93.string().min(1).max(500).optional().describe("Directory to search recursively (default: current working directory)"),
-  lang: z93.enum(LANG_VALUES).optional().describe(
+var SearchUsagesInputSchema = z94.object({
+  symbol: z94.string().min(1).max(200).regex(IDENTIFIER_RE, "symbol must be a single JS identifier (letters, digits, _ or $)").describe("Identifier to find usages/call-sites of (a single JS identifier)"),
+  path: z94.string().min(1).max(500).optional().describe("Restrict to a single source file (takes precedence over dir)"),
+  dir: z94.string().min(1).max(500).optional().describe("Directory to search recursively (default: current working directory)"),
+  lang: z94.enum(LANG_VALUES).optional().describe(
     "Language override (default: inferred from each file extension, fallback typescript)"
   ),
-  limit: z93.number().int().min(1).max(MAX_USAGES_LIMIT).optional().describe(
+  limit: z94.number().int().min(1).max(MAX_USAGES_LIMIT).optional().describe(
     `Max usage matches emitted (default ${String(DEFAULT_USAGES_LIMIT)}). Excess is reported.`
   ),
-  maxDepth: z93.number().int().min(1).max(MAX_USAGES_MAX_DEPTH).optional().describe(`Directory walk depth for dir scope (default ${String(DEFAULT_USAGES_MAX_DEPTH)}).`)
+  maxDepth: z94.number().int().min(1).max(MAX_USAGES_MAX_DEPTH).optional().describe(`Directory walk depth for dir scope (default ${String(DEFAULT_USAGES_MAX_DEPTH)}).`)
 });
 function resolveWithinCwd(target) {
   const resolved = resolve8(target);
@@ -43675,12 +43681,12 @@ async function searchUsagesHandler(args, ctx) {
 function registerSearchUsagesTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "search_usages" });
   const toolSchema = {
-    symbol: z93.string().min(1).max(200).regex(IDENTIFIER_RE, "symbol must be a single JS identifier").describe("Identifier to find usages/call-sites of"),
-    path: z93.string().min(1).max(500).optional().describe("Restrict to a single source file"),
-    dir: z93.string().min(1).max(500).optional().describe("Directory to search (default: cwd)"),
-    lang: z93.enum(LANG_VALUES).optional().describe("Language override (default: infer from ext)"),
-    limit: z93.number().int().min(1).max(MAX_USAGES_LIMIT).optional().describe(`Max matches (default ${String(DEFAULT_USAGES_LIMIT)})`),
-    maxDepth: z93.number().int().min(1).max(MAX_USAGES_MAX_DEPTH).optional().describe(`Directory walk depth (default ${String(DEFAULT_USAGES_MAX_DEPTH)})`)
+    symbol: z94.string().min(1).max(200).regex(IDENTIFIER_RE, "symbol must be a single JS identifier").describe("Identifier to find usages/call-sites of"),
+    path: z94.string().min(1).max(500).optional().describe("Restrict to a single source file"),
+    dir: z94.string().min(1).max(500).optional().describe("Directory to search (default: cwd)"),
+    lang: z94.enum(LANG_VALUES).optional().describe("Language override (default: infer from ext)"),
+    limit: z94.number().int().min(1).max(MAX_USAGES_LIMIT).optional().describe(`Max matches (default ${String(DEFAULT_USAGES_LIMIT)})`),
+    maxDepth: z94.number().int().min(1).max(MAX_USAGES_MAX_DEPTH).optional().describe(`Directory walk depth (default ${String(DEFAULT_USAGES_MAX_DEPTH)})`)
   };
   const description = `Structural USAGE / call-site search for a symbol via ast-grep (tree-sitter). Answers "where is X used or called" \u2014 finds calls (foo()), member calls (obj.foo()), new expressions (new Foo()), imports, and bare references, with file:line:column + snippet. This is the gap \`search_codebase\` CANNOT fill: that indexes declared symbol NAMES only, not usages. Excludes the declaration itself (use \`search_codebase\` for declarations). Syntactic, not type-aware (a same-named member on an unrelated object may match). Read-only. Results capped at ${String(DEFAULT_USAGES_LIMIT)} by default (override via limit up to ${String(MAX_USAGES_LIMIT)}); overflow is reported, never silent.`;
   const secureHandler = createSecureHandler(searchUsagesHandler, {
@@ -43701,11 +43707,11 @@ function registerSearchUsagesTool(server, deps) {
 // src/mcp/tools/query-trace-tool.ts
 import { readFile as readFile4, stat as stat3 } from "node:fs/promises";
 import { join as join7, resolve as resolve9, sep as sep6 } from "node:path";
-import { z as z94 } from "zod";
-var QueryTraceInputSchema = z94.object({
-  runId: z94.string().min(1).max(128).regex(/^[a-zA-Z0-9_-]+$/, "runId must be alphanumeric, hyphens, or underscores").describe("Run ID to query traces for"),
-  eventType: z94.string().max(100).regex(/^[a-zA-Z0-9._-]+$/, "eventType must be alphanumeric with dots, hyphens, or underscores").optional().describe("Filter by event type"),
-  limit: z94.number().min(1).max(500).optional().describe("Max events to return (default: 100)")
+import { z as z95 } from "zod";
+var QueryTraceInputSchema = z95.object({
+  runId: z95.string().min(1).max(128).regex(/^[a-zA-Z0-9_-]+$/, "runId must be alphanumeric, hyphens, or underscores").describe("Run ID to query traces for"),
+  eventType: z95.string().max(100).regex(/^[a-zA-Z0-9._-]+$/, "eventType must be alphanumeric with dots, hyphens, or underscores").optional().describe("Filter by event type"),
+  limit: z95.number().min(1).max(500).optional().describe("Max events to return (default: 100)")
 });
 var MAX_TRACE_FILE_BYTES = 100 * 1024 * 1024;
 var traceLogger = createLogger({ component: "query-trace" });
@@ -43829,9 +43835,9 @@ function queryTraceHandler(args, ctx) {
 function registerQueryTraceTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "query_trace" });
   const toolSchema = {
-    runId: z94.string().min(1).max(128).regex(/^[a-zA-Z0-9_-]+$/, "runId must be alphanumeric, hyphens, or underscores").describe("Run ID to query traces for"),
-    eventType: z94.string().max(100).regex(/^[a-zA-Z0-9._-]+$/).optional().describe("Filter by event type (e.g., model.called)"),
-    limit: z94.number().min(1).max(500).optional().describe("Max events to return (default: 100)")
+    runId: z95.string().min(1).max(128).regex(/^[a-zA-Z0-9_-]+$/, "runId must be alphanumeric, hyphens, or underscores").describe("Run ID to query traces for"),
+    eventType: z95.string().max(100).regex(/^[a-zA-Z0-9._-]+$/).optional().describe("Filter by event type (e.g., model.called)"),
+    limit: z95.number().min(1).max(500).optional().describe("Max events to return (default: 100)")
   };
   const description = "Query execution traces by run ID. Returns agent and model attribution for pipeline runs including decision paths, error taxonomy, and timing data.";
   const secureHandler = createSecureHandler(queryTraceHandler, {
@@ -43850,7 +43856,7 @@ function registerQueryTraceTool(server, deps) {
 }
 
 // src/mcp/tools/get-job-result-tool.ts
-import { z as z95 } from "zod";
+import { z as z96 } from "zod";
 
 // src/mcp/jobs/task-state-source.ts
 var logger34 = createLogger({ component: "task-state-source" });
@@ -43973,8 +43979,8 @@ function resolveJobListing(customDir) {
 }
 
 // src/mcp/tools/get-job-result-tool.ts
-var GetJobResultInputSchema = z95.object({
-  jobId: z95.string().min(1).max(128).describe('Job ID returned by orchestrate({ mode: "async" })')
+var GetJobResultInputSchema = z96.object({
+  jobId: z96.string().min(1).max(128).describe('Job ID returned by orchestrate({ mode: "async" })')
 });
 function getJobResultHandler(args) {
   const parsed = GetJobResultInputSchema.safeParse(args);
@@ -44013,7 +44019,7 @@ function getJobResultHandler(args) {
 function registerGetJobResultTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "get_job_result" });
   const toolSchema = {
-    jobId: z95.string().min(1).max(128).describe('Job ID returned by orchestrate({ mode: "async" })')
+    jobId: z96.string().min(1).max(128).describe('Job ID returned by orchestrate({ mode: "async" })')
   };
   const description = `Read the result of an async-mode tool invocation by jobId. Returns the structured record (status, result | error, timestamps, producerVersion) plus producerVersionMeasured \u2014 false when the producer was a dev build or the record predates the field, so its version must not be compared to this server's _meta build stamp \u2014 and producerVersionSource (sidecar | task_state; a task_state record never carries a version). Poll until status !== "pending". Stage-1 of epic #2631 \u2014 Stage 2 will fold this into query_task_state once StructuredTaskState gains the result field.`;
   const secureHandler = createSecureHandler(getJobResultHandler, {
@@ -44035,14 +44041,14 @@ function registerGetJobResultTool(server, deps) {
 }
 
 // src/mcp/tools/list-jobs-tool.ts
-import { z as z96 } from "zod";
+import { z as z97 } from "zod";
 var MAX_LIST_JOBS_RESULTS = 200;
-var ListJobsInputSchema = z96.object({
+var ListJobsInputSchema = z97.object({
   /**
    * Filter to jobs from a specific tool (exact match — e.g. `'orchestrate'`).
    * Omit to list every tool's jobs.
    */
-  toolName: z96.string().min(1).max(128).optional().describe("Filter to one tool (exact match)."),
+  toolName: z97.string().min(1).max(128).optional().describe("Filter to one tool (exact match)."),
   /**
    * Filter to jobs in a specific lifecycle state.
    * Omit to list every state.
@@ -44055,7 +44061,7 @@ var ListJobsInputSchema = z96.object({
    * Newest jobs are returned first, so a smaller limit shows the most
    * recent activity.
    */
-  limit: z96.number().int().min(1).max(MAX_LIST_JOBS_RESULTS).optional().describe(`Max summaries to return (1-${String(MAX_LIST_JOBS_RESULTS)}, newest first).`)
+  limit: z97.number().int().min(1).max(MAX_LIST_JOBS_RESULTS).optional().describe(`Max summaries to return (1-${String(MAX_LIST_JOBS_RESULTS)}, newest first).`)
 });
 function listJobsHandler(args) {
   const parsed = ListJobsInputSchema.safeParse(args);
@@ -44096,11 +44102,11 @@ function listJobsHandler(args) {
 function registerListJobsTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "list_jobs" });
   const toolSchema = {
-    toolName: z96.string().min(1).max(128).optional().describe("Filter to one tool (exact match)."),
+    toolName: z97.string().min(1).max(128).optional().describe("Filter to one tool (exact match)."),
     status: JobStatusSchema.optional().describe(
       "Filter to pending | complete | failed | cancelled. Omit for all."
     ),
-    limit: z96.number().int().min(1).max(MAX_LIST_JOBS_RESULTS).optional().describe(`Max summaries to return (1-${String(MAX_LIST_JOBS_RESULTS)}, newest first).`)
+    limit: z97.number().int().min(1).max(MAX_LIST_JOBS_RESULTS).optional().describe(`Max summaries to return (1-${String(MAX_LIST_JOBS_RESULTS)}, newest first).`)
   };
   const description = "List async-mode jobs (cross-session discovery). Returns summaries \u2014 jobId, toolName, status, timestamps \u2014 newest first. Filter by toolName / status / limit. Result payloads excluded; fetch via get_job_result(jobId). Stage 5 of epic #2631.";
   const secureHandler = createSecureHandler(listJobsHandler, {
@@ -44122,11 +44128,11 @@ function registerListJobsTool(server, deps) {
 }
 
 // src/mcp/tools/cancel-job-tool.ts
-import { z as z97 } from "zod";
+import { z as z98 } from "zod";
 var defaultLogger3 = createLogger({ tool: "cancel_job" });
-var CancelJobInputSchema = z97.object({
-  jobId: z97.string().min(1).max(128).describe("Job ID returned by orchestrate / run_workflow / consensus_vote in async mode"),
-  reason: z97.string().max(1e3).optional().describe('Optional human-readable note (e.g. "user clicked cancel").')
+var CancelJobInputSchema = z98.object({
+  jobId: z98.string().min(1).max(128).describe("Job ID returned by orchestrate / run_workflow / consensus_vote in async mode"),
+  reason: z98.string().max(1e3).optional().describe('Optional human-readable note (e.g. "user clicked cancel").')
 });
 function cancelJobHandler(args, logger57 = defaultLogger3) {
   const parsed = CancelJobInputSchema.safeParse(args);
@@ -44195,8 +44201,8 @@ function cancelPendingJob(jobId, toolName, logger57, reason) {
 function registerCancelJobTool(server, deps) {
   const logger57 = deps.logger ?? defaultLogger3;
   const toolSchema = {
-    jobId: z97.string().min(1).max(128).describe("Job ID returned by orchestrate / run_workflow / consensus_vote in async mode"),
-    reason: z97.string().max(1e3).optional().describe('Optional human-readable note (e.g. "user clicked cancel").')
+    jobId: z98.string().min(1).max(128).describe("Job ID returned by orchestrate / run_workflow / consensus_vote in async mode"),
+    reason: z98.string().max(1e3).optional().describe('Optional human-readable note (e.g. "user clicked cancel").')
   };
   const description = "Mark an async-mode job as cancelled (#3042 Stage 1b / epic #2631). Same-process dispatcher unwinds via AbortSignal (#3035/#3038); cross-process workers observe via get_job_result. Idempotent \u2014 cancel-after-complete is a no-op (preserves the terminal record); second cancel returns already_cancelled.";
   const secureHandler = createSecureHandler((args) => cancelJobHandler(args, logger57), {
@@ -44218,7 +44224,7 @@ function registerCancelJobTool(server, deps) {
 }
 
 // src/audit/audit-types.ts
-import { z as z98 } from "zod";
+import { z as z99 } from "zod";
 var AuditError = class extends Error {
   code = "AUDIT_ERROR";
   context;
@@ -44230,7 +44236,7 @@ var AuditError = class extends Error {
     this.context = options?.context;
   }
 };
-var AuditCategorySchema = z98.enum([
+var AuditCategorySchema = z99.enum([
   "authentication",
   // Login, logout, token refresh
   "authorization",
@@ -44250,28 +44256,28 @@ var AuditCategorySchema = z98.enum([
   "governance"
   // Authority-tier transitions, ratification (Epic D, #3842)
 ]);
-var TierTransitionKindSchema = z98.enum(["promotion", "demotion"]);
-var TierTransitionTierSchema = z98.enum(["observe", "suggest", "advisory", "enforce"]);
-var TierTransitionPayloadSchema = z98.object({
+var TierTransitionKindSchema = z99.enum(["promotion", "demotion"]);
+var TierTransitionTierSchema = z99.enum(["observe", "suggest", "advisory", "enforce"]);
+var TierTransitionPayloadSchema = z99.object({
   /** Whether the loop moved up (`promotion`) or down (`demotion`) the ladder. */
   kind: TierTransitionKindSchema,
   /** The loop/strategy whose tier changed (manifest `id` or loop identifier). */
-  subject: z98.string().min(1),
+  subject: z99.string().min(1),
   /** Tier before the transition. */
   fromTier: TierTransitionTierSchema,
   /** Tier after the transition. */
   toTier: TierTransitionTierSchema,
   /** Ref to the promotion-evidence record this transition was earned against. */
-  evidenceRef: z98.string().min(1),
+  evidenceRef: z99.string().min(1),
   /**
    * Ref to the recorded `consensus_vote` that ratified a PROMOTION. Required
    * by the ratification gate for `kind: 'promotion'`; legitimately absent for
    * `kind: 'demotion'` (automatic, ADR-0017 §"Demotion is automatic").
    */
-  ratificationVoteRef: z98.string().min(1).optional()
+  ratificationVoteRef: z99.string().min(1).optional()
 }).strict();
 var TIER_TRANSITION_METADATA_KEY = "tierTransition";
-var AuditSeveritySchema = z98.enum([
+var AuditSeveritySchema = z99.enum([
   "info",
   // Normal operations
   "warning",
@@ -44279,7 +44285,7 @@ var AuditSeveritySchema = z98.enum([
   "critical"
   // Security violations, failures
 ]);
-var AuditOutcomeSchema = z98.enum([
+var AuditOutcomeSchema = z99.enum([
   "success",
   // Operation completed successfully
   "failure",
@@ -44289,56 +44295,56 @@ var AuditOutcomeSchema = z98.enum([
   "error"
   // Unexpected error occurred
 ]);
-var AuditActorSchema = z98.object({
-  type: z98.enum(["user", "agent", "system", "external"]),
-  id: z98.string().min(1),
-  name: z98.string().optional(),
-  ip: z98.string().optional(),
-  userAgent: z98.string().optional()
-});
-var AuditResourceSchema = z98.object({
-  type: z98.string().min(1),
+var AuditActorSchema = z99.object({
+  type: z99.enum(["user", "agent", "system", "external"]),
+  id: z99.string().min(1),
+  name: z99.string().optional(),
+  ip: z99.string().optional(),
+  userAgent: z99.string().optional()
+});
+var AuditResourceSchema = z99.object({
+  type: z99.string().min(1),
   // e.g., 'file', 'tool', 'config', 'agent'
-  id: z98.string().min(1),
-  name: z98.string().optional(),
-  path: z98.string().optional()
+  id: z99.string().min(1),
+  name: z99.string().optional(),
+  path: z99.string().optional()
 });
-var AuditEventSchema = z98.object({
+var AuditEventSchema = z99.object({
   // Identity
-  id: z98.string().min(1),
+  id: z99.string().min(1),
   // Unique event ID
-  version: z98.literal("1.0"),
+  version: z99.literal("1.0"),
   // Schema version for migrations
   // Timing
-  timestamp: z98.string(),
+  timestamp: z99.string(),
   // ISO 8601 format
-  timestampMs: z98.number(),
+  timestampMs: z99.number(),
   // Unix epoch milliseconds
   // Classification
   category: AuditCategorySchema,
   severity: AuditSeveritySchema,
   outcome: AuditOutcomeSchema,
   // Event details
-  action: z98.string().min(1),
+  action: z99.string().min(1),
   // e.g., 'tool.invoke', 'policy.evaluate'
-  description: z98.string().optional(),
+  description: z99.string().optional(),
   // Actors and resources
   actor: AuditActorSchema,
   resource: AuditResourceSchema.optional(),
   // Correlation
-  requestId: z98.string().optional(),
+  requestId: z99.string().optional(),
   // Request correlation ID
-  traceId: z98.string().optional(),
+  traceId: z99.string().optional(),
   // Distributed trace ID
-  sessionId: z98.string().optional(),
+  sessionId: z99.string().optional(),
   // Session correlation ID
   // Context
-  toolName: z98.string().optional(),
-  durationMs: z98.number().optional(),
-  metadata: z98.record(z98.string(), z98.unknown()).optional(),
+  toolName: z99.string().optional(),
+  durationMs: z99.number().optional(),
+  metadata: z99.record(z99.string(), z99.unknown()).optional(),
   // Policy and security
-  policyName: z98.string().optional(),
-  policyDecision: z98.string().optional(),
+  policyName: z99.string().optional(),
+  policyDecision: z99.string().optional(),
   /**
    * Which occurrence of this `{tool, rule}` near-miss the record represents
    * (#5228 review). Present only on a sampled `would_deny`.
@@ -44355,12 +44361,12 @@ var AuditEventSchema = z98.object({
    * Absent means "not sampled" — every occurrence was recorded — which is
    * distinct from `1`.
    */
-  policyOccurrence: z98.number().int().min(1).optional(),
-  violationType: z98.string().optional(),
+  policyOccurrence: z99.number().int().min(1).optional(),
+  violationType: z99.string().optional(),
   // Integrity (for tamper-evidence)
-  previousHash: z98.string().optional(),
+  previousHash: z99.string().optional(),
   // Hash of previous event (chain)
-  hash: z98.string().optional(),
+  hash: z99.string().optional(),
   // Hash of this event
   /**
    * Hash-projection version (#3921). ABSENT/`1` = the legacy projection
@@ -44370,62 +44376,62 @@ var AuditEventSchema = z98.object({
    * Versioned so pre-existing v1 chains keep verifying under their own
    * projection (see {@link AUDIT_HASH_VERSION_TIER_TRANSITION}).
    */
-  hashVersion: z98.number().int().positive().optional()
+  hashVersion: z99.number().int().positive().optional()
 });
 var AUDIT_HASH_VERSION_TIER_TRANSITION = 2;
-var AuditEventInputSchema = z98.object({
+var AuditEventInputSchema = z99.object({
   category: AuditCategorySchema,
   severity: AuditSeveritySchema.optional().default("info"),
   outcome: AuditOutcomeSchema,
-  action: z98.string().min(1),
-  description: z98.string().optional(),
+  action: z99.string().min(1),
+  description: z99.string().optional(),
   actor: AuditActorSchema,
   resource: AuditResourceSchema.optional(),
-  requestId: z98.string().optional(),
-  traceId: z98.string().optional(),
-  sessionId: z98.string().optional(),
-  toolName: z98.string().optional(),
-  durationMs: z98.number().optional(),
-  metadata: z98.record(z98.string(), z98.unknown()).optional(),
-  policyName: z98.string().optional(),
-  policyDecision: z98.string().optional(),
+  requestId: z99.string().optional(),
+  traceId: z99.string().optional(),
+  sessionId: z99.string().optional(),
+  toolName: z99.string().optional(),
+  durationMs: z99.number().optional(),
+  metadata: z99.record(z99.string(), z99.unknown()).optional(),
+  policyName: z99.string().optional(),
+  policyDecision: z99.string().optional(),
   /** @see AuditEventSchema.policyOccurrence (#5228 review). */
-  policyOccurrence: z98.number().int().min(1).optional(),
-  violationType: z98.string().optional()
+  policyOccurrence: z99.number().int().min(1).optional(),
+  violationType: z99.string().optional()
 });
-var AuditLogConfigSchema = z98.object({
+var AuditLogConfigSchema = z99.object({
   // Storage
-  logDir: z98.string().min(1),
-  filePrefix: z98.string().optional().default("audit"),
-  maxFileSizeBytes: z98.number().positive().optional().default(10 * 1024 * 1024),
+  logDir: z99.string().min(1),
+  filePrefix: z99.string().optional().default("audit"),
+  maxFileSizeBytes: z99.number().positive().optional().default(10 * 1024 * 1024),
   // 10MB
-  maxFiles: z98.number().positive().optional().default(10),
+  maxFiles: z99.number().positive().optional().default(10),
   // Features
-  enableHashChain: z98.boolean().optional().default(true),
-  enableCompression: z98.boolean().optional().default(false),
-  flushIntervalMs: z98.number().positive().optional().default(1e3),
+  enableHashChain: z99.boolean().optional().default(true),
+  enableCompression: z99.boolean().optional().default(false),
+  flushIntervalMs: z99.number().positive().optional().default(1e3),
   /**
    * Maximum in-memory event queue depth before drop-oldest backpressure
    * engages. Bounds memory under load when storage.write is slow or the flush
    * timer is overlapping; see #2979.
    */
-  maxQueueDepth: z98.number().positive().optional().default(1e4),
+  maxQueueDepth: z99.number().positive().optional().default(1e4),
   // Filtering
   minSeverity: AuditSeveritySchema.optional().default("info"),
-  categories: z98.array(AuditCategorySchema).optional()
-});
-var AuditQueryCriteriaSchema = z98.object({
-  startTime: z98.date().optional(),
-  endTime: z98.date().optional(),
-  categories: z98.array(AuditCategorySchema).optional(),
-  severities: z98.array(AuditSeveritySchema).optional(),
-  outcomes: z98.array(AuditOutcomeSchema).optional(),
-  actorId: z98.string().optional(),
-  resourceId: z98.string().optional(),
-  requestId: z98.string().optional(),
-  traceId: z98.string().optional(),
-  limit: z98.number().positive().optional().default(100),
-  offset: z98.number().nonnegative().optional().default(0)
+  categories: z99.array(AuditCategorySchema).optional()
+});
+var AuditQueryCriteriaSchema = z99.object({
+  startTime: z99.date().optional(),
+  endTime: z99.date().optional(),
+  categories: z99.array(AuditCategorySchema).optional(),
+  severities: z99.array(AuditSeveritySchema).optional(),
+  outcomes: z99.array(AuditOutcomeSchema).optional(),
+  actorId: z99.string().optional(),
+  resourceId: z99.string().optional(),
+  requestId: z99.string().optional(),
+  traceId: z99.string().optional(),
+  limit: z99.number().positive().optional().default(100),
+  offset: z99.number().nonnegative().optional().default(0)
 });
 
 // src/audit/audit-storage-queries.ts
@@ -45910,7 +45916,7 @@ function ensureRunnableTemplate(template, stages) {
 // src/pipeline/pipeline-checkpoint.ts
 import * as fs6 from "node:fs";
 import * as path4 from "node:path";
-import { z as z99 } from "zod";
+import { z as z100 } from "zod";
 var logger39 = createLogger({ component: "pipeline-checkpoint" });
 var SESSION_ID_REGEX = /^[a-zA-Z0-9_-]{1,128}$/;
 function validateSessionId(sessionId) {
@@ -45958,7 +45964,7 @@ function loadCheckpointState(sessionId, customDir) {
     return null;
   }
 }
-var PipelineStageSchema = z99.enum([
+var PipelineStageSchema = z100.enum([
   "research",
   "plan",
   "vote",
@@ -45966,27 +45972,27 @@ var PipelineStageSchema = z99.enum([
   "implement",
   "security"
 ]);
-var PipelineStageDataSchema = z99.discriminatedUnion("type", [
-  z99.object({ type: z99.literal("research"), text: z99.string() }),
-  z99.object({ type: z99.literal("plan"), text: z99.string(), iterations: z99.number() }),
-  z99.object({
-    type: z99.literal("vote"),
-    approved: z99.boolean(),
-    conditional: z99.boolean(),
-    conditions: z99.array(z99.string()).optional(),
-    caveats: z99.array(z99.string()).optional(),
-    iterations: z99.number()
+var PipelineStageDataSchema = z100.discriminatedUnion("type", [
+  z100.object({ type: z100.literal("research"), text: z100.string() }),
+  z100.object({ type: z100.literal("plan"), text: z100.string(), iterations: z100.number() }),
+  z100.object({
+    type: z100.literal("vote"),
+    approved: z100.boolean(),
+    conditional: z100.boolean(),
+    conditions: z100.array(z100.string()).optional(),
+    caveats: z100.array(z100.string()).optional(),
+    iterations: z100.number()
   }),
   // PipelineTask shape is loose at the persistence layer — capture as
   // `z.unknown()` and trust the downstream consumer's narrower validation.
-  z99.object({ type: z99.literal("decompose"), tasks: z99.array(z99.unknown()) }),
-  z99.object({ type: z99.literal("implement"), tasks: z99.array(z99.unknown()) }),
-  z99.object({ type: z99.literal("security"), passed: z99.boolean() })
+  z100.object({ type: z100.literal("decompose"), tasks: z100.array(z100.unknown()) }),
+  z100.object({ type: z100.literal("implement"), tasks: z100.array(z100.unknown()) }),
+  z100.object({ type: z100.literal("security"), passed: z100.boolean() })
 ]);
-var PipelineCheckpointEntrySchema = z99.object({
-  sessionId: z99.string(),
+var PipelineCheckpointEntrySchema = z100.object({
+  sessionId: z100.string(),
   stage: PipelineStageSchema,
-  timestamp: z99.string(),
+  timestamp: z100.string(),
   data: PipelineStageDataSchema
 });
 function rebuildState(lines) {
@@ -46176,7 +46182,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-BATXHKJC.js");
+    const { executeVoting } = await import("./consensus-vote-M6EJCEDF.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -46900,49 +46906,49 @@ Verdict: PASS/NEEDS_WORK/REJECT`;
 }
 
 // src/security/sarif-parser.ts
-import { z as z100 } from "zod";
-var SarifLocationSchema = z100.object({
-  physicalLocation: z100.object({
-    artifactLocation: z100.object({ uri: z100.string().optional().catch(void 0) }).optional(),
-    region: z100.object({
-      startLine: z100.number().optional().catch(void 0),
-      endLine: z100.number().int().min(1).optional().catch(void 0),
-      snippet: z100.object({ text: z100.string().optional().catch(void 0) }).optional().catch(void 0)
+import { z as z101 } from "zod";
+var SarifLocationSchema = z101.object({
+  physicalLocation: z101.object({
+    artifactLocation: z101.object({ uri: z101.string().optional().catch(void 0) }).optional(),
+    region: z101.object({
+      startLine: z101.number().optional().catch(void 0),
+      endLine: z101.number().int().min(1).optional().catch(void 0),
+      snippet: z101.object({ text: z101.string().optional().catch(void 0) }).optional().catch(void 0)
     }).optional()
   }).optional()
 });
-var SarifResultSchema = z100.object({
-  ruleId: z100.string().nullish(),
-  level: z100.string().nullish(),
-  message: z100.object({ text: z100.string().optional() }).nullish(),
-  locations: z100.array(SarifLocationSchema).nullish()
-});
-var SarifRuleSchema = z100.object({
-  id: z100.string(),
-  shortDescription: z100.object({ text: z100.string().optional().catch(void 0) }).optional(),
-  defaultConfiguration: z100.object({ level: z100.string().optional().catch(void 0) }).optional(),
-  properties: z100.object({
-    precision: z100.string().optional().catch(void 0),
-    tags: z100.array(z100.string()).optional().catch(void 0),
+var SarifResultSchema = z101.object({
+  ruleId: z101.string().nullish(),
+  level: z101.string().nullish(),
+  message: z101.object({ text: z101.string().optional() }).nullish(),
+  locations: z101.array(SarifLocationSchema).nullish()
+});
+var SarifRuleSchema = z101.object({
+  id: z101.string(),
+  shortDescription: z101.object({ text: z101.string().optional().catch(void 0) }).optional(),
+  defaultConfiguration: z101.object({ level: z101.string().optional().catch(void 0) }).optional(),
+  properties: z101.object({
+    precision: z101.string().optional().catch(void 0),
+    tags: z101.array(z101.string()).optional().catch(void 0),
     // Accept the number form and normalize; `resolveSeverityFromScore`
     // parses it either way.
-    "security-severity": z100.union([z100.string(), z100.number()]).optional().catch(void 0)
+    "security-severity": z101.union([z101.string(), z101.number()]).optional().catch(void 0)
   }).optional().catch(void 0),
-  helpUri: z100.string().optional().catch(void 0),
-  help: z100.object({ markdown: z100.string().optional().catch(void 0) }).optional()
-});
-var SarifRunSchema = z100.object({
-  tool: z100.object({
-    driver: z100.object({
-      name: z100.string().optional(),
-      rules: z100.array(z100.unknown()).optional()
+  helpUri: z101.string().optional().catch(void 0),
+  help: z101.object({ markdown: z101.string().optional().catch(void 0) }).optional()
+});
+var SarifRunSchema = z101.object({
+  tool: z101.object({
+    driver: z101.object({
+      name: z101.string().optional(),
+      rules: z101.array(z101.unknown()).optional()
     }).optional()
   }).optional(),
-  results: z100.array(z100.unknown()).nullish()
+  results: z101.array(z101.unknown()).nullish()
 });
-var SarifLogSchema = z100.object({
-  version: z100.string().optional(),
-  runs: z100.array(z100.unknown()).optional()
+var SarifLogSchema = z101.object({
+  version: z101.string().optional(),
+  runs: z101.array(z101.unknown()).optional()
 });
 var UNMAPPED_LEVEL_SEVERITY = "high";
 var MAX_MESSAGE_LENGTH = 2e3;
@@ -47210,18 +47216,18 @@ async function executeSecurityScan(input) {
 }
 
 // src/security/osv-lookup.ts
-import { z as z101 } from "zod";
+import { z as z102 } from "zod";
 var logger44 = createLogger({ component: "osv-lookup" });
 var OSV_API_URL = "https://api.osv.dev/v1/query";
 var DEFAULT_TIMEOUT_MS4 = NETWORK_FETCH_TIMEOUT_MS;
-var OsvVulnerabilitySchema = z101.object({
-  id: z101.string(),
-  summary: z101.string().optional(),
-  severity: z101.enum(["CRITICAL", "HIGH", "MODERATE", "LOW", "UNKNOWN"]).optional(),
-  aliases: z101.array(z101.string()).default([]),
-  affectedVersions: z101.string().optional(),
-  fixedVersion: z101.string().optional(),
-  url: z101.string().optional()
+var OsvVulnerabilitySchema = z102.object({
+  id: z102.string(),
+  summary: z102.string().optional(),
+  severity: z102.enum(["CRITICAL", "HIGH", "MODERATE", "LOW", "UNKNOWN"]).optional(),
+  aliases: z102.array(z102.string()).default([]),
+  affectedVersions: z102.string().optional(),
+  fixedVersion: z102.string().optional(),
+  url: z102.string().optional()
 });
 var DEFAULT_OSV_CONFIG = {
   timeoutMs: DEFAULT_TIMEOUT_MS4
@@ -47974,7 +47980,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-BATXHKJC.js");
+        const { executeVoting } = await import("./consensus-vote-M6EJCEDF.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -48683,7 +48689,7 @@ ${FINDINGS_FORMAT_INSTRUCTIONS}
 }
 
 // src/mcp/tools/pr-review-tool.ts
-import { z as z103 } from "zod";
+import { z as z104 } from "zod";
 import { randomUUID as randomUUID13 } from "node:crypto";
 
 // src/audit/reviewed-diff-hash.ts
@@ -48719,17 +48725,17 @@ import { dirname as dirname3, isAbsolute, join as join11, resolve as resolve12 }
 
 // src/audit/pr-review-record.ts
 import * as crypto3 from "node:crypto";
-import { z as z102 } from "zod";
-var PrReviewVerdictSchema = z102.enum(["approve", "request_changes", "abstain"]);
-var PrReviewVoteCountsSchema = z102.object({
-  approve: z102.number().int().nonnegative(),
-  request_changes: z102.number().int().nonnegative(),
-  abstain: z102.number().int().nonnegative(),
-  error: z102.number().int().nonnegative(),
-  total: z102.number().int().nonnegative()
+import { z as z103 } from "zod";
+var PrReviewVerdictSchema = z103.enum(["approve", "request_changes", "abstain"]);
+var PrReviewVoteCountsSchema = z103.object({
+  approve: z103.number().int().nonnegative(),
+  request_changes: z103.number().int().nonnegative(),
+  abstain: z103.number().int().nonnegative(),
+  error: z103.number().int().nonnegative(),
+  total: z103.number().int().nonnegative()
 }).strict();
-var PrReviewDiffSourceSchema = z102.enum(["canonical-git", "caller-supplied"]);
-var PrReviewDiffProvenanceSchema = z102.object({
+var PrReviewDiffSourceSchema = z103.enum(["canonical-git", "caller-supplied"]);
+var PrReviewDiffProvenanceSchema = z103.object({
   /** How the reviewed diff was obtained. */
   source: PrReviewDiffSourceSchema,
   /**
@@ -48741,9 +48747,9 @@ var PrReviewDiffProvenanceSchema = z102.object({
    * per-file attribution is unavailable. `false` means "a diff, but the packer
    * saw it as one undifferentiated blob".
    */
-  fileBoundaries: z102.boolean()
+  fileBoundaries: z103.boolean()
 }).strict();
-var PrReviewSanitizationSchema = z102.object({
+var PrReviewSanitizationSchema = z103.object({
   /**
    * The canonical hash (same {@link computeReviewedDiffHash} form) of the
    * once-sanitized FULL diff. Equal to the record's `reviewedDiffHash` exactly
@@ -48760,14 +48766,14 @@ var PrReviewSanitizationSchema = z102.object({
    * not tell an auditor WHICH one moved it. This field isolates the
    * sanitization gap, which is the one `reviewedDiffHash` alone cannot show.
    */
-  sanitizedDiffHash: z102.string().length(64),
+  sanitizedDiffHash: z103.string().length(64),
   /**
    * HTML comments the middleware stripped before dispatch. Non-zero with an
    * EQUAL `sanitizedDiffHash` is not a contradiction: the counter is over the
    * whole args object, the hash only over `prDiff`, so a comment stripped from
    * a sibling field increments one without moving the other.
    */
-  commentsRemoved: z102.number().int().nonnegative(),
+  commentsRemoved: z103.number().int().nonnegative(),
   /**
    * How many FIELDS the sanitizer changed at all.
    *
@@ -48782,7 +48788,7 @@ var PrReviewSanitizationSchema = z102.object({
    * `fieldsModified === 0` is therefore the ONLY state that licenses "the
    * sanitizer removed nothing".
    */
-  fieldsModified: z102.number().int().nonnegative(),
+  fieldsModified: z103.number().int().nonnegative(),
   /**
    * XML-like conversation-structure tags the sanitizer removed.
    *
@@ -48793,9 +48799,9 @@ var PrReviewSanitizationSchema = z102.object({
    * removal was routine. That is the reassurance an attacker wants, and it
    * costs them only an HTML comment.
    */
-  tagsRemoved: z102.number().int().nonnegative()
+  tagsRemoved: z103.number().int().nonnegative()
 }).strict();
-var PrReviewRecordSchema = z102.object({
+var PrReviewRecordSchema = z103.object({
   /**
    * Schema version. '1.1' was the Option-C binding (#3831): the record binds to
    * `{prNumber, baseSha, reviewedDiffHash}` instead of the rejected `headSha`.
@@ -48814,22 +48820,22 @@ var PrReviewRecordSchema = z102.object({
    * invalidate. Reading a '1.2' record as if it were '1.3' would be the unsafe
    * move — its hash may bind SANITIZED bytes the gate can never reproduce.
    */
-  version: z102.literal("1.3"),
+  version: z103.literal("1.3"),
   /**
    * Monotonic sequence number (integer ≥ 0). Assigned as (max existing
    * sequence)+1 at write time. Sorted, the set of sequences must cover
    * 0..maxSeq with no gap (omission detection); DUPLICATE sequences are a
    * benign concurrent-fork signal, not tampering.
    */
-  sequence: z102.number().int().nonnegative(),
+  sequence: z103.number().int().nonnegative(),
   /** The PR number the review covers. */
-  prNumber: z102.number().int().positive(),
+  prNumber: z103.number().int().positive(),
   /**
    * The 40-hex BASE commit SHA the reviewed diff was computed against (the
    * `<base>..<head>` range base). Part of the Option-C binding so the gate knows
    * which range to recompute {@link reviewedDiffHash} over.
    */
-  baseSha: z102.string().regex(/^[0-9a-f]{40}$/, "baseSha must be a 40-char lowercase hex commit sha"),
+  baseSha: z103.string().regex(/^[0-9a-f]{40}$/, "baseSha must be a 40-char lowercase hex commit sha"),
   /**
    * DIFF-BINDING (Option-C, #3831): sha256 of the canonical reviewed diff bytes
    * (see `audit/reviewed-diff-hash.ts` — pinned `git diff` invocation + 50k
@@ -48838,9 +48844,9 @@ var PrReviewRecordSchema = z102.object({
    * byte-identical to what the voters saw. Covered by the self-hash below, so it
    * cannot be edited to claim a different reviewed diff.
    */
-  reviewedDiffHash: z102.string().length(64),
+  reviewedDiffHash: z103.string().length(64),
   /** ISO-8601 timestamp the review was recorded. */
-  recordedAt: z102.string().min(1),
+  recordedAt: z103.string().min(1),
   /** The resolved aggregate verdict. */
   verdict: PrReviewVerdictSchema,
   /**
@@ -48848,13 +48854,13 @@ var PrReviewRecordSchema = z102.object({
    * `request_changes` with `verified: true` is a strict blocker; covered by the
    * hash so it cannot be flipped without detection.
    */
-  verified: z102.boolean(),
+  verified: z103.boolean(),
   /** Per-decision voter tally from the pr_review aggregate. */
   voteCounts: PrReviewVoteCountsSchema,
   /** Truncated human-readable review summary for the reviewer record. */
-  summary: z102.string(),
+  summary: z103.string(),
   /** Optional correlation/decision id linking to the cost rollup / trace. */
-  correlationId: z102.string().min(1).optional(),
+  correlationId: z103.string().min(1).optional(),
   /**
    * What this record was DERIVED FROM (#4459). OPTIONAL by necessity: the
    * schema is `.strict()`, so a required field would reject every record
@@ -48875,9 +48881,9 @@ var PrReviewRecordSchema = z102.object({
    * Retained for audit texture but NOT covered by `hash` and NOT verified —
    * the record-set model is position-independent (mirrors #3927).
    */
-  previousHash: z102.string().length(64).optional(),
+  previousHash: z103.string().length(64).optional(),
   /** SHA-256 over every field above EXCEPT `previousHash` (and except `hash`). */
-  hash: z102.string().length(64)
+  hash: z103.string().length(64)
 }).strict();
 function computePrReviewRecordHash(payload) {
   const canonical = JSON.stringify({
@@ -49543,19 +49549,19 @@ var MAX_REPO_CONTEXT_LENGTH = 2e3;
 var MAX_TITLE_LENGTH = 500;
 var MAX_DESCRIPTION_LENGTH = 1e4;
 var PR_REVIEW_ASYNC_HINT = "A pr_review run fans out to 5 live LLM voters and can exceed the synchronous MCP request timeout. Retry with `dispatch: 'async'` to get a jobId immediately, then poll get_job_result({ jobId }) for the result.";
-var PrReviewInputSchema = z103.object({
-  prTitle: z103.string().min(1).max(MAX_TITLE_LENGTH).describe("PR title"),
-  prDescription: z103.string().max(MAX_DESCRIPTION_LENGTH).optional().describe("PR body / description"),
-  prDiff: z103.string().min(1).max(MAX_DIFF_INPUT_LENGTH).refine(looksLikeUnifiedDiff, {
+var PrReviewInputSchema = z104.object({
+  prTitle: z104.string().min(1).max(MAX_TITLE_LENGTH).describe("PR title"),
+  prDescription: z104.string().max(MAX_DESCRIPTION_LENGTH).optional().describe("PR body / description"),
+  prDiff: z104.string().min(1).max(MAX_DIFF_INPUT_LENGTH).refine(looksLikeUnifiedDiff, {
     message: "prDiff must be a unified diff (expected a `diff --git`, `---`/`+++`, or `@@ \u2026 @@` line). Prose descriptions of a change are rejected: a review of a summary is not a review of the code, and would be recorded as though it were (#4451)."
   }).describe(
     `Unified diff text (max ${String(MAX_DIFF_INPUT_LENGTH)} chars). REQUIRED SHAPE (#4451): must contain a \`diff --git\` header, an \`@@ \u2026 @@\` hunk header backed by +/- lines, or a \`---\`/\`+++\` header pair \u2014 a prose summary of the change is REJECTED, because reviewing a summary is not reviewing the code and would be recorded as though it were. (Stated here because Zod refinements do not survive JSON-schema generation, so this constraint is otherwise invisible to clients.) No need to truncate before calling: the panel reads the whole diff whenever it fits the voters' context windows (#6003); a diff larger than that is security-prioritized and PARTIALLY reviewed (lowest-priority whole files dropped; a partial panel read can block but never verified-approve). Separately, the audit record's hash binds only the first ${String(MAX_DIFF_LENGTH)} UTF-8 bytes; the response \`coverage\` and the record summary state both what the panel read and what the hash binds.`
   ),
-  repoContext: z103.string().max(MAX_REPO_CONTEXT_LENGTH).optional().describe(
+  repoContext: z104.string().max(MAX_REPO_CONTEXT_LENGTH).optional().describe(
     `Optional one-paragraph repo context (architecture, conventions; max ${String(MAX_REPO_CONTEXT_LENGTH)} chars; trim before calling)`
   ),
-  baseRef: z103.string().max(200).optional().describe("Base branch ref (e.g. main)"),
-  headRef: z103.string().max(200).optional().describe("Head branch ref"),
+  baseRef: z104.string().max(200).optional().describe("Base branch ref (e.g. main)"),
+  headRef: z104.string().max(200).optional().describe("Head branch ref"),
   /**
    * Option-C audit binding (#4031). When BOTH `prNumber` and `baseSha` are
    * supplied AND the review is live (not simulated), pr_review persists an
@@ -49571,14 +49577,14 @@ var PrReviewInputSchema = z103.object({
    * the PR opened and drifts as main advances), so pass the merge-base as
    * `baseSha` or the record will not match on an aged branch (#5692).
    */
-  prNumber: z103.number().int().positive().optional().describe("PR number \u2014 with baseSha, enables Option-C audit-record persistence (#4031)"),
-  baseSha: z103.string().regex(/^[0-9a-f]{40}$/, "baseSha must be a 40-char lowercase hex commit sha").optional().describe(
+  prNumber: z104.number().int().positive().optional().describe("PR number \u2014 with baseSha, enables Option-C audit-record persistence (#4031)"),
+  baseSha: z104.string().regex(/^[0-9a-f]{40}$/, "baseSha must be a 40-char lowercase hex commit sha").optional().describe(
     "40-hex base commit sha the reviewed diff was computed from \u2014 pass `git merge-base origin/<base> <head>`, the base the gate recomputes (Option-C binding, #4031, #5692)"
   ),
-  repoPath: z103.string().max(1024).optional().describe(
+  repoPath: z104.string().max(1024).optional().describe(
     "Repo root path for persisting the governance pr-review record (overrides cwd auto-detection). Must contain a .git ancestor \u2014 relative paths are resolved against cwd; ignored (falls back to cwd auto-detection) if it is not a real repo root. Env NEXUS_PR_REVIEW_RECORDS_PATH still takes precedence and is unrestricted."
   ),
-  simulate: z103.boolean().default(false).describe("Use simulated voters (testing only; never ship live with this true)"),
+  simulate: z104.boolean().default(false).describe("Use simulated voters (testing only; never ship live with this true)"),
   /**
    * Error policy (#4132). `standard` (default) keeps the pre-#4132 aggregation:
    * an errored voter is simply excluded from the panel. `absolute_quorum` gates
@@ -49590,7 +49596,7 @@ var PrReviewInputSchema = z103.object({
    * verified approve. A genuine `request_changes` blocker still wins (Tiers 1-2
    * run first).
    */
-  errorPolicy: z103.enum(["standard", "absolute_quorum"]).default("standard").describe(
+  errorPolicy: z104.enum(["standard", "absolute_quorum"]).default("standard").describe(
     "Error policy (#4132). 'standard' (default): errored voters excluded. 'absolute_quorum': any errored voter \u2014 esp. the contrarian \u2014 degrades a would-be approve to a recoverable abstain (verified:false); never manufactures a verified approve from an induced error."
   ),
   // #6123: same field as consensus_vote — the panel judges the caller's project.
@@ -49602,7 +49608,7 @@ var PrReviewInputSchema = z103.object({
    * runs the panel in the background; poll `get_job_result({ jobId })` for the
    * result.
    */
-  dispatch: z103.enum(["sync", "async"]).default("sync").describe(
+  dispatch: z104.enum(["sync", "async"]).default("sync").describe(
     "Dispatch mode (#3731). 'sync' (default): run inline. 'async': return a jobId immediately + run the panel in background (poll get_job_result)."
   )
 });
@@ -49811,27 +49817,27 @@ function registerPrReviewTool(server, deps) {
 }
 
 // src/mcp/tools/survey-oss-landscape.ts
-import { z as z104 } from "zod";
-var SurveyOssLandscapeInputSchema = z104.object({
-  query: z104.string().min(1).max(200).describe('Free-text search query, e.g. "cargo nextest replacement" or "OSS SBOM tools"'),
-  maxResults: z104.number().int().min(1).max(50).optional().default(10).describe("Maximum candidates to return (1-50; default 10)"),
-  minStars: z104.number().int().min(0).optional().default(0).describe("Minimum star count to include (default 0; useful for filtering noise)"),
-  language: z104.string().max(50).optional().describe('GitHub language filter, e.g. "rust" or "typescript"')
-});
-var GitHubRepoSchema = z104.object({
-  full_name: z104.string().optional(),
-  html_url: z104.string().optional(),
-  description: z104.string().nullable().optional(),
-  stargazers_count: z104.number().optional(),
-  pushed_at: z104.string().nullable().optional(),
-  language: z104.string().nullable().optional(),
-  license: z104.object({
-    spdx_id: z104.string().nullable().optional()
+import { z as z105 } from "zod";
+var SurveyOssLandscapeInputSchema = z105.object({
+  query: z105.string().min(1).max(200).describe('Free-text search query, e.g. "cargo nextest replacement" or "OSS SBOM tools"'),
+  maxResults: z105.number().int().min(1).max(50).optional().default(10).describe("Maximum candidates to return (1-50; default 10)"),
+  minStars: z105.number().int().min(0).optional().default(0).describe("Minimum star count to include (default 0; useful for filtering noise)"),
+  language: z105.string().max(50).optional().describe('GitHub language filter, e.g. "rust" or "typescript"')
+});
+var GitHubRepoSchema = z105.object({
+  full_name: z105.string().optional(),
+  html_url: z105.string().optional(),
+  description: z105.string().nullable().optional(),
+  stargazers_count: z105.number().optional(),
+  pushed_at: z105.string().nullable().optional(),
+  language: z105.string().nullable().optional(),
+  license: z105.object({
+    spdx_id: z105.string().nullable().optional()
   }).nullable().optional()
 });
-var GitHubSearchResponseSchema = z104.object({
-  total_count: z104.number().optional(),
-  items: z104.array(GitHubRepoSchema).optional()
+var GitHubSearchResponseSchema = z105.object({
+  total_count: z105.number().optional(),
+  items: z105.array(GitHubRepoSchema).optional()
 });
 var GITHUB_SEARCH_BASE = "https://api.github.com/search/repositories";
 function buildGithubQuery(input) {
@@ -49958,11 +49964,11 @@ function createSurveyHandler(deps) {
   };
 }
 var SURVEY_OUTPUT_SCHEMA = {
-  query: z104.string(),
-  totalFound: z104.number(),
-  candidates: z104.array(z104.unknown()),
-  sourcesQueried: z104.array(z104.string()),
-  sourcesFailed: z104.array(z104.string())
+  query: z105.string(),
+  totalFound: z105.number(),
+  candidates: z105.array(z105.unknown()),
+  sourcesQueried: z105.array(z105.string()),
+  sourcesFailed: z105.array(z105.string())
 };
 var SURVEY_DESCRIPTION = 'Transient OSS project search. Returns a ranked list of GitHub repositories with license, last-commit, star-count, and one-line description. Does NOT persist to the research registry \u2014 use `research_add_source` for that. Best for one-off engineering decisions like "what tools exist in this space?".';
 function registerSurveyOssLandscapeTool(server, deps) {
@@ -49991,7 +49997,7 @@ function registerSurveyOssLandscapeTool(server, deps) {
 }
 
 // src/mcp/tools/vendor-publishing-audit.ts
-import { z as z105 } from "zod";
+import { z as z106 } from "zod";
 
 // src/mcp/tools/vendor-publishing-seed.ts
 var VENDOR_PUBLISHING_SEED = {
@@ -50064,8 +50070,8 @@ function listKnownVendors() {
 }
 
 // src/mcp/tools/vendor-publishing-audit.ts
-var VendorPublishingAuditInputSchema = z105.object({
-  vendor: z105.string().min(1).max(50).toLowerCase().describe('Vendor identifier, lowercase. e.g. "ubuntu", "debian", "fedora"')
+var VendorPublishingAuditInputSchema = z106.object({
+  vendor: z106.string().min(1).max(50).toLowerCase().describe('Vendor identifier, lowercase. e.g. "ubuntu", "debian", "fedora"')
 });
 function lookupVendor(vendor) {
   if (isKnownVendor(vendor)) {
@@ -50097,20 +50103,20 @@ function createVendorPublishingAuditHandler(deps) {
   };
 }
 var VENDOR_PUBLISHING_OUTPUT_SCHEMA = {
-  vendor: z105.string(),
-  known: z105.boolean(),
+  vendor: z106.string(),
+  known: z106.boolean(),
   // Fields below populate when known=true; permissive optional for known=false.
-  sha256SumsUrlPattern: z105.string().optional(),
-  sha256SumsSignatureUrlPattern: z105.string().optional(),
-  signaturePattern: z105.string().optional(),
-  gpgKeys: z105.array(z105.unknown()).optional(),
-  releaseCadence: z105.string().optional(),
-  keyRotationNotes: z105.string().optional(),
-  vendorDocUrl: z105.string().optional(),
-  citedAt: z105.string().optional(),
+  sha256SumsUrlPattern: z106.string().optional(),
+  sha256SumsSignatureUrlPattern: z106.string().optional(),
+  signaturePattern: z106.string().optional(),
+  gpgKeys: z106.array(z106.unknown()).optional(),
+  releaseCadence: z106.string().optional(),
+  keyRotationNotes: z106.string().optional(),
+  vendorDocUrl: z106.string().optional(),
+  citedAt: z106.string().optional(),
   // Fields below populate when known=false.
-  message: z105.string().optional(),
-  knownVendors: z105.array(z105.string()).optional()
+  message: z106.string().optional(),
+  knownVendors: z106.array(z106.string()).optional()
 };
 var VENDOR_PUBLISHING_DESCRIPTION = "Look up a vendor's published-artifact signing infrastructure: GPG key fingerprints, SHA256SUMS URL pattern, signature shape (clearsigned / detached / detached-on-iso), release cadence, key rotation notes, and the vendor doc citation. Static lookup against a curated seed dataset; the vendor doc URL is the authoritative source. Returns `{known: false, knownVendors: [...]}` for vendors without a seed entry. v1 covers ubuntu, debian, fedora.";
 function registerVendorPublishingAuditTool(server, deps) {
@@ -50139,17 +50145,17 @@ function registerVendorPublishingAuditTool(server, deps) {
 }
 
 // src/mcp/tools/compare-data-feeds.ts
-import { z as z106 } from "zod";
+import { z as z107 } from "zod";
 import * as path6 from "node:path";
 import * as fs7 from "node:fs";
 import * as yaml4 from "yaml";
-var CompareDataFeedsInputSchema = z106.object({
-  feedAPath: z106.string().min(1).max(1e3).describe("Filesystem path to feed A (YAML or JSON, auto-detected by extension)"),
-  feedBPath: z106.string().min(1).max(1e3).describe("Filesystem path to feed B"),
-  keyPath: z106.string().min(1).max(200).describe(
+var CompareDataFeedsInputSchema = z107.object({
+  feedAPath: z107.string().min(1).max(1e3).describe("Filesystem path to feed A (YAML or JSON, auto-detected by extension)"),
+  feedBPath: z107.string().min(1).max(1e3).describe("Filesystem path to feed B"),
+  keyPath: z107.string().min(1).max(200).describe(
     'Dotted path to the entry key, e.g. "id" or "name". Each entry must have this field.'
   ),
-  compareFields: z106.array(z106.string().min(1).max(200)).max(20).optional().describe(
+  compareFields: z107.array(z107.string().min(1).max(200)).max(20).optional().describe(
     'Optional dotted field paths to compare across matched entries (e.g. ["license", "sha256"])'
   )
 });
@@ -50333,24 +50339,24 @@ function createCompareDataFeedsHandler(deps) {
   };
 }
 var COMPARE_OUTPUT_SCHEMA = {
-  feedAPath: z106.string(),
-  feedBPath: z106.string(),
-  keyPath: z106.string(),
-  counts: z106.object({
-    entriesInA: z106.number(),
-    entriesInB: z106.number(),
-    onlyInA: z106.number(),
-    onlyInB: z106.number(),
-    inBoth: z106.number(),
-    fieldDifferences: z106.number()
+  feedAPath: z107.string(),
+  feedBPath: z107.string(),
+  keyPath: z107.string(),
+  counts: z107.object({
+    entriesInA: z107.number(),
+    entriesInB: z107.number(),
+    onlyInA: z107.number(),
+    onlyInB: z107.number(),
+    inBoth: z107.number(),
+    fieldDifferences: z107.number()
   }),
-  coverage: z106.object({
-    onlyInA: z106.array(z106.string()),
-    onlyInB: z106.array(z106.string()),
-    inBoth: z106.array(z106.string())
+  coverage: z107.object({
+    onlyInA: z107.array(z107.string()),
+    onlyInB: z107.array(z107.string()),
+    inBoth: z107.array(z107.string())
   }),
-  fieldDifferences: z106.array(z106.unknown()),
-  summary: z106.string()
+  fieldDifferences: z107.array(z107.unknown()),
+  summary: z107.string()
 };
 var COMPARE_DESCRIPTION = "Diff two upstream data feeds (YAML or JSON files) along coverage and per-field axes. Returns which entries exist in A, B, both, plus optional field-level diffs across matched entries. v1 takes file paths only (no URL fetch \u2014 that needs an SSRF design pass). Both feeds must be a top-level array OR a top-level object with exactly one array field.";
 function registerCompareDataFeedsTool(server, deps) {
@@ -50379,9 +50385,9 @@ function registerCompareDataFeedsTool(server, deps) {
 }
 
 // src/mcp/tools/query-task-state-tool.ts
-import { z as z107 } from "zod";
-var QueryTaskStateInputSchema = z107.object({
-  taskId: z107.string().min(1).max(128).describe("Task ID whose structured state log should be read")
+import { z as z108 } from "zod";
+var QueryTaskStateInputSchema = z108.object({
+  taskId: z108.string().min(1).max(128).describe("Task ID whose structured state log should be read")
 });
 function queryTaskStateHandler(args, ctx) {
   const parsed = QueryTaskStateInputSchema.safeParse(args);
@@ -50416,7 +50422,7 @@ function queryTaskStateHandler(args, ctx) {
 function registerQueryTaskStateTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "query_task_state" });
   const toolSchema = {
-    taskId: z107.string().min(1).max(128).describe("Task ID whose structured state log should be read")
+    taskId: z108.string().min(1).max(128).describe("Task ID whose structured state log should be read")
   };
   const description = "Read the structured state log for a task ID and return the current snapshot. Includes Magentic-One Task Ledger (facts/guesses/openQuestions) and Progress Ledger (per-step reflections with suggestedAction) when orchestrators have written them. Structured state is only written when NEXUS_TASK_STATE_ENABLED=1 was set during the orchestrate invocation.";
   const secureHandler = createSecureHandler(queryTaskStateHandler, {
@@ -50438,28 +50444,28 @@ function registerQueryTaskStateTool(server, deps) {
 }
 
 // src/mcp/tools/ci-health-check-tool.ts
-import { z as z110 } from "zod";
+import { z as z111 } from "zod";
 
 // src/mcp/tools/ci-health-log.ts
 import { appendFileSync as appendFileSync4, existsSync as existsSync11, readFileSync as readFileSync10, statSync as statSync2, writeFileSync as writeFileSync3 } from "node:fs";
-import { z as z109 } from "zod";
+import { z as z110 } from "zod";
 
 // src/mcp/tools/ci-health-types.ts
-import { z as z108 } from "zod";
-var CiHealthStatusSchema = z108.enum(["healthy", "degraded", "outage", "unknown"]);
+import { z as z109 } from "zod";
+var CiHealthStatusSchema = z109.enum(["healthy", "degraded", "outage", "unknown"]);
 
 // src/mcp/tools/ci-health-log.ts
 var logger47 = createLogger({ component: "ci-health-log" });
-var CiHealthEventSchema = z109.object({
-  v: z109.literal(1),
-  ts: z109.iso.datetime(),
+var CiHealthEventSchema = z110.object({
+  v: z110.literal(1),
+  ts: z110.iso.datetime(),
   status: CiHealthStatusSchema,
-  repo: z109.string().optional(),
-  signals: z109.array(
-    z109.object({
-      source: z109.enum(["github-status", "repo-activity-window"]),
+  repo: z110.string().optional(),
+  signals: z110.array(
+    z110.object({
+      source: z110.enum(["github-status", "repo-activity-window"]),
       status: CiHealthStatusSchema,
-      evidence: z109.string()
+      evidence: z110.string()
     })
   )
 });
@@ -50539,17 +50545,17 @@ function eventFromCheck(params) {
 }
 
 // src/mcp/tools/ci-health-check-tool.ts
-var CiHealthCheckInputSchema = z110.object({
+var CiHealthCheckInputSchema = z111.object({
   /**
    * Repo to check for the recent-runs activity signal (in `owner/repo` form).
    * Optional — when omitted, only the status-page signal is consulted.
    */
-  repo: z110.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
+  repo: z111.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
   /**
    * How far back to look for recent-runs activity (minutes). Default 30 —
    * matches the typical wedge-detection window from the #3070 / #3076 outages.
    */
-  activityWindowMinutes: z110.number().int().min(5).max(180).default(30).describe("Recent-runs lookback window in minutes (5-180; default 30).")
+  activityWindowMinutes: z111.number().int().min(5).max(180).default(30).describe("Recent-runs lookback window in minutes (5-180; default 30).")
 });
 var STATUS_PAGE_URL = "https://www.githubstatus.com/api/v2/components.json";
 function mapStatusPageStatus(raw) {
@@ -50682,8 +50688,8 @@ var DESCRIPTION = "Check CI infrastructure health before triggering / polling ru
 function registerCiHealthCheckTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "ci_health_check" });
   const toolSchema = {
-    repo: z110.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
-    activityWindowMinutes: z110.number().int().min(5).max(180).optional().describe("Recent-runs lookback window in minutes (5-180; default 30).")
+    repo: z111.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/, "Must be owner/repo form").optional().describe("GitHub repo (owner/repo) to check for recent CI activity. Optional."),
+    activityWindowMinutes: z111.number().int().min(5).max(180).optional().describe("Recent-runs lookback window in minutes (5-180; default 30).")
   };
   const secureHandler = createSecureHandler((args) => ciHealthCheckHandler(args, logger57), {
     toolName: "ci_health_check",
@@ -50709,18 +50715,18 @@ function registerCiHealthCheckTool(server, deps) {
 
 // src/mcp/tools/quality-gate-tool.ts
 import { statSync as statSync3 } from "node:fs";
-import { z as z111 } from "zod";
-var QualityCheckSchema = z111.enum(["typecheck", "lint", "tests", "build", "security"]);
+import { z as z112 } from "zod";
+var QualityCheckSchema = z112.enum(["typecheck", "lint", "tests", "build", "security"]);
 var DEFAULT_CHECKS = ["typecheck", "lint", "tests"];
-var RunQualityGateInputSchema = z111.object({
+var RunQualityGateInputSchema = z112.object({
   /** Project directory to run checks against. Must resolve inside the repo/cwd root. */
-  projectDir: z111.string().optional().describe(
+  projectDir: z112.string().optional().describe(
     "Project directory to run checks against (default: cwd). Must stay inside the repo root."
   ),
   /** Which allowlisted checks to run. */
-  checks: z111.array(QualityCheckSchema).nonempty().default([...DEFAULT_CHECKS]).describe("Allowlisted checks to run (default: ['typecheck','lint','tests'])."),
+  checks: z112.array(QualityCheckSchema).nonempty().default([...DEFAULT_CHECKS]).describe("Allowlisted checks to run (default: ['typecheck','lint','tests'])."),
   /** 1-based iteration counter, forwarded to the engine for feedback context. */
-  iteration: z111.number().int().min(1).default(1).describe("1-based iteration number (default 1).")
+  iteration: z112.number().int().min(1).default(1).describe("1-based iteration number (default 1).")
 });
 function validateProjectDir(raw) {
   const candidate = raw ?? process.cwd();
@@ -50795,11 +50801,11 @@ var DESCRIPTION2 = "Run the QA quality gate (#1684 engine) against a project dir
 function registerRunQualityGateTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "run_quality_gate" });
   const toolSchema = {
-    projectDir: z111.string().optional().describe(
+    projectDir: z112.string().optional().describe(
       "Project directory to run checks against (default: cwd). Must stay inside the repo root."
     ),
-    checks: z111.array(QualityCheckSchema).nonempty().optional().describe("Allowlisted checks to run (default: ['typecheck','lint','tests'])."),
-    iteration: z111.number().int().min(1).optional().describe("1-based iteration number (default 1).")
+    checks: z112.array(QualityCheckSchema).nonempty().optional().describe("Allowlisted checks to run (default: ['typecheck','lint','tests'])."),
+    iteration: z112.number().int().min(1).optional().describe("1-based iteration number (default 1).")
   };
   const secureHandler = createSecureHandler(
     (args) => runQualityGateHandler(args, logger57),
@@ -50829,9 +50835,9 @@ function registerRunQualityGateTool(server, deps) {
 // src/mcp/tools/verify-audit-chain-tool.ts
 import * as fs8 from "node:fs/promises";
 import * as path7 from "node:path";
-import { z as z112 } from "zod";
-var VerifyAuditChainInputSchema = z112.object({
-  logDir: z112.string().min(1).max(512).describe(
+import { z as z113 } from "zod";
+var VerifyAuditChainInputSchema = z113.object({
+  logDir: z113.string().min(1).max(512).describe(
     "Filesystem path to the FileAuditStorage log directory. Tool reads all `audit-*.jsonl` files in lexicographic order and verifies the combined chain."
   )
 });
@@ -50921,7 +50927,7 @@ async function handler2(args, ctx) {
 function registerVerifyAuditChainTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "verify_audit_chain" });
   const toolSchema = {
-    logDir: z112.string().min(1).max(512).describe(
+    logDir: z113.string().min(1).max(512).describe(
       "Filesystem path to the FileAuditStorage log directory. Tool reads all `audit-*.jsonl` files and verifies the combined hash chain."
     )
   };
@@ -50945,7 +50951,7 @@ function registerVerifyAuditChainTool(server, deps) {
 }
 
 // src/mcp/tools/suggest-research-tasks-tool.ts
-import { z as z113 } from "zod";
+import { z as z114 } from "zod";
 var SUGGEST_RESEARCH_TASKS_NOTE = "Suggestions derived from external research (untrusted); review before acting \u2014 nothing was executed or filed.";
 var RESEARCH_BUDGET_MS = 2e4;
 var RESEARCH_TIMED_OUT = /* @__PURE__ */ Symbol("research-budget-exceeded");
@@ -50962,11 +50968,11 @@ async function withResearchBudget(p, ms) {
     if (timer !== void 0) clearTimeout(timer);
   }
 }
-var SuggestResearchTasksInputSchema = z113.object({
-  topic: z113.string().optional().describe("Topic filter passed to research_discover. Optional."),
-  qualityThreshold: z113.number().min(0).max(10).optional().describe("Minimum quality score (0-10) a discovery must meet to be suggested. Optional."),
-  maxTriggers: z113.number().int().min(1).optional().describe("Max number of candidate tasks to return (>=1). Optional."),
-  existingTaskIds: z113.array(z113.string()).optional().describe("Known task IDs to skip (dedup). Optional.")
+var SuggestResearchTasksInputSchema = z114.object({
+  topic: z114.string().optional().describe("Topic filter passed to research_discover. Optional."),
+  qualityThreshold: z114.number().min(0).max(10).optional().describe("Minimum quality score (0-10) a discovery must meet to be suggested. Optional."),
+  maxTriggers: z114.number().int().min(1).optional().describe("Max number of candidate tasks to return (>=1). Optional."),
+  existingTaskIds: z114.array(z114.string()).optional().describe("Known task IDs to skip (dedup). Optional.")
 });
 function toTriggerConfig(input) {
   return {
@@ -51023,10 +51029,10 @@ var DESCRIPTION3 = "SUGGEST-ONLY: surface candidate pipeline tasks for human/orc
 function registerSuggestResearchTasksTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "suggest_research_tasks" });
   const toolSchema = {
-    topic: z113.string().optional().describe("Topic filter passed to research_discover. Optional."),
-    qualityThreshold: z113.number().min(0).max(10).optional().describe("Minimum quality score (0-10) a discovery must meet to be suggested. Optional."),
-    maxTriggers: z113.number().int().min(1).optional().describe("Max number of candidate tasks to return (>=1). Optional."),
-    existingTaskIds: z113.array(z113.string()).optional().describe("Known task IDs to skip (dedup). Optional.")
+    topic: z114.string().optional().describe("Topic filter passed to research_discover. Optional."),
+    qualityThreshold: z114.number().min(0).max(10).optional().describe("Minimum quality score (0-10) a discovery must meet to be suggested. Optional."),
+    maxTriggers: z114.number().int().min(1).optional().describe("Max number of candidate tasks to return (>=1). Optional."),
+    existingTaskIds: z114.array(z114.string()).optional().describe("Known task IDs to skip (dedup). Optional.")
   };
   const secureHandler = createSecureHandler(
     (args) => suggestResearchTasksHandler(args, logger57),
@@ -51054,7 +51060,7 @@ function registerSuggestResearchTasksTool(server, deps) {
 }
 
 // src/mcp/tools/run-tool.ts
-import { z as z117 } from "zod";
+import { z as z118 } from "zod";
 import { randomUUID as randomUUID17 } from "node:crypto";
 
 // src/orchestration/meta-dispatcher.ts
@@ -51514,7 +51520,7 @@ function createMetaOrchestrator(options) {
 
 // src/orchestration/meta-shadow-selector.ts
 import { appendFileSync as appendFileSync5, existsSync as existsSync12, readFileSync as readFileSync11 } from "node:fs";
-import { z as z114 } from "zod";
+import { z as z115 } from "zod";
 var SHADOW_STRATEGY_ARMS = [
   "single-shot",
   "dev-pipeline",
@@ -51601,19 +51607,19 @@ function createHydratableSelector() {
 var META_OUTCOME_SCHEMA_VERSION = 1;
 var HYDRATE_LOOKBACK_DAYS = 30;
 var HYDRATE_LOOKBACK_MS = HYDRATE_LOOKBACK_DAYS * 24 * 60 * 60 * 1e3;
-var PersistedContextSchema = z114.object({
-  taskComplexity: z114.number(),
-  contextLengthNormalized: z114.number(),
-  isCodeTask: z114.number(),
-  isReasoningTask: z114.number(),
-  budgetUtilization: z114.number(),
-  timePressure: z114.number()
-});
-var PersistedMetaOutcomeSchema = z114.object({
-  schema: z114.literal(META_OUTCOME_SCHEMA_VERSION),
-  timestamp: z114.string(),
-  strategy: z114.enum(SHADOW_STRATEGY_ARMS),
-  success: z114.boolean(),
+var PersistedContextSchema = z115.object({
+  taskComplexity: z115.number(),
+  contextLengthNormalized: z115.number(),
+  isCodeTask: z115.number(),
+  isReasoningTask: z115.number(),
+  budgetUtilization: z115.number(),
+  timePressure: z115.number()
+});
+var PersistedMetaOutcomeSchema = z115.object({
+  schema: z115.literal(META_OUTCOME_SCHEMA_VERSION),
+  timestamp: z115.string(),
+  strategy: z115.enum(SHADOW_STRATEGY_ARMS),
+  success: z115.boolean(),
   context: PersistedContextSchema
 });
 var persistLogger = createLogger({ component: "MetaShadowSelector" });
@@ -52006,7 +52012,7 @@ function evaluateMetaStrategyReadiness(result, config = DEFAULT_META_STRATEGY_RE
 }
 
 // src/mcp/tools/dev-pipeline-tool.ts
-import { z as z115 } from "zod";
+import { z as z116 } from "zod";
 import * as fs10 from "node:fs";
 import * as path9 from "node:path";
 import { randomUUID as randomUUID15 } from "node:crypto";
@@ -52159,36 +52165,36 @@ var DEV_PIPELINE_DRY_RUN_NOTE = "This was a dry run (plan+vote), which always ru
 function dispatchNoteFor(dryRun) {
   return dryRun ? DEV_PIPELINE_DRY_RUN_NOTE : DEV_PIPELINE_ASYNC_HINT;
 }
-var DevPipelineInputSchema = z115.object({
+var DevPipelineInputSchema = z116.object({
   /** Direct task instructions. */
-  task: z115.string().max(1e4).optional().describe("Direct task instructions (what to build)"),
+  task: z116.string().max(1e4).optional().describe("Direct task instructions (what to build)"),
   /** Path to a plan file (.md, .yaml, .txt) to use as input. */
-  planFile: z115.string().max(500).optional().describe("Path to a plan/spec file to use as input"),
+  planFile: z116.string().max(500).optional().describe("Path to a plan/spec file to use as input"),
   /** Whether to run in dry-run mode (plan+vote only, no implementation). */
-  dryRun: z115.boolean().default(false).describe("If true, stop after plan+vote (no implementation)"),
+  dryRun: z116.boolean().default(false).describe("If true, stop after plan+vote (no implementation)"),
   /** Maximum vote iterations before proceeding (default: 3). */
-  maxVoteIterations: z115.number().int().min(1).max(5).default(3).describe("Max plan\u2192vote iterations"),
+  maxVoteIterations: z116.number().int().min(1).max(5).default(3).describe("Max plan\u2192vote iterations"),
   /** Maximum QA iterations per task (default: 3). */
-  maxQaIterations: z115.number().int().min(1).max(5).default(3).describe("Max QA review iterations per task"),
+  maxQaIterations: z116.number().int().min(1).max(5).default(3).describe("Max QA review iterations per task"),
   /** Working directory for the pipeline (default: cwd). Used for security scan and context. */
-  workingDir: z115.string().max(500).optional().describe("Working directory (default: cwd)"),
+  workingDir: z116.string().max(500).optional().describe("Working directory (default: cwd)"),
   /** GitHub issue number to track progress on. Updates posted as comments. */
-  issueNumber: z115.number().int().positive().optional().describe("GitHub issue to post progress to"),
+  issueNumber: z116.number().int().positive().optional().describe("GitHub issue to post progress to"),
   /** GitHub repo (owner/name) for issue tracking. */
-  repo: z115.string().max(200).optional().describe("GitHub repo for issue tracking (e.g., owner/repo)"),
+  repo: z116.string().max(200).optional().describe("GitHub repo for issue tracking (e.g., owner/repo)"),
   /** Task tracking backend: github, gitlab, or json (default: json). */
-  trackerBackend: z115.enum(["github", "gitlab", "json"]).default("json").describe("Task tracking backend for issue creation"),
+  trackerBackend: z116.enum(["github", "gitlab", "json"]).default("json").describe("Task tracking backend for issue creation"),
   /** Labels to apply to created issues. */
-  labels: z115.array(z115.string()).optional().describe("Labels for created issues"),
+  labels: z116.array(z116.string()).optional().describe("Labels for created issues"),
   /** Session ID for checkpoint/resume. Enables crash recovery. */
-  sessionId: z115.string().max(128).regex(/^[a-zA-Z0-9_-]+$/).optional().describe("Session ID for checkpoint/resume (crash recovery)"),
+  sessionId: z116.string().max(128).regex(/^[a-zA-Z0-9_-]+$/).optional().describe("Session ID for checkpoint/resume (crash recovery)"),
   /**
    * TESTS ONLY — when true, voters return random decisions. Must not be used as
    * a fallback when adapters are unavailable; configure an adapter instead. (#2319)
    */
-  simulateVotes: z115.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)"),
+  simulateVotes: z116.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)"),
   /** Voting strategy for consensus stages. */
-  votingStrategy: z115.enum([
+  votingStrategy: z116.enum([
     "simple_majority",
     "supermajority",
     "unanimous",
@@ -52197,11 +52203,11 @@ var DevPipelineInputSchema = z115.object({
     "opinion_wise"
   ]).optional().describe("Voting strategy for plan approval (default: higher_order)"),
   /** Use 3 agents instead of 6 for faster voting. */
-  quickMode: z115.boolean().default(false).describe("Use 3 agents instead of 6 for faster consensus voting"),
+  quickMode: z116.boolean().default(false).describe("Use 3 agents instead of 6 for faster consensus voting"),
   /** Maximum execution time per stage in milliseconds (min 30s, max 600s). */
-  timeoutMs: z115.number().int().min(3e4).max(6e5).optional().describe("Max time per stage in ms (30000-600000). Default: varies by stage complexity"),
+  timeoutMs: z116.number().int().min(3e4).max(6e5).optional().describe("Max time per stage in ms (30000-600000). Default: varies by stage complexity"),
   /** Pipeline execution mode. */
-  mode: z115.enum(["autonomous", "harness"]).default("autonomous").describe(
+  mode: z116.enum(["autonomous", "harness"]).default("autonomous").describe(
     "'autonomous': full pipeline. 'harness': stops after decompose, returns tasks for caller to implement."
   ),
   /**
@@ -52212,15 +52218,15 @@ var DevPipelineInputSchema = z115.object({
    * `get_job_result({ jobId })` for the result. Ignored when `dryRun` is
    * true (plan+vote completes fast, so dry runs always stay sync).
    */
-  dispatch: z115.enum(["sync", "async"]).default("sync").describe(
+  dispatch: z116.enum(["sync", "async"]).default("sync").describe(
     "Dispatch mode (#3726). 'sync' (default): run inline. 'async': return a jobId immediately + run in background (poll get_job_result). Ignored for dryRun."
   ),
   /** Local pre-ship quality gate (typecheck/lint/tests) mode (#3356). */
-  qualityGate: z115.enum(["off", "advisory", "blocking"]).default("off").describe(
+  qualityGate: z116.enum(["off", "advisory", "blocking"]).default("off").describe(
     "Pre-ship local quality gate. 'off' (default): skip. 'advisory': run + record feedback, never fail. 'blocking': a red gate fails the pipeline."
   ),
   /** Opt-in per-run token budget — a safety cap for unattended runs (#3395). */
-  maxBudgetTokens: z115.number().int().positive().optional().describe(
+  maxBudgetTokens: z116.number().int().positive().optional().describe(
     "Per-run token ceiling (#3395). When set, expert calls stop (returning failures) once cumulative usage crosses it \u2014 a hard-stop safety cap for unattended/multi-day runs. Omit to disable (default)."
   )
 });
@@ -52444,20 +52450,20 @@ function registerDevPipelineTool(server, deps) {
 }
 
 // src/mcp/tools/pipeline-tool.ts
-import { z as z116 } from "zod";
+import { z as z117 } from "zod";
 import * as fs11 from "node:fs";
 import * as path10 from "node:path";
 import { randomUUID as randomUUID16 } from "node:crypto";
 var PIPELINE_ASYNC_HINT = "A full run_pipeline run can exceed the synchronous MCP request timeout. Retry with `dispatch: 'async'` to get a jobId immediately, then poll get_job_result({ jobId }) for the result.";
-var PipelineInputSchema = z116.object({
+var PipelineInputSchema = z117.object({
   /** The task to execute. */
-  task: z116.string().min(5).max(1e4).describe("Task description \u2014 pipeline template auto-selected based on content"),
+  task: z117.string().min(5).max(1e4).describe("Task description \u2014 pipeline template auto-selected based on content"),
   /** Path to a spec file (.md, .yaml) to use as task input. */
-  specFile: z116.string().max(500).optional().describe("Path to a spec file \u2014 content prepended to task for greenfield projects"),
+  specFile: z117.string().max(500).optional().describe("Path to a spec file \u2014 content prepended to task for greenfield projects"),
   /** Override template — see `listTemplateIds()` for the canonical list (#2728). Auto-detected if omitted. */
-  template: z116.string().max(50).optional().describe(`Pipeline template override. Available: ${listTemplateIds().join(", ")}`),
+  template: z117.string().max(50).optional().describe(`Pipeline template override. Available: ${listTemplateIds().join(", ")}`),
   /** Voting strategy for consensus stages. */
-  votingStrategy: z116.enum([
+  votingStrategy: z117.enum([
     "simple_majority",
     "supermajority",
     "unanimous",
@@ -52468,11 +52474,11 @@ var PipelineInputSchema = z116.object({
     "Voting strategy for plan approval. simple_majority (default), supermajority (67%), unanimous, higher_order (Bayesian), proof_of_learning, opinion_wise"
   ),
   /** Use 3 agents instead of 6 for faster voting. */
-  quickMode: z116.boolean().default(false).describe("Use 3 agents instead of 6 for faster consensus voting"),
+  quickMode: z117.boolean().default(false).describe("Use 3 agents instead of 6 for faster consensus voting"),
   /** Maximum execution time per stage in milliseconds (min 30s, max 600s). */
-  timeoutMs: z116.number().int().min(3e4).max(6e5).optional().describe("Max time per stage in ms (30000-600000). Default: varies by stage complexity"),
+  timeoutMs: z117.number().int().min(3e4).max(6e5).optional().describe("Max time per stage in ms (30000-600000). Default: varies by stage complexity"),
   /** Stop after planning/voting (no implementation). */
-  dryRun: z116.boolean().default(false).describe("Stop after vote stage (no implementation)"),
+  dryRun: z117.boolean().default(false).describe("Stop after vote stage (no implementation)"),
   /**
    * Dispatch mode (#3730). `sync` (default) runs the pipeline inline and
    * returns the result — but a real multi-stage adaptive run can exceed the
@@ -52481,11 +52487,11 @@ var PipelineInputSchema = z116.object({
    * `get_job_result({ jobId })` for the result. Ignored when `dryRun` is true
    * (plan+vote completes fast, so dry runs always stay sync).
    */
-  dispatch: z116.enum(["sync", "async"]).default("sync").describe(
+  dispatch: z117.enum(["sync", "async"]).default("sync").describe(
     "Dispatch mode (#3730). 'sync' (default): run inline. 'async': return a jobId immediately + run in background (poll get_job_result). Ignored for dryRun."
   ),
   /** TESTS ONLY — random output, must not be used for real decisions. (#2319) */
-  simulateVotes: z116.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)")
+  simulateVotes: z117.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)")
 });
 function buildOutput3(result, simulated) {
   return {
@@ -52656,9 +52662,9 @@ function registerPipelineTool(server, deps) {
 }
 
 // src/mcp/tools/run-tool.ts
-var RunInputSchema = z117.object({
-  goal: z117.string().min(1).describe("Natural-language goal. nexus-agents selects how to execute it."),
-  forceStrategy: z117.enum([
+var RunInputSchema = z118.object({
+  goal: z118.string().min(1).describe("Natural-language goal. nexus-agents selects how to execute it."),
+  forceStrategy: z118.enum([
     "single-shot",
     "dev-pipeline",
     "pipeline",
@@ -52670,10 +52676,10 @@ var RunInputSchema = z117.object({
   ]).optional().describe(
     "Power-user override: force a specific strategy instead of letting the router choose."
   ),
-  requiresConsensus: z117.boolean().optional().describe("Hint: the task needs a multi-perspective consensus decision."),
-  dependencyStructure: z117.enum(["linear", "dag", "independent", "unknown"]).optional().describe("Hint: the dependency structure of the work."),
-  isNovel: z117.boolean().optional().describe("Hint: this kind of task has not been seen before."),
-  execute: z117.boolean().optional().describe(
+  requiresConsensus: z118.boolean().optional().describe("Hint: the task needs a multi-perspective consensus decision."),
+  dependencyStructure: z118.enum(["linear", "dag", "independent", "unknown"]).optional().describe("Hint: the dependency structure of the work."),
+  isNovel: z118.boolean().optional().describe("Hint: this kind of task has not been seen before."),
+  execute: z118.boolean().optional().describe(
     "When true, actually run the selected strategy (if an executor is wired) and return its result; otherwise return the routing decision only (default false, read-only)."
   ),
   /**
@@ -52688,7 +52694,7 @@ var RunInputSchema = z117.object({
    * other, the call is REFUSED rather than executed: silently ignoring a
    * do-not-act flag is the one outcome a governance substrate cannot allow.
    */
-  dryRun: z117.boolean().optional().describe(
+  dryRun: z118.boolean().optional().describe(
     "Plan and vote only, no implementation (#4806). Requires the dev-pipeline strategy \u2014 refused (never silently executed) when the router selects another."
   ),
   /**
@@ -52699,7 +52705,7 @@ var RunInputSchema = z117.object({
    * envelope immediately and runs in the background; poll
    * `get_job_result({ jobId })`. Ignored for read-only routing (execute:false).
    */
-  dispatch: z117.enum(["sync", "async"]).optional().describe(
+  dispatch: z118.enum(["sync", "async"]).optional().describe(
     "Dispatch mode (#3732). 'sync' (default): run inline. 'async' (only with execute:true): return a jobId immediately + run in background (poll get_job_result)."
   )
 });
@@ -52922,12 +52928,12 @@ function registerRunTool(server, deps) {
 }
 
 // src/mcp/tools/list-available-models-tool.ts
-import { z as z118 } from "zod";
+import { z as z119 } from "zod";
 var DESCRIPTION5 = "Probe every model-discovery transport (OpenRouter API + opencode/claude/codex/gemini CLIs) and report a per-transport health summary: probe ok/failed, model count, and a sample of ids. Use it to validate the CLIs and APIs are wired and reachable. Read-only; does not change routing.";
 var PROBE_TIMEOUT_MS = 12e3;
-var ListAvailableModelsInputSchema = z118.object({
-  includeModelIds: z118.boolean().optional().describe("Include the full model-id list per transport (default false \u2192 sample of 5 only)."),
-  includeOpenRouter: z118.boolean().optional().describe("Probe the OpenRouter live catalog (default true).")
+var ListAvailableModelsInputSchema = z119.object({
+  includeModelIds: z119.boolean().optional().describe("Include the full model-id list per transport (default false \u2192 sample of 5 only)."),
+  includeOpenRouter: z119.boolean().optional().describe("Probe the OpenRouter live catalog (default true).")
 });
 async function probeSource(source, includeModelIds) {
   let timer;
@@ -52994,8 +53000,8 @@ async function listAvailableModelsHandler(args, deps, logger57) {
 function registerListAvailableModelsTool(server, deps) {
   const logger57 = deps.logger ?? createLogger({ tool: "list_available_models" });
   const toolSchema = {
-    includeModelIds: z118.boolean().optional().describe("Include the full model-id list per transport (default false \u2192 sample of 5 only)."),
-    includeOpenRouter: z118.boolean().optional().describe("Probe the OpenRouter live catalog (default true).")
+    includeModelIds: z119.boolean().optional().describe("Include the full model-id list per transport (default false \u2192 sample of 5 only)."),
+    includeOpenRouter: z119.boolean().optional().describe("Probe the OpenRouter live catalog (default true).")
   };
   const secureHandler = createSecureHandler(
     (args) => listAvailableModelsHandler(args, deps, logger57),
@@ -53019,7 +53025,7 @@ function registerListAvailableModelsTool(server, deps) {
 }
 
 // src/mcp/tools/pr-review-eval-types.ts
-import { z as z119 } from "zod";
+import { z as z120 } from "zod";
 var PR_REVIEW_EVAL_ROLES = [
   "architect",
   "security",
@@ -53027,43 +53033,43 @@ var PR_REVIEW_EVAL_ROLES = [
   "catfish",
   "scope_steward"
 ];
-var PrReviewEvalRoleSchema = z119.enum(PR_REVIEW_EVAL_ROLES);
-var PrReviewCaseClassSchema = z119.enum(["buggy", "clean", "borderline"]);
-var VoterEvalVerdictSchema = z119.object({
+var PrReviewEvalRoleSchema = z120.enum(PR_REVIEW_EVAL_ROLES);
+var PrReviewCaseClassSchema = z120.enum(["buggy", "clean", "borderline"]);
+var VoterEvalVerdictSchema = z120.object({
   /** Stable record id (e.g. `${runId}:${caseNumber}:${role}`). */
-  id: z119.string().min(1).max(160),
+  id: z120.string().min(1).max(160),
   /** The pr_review run / batch this verdict belongs to. */
-  runId: z119.string().min(1).max(64),
+  runId: z120.string().min(1).max(64),
   /** Dataset case identifier (the dataset's `number` field). */
-  caseNumber: z119.string().min(1).max(80),
+  caseNumber: z120.string().min(1).max(80),
   /** Rubric class of the case (ground-truth label). */
   caseClass: PrReviewCaseClassSchema,
   /** The voter role being scored. */
   role: PrReviewEvalRoleSchema,
   /** Verified findings that matched a known bug. */
-  truePositives: z119.number().int().nonnegative(),
+  truePositives: z120.number().int().nonnegative(),
   /** Verified findings on clean code that matched no known bug. */
-  falsePositives: z119.number().int().nonnegative(),
+  falsePositives: z120.number().int().nonnegative(),
   /** Known bugs this voter failed to flag. */
-  falseNegatives: z119.number().int().nonnegative(),
+  falseNegatives: z120.number().int().nonnegative(),
   /** Rubric version the ground truth was adjudicated under. */
-  rubricVersion: z119.string().min(1).max(32),
+  rubricVersion: z120.string().min(1).max(32),
   /** ISO-8601 timestamp the verdict was recorded. */
-  timestamp: z119.string().min(1).max(40)
+  timestamp: z120.string().min(1).max(40)
 });
-var VoterEvalVerdictQuerySchema = z119.object({
+var VoterEvalVerdictQuerySchema = z120.object({
   role: PrReviewEvalRoleSchema.optional(),
-  runId: z119.string().min(1).max(64).optional(),
+  runId: z120.string().min(1).max(64).optional(),
   caseClass: PrReviewCaseClassSchema.optional(),
-  rubricVersion: z119.string().min(1).max(32).optional(),
+  rubricVersion: z120.string().min(1).max(32).optional(),
   /** ISO-8601 lower bound (inclusive) on `timestamp`. */
-  since: z119.string().optional(),
+  since: z120.string().optional(),
   /** Most-recent-N cap. */
-  limit: z119.number().int().positive().optional()
+  limit: z120.number().int().positive().optional()
 });
 
 // src/mcp/tools/supply-chain-tradeoff-panel.ts
-import { z as z120 } from "zod";
+import { z as z121 } from "zod";
 import { randomUUID as randomUUID18 } from "node:crypto";
 var DEFAULT_AXES = [
   "build_time_determinism",
@@ -53085,16 +53091,16 @@ var FULL_PANEL = [
   "scope_steward"
 ];
 var QUICK_PANEL = ["architect", "security", "scope_steward"];
-var SupplyChainTradeoffPanelInputSchema = z120.object({
-  proposal: z120.string().min(1).max(MAX_PROPOSAL_LENGTH).describe('The proposal under tradeoff review (e.g. "Should aegis-boot adopt cargo-nextest?")'),
-  axes: z120.array(z120.string().min(1).max(MAX_AXIS_NAME_LENGTH)).min(1).max(MAX_AXES).optional().describe(
+var SupplyChainTradeoffPanelInputSchema = z121.object({
+  proposal: z121.string().min(1).max(MAX_PROPOSAL_LENGTH).describe('The proposal under tradeoff review (e.g. "Should aegis-boot adopt cargo-nextest?")'),
+  axes: z121.array(z121.string().min(1).max(MAX_AXIS_NAME_LENGTH)).min(1).max(MAX_AXES).optional().describe(
     `Tradeoff axes to evaluate. Default: ${DEFAULT_AXES.join(", ")}. Custom axes accepted; max ${String(MAX_AXES)}.`
   ),
-  context: z120.string().max(MAX_CONTEXT_LENGTH).optional().describe(
+  context: z121.string().max(MAX_CONTEXT_LENGTH).optional().describe(
     "Optional context: relevant repo state, dependency tree, vendor publishing patterns, etc."
   ),
-  quickMode: z120.boolean().optional().default(false).describe("Use 3 voters (architect, security, scope_steward) instead of 7"),
-  simulate: z120.boolean().optional().default(false).describe("Use simulated voters (testing only)"),
+  quickMode: z121.boolean().optional().default(false).describe("Use 3 voters (architect, security, scope_steward) instead of 7"),
+  simulate: z121.boolean().optional().default(false).describe("Use simulated voters (testing only)"),
   // #6123: same field as consensus_vote — the panel judges the caller's project.
   project: VoterProjectInputSchema,
   /**
@@ -53104,7 +53110,7 @@ var SupplyChainTradeoffPanelInputSchema = z120.object({
    * immediately and runs the panel in the background; poll
    * `get_job_result({ jobId })` for the result.
    */
-  dispatch: z120.enum(["sync", "async"]).default("sync").describe(
+  dispatch: z121.enum(["sync", "async"]).default("sync").describe(
     "Dispatch mode (#3731). 'sync' (default): run inline. 'async': return a jobId immediately + run the panel in background (poll get_job_result)."
   )
 });
@@ -53586,40 +53592,40 @@ var RiskLevel = /* @__PURE__ */ ((RiskLevel2) => {
 })(RiskLevel || {});
 
 // src/mcp/safety/stpa-schemas.ts
-import { z as z121 } from "zod";
-var HazardCategorySchema = z121.enum(HazardCategory);
-var HazardSeveritySchema = z121.enum(HazardSeverity);
-var ConstraintPrioritySchema = z121.enum(ConstraintPriority);
-var RiskLevelSchema = z121.enum(RiskLevel);
-var TriggerPatternSchema = z121.object({
-  parameter: z121.string().min(1),
-  matchType: z121.enum(["contains", "regex", "equals", "startsWith", "endsWith"]),
-  pattern: z121.string(),
-  reason: z121.string()
-});
-var HazardSchema = z121.object({
-  id: z121.string().min(1),
-  description: z121.string(),
+import { z as z122 } from "zod";
+var HazardCategorySchema = z122.enum(HazardCategory);
+var HazardSeveritySchema = z122.enum(HazardSeverity);
+var ConstraintPrioritySchema = z122.enum(ConstraintPriority);
+var RiskLevelSchema = z122.enum(RiskLevel);
+var TriggerPatternSchema = z122.object({
+  parameter: z122.string().min(1),
+  matchType: z122.enum(["contains", "regex", "equals", "startsWith", "endsWith"]),
+  pattern: z122.string(),
+  reason: z122.string()
+});
+var HazardSchema = z122.object({
+  id: z122.string().min(1),
+  description: z122.string(),
   category: HazardCategorySchema,
   severity: HazardSeveritySchema,
-  likelihood: z121.enum(["almost_certain", "likely", "possible", "unlikely", "rare"]),
-  triggerConditions: z121.array(z121.string()),
-  consequences: z121.array(z121.string())
-});
-var UnsafeControlActionSchema = z121.object({
-  id: z121.string().min(1),
-  toolName: z121.string().min(1),
-  type: z121.enum(["not_provided", "provided_causes_hazard", "wrong_timing", "wrong_duration"]),
-  description: z121.string(),
-  unsafeContext: z121.string(),
-  relatedHazards: z121.array(z121.string()),
-  triggerPatterns: z121.array(TriggerPatternSchema).optional()
-});
-var SafetyConstraintSchema = z121.object({
-  id: z121.string().min(1),
-  description: z121.string(),
-  mitigates: z121.array(z121.string()),
-  enforcement: z121.enum([
+  likelihood: z122.enum(["almost_certain", "likely", "possible", "unlikely", "rare"]),
+  triggerConditions: z122.array(z122.string()),
+  consequences: z122.array(z122.string())
+});
+var UnsafeControlActionSchema = z122.object({
+  id: z122.string().min(1),
+  toolName: z122.string().min(1),
+  type: z122.enum(["not_provided", "provided_causes_hazard", "wrong_timing", "wrong_duration"]),
+  description: z122.string(),
+  unsafeContext: z122.string(),
+  relatedHazards: z122.array(z122.string()),
+  triggerPatterns: z122.array(TriggerPatternSchema).optional()
+});
+var SafetyConstraintSchema = z122.object({
+  id: z122.string().min(1),
+  description: z122.string(),
+  mitigates: z122.array(z122.string()),
+  enforcement: z122.enum([
     "prevent",
     "require_confirmation",
     "alert",
@@ -53627,52 +53633,52 @@ var SafetyConstraintSchema = z121.object({
     "rate_limit",
     "require_privilege"
   ]),
-  validationFunction: z121.string().optional(),
+  validationFunction: z122.string().optional(),
   priority: ConstraintPrioritySchema
 });
-var PropertySchemaSchema = z121.object({
-  type: z121.string(),
-  description: z121.string().optional(),
-  enum: z121.array(z121.unknown()).optional(),
-  pattern: z121.string().optional(),
-  minimum: z121.number().optional(),
-  maximum: z121.number().optional()
-});
-var ToolInputSchemaSchema = z121.object({
-  type: z121.string(),
-  properties: z121.record(z121.string(), PropertySchemaSchema).optional(),
-  required: z121.array(z121.string()).optional(),
-  additionalProperties: z121.boolean().optional()
-});
-var ToolDefinitionSchema = z121.object({
-  name: z121.string().min(1),
-  description: z121.string(),
+var PropertySchemaSchema = z122.object({
+  type: z122.string(),
+  description: z122.string().optional(),
+  enum: z122.array(z122.unknown()).optional(),
+  pattern: z122.string().optional(),
+  minimum: z122.number().optional(),
+  maximum: z122.number().optional()
+});
+var ToolInputSchemaSchema = z122.object({
+  type: z122.string(),
+  properties: z122.record(z122.string(), PropertySchemaSchema).optional(),
+  required: z122.array(z122.string()).optional(),
+  additionalProperties: z122.boolean().optional()
+});
+var ToolDefinitionSchema = z122.object({
+  name: z122.string().min(1),
+  description: z122.string(),
   inputSchema: ToolInputSchemaSchema
 });
-var AnalysisConfigurationSchema = z121.object({
-  includeLowSeverity: z121.boolean().default(true),
-  generateAllConstraints: z121.boolean().default(true),
-  checkInteractions: z121.boolean().default(true),
-  maxHazardsPerTool: z121.number().int().min(1).max(100).default(50),
-  categories: z121.array(HazardCategorySchema).default([])
+var AnalysisConfigurationSchema = z122.object({
+  includeLowSeverity: z122.boolean().default(true),
+  generateAllConstraints: z122.boolean().default(true),
+  checkInteractions: z122.boolean().default(true),
+  maxHazardsPerTool: z122.number().int().min(1).max(100).default(50),
+  categories: z122.array(HazardCategorySchema).default([])
 });
-var ConstraintViolationSchema = z121.object({
-  constraintId: z121.string().min(1),
-  constraintDescription: z121.string(),
+var ConstraintViolationSchema = z122.object({
+  constraintId: z122.string().min(1),
+  constraintDescription: z122.string(),
   severity: HazardSeveritySchema,
-  details: z121.string(),
-  remediation: z121.string()
-});
-var ValidationWarningSchema = z121.object({
-  code: z121.string().min(1),
-  message: z121.string(),
-  affected: z121.string()
-});
-var ValidationResultSchema = z121.object({
-  valid: z121.boolean(),
-  toolName: z121.string().min(1),
-  violations: z121.array(ConstraintViolationSchema),
-  passed: z121.array(z121.string()),
+  details: z122.string(),
+  remediation: z122.string()
+});
+var ValidationWarningSchema = z122.object({
+  code: z122.string().min(1),
+  message: z122.string(),
+  affected: z122.string()
+});
+var ValidationResultSchema = z122.object({
+  valid: z122.boolean(),
+  toolName: z122.string().min(1),
+  violations: z122.array(ConstraintViolationSchema),
+  passed: z122.array(z122.string()),
   // Optional rather than required, deliberately. `ValidationResult` declares
   // both fields required because every result this package produces has them;
   // the schema is the lenient inbound edge for a result that arrived from
@@ -53683,10 +53689,10 @@ var ValidationResultSchema = z121.object({
   // "nothing was evaluated". The strict/lenient split is safe because nothing
   // bridges the two with `z.infer`: a parsed result will not typecheck as a
   // `ValidationResult` without handling the absent fields.
-  evaluated: z121.array(z121.string()).optional(),
-  notApplicable: z121.array(z121.string()).optional(),
-  warnings: z121.array(ValidationWarningSchema),
-  validatedAt: z121.date()
+  evaluated: z122.array(z122.string()).optional(),
+  notApplicable: z122.array(z122.string()).optional(),
+  warnings: z122.array(ValidationWarningSchema),
+  validatedAt: z122.date()
 });
 
 // src/mcp/safety/stpa-types.ts
@@ -54771,9 +54777,9 @@ var GeminiResponseParser = class {
 };
 
 // src/cli-adapters/router-types.ts
-import { z as z122 } from "zod";
-var RouterConfigSchema = z122.object({
-  preferCostEfficient: z122.boolean().default(false),
+import { z as z123 } from "zod";
+var RouterConfigSchema = z123.object({
+  preferCostEfficient: z123.boolean().default(false),
   /**
    * @deprecated Declared but NEVER ENFORCED — nothing on the routing path
    * compares anything to it, and `composite-router.ts` measures
@@ -54782,51 +54788,51 @@ var RouterConfigSchema = z122.object({
    * because of this. Scheduled for removal in the next major (#5963); the
    * default is 50 here and in every other declaration since #5918.
    */
-  maxDecisionTimeMs: z122.number().min(1).max(1e3).default(50)
+  maxDecisionTimeMs: z123.number().min(1).max(1e3).default(50)
 });
 
 // src/cli-adapters/agreement-cascade-types.ts
-import { z as z123 } from "zod";
-var AgreementCascadeConfigSchema = z123.object({
-  agreementThreshold: z123.number().min(0.5).max(1).default(0.7),
-  maxStages: z123.number().int().min(1).max(5).default(3),
-  modelTimeoutMs: z123.number().int().min(1e3).max(3e5).default(6e4)
+import { z as z124 } from "zod";
+var AgreementCascadeConfigSchema = z124.object({
+  agreementThreshold: z124.number().min(0.5).max(1).default(0.7),
+  maxStages: z124.number().int().min(1).max(5).default(3),
+  modelTimeoutMs: z124.number().int().min(1e3).max(3e5).default(6e4)
 });
 
 // src/cli-adapters/agreement-cascade-router.ts
 var logger50 = createLogger({ component: "agreement-cascade-router" });
 
 // src/cli-adapters/task-classifier.ts
-import { z as z124 } from "zod";
-var ClassificationPatternsSchema = z124.object({
-  code: z124.array(z124.string()).readonly(),
-  research: z124.array(z124.string()).readonly(),
-  documentation: z124.array(z124.string()).readonly(),
-  analysis: z124.array(z124.string()).readonly()
+import { z as z125 } from "zod";
+var ClassificationPatternsSchema = z125.object({
+  code: z125.array(z125.string()).readonly(),
+  research: z125.array(z125.string()).readonly(),
+  documentation: z125.array(z125.string()).readonly(),
+  analysis: z125.array(z125.string()).readonly()
 });
 
 // src/cli-adapters/response-cache-types.ts
-import { z as z125 } from "zod";
-var ResponseCacheConfigSchema = z125.object({
-  defaultTTL: z125.number().min(1e3).max(36e5).default(3e5),
+import { z as z126 } from "zod";
+var ResponseCacheConfigSchema = z126.object({
+  defaultTTL: z126.number().min(1e3).max(36e5).default(3e5),
   // 5 minutes
-  maxEntries: z125.number().min(10).max(1e5).default(1e3),
-  maxMemoryMB: z125.number().min(1).max(1e3).default(50),
-  cleanupInterval: z125.number().min(1e3).max(6e5).default(6e4),
+  maxEntries: z126.number().min(10).max(1e5).default(1e3),
+  maxMemoryMB: z126.number().min(1).max(1e3).default(50),
+  cleanupInterval: z126.number().min(1e3).max(6e5).default(6e4),
   // 1 minute
-  enableLogging: z125.boolean().default(false)
+  enableLogging: z126.boolean().default(false)
 });
 
 // src/cli-adapters/response-cache-utils.ts
 var logger51 = createLogger({ component: "ResponseCacheUtils" });
 
 // src/cli-adapters/unified-routing-types.ts
-import { z as z126 } from "zod";
-var UnifiedRoutingDecisionSchema = z126.object({
-  selectedCli: z126.string(),
-  confidence: z126.number().min(0).max(1),
-  reason: z126.string(),
-  strategy: z126.enum([
+import { z as z127 } from "zod";
+var UnifiedRoutingDecisionSchema = z127.object({
+  selectedCli: z127.string(),
+  confidence: z127.number().min(0).max(1),
+  reason: z127.string(),
+  strategy: z127.enum([
     "composite",
     "quality",
     "budget",
@@ -54838,60 +54844,60 @@ var UnifiedRoutingDecisionSchema = z126.object({
     "linucb",
     "direct"
   ]),
-  decisionTimeMs: z126.number().nonnegative(),
-  alternatives: z126.array(z126.string()).readonly(),
-  stagesExecuted: z126.array(z126.string()).readonly(),
-  withinBudget: z126.boolean().optional(),
-  estimatedComplexity: z126.enum(["simple", "moderate", "complex", "expert"]).optional(),
-  estimatedTokens: z126.number().int().positive().optional(),
-  topsisScore: z126.number().optional(),
-  ucbScore: z126.number().optional(),
-  resolvedAtStage: z126.number().int().nonnegative().optional(),
-  consensusReached: z126.boolean().optional(),
-  agreementScore: z126.number().min(0).max(1).optional(),
-  metadata: z126.record(z126.string(), z126.unknown()).optional()
+  decisionTimeMs: z127.number().nonnegative(),
+  alternatives: z127.array(z127.string()).readonly(),
+  stagesExecuted: z127.array(z127.string()).readonly(),
+  withinBudget: z127.boolean().optional(),
+  estimatedComplexity: z127.enum(["simple", "moderate", "complex", "expert"]).optional(),
+  estimatedTokens: z127.number().int().positive().optional(),
+  topsisScore: z127.number().optional(),
+  ucbScore: z127.number().optional(),
+  resolvedAtStage: z127.number().int().nonnegative().optional(),
+  consensusReached: z127.boolean().optional(),
+  agreementScore: z127.number().min(0).max(1).optional(),
+  metadata: z127.record(z127.string(), z127.unknown()).optional()
 });
 
 // src/learning/outcome-feedback-types.ts
-import { z as z127 } from "zod";
-var QualitySignalsSchema = z127.object({
-  testsPass: z127.boolean().optional(),
-  lintErrors: z127.number().int().min(0).optional(),
-  userApproved: z127.boolean().optional(),
-  retryCount: z127.number().int().min(0).default(0),
-  completionRatio: z127.number().min(0).max(1).default(1),
-  validStructure: z127.boolean().optional(),
-  coherenceScore: z127.number().min(0).max(1).optional()
-});
-var RoutingDecisionSchema = z127.object({
-  id: z127.uuid(),
-  timestamp: z127.iso.datetime(),
-  query: z127.string(),
-  routerType: z127.enum(["linucb", "preference", "quality", "cascade", "topsis"]),
+import { z as z128 } from "zod";
+var QualitySignalsSchema = z128.object({
+  testsPass: z128.boolean().optional(),
+  lintErrors: z128.number().int().min(0).optional(),
+  userApproved: z128.boolean().optional(),
+  retryCount: z128.number().int().min(0).default(0),
+  completionRatio: z128.number().min(0).max(1).default(1),
+  validStructure: z128.boolean().optional(),
+  coherenceScore: z128.number().min(0).max(1).optional()
+});
+var RoutingDecisionSchema = z128.object({
+  id: z128.uuid(),
+  timestamp: z128.iso.datetime(),
+  query: z128.string(),
+  routerType: z128.enum(["linucb", "preference", "quality", "cascade", "topsis"]),
   // Optional so a row persisted before #5812 still parses. Absence is read as
   // unmeasured by `isRouterTypeMeasured`, never as measured.
-  routerTypeMeasured: z127.boolean().optional(),
-  selectedModel: z127.string(),
-  selectedTier: z127.enum(["strong", "weak"]).optional(),
-  armIndex: z127.number().int().min(0).optional(),
-  banditContext: z127.record(z127.string(), z127.unknown()).optional(),
-  queryFeatures: z127.record(z127.string(), z127.unknown()).optional(),
-  ucbScore: z127.number().optional(),
-  confidence: z127.number().min(0).max(1).optional(),
-  traceId: z127.string(),
-  domain: z127.string().optional()
-});
-var TaskOutcomeSchema = z127.object({
-  routingDecisionId: z127.uuid(),
-  timestamp: z127.iso.datetime(),
-  outcomeClass: z127.enum(["success", "partial", "failure", "timeout", "error"]),
-  success: z127.boolean(),
-  qualityScore: z127.number().min(0).max(1),
-  durationMs: z127.number().min(0),
-  tokenUsage: z127.number().int().min(0),
-  errorMessage: z127.string().optional(),
+  routerTypeMeasured: z128.boolean().optional(),
+  selectedModel: z128.string(),
+  selectedTier: z128.enum(["strong", "weak"]).optional(),
+  armIndex: z128.number().int().min(0).optional(),
+  banditContext: z128.record(z128.string(), z128.unknown()).optional(),
+  queryFeatures: z128.record(z128.string(), z128.unknown()).optional(),
+  ucbScore: z128.number().optional(),
+  confidence: z128.number().min(0).max(1).optional(),
+  traceId: z128.string(),
+  domain: z128.string().optional()
+});
+var TaskOutcomeSchema = z128.object({
+  routingDecisionId: z128.uuid(),
+  timestamp: z128.iso.datetime(),
+  outcomeClass: z128.enum(["success", "partial", "failure", "timeout", "error"]),
+  success: z128.boolean(),
+  qualityScore: z128.number().min(0).max(1),
+  durationMs: z128.number().min(0),
+  tokenUsage: z128.number().int().min(0),
+  errorMessage: z128.string().optional(),
   qualitySignals: QualitySignalsSchema,
-  traceId: z127.string()
+  traceId: z128.string()
 });
 var DEFAULT_FEEDBACK_COLLECTOR_CONFIG = {
   maxPendingDecisions: 1e3,
@@ -54906,17 +54912,17 @@ var DEFAULT_FEEDBACK_COLLECTOR_CONFIG = {
   targetTokenUsage: 2e3,
   maxHistorySize: 1e4
 };
-var FeedbackCollectorConfigSchema = z127.object({
-  maxPendingDecisions: z127.number().int().positive().default(1e3),
-  pendingTimeoutMs: z127.number().positive().default(3e5),
-  enableAutoReward: z127.boolean().default(true),
-  qualityWeight: z127.number().min(0).max(1).default(0.5),
-  speedWeight: z127.number().min(0).max(1).default(0.2),
-  efficiencyWeight: z127.number().min(0).max(1).default(0.2),
-  retryPenalty: z127.number().min(0).max(1).default(0.1),
-  targetDurationMs: z127.number().positive().default(5e3),
-  targetTokenUsage: z127.number().positive().default(2e3),
-  maxHistorySize: z127.number().int().positive().default(1e4)
+var FeedbackCollectorConfigSchema = z128.object({
+  maxPendingDecisions: z128.number().int().positive().default(1e3),
+  pendingTimeoutMs: z128.number().positive().default(3e5),
+  enableAutoReward: z128.boolean().default(true),
+  qualityWeight: z128.number().min(0).max(1).default(0.5),
+  speedWeight: z128.number().min(0).max(1).default(0.2),
+  efficiencyWeight: z128.number().min(0).max(1).default(0.2),
+  retryPenalty: z128.number().min(0).max(1).default(0.1),
+  targetDurationMs: z128.number().positive().default(5e3),
+  targetTokenUsage: z128.number().positive().default(2e3),
+  maxHistorySize: z128.number().int().positive().default(1e4)
 });
 
 // src/learning/outcome-feedback-helpers.ts
@@ -57036,4 +57042,4 @@ export {
   startPipelineEventBridge,
   shutdownPipelineEventBridge
 };
-//# sourceMappingURL=chunk-CXI5IKJY.js.map
+//# sourceMappingURL=chunk-6EZJZCME.js.map