nexus-agents 8.8.0 → 8.8.2

package/dist/{chunk-7BYI5CBK.js → chunk-CQCVEC7P.js}

@@ -1,6 +1,6 @@
 import {
   generateSecurityPlan
-} from "./chunk-BNPXE7BD.js";
+} from "./chunk-7AU5WLAJ.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-DGWT7DXX.js";
@@ -21,10 +21,10 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-HQ6K7OYH.js";
+} from "./chunk-QY3HOLGD.js";
 import {
   executeExpert
-} from "./chunk-66GKBIY2.js";
+} from "./chunk-7J7UYJXC.js";
 import {
   JobStatusSchema,
   VOTER_ROLES,
@@ -36,6 +36,7 @@ import {
   defaultPendingEnvelope,
   defaultReplayEnvelope,
   isAbandonedJob,
+  isMeasuredBuildVersion,
   isRateLimitError,
   listJobs,
   readJobResult,
@@ -47,24 +48,24 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-36AR3GCF.js";
+} from "./chunk-SQCFKQUR.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-BBMGN7FS.js";
+} from "./chunk-ZGHJMFQ6.js";
 import {
   IssueTriage
-} from "./chunk-DZ5V47RU.js";
+} from "./chunk-MXQG3A5W.js";
 import {
   resolveEnvMode,
   sanitizeInput
-} from "./chunk-4AE2QO7Q.js";
+} from "./chunk-N347WXTT.js";
 import {
   withPrerequisite
-} from "./chunk-ZQD67JES.js";
+} from "./chunk-W6SM3MU5.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -89,18 +90,18 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-OPHI2RB6.js";
+} from "./chunk-YQUM3UWK.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
   emitPipelinePolicyEvent
-} from "./chunk-6AGNJBHE.js";
+} from "./chunk-3YKFLM2B.js";
 import {
   EventTopics,
   createEvent,
   getGlobalEventBus,
   getGlobalRegistry
-} from "./chunk-TQT2BIZ7.js";
+} from "./chunk-276GRITW.js";
 import {
   IDENTIFIER_RE,
   LANG_VALUES,
@@ -133,29 +134,32 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-37ONEK7R.js";
+} from "./chunk-EALWAQAQ.js";
 import {
+  REGISTRY_PATH,
+  getProjectRoot,
   loadPapersRegistry,
   loadTechniquesRegistry,
-  resolveInsideRoot
-} from "./chunk-DEXENQXS.js";
+  resolveInsideRoot,
+  resolveRegistryRoot
+} from "./chunk-3CLKYFE3.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-RWZJ2D2N.js";
+} from "./chunk-II5NJRKH.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-CRKF5LUZ.js";
+} from "./chunk-NR62IQDC.js";
 import {
   STOPWORDS,
   truncateWithInfo
 } from "./chunk-6T3EPABN.js";
 import {
   createSessionMemory
-} from "./chunk-F26X4N73.js";
+} from "./chunk-K2PVLCHR.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -173,25 +177,25 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-BIHRU7WA.js";
+} from "./chunk-7QQ5F7T5.js";
 import {
   BaseAdapter,
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-W5VBFX65.js";
+} from "./chunk-FKKVZRSY.js";
 import {
   DEFAULTS
-} from "./chunk-NSHGFRGF.js";
+} from "./chunk-QCSXKQTK.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-GUOMNRXZ.js";
+} from "./chunk-TZWJ7QLW.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-W37HHXDL.js";
+} from "./chunk-WXU4Y5T3.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -297,18 +301,18 @@ import {
   selectStrategyByManifest,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-HEV2C6VS.js";
+} from "./chunk-ERL3XHQO.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
   isPersistenceEnabled
-} from "./chunk-ITCKXMOH.js";
+} from "./chunk-7WJGV5DN.js";
 import {
   findRepoRoot,
   getNexusDataDir,
   nexusDataPath,
   nexusDataPathEnsure
-} from "./chunk-MM223CVS.js";
+} from "./chunk-J7QCZRVK.js";
 
 // src/config/schemas-core.ts
 import { z } from "zod";
@@ -1961,7 +1965,7 @@ var RateLimiter2 = class {
    * Sleeps for the specified duration.
    */
   sleep(ms) {
-    return new Promise((resolve21) => setTimeout(resolve21, ms));
+    return new Promise((resolve20) => setTimeout(resolve20, ms));
   }
   /**
    * Returns the current number of available tokens.
@@ -2221,7 +2225,7 @@ var AbortError = class extends Error {
 function raceAbort(promise, signal) {
   if (signal === void 0) return promise;
   if (signal.aborted) return Promise.reject(new AbortError());
-  return new Promise((resolve21, reject) => {
+  return new Promise((resolve20, reject) => {
     const onAbort = () => {
       reject(new AbortError());
     };
@@ -2229,7 +2233,7 @@ function raceAbort(promise, signal) {
     promise.then(
       (value) => {
         signal.removeEventListener("abort", onAbort);
-        resolve21(value);
+        resolve20(value);
       },
       (error) => {
         signal.removeEventListener("abort", onAbort);
@@ -5189,13 +5193,13 @@ function makeCancelError(taskId) {
 }
 function executeWithTimeout(params) {
   const { task, maxDurationMs, executeTask, transformError, signal } = params;
-  return new Promise((resolve21) => {
+  return new Promise((resolve20) => {
     let settled = false;
     const settle = (result) => {
       if (settled) return;
       settled = true;
       clearTimeout(timeoutId);
-      resolve21(result);
+      resolve20(result);
     };
     const timeoutId = setTimeout(() => {
       settle(
@@ -10698,13 +10702,13 @@ var WaveScheduler = class {
   }
   async withTimeout(promise, timeoutMs, taskId) {
     if (timeoutMs <= 0) return promise;
-    return new Promise((resolve21, reject) => {
+    return new Promise((resolve20, reject) => {
       const timer = setTimeout(() => {
         reject(new Error(`Task ${taskId} timed out after ${String(timeoutMs)}ms`));
       }, timeoutMs);
       promise.then((result) => {
         clearTimeout(timer);
-        resolve21(result);
+        resolve20(result);
       }).catch((error) => {
         clearTimeout(timer);
         reject(error instanceof Error ? error : new Error(String(error)));
@@ -18484,8 +18488,8 @@ var Semaphore = class {
       this.available -= 1;
       return Promise.resolve();
     }
-    return new Promise((resolve21) => {
-      this.waiters.push(resolve21);
+    return new Promise((resolve20) => {
+      this.waiters.push(resolve20);
     });
   }
   release() {
@@ -21909,9 +21913,9 @@ var ExpertPool = class {
     if (this.active < this.capacity) {
       return this.issuePermit();
     }
-    return new Promise((resolve21, reject) => {
+    return new Promise((resolve20, reject) => {
       const timer = setTimeout(() => {
-        const idx = this.queue.findIndex((e) => e.resolve === resolve21);
+        const idx = this.queue.findIndex((e) => e.resolve === resolve20);
         if (idx !== -1) {
           this.queue.splice(idx, 1);
         }
@@ -21921,7 +21925,7 @@ var ExpertPool = class {
           )
         );
       }, this.acquireTimeoutMs);
-      this.queue.push({ resolve: resolve21, reject, timer });
+      this.queue.push({ resolve: resolve20, reject, timer });
     });
   }
   /** Release a permit back to the pool. */
@@ -22505,8 +22509,8 @@ var TaskQueue = class {
     if (this.cancelled) {
       return Promise.reject(new Error("Queue has been cancelled"));
     }
-    return new Promise((resolve21, reject) => {
-      this.queue.push({ task, resolve: resolve21, reject });
+    return new Promise((resolve20, reject) => {
+      this.queue.push({ task, resolve: resolve20, reject });
       this.processNext();
     });
   }
@@ -22782,16 +22786,16 @@ async function executeStepWithTimeout(step, context, stepExecutor, signal) {
   return executeWithTimeout2(step, stepContext, stepExecutor, stepTimeout, startTime);
 }
 function executeWithTimeout2(step, context, executor, timeout, startTime) {
-  return new Promise((resolve21) => {
+  return new Promise((resolve20) => {
     const timeoutId = setTimeout(() => {
-      resolve21(createTimeoutResult(step.id, getTimeProvider().now() - startTime, timeout));
+      resolve20(createTimeoutResult(step.id, getTimeProvider().now() - startTime, timeout));
     }, timeout);
     executor(step, context).then((result) => {
       clearTimeout(timeoutId);
-      resolve21(result);
+      resolve20(result);
     }).catch((error) => {
       clearTimeout(timeoutId);
-      resolve21(createErrorResult(step.id, getTimeProvider().now() - startTime, error));
+      resolve20(createErrorResult(step.id, getTimeProvider().now() - startTime, error));
     });
   });
 }
@@ -29055,8 +29059,8 @@ function formatValidationErrors(validation) {
 import { randomUUID as randomUUID8 } from "node:crypto";
 function resolveExecutionEngineOrError(deps, workflowName) {
   try {
-    const resolve21 = deps.resolveExecutionEngine ?? (() => deps.workflowEngine);
-    return { ok: true, value: resolve21() };
+    const resolve20 = deps.resolveExecutionEngine ?? (() => deps.workflowEngine);
+    return { ok: true, value: resolve20() };
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     deps.logger?.error(
@@ -29697,7 +29701,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-A4BZMTWM.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-MYKBBDAN.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -30194,13 +30198,13 @@ function dedupe(ids) {
   return [...new Set(ids)];
 }
 async function withTimeout3(promise, ms) {
-  return new Promise((resolve21, reject) => {
+  return new Promise((resolve20, reject) => {
     const timer = setTimeout(() => {
       reject(new Error(`Node timed out after ${String(ms)}ms`));
     }, ms);
     promise.then((result) => {
       clearTimeout(timer);
-      resolve21(result);
+      resolve20(result);
     }).catch((error) => {
       clearTimeout(timer);
       reject(error instanceof Error ? error : new Error(String(error)));
@@ -32654,11 +32658,11 @@ function createMockOrchestrator() {
 async function raceAgainstDeadline(promise, deadlineMs, onTimeout) {
   const startedAt = Date.now();
   let timer;
-  const timeoutP = new Promise((resolve21, reject) => {
+  const timeoutP = new Promise((resolve20, reject) => {
     timer = setTimeout(
       () => {
         try {
-          resolve21(onTimeout(Date.now() - startedAt));
+          resolve20(onTimeout(Date.now() - startedAt));
         } catch (err2) {
           reject(err2 instanceof Error ? err2 : new Error(String(err2)));
         }
@@ -33861,11 +33865,11 @@ function createWorkerTask(entry, taskIndex, waveNumber, opts) {
     const staggerSlot = taskIndex % opts.maxConcurrency;
     const staggerMs = staggerSlot * opts.staggerDelayMs;
     if (staggerMs > 0) {
-      await new Promise((resolve21) => setTimeout(resolve21, staggerMs));
+      await new Promise((resolve20) => setTimeout(resolve20, staggerMs));
     }
     const spacingDelay = opts.failureTracker.getSpacingDelay(entry.role);
     if (spacingDelay > 0) {
-      await new Promise((resolve21) => setTimeout(resolve21, spacingDelay));
+      await new Promise((resolve20) => setTimeout(resolve20, spacingDelay));
     }
     const timeoutMs = opts.options.workerTimeoutMs ?? getExpertTaskTimeout(entry.subTask);
     const result = await executeSafe({
@@ -33917,7 +33921,7 @@ async function maybeDelayForRateLimit(results, waveIdx, totalWaves) {
   );
   if (hasRateLimit) {
     logger27.warn("Rate-limit detected \u2014 delaying next wave", { delayMs: RATE_LIMIT_WAVE_DELAY_MS });
-    await new Promise((resolve21) => setTimeout(resolve21, RATE_LIMIT_WAVE_DELAY_MS));
+    await new Promise((resolve20) => setTimeout(resolve20, RATE_LIMIT_WAVE_DELAY_MS));
   }
 }
 function emitWaveStarted(ctx, workerCount, roles) {
@@ -34015,7 +34019,7 @@ async function maybeRetryAfterTriage(opts) {
   }
   const useAltCli = triage.action === "retry_different_cli" && altExecuteWorker !== void 0;
   if (triage.action === "retry_different_cli") {
-    await new Promise((resolve21) => setTimeout(resolve21, RATE_LIMIT_SPACING_MS));
+    await new Promise((resolve20) => setTimeout(resolve20, RATE_LIMIT_SPACING_MS));
   }
   const retryTimeout = triage.action === "extend_timeout" ? Math.min(timeoutMs * TIMEOUT_EXTENSION_FACTOR, MAX_WORKER_TIMEOUT_MS) : timeoutMs;
   const retryExecutor = useAltCli ? altExecuteWorker : executeWorker;
@@ -39879,23 +39883,28 @@ function registerExecuteExpertTool(server, deps) {
 
 // src/mcp/tools/research-query.ts
 import { z as z70 } from "zod";
+import { join as join7 } from "node:path";
 
 // src/research/negative-results.ts
 import { readFileSync as readFileSync6 } from "node:fs";
-import { resolve as resolve7 } from "node:path";
+import { join as join6 } from "node:path";
 import yaml3 from "yaml";
 var logger34 = createLogger({ component: "negative-results" });
-var REGISTRY_PATH = resolve7("docs/research/registry/negative-results.yaml");
+var NEGATIVE_RESULTS_FILE = "negative-results.yaml";
+function negativeResultsPath() {
+  return join6(resolveRegistryRoot(), REGISTRY_PATH, NEGATIVE_RESULTS_FILE);
+}
 var cachedResults;
 function loadNegativeResults() {
   if (cachedResults !== void 0) return cachedResults;
+  const registryPath = negativeResultsPath();
   try {
-    const content = readFileSync6(REGISTRY_PATH, "utf-8");
+    const content = readFileSync6(registryPath, "utf-8");
     cachedResults = yaml3.parse(content);
     return cachedResults;
   } catch (error) {
     logger34.debug("Could not load negative-results registry", {
-      path: REGISTRY_PATH,
+      path: registryPath,
       error: getErrorMessage(error)
     });
     return { negative_results: {} };
@@ -39972,7 +39981,7 @@ async function handleOverlap(input) {
   };
 }
 function handleStats() {
-  const registryPath = `${process.cwd()}/docs/research/registry`;
+  const registryPath = join7(getProjectRoot(), REGISTRY_PATH);
   const result = parseRegistry({ registryPath });
   if (!result.ok) {
     return {
@@ -43173,7 +43182,7 @@ function registerRepoSecurityPlanTool(server, deps) {
 }
 
 // src/mcp/tools/search-codebase-tool.ts
-import { resolve as resolve8, sep as sep3 } from "node:path";
+import { resolve as resolve7, sep as sep3 } from "node:path";
 import { z as z90 } from "zod";
 var SearchCodebaseInputSchema = z90.object({
   query: z90.string().min(1).max(200).describe("Search query (symbol name, keyword, or pattern)"),
@@ -43228,8 +43237,8 @@ async function getIndex(dir, maxDepth) {
   return promise;
 }
 function resolveSearchDir(directory) {
-  const dir = resolve8(directory ?? process.cwd());
-  const cwdRoot = resolve8(".");
+  const dir = resolve7(directory ?? process.cwd());
+  const cwdRoot = resolve7(".");
   if (dir !== cwdRoot && !dir.startsWith(cwdRoot + sep3)) {
     return { error: `Path traversal denied: directory must be within ${cwdRoot}` };
   }
@@ -43327,7 +43336,7 @@ function registerSearchCodebaseTool(server, deps) {
 }
 
 // src/mcp/tools/extract-symbols-tool.ts
-import { extname as extname3, resolve as resolve9, sep as sep4 } from "node:path";
+import { extname as extname3, resolve as resolve8, sep as sep4 } from "node:path";
 import { z as z91 } from "zod";
 
 // src/core/task-analysis/tool-refusal-gap.ts
@@ -43449,8 +43458,8 @@ async function extractSymbolsHandler(args, ctx) {
     });
   }
   const { filePath, mode, maxChars, maxSymbols } = parsed.data;
-  const resolvedPath = resolve9(filePath);
-  const cwdRoot = resolve9(".");
+  const resolvedPath = resolve8(filePath);
+  const cwdRoot = resolve8(".");
   if (resolvedPath !== cwdRoot && !resolvedPath.startsWith(cwdRoot + sep4)) {
     return toolStructuredError({
       errorCategory: "permission",
@@ -43534,7 +43543,7 @@ function registerExtractSymbolsTool(server, deps) {
 
 // src/mcp/tools/search-usages-tool.ts
 import { readFile as readFile3 } from "node:fs/promises";
-import { relative, resolve as resolve10, sep as sep5 } from "node:path";
+import { relative, resolve as resolve9, sep as sep5 } from "node:path";
 import { z as z92 } from "zod";
 var DEFAULT_USAGES_LIMIT = 50;
 var MAX_USAGES_LIMIT = 500;
@@ -43554,8 +43563,8 @@ var SearchUsagesInputSchema = z92.object({
   maxDepth: z92.number().int().min(1).max(MAX_USAGES_MAX_DEPTH).optional().describe(`Directory walk depth for dir scope (default ${String(DEFAULT_USAGES_MAX_DEPTH)}).`)
 });
 function resolveWithinCwd(target) {
-  const resolved = resolve10(target);
-  const cwdRoot = resolve10(".");
+  const resolved = resolve9(target);
+  const cwdRoot = resolve9(".");
   if (resolved !== cwdRoot && !resolved.startsWith(cwdRoot + sep5)) {
     return { error: `Path traversal denied: scope must be within ${cwdRoot}` };
   }
@@ -43565,7 +43574,7 @@ async function resolveFileScope(input) {
   if (input.path !== void 0) {
     const guard2 = resolveWithinCwd(input.path);
     if ("error" in guard2) return guard2;
-    return { files: [guard2.resolved], root: resolve10(".") };
+    return { files: [guard2.resolved], root: resolve9(".") };
   }
   const guard = resolveWithinCwd(input.dir ?? process.cwd());
   if ("error" in guard) return guard;
@@ -43661,7 +43670,7 @@ function registerSearchUsagesTool(server, deps) {
 
 // src/mcp/tools/query-trace-tool.ts
 import { readFile as readFile4, stat as stat3 } from "node:fs/promises";
-import { join as join6, resolve as resolve11, sep as sep6 } from "node:path";
+import { join as join8, resolve as resolve10, sep as sep6 } from "node:path";
 import { z as z93 } from "zod";
 var QueryTraceInputSchema = z93.object({
   runId: z93.string().min(1).max(128).regex(/^[a-zA-Z0-9_-]+$/, "runId must be alphanumeric, hyphens, or underscores").describe("Run ID to query traces for"),
@@ -43709,9 +43718,9 @@ var EMPTY_RESPONSE = {
 };
 async function queryTraceFromDisk(input, runsDir) {
   const dir = runsDir ?? getDefaultRunsDir();
-  const tracePath = join6(dir, input.runId, "trace.jsonl");
-  const resolvedDir = resolve11(dir);
-  const resolvedTrace = resolve11(tracePath);
+  const tracePath = join8(dir, input.runId, "trace.jsonl");
+  const resolvedDir = resolve10(dir);
+  const resolvedTrace = resolve10(tracePath);
   if (!resolvedTrace.startsWith(resolvedDir + sep6) && resolvedTrace !== resolvedDir) {
     return { runId: input.runId, ...EMPTY_RESPONSE };
   }
@@ -43873,15 +43882,16 @@ function readJobResultFromTaskState(jobId, customDir) {
 function isTaskStateJobSource() {
   return process.env["NEXUS_JOB_RESULT_SOURCE"]?.toLowerCase() === "task_state";
 }
-function resolveJobResult(jobId, customDir) {
+function resolveJobResultWithSource(jobId, customDir) {
   if (isTaskStateJobSource()) {
     const fromState = readJobResultFromTaskState(jobId, customDir);
     if (fromState !== null) {
       logger35.debug("Resolved job result from task-state", { jobId, status: fromState.status });
-      return fromState;
+      return { record: fromState, source: "task_state" };
     }
   }
-  return readJobResult(jobId);
+  const fromSidecar = readJobResult(jobId);
+  return fromSidecar === null ? null : { record: fromSidecar, source: "sidecar" };
 }
 function listJobsFromTaskState(customDir) {
   const summaries = [];
@@ -43914,8 +43924,8 @@ function getJobResultHandler(args) {
       })
     );
   }
-  const record = resolveJobResult(parsed.data.jobId);
-  if (record === null) {
+  const resolved = resolveJobResultWithSource(parsed.data.jobId);
+  if (resolved === null) {
     const response2 = {
       jobId: parsed.data.jobId,
       found: false,
@@ -43923,11 +43933,14 @@ function getJobResultHandler(args) {
     };
     return Promise.resolve(toolSuccess(JSON.stringify(response2, null, 2)));
   }
+  const { record, source } = resolved;
   const abandoned = isAbandonedJob(record, getTimeProvider().now());
   const response = {
     jobId: parsed.data.jobId,
     found: true,
     record,
+    producerVersionMeasured: isMeasuredBuildVersion(record.producerVersion),
+    producerVersionSource: source,
     ...abandoned ? {
       abandoned: true,
       errorMessage: "This job has been `pending` longer than the maximum a job body can run, so the process that owned it is gone. Nothing will settle it \u2014 dispatch again."
@@ -43940,7 +43953,7 @@ function registerGetJobResultTool(server, deps) {
   const toolSchema = {
     jobId: z94.string().min(1).max(128).describe('Job ID returned by orchestrate({ mode: "async" })')
   };
-  const description = 'Read the result of an async-mode tool invocation by jobId. Returns the structured record (status, result | error, timestamps). Poll until status !== "pending". Stage-1 of epic #2631 \u2014 Stage 2 will fold this into query_task_state once StructuredTaskState gains the result field.';
+  const description = `Read the result of an async-mode tool invocation by jobId. Returns the structured record (status, result | error, timestamps, producerVersion) plus producerVersionMeasured \u2014 false when the producer was a dev build or the record predates the field, so its version must not be compared to this server's _meta build stamp \u2014 and producerVersionSource (sidecar | task_state; a task_state record never carries a version). Poll until status !== "pending". Stage-1 of epic #2631 \u2014 Stage 2 will fold this into query_task_state once StructuredTaskState gains the result field.`;
   const secureHandler = createSecureHandler(getJobResultHandler, {
     toolName: "get_job_result",
     rateLimiter: deps.rateLimiter,
@@ -44588,27 +44601,27 @@ var FileAuditStorage = class _FileAuditStorage {
     const data = this.writeBuffer.join("");
     this.writeBuffer = [];
     const stream = this.writeStream;
-    return new Promise((resolve21, reject) => {
+    return new Promise((resolve20, reject) => {
       stream.write(data, (err2) => {
         if (err2 !== void 0 && err2 !== null) {
           reject(new AuditError("Failed to flush audit log", { cause: err2 }));
         } else {
-          resolve21();
+          resolve20();
         }
       });
     });
   }
   async close() {
     await this.flush();
-    return new Promise((resolve21) => {
+    return new Promise((resolve20) => {
       if (this.writeStream === null) {
-        resolve21();
+        resolve20();
         return;
       }
       this.writeStream.end(() => {
         this.writeStream = null;
         this.logger.info("Audit storage closed");
-        resolve21();
+        resolve20();
       });
     });
   }
@@ -45595,7 +45608,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-IWMHDNUY.js");
+    const { createIssueTriage } = await import("./issue-triage-PIE3YVCV.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -45623,7 +45636,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-IKY5TTAH.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-G3KN7QWL.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -47004,7 +47017,7 @@ function buildScanSummary(total, blocking, osvCount, osv, sarifParseErrors = 0)
 
 // src/security/quality-gate-commands.ts
 import { existsSync as existsSync9, readFileSync as readFileSync8 } from "node:fs";
-import { join as join9 } from "node:path";
+import { join as join11 } from "node:path";
 var LOCKFILES = [
   { file: "pnpm-lock.yaml", manager: "pnpm" },
   { file: "yarn.lock", manager: "yarn" },
@@ -47019,12 +47032,12 @@ var SCRIPT_CANDIDATES = {
 };
 function detectPackageManager(projectDir) {
   for (const { file, manager } of LOCKFILES) {
-    if (existsSync9(join9(projectDir, file))) return manager;
+    if (existsSync9(join11(projectDir, file))) return manager;
   }
   return "npm";
 }
 function readScripts(projectDir) {
-  const manifest = join9(projectDir, "package.json");
+  const manifest = join11(projectDir, "package.json");
   if (!existsSync9(manifest)) return void 0;
   try {
     const parsed = JSON.parse(readFileSync8(manifest, "utf-8"));
@@ -47314,8 +47327,8 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-3GE74TXJ.js");
-    const { getLearningDir } = await import("./learning-persistence-7N5SZHNX.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-CH3CVLIT.js");
+    const { getLearningDir } = await import("./learning-persistence-JK2FELZL.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
     cachedMemory = {
@@ -47376,7 +47389,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-5RYZJE45.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-2IELT5GT.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -47410,7 +47423,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-OQ2UA3DZ.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-YG4T4Q23.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -47428,8 +47441,8 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-3GE74TXJ.js");
-    const { getLearningDir } = await import("./learning-persistence-7N5SZHNX.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-CH3CVLIT.js");
+    const { getLearningDir } = await import("./learning-persistence-JK2FELZL.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
     if (learnings.length === 0) return "";
@@ -47547,7 +47560,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-FJWLHMQL.js");
+        const { executeVoting } = await import("./consensus-vote-L4CN33XE.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -47976,7 +47989,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-X4O3S4SH.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-5NBL637T.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -48047,7 +48060,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-ZSXHLYMU.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-NS47HQEF.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -48262,7 +48275,7 @@ function reviewedDiffWasTruncated(diff) {
 
 // src/audit/pr-review-record-store.ts
 import { appendFileSync as appendFileSync4, existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync9 } from "node:fs";
-import { dirname as dirname3, isAbsolute, join as join10, resolve as resolve14 } from "node:path";
+import { dirname as dirname3, isAbsolute, join as join12, resolve as resolve13 } from "node:path";
 
 // src/audit/pr-review-record.ts
 import * as crypto3 from "node:crypto";
@@ -48437,7 +48450,7 @@ function assertNotSourceCheckoutWrite(filePath) {
   if (!isUnderTestRunner()) return;
   const here = findRepoRoot(process.cwd());
   if (here === null) return;
-  if (resolve14(filePath) !== resolve14(join10(here, PR_REVIEW_RECORDS_REL_PATH))) return;
+  if (resolve13(filePath) !== resolve13(join12(here, PR_REVIEW_RECORDS_REL_PATH))) return;
   throw new Error(
     `Refusing to write ${filePath} from a test run (#4415): this is the source checkout's tracked, hash-chained audit file, and a fabricated record that chains cleanly is indistinguishable from a real verdict. Pass repoPath to a throwaway repo, or set NEXUS_PR_REVIEW_RECORDS_PATH.`
   );
@@ -48445,15 +48458,15 @@ function assertNotSourceCheckoutWrite(filePath) {
 function resolvePrReviewRecordsPath(repoPathOverride) {
   const envPath = process.env[PR_REVIEW_RECORDS_PATH_ENV];
   if (envPath !== void 0 && envPath.trim() !== "") {
-    return isAbsolute(envPath) ? envPath : resolve14(envPath);
+    return isAbsolute(envPath) ? envPath : resolve13(envPath);
   }
   if (repoPathOverride !== void 0 && repoPathOverride.trim() !== "") {
     const overrideRoot = findRepoRoot(repoPathOverride);
-    if (overrideRoot !== null) return join10(overrideRoot, PR_REVIEW_RECORDS_REL_PATH);
+    if (overrideRoot !== null) return join12(overrideRoot, PR_REVIEW_RECORDS_REL_PATH);
   }
   const root = findRepoRoot(process.cwd());
   if (root === null) return void 0;
-  return join10(root, PR_REVIEW_RECORDS_REL_PATH);
+  return join12(root, PR_REVIEW_RECORDS_REL_PATH);
 }
 function readPrReviewRecords(filePath) {
   const records = [];
@@ -50204,9 +50217,9 @@ var RESEARCH_BUDGET_MS = 2e4;
 var RESEARCH_TIMED_OUT = /* @__PURE__ */ Symbol("research-budget-exceeded");
 async function withResearchBudget(p, ms) {
   let timer;
-  const budget = new Promise((resolve21) => {
+  const budget = new Promise((resolve20) => {
     timer = setTimeout(() => {
-      resolve21(RESEARCH_TIMED_OUT);
+      resolve20(RESEARCH_TIMED_OUT);
     }, ms);
   });
   try {
@@ -51218,7 +51231,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-EJ2ZMEQ7.js");
+    const { createScmProvider } = await import("./factory-KVMLFEWJ.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -52133,7 +52146,7 @@ async function probeSource(source, includeModelIds) {
   }
 }
 async function defaultSources(includeOpenRouter) {
-  const { createAllAdapters: createAllAdapters2 } = await import("./factory-VGRG7M62.js");
+  const { createAllAdapters: createAllAdapters2 } = await import("./factory-ROTP63IZ.js");
   const adapters = createAllAdapters2();
   return buildDefaultModelSources(adapters, { includeOpenRouter });
 }
@@ -55146,7 +55159,7 @@ function getPolicy(id) {
 // src/security/sandbox/sandbox-executor.ts
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-import { resolve as resolve20, normalize as normalize2, sep as sep12 } from "node:path";
+import { resolve as resolve19, normalize as normalize2, sep as sep12 } from "node:path";
 var execFileAsync = promisify(execFile);
 var logger53 = createLogger({ component: "sandbox-executor" });
 function parseExecError(error) {
@@ -55226,9 +55239,9 @@ var PolicySandboxExecutor = class {
    */
   validateCwd(cwd, policy) {
     if (cwd === void 0) return null;
-    const normalizedCwd = normalize2(resolve20(cwd));
+    const normalizedCwd = normalize2(resolve19(cwd));
     const isAllowed = policy.pathRules.some((rule) => {
-      const normalizedRule = normalize2(resolve20(rule.path));
+      const normalizedRule = normalize2(resolve19(rule.path));
       const isUnderRule = normalizedCwd === normalizedRule || normalizedCwd.startsWith(normalizedRule + sep12);
       return isUnderRule && rule.access !== "none";
     });
@@ -56204,4 +56217,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-7BYI5CBK.js.map
+//# sourceMappingURL=chunk-CQCVEC7P.js.map