nexus-agents 8.82.2 → 8.84.0

package/dist/{ast-rule-runner-6O4S36DX.js → ast-rule-runner-O2UYBG74.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-TIYLC4CO.js";
-import "./chunk-SV2TOCSR.js";
+} from "./chunk-BTFOWREE.js";
+import "./chunk-IPZC5BXM.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -26,4 +26,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-6O4S36DX.js.map
+//# sourceMappingURL=ast-rule-runner-O2UYBG74.js.map

package/dist/{child-mcp-config-MLVCPG3Y.js → child-mcp-config-W2EPNDEU.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-HERI7LXN.js";
 import {
   createLogger
-} from "./chunk-SV2TOCSR.js";
+} from "./chunk-IPZC5BXM.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -56,4 +56,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-MLVCPG3Y.js.map
+//# sourceMappingURL=child-mcp-config-W2EPNDEU.js.map

package/dist/{chunk-FJRVXEYP.js → chunk-256K77ED.js}

@@ -8,13 +8,13 @@ import {
   loadTechniquesRegistry,
   resolveInsideRoot,
   savePapersRegistry
-} from "./chunk-FBEFRZVN.js";
+} from "./chunk-LWVRXNCL.js";
 import {
   resolveToken
-} from "./chunk-KOH6JEZI.js";
+} from "./chunk-APF7COQN.js";
 import {
   getToolMemory
-} from "./chunk-F2A24T2G.js";
+} from "./chunk-AQVSAPQD.js";
 import {
   capitalizeWords,
   tokenizeFiltered,
@@ -43,7 +43,7 @@ import {
   ok,
   registerPersistentDistillerFactory,
   sigmoidConfidence
-} from "./chunk-SV2TOCSR.js";
+} from "./chunk-IPZC5BXM.js";
 import {
   ensureLearningDir,
   getRulesFile
@@ -4241,4 +4241,4 @@ export {
   DEFAULT_CONTEXT_BUDGET_TOKENS,
   getContextPromptPrefix
 };
-//# sourceMappingURL=chunk-FJRVXEYP.js.map
+//# sourceMappingURL=chunk-256K77ED.js.map

package/dist/chunk-2NDA4DHW.js

@@ -0,0 +1,65 @@
+// src/security/output-sanitizer.ts
+var REDACTED_KEY_PLACEHOLDER = "[REDACTED_KEY]";
+var KEY_PATTERNS = [
+  // Anthropic: sk-ant-api03-... (at least 20 chars after prefix)
+  /sk-ant-[A-Za-z0-9_-]{20,}/g,
+  // OpenAI project: sk-proj-... (at least 20 chars after prefix)
+  /sk-proj-[A-Za-z0-9_-]{20,}/g,
+  // Generic OpenAI: sk-... (at least 20 chars after prefix)
+  /sk-[A-Za-z0-9_-]{20,}/g,
+  // Public keys: pk-...
+  /pk-[A-Za-z0-9_-]{20,}/g,
+  // AWS access key ID
+  /\bAKIA[A-Z0-9]{16}\b/g,
+  // Google AI / Gemini: AIzaSy... (at least 30 chars total)
+  /AIzaSy[A-Za-z0-9_-]{24,}/g,
+  // GitHub PAT: ghp_...
+  /ghp_[A-Za-z0-9]{20,}/g,
+  // GitHub OAuth: gho_...
+  /gho_[A-Za-z0-9]{20,}/g,
+  // GitLab PAT: glpat-...
+  /glpat-[A-Za-z0-9_-]{10,}/g,
+  // npm token: npm_...
+  /npm_[A-Za-z0-9]{20,}/g,
+  // PyPI token: pypi-...
+  /pypi-[A-Za-z0-9_-]{20,}/g
+];
+function sanitizeOutput(text, placeholder = REDACTED_KEY_PLACEHOLDER) {
+  if (text === "") return text;
+  let result = text;
+  for (const pattern of KEY_PATTERNS) {
+    pattern.lastIndex = 0;
+    result = result.replace(pattern, placeholder);
+  }
+  return result;
+}
+function sanitizeErrorDetails(text, apiKey, placeholder = REDACTED_KEY_PLACEHOLDER) {
+  if (text === "") return "";
+  let result = text;
+  if (apiKey !== void 0 && apiKey.trim() !== "") {
+    result = result.replaceAll(apiKey.trim(), placeholder);
+  }
+  result = sanitizeOutput(result, placeholder);
+  result = result.replace(/https?:\/\/[^\s/@]+@[^\s/]+/g, (match) => {
+    return match.replace(/https?:\/\/[^\s/@]+@/, `https://${placeholder}@`);
+  });
+  result = result.replace(/(authorization:\s*bearer\s+)\S+/gi, `$1${placeholder}`);
+  result = result.replace(/(authorization:\s*basic\s+)\S+/gi, `$1${placeholder}`);
+  result = result.replace(/(bearer\s+)[A-Za-z0-9._~+/-]+=*/gi, `$1${placeholder}`);
+  result = result.replace(/(\b(?:password|passwd|secret)\s*[=:]\s*)\S{4,}/gi, `$1${placeholder}`);
+  result = result.replace(
+    /([?&](?:api[_-]?key|token|access[_-]?token|secret|password|prompt|system_prompt|user_prompt)=)[^&\s]+/gi,
+    `$1${placeholder}`
+  );
+  result = result.replace(
+    /"(api[_-]?key|access[_-]?token|token|secret|password|prompt|system_prompt|user_prompt)"\s*:\s*"(?:[^"\\]|\\.)*"/gi,
+    `"$1": "${placeholder}"`
+  );
+  return result;
+}
+
+export {
+  sanitizeOutput,
+  sanitizeErrorDetails
+};
+//# sourceMappingURL=chunk-2NDA4DHW.js.map

package/dist/chunk-2NDA4DHW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/security/output-sanitizer.ts"],"sourcesContent":["/**\n * nexus-agents/security - Output Sanitizer\n *\n * Redacts API keys and tokens from CLI subprocess stdout/stderr\n * before the output is returned, logged, or traced.\n *\n * @module security/output-sanitizer\n * (Source: Issue #1597 — subprocess output scrubbing gap)\n */\n\n/** Placeholder text that replaces redacted keys. */\nexport const REDACTED_KEY_PLACEHOLDER = '[REDACTED_KEY]';\n\n/**\n * Patterns matching known API key formats.\n *\n * Order matters: more-specific prefixes (sk-ant-, sk-proj-) come before\n * the generic sk-* pattern so they match first.\n *\n * Each pattern requires a minimum token length after the prefix to avoid\n * false positives on short strings like \"sk-ab\".\n */\nconst KEY_PATTERNS: readonly RegExp[] = [\n  // Anthropic: sk-ant-api03-... (at least 20 chars after prefix)\n  /sk-ant-[A-Za-z0-9_-]{20,}/g,\n  // OpenAI project: sk-proj-... (at least 20 chars after prefix)\n  /sk-proj-[A-Za-z0-9_-]{20,}/g,\n  // Generic OpenAI: sk-... (at least 20 chars after prefix)\n  /sk-[A-Za-z0-9_-]{20,}/g,\n  // Public keys: pk-...\n  /pk-[A-Za-z0-9_-]{20,}/g,\n  // AWS access key ID\n  /\\bAKIA[A-Z0-9]{16}\\b/g,\n  // Google AI / Gemini: AIzaSy... (at least 30 chars total)\n  /AIzaSy[A-Za-z0-9_-]{24,}/g,\n  // GitHub PAT: ghp_...\n  /ghp_[A-Za-z0-9]{20,}/g,\n  // GitHub OAuth: gho_...\n  /gho_[A-Za-z0-9]{20,}/g,\n  // GitLab PAT: glpat-...\n  /glpat-[A-Za-z0-9_-]{10,}/g,\n  // npm token: npm_...\n  /npm_[A-Za-z0-9]{20,}/g,\n  // PyPI token: pypi-...\n  /pypi-[A-Za-z0-9_-]{20,}/g,\n];\n\n/**\n * Redacts known API key patterns from a string.\n *\n * Designed to be called on subprocess stdout/stderr before the output\n * is returned to callers, written to logs, or included in trace data.\n *\n * @param text - Raw subprocess output\n * @param placeholder - Replacement placeholder (default: [REDACTED_KEY])\n * @returns The same text with API keys replaced by placeholder\n */\nexport function sanitizeOutput(\n  text: string,\n  placeholder: string = REDACTED_KEY_PLACEHOLDER\n): string {\n  if (text === '') return text;\n\n  let result = text;\n  for (const pattern of KEY_PATTERNS) {\n    // Reset lastIndex for global regex reuse\n    pattern.lastIndex = 0;\n    result = result.replace(pattern, placeholder);\n  }\n  return result;\n}\n\n/**\n * Redacts credentials (API keys, authorization headers, Bearer tokens, URL credentials,\n * and sensitive JSON fields) from error messages and response bodies.\n *\n * Designed to be called on upstream API error representations before they are\n * attached to error envelopes, logged, or returned to callers.\n *\n * @param text - Raw error message or serialized error body\n * @param apiKey - Optional configured API key to redact by exact match\n * @returns The sanitized text with credentials redacted\n */\nexport function sanitizeErrorDetails(\n  text: string,\n  apiKey?: string,\n  placeholder: string = REDACTED_KEY_PLACEHOLDER\n): string {\n  if (text === '') return '';\n\n  let result = text;\n  if (apiKey !== undefined && apiKey.trim() !== '') {\n    result = result.replaceAll(apiKey.trim(), placeholder);\n  }\n\n  // Redact known key patterns\n  result = sanitizeOutput(result, placeholder);\n\n  // Redact URL credentials like https://user:pass@host or https://token@host\n  result = result.replace(/https?:\\/\\/[^\\s/@]+@[^\\s/]+/g, (match) => {\n    return match.replace(/https?:\\/\\/[^\\s/@]+@/, `https://${placeholder}@`);\n  });\n\n  // Redact Authorization headers: Bearer and Basic tokens\n  result = result.replace(/(authorization:\\s*bearer\\s+)\\S+/gi, `$1${placeholder}`);\n  result = result.replace(/(authorization:\\s*basic\\s+)\\S+/gi, `$1${placeholder}`);\n  result = result.replace(/(bearer\\s+)[A-Za-z0-9._~+/-]+=*/gi, `$1${placeholder}`);\n\n  // Redact plain text assignments like password=... or secret: ...\n  result = result.replace(/(\\b(?:password|passwd|secret)\\s*[=:]\\s*)\\S{4,}/gi, `$1${placeholder}`);\n\n  // Redact sensitive query parameters in URLs or logs (?api_key=..., &token=..., &prompt=...)\n  result = result.replace(\n    /([?&](?:api[_-]?key|token|access[_-]?token|secret|password|prompt|system_prompt|user_prompt)=)[^&\\s]+/gi,\n    `$1${placeholder}`\n  );\n\n  // Redact sensitive JSON keys: \"api_key\": \"...\", \"token\": \"...\", \"prompt\": \"...\", etc.\n  result = result.replace(\n    /\"(api[_-]?key|access[_-]?token|token|secret|password|prompt|system_prompt|user_prompt)\"\\s*:\\s*\"(?:[^\"\\\\]|\\\\.)*\"/gi,\n    `\"$1\": \"${placeholder}\"`\n  );\n\n  return result;\n}\n"],"mappings":";AAWO,IAAM,2BAA2B;AAWxC,IAAM,eAAkC;AAAA;AAAA,EAEtC;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AACF;AAYO,SAAS,eACd,MACA,cAAsB,0BACd;AACR,MAAI,SAAS,GAAI,QAAO;AAExB,MAAI,SAAS;AACb,aAAW,WAAW,cAAc;AAElC,YAAQ,YAAY;AACpB,aAAS,OAAO,QAAQ,SAAS,WAAW;AAAA,EAC9C;AACA,SAAO;AACT;AAaO,SAAS,qBACd,MACA,QACA,cAAsB,0BACd;AACR,MAAI,SAAS,GAAI,QAAO;AAExB,MAAI,SAAS;AACb,MAAI,WAAW,UAAa,OAAO,KAAK,MAAM,IAAI;AAChD,aAAS,OAAO,WAAW,OAAO,KAAK,GAAG,WAAW;AAAA,EACvD;AAGA,WAAS,eAAe,QAAQ,WAAW;AAG3C,WAAS,OAAO,QAAQ,gCAAgC,CAAC,UAAU;AACjE,WAAO,MAAM,QAAQ,wBAAwB,WAAW,WAAW,GAAG;AAAA,EACxE,CAAC;AAGD,WAAS,OAAO,QAAQ,qCAAqC,KAAK,WAAW,EAAE;AAC/E,WAAS,OAAO,QAAQ,oCAAoC,KAAK,WAAW,EAAE;AAC9E,WAAS,OAAO,QAAQ,qCAAqC,KAAK,WAAW,EAAE;AAG/E,WAAS,OAAO,QAAQ,oDAAoD,KAAK,WAAW,EAAE;AAG9F,WAAS,OAAO;AAAA,IACd;AAAA,IACA,KAAK,WAAW;AAAA,EAClB;AAGA,WAAS,OAAO;AAAA,IACd;AAAA,IACA,UAAU,WAAW;AAAA,EACvB;AAEA,SAAO;AACT;","names":[]}

package/dist/{chunk-53JFWRL4.js → chunk-3NPRFOSH.js}

@@ -1,11 +1,11 @@
 import {
   resolveCliSlot
-} from "./chunk-UMC4ZQD3.js";
+} from "./chunk-NYF2WZAK.js";
 import {
   createLogger,
   getTimeProvider,
   isRateLimitText
-} from "./chunk-SV2TOCSR.js";
+} from "./chunk-IPZC5BXM.js";
 
 // src/pipeline/expert-bridge.ts
 function resolveCliFromModelString(model) {
@@ -21,7 +21,7 @@ async function getMcpConfigPath() {
   if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;
   mcpConfigInitPromise ??= (async () => {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-MLVCPG3Y.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-W2EPNDEU.js");
       const config = await generateMcpConfig();
       cachedMcpConfigPath = config.configPath;
       cachedMcpConfigCleanup = config.cleanup;
@@ -93,8 +93,8 @@ var routerInitPromise = null;
 async function getRouter() {
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-MPBBQ4FK.js");
-    const { createCompositeRouter } = await import("./composite-router-APJYUPW4.js");
+    const { createAllAdapters } = await import("./factory-L2OVYRN4.js");
+    const { createCompositeRouter } = await import("./composite-router-DH2S2IVK.js");
     const adapters = createAllAdapters();
     if (adapters.size === 0) {
       routerInitPromise = null;
@@ -102,7 +102,7 @@ async function getRouter() {
     }
     cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-FXQH22KK.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-2T4GGSUE.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
@@ -216,4 +216,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-53JFWRL4.js.map
+//# sourceMappingURL=chunk-3NPRFOSH.js.map

package/dist/{chunk-IDV4V5UL.js → chunk-3VZCDTK5.js}

@@ -1,6 +1,6 @@
 import {
   generateSecurityPlan
-} from "./chunk-3V2D36A4.js";
+} from "./chunk-YRTHZDTO.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-4GDMHCKX.js";
@@ -21,10 +21,10 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-HXIN7YWW.js";
+} from "./chunk-6YQTQYKD.js";
 import {
   executeExpert
-} from "./chunk-53JFWRL4.js";
+} from "./chunk-3NPRFOSH.js";
 import {
   DEPRECATED_MODE_ALIAS_INPUT,
   JobStatusSchema,
@@ -72,7 +72,7 @@ import {
   updateStage,
   withWarnings,
   writeJobCancelled
-} from "./chunk-OHBE6HR2.js";
+} from "./chunk-JM7Z4XKP.js";
 import {
   allOf,
   anyOf
@@ -80,7 +80,7 @@ import {
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-5EOIYZDU.js";
+} from "./chunk-BZPRF4SJ.js";
 import {
   IssueTriage,
   createAuditTrail,
@@ -89,13 +89,13 @@ import {
   createGraphAuditBridge,
   emitPipelinePolicyEvent,
   readActionRefusal
-} from "./chunk-7F2FCMQ4.js";
+} from "./chunk-H4X7QDTB.js";
 import {
   sanitizeInput
-} from "./chunk-UENTSMG4.js";
+} from "./chunk-U53CKPED.js";
 import {
   withPrerequisite
-} from "./chunk-AOGHVE7R.js";
+} from "./chunk-QOJS3KCM.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -120,14 +120,14 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-RRTISAC5.js";
+} from "./chunk-OY27GVJ4.js";
 import {
   EventTopics,
   UNRESOLVED_MODEL_ID,
   createEvent,
   getGlobalEventBus,
   getGlobalRegistry
-} from "./chunk-AVF7O3PL.js";
+} from "./chunk-YWEZ7W4K.js";
 import {
   IDENTIFIER_RE,
   LANG_VALUES,
@@ -160,7 +160,7 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-FJRVXEYP.js";
+} from "./chunk-256K77ED.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
@@ -168,25 +168,25 @@ import {
   loadTechniquesRegistry,
   resolveInsideRoot,
   resolveRegistryRoot
-} from "./chunk-FBEFRZVN.js";
+} from "./chunk-LWVRXNCL.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-KOH6JEZI.js";
+} from "./chunk-APF7COQN.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
   MemoryType,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-F2A24T2G.js";
+} from "./chunk-AQVSAPQD.js";
 import {
   STOPWORDS,
   truncateWithInfo
 } from "./chunk-7LP6VJRP.js";
 import {
   createSessionMemory
-} from "./chunk-QMPGR6OV.js";
+} from "./chunk-UFO5A53B.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -204,24 +204,27 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-QZDAUREE.js";
+} from "./chunk-UMFQ52XI.js";
 import {
   BaseAdapter,
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-KF45ROST.js";
+} from "./chunk-ALCCX5DS.js";
 import {
   DEFAULTS
-} from "./chunk-GNEEMEFT.js";
+} from "./chunk-PW4DLY5W.js";
 import {
   resolveGatewayEnv
-} from "./chunk-PI4IEWV7.js";
+} from "./chunk-PD2GZQYH.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-UMC4ZQD3.js";
+} from "./chunk-NYF2WZAK.js";
+import {
+  sanitizeErrorDetails
+} from "./chunk-2NDA4DHW.js";
 import {
   DEFAULT_EXECUTION_MODE,
   DEFAULT_TOOL_RATE_LIMITS,
@@ -230,7 +233,7 @@ import {
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-IKE2GXXX.js";
+} from "./chunk-XNX4SH4O.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -343,7 +346,7 @@ import {
   selectStrategyByManifest,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-SV2TOCSR.js";
+} from "./chunk-IPZC5BXM.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
@@ -25604,7 +25607,8 @@ var AuthHandler = class {
 
 // src/mcp/middleware/tool-error-handler.ts
 function toolErrorResponse(prefix, error, logger60) {
-  const message = getErrorMessage(error);
+  const rawMessage = getErrorMessage(error);
+  const message = sanitizeErrorDetails(rawMessage);
   if (logger60 !== void 0) {
     const errorObj = error instanceof Error ? error : new Error(message);
     logger60.error(prefix, errorObj);
@@ -30030,7 +30034,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-3XWQNB5L.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-5NGYA4JC.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -45457,7 +45461,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-2EG4ARA4.js");
+    const { createIssueTriage } = await import("./issue-triage-XG2AISLY.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num2 = issueMatch[2] ?? "";
@@ -45485,7 +45489,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-MTEI4DDI.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-7WAFFJWN.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -45859,7 +45863,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-2OADIAQL.js");
+    const { executeVoting } = await import("./consensus-vote-TV7NW6HD.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -46563,7 +46567,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-FCUX7KDT.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-6PNSAPG4.js");
     const { getLearningDir } = await import("./learning-persistence-7BEPQEGN.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -46625,7 +46629,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-GIBMSJ3G.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-YLQPO5OH.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -46826,7 +46830,7 @@ function createVoteStage({ config, startStage }) {
     const strategy = config.votingStrategy ?? "higher_order";
     await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
     try {
-      const { executeVoting } = await import("./consensus-vote-2OADIAQL.js");
+      const { executeVoting } = await import("./consensus-vote-TV7NW6HD.js");
       const votingResult = await executeVoting(
         {
           proposal: buildVoteProposal(plan, research),
@@ -47585,7 +47589,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-NZDS5BLK.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-NGBJYVS6.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -47603,7 +47607,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-FCUX7KDT.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-6PNSAPG4.js");
     const { getLearningDir } = await import("./learning-persistence-7BEPQEGN.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -48170,7 +48174,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-447FYLA6.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-N7NYBAKW.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -48241,7 +48245,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-VH3TC2PF.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-LLTLKJWF.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -51983,7 +51987,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-ZNMNAIZA.js");
+    const { createScmProvider } = await import("./factory-ZU75VK4Z.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -52963,7 +52967,7 @@ async function probeSource(source, includeModelIds) {
   }
 }
 async function defaultSources(includeOpenRouter) {
-  const { createAllAdapters: createAllAdapters2 } = await import("./factory-MPBBQ4FK.js");
+  const { createAllAdapters: createAllAdapters2 } = await import("./factory-L2OVYRN4.js");
   const adapters = createAllAdapters2();
   return buildDefaultModelSources(adapters, { includeOpenRouter });
 }
@@ -56288,4 +56292,4 @@ export {
   startPipelineEventBridge,
   shutdownPipelineEventBridge
 };
-//# sourceMappingURL=chunk-IDV4V5UL.js.map
+//# sourceMappingURL=chunk-3VZCDTK5.js.map