nexus-agents 8.89.0 → 8.89.2

package/dist/{chunk-VD5K6GS2.js → chunk-EKZ6V7SE.js}

@@ -1,11 +1,11 @@
 import {
   resolveCliSlot
-} from "./chunk-NOJ6LVFH.js";
+} from "./chunk-6FFBX665.js";
 import {
   createLogger,
   getTimeProvider,
   isRateLimitText
-} from "./chunk-4DSPBZY3.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/pipeline/expert-bridge.ts
 function resolveCliFromModelString(model) {
@@ -17,6 +17,7 @@ function routedAttribution(routed, model) {
   const cli = routed.routedCli ?? resolveCliFromModelString(model);
   return {
     ...cli !== void 0 && { cli },
+    ...routed.routedArm !== void 0 && { routedArm: routed.routedArm },
     ...routed.routedCli !== void 0 && { routedBy: "composite-router" },
     ...routed.routedDurationMs !== void 0 && { routedDurationMs: routed.routedDurationMs }
   };
@@ -29,7 +30,7 @@ async function getMcpConfigPath() {
   if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;
   mcpConfigInitPromise ??= (async () => {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-V2KDXRWX.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-7DSYI325.js");
       const config = await generateMcpConfig();
       cachedMcpConfigPath = config.configPath;
       cachedMcpConfigCleanup = config.cleanup;
@@ -106,8 +107,8 @@ var routerInitPromise = null;
 async function getRouter() {
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-2H6BJGI5.js");
-    const { createCompositeRouter } = await import("./composite-router-GY36ICWT.js");
+    const { createAllAdapters } = await import("./factory-RQEHJ4AW.js");
+    const { createCompositeRouter } = await import("./composite-router-QAYCHEFG.js");
     const adapters = createAllAdapters();
     if (adapters.size === 0) {
       routerInitPromise = null;
@@ -115,7 +116,7 @@ async function getRouter() {
     }
     cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-V3JIKQNR.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-MCQG3PQK.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
@@ -139,6 +140,7 @@ function checkCircuitHealth() {
 function attributionOf(source) {
   return {
     ...source.cli !== void 0 && { cli: source.cli },
+    ...source.routedArm !== void 0 && { routedArm: source.routedArm },
     ...source.routedBy !== void 0 && { routedBy: source.routedBy },
     ...source.routedDurationMs !== void 0 && { routedDurationMs: source.routedDurationMs }
   };
@@ -246,4 +248,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-VD5K6GS2.js.map
+//# sourceMappingURL=chunk-EKZ6V7SE.js.map

package/dist/chunk-EKZ6V7SE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/pipeline/expert-bridge.ts"],"sourcesContent":["/**\n * Expert Bridge — Programmatic access to the execute_expert pipeline (#1693)\n *\n * Provides a clean wrapper for calling experts with the full pipeline:\n * timeout, fallback cascade, degradation detection, heartbeat, outcome recording.\n *\n * DRY: reuses createBuiltInExpert + CompositeRouter instead of reimplementing.\n *\n * @module pipeline/expert-bridge\n */\n\nimport { createLogger, getTimeProvider } from '../core/index.js';\nimport type { BuiltInExpertType } from '../agents/experts/expert-config.js';\nimport { isRateLimitText } from '../adapters/rate-limit-detector.js';\nimport { resolveCliSlot } from '../config/model-availability.js';\nimport type { CliNameLiteral } from '../config/model-capabilities-types.js';\nimport type { OutcomeRoutedBy } from '../orchestration/outcomes/outcome-types.js';\nimport type { RoutingArmId } from '../cli-adapters/types-core.js';\n\n/**\n * Resolves a CLI slot from the model string a (CLI or API) adapter returned.\n * Known models resolve to their exact slot; **unknown** models — new releases\n * or API/openrouter models not in the curated registry — fall back to the\n * vendor-derived slot (#3317 / #3293) so the outcome is recorded against a real\n * slot instead of being dropped with an undefined cli (the api-mode gap).\n * Returns undefined only when no model is present (the bridge failed before\n * dispatch — no execution to attribute).\n */\nfunction resolveCliFromModelString(model: string | undefined): CliNameLiteral | undefined {\n  return resolveCliSlot(model);\n}\n\nconst logger = createLogger({ component: 'expert-bridge' });\n\n/** Base delay for rate limit retry backoff (ms). Scales linearly: 3s, 6s, 9s. */\nconst RATE_LIMIT_BASE_DELAY_MS = 3000;\n\n/** Result of an expert execution. */\nexport interface ExpertBridgeResult {\n  readonly success: boolean;\n  readonly text: string;\n  readonly expertType: BuiltInExpertType;\n  readonly durationMs: number;\n  readonly error?: string;\n  /**\n   * CLI that actually executed the task, resolved from the underlying\n   * `CliResponse.model` via `getCliForModelId`. Undefined when the bridge\n   * failed before dispatch (no adapters / circuit-open / rate-limit cap).\n   * Callers writing to OutcomeStore should use this rather than hardcoding\n   * a cli — see #2823 (#1154 regression).\n   */\n  readonly cli?: CliNameLiteral;\n  /**\n   * Routing arm id the router ran (#6552), when it names one: `api:anthropic`\n   * for the Anthropic API arm, where {@link cli} reads the `claude` slot. An\n   * outcome row records this, so warm start credits the arm that ran.\n   * Undefined when no arm ran, or when the router named only a slot.\n   */\n  readonly routedArm?: RoutingArmId;\n  /**\n   * `'composite-router'` when `CompositeRouter.executeTask` selected the CLI\n   * that produced this result, success or failure (#6521). Set where the\n   * router's decision and the execution meet (`adaptCompositeRouter`), so an\n   * outcome recorder copies it rather than asserting routing on its own.\n   * Undefined when no arm ran: routing failed, no adapters, circuit open.\n   */\n  readonly routedBy?: OutcomeRoutedBy;\n  /**\n   * Wall time of the routed arm's call alone (#6521), from the router. Unlike\n   * {@link durationMs} it excludes expert import, MCP-config setup and\n   * rate-limit backoff. Undefined when no arm ran.\n   */\n  readonly routedDurationMs?: number;\n  /**\n   * Total tokens (input + output) the underlying CLI/adapter reported for this\n   * call, when available (#3396). Best-effort: `CliResponse.usage` is optional\n   * — CLI-subprocess paths whose `extractUsage` returns null leave this\n   * undefined. Consumers (budget enforcement #3395, model.called attribution\n   * #3387, routing-experience metrics) must tolerate `undefined`.\n   */\n  readonly tokensUsed?: number;\n  /**\n   * Concrete model id the underlying adapter reported (`CliResponse.model`),\n   * when present (#3387). Distinct from {@link cli} (the slot): one CLI can run\n   * several models. Undefined when the adapter didn't report a model or the\n   * bridge failed before dispatch. Required to emit a `model.called` event.\n   */\n  readonly model?: string;\n  /**\n   * Input/output token split from the adapter's `CliResponse.usage` (#3387),\n   * when reported. Best-effort like {@link tokensUsed}; both undefined together\n   * when no usage was available. `tokensIn + tokensOut` reconciles with\n   * `tokensUsed` (single source of truth — both derive from the same record).\n   */\n  readonly tokensIn?: number;\n  readonly tokensOut?: number;\n}\n\n/** Attribution of a routed arm's run, on success and on failure (#6521). */\ninterface RoutedAttribution {\n  cli?: CliNameLiteral;\n  routedArm?: RoutingArmId;\n  routedBy?: OutcomeRoutedBy;\n  routedDurationMs?: number;\n}\n\n/** Minimal router interface for the bridge. */\ninterface RouterLike {\n  executeTask(task: { content: string; options?: Record<string, unknown> | undefined }): Promise<{\n    ok: boolean;\n    value: RoutedAttribution & {\n      text: string;\n      tokensUsed?: number;\n      model?: string;\n      tokensIn?: number;\n      tokensOut?: number;\n    };\n    error: RoutedAttribution & { message: string };\n  }>;\n}\n\n/**\n * The bridge's attribution for a router result (#6521). The router's own\n * `routedCli` is authoritative: the model string can name another vendor's\n * slot (an `api:custom-openai` arm shows as opencode while serving a GPT\n * model). The model-derived CLI is the fallback only when no arm is named.\n * No `routedCli` on a failure means routing failed before an arm ran, and\n * then there is nothing to attribute.\n */\nfunction routedAttribution(\n  routed: { routedCli?: CliNameLiteral; routedArm?: RoutingArmId; routedDurationMs?: number },\n  model: string | undefined\n): RoutedAttribution {\n  const cli = routed.routedCli ?? resolveCliFromModelString(model);\n  return {\n    ...(cli !== undefined && { cli }),\n    ...(routed.routedArm !== undefined && { routedArm: routed.routedArm }),\n    ...(routed.routedCli !== undefined && { routedBy: 'composite-router' as const }),\n    ...(routed.routedDurationMs !== undefined && { routedDurationMs: routed.routedDurationMs }),\n  };\n}\n\n// Cached router — lazily initialized, reused across calls within a session\nlet cachedRouter: RouterLike | null = null;\n\n// Cached MCP config — generated once, reused across expert calls (#1708)\nlet cachedMcpConfigPath: string | null = null;\n// Cached cleanup for the cached config's tempdir (closes #2946). Previously\n// the cleanup returned by `generateMcpConfig` was thrown away, so\n// `/tmp/nexus-mcp-XXXXXX/` accumulated one entry per MCP server lifetime.\n// Stored here + invoked by `shutdownExpertBridge()` from the server's\n// graceful-shutdown path.\nlet cachedMcpConfigCleanup: (() => Promise<void>) | null = null;\n// Coalesces concurrent init under voter fan-out (closes #2969). consensus_vote\n// fans out N=7 callers on cold start; without this each one ran the full init\n// including a mkdtemp() that the loser N-1 instances never cleaned up.\nlet mcpConfigInitPromise: Promise<string | null> | null = null;\n\n/** Get or create cached MCP config path for expert CLI sessions (#1708). */\nasync function getMcpConfigPath(): Promise<string | null> {\n  if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;\n  mcpConfigInitPromise ??= (async (): Promise<string | null> => {\n    try {\n      const { generateMcpConfig } = await import('../cli-adapters/child-mcp-config.js');\n      const config = await generateMcpConfig();\n      cachedMcpConfigPath = config.configPath;\n      cachedMcpConfigCleanup = config.cleanup;\n      return cachedMcpConfigPath;\n    } catch {\n      mcpConfigInitPromise = null; // allow retry on next call\n      return null; // MCP config not available — experts run without tools\n    }\n  })();\n  return mcpConfigInitPromise;\n}\n\n/**\n * Removes the cached MCP-config tempdir (closes #2946). Invoke from the\n * server's graceful-shutdown path so stale nexus-mcp-* tempdirs (under\n * the OS tmpdir, see child-mcp-config.ts) don't accumulate across daemon\n * restarts. Idempotent; safe to call multiple times. Never throws —\n * cleanup failures are logged and swallowed.\n */\nexport async function shutdownExpertBridge(): Promise<void> {\n  const cleanup = cachedMcpConfigCleanup;\n  if (cleanup === null) return;\n  cachedMcpConfigCleanup = null;\n  cachedMcpConfigPath = null;\n  mcpConfigInitPromise = null;\n  try {\n    await cleanup();\n  } catch (error: unknown) {\n    const msg = error instanceof Error ? error.message : String(error);\n    logger.debug('Expert-bridge MCP-config cleanup failed', { error: msg });\n  }\n}\n\n/** Cached circuit breaker for health monitoring (#1766). */\nlet cachedCircuitBreaker: {\n  getHealthStatus(): {\n    systemHealthy: boolean;\n    healthyCount: number;\n    clis: ReadonlyArray<{ name: string; healthy: boolean }>;\n  };\n} | null = null;\n\n/**\n * Adapt a CompositeRouter to the narrower RouterLike interface used by this\n * bridge. Previously did `as unknown as RouterLike` which hid any structural\n * mismatch between CompositeRouter's `Result<CliResponse, CliError>` and\n * RouterLike's flat `{ ok, value: { text }, error: { message } }` shape.\n * If CliResponse renames `.text` → `.output` (or similar), this adapter\n * breaks at compile time instead of silently returning wrong data (#1921).\n */\n/**\n * Total tokens from a best-effort `CliResponse.usage` record (#3396). Prefers\n * the reported `totalTokens`; falls back to input+output; returns undefined\n * when no usage was reported (so callers can distinguish \"0 tokens\" — which\n * never happens for a real call — from \"unknown\").\n */\nexport function totalTokensFromUsage(\n  usage: { totalTokens?: number; inputTokens?: number; outputTokens?: number } | undefined\n): number | undefined {\n  if (usage === undefined) return undefined;\n  if (typeof usage.totalTokens === 'number') return usage.totalTokens;\n  const total = (usage.inputTokens ?? 0) + (usage.outputTokens ?? 0);\n  return total > 0 ? total : undefined;\n}\n\n/**\n * Per-direction token split from a best-effort `CliResponse.usage` record\n * (#3387). Unlike {@link totalTokensFromUsage} this keeps `tokensIn`/`tokensOut`\n * separate — the granularity `ModelCalledEvent` requires for attribution.\n * Returns undefined when no usage was reported or both directions are zero (no\n * real call), so callers skip emitting a noise event instead of recording\n * zeros. Reconciles with the total: `tokensIn + tokensOut === totalTokensFromUsage`.\n */\nexport function tokenSplitFromUsage(\n  usage: { inputTokens?: number; outputTokens?: number; totalTokens?: number } | undefined\n): { tokensIn: number; tokensOut: number } | undefined {\n  if (usage === undefined) return undefined;\n  const tokensIn = usage.inputTokens ?? 0;\n  const tokensOut = usage.outputTokens ?? 0;\n  if (tokensIn + tokensOut === 0) return undefined;\n  return { tokensIn, tokensOut };\n}\n\nfunction adaptCompositeRouter(\n  compositeRouter: import('../cli-adapters/composite-router.js').ICompositeRouter\n): RouterLike {\n  return {\n    async executeTask(task): Promise<{\n      ok: boolean;\n      value: RoutedAttribution & {\n        text: string;\n        tokensUsed?: number;\n        model?: string;\n        tokensIn?: number;\n        tokensOut?: number;\n      };\n      error: RoutedAttribution & { message: string };\n    }> {\n      const cliTask: import('../cli-adapters/types.js').CliTask = {\n        content: task.content,\n        ...(task.options !== undefined ? { options: task.options } : {}),\n      };\n      const result = await compositeRouter.executeTask(cliTask);\n      if (result.ok) {\n        // #2823: surface which CLI actually executed so callers writing to\n        // OutcomeStore don't have to hardcode 'claude' (the bug #1154 fixed\n        // and that regressed into the pipeline/ tree). Derive via the\n        // canonical model→cli mapping in the registry — if the underlying\n        // adapter didn't set `model` or the model isn't in the registry,\n        // cli stays undefined and downstream code can skip the record\n        // rather than lie.\n        // #6521: the arm the router ran is the attribution; see routedAttribution.\n        const attribution = routedAttribution(result.value, result.value.model);\n        // #3396: surface token usage (best-effort) so budget enforcement,\n        // attribution, and routing-experience metrics get real numbers instead\n        // of zeros. `usage` is optional and `totalTokens` may be absent — fall\n        // back to input+output, and leave undefined when no usage was reported.\n        const tokensUsed = totalTokensFromUsage(result.value.usage);\n        // #3387: also surface the concrete model + per-direction token split so\n        // a meaningful `model.called` event can be emitted. Both derive from the\n        // same CliResponse, so tokensIn+tokensOut reconciles with tokensUsed.\n        const model = result.value.model;\n        const split = tokenSplitFromUsage(result.value.usage);\n        return {\n          ok: true,\n          value: {\n            text: result.value.text,\n            ...attribution,\n            ...(tokensUsed !== undefined && { tokensUsed }),\n            ...(model !== undefined && { model }),\n            ...(split !== undefined && { tokensIn: split.tokensIn, tokensOut: split.tokensOut }),\n          },\n          error: { message: '' },\n        };\n      }\n      // #6521 I1: a routed failure keeps its arm, so it is recorded and the\n      // loop does not see only the arm's successes.\n      const routed = 'routedCli' in result.error ? result.error : {};\n      return {\n        ok: false,\n        value: { text: '' },\n        error: { message: result.error.message, ...routedAttribution(routed, undefined) },\n      };\n    },\n  };\n}\n\n// Coalesces concurrent router init the same way mcpConfigInitPromise does\n// (closes #2969). N=7 voter fan-out previously ran createAllAdapters() N times\n// — N sets of CLI probe subprocesses, all but one discarded.\nlet routerInitPromise: Promise<RouterLike | null> | null = null;\n\n/** Get or create a cached CompositeRouter with circuit breaker monitoring. */\nasync function getRouter(): Promise<RouterLike | null> {\n  if (cachedRouter !== null) return cachedRouter;\n  routerInitPromise ??= (async (): Promise<RouterLike | null> => {\n    // ROUTER CONSTRUCTION, a distinct operation from adapter acquisition\n    // (#5191, ratified 5/6). `createCompositeRouter` needs\n    // `Map<RoutingArmId, ICliAdapter>`; `getGlobalRegistry()` returns\n    // `IResilientAdapter` (extends `IModelAdapter`) one CLI at a time, so the\n    // canonical path cannot type-check here.\n    //\n    // It also should not be used: the router IS the selection/failover layer,\n    // so resilient-wrapped arms would nest two failover mechanisms, and the\n    // shared circuit breaker would make an arm report unavailable without the\n    // router ever testing it. That is the doctor-probe defect (#5209) applied\n    // to routing — and this map is the LinUCB arm space, so a coupled arm\n    // availability would distort exploration signals.\n    //\n    // Pinned by `router-operation.test.ts`.\n    const { createAllAdapters } = await import('../cli-adapters/factory.js');\n    const { createCompositeRouter } = await import('../cli-adapters/composite-router.js');\n    const adapters = createAllAdapters();\n    if (adapters.size === 0) {\n      routerInitPromise = null; // allow retry once adapters become available\n      return null;\n    }\n    cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));\n\n    // Initialize circuit breaker monitoring (#1766)\n    try {\n      const { createCliCircuitBreakerIntegration } =\n        await import('../cli-adapters/cli-circuit-breaker.js');\n      cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);\n    } catch (error: unknown) {\n      // Circuit breaker not available — continue without it. Log so we can\n      // notice if initialization silently stops working (#1913 Class B).\n      const msg = error instanceof Error ? error.message : String(error);\n      logger.debug('Circuit breaker init failed; continuing without it', { error: msg });\n    }\n\n    return cachedRouter;\n  })();\n  return routerInitPromise;\n}\n\n/** Check CLI health before dispatch (#1766). */\nfunction checkCircuitHealth(): { healthy: boolean; message: string } {\n  if (cachedCircuitBreaker === null) return { healthy: true, message: '' };\n  const status = cachedCircuitBreaker.getHealthStatus();\n  if (!status.systemHealthy) {\n    return {\n      healthy: false,\n      message: `All CLI circuits open (${String(status.healthyCount)}/${String(status.clis.length)} healthy)`,\n    };\n  }\n  return { healthy: true, message: '' };\n}\n\n/** The attribution fields present on `source`; absent ones stay absent. */\nfunction attributionOf(source: RoutedAttribution): RoutedAttribution {\n  return {\n    ...(source.cli !== undefined && { cli: source.cli }),\n    ...(source.routedArm !== undefined && { routedArm: source.routedArm }),\n    ...(source.routedBy !== undefined && { routedBy: source.routedBy }),\n    ...(source.routedDurationMs !== undefined && { routedDurationMs: source.routedDurationMs }),\n  };\n}\n\n/** A successful router result as an {@link ExpertBridgeResult}; absent fields stay absent. */\nfunction toSuccessResult(\n  value: Awaited<ReturnType<RouterLike['executeTask']>>['value'],\n  expertType: BuiltInExpertType,\n  durationMs: number\n): ExpertBridgeResult {\n  return {\n    success: true,\n    text: value.text,\n    expertType,\n    durationMs,\n    ...attributionOf(value),\n    ...(value.tokensUsed !== undefined && { tokensUsed: value.tokensUsed }),\n    ...(value.model !== undefined && { model: value.model }),\n    ...(value.tokensIn !== undefined && { tokensIn: value.tokensIn }),\n    ...(value.tokensOut !== undefined && { tokensOut: value.tokensOut }),\n  };\n}\n\n/** Dispatch task to router with rate limit retry (#1802). */\nasync function dispatchWithRateLimitRetry(\n  router: RouterLike,\n  task: { content: string; options?: Record<string, unknown> | undefined },\n  expertType: BuiltInExpertType,\n  start: number\n): Promise<ExpertBridgeResult> {\n  const maxAttempts = 3;\n  for (let attempt = 0; attempt < maxAttempts; attempt++) {\n    const result = await router.executeTask(task);\n    const durationMs = getTimeProvider().now() - start;\n\n    if (result.ok) {\n      logger.info('Expert executed successfully', {\n        expertType,\n        durationMs,\n        cli: result.value.cli,\n      });\n      return toSuccessResult(result.value, expertType, durationMs);\n    }\n\n    const isRateLimit = isRateLimitText(result.error.message);\n    if (isRateLimit && attempt < maxAttempts - 1) {\n      const backoffMs = RATE_LIMIT_BASE_DELAY_MS * (attempt + 1);\n      logger.warn('Expert rate limited, retrying', { expertType, attempt: attempt + 1, backoffMs });\n      await new Promise((resolve) => setTimeout(resolve, backoffMs));\n      continue;\n    }\n\n    // Only the final attempt is attributed: a rate-limited attempt that is\n    // retried is not recorded as a routed outcome of its own.\n    logger.warn('Expert execution failed', { expertType, error: result.error.message });\n    return {\n      success: false,\n      text: '',\n      expertType,\n      durationMs,\n      error: result.error.message,\n      ...attributionOf(result.error),\n    };\n  }\n\n  return {\n    success: false,\n    text: '',\n    expertType,\n    durationMs: getTimeProvider().now() - start,\n    error: 'Max retry attempts exceeded',\n  };\n}\n\n/**\n * Execute an expert task with the full nexus-agents expert pipeline.\n *\n * Creates a built-in expert, executes via CompositeRouter (for intelligent\n * CLI routing), and records outcomes. Falls back gracefully on failure.\n *\n * @param expertType - Built-in expert type (code, architecture, security, qa, etc.)\n * @param prompt - Task prompt for the expert\n * @returns Expert result with text output\n */\nexport function executeExpert(\n  expertType: BuiltInExpertType,\n  prompt: string\n): Promise<ExpertBridgeResult>;\nexport function executeExpert(\n  expertType: BuiltInExpertType,\n  prompt: string,\n  // eslint-disable-next-line @typescript-eslint/unified-signatures -- Preserve the published two-argument API signature.\n  options: { workDir?: string | undefined }\n): Promise<ExpertBridgeResult>;\n/** Execute with an optional working directory for the expert's CLI subprocess. */\nexport async function executeExpert(\n  expertType: BuiltInExpertType,\n  prompt: string,\n  options?: { workDir?: string | undefined }\n): Promise<ExpertBridgeResult> {\n  const start = getTimeProvider().now();\n  try {\n    const { BUILT_IN_EXPERTS } = await import('../agents/experts/expert-config.js');\n    const config = BUILT_IN_EXPERTS[expertType];\n    const fullPrompt = `${config.systemPrompt}\\n\\n${prompt}`;\n\n    const router = await getRouter();\n    if (router === null) {\n      return {\n        success: false,\n        text: `[No adapters] ${prompt}`,\n        expertType,\n        durationMs: getTimeProvider().now() - start,\n        error: 'No CLI adapters available',\n      };\n    }\n\n    // Check circuit breaker health before dispatch (#1766)\n    const health = checkCircuitHealth();\n    if (!health.healthy) {\n      logger.warn('Circuit breaker: all CLIs unavailable', { expertType, reason: health.message });\n      return {\n        success: false,\n        text: '',\n        expertType,\n        durationMs: getTimeProvider().now() - start,\n        error: health.message,\n      };\n    }\n\n    // Pass MCP config so CLI experts can call nexus-agents tools (#1708)\n    const mcpConfigPath = await getMcpConfigPath();\n    const task: { content: string; options?: Record<string, unknown> | undefined } = {\n      content: fullPrompt,\n    };\n    if (mcpConfigPath !== null) task.options = { mcpConfigPath };\n    if (options?.workDir !== undefined) {\n      task.options = { ...task.options, workDir: options.workDir };\n    }\n\n    return await dispatchWithRateLimitRetry(router, task, expertType, start);\n  } catch (error) {\n    const durationMs = getTimeProvider().now() - start;\n    const msg = error instanceof Error ? error.message : String(error);\n    logger.warn('Expert bridge error', { expertType, error: msg });\n    return { success: false, text: '', expertType, durationMs, error: msg };\n  }\n}\n"],"mappings":";;;;;;;;;;AA4BA,SAAS,0BAA0B,OAAuD;AACxF,SAAO,eAAe,KAAK;AAC7B;AAEA,IAAM,SAAS,aAAa,EAAE,WAAW,gBAAgB,CAAC;AAG1D,IAAM,2BAA2B;AA8FjC,SAAS,kBACP,QACA,OACmB;AACnB,QAAM,MAAM,OAAO,aAAa,0BAA0B,KAAK;AAC/D,SAAO;AAAA,IACL,GAAI,QAAQ,UAAa,EAAE,IAAI;AAAA,IAC/B,GAAI,OAAO,cAAc,UAAa,EAAE,WAAW,OAAO,UAAU;AAAA,IACpE,GAAI,OAAO,cAAc,UAAa,EAAE,UAAU,mBAA4B;AAAA,IAC9E,GAAI,OAAO,qBAAqB,UAAa,EAAE,kBAAkB,OAAO,iBAAiB;AAAA,EAC3F;AACF;AAGA,IAAI,eAAkC;AAGtC,IAAI,sBAAqC;AAMzC,IAAI,yBAAuD;AAI3D,IAAI,uBAAsD;AAG1D,eAAe,mBAA2C;AACxD,MAAI,wBAAwB,KAAM,QAAO;AACzC,4BAA0B,YAAoC;AAC5D,QAAI;AACF,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,gCAAqC;AAChF,YAAM,SAAS,MAAM,kBAAkB;AACvC,4BAAsB,OAAO;AAC7B,+BAAyB,OAAO;AAChC,aAAO;AAAA,IACT,QAAQ;AACN,6BAAuB;AACvB,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,SAAO;AACT;AASA,eAAsB,uBAAsC;AAC1D,QAAM,UAAU;AAChB,MAAI,YAAY,KAAM;AACtB,2BAAyB;AACzB,wBAAsB;AACtB,yBAAuB;AACvB,MAAI;AACF,UAAM,QAAQ;AAAA,EAChB,SAAS,OAAgB;AACvB,UAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,WAAO,MAAM,2CAA2C,EAAE,OAAO,IAAI,CAAC;AAAA,EACxE;AACF;AAGA,IAAI,uBAMO;AAgBJ,SAAS,qBACd,OACoB;AACpB,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,MAAM,gBAAgB,SAAU,QAAO,MAAM;AACxD,QAAM,SAAS,MAAM,eAAe,MAAM,MAAM,gBAAgB;AAChE,SAAO,QAAQ,IAAI,QAAQ;AAC7B;AAUO,SAAS,oBACd,OACqD;AACrD,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,WAAW,MAAM,eAAe;AACtC,QAAM,YAAY,MAAM,gBAAgB;AACxC,MAAI,WAAW,cAAc,EAAG,QAAO;AACvC,SAAO,EAAE,UAAU,UAAU;AAC/B;AAEA,SAAS,qBACP,iBACY;AACZ,SAAO;AAAA,IACL,MAAM,YAAY,MAUf;AACD,YAAM,UAAsD;AAAA,QAC1D,SAAS,KAAK;AAAA,QACd,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAChE;AACA,YAAM,SAAS,MAAM,gBAAgB,YAAY,OAAO;AACxD,UAAI,OAAO,IAAI;AASb,cAAM,cAAc,kBAAkB,OAAO,OAAO,OAAO,MAAM,KAAK;AAKtE,cAAM,aAAa,qBAAqB,OAAO,MAAM,KAAK;AAI1D,cAAM,QAAQ,OAAO,MAAM;AAC3B,cAAM,QAAQ,oBAAoB,OAAO,MAAM,KAAK;AACpD,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM,OAAO,MAAM;AAAA,YACnB,GAAG;AAAA,YACH,GAAI,eAAe,UAAa,EAAE,WAAW;AAAA,YAC7C,GAAI,UAAU,UAAa,EAAE,MAAM;AAAA,YACnC,GAAI,UAAU,UAAa,EAAE,UAAU,MAAM,UAAU,WAAW,MAAM,UAAU;AAAA,UACpF;AAAA,UACA,OAAO,EAAE,SAAS,GAAG;AAAA,QACvB;AAAA,MACF;AAGA,YAAM,SAAS,eAAe,OAAO,QAAQ,OAAO,QAAQ,CAAC;AAC7D,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,EAAE,MAAM,GAAG;AAAA,QAClB,OAAO,EAAE,SAAS,OAAO,MAAM,SAAS,GAAG,kBAAkB,QAAQ,MAAS,EAAE;AAAA,MAClF;AAAA,IACF;AAAA,EACF;AACF;AAKA,IAAI,oBAAuD;AAG3D,eAAe,YAAwC;AACrD,MAAI,iBAAiB,KAAM,QAAO;AAClC,yBAAuB,YAAwC;AAe7D,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,uBAA4B;AACvE,UAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,gCAAqC;AACpF,UAAM,WAAW,kBAAkB;AACnC,QAAI,SAAS,SAAS,GAAG;AACvB,0BAAoB;AACpB,aAAO;AAAA,IACT;AACA,mBAAe,qBAAqB,sBAAsB,QAAQ,CAAC;AAGnE,QAAI;AACF,YAAM,EAAE,mCAAmC,IACzC,MAAM,OAAO,mCAAwC;AACvD,6BAAuB,mCAAmC,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;AAAA,IAClF,SAAS,OAAgB;AAGvB,YAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,aAAO,MAAM,sDAAsD,EAAE,OAAO,IAAI,CAAC;AAAA,IACnF;AAEA,WAAO;AAAA,EACT,GAAG;AACH,SAAO;AACT;AAGA,SAAS,qBAA4D;AACnE,MAAI,yBAAyB,KAAM,QAAO,EAAE,SAAS,MAAM,SAAS,GAAG;AACvE,QAAM,SAAS,qBAAqB,gBAAgB;AACpD,MAAI,CAAC,OAAO,eAAe;AACzB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,0BAA0B,OAAO,OAAO,YAAY,CAAC,IAAI,OAAO,OAAO,KAAK,MAAM,CAAC;AAAA,IAC9F;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,SAAS,GAAG;AACtC;AAGA,SAAS,cAAc,QAA8C;AACnE,SAAO;AAAA,IACL,GAAI,OAAO,QAAQ,UAAa,EAAE,KAAK,OAAO,IAAI;AAAA,IAClD,GAAI,OAAO,cAAc,UAAa,EAAE,WAAW,OAAO,UAAU;AAAA,IACpE,GAAI,OAAO,aAAa,UAAa,EAAE,UAAU,OAAO,SAAS;AAAA,IACjE,GAAI,OAAO,qBAAqB,UAAa,EAAE,kBAAkB,OAAO,iBAAiB;AAAA,EAC3F;AACF;AAGA,SAAS,gBACP,OACA,YACA,YACoB;AACpB,SAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM,MAAM;AAAA,IACZ;AAAA,IACA;AAAA,IACA,GAAG,cAAc,KAAK;AAAA,IACtB,GAAI,MAAM,eAAe,UAAa,EAAE,YAAY,MAAM,WAAW;AAAA,IACrE,GAAI,MAAM,UAAU,UAAa,EAAE,OAAO,MAAM,MAAM;AAAA,IACtD,GAAI,MAAM,aAAa,UAAa,EAAE,UAAU,MAAM,SAAS;AAAA,IAC/D,GAAI,MAAM,cAAc,UAAa,EAAE,WAAW,MAAM,UAAU;AAAA,EACpE;AACF;AAGA,eAAe,2BACb,QACA,MACA,YACA,OAC6B;AAC7B,QAAM,cAAc;AACpB,WAAS,UAAU,GAAG,UAAU,aAAa,WAAW;AACtD,UAAM,SAAS,MAAM,OAAO,YAAY,IAAI;AAC5C,UAAM,aAAa,gBAAgB,EAAE,IAAI,IAAI;AAE7C,QAAI,OAAO,IAAI;AACb,aAAO,KAAK,gCAAgC;AAAA,QAC1C;AAAA,QACA;AAAA,QACA,KAAK,OAAO,MAAM;AAAA,MACpB,CAAC;AACD,aAAO,gBAAgB,OAAO,OAAO,YAAY,UAAU;AAAA,IAC7D;AAEA,UAAM,cAAc,gBAAgB,OAAO,MAAM,OAAO;AACxD,QAAI,eAAe,UAAU,cAAc,GAAG;AAC5C,YAAM,YAAY,4BAA4B,UAAU;AACxD,aAAO,KAAK,iCAAiC,EAAE,YAAY,SAAS,UAAU,GAAG,UAAU,CAAC;AAC5F,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,SAAS,CAAC;AAC7D;AAAA,IACF;AAIA,WAAO,KAAK,2BAA2B,EAAE,YAAY,OAAO,OAAO,MAAM,QAAQ,CAAC;AAClF,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,OAAO,OAAO,MAAM;AAAA,MACpB,GAAG,cAAc,OAAO,KAAK;AAAA,IAC/B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN;AAAA,IACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,IACtC,OAAO;AAAA,EACT;AACF;AAuBA,eAAsB,cACpB,YACA,QACA,SAC6B;AAC7B,QAAM,QAAQ,gBAAgB,EAAE,IAAI;AACpC,MAAI;AACF,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAAoC;AAC9E,UAAM,SAAS,iBAAiB,UAAU;AAC1C,UAAM,aAAa,GAAG,OAAO,YAAY;AAAA;AAAA,EAAO,MAAM;AAEtD,UAAM,SAAS,MAAM,UAAU;AAC/B,QAAI,WAAW,MAAM;AACnB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM,iBAAiB,MAAM;AAAA,QAC7B;AAAA,QACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,QACtC,OAAO;AAAA,MACT;AAAA,IACF;AAGA,UAAM,SAAS,mBAAmB;AAClC,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,KAAK,yCAAyC,EAAE,YAAY,QAAQ,OAAO,QAAQ,CAAC;AAC3F,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM;AAAA,QACN;AAAA,QACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,QACtC,OAAO,OAAO;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,gBAAgB,MAAM,iBAAiB;AAC7C,UAAM,OAA2E;AAAA,MAC/E,SAAS;AAAA,IACX;AACA,QAAI,kBAAkB,KAAM,MAAK,UAAU,EAAE,cAAc;AAC3D,QAAI,SAAS,YAAY,QAAW;AAClC,WAAK,UAAU,EAAE,GAAG,KAAK,SAAS,SAAS,QAAQ,QAAQ;AAAA,IAC7D;AAEA,WAAO,MAAM,2BAA2B,QAAQ,MAAM,YAAY,KAAK;AAAA,EACzE,SAAS,OAAO;AACd,UAAM,aAAa,gBAAgB,EAAE,IAAI,IAAI;AAC7C,UAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,WAAO,KAAK,uBAAuB,EAAE,YAAY,OAAO,IAAI,CAAC;AAC7D,WAAO,EAAE,SAAS,OAAO,MAAM,IAAI,YAAY,YAAY,OAAO,IAAI;AAAA,EACxE;AACF;","names":[]}

package/dist/{chunk-Z5UEPOL6.js → chunk-GXBXZCY7.js}

@@ -1,6 +1,6 @@
 import {
   isGatewayModelAdapter
-} from "./chunk-AQE77PSX.js";
+} from "./chunk-BJXSG5YL.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -25,20 +25,20 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-7EOV55QT.js";
+} from "./chunk-GYQIIAVM.js";
 import {
   VERSION
-} from "./chunk-BHU67ATO.js";
+} from "./chunk-JRZEB4OQ.js";
 import {
   UNRESOLVED_MODEL_ID,
   assessPanelIndependence,
   countDistinctModels,
   createEvent,
   getGlobalRegistry
-} from "./chunk-RE4CUPIU.js";
+} from "./chunk-TLFZPJOY.js";
 import {
   getToolMemory
-} from "./chunk-HNWZNCST.js";
+} from "./chunk-VM4HZT3B.js";
 import {
   authRemediation,
   classifyExtractedError,
@@ -48,7 +48,7 @@ import {
   isTimeoutText,
   sleep,
   withTimeout
-} from "./chunk-WV23K2TM.js";
+} from "./chunk-JYZNPK62.js";
 import {
   sanitizeErrorDetails,
   sanitizeOutput
@@ -88,18 +88,18 @@ import {
   resolveClassGuardMs,
   resolveVoteTimeout,
   stepBus
-} from "./chunk-4DSPBZY3.js";
+} from "./chunk-NZN3SWSZ.js";
 import {
   ensureLearningDir,
   getOutcomesFile
-} from "./chunk-RQLIPUQK.js";
+} from "./chunk-UE7A2XHM.js";
 import {
   findRepoRoot,
   getNexusDataDir,
   nexusDataPath,
   nexusDataPathEnsure,
   nexusSharedPath
-} from "./chunk-RNDHNRSX.js";
+} from "./chunk-LWOX65CP.js";
 
 // src/mcp/tools/consensus-vote.ts
 import { z as z16 } from "zod";
@@ -6435,7 +6435,7 @@ function logPartialProposal(bounded, log) {
 }
 async function runContrarianCheck(proposal, log, opts) {
   try {
-    const { executeExpert } = await import("./expert-bridge-RU2W64EM.js");
+    const { executeExpert } = await import("./expert-bridge-ZG2IA3RJ.js");
     const bounded = boundArtifactForReview(proposal, CONTRARIAN_PROPOSAL_BUDGET, "proposal");
     logPartialProposal(bounded, log);
     const result = await executeExpert("architecture", buildContrarianPrompt(bounded, opts), {
@@ -6809,8 +6809,125 @@ function parseVoteRecordsText(text) {
   return { records, redactions, invalidLines };
 }
 
+// src/mcp/tools/consensus-vote-recording.ts
+import { mkdirSync as mkdirSync3 } from "node:fs";
+import { dirname as dirname3 } from "node:path";
+
+// src/utils/file-lock.ts
+import { closeSync, openSync, readFileSync as readFileSync4, statSync as statSync2, unlinkSync, writeSync } from "node:fs";
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { hostname } from "node:os";
+var DEFAULT_TIMEOUT_MS = 1e4;
+var DEFAULT_STALE_MS = 3e4;
+var DEFAULT_RETRY_MS = 15;
+var FileLockTimeoutError = class extends Error {
+  constructor(lockPath, timeoutMs) {
+    super(`Timed out after ${String(timeoutMs)}ms waiting for lock ${lockPath}`);
+    this.lockPath = lockPath;
+    this.timeoutMs = timeoutMs;
+    this.name = "FileLockTimeoutError";
+  }
+  lockPath;
+  timeoutMs;
+};
+function errnoCode(error) {
+  if (typeof error !== "object" || error === null) return void 0;
+  const code = error.code;
+  return typeof code === "string" ? code : void 0;
+}
+function newToken() {
+  return `${hostname()}:${String(process.pid)}:${randomBytes2(8).toString("hex")}`;
+}
+function tryCreate(lockPath, token) {
+  let fd;
+  try {
+    fd = openSync(lockPath, "wx", 384);
+  } catch (error) {
+    if (errnoCode(error) === "EEXIST") return false;
+    throw error;
+  }
+  try {
+    writeSync(fd, token);
+  } finally {
+    closeSync(fd);
+  }
+  return true;
+}
+function readLock(lockPath) {
+  try {
+    const { mtimeMs } = statSync2(lockPath);
+    return { token: readFileSync4(lockPath, "utf-8"), mtimeMs };
+  } catch (error) {
+    if (errnoCode(error) === "ENOENT") return void 0;
+    throw error;
+  }
+}
+function isRunning(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    return errnoCode(error) === "EPERM";
+  }
+}
+function isStale(lock, staleMs) {
+  const match = /^(.+):(\d+):[0-9a-z]+$/.exec(lock.token);
+  if (match?.[1] === hostname()) return !isRunning(Number(match[2]));
+  return Date.now() - lock.mtimeMs > staleMs;
+}
+function removeIfOwned(path2, token) {
+  if (readLock(path2)?.token === token) unlinkSync(path2);
+}
+function unlinkIfPresent(path2) {
+  try {
+    unlinkSync(path2);
+  } catch (error) {
+    if (errnoCode(error) !== "ENOENT") throw error;
+  }
+}
+async function breakIfStale(lockPath, staleMs, onStaleObserved) {
+  const seen = readLock(lockPath);
+  if (seen === void 0 || !isStale(seen, staleMs)) return;
+  await onStaleObserved?.();
+  const breakPath = `${lockPath}.break`;
+  const breakToken = newToken();
+  if (!tryCreate(breakPath, breakToken)) {
+    const breaker = readLock(breakPath);
+    if (breaker !== void 0 && isStale(breaker, staleMs)) unlinkIfPresent(breakPath);
+    return;
+  }
+  try {
+    const now = readLock(lockPath);
+    if (now !== void 0 && isStale(now, staleMs)) {
+      unlinkSync(lockPath);
+    }
+  } finally {
+    removeIfOwned(breakPath, breakToken);
+  }
+}
+function delay2(ms) {
+  return new Promise((resolveDelay) => setTimeout(resolveDelay, ms));
+}
+async function withFileLock(lockPath, body, options = {}) {
+  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const staleMs = options.staleMs ?? DEFAULT_STALE_MS;
+  const retryMs = options.retryMs ?? DEFAULT_RETRY_MS;
+  const token = newToken();
+  const deadline = Date.now() + timeoutMs;
+  while (!tryCreate(lockPath, token)) {
+    await breakIfStale(lockPath, staleMs, options.onStaleObserved);
+    if (Date.now() >= deadline) throw new FileLockTimeoutError(lockPath, timeoutMs);
+    await delay2(retryMs + Math.floor(Math.random() * retryMs));
+  }
+  try {
+    return await body();
+  } finally {
+    removeIfOwned(lockPath, token);
+  }
+}
+
 // src/orchestration/outcomes/outcome-store-persistence.ts
-import { appendFileSync as appendFileSync3, readFileSync as readFileSync4, writeFileSync, existsSync as existsSync3 } from "node:fs";
+import { appendFileSync as appendFileSync3, readFileSync as readFileSync5, writeFileSync, existsSync as existsSync3 } from "node:fs";
 var PersistedOutcomeSchema = TaskOutcomeSchema.loose();
 var PersistentOutcomeStore = class extends OutcomeStore {
   filePath;
@@ -6869,7 +6986,7 @@ var PersistentOutcomeStore = class extends OutcomeStore {
       return;
     }
     try {
-      const content = readFileSync4(this.filePath, "utf-8");
+      const content = readFileSync5(this.filePath, "utf-8");
       const lines = content.split("\n").filter((line) => line.trim().length > 0);
       let loaded = 0;
       let skipped = 0;
@@ -6983,7 +7100,7 @@ var VOTE_RECORD_STRATEGIES = /* @__PURE__ */ new Set([
 function toRecordStrategy(strategy) {
   return VOTE_RECORD_STRATEGIES.has(strategy) ? strategy : "simple_majority";
 }
-function recordAuthenticVote(args) {
+async function recordAuthenticVote(args) {
   const allSimulated = args.votes.length > 0 && args.votes.every((v) => v.source === "simulation");
   if (allSimulated) {
     logger6.debug("Skipping authentic vote record \u2014 all votes simulated");
@@ -7000,7 +7117,26 @@ function recordAuthenticVote(args) {
     return { persisted: false, reason: "write-failed", detail };
   }
   const id = `vote-${String(getTimeProvider().now())}-${getRandomProvider().random().toString(36).slice(2, 9)}`;
-  const record = persistVoteRecord({
+  let record;
+  try {
+    record = await underLedgerLock(
+      resolvedPath,
+      () => persistVoteRecord(storeInput(args, id, resolvedPath))
+    );
+  } catch (error) {
+    return lockFailure(resolvedPath, error);
+  }
+  if (record === void 0) {
+    return {
+      persisted: false,
+      reason: "write-failed",
+      detail: voteRecordWriteFailedMessage(resolvedPath)
+    };
+  }
+  return confirmPersisted(record, resolvedPath);
+}
+function storeInput(args, id, filePath) {
+  return {
     id,
     proposal: args.proposal,
     strategy: toRecordStrategy(args.strategy),
@@ -7013,16 +7149,39 @@ function recordAuthenticVote(args) {
     ...args.ratifies !== void 0 ? { ratifies: args.ratifies } : {},
     ...args.ratifiesPr !== void 0 ? { ratifiesPr: args.ratifiesPr } : {},
     ...args.errorPolicy !== void 0 ? { errorPolicy: args.errorPolicy } : {},
+    // #6531: write to the path resolved by the caller, so the read-back and the
+    // path the caller prints are the file the store wrote.
+    filePath,
     logger: logger6
+  };
+}
+async function underLedgerLock(path2, write) {
+  mkdirSync3(dirname3(path2), { recursive: true });
+  return withFileLock(`${path2}.lock`, write);
+}
+function lockFailure(path2, error) {
+  logger6.warn("Failed to take the vote-record ledger lock", {
+    error: getErrorMessage(error),
+    path: path2
   });
-  if (record === void 0) {
-    return {
-      persisted: false,
-      reason: "write-failed",
-      detail: voteRecordWriteFailedMessage(resolvedPath)
-    };
+  const detail = error instanceof FileLockTimeoutError ? `Authentic vote record NOT persisted (${path2}): timed out after ${String(error.timeoutMs)}ms waiting for the ledger lock ${error.lockPath}, held by another live process.` : voteRecordWriteFailedMessage(path2);
+  return { persisted: false, reason: "write-failed", detail };
+}
+function confirmPersisted(record, path2) {
+  if (ledgerHolds(path2, record)) return { persisted: true, record, path: path2 };
+  const detail = `record ${record.id} (sequence ${String(record.sequence)}) is not in ${path2} after the append; it was NOT persisted`;
+  logger6.error(detail);
+  return { persisted: false, reason: "read-back-missed", detail };
+}
+function ledgerHolds(path2, record) {
+  try {
+    return readVoteRecords(path2).records.some(
+      (onDisk) => onDisk.id === record.id && onDisk.hash === record.hash
+    );
+  } catch (error) {
+    logger6.warn("Vote-record read-back failed", { error: getErrorMessage(error), path: path2 });
+    return false;
   }
-  return { persisted: true, record };
 }
 function recordVoteError(proposal, errorMessage) {
   try {
@@ -7217,13 +7376,13 @@ function warnOnce(toolName, logger11) {
 }
 
 // src/mcp/jobs/job-result-store.ts
-import { existsSync as existsSync6, readdirSync, unlinkSync, writeFileSync as writeFileSync3, chmodSync, mkdirSync as mkdirSync3 } from "node:fs";
-import { dirname as dirname3 } from "node:path";
+import { existsSync as existsSync6, readdirSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3, chmodSync, mkdirSync as mkdirSync4 } from "node:fs";
+import { dirname as dirname4 } from "node:path";
 import { z as z14 } from "zod";
 
 // src/mcp/jobs/job-idempotency.ts
 import { createHash as createHash3, randomUUID } from "node:crypto";
-import { existsSync as existsSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync2 } from "node:fs";
 import { z as z12 } from "zod";
 var logger7 = createLogger({ component: "job-idempotency" });
 var IdempotencyIndexEntrySchema = z12.object({
@@ -7320,7 +7479,7 @@ function shortCircuitOrFreshJobId(params) {
 }
 function readIndexEntry(path2) {
   try {
-    const raw = JSON.parse(readFileSync5(path2, "utf-8"));
+    const raw = JSON.parse(readFileSync6(path2, "utf-8"));
     const parsed = IdempotencyIndexEntrySchema.safeParse(raw);
     if (!parsed.success) {
       logger7.warn("Idempotency index file failed schema check", { path: path2 });
@@ -7337,7 +7496,7 @@ function readIndexEntry(path2) {
 }
 
 // src/mcp/jobs/job-result-candidates.ts
-import { existsSync as existsSync5, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync7 } from "node:fs";
 import { join as join3 } from "node:path";
 var candidatePathsResolverForTests;
 function getExplicitDataDir() {
@@ -7409,7 +7568,7 @@ function selectAuthoritativeJobRecord(records) {
 }
 function readJobResultFile(path2, jobId, logger11) {
   try {
-    const raw = JSON.parse(readFileSync6(path2, "utf-8"));
+    const raw = JSON.parse(readFileSync7(path2, "utf-8"));
     const parsed = JobResultSchema.safeParse(raw);
     if (!parsed.success) {
       logger11.warn("Job result file failed schema check", { jobId, path: path2 });
@@ -7648,7 +7807,7 @@ function isAbandonedAt(record, nowMs, abandonedAfter) {
 }
 function jobResultPath(jobId) {
   const primary = candidateJobResultPaths(jobId)[0] ?? nexusDataPathEnsure("jobs", `result-${jobId}.json`);
-  mkdirSync3(dirname3(primary), { recursive: true });
+  mkdirSync4(dirname4(primary), { recursive: true });
   return primary;
 }
 function persistJobRecord(path2, record) {
@@ -7864,7 +8023,7 @@ function sweepRecord(jobId, entry, sweep) {
   }
   const settledAt = record.completedAt ?? record.createdAt;
   if (!isOlderThan(settledAt, sweep.nowMs, sweep.retentionMs)) return "kept";
-  if (!sweep.dryRun) unlinkSync(path2);
+  if (!sweep.dryRun) unlinkSync2(path2);
   return "deleted";
 }
 function sweepKeyEntry(entry, removedJobIds, sweep) {
@@ -7874,7 +8033,7 @@ function sweepKeyEntry(entry, removedJobIds, sweep) {
   if (!isOlderThan(indexEntry.createdAt, sweep.nowMs, sweep.retentionMs)) return null;
   const recordGone = removedJobIds.has(indexEntry.jobId) || !candidateJobResultPaths(indexEntry.jobId).some((p) => existsSync6(p));
   if (!recordGone) return null;
-  if (!sweep.dryRun) unlinkSync(path2);
+  if (!sweep.dryRun) unlinkSync2(path2);
   return "deletedKeys";
 }
 function isOlderThan(isoTimestamp, nowMs, windowMs) {
@@ -9059,9 +9218,9 @@ function finalizeVotingResult(args) {
   if (args.higherOrderResult !== void 0) result.higherOrderResult = args.higherOrderResult;
   return result;
 }
-function recordVoteSideEffects(proposal, strategy, result, logger11, declared) {
+async function recordVoteSideEffects(proposal, strategy, result, logger11, declared) {
   const decisionId = `consensus-${String(getTimeProvider().now())}-${randomUUID2().slice(0, 8)}`;
-  const voteRecord = recordAuthenticVote({
+  const voteRecord = await recordAuthenticVote({
     proposal,
     strategy,
     result: result.result,
@@ -9146,7 +9305,7 @@ async function handleConsensusVote(deps, args, signal, onVoteCollected) {
       approvalPercentage: result.result.approvalPercentage,
       votes: result.votes
     });
-    const { costSummary, voteRecord } = recordVoteSideEffects(
+    const { costSummary, voteRecord } = await recordVoteSideEffects(
       args.proposal,
       result.strategy,
       result,
@@ -9544,4 +9703,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-Z5UEPOL6.js.map
+//# sourceMappingURL=chunk-GXBXZCY7.js.map