nexus-agents 9.1.0 → 9.2.0

package/dist/{ast-rule-runner-IROJO2LR.js → ast-rule-runner-DFEUIC2E.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-D26ZNDI3.js";
-import "./chunk-NHNXANOF.js";
+} from "./chunk-625YPLMG.js";
+import "./chunk-SU47CN4Q.js";
 import "./chunk-XBEKMUTO.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
@@ -28,4 +28,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-IROJO2LR.js.map
+//# sourceMappingURL=ast-rule-runner-DFEUIC2E.js.map

package/dist/{child-mcp-config-SOEVU3N4.js → child-mcp-config-ALJL5I7K.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-JPFRRNRR.js";
 import {
   createLogger
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 import "./chunk-XBEKMUTO.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
@@ -11,8 +11,8 @@ import "./chunk-4PN3UVZV.js";
 import "./chunk-PX6F3LHL.js";
 
 // src/cli-adapters/child-mcp-config.ts
-import { writeFile, rm } from "node:fs/promises";
-import { rmSync } from "node:fs";
+import { rm } from "node:fs/promises";
+import { rmSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 var logger = createLogger({ component: "swe-bench-mcp-config" });
 var activeMcpDirs = /* @__PURE__ */ new Set();
@@ -65,7 +65,7 @@ async function generateMcpConfig(options) {
     }
   };
   try {
-    await writeFile(configPath, JSON.stringify(config, null, 2), "utf-8");
+    writeFileSync(configPath, JSON.stringify(config, null, 2), "utf-8");
     return { configPath, cleanup };
   } catch (error) {
     await cleanup();
@@ -75,4 +75,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-SOEVU3N4.js.map
+//# sourceMappingURL=child-mcp-config-ALJL5I7K.js.map

package/dist/child-mcp-config-ALJL5I7K.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli-adapters/child-mcp-config.ts"],"sourcesContent":["/**\n * nexus-agents/cli-adapters - Child CLI MCP Config Generator\n *\n * Generates MCP server configuration for child Claude CLI sessions so\n * spawned agents can call back into nexus-agents' MCP tools (memory,\n * research, etc.). Used by `pipeline/expert-bridge.ts` to give expert\n * agents tool access. Originally lived under `swe-bench/` (#1413);\n * relocated here in #2515 — the helper is generic CLI-spawn\n * infrastructure, not benchmark-specific.\n *\n * The generated config grants NO tool approvals. It only tells the child\n * where the nexus-agents MCP server is; whether an expert may actually call\n * one of its tools follows the host's Claude permission settings (for\n * example `defaultMode`). Measured 2026-09-24: in auto mode the calls run,\n * in default mode they are refused (#6784). An unused `allowedTools` list\n * that read like a guard but was never passed to the CLI was removed then.\n *\n * @module cli-adapters/child-mcp-config\n */\n\nimport { rm } from 'node:fs/promises';\nimport { rmSync, writeFileSync } from 'node:fs';\nimport { nexusMkdtempSync } from '../config/nexus-tmp-dir.js';\nimport { join } from 'node:path';\nimport { createLogger } from '../core/index.js';\n\nconst logger = createLogger({ component: 'swe-bench-mcp-config' });\n\n// Async finally blocks cannot run after process.exit (#4631). One listener\n// covers concurrent configs; SIGKILL cannot execute any in-process cleanup.\nconst activeMcpDirs = new Set<string>();\n\nfunction cleanupOnExit(): void {\n  for (const dir of activeMcpDirs) {\n    try {\n      rmSync(dir, { recursive: true, force: true });\n    } catch (error: unknown) {\n      logger.debug('MCP-config exit cleanup failed', {\n        error: error instanceof Error ? error.message : String(error),\n      });\n    }\n  }\n}\n\n/**\n * MCP server entry in Claude CLI config format.\n */\ninterface McpServerEntry {\n  readonly command: string;\n  readonly args: readonly string[];\n  readonly env?: Readonly<Record<string, string>>;\n}\n\n/**\n * MCP config file format for Claude CLI (--mcp-config).\n */\ninterface McpConfigFile {\n  readonly mcpServers: Readonly<Record<string, McpServerEntry>>;\n}\n\n/**\n * Options for generating MCP config.\n */\nexport interface McpConfigOptions {\n  /** Path to nexus-agents CLI entry point. */\n  readonly cliPath?: string;\n  /** Additional environment variables for the MCP server. */\n  readonly env?: Readonly<Record<string, string>>;\n}\n\n/**\n * Resolves the nexus-agents CLI path.\n * Uses the built dist/cli.js relative to this package.\n */\nfunction resolveCliPath(override?: string): string {\n  if (override !== undefined) return override;\n  // Resolve relative to this file: src/swe-bench/ → dist/cli.js\n  // At runtime we're in dist/swe-bench/, so go up one level\n  const distDir = join(__dirname, '..');\n  return join(distDir, 'cli.js');\n}\n\n/**\n * Env marker naming a child server (#6795). The child's stdio caller is an\n * expert CLI driven by a model, not the operator, so the child must not\n * measure it at tier 1; `connectTransport` reads this and records the caller\n * as unmeasured.\n */\nconst MCP_CHILD_ENV = 'NEXUS_MCP_CHILD';\n\n/**\n * Builds the MCP config object for a nexus-agents server.\n */\nfunction buildConfig(options?: McpConfigOptions): McpConfigFile {\n  const cliPath = resolveCliPath(options?.cliPath);\n\n  const entry: McpServerEntry = {\n    command: 'node',\n    args: [cliPath, '--mode=server'],\n    // The child marker is applied LAST so caller-supplied env cannot unset it.\n    env: { ...options?.env, [MCP_CHILD_ENV]: '1' },\n  };\n\n  return {\n    mcpServers: {\n      'nexus-agents': entry,\n    },\n  };\n}\n\n/**\n * Generated MCP config with path and cleanup function.\n */\nexport interface GeneratedMcpConfig {\n  /** Path to the generated config file. */\n  readonly configPath: string;\n  /** Cleanup function to remove temp files. */\n  readonly cleanup: () => Promise<void>;\n}\n\n/**\n * Generates an MCP config file for Claude CLI child sessions.\n *\n * Creates a temporary JSON file that can be passed to `claude --mcp-config`.\n * Returns the file path and a cleanup function.\n */\nexport async function generateMcpConfig(options?: McpConfigOptions): Promise<GeneratedMcpConfig> {\n  const config = buildConfig(options);\n\n  // Creation and exit registration must occur in one turn: async mkdtemp\n  // can finish in its worker before JS can register cleanup (#4631).\n  const tempDir = nexusMkdtempSync('nexus-mcp-');\n  const configPath = join(tempDir, 'mcp-config.json');\n\n  if (activeMcpDirs.size === 0) process.on('exit', cleanupOnExit);\n  activeMcpDirs.add(tempDir);\n\n  const cleanup = async (): Promise<void> => {\n    try {\n      await rm(tempDir, { recursive: true, force: true });\n      activeMcpDirs.delete(tempDir);\n      if (activeMcpDirs.size === 0) process.removeListener('exit', cleanupOnExit);\n    } catch (e: unknown) {\n      logger.debug('Best-effort cleanup failed', {\n        error: e instanceof Error ? e.message : String(e),\n      });\n    }\n  };\n\n  try {\n    // An async open can create the file after exit cleanup lists an empty\n    // directory, making its rmdir fail with ENOTEMPTY (#7121).\n    writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');\n    return { configPath, cleanup };\n  } catch (error: unknown) {\n    await cleanup();\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAoBA,SAAS,UAAU;AACnB,SAAS,QAAQ,qBAAqB;AAEtC,SAAS,YAAY;AAGrB,IAAM,SAAS,aAAa,EAAE,WAAW,uBAAuB,CAAC;AAIjE,IAAM,gBAAgB,oBAAI,IAAY;AAEtC,SAAS,gBAAsB;AAC7B,aAAW,OAAO,eAAe;AAC/B,QAAI;AACF,aAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IAC9C,SAAS,OAAgB;AACvB,aAAO,MAAM,kCAAkC;AAAA,QAC7C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAgCA,SAAS,eAAe,UAA2B;AACjD,MAAI,aAAa,OAAW,QAAO;AAGnC,QAAM,UAAU,KAAK,WAAW,IAAI;AACpC,SAAO,KAAK,SAAS,QAAQ;AAC/B;AAQA,IAAM,gBAAgB;AAKtB,SAAS,YAAY,SAA2C;AAC9D,QAAM,UAAU,eAAe,SAAS,OAAO;AAE/C,QAAM,QAAwB;AAAA,IAC5B,SAAS;AAAA,IACT,MAAM,CAAC,SAAS,eAAe;AAAA;AAAA,IAE/B,KAAK,EAAE,GAAG,SAAS,KAAK,CAAC,aAAa,GAAG,IAAI;AAAA,EAC/C;AAEA,SAAO;AAAA,IACL,YAAY;AAAA,MACV,gBAAgB;AAAA,IAClB;AAAA,EACF;AACF;AAkBA,eAAsB,kBAAkB,SAAyD;AAC/F,QAAM,SAAS,YAAY,OAAO;AAIlC,QAAM,UAAU,iBAAiB,YAAY;AAC7C,QAAM,aAAa,KAAK,SAAS,iBAAiB;AAElD,MAAI,cAAc,SAAS,EAAG,SAAQ,GAAG,QAAQ,aAAa;AAC9D,gBAAc,IAAI,OAAO;AAEzB,QAAM,UAAU,YAA2B;AACzC,QAAI;AACF,YAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAClD,oBAAc,OAAO,OAAO;AAC5B,UAAI,cAAc,SAAS,EAAG,SAAQ,eAAe,QAAQ,aAAa;AAAA,IAC5E,SAAS,GAAY;AACnB,aAAO,MAAM,8BAA8B;AAAA,QACzC,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI;AAGF,kBAAc,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,OAAO;AAClE,WAAO,EAAE,YAAY,QAAQ;AAAA,EAC/B,SAAS,OAAgB;AACvB,UAAM,QAAQ;AACd,UAAM;AAAA,EACR;AACF;","names":[]}

package/dist/{chunk-PF2TM7CW.js → chunk-3JRQWWBD.js}

@@ -6,7 +6,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 import {
   CACHE_TIMEOUTS
 } from "./chunk-4PN3UVZV.js";
@@ -511,4 +511,4 @@ export {
   resolveReputationGatingMode,
   gateWithReputation
 };
-//# sourceMappingURL=chunk-PF2TM7CW.js.map
+//# sourceMappingURL=chunk-3JRQWWBD.js.map

package/dist/{chunk-FVYQWWPB.js → chunk-42TS2JOS.js}

@@ -4,16 +4,16 @@ import {
   createOpenAICompatAdapter,
   discoverGatewayCatalog,
   readOpenAICompatEnv
-} from "./chunk-T5IBXFFY.js";
+} from "./chunk-DJ7QTY5J.js";
 import {
   CUSTOM_API_DEFAULT_MODEL
 } from "./chunk-PRX4ERTK.js";
 import {
   gatewayProxyUrl
-} from "./chunk-LM7NMCEE.js";
+} from "./chunk-GAJRBRED.js";
 import {
   redactGatewaySecrets
-} from "./chunk-FBJ6D2GF.js";
+} from "./chunk-ZVSJPKEZ.js";
 import {
   DEFAULT_OPENAI_COMPAT_ENDPOINT,
   GATEWAY_COST_ENV,
@@ -31,7 +31,7 @@ import {
   isCliDisabled,
   symbols,
   writeLine
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/cli/doctor-gateway-slots.ts
 var FAMILY_SLOTS = [
@@ -398,4 +398,4 @@ export {
   formatGatewayReport,
   formatGatewaySlotWarnings
 };
-//# sourceMappingURL=chunk-FVYQWWPB.js.map
+//# sourceMappingURL=chunk-42TS2JOS.js.map

package/dist/{chunk-MPAAWIDI.js → chunk-4ROIBRK5.js}

@@ -15,7 +15,7 @@ import {
   ok,
   resolveGatewayServedSlot,
   unenforcedAccessModeRefusal
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/cli-adapters/cli-circuit-breaker.ts
 var CATEGORY_TO_FALLBACK = {
@@ -224,4 +224,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-MPAAWIDI.js.map
+//# sourceMappingURL=chunk-4ROIBRK5.js.map

package/dist/{chunk-RJDZOOPA.js → chunk-5IMXQQQX.js}

@@ -5,14 +5,14 @@ import {
   getCurrentRequestContext,
   runWithRequestContext,
   serverCallerInfo
-} from "./chunk-BQPQIOEB.js";
+} from "./chunk-GNGIZJAC.js";
 import {
   DEFAULT_EXECUTION_MODE
 } from "./chunk-ECJ52NSK.js";
 import {
   sanitizeErrorDetails,
   sanitizeStringLeaves
-} from "./chunk-AJ37AWCG.js";
+} from "./chunk-A5D7666X.js";
 import {
   SecurityError,
   TOOL_MANIFEST,
@@ -26,7 +26,7 @@ import {
   getTimeProvider,
   ok,
   resolveInsideRoot
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 import {
   getNexusDataDir,
   parseBoolValue
@@ -2343,4 +2343,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-RJDZOOPA.js.map
+//# sourceMappingURL=chunk-5IMXQQQX.js.map

package/dist/{chunk-D26ZNDI3.js → chunk-625YPLMG.js}

@@ -4,7 +4,7 @@ import {
   createLogger,
   formatZodError,
   resolveInsideRoot
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/security/ast-rule-runner.ts
 import { existsSync } from "node:fs";
@@ -241,4 +241,4 @@ export {
   collectAstQaFindings,
   runAstQaRules
 };
-//# sourceMappingURL=chunk-D26ZNDI3.js.map
+//# sourceMappingURL=chunk-625YPLMG.js.map

package/dist/{chunk-AJ37AWCG.js → chunk-A5D7666X.js}

@@ -1,6 +1,6 @@
 import {
   redactCredentialShapes
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/security/output-sanitizer.ts
 var REDACTED_KEY_PLACEHOLDER = "[REDACTED_KEY]";
@@ -54,4 +54,4 @@ export {
   sanitizeErrorDetails,
   sanitizeStringLeaves
 };
-//# sourceMappingURL=chunk-AJ37AWCG.js.map
+//# sourceMappingURL=chunk-A5D7666X.js.map

package/dist/{chunk-NRB6TOUO.js → chunk-AWF35M67.js}

@@ -1,14 +1,14 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-VL5XUWRA.js";
+} from "./chunk-VOJCSOVL.js";
 import {
   resolveToken
-} from "./chunk-4E72H7XZ.js";
+} from "./chunk-UNIRQWHT.js";
 import {
   err,
   ok
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/scm/factory.ts
 async function createScmProvider(config) {
@@ -41,4 +41,4 @@ export {
   createScmProvider,
   createGitHubProvider
 };
-//# sourceMappingURL=chunk-NRB6TOUO.js.map
+//# sourceMappingURL=chunk-AWF35M67.js.map

package/dist/{chunk-T5IBXFFY.js → chunk-DJ7QTY5J.js}

@@ -8,16 +8,16 @@ import {
   requireApiKey,
   validateApiKeyPresence,
   withGatewayUsageRecording
-} from "./chunk-LM7NMCEE.js";
+} from "./chunk-GAJRBRED.js";
 import {
   assertCustomApiHostResolvesPublic,
   hostnameOf,
   redactGatewaySecrets
-} from "./chunk-FBJ6D2GF.js";
+} from "./chunk-ZVSJPKEZ.js";
 import {
   REDACTED_KEY_PLACEHOLDER,
   sanitizeErrorDetails
-} from "./chunk-AJ37AWCG.js";
+} from "./chunk-A5D7666X.js";
 import {
   CUSTOM_API_ALLOW_PRIVATE_ENV,
   ConfigError,
@@ -39,7 +39,7 @@ import {
   ok,
   readModelAllowlist,
   refineGatewayCatalog
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/adapters/openai-compat-adapter.ts
 import OpenAI2 from "openai";
@@ -992,4 +992,4 @@ export {
   createOpenAICompatAdapter,
   buildOpenAICompatAdapters
 };
-//# sourceMappingURL=chunk-T5IBXFFY.js.map
+//# sourceMappingURL=chunk-DJ7QTY5J.js.map

package/dist/{chunk-GTYGMOMW.js → chunk-DYVYV7NZ.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-VL5XUWRA.js";
+} from "./chunk-VOJCSOVL.js";
 import {
   ReputationCache,
   assessReputation,
@@ -9,10 +9,10 @@ import {
   resolveEnvMode,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-PF2TM7CW.js";
+} from "./chunk-3JRQWWBD.js";
 import {
   hasToken
-} from "./chunk-4E72H7XZ.js";
+} from "./chunk-UNIRQWHT.js";
 import {
   toContentTrustProvenanceRecord
 } from "./chunk-ZO6ZKR7L.js";
@@ -27,7 +27,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS
 } from "./chunk-4PN3UVZV.js";
@@ -2645,4 +2645,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-GTYGMOMW.js.map
+//# sourceMappingURL=chunk-DYVYV7NZ.js.map

package/dist/{chunk-LLDIASHH.js → chunk-ETW6QNVI.js}

@@ -7,7 +7,7 @@ import {
   logGatewaySlotMapping,
   resolveOwnerCli,
   setGatewaySlotCatalog
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/config/model-availability.ts
 var DEFAULT_TTL_MS = 6e4;
@@ -139,7 +139,7 @@ function discoverGatewayOnce(logger = defaultLogger) {
 }
 async function runProbe(logger) {
   try {
-    const { buildOpenAICompatAdapters: build } = await import("./openai-compat-adapter-B2D7SS3W.js");
+    const { buildOpenAICompatAdapters: build } = await import("./openai-compat-adapter-YTSKOE4F.js");
     return await build(logger);
   } catch (error) {
     return err(new ConfigError(`Gateway discovery threw: ${getErrorMessage(error)}`));
@@ -269,4 +269,4 @@ export {
   setGatewayRediscovery,
   ensureGatewayDiscovered
 };
-//# sourceMappingURL=chunk-LLDIASHH.js.map
+//# sourceMappingURL=chunk-ETW6QNVI.js.map

package/dist/{chunk-LM7NMCEE.js → chunk-GAJRBRED.js}

@@ -16,7 +16,7 @@ import {
   ok,
   recordUsageEvent,
   resolveRetryAfterMs
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/adapters/base-adapter.ts
 var AdapterModelError = class extends ModelError {
@@ -1113,4 +1113,4 @@ export {
   gatewayAiSdkOptions,
   withGatewayUsageRecording
 };
-//# sourceMappingURL=chunk-LM7NMCEE.js.map
+//# sourceMappingURL=chunk-GAJRBRED.js.map

package/dist/{chunk-BQPQIOEB.js → chunk-GNGIZJAC.js}

@@ -1,10 +1,10 @@
 import {
   getTimeProvider
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "9.1.0" : "dev";
+var VERSION = true ? "9.2.0" : "dev";
 var NODE_ENGINE_RANGE = ">=24";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -106,4 +106,4 @@ export {
   contextForLogging,
   measuredTrustTier
 };
-//# sourceMappingURL=chunk-BQPQIOEB.js.map
+//# sourceMappingURL=chunk-GNGIZJAC.js.map

package/dist/{chunk-KSY5LNO5.js → chunk-GNGKWFC3.js}

@@ -6,7 +6,7 @@ import {
   getErrorMessage,
   ok,
   resolveInsideRoot
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 import {
   findRepoRoot,
   getActiveWorkspaceRoot,
@@ -211,4 +211,4 @@ export {
   loadPapersRegistry,
   savePapersRegistry
 };
-//# sourceMappingURL=chunk-KSY5LNO5.js.map
+//# sourceMappingURL=chunk-GNGKWFC3.js.map

package/dist/{chunk-IHSX3WQN.js → chunk-GTWTVDLP.js}

@@ -7,7 +7,7 @@ import {
   VERSION,
   isNodeVersionSupported,
   recordServerTransport
-} from "./chunk-BQPQIOEB.js";
+} from "./chunk-GNGIZJAC.js";
 import {
   checkGatewayHealth,
   cliFailsVerdict,
@@ -17,14 +17,14 @@ import {
   gatewaySlotServing,
   gatewayVerdict,
   printVoterTransportCheck
-} from "./chunk-FVYQWWPB.js";
+} from "./chunk-42TS2JOS.js";
 import {
   readOpenAICompatEndpoint,
   readOpenAICompatEnv
-} from "./chunk-T5IBXFFY.js";
+} from "./chunk-DJ7QTY5J.js";
 import {
   claimGlobalRegistry
-} from "./chunk-7JYW5F77.js";
+} from "./chunk-PDT6QYKY.js";
 import {
   CODEX_LEGACY_LANDLOCK_CONFIG,
   CODEX_MCP_SERVER_UNAVAILABLE_REASON,
@@ -32,23 +32,23 @@ import {
   codexSandboxPreflight,
   createAllAdapters,
   createCliAdapter
-} from "./chunk-MGVYGV7P.js";
+} from "./chunk-KLDUWDNU.js";
 import {
   getNexusTmpDir
 } from "./chunk-JPFRRNRR.js";
 import {
   resolveGatewayEnv
-} from "./chunk-FBJ6D2GF.js";
+} from "./chunk-ZVSJPKEZ.js";
 import {
   probeCli
 } from "./chunk-TW6PJYTP.js";
 import {
   SERVES_PROBE_PROMPT
-} from "./chunk-WQCYMWMF.js";
+} from "./chunk-ZC6QDPMA.js";
 import {
   ClaudeCliAdapter,
   IN_FAMILY_FALLBACK_OPTION
-} from "./chunk-V362YGAV.js";
+} from "./chunk-TJ4VWR32.js";
 import {
   DEFAULT_CAPABILITIES,
   capitalize,
@@ -73,7 +73,7 @@ import {
   resolveGatewayCostDeclaration,
   symbols,
   writeLine
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 import {
   getLearningDir,
   getOutcomesFile,
@@ -1556,7 +1556,7 @@ async function doctorCommand(options = {}) {
   options.onResult?.(result);
   printDoctorResults(result, void 0, options.deferSummary === true);
   if (options.gateway === true || options.probe === true) {
-    const { formatGatewayReport } = await import("./doctor-gateway-report-AGFLKDJD.js");
+    const { formatGatewayReport } = await import("./doctor-gateway-report-3I7KQVU3.js");
     for (const line of formatGatewayReport(result.gateway, result.clis)) {
       process.stdout.write(line + "\n");
     }
@@ -1575,13 +1575,13 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-CSNTWHYS.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-VBMDTRCF.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
   }
   if (!result.configFile.found) {
-    const { runConfigInitSync } = await import("./setup-config-SFPGFQTG.js");
+    const { runConfigInitSync } = await import("./setup-config-4NLQBTZH.js");
     const configResult = runConfigInitSync(process.cwd(), false, false);
     if (configResult.success && configResult.created) {
       writeLine2(`\u2713 Generated config: ${configResult.path}`);
@@ -1680,4 +1680,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-IHSX3WQN.js.map
+//# sourceMappingURL=chunk-GTWTVDLP.js.map

package/dist/{chunk-7ZZHQ6H3.js → chunk-JZSKEIQF.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -740,4 +740,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-7ZZHQ6H3.js.map
+//# sourceMappingURL=chunk-JZSKEIQF.js.map

package/dist/{chunk-XEDWWMZ3.js → chunk-KJ46Q24G.js}

@@ -1,7 +1,7 @@
 import {
   getRandomProvider,
   getTimeProvider
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 
 // src/utils/id-utils.ts
 import { randomUUID } from "node:crypto";
@@ -24,4 +24,4 @@ export {
   generateHyphenId,
   generateUUID
 };
-//# sourceMappingURL=chunk-XEDWWMZ3.js.map
+//# sourceMappingURL=chunk-KJ46Q24G.js.map

package/dist/{chunk-MGVYGV7P.js → chunk-KLDUWDNU.js}

@@ -2,7 +2,7 @@ import {
   ensureGatewayDiscovered,
   gatewayDiscoveryStatus,
   getAvailabilityCache
-} from "./chunk-LLDIASHH.js";
+} from "./chunk-ETW6QNVI.js";
 import {
   extractSystemPrompt
 } from "./chunk-QZUG667L.js";
@@ -22,7 +22,7 @@ import {
   requireApiKey,
   validateApiKeyPresence,
   withGatewayUsageRecording
-} from "./chunk-LM7NMCEE.js";
+} from "./chunk-GAJRBRED.js";
 import {
   assertCustomApiHostResolvesPublic,
   hostnameOf,
@@ -31,7 +31,7 @@ import {
   readGatewayEnv,
   redactApiKey,
   validateCustomApiBaseUrl
-} from "./chunk-FBJ6D2GF.js";
+} from "./chunk-ZVSJPKEZ.js";
 import {
   probeCli
 } from "./chunk-TW6PJYTP.js";
@@ -46,13 +46,13 @@ import {
   getTimeoutForTask,
   listModelsForCli,
   spawnCwd
-} from "./chunk-V362YGAV.js";
+} from "./chunk-TJ4VWR32.js";
 import {
   getCliCircuitBreakerSnapshot
-} from "./chunk-MPAAWIDI.js";
+} from "./chunk-4ROIBRK5.js";
 import {
   sanitizeOutput
-} from "./chunk-AJ37AWCG.js";
+} from "./chunk-A5D7666X.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG,
@@ -106,7 +106,7 @@ import {
   unenforcedAccessModeRefusal,
   warnIfGatewayCostUndeclared,
   withEnforcedAccessMode
-} from "./chunk-NHNXANOF.js";
+} from "./chunk-SU47CN4Q.js";
 import {
   CLI_NAMES,
   CLI_SUBPROCESS_TIMEOUTS,
@@ -1934,8 +1934,7 @@ var GeminiCliAdapter = class extends SubprocessCliAdapter {
     const content = task.systemPrompt !== void 0 && task.systemPrompt !== "" ? `${task.systemPrompt}
 
 ${task.content}` : task.content;
-    args.push("--print", content);
-    return { command: this.binaryName, args };
+    return { command: this.binaryName, args, stdin: content };
   }
   checkCircuitBreaker() {
     if (this.circuitBreaker === null) {
@@ -2891,7 +2890,7 @@ var CodexCliAdapter = class extends SubprocessCliAdapter {
   }
   /**
    * Gets CLI command and arguments for execution.
-   * Task content is passed as a positional argument (not via stdin).
+   * Task content is read from stdin via `codex exec -` to avoid argv size limits.
    */
   getCommand(task) {
     const args = ["exec"];
@@ -2915,8 +2914,13 @@ var CodexCliAdapter = class extends SubprocessCliAdapter {
         }
       };
     }
-    args.push(task.content);
-    return cleanup === void 0 ? { command: "codex", args } : { command: "codex", args, cleanup };
+    args.push("-");
+    return {
+      command: "codex",
+      args,
+      stdin: task.content,
+      ...cleanup === void 0 ? {} : { cleanup }
+    };
   }
 };
 
@@ -4126,4 +4130,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-MGVYGV7P.js.map
+//# sourceMappingURL=chunk-KLDUWDNU.js.map