nexus-agents 8.89.1 → 8.89.3

package/dist/{ast-rule-runner-YFTJDT7X.js → ast-rule-runner-AMZCLKRV.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-ZKR2UV2O.js";
-import "./chunk-W5DQ2NPP.js";
+} from "./chunk-LFFXUHX3.js";
+import "./chunk-NZN3SWSZ.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -26,4 +26,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-YFTJDT7X.js.map
+//# sourceMappingURL=ast-rule-runner-AMZCLKRV.js.map

package/dist/{child-mcp-config-4ELORIGD.js → child-mcp-config-7DSYI325.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-OITVVSWO.js";
 import {
   createLogger
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -56,4 +56,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-4ELORIGD.js.map
+//# sourceMappingURL=child-mcp-config-7DSYI325.js.map

package/dist/{chunk-UAUG7UEY.js → chunk-3IBALX36.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -740,4 +740,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-UAUG7UEY.js.map
+//# sourceMappingURL=chunk-3IBALX36.js.map

package/dist/{chunk-IF7GVPKD.js → chunk-3PQIIMHN.js}

@@ -2,7 +2,7 @@ import {
   TASK_CATEGORIES,
   getAdaptiveBonus,
   getOutcomeStore
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/cli/doctor-deep.ts
 var CLI_NAMES = ["claude", "gemini", "codex", "opencode"];
@@ -106,4 +106,4 @@ export {
   runDeepDiagnostics,
   formatDeepDiagnostics
 };
-//# sourceMappingURL=chunk-IF7GVPKD.js.map
+//# sourceMappingURL=chunk-3PQIIMHN.js.map

package/dist/{chunk-DJKLTLT2.js → chunk-4IV25ZUM.js}

@@ -1,7 +1,7 @@
 import {
   getRandomProvider,
   getTimeProvider
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/utils/id-utils.ts
 import { randomUUID } from "node:crypto";
@@ -24,4 +24,4 @@ export {
   generateHyphenId,
   generateUUID
 };
-//# sourceMappingURL=chunk-DJKLTLT2.js.map
+//# sourceMappingURL=chunk-4IV25ZUM.js.map

package/dist/{chunk-7SJL3BZB.js → chunk-5GZ4UN5F.js}

@@ -2,7 +2,7 @@ import {
   CACHE_TIMEOUTS,
   createLogger,
   getTimeProvider
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/security/trust-types.ts
 import { z } from "zod";
@@ -610,4 +610,4 @@ export {
   resolveReputationGatingMode,
   gateWithReputation
 };
-//# sourceMappingURL=chunk-7SJL3BZB.js.map
+//# sourceMappingURL=chunk-5GZ4UN5F.js.map

package/dist/{chunk-D6EQ454Z.js → chunk-5UCGVAEZ.js}

@@ -1,14 +1,14 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-FKCYKG6B.js";
+} from "./chunk-SCXCJSTT.js";
 import {
   resolveToken
-} from "./chunk-BNY7OPWU.js";
+} from "./chunk-UDWZJY3V.js";
 import {
   err,
   ok
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/scm/factory.ts
 async function createScmProvider(config) {
@@ -41,4 +41,4 @@ export {
   createScmProvider,
   createGitHubProvider
 };
-//# sourceMappingURL=chunk-D6EQ454Z.js.map
+//# sourceMappingURL=chunk-5UCGVAEZ.js.map

package/dist/{chunk-GNM4YDQA.js → chunk-6FFBX665.js}

@@ -3,7 +3,7 @@ import {
   MODEL_IDS,
   getTimeProvider,
   resolveModelIdentitySync
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/config/model-availability.ts
 var DEFAULT_TTL_MS = 6e4;
@@ -150,4 +150,4 @@ export {
   resetAvailabilityCache,
   filterAvailableModels
 };
-//# sourceMappingURL=chunk-GNM4YDQA.js.map
+//# sourceMappingURL=chunk-6FFBX665.js.map

package/dist/{chunk-7AP6YJM4.js → chunk-AXBEG6VW.js}

@@ -10,13 +10,13 @@ import {
 import {
   assessReputation,
   sanitizeInput
-} from "./chunk-7SJL3BZB.js";
+} from "./chunk-5GZ4UN5F.js";
 import {
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
 import { randomUUID } from "node:crypto";
@@ -416,4 +416,4 @@ export {
   createFailedReview,
   reviewPostingBlock
 };
-//# sourceMappingURL=chunk-7AP6YJM4.js.map
+//# sourceMappingURL=chunk-AXBEG6VW.js.map

package/dist/{chunk-JMBBRHZS.js → chunk-BJXSG5YL.js}

@@ -4,12 +4,12 @@ import {
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-VSLDUTMC.js";
+} from "./chunk-ZTTBGME2.js";
 import {
   assertCustomApiHostResolvesPublic,
   hostnameOf,
   redactApiKey
-} from "./chunk-4VWPE2QB.js";
+} from "./chunk-LZNYQYDU.js";
 import {
   sanitizeErrorDetails
 } from "./chunk-2NDA4DHW.js";
@@ -31,7 +31,7 @@ import {
   isEndpointArmId,
   ok,
   recordUsageEvent
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/adapters/openai-types.ts
 var OPENAI_MODELS = {
@@ -886,4 +886,4 @@ export {
   discoverModels,
   buildOpenAICompatAdapters
 };
-//# sourceMappingURL=chunk-JMBBRHZS.js.map
+//# sourceMappingURL=chunk-BJXSG5YL.js.map

package/dist/{chunk-JT6I3X3S.js → chunk-CG7OSI5P.js}

@@ -5,7 +5,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 import {
   findRepoRoot,
   getActiveWorkspaceRoot,
@@ -290,4 +290,4 @@ export {
   loadPapersRegistry,
   savePapersRegistry
 };
-//# sourceMappingURL=chunk-JT6I3X3S.js.map
+//# sourceMappingURL=chunk-CG7OSI5P.js.map

package/dist/{chunk-WGX2OXDY.js → chunk-EKZ6V7SE.js}

@@ -1,11 +1,11 @@
 import {
   resolveCliSlot
-} from "./chunk-GNM4YDQA.js";
+} from "./chunk-6FFBX665.js";
 import {
   createLogger,
   getTimeProvider,
   isRateLimitText
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/pipeline/expert-bridge.ts
 function resolveCliFromModelString(model) {
@@ -17,6 +17,7 @@ function routedAttribution(routed, model) {
   const cli = routed.routedCli ?? resolveCliFromModelString(model);
   return {
     ...cli !== void 0 && { cli },
+    ...routed.routedArm !== void 0 && { routedArm: routed.routedArm },
     ...routed.routedCli !== void 0 && { routedBy: "composite-router" },
     ...routed.routedDurationMs !== void 0 && { routedDurationMs: routed.routedDurationMs }
   };
@@ -29,7 +30,7 @@ async function getMcpConfigPath() {
   if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;
   mcpConfigInitPromise ??= (async () => {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-4ELORIGD.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-7DSYI325.js");
       const config = await generateMcpConfig();
       cachedMcpConfigPath = config.configPath;
       cachedMcpConfigCleanup = config.cleanup;
@@ -106,8 +107,8 @@ var routerInitPromise = null;
 async function getRouter() {
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-3XP5YV5H.js");
-    const { createCompositeRouter } = await import("./composite-router-R5OHT23F.js");
+    const { createAllAdapters } = await import("./factory-RQEHJ4AW.js");
+    const { createCompositeRouter } = await import("./composite-router-QAYCHEFG.js");
     const adapters = createAllAdapters();
     if (adapters.size === 0) {
       routerInitPromise = null;
@@ -115,7 +116,7 @@ async function getRouter() {
     }
     cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-OLBCD76Q.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-MCQG3PQK.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
@@ -139,6 +140,7 @@ function checkCircuitHealth() {
 function attributionOf(source) {
   return {
     ...source.cli !== void 0 && { cli: source.cli },
+    ...source.routedArm !== void 0 && { routedArm: source.routedArm },
     ...source.routedBy !== void 0 && { routedBy: source.routedBy },
     ...source.routedDurationMs !== void 0 && { routedDurationMs: source.routedDurationMs }
   };
@@ -246,4 +248,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-WGX2OXDY.js.map
+//# sourceMappingURL=chunk-EKZ6V7SE.js.map

package/dist/chunk-EKZ6V7SE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/pipeline/expert-bridge.ts"],"sourcesContent":["/**\n * Expert Bridge — Programmatic access to the execute_expert pipeline (#1693)\n *\n * Provides a clean wrapper for calling experts with the full pipeline:\n * timeout, fallback cascade, degradation detection, heartbeat, outcome recording.\n *\n * DRY: reuses createBuiltInExpert + CompositeRouter instead of reimplementing.\n *\n * @module pipeline/expert-bridge\n */\n\nimport { createLogger, getTimeProvider } from '../core/index.js';\nimport type { BuiltInExpertType } from '../agents/experts/expert-config.js';\nimport { isRateLimitText } from '../adapters/rate-limit-detector.js';\nimport { resolveCliSlot } from '../config/model-availability.js';\nimport type { CliNameLiteral } from '../config/model-capabilities-types.js';\nimport type { OutcomeRoutedBy } from '../orchestration/outcomes/outcome-types.js';\nimport type { RoutingArmId } from '../cli-adapters/types-core.js';\n\n/**\n * Resolves a CLI slot from the model string a (CLI or API) adapter returned.\n * Known models resolve to their exact slot; **unknown** models — new releases\n * or API/openrouter models not in the curated registry — fall back to the\n * vendor-derived slot (#3317 / #3293) so the outcome is recorded against a real\n * slot instead of being dropped with an undefined cli (the api-mode gap).\n * Returns undefined only when no model is present (the bridge failed before\n * dispatch — no execution to attribute).\n */\nfunction resolveCliFromModelString(model: string | undefined): CliNameLiteral | undefined {\n  return resolveCliSlot(model);\n}\n\nconst logger = createLogger({ component: 'expert-bridge' });\n\n/** Base delay for rate limit retry backoff (ms). Scales linearly: 3s, 6s, 9s. */\nconst RATE_LIMIT_BASE_DELAY_MS = 3000;\n\n/** Result of an expert execution. */\nexport interface ExpertBridgeResult {\n  readonly success: boolean;\n  readonly text: string;\n  readonly expertType: BuiltInExpertType;\n  readonly durationMs: number;\n  readonly error?: string;\n  /**\n   * CLI that actually executed the task, resolved from the underlying\n   * `CliResponse.model` via `getCliForModelId`. Undefined when the bridge\n   * failed before dispatch (no adapters / circuit-open / rate-limit cap).\n   * Callers writing to OutcomeStore should use this rather than hardcoding\n   * a cli — see #2823 (#1154 regression).\n   */\n  readonly cli?: CliNameLiteral;\n  /**\n   * Routing arm id the router ran (#6552), when it names one: `api:anthropic`\n   * for the Anthropic API arm, where {@link cli} reads the `claude` slot. An\n   * outcome row records this, so warm start credits the arm that ran.\n   * Undefined when no arm ran, or when the router named only a slot.\n   */\n  readonly routedArm?: RoutingArmId;\n  /**\n   * `'composite-router'` when `CompositeRouter.executeTask` selected the CLI\n   * that produced this result, success or failure (#6521). Set where the\n   * router's decision and the execution meet (`adaptCompositeRouter`), so an\n   * outcome recorder copies it rather than asserting routing on its own.\n   * Undefined when no arm ran: routing failed, no adapters, circuit open.\n   */\n  readonly routedBy?: OutcomeRoutedBy;\n  /**\n   * Wall time of the routed arm's call alone (#6521), from the router. Unlike\n   * {@link durationMs} it excludes expert import, MCP-config setup and\n   * rate-limit backoff. Undefined when no arm ran.\n   */\n  readonly routedDurationMs?: number;\n  /**\n   * Total tokens (input + output) the underlying CLI/adapter reported for this\n   * call, when available (#3396). Best-effort: `CliResponse.usage` is optional\n   * — CLI-subprocess paths whose `extractUsage` returns null leave this\n   * undefined. Consumers (budget enforcement #3395, model.called attribution\n   * #3387, routing-experience metrics) must tolerate `undefined`.\n   */\n  readonly tokensUsed?: number;\n  /**\n   * Concrete model id the underlying adapter reported (`CliResponse.model`),\n   * when present (#3387). Distinct from {@link cli} (the slot): one CLI can run\n   * several models. Undefined when the adapter didn't report a model or the\n   * bridge failed before dispatch. Required to emit a `model.called` event.\n   */\n  readonly model?: string;\n  /**\n   * Input/output token split from the adapter's `CliResponse.usage` (#3387),\n   * when reported. Best-effort like {@link tokensUsed}; both undefined together\n   * when no usage was available. `tokensIn + tokensOut` reconciles with\n   * `tokensUsed` (single source of truth — both derive from the same record).\n   */\n  readonly tokensIn?: number;\n  readonly tokensOut?: number;\n}\n\n/** Attribution of a routed arm's run, on success and on failure (#6521). */\ninterface RoutedAttribution {\n  cli?: CliNameLiteral;\n  routedArm?: RoutingArmId;\n  routedBy?: OutcomeRoutedBy;\n  routedDurationMs?: number;\n}\n\n/** Minimal router interface for the bridge. */\ninterface RouterLike {\n  executeTask(task: { content: string; options?: Record<string, unknown> | undefined }): Promise<{\n    ok: boolean;\n    value: RoutedAttribution & {\n      text: string;\n      tokensUsed?: number;\n      model?: string;\n      tokensIn?: number;\n      tokensOut?: number;\n    };\n    error: RoutedAttribution & { message: string };\n  }>;\n}\n\n/**\n * The bridge's attribution for a router result (#6521). The router's own\n * `routedCli` is authoritative: the model string can name another vendor's\n * slot (an `api:custom-openai` arm shows as opencode while serving a GPT\n * model). The model-derived CLI is the fallback only when no arm is named.\n * No `routedCli` on a failure means routing failed before an arm ran, and\n * then there is nothing to attribute.\n */\nfunction routedAttribution(\n  routed: { routedCli?: CliNameLiteral; routedArm?: RoutingArmId; routedDurationMs?: number },\n  model: string | undefined\n): RoutedAttribution {\n  const cli = routed.routedCli ?? resolveCliFromModelString(model);\n  return {\n    ...(cli !== undefined && { cli }),\n    ...(routed.routedArm !== undefined && { routedArm: routed.routedArm }),\n    ...(routed.routedCli !== undefined && { routedBy: 'composite-router' as const }),\n    ...(routed.routedDurationMs !== undefined && { routedDurationMs: routed.routedDurationMs }),\n  };\n}\n\n// Cached router — lazily initialized, reused across calls within a session\nlet cachedRouter: RouterLike | null = null;\n\n// Cached MCP config — generated once, reused across expert calls (#1708)\nlet cachedMcpConfigPath: string | null = null;\n// Cached cleanup for the cached config's tempdir (closes #2946). Previously\n// the cleanup returned by `generateMcpConfig` was thrown away, so\n// `/tmp/nexus-mcp-XXXXXX/` accumulated one entry per MCP server lifetime.\n// Stored here + invoked by `shutdownExpertBridge()` from the server's\n// graceful-shutdown path.\nlet cachedMcpConfigCleanup: (() => Promise<void>) | null = null;\n// Coalesces concurrent init under voter fan-out (closes #2969). consensus_vote\n// fans out N=7 callers on cold start; without this each one ran the full init\n// including a mkdtemp() that the loser N-1 instances never cleaned up.\nlet mcpConfigInitPromise: Promise<string | null> | null = null;\n\n/** Get or create cached MCP config path for expert CLI sessions (#1708). */\nasync function getMcpConfigPath(): Promise<string | null> {\n  if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;\n  mcpConfigInitPromise ??= (async (): Promise<string | null> => {\n    try {\n      const { generateMcpConfig } = await import('../cli-adapters/child-mcp-config.js');\n      const config = await generateMcpConfig();\n      cachedMcpConfigPath = config.configPath;\n      cachedMcpConfigCleanup = config.cleanup;\n      return cachedMcpConfigPath;\n    } catch {\n      mcpConfigInitPromise = null; // allow retry on next call\n      return null; // MCP config not available — experts run without tools\n    }\n  })();\n  return mcpConfigInitPromise;\n}\n\n/**\n * Removes the cached MCP-config tempdir (closes #2946). Invoke from the\n * server's graceful-shutdown path so stale nexus-mcp-* tempdirs (under\n * the OS tmpdir, see child-mcp-config.ts) don't accumulate across daemon\n * restarts. Idempotent; safe to call multiple times. Never throws —\n * cleanup failures are logged and swallowed.\n */\nexport async function shutdownExpertBridge(): Promise<void> {\n  const cleanup = cachedMcpConfigCleanup;\n  if (cleanup === null) return;\n  cachedMcpConfigCleanup = null;\n  cachedMcpConfigPath = null;\n  mcpConfigInitPromise = null;\n  try {\n    await cleanup();\n  } catch (error: unknown) {\n    const msg = error instanceof Error ? error.message : String(error);\n    logger.debug('Expert-bridge MCP-config cleanup failed', { error: msg });\n  }\n}\n\n/** Cached circuit breaker for health monitoring (#1766). */\nlet cachedCircuitBreaker: {\n  getHealthStatus(): {\n    systemHealthy: boolean;\n    healthyCount: number;\n    clis: ReadonlyArray<{ name: string; healthy: boolean }>;\n  };\n} | null = null;\n\n/**\n * Adapt a CompositeRouter to the narrower RouterLike interface used by this\n * bridge. Previously did `as unknown as RouterLike` which hid any structural\n * mismatch between CompositeRouter's `Result<CliResponse, CliError>` and\n * RouterLike's flat `{ ok, value: { text }, error: { message } }` shape.\n * If CliResponse renames `.text` → `.output` (or similar), this adapter\n * breaks at compile time instead of silently returning wrong data (#1921).\n */\n/**\n * Total tokens from a best-effort `CliResponse.usage` record (#3396). Prefers\n * the reported `totalTokens`; falls back to input+output; returns undefined\n * when no usage was reported (so callers can distinguish \"0 tokens\" — which\n * never happens for a real call — from \"unknown\").\n */\nexport function totalTokensFromUsage(\n  usage: { totalTokens?: number; inputTokens?: number; outputTokens?: number } | undefined\n): number | undefined {\n  if (usage === undefined) return undefined;\n  if (typeof usage.totalTokens === 'number') return usage.totalTokens;\n  const total = (usage.inputTokens ?? 0) + (usage.outputTokens ?? 0);\n  return total > 0 ? total : undefined;\n}\n\n/**\n * Per-direction token split from a best-effort `CliResponse.usage` record\n * (#3387). Unlike {@link totalTokensFromUsage} this keeps `tokensIn`/`tokensOut`\n * separate — the granularity `ModelCalledEvent` requires for attribution.\n * Returns undefined when no usage was reported or both directions are zero (no\n * real call), so callers skip emitting a noise event instead of recording\n * zeros. Reconciles with the total: `tokensIn + tokensOut === totalTokensFromUsage`.\n */\nexport function tokenSplitFromUsage(\n  usage: { inputTokens?: number; outputTokens?: number; totalTokens?: number } | undefined\n): { tokensIn: number; tokensOut: number } | undefined {\n  if (usage === undefined) return undefined;\n  const tokensIn = usage.inputTokens ?? 0;\n  const tokensOut = usage.outputTokens ?? 0;\n  if (tokensIn + tokensOut === 0) return undefined;\n  return { tokensIn, tokensOut };\n}\n\nfunction adaptCompositeRouter(\n  compositeRouter: import('../cli-adapters/composite-router.js').ICompositeRouter\n): RouterLike {\n  return {\n    async executeTask(task): Promise<{\n      ok: boolean;\n      value: RoutedAttribution & {\n        text: string;\n        tokensUsed?: number;\n        model?: string;\n        tokensIn?: number;\n        tokensOut?: number;\n      };\n      error: RoutedAttribution & { message: string };\n    }> {\n      const cliTask: import('../cli-adapters/types.js').CliTask = {\n        content: task.content,\n        ...(task.options !== undefined ? { options: task.options } : {}),\n      };\n      const result = await compositeRouter.executeTask(cliTask);\n      if (result.ok) {\n        // #2823: surface which CLI actually executed so callers writing to\n        // OutcomeStore don't have to hardcode 'claude' (the bug #1154 fixed\n        // and that regressed into the pipeline/ tree). Derive via the\n        // canonical model→cli mapping in the registry — if the underlying\n        // adapter didn't set `model` or the model isn't in the registry,\n        // cli stays undefined and downstream code can skip the record\n        // rather than lie.\n        // #6521: the arm the router ran is the attribution; see routedAttribution.\n        const attribution = routedAttribution(result.value, result.value.model);\n        // #3396: surface token usage (best-effort) so budget enforcement,\n        // attribution, and routing-experience metrics get real numbers instead\n        // of zeros. `usage` is optional and `totalTokens` may be absent — fall\n        // back to input+output, and leave undefined when no usage was reported.\n        const tokensUsed = totalTokensFromUsage(result.value.usage);\n        // #3387: also surface the concrete model + per-direction token split so\n        // a meaningful `model.called` event can be emitted. Both derive from the\n        // same CliResponse, so tokensIn+tokensOut reconciles with tokensUsed.\n        const model = result.value.model;\n        const split = tokenSplitFromUsage(result.value.usage);\n        return {\n          ok: true,\n          value: {\n            text: result.value.text,\n            ...attribution,\n            ...(tokensUsed !== undefined && { tokensUsed }),\n            ...(model !== undefined && { model }),\n            ...(split !== undefined && { tokensIn: split.tokensIn, tokensOut: split.tokensOut }),\n          },\n          error: { message: '' },\n        };\n      }\n      // #6521 I1: a routed failure keeps its arm, so it is recorded and the\n      // loop does not see only the arm's successes.\n      const routed = 'routedCli' in result.error ? result.error : {};\n      return {\n        ok: false,\n        value: { text: '' },\n        error: { message: result.error.message, ...routedAttribution(routed, undefined) },\n      };\n    },\n  };\n}\n\n// Coalesces concurrent router init the same way mcpConfigInitPromise does\n// (closes #2969). N=7 voter fan-out previously ran createAllAdapters() N times\n// — N sets of CLI probe subprocesses, all but one discarded.\nlet routerInitPromise: Promise<RouterLike | null> | null = null;\n\n/** Get or create a cached CompositeRouter with circuit breaker monitoring. */\nasync function getRouter(): Promise<RouterLike | null> {\n  if (cachedRouter !== null) return cachedRouter;\n  routerInitPromise ??= (async (): Promise<RouterLike | null> => {\n    // ROUTER CONSTRUCTION, a distinct operation from adapter acquisition\n    // (#5191, ratified 5/6). `createCompositeRouter` needs\n    // `Map<RoutingArmId, ICliAdapter>`; `getGlobalRegistry()` returns\n    // `IResilientAdapter` (extends `IModelAdapter`) one CLI at a time, so the\n    // canonical path cannot type-check here.\n    //\n    // It also should not be used: the router IS the selection/failover layer,\n    // so resilient-wrapped arms would nest two failover mechanisms, and the\n    // shared circuit breaker would make an arm report unavailable without the\n    // router ever testing it. That is the doctor-probe defect (#5209) applied\n    // to routing — and this map is the LinUCB arm space, so a coupled arm\n    // availability would distort exploration signals.\n    //\n    // Pinned by `router-operation.test.ts`.\n    const { createAllAdapters } = await import('../cli-adapters/factory.js');\n    const { createCompositeRouter } = await import('../cli-adapters/composite-router.js');\n    const adapters = createAllAdapters();\n    if (adapters.size === 0) {\n      routerInitPromise = null; // allow retry once adapters become available\n      return null;\n    }\n    cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));\n\n    // Initialize circuit breaker monitoring (#1766)\n    try {\n      const { createCliCircuitBreakerIntegration } =\n        await import('../cli-adapters/cli-circuit-breaker.js');\n      cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);\n    } catch (error: unknown) {\n      // Circuit breaker not available — continue without it. Log so we can\n      // notice if initialization silently stops working (#1913 Class B).\n      const msg = error instanceof Error ? error.message : String(error);\n      logger.debug('Circuit breaker init failed; continuing without it', { error: msg });\n    }\n\n    return cachedRouter;\n  })();\n  return routerInitPromise;\n}\n\n/** Check CLI health before dispatch (#1766). */\nfunction checkCircuitHealth(): { healthy: boolean; message: string } {\n  if (cachedCircuitBreaker === null) return { healthy: true, message: '' };\n  const status = cachedCircuitBreaker.getHealthStatus();\n  if (!status.systemHealthy) {\n    return {\n      healthy: false,\n      message: `All CLI circuits open (${String(status.healthyCount)}/${String(status.clis.length)} healthy)`,\n    };\n  }\n  return { healthy: true, message: '' };\n}\n\n/** The attribution fields present on `source`; absent ones stay absent. */\nfunction attributionOf(source: RoutedAttribution): RoutedAttribution {\n  return {\n    ...(source.cli !== undefined && { cli: source.cli }),\n    ...(source.routedArm !== undefined && { routedArm: source.routedArm }),\n    ...(source.routedBy !== undefined && { routedBy: source.routedBy }),\n    ...(source.routedDurationMs !== undefined && { routedDurationMs: source.routedDurationMs }),\n  };\n}\n\n/** A successful router result as an {@link ExpertBridgeResult}; absent fields stay absent. */\nfunction toSuccessResult(\n  value: Awaited<ReturnType<RouterLike['executeTask']>>['value'],\n  expertType: BuiltInExpertType,\n  durationMs: number\n): ExpertBridgeResult {\n  return {\n    success: true,\n    text: value.text,\n    expertType,\n    durationMs,\n    ...attributionOf(value),\n    ...(value.tokensUsed !== undefined && { tokensUsed: value.tokensUsed }),\n    ...(value.model !== undefined && { model: value.model }),\n    ...(value.tokensIn !== undefined && { tokensIn: value.tokensIn }),\n    ...(value.tokensOut !== undefined && { tokensOut: value.tokensOut }),\n  };\n}\n\n/** Dispatch task to router with rate limit retry (#1802). */\nasync function dispatchWithRateLimitRetry(\n  router: RouterLike,\n  task: { content: string; options?: Record<string, unknown> | undefined },\n  expertType: BuiltInExpertType,\n  start: number\n): Promise<ExpertBridgeResult> {\n  const maxAttempts = 3;\n  for (let attempt = 0; attempt < maxAttempts; attempt++) {\n    const result = await router.executeTask(task);\n    const durationMs = getTimeProvider().now() - start;\n\n    if (result.ok) {\n      logger.info('Expert executed successfully', {\n        expertType,\n        durationMs,\n        cli: result.value.cli,\n      });\n      return toSuccessResult(result.value, expertType, durationMs);\n    }\n\n    const isRateLimit = isRateLimitText(result.error.message);\n    if (isRateLimit && attempt < maxAttempts - 1) {\n      const backoffMs = RATE_LIMIT_BASE_DELAY_MS * (attempt + 1);\n      logger.warn('Expert rate limited, retrying', { expertType, attempt: attempt + 1, backoffMs });\n      await new Promise((resolve) => setTimeout(resolve, backoffMs));\n      continue;\n    }\n\n    // Only the final attempt is attributed: a rate-limited attempt that is\n    // retried is not recorded as a routed outcome of its own.\n    logger.warn('Expert execution failed', { expertType, error: result.error.message });\n    return {\n      success: false,\n      text: '',\n      expertType,\n      durationMs,\n      error: result.error.message,\n      ...attributionOf(result.error),\n    };\n  }\n\n  return {\n    success: false,\n    text: '',\n    expertType,\n    durationMs: getTimeProvider().now() - start,\n    error: 'Max retry attempts exceeded',\n  };\n}\n\n/**\n * Execute an expert task with the full nexus-agents expert pipeline.\n *\n * Creates a built-in expert, executes via CompositeRouter (for intelligent\n * CLI routing), and records outcomes. Falls back gracefully on failure.\n *\n * @param expertType - Built-in expert type (code, architecture, security, qa, etc.)\n * @param prompt - Task prompt for the expert\n * @returns Expert result with text output\n */\nexport function executeExpert(\n  expertType: BuiltInExpertType,\n  prompt: string\n): Promise<ExpertBridgeResult>;\nexport function executeExpert(\n  expertType: BuiltInExpertType,\n  prompt: string,\n  // eslint-disable-next-line @typescript-eslint/unified-signatures -- Preserve the published two-argument API signature.\n  options: { workDir?: string | undefined }\n): Promise<ExpertBridgeResult>;\n/** Execute with an optional working directory for the expert's CLI subprocess. */\nexport async function executeExpert(\n  expertType: BuiltInExpertType,\n  prompt: string,\n  options?: { workDir?: string | undefined }\n): Promise<ExpertBridgeResult> {\n  const start = getTimeProvider().now();\n  try {\n    const { BUILT_IN_EXPERTS } = await import('../agents/experts/expert-config.js');\n    const config = BUILT_IN_EXPERTS[expertType];\n    const fullPrompt = `${config.systemPrompt}\\n\\n${prompt}`;\n\n    const router = await getRouter();\n    if (router === null) {\n      return {\n        success: false,\n        text: `[No adapters] ${prompt}`,\n        expertType,\n        durationMs: getTimeProvider().now() - start,\n        error: 'No CLI adapters available',\n      };\n    }\n\n    // Check circuit breaker health before dispatch (#1766)\n    const health = checkCircuitHealth();\n    if (!health.healthy) {\n      logger.warn('Circuit breaker: all CLIs unavailable', { expertType, reason: health.message });\n      return {\n        success: false,\n        text: '',\n        expertType,\n        durationMs: getTimeProvider().now() - start,\n        error: health.message,\n      };\n    }\n\n    // Pass MCP config so CLI experts can call nexus-agents tools (#1708)\n    const mcpConfigPath = await getMcpConfigPath();\n    const task: { content: string; options?: Record<string, unknown> | undefined } = {\n      content: fullPrompt,\n    };\n    if (mcpConfigPath !== null) task.options = { mcpConfigPath };\n    if (options?.workDir !== undefined) {\n      task.options = { ...task.options, workDir: options.workDir };\n    }\n\n    return await dispatchWithRateLimitRetry(router, task, expertType, start);\n  } catch (error) {\n    const durationMs = getTimeProvider().now() - start;\n    const msg = error instanceof Error ? error.message : String(error);\n    logger.warn('Expert bridge error', { expertType, error: msg });\n    return { success: false, text: '', expertType, durationMs, error: msg };\n  }\n}\n"],"mappings":";;;;;;;;;;AA4BA,SAAS,0BAA0B,OAAuD;AACxF,SAAO,eAAe,KAAK;AAC7B;AAEA,IAAM,SAAS,aAAa,EAAE,WAAW,gBAAgB,CAAC;AAG1D,IAAM,2BAA2B;AA8FjC,SAAS,kBACP,QACA,OACmB;AACnB,QAAM,MAAM,OAAO,aAAa,0BAA0B,KAAK;AAC/D,SAAO;AAAA,IACL,GAAI,QAAQ,UAAa,EAAE,IAAI;AAAA,IAC/B,GAAI,OAAO,cAAc,UAAa,EAAE,WAAW,OAAO,UAAU;AAAA,IACpE,GAAI,OAAO,cAAc,UAAa,EAAE,UAAU,mBAA4B;AAAA,IAC9E,GAAI,OAAO,qBAAqB,UAAa,EAAE,kBAAkB,OAAO,iBAAiB;AAAA,EAC3F;AACF;AAGA,IAAI,eAAkC;AAGtC,IAAI,sBAAqC;AAMzC,IAAI,yBAAuD;AAI3D,IAAI,uBAAsD;AAG1D,eAAe,mBAA2C;AACxD,MAAI,wBAAwB,KAAM,QAAO;AACzC,4BAA0B,YAAoC;AAC5D,QAAI;AACF,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,gCAAqC;AAChF,YAAM,SAAS,MAAM,kBAAkB;AACvC,4BAAsB,OAAO;AAC7B,+BAAyB,OAAO;AAChC,aAAO;AAAA,IACT,QAAQ;AACN,6BAAuB;AACvB,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,SAAO;AACT;AASA,eAAsB,uBAAsC;AAC1D,QAAM,UAAU;AAChB,MAAI,YAAY,KAAM;AACtB,2BAAyB;AACzB,wBAAsB;AACtB,yBAAuB;AACvB,MAAI;AACF,UAAM,QAAQ;AAAA,EAChB,SAAS,OAAgB;AACvB,UAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,WAAO,MAAM,2CAA2C,EAAE,OAAO,IAAI,CAAC;AAAA,EACxE;AACF;AAGA,IAAI,uBAMO;AAgBJ,SAAS,qBACd,OACoB;AACpB,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,MAAM,gBAAgB,SAAU,QAAO,MAAM;AACxD,QAAM,SAAS,MAAM,eAAe,MAAM,MAAM,gBAAgB;AAChE,SAAO,QAAQ,IAAI,QAAQ;AAC7B;AAUO,SAAS,oBACd,OACqD;AACrD,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,WAAW,MAAM,eAAe;AACtC,QAAM,YAAY,MAAM,gBAAgB;AACxC,MAAI,WAAW,cAAc,EAAG,QAAO;AACvC,SAAO,EAAE,UAAU,UAAU;AAC/B;AAEA,SAAS,qBACP,iBACY;AACZ,SAAO;AAAA,IACL,MAAM,YAAY,MAUf;AACD,YAAM,UAAsD;AAAA,QAC1D,SAAS,KAAK;AAAA,QACd,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAChE;AACA,YAAM,SAAS,MAAM,gBAAgB,YAAY,OAAO;AACxD,UAAI,OAAO,IAAI;AASb,cAAM,cAAc,kBAAkB,OAAO,OAAO,OAAO,MAAM,KAAK;AAKtE,cAAM,aAAa,qBAAqB,OAAO,MAAM,KAAK;AAI1D,cAAM,QAAQ,OAAO,MAAM;AAC3B,cAAM,QAAQ,oBAAoB,OAAO,MAAM,KAAK;AACpD,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM,OAAO,MAAM;AAAA,YACnB,GAAG;AAAA,YACH,GAAI,eAAe,UAAa,EAAE,WAAW;AAAA,YAC7C,GAAI,UAAU,UAAa,EAAE,MAAM;AAAA,YACnC,GAAI,UAAU,UAAa,EAAE,UAAU,MAAM,UAAU,WAAW,MAAM,UAAU;AAAA,UACpF;AAAA,UACA,OAAO,EAAE,SAAS,GAAG;AAAA,QACvB;AAAA,MACF;AAGA,YAAM,SAAS,eAAe,OAAO,QAAQ,OAAO,QAAQ,CAAC;AAC7D,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,EAAE,MAAM,GAAG;AAAA,QAClB,OAAO,EAAE,SAAS,OAAO,MAAM,SAAS,GAAG,kBAAkB,QAAQ,MAAS,EAAE;AAAA,MAClF;AAAA,IACF;AAAA,EACF;AACF;AAKA,IAAI,oBAAuD;AAG3D,eAAe,YAAwC;AACrD,MAAI,iBAAiB,KAAM,QAAO;AAClC,yBAAuB,YAAwC;AAe7D,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,uBAA4B;AACvE,UAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,gCAAqC;AACpF,UAAM,WAAW,kBAAkB;AACnC,QAAI,SAAS,SAAS,GAAG;AACvB,0BAAoB;AACpB,aAAO;AAAA,IACT;AACA,mBAAe,qBAAqB,sBAAsB,QAAQ,CAAC;AAGnE,QAAI;AACF,YAAM,EAAE,mCAAmC,IACzC,MAAM,OAAO,mCAAwC;AACvD,6BAAuB,mCAAmC,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;AAAA,IAClF,SAAS,OAAgB;AAGvB,YAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,aAAO,MAAM,sDAAsD,EAAE,OAAO,IAAI,CAAC;AAAA,IACnF;AAEA,WAAO;AAAA,EACT,GAAG;AACH,SAAO;AACT;AAGA,SAAS,qBAA4D;AACnE,MAAI,yBAAyB,KAAM,QAAO,EAAE,SAAS,MAAM,SAAS,GAAG;AACvE,QAAM,SAAS,qBAAqB,gBAAgB;AACpD,MAAI,CAAC,OAAO,eAAe;AACzB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,0BAA0B,OAAO,OAAO,YAAY,CAAC,IAAI,OAAO,OAAO,KAAK,MAAM,CAAC;AAAA,IAC9F;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,SAAS,GAAG;AACtC;AAGA,SAAS,cAAc,QAA8C;AACnE,SAAO;AAAA,IACL,GAAI,OAAO,QAAQ,UAAa,EAAE,KAAK,OAAO,IAAI;AAAA,IAClD,GAAI,OAAO,cAAc,UAAa,EAAE,WAAW,OAAO,UAAU;AAAA,IACpE,GAAI,OAAO,aAAa,UAAa,EAAE,UAAU,OAAO,SAAS;AAAA,IACjE,GAAI,OAAO,qBAAqB,UAAa,EAAE,kBAAkB,OAAO,iBAAiB;AAAA,EAC3F;AACF;AAGA,SAAS,gBACP,OACA,YACA,YACoB;AACpB,SAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM,MAAM;AAAA,IACZ;AAAA,IACA;AAAA,IACA,GAAG,cAAc,KAAK;AAAA,IACtB,GAAI,MAAM,eAAe,UAAa,EAAE,YAAY,MAAM,WAAW;AAAA,IACrE,GAAI,MAAM,UAAU,UAAa,EAAE,OAAO,MAAM,MAAM;AAAA,IACtD,GAAI,MAAM,aAAa,UAAa,EAAE,UAAU,MAAM,SAAS;AAAA,IAC/D,GAAI,MAAM,cAAc,UAAa,EAAE,WAAW,MAAM,UAAU;AAAA,EACpE;AACF;AAGA,eAAe,2BACb,QACA,MACA,YACA,OAC6B;AAC7B,QAAM,cAAc;AACpB,WAAS,UAAU,GAAG,UAAU,aAAa,WAAW;AACtD,UAAM,SAAS,MAAM,OAAO,YAAY,IAAI;AAC5C,UAAM,aAAa,gBAAgB,EAAE,IAAI,IAAI;AAE7C,QAAI,OAAO,IAAI;AACb,aAAO,KAAK,gCAAgC;AAAA,QAC1C;AAAA,QACA;AAAA,QACA,KAAK,OAAO,MAAM;AAAA,MACpB,CAAC;AACD,aAAO,gBAAgB,OAAO,OAAO,YAAY,UAAU;AAAA,IAC7D;AAEA,UAAM,cAAc,gBAAgB,OAAO,MAAM,OAAO;AACxD,QAAI,eAAe,UAAU,cAAc,GAAG;AAC5C,YAAM,YAAY,4BAA4B,UAAU;AACxD,aAAO,KAAK,iCAAiC,EAAE,YAAY,SAAS,UAAU,GAAG,UAAU,CAAC;AAC5F,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,SAAS,CAAC;AAC7D;AAAA,IACF;AAIA,WAAO,KAAK,2BAA2B,EAAE,YAAY,OAAO,OAAO,MAAM,QAAQ,CAAC;AAClF,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,OAAO,OAAO,MAAM;AAAA,MACpB,GAAG,cAAc,OAAO,KAAK;AAAA,IAC/B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN;AAAA,IACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,IACtC,OAAO;AAAA,EACT;AACF;AAuBA,eAAsB,cACpB,YACA,QACA,SAC6B;AAC7B,QAAM,QAAQ,gBAAgB,EAAE,IAAI;AACpC,MAAI;AACF,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAAoC;AAC9E,UAAM,SAAS,iBAAiB,UAAU;AAC1C,UAAM,aAAa,GAAG,OAAO,YAAY;AAAA;AAAA,EAAO,MAAM;AAEtD,UAAM,SAAS,MAAM,UAAU;AAC/B,QAAI,WAAW,MAAM;AACnB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM,iBAAiB,MAAM;AAAA,QAC7B;AAAA,QACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,QACtC,OAAO;AAAA,MACT;AAAA,IACF;AAGA,UAAM,SAAS,mBAAmB;AAClC,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,KAAK,yCAAyC,EAAE,YAAY,QAAQ,OAAO,QAAQ,CAAC;AAC3F,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM;AAAA,QACN;AAAA,QACA,YAAY,gBAAgB,EAAE,IAAI,IAAI;AAAA,QACtC,OAAO,OAAO;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,gBAAgB,MAAM,iBAAiB;AAC7C,UAAM,OAA2E;AAAA,MAC/E,SAAS;AAAA,IACX;AACA,QAAI,kBAAkB,KAAM,MAAK,UAAU,EAAE,cAAc;AAC3D,QAAI,SAAS,YAAY,QAAW;AAClC,WAAK,UAAU,EAAE,GAAG,KAAK,SAAS,SAAS,QAAQ,QAAQ;AAAA,IAC7D;AAEA,WAAO,MAAM,2BAA2B,QAAQ,MAAM,YAAY,KAAK;AAAA,EACzE,SAAS,OAAO;AACd,UAAM,aAAa,gBAAgB,EAAE,IAAI,IAAI;AAC7C,UAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,WAAO,KAAK,uBAAuB,EAAE,YAAY,OAAO,IAAI,CAAC;AAC7D,WAAO,EAAE,SAAS,OAAO,MAAM,IAAI,YAAY,YAAY,OAAO,IAAI;AAAA,EACxE;AACF;","names":[]}

package/dist/{chunk-FG6BJ3QZ.js → chunk-ILA4UGXI.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/context/session-memory.ts
 import * as fs from "node:fs";
@@ -370,4 +370,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-FG6BJ3QZ.js.map
+//# sourceMappingURL=chunk-ILA4UGXI.js.map

package/dist/{chunk-Z6TYHJ34.js → chunk-JYKRCQSU.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-FKCYKG6B.js";
+} from "./chunk-SCXCJSTT.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -12,10 +12,10 @@ import {
   resolveEnvMode,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-7SJL3BZB.js";
+} from "./chunk-5GZ4UN5F.js";
 import {
   hasToken
-} from "./chunk-BNY7OPWU.js";
+} from "./chunk-UDWZJY3V.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   createLogger,
@@ -23,7 +23,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/security/firewall/firewall-policy-mode.ts
 import { z } from "zod";
@@ -2650,4 +2650,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-Z6TYHJ34.js.map
+//# sourceMappingURL=chunk-JYKRCQSU.js.map

package/dist/{chunk-T3QVXJD7.js → chunk-JYZNPK62.js}

@@ -5,23 +5,23 @@ import {
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-VSLDUTMC.js";
+} from "./chunk-ZTTBGME2.js";
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-PRM2R525.js";
+} from "./chunk-XJAGCUMD.js";
 import {
   assertCustomApiHostResolvesPublic,
   hostnameOf,
   readGatewayEnv,
   redactApiKey,
   validateCustomApiBaseUrl
-} from "./chunk-4VWPE2QB.js";
+} from "./chunk-LZNYQYDU.js";
 import {
   nexusMkdtempSync
 } from "./chunk-OITVVSWO.js";
 import {
   getAvailabilityCache
-} from "./chunk-GNM4YDQA.js";
+} from "./chunk-6FFBX665.js";
 import {
   sanitizeOutput
 } from "./chunk-2NDA4DHW.js";
@@ -30,13 +30,13 @@ import {
 } from "./chunk-QZUG667L.js";
 import {
   generateHyphenId
-} from "./chunk-DJKLTLT2.js";
+} from "./chunk-4IV25ZUM.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG,
   getCliCircuitBreakerSnapshot,
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-FXOD3W5M.js";
+} from "./chunk-XU2SJKFK.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
@@ -81,7 +81,7 @@ import {
   resolveRetryAfterMs,
   retryAfterMsFromContext,
   warnIfGatewayCostUndeclared
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 import {
   parseBoolValue
 } from "./chunk-LWOX65CP.js";
@@ -5263,4 +5263,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-T3QVXJD7.js.map
+//# sourceMappingURL=chunk-JYZNPK62.js.map

package/dist/{chunk-4K3WJ7KR.js → chunk-KQE7EFBF.js}

@@ -8,13 +8,13 @@ import {
   loadTechniquesRegistry,
   resolveInsideRoot,
   savePapersRegistry
-} from "./chunk-JT6I3X3S.js";
+} from "./chunk-CG7OSI5P.js";
 import {
   resolveToken
-} from "./chunk-BNY7OPWU.js";
+} from "./chunk-UDWZJY3V.js";
 import {
   getToolMemory
-} from "./chunk-V7KPBMW3.js";
+} from "./chunk-VM4HZT3B.js";
 import {
   capitalizeWords,
   tokenizeFiltered,
@@ -43,7 +43,7 @@ import {
   ok,
   registerPersistentDistillerFactory,
   sigmoidConfidence
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 import {
   ensureLearningDir,
   getRulesFile
@@ -4275,4 +4275,4 @@ export {
   DEFAULT_CONTEXT_BUDGET_TOKENS,
   getContextPromptPrefix
 };
-//# sourceMappingURL=chunk-4K3WJ7KR.js.map
+//# sourceMappingURL=chunk-KQE7EFBF.js.map

package/dist/{chunk-O456HC2T.js → chunk-KSCQRZJZ.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-HFONXAJI.js";
+} from "./chunk-QX42N7TE.js";
 import {
   sanitizeErrorDetails
 } from "./chunk-2NDA4DHW.js";
@@ -23,7 +23,7 @@ import {
   getTimeProvider,
   ok,
   resolveToolClassGuardMs
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 import {
   getNexusDataDir,
   parseBoolValue
@@ -2342,4 +2342,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-O456HC2T.js.map
+//# sourceMappingURL=chunk-KSCQRZJZ.js.map

package/dist/{chunk-ZKR2UV2O.js → chunk-LFFXUHX3.js}

@@ -3,7 +3,7 @@ import {
   ValidationError,
   createLogger,
   formatZodError
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/security/ast-rule-runner.ts
 import { existsSync } from "node:fs";
@@ -241,4 +241,4 @@ export {
   collectAstQaFindings,
   runAstQaRules
 };
-//# sourceMappingURL=chunk-ZKR2UV2O.js.map
+//# sourceMappingURL=chunk-LFFXUHX3.js.map

package/dist/{chunk-4VWPE2QB.js → chunk-LZNYQYDU.js}

@@ -7,7 +7,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 
 // src/adapters/sdk/gateway-env.ts
 function readTrimmed(env, name) {
@@ -315,4 +315,4 @@ export {
   validateCustomApiBaseUrl,
   assertCustomApiHostResolvesPublic
 };
-//# sourceMappingURL=chunk-4VWPE2QB.js.map
+//# sourceMappingURL=chunk-LZNYQYDU.js.map

package/dist/{chunk-RFUOEY6O.js → chunk-MS5VFQE3.js}

@@ -1,6 +1,6 @@
 import {
   isGatewayModelAdapter
-} from "./chunk-JMBBRHZS.js";
+} from "./chunk-BJXSG5YL.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -25,20 +25,20 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-O456HC2T.js";
+} from "./chunk-KSCQRZJZ.js";
 import {
   VERSION
-} from "./chunk-HFONXAJI.js";
+} from "./chunk-QX42N7TE.js";
 import {
   UNRESOLVED_MODEL_ID,
   assessPanelIndependence,
   countDistinctModels,
   createEvent,
   getGlobalRegistry
-} from "./chunk-VQBPRW5D.js";
+} from "./chunk-TLFZPJOY.js";
 import {
   getToolMemory
-} from "./chunk-V7KPBMW3.js";
+} from "./chunk-VM4HZT3B.js";
 import {
   authRemediation,
   classifyExtractedError,
@@ -48,7 +48,7 @@ import {
   isTimeoutText,
   sleep,
   withTimeout
-} from "./chunk-T3QVXJD7.js";
+} from "./chunk-JYZNPK62.js";
 import {
   sanitizeErrorDetails,
   sanitizeOutput
@@ -88,7 +88,7 @@ import {
   resolveClassGuardMs,
   resolveVoteTimeout,
   stepBus
-} from "./chunk-W5DQ2NPP.js";
+} from "./chunk-NZN3SWSZ.js";
 import {
   ensureLearningDir,
   getOutcomesFile
@@ -6435,7 +6435,7 @@ function logPartialProposal(bounded, log) {
 }
 async function runContrarianCheck(proposal, log, opts) {
   try {
-    const { executeExpert } = await import("./expert-bridge-QVGTBYJR.js");
+    const { executeExpert } = await import("./expert-bridge-ZG2IA3RJ.js");
     const bounded = boundArtifactForReview(proposal, CONTRARIAN_PROPOSAL_BUDGET, "proposal");
     logPartialProposal(bounded, log);
     const result = await executeExpert("architecture", buildContrarianPrompt(bounded, opts), {
@@ -9703,4 +9703,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-RFUOEY6O.js.map
+//# sourceMappingURL=chunk-MS5VFQE3.js.map