nexus-agents 8.97.0 → 8.98.0

package/dist/{ast-rule-runner-QQIRWXJ4.js → ast-rule-runner-YBAZFEUB.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-A7LUQRS4.js";
-import "./chunk-UDWF2XCA.js";
+} from "./chunk-NITPS7VD.js";
+import "./chunk-IXDWCPN3.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -26,4 +26,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-QQIRWXJ4.js.map
+//# sourceMappingURL=ast-rule-runner-YBAZFEUB.js.map

package/dist/{child-mcp-config-JTOIFT6B.js → child-mcp-config-VUERRL3V.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-OITVVSWO.js";
 import {
   createLogger
-} from "./chunk-UDWF2XCA.js";
+} from "./chunk-IXDWCPN3.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -56,4 +56,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-JTOIFT6B.js.map
+//# sourceMappingURL=child-mcp-config-VUERRL3V.js.map

package/dist/{chunk-7TXK4ZU3.js → chunk-3EIK7A4M.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-IR25EHPP.js";
+} from "./chunk-JGL3IKNA.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -21,7 +21,7 @@ import {
   hasMeasuredCategory,
   isDeclaredNeverDeprecate,
   isRegisteredToolName
-} from "./chunk-UDWF2XCA.js";
+} from "./chunk-IXDWCPN3.js";
 import {
   getNexusDataDir,
   nexusDataPath
@@ -2284,4 +2284,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-7TXK4ZU3.js.map
+//# sourceMappingURL=chunk-3EIK7A4M.js.map

package/dist/{chunk-UVPFSWB3.js → chunk-62PINSC6.js}

@@ -5,7 +5,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-UDWF2XCA.js";
+} from "./chunk-IXDWCPN3.js";
 import {
   findRepoRoot,
   getActiveWorkspaceRoot,
@@ -290,4 +290,4 @@ export {
   loadPapersRegistry,
   savePapersRegistry
 };
-//# sourceMappingURL=chunk-UVPFSWB3.js.map
+//# sourceMappingURL=chunk-62PINSC6.js.map

package/dist/{chunk-E3DEDHRY.js → chunk-64R6TZYA.js}

@@ -1,9 +1,9 @@
 import {
   loadPapersRegistry
-} from "./chunk-UVPFSWB3.js";
+} from "./chunk-62PINSC6.js";
 import {
   getErrorMessage
-} from "./chunk-UDWF2XCA.js";
+} from "./chunk-IXDWCPN3.js";
 
 // src/cli/research-helpers-synthesize.ts
 import { z } from "zod";
@@ -876,4 +876,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=chunk-E3DEDHRY.js.map
+//# sourceMappingURL=chunk-64R6TZYA.js.map

package/dist/{chunk-OVE3YJSE.js → chunk-663MAM24.js}

@@ -1,6 +1,6 @@
 import {
   getErrorMessage
-} from "./chunk-UDWF2XCA.js";
+} from "./chunk-IXDWCPN3.js";
 
 // src/cli/setup-config.ts
 import { copyFileSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
@@ -77,4 +77,4 @@ function ensureBackup(outputPath) {
 export {
   runConfigInitSync
 };
-//# sourceMappingURL=chunk-OVE3YJSE.js.map
+//# sourceMappingURL=chunk-663MAM24.js.map

package/dist/{chunk-HKTZFZSM.js → chunk-7JV3YVMZ.js}

@@ -8,13 +8,13 @@ import {
   loadTechniquesRegistry,
   resolveInsideRoot,
   savePapersRegistry
-} from "./chunk-UVPFSWB3.js";
+} from "./chunk-62PINSC6.js";
 import {
   resolveToken
-} from "./chunk-ON4YR4KS.js";
+} from "./chunk-JD4PKLC2.js";
 import {
   getToolMemory
-} from "./chunk-F7CB7C3P.js";
+} from "./chunk-VU4LLVHS.js";
 import {
   capitalizeWords,
   tokenizeFiltered,
@@ -43,7 +43,7 @@ import {
   ok,
   registerPersistentDistillerFactory,
   sigmoidConfidence
-} from "./chunk-UDWF2XCA.js";
+} from "./chunk-IXDWCPN3.js";
 import {
   ensureLearningDir,
   getRulesFile
@@ -4275,4 +4275,4 @@ export {
   DEFAULT_CONTEXT_BUDGET_TOKENS,
   getContextPromptPrefix
 };
-//# sourceMappingURL=chunk-HKTZFZSM.js.map
+//# sourceMappingURL=chunk-7JV3YVMZ.js.map

package/dist/{chunk-KB7VXRC4.js → chunk-DEKU3ACZ.js}

@@ -10,7 +10,7 @@ import {
   isRateLimitText,
   observedArmDisplaySlot,
   ok
-} from "./chunk-UDWF2XCA.js";
+} from "./chunk-IXDWCPN3.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -592,4 +592,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-KB7VXRC4.js.map
+//# sourceMappingURL=chunk-DEKU3ACZ.js.map

package/dist/{chunk-FUU6LXIA.js → chunk-EAB77S7U.js}

@@ -1,11 +1,11 @@
 import {
   resolveCliSlot
-} from "./chunk-YUYYMYPU.js";
+} from "./chunk-MK4KQJZV.js";
 import {
   createLogger,
   getTimeProvider,
   isRateLimitText
-} from "./chunk-UDWF2XCA.js";
+} from "./chunk-IXDWCPN3.js";
 
 // src/pipeline/expert-bridge.ts
 function resolveCliFromModelString(model) {
@@ -30,7 +30,7 @@ async function getMcpConfigPath() {
   if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;
   mcpConfigInitPromise ??= (async () => {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-JTOIFT6B.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-VUERRL3V.js");
       const config = await generateMcpConfig();
       cachedMcpConfigPath = config.configPath;
       cachedMcpConfigCleanup = config.cleanup;
@@ -107,8 +107,8 @@ var routerInitPromise = null;
 async function getRouter() {
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-QJVIUHGU.js");
-    const { createCompositeRouter } = await import("./composite-router-BLVJAOFR.js");
+    const { createAllAdapters } = await import("./factory-O427FFK5.js");
+    const { createCompositeRouter } = await import("./composite-router-JODIOJ3T.js");
     const adapters = createAllAdapters();
     if (adapters.size === 0) {
       routerInitPromise = null;
@@ -116,7 +116,7 @@ async function getRouter() {
     }
     cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-AWZO2BAC.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-BVQU6TSV.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
@@ -248,4 +248,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-FUU6LXIA.js.map
+//# sourceMappingURL=chunk-EAB77S7U.js.map

package/dist/{chunk-GUEUV3ND.js → chunk-FJS4ASFA.js}

@@ -1,6 +1,6 @@
 import {
   generateSecurityPlan
-} from "./chunk-MEBD2TMO.js";
+} from "./chunk-ZUUXVQI6.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-4GDMHCKX.js";
@@ -21,10 +21,10 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-LFGVIWQ7.js";
+} from "./chunk-JORUH2K3.js";
 import {
   executeExpert
-} from "./chunk-FUU6LXIA.js";
+} from "./chunk-EAB77S7U.js";
 import {
   DEPRECATED_MODE_ALIAS_INPUT,
   JobStatusSchema,
@@ -46,6 +46,7 @@ import {
   defaultReplayEnvelope,
   deprecatedModeWarning,
   dispatchFieldDefaultSync,
+  ensureGatewayDiscovered,
   heartbeatJob,
   initTaskState,
   isAbandonedJob,
@@ -73,7 +74,10 @@ import {
   withFileLock,
   withWarnings,
   writeJobCancelled
-} from "./chunk-AVGO46BN.js";
+} from "./chunk-Y2ESO2BO.js";
+import {
+  parseGatewayExtraHeaders
+} from "./chunk-PHN4KDGD.js";
 import {
   allOf,
   anyOf
@@ -81,7 +85,7 @@ import {
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-E3DEDHRY.js";
+} from "./chunk-64R6TZYA.js";
 import {
   IssueTriage,
   createAuditTrail,
@@ -90,13 +94,13 @@ import {
   createGraphAuditBridge,
   emitPipelinePolicyEvent,
   readActionRefusal
-} from "./chunk-R6EP6UNC.js";
+} from "./chunk-MDYMP54L.js";
 import {
   sanitizeInput
-} from "./chunk-CYP33W2C.js";
+} from "./chunk-V66T427F.js";
 import {
   withPrerequisite
-} from "./chunk-7TXK4ZU3.js";
+} from "./chunk-3EIK7A4M.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -124,17 +128,17 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-IR25EHPP.js";
+} from "./chunk-JGL3IKNA.js";
 import {
   VERSION
-} from "./chunk-6I6JETP7.js";
+} from "./chunk-L3YQNS32.js";
 import {
   EventTopics,
   UNRESOLVED_MODEL_ID,
   createEvent,
   getGlobalEventBus,
   getGlobalRegistry
-} from "./chunk-DGWVJ6HB.js";
+} from "./chunk-SJBEXKHC.js";
 import {
   IDENTIFIER_RE,
   LANG_VALUES,
@@ -167,7 +171,7 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-HKTZFZSM.js";
+} from "./chunk-7JV3YVMZ.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
@@ -175,25 +179,25 @@ import {
   loadTechniquesRegistry,
   resolveInsideRoot,
   resolveRegistryRoot
-} from "./chunk-UVPFSWB3.js";
+} from "./chunk-62PINSC6.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-ON4YR4KS.js";
+} from "./chunk-JD4PKLC2.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
   MemoryType,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-F7CB7C3P.js";
+} from "./chunk-VU4LLVHS.js";
 import {
   STOPWORDS,
   truncateWithInfo
 } from "./chunk-7LP6VJRP.js";
 import {
   createSessionMemory
-} from "./chunk-6562BJ3L.js";
+} from "./chunk-Q5NXGSDC.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -212,24 +216,24 @@ import {
   isCliDisabled,
   sleep,
   withTimeout
-} from "./chunk-OADHASVD.js";
+} from "./chunk-YFRCIJ5F.js";
 import {
   BaseAdapter,
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-YKTA5UBL.js";
+} from "./chunk-T6CLFLGL.js";
 import {
   DEFAULTS
-} from "./chunk-2A52CTLB.js";
+} from "./chunk-OUEHXYFU.js";
 import {
   resolveGatewayEnv
-} from "./chunk-3CNLLCDQ.js";
+} from "./chunk-R45O47CR.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-YUYYMYPU.js";
+} from "./chunk-MK4KQJZV.js";
 import {
   sanitizeErrorDetails
 } from "./chunk-2NDA4DHW.js";
@@ -241,7 +245,7 @@ import {
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-LFZUQNUH.js";
+} from "./chunk-LKAH6IYE.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -359,7 +363,7 @@ import {
   selectStrategyByManifest,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-UDWF2XCA.js";
+} from "./chunk-IXDWCPN3.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
@@ -1058,6 +1062,17 @@ var NexusEnvSchema = z10.object({
     if (!parsed.ok) ctx.addIssue({ code: "custom", message: parsed.error.message });
   }).optional(),
   NEXUS_MODEL_REGISTRY_OVERLAY: z10.string().optional(),
+  // #6608: the header carrying the gateway key instead of `Authorization:
+  // Bearer` (OPENAI_COMPAT_AUTH_HEADER_ENV), e.g. `api-key`. The runtime
+  // reader warns on an illegal header name and keeps the bearer default.
+  NEXUS_OPENAI_COMPAT_AUTH_HEADER: z10.string().optional(),
+  // #6608: extra static gateway headers, `Name=value,Name2=value2`
+  // (OPENAI_COMPAT_EXTRA_HEADERS_ENV). Validated by the runtime parser; a
+  // value can be a credential, so an invalid one is logged redacted.
+  NEXUS_OPENAI_COMPAT_EXTRA_HEADERS: z10.string().superRefine((v, ctx) => {
+    const parsed = parseGatewayExtraHeaders(v);
+    if (!parsed.ok) ctx.addIssue({ code: "custom", message: parsed.reason });
+  }).optional(),
   // #4392 increment 2 step 2: the `<endpoint>` of the `api:<endpoint>` arm the
   // voter gateway registers as (OPENAI_COMPAT_ENDPOINT_ENV; spelled out for
   // the coverage script). Same shape rule as a scoped NEXUS_GATEWAY_COST key,
@@ -1144,7 +1159,8 @@ var NexusEnvSchema = z10.object({
 var KNOWN_NAMES = Object.keys(NexusEnvSchema.shape);
 var REDACTED_VALUE_VARS = /* @__PURE__ */ new Set([
   "NEXUS_GATEWAY_COST",
-  "NEXUS_OPENAI_COMPAT_ENDPOINT"
+  "NEXUS_OPENAI_COMPAT_ENDPOINT",
+  "NEXUS_OPENAI_COMPAT_EXTRA_HEADERS"
 ]);
 var REDACTED_VALUE = "<redacted>";
 var DYNAMIC_FAMILIES = [
@@ -30360,7 +30376,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-QI63DBJI.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-VENNHB6Q.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -44972,6 +44988,7 @@ function policyDecisionFields(decision) {
   }
 }
 var DROP_WARN_INTERVAL = 1e3;
+var MAX_CLOSE_DRAIN_PASSES = 3;
 var AuditLogger = class {
   storage;
   logger;
@@ -45342,7 +45359,8 @@ var AuditLogger = class {
    * so an overlapping flush-timer tick cannot spawn parallel drains (see
    * #2979). A caller arriving while a flush is already running awaits the
    * existing promise; their newly-queued events, if any, are picked up by
-   * the next flush.
+   * the next flush — the timer's, or the extra passes {@link close} runs
+   * (#6573).
    */
   async flush() {
     if (this.inFlightFlush !== null) return this.inFlightFlush;
@@ -45362,10 +45380,47 @@ var AuditLogger = class {
       clearInterval(this.flushTimer);
       this.flushTimer = null;
     }
-    await this.flush();
+    await this.drainForClose();
     await this.storage.close();
     this.logger.info("AuditLogger closed");
   }
+  /**
+   * Flush until the queue is empty (#6573).
+   *
+   * One flush() is not enough: when a drain is already in flight, flush()
+   * joins it, and that drain spliced the queue before any event logged during
+   * it — `system.shutdown.begin` among them — arrived. `closed` is set before
+   * this runs, so log() admits nothing new: the in-flight drain plus one fresh
+   * pass empties the queue. The bound turns a regression of that invariant
+   * into a reported failure instead of a spin.
+   *
+   * A failed pass is not retried here. flush() has already counted and
+   * reported it; a batch it could not link (lock timeout) is back in the queue
+   * unwritten, so nothing is written twice, and with no later flush to come it
+   * is stranded — named here so the loss is not silent.
+   */
+  async drainForClose() {
+    for (let pass = 0; pass < MAX_CLOSE_DRAIN_PASSES; pass++) {
+      try {
+        await this.flush();
+      } catch (err2) {
+        if (this.eventQueue.length > 0) {
+          this.logger.error(
+            "AUDIT CLOSE \u2014 queued audit events were NOT persisted and will be lost",
+            err2 instanceof Error ? err2 : new AuditError(String(err2)),
+            { strandedEvents: this.eventQueue.length }
+          );
+        }
+        throw err2;
+      }
+      if (this.eventQueue.length === 0) return;
+    }
+    const error = new AuditError(
+      `${String(this.eventQueue.length)} audit events still queued after ${String(MAX_CLOSE_DRAIN_PASSES)} flush passes at close`
+    );
+    this.recordPersistFailure(error);
+    throw error;
+  }
 };
 function createAuditLogger(config, storage, logger60, onPersistFailure) {
   return new AuditLogger(config, storage, logger60, onPersistFailure);
@@ -46331,7 +46386,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-DP27HRIY.js");
+    const { createIssueTriage } = await import("./issue-triage-BIPWKL66.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num2 = issueMatch[2] ?? "";
@@ -46359,7 +46414,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-WP7PJDNV.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-DAJAYNMQ.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -46733,7 +46788,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-44KYPBV4.js");
+    const { executeVoting } = await import("./consensus-vote-PJ5LS36B.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -47466,7 +47521,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-K63UQWAN.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-VOFCMXU6.js");
     const { getLearningDir } = await import("./learning-persistence-FB4U5AX2.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -47528,7 +47583,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-FRZ3EZBT.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-S2MZCJBE.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -47699,7 +47754,7 @@ function createVoteStage({ config, startStage }) {
     const strategy = config.votingStrategy ?? "higher_order";
     await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
     try {
-      const { executeVoting } = await import("./consensus-vote-44KYPBV4.js");
+      const { executeVoting } = await import("./consensus-vote-PJ5LS36B.js");
       const votingResult = await executeVoting(
         {
           proposal: buildVoteProposal(plan, research),
@@ -48459,7 +48514,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-YZIE7PAH.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-NEHXHTWK.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -48477,7 +48532,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-K63UQWAN.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-VOFCMXU6.js");
     const { getLearningDir } = await import("./learning-persistence-FB4U5AX2.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -49042,7 +49097,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-MOJKZLS5.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-Z7JMKOOQ.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -49113,7 +49168,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-5GNN6EQ2.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-7GPJJ577.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -49808,6 +49863,7 @@ function resolvePanelReadBudget(seats, bindingCapBytes, registry = getDefaultReg
   };
 }
 async function resolvePanelSeats(roles, gatewayAdapters, logger60) {
+  await ensureGatewayDiscovered();
   const fallback = resolveAdapter({ gatewayAdapters });
   if ("error" in fallback) return { ok: false, reason: `no adapter: ${fallback.error}` };
   try {
@@ -52628,7 +52684,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-H7WD46ZF.js");
+    const { createScmProvider } = await import("./factory-LGXPPPBX.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -53600,7 +53656,7 @@ async function probeSource(source, includeModelIds) {
   }
 }
 async function defaultSources(includeOpenRouter) {
-  const { createAllAdapters: createAllAdapters2 } = await import("./factory-QJVIUHGU.js");
+  const { createAllAdapters: createAllAdapters2 } = await import("./factory-O427FFK5.js");
   const adapters = createAllAdapters2();
   return buildDefaultModelSources(adapters, { includeOpenRouter });
 }
@@ -56932,4 +56988,4 @@ export {
   startPipelineEventBridge,
   shutdownPipelineEventBridge
 };
-//# sourceMappingURL=chunk-GUEUV3ND.js.map
+//# sourceMappingURL=chunk-FJS4ASFA.js.map