nexus-agents 9.2.0 → 9.4.0

package/dist/{chunk-ZNXWR6V6.js → chunk-AFAM6GK3.js}

@@ -1,13 +1,13 @@
 import {
   ensureGatewayDiscovered,
   gatewayDiscoveryGeneration
-} from "./chunk-ETW6QNVI.js";
+} from "./chunk-VQGHQVD2.js";
 import {
   createLogger,
   getTimeProvider,
   isRateLimitText,
   resolveCliSlot
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 
 // src/pipeline/expert-access-mode.ts
 var logger = createLogger({ component: "expert-bridge" });
@@ -78,7 +78,7 @@ async function dispatchWithMcpConfig(router, content, expertType, start, options
   let config;
   if (requestedAccessModeOf(options) === "default") {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-ALJL5I7K.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-IR7LRMIK.js");
       config = await generateMcpConfig();
       activeMcpConfigs.add(config);
     } catch (error) {
@@ -167,8 +167,8 @@ async function getRouter() {
   }
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-X7XECZ3D.js");
-    const { createCompositeRouter } = await import("./composite-router-LE4SNM2X.js");
+    const { createAllAdapters } = await import("./factory-3Z46455N.js");
+    const { createCompositeRouter } = await import("./composite-router-WCTNVMSX.js");
     const adapters = createAllAdapters();
     const superseded = generation !== routerGeneration;
     if (adapters.size === 0) {
@@ -179,7 +179,7 @@ async function getRouter() {
     if (superseded) return router;
     cachedRouter = router;
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-OTFWY5A5.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-AZHN2TMH.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
@@ -320,4 +320,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-ZNXWR6V6.js.map
+//# sourceMappingURL=chunk-AFAM6GK3.js.map

package/dist/{chunk-WDSRUC3H.js → chunk-AI6LKFGU.js}

@@ -7,7 +7,7 @@ import {
   toSdkCallback,
   toolStructuredError,
   wrapToolWithTimeout
-} from "./chunk-5IMXQQQX.js";
+} from "./chunk-ETGNAHY3.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -21,7 +21,7 @@ import {
   hasMeasuredCategory,
   isDeclaredNeverDeprecate,
   isRegisteredToolName
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 import {
   getNexusDataDir,
   nexusDataPath
@@ -2431,4 +2431,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-WDSRUC3H.js.map
+//# sourceMappingURL=chunk-AI6LKFGU.js.map

package/dist/{chunk-4ROIBRK5.js → chunk-AYBOQE2Y.js}

@@ -15,7 +15,7 @@ import {
   ok,
   resolveGatewayServedSlot,
   unenforcedAccessModeRefusal
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 
 // src/cli-adapters/cli-circuit-breaker.ts
 var CATEGORY_TO_FALLBACK = {
@@ -52,7 +52,7 @@ function getDefaultCliCircuitBreakerRegistry() {
   return defaultCliCircuitBreakerRegistry;
 }
 function getCliCircuitBreakerSnapshot(cliName) {
-  return defaultCliCircuitBreakerRegistry.getAllSnapshots().get(cliName);
+  return defaultCliCircuitBreakerRegistry.getAllArmSnapshots().get(cliName);
 }
 var CliCircuitBreakerIntegration = class {
   registry;
@@ -224,4 +224,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-4ROIBRK5.js.map
+//# sourceMappingURL=chunk-AYBOQE2Y.js.map

package/dist/chunk-AYBOQE2Y.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli-adapters/cli-circuit-breaker.ts"],"sourcesContent":["/**\n * nexus-agents/cli-adapters - CLI Circuit Breaker Integration\n *\n * Wraps CLI adapter calls with circuit breaker pattern for resilient\n * multi-CLI execution with automatic fallback on failures.\n *\n * (Source: Issue #359 - Integrate circuit breaker with CLI adapters)\n */\n\nimport type { Result, ILogger } from '../core/index.js';\nimport { ok, err, createLogger, getTimeProvider, getErrorMessage } from '../core/index.js';\nimport type { TaskCategory } from '../config/task-specialization-types.js';\nimport type { FallbackTaskType } from './task-classifier.js';\nimport { getFallbackChainForCategory } from './fallback-chains.js';\nimport type {\n  ICliAdapter,\n  CliName,\n  CliTask,\n  CliResponse,\n  CliError,\n  ObservedArmId,\n} from './types.js';\nimport { breakerKeys } from './breaker-key.js';\nimport { gatewayServedSlotOf, resolveGatewayServedSlot } from './gateway-slot-arm.js';\nimport {\n  CircuitBreakerRegistry,\n  CircuitError,\n  CircuitErrorCode,\n  mapCliErrorToCategory,\n  type CliCircuitBreaker,\n  type CircuitBreakerConfig,\n  type CircuitBreakerSnapshot,\n  type CircuitStateChangeListener,\n} from './circuit-breaker.js';\nimport { isCallerInputCliError } from './cli-error-helpers.js';\nimport { isCallerCancelled } from '../adapters/abort-utils.js';\nimport { unenforcedAccessModeRefusal } from './access-mode.js';\n\n/** Maps canonical TaskCategory (10 types) to FallbackTaskType (5 types). */\nconst CATEGORY_TO_FALLBACK: Record<TaskCategory, FallbackTaskType> = {\n  code_generation: 'code',\n  code_review: 'code',\n  testing: 'code',\n  research: 'research',\n  exploration: 'research',\n  documentation: 'documentation',\n  architecture: 'analysis',\n  security_review: 'analysis',\n  planning: 'analysis',\n  devops: 'general',\n};\n\n/** Configuration for CLI circuit breaker integration. */\nexport interface CliCircuitBreakerConfig {\n  readonly perCliConfig?: Partial<Record<CliName, Partial<CircuitBreakerConfig>>>;\n  readonly fallbackChain?: ReadonlyArray<CliName>;\n  readonly enableFallback?: boolean;\n  readonly maxFallbackAttempts?: number;\n}\n\n/** Result of a circuit-protected execution with fallback info. */\nexport interface CircuitProtectedResult {\n  readonly response: CliResponse;\n  readonly executedBy: CliName;\n  readonly usedFallback: boolean;\n  readonly fallbackAttempts?: ReadonlyArray<CliName>;\n}\n\n/** Health status for all CLIs with circuit state. */\nexport interface CliCircuitHealthStatus {\n  readonly clis: ReadonlyArray<{\n    readonly name: CliName;\n    readonly healthy: boolean;\n    readonly circuitState: 'closed' | 'open' | 'half-open';\n    readonly failureCount: number;\n    readonly lastFailureTime: number | null;\n  }>;\n  readonly systemHealthy: boolean;\n  readonly healthyCount: number;\n  readonly timestamp: number;\n}\n\n/** Interface for CLI circuit breaker integration. */\nexport interface ICliCircuitBreakerIntegration {\n  execute(\n    adapter: ICliAdapter,\n    task: CliTask,\n    taskCategory?: TaskCategory\n  ): Promise<Result<CircuitProtectedResult, CircuitError | CliError>>;\n  getHealthStatus(): CliCircuitHealthStatus;\n  getCircuitSnapshots(): Map<CliName, CircuitBreakerSnapshot>;\n  resetCircuit(cliName: CliName): void;\n  resetAllCircuits(): void;\n  addStateChangeListener(listener: CircuitStateChangeListener): void;\n}\n\nconst DEFAULT_FALLBACK_CHAIN: ReadonlyArray<CliName> = ['claude', 'gemini', 'codex', 'opencode'];\nconst DEFAULT_CONFIG: Required<CliCircuitBreakerConfig> = {\n  perCliConfig: {},\n  fallbackChain: DEFAULT_FALLBACK_CHAIN,\n  enableFallback: true,\n  maxFallbackAttempts: 2,\n};\nconst defaultCliCircuitBreakerRegistry = new CircuitBreakerRegistry();\n\n// #4330: the shared registry now gates voter-panel availability, so a CLI can\n// vanish from a panel roster because its circuit opened. Log every transition —\n// otherwise the next person debugging a \"missing voter\" has no trail, and a\n// misclassified transient error silently costs the panel its diversity.\nconst registryLogger = createLogger({ component: 'cli-circuit-breaker' });\ndefaultCliCircuitBreakerRegistry.addGlobalStateChangeListener((event) => {\n  registryLogger.warn('CLI circuit state changed', {\n    cli: event.cliName,\n    previousState: event.previousState,\n    newState: event.newState,\n    failureCount: event.failureCount,\n    reason: event.reason,\n  });\n});\n\n/** Returns the shared CLI circuit-breaker registry used by default integrations. */\nexport function getDefaultCliCircuitBreakerRegistry(): CircuitBreakerRegistry {\n  return defaultCliCircuitBreakerRegistry;\n}\n\n/**\n * Reads the current snapshot for a CLI without creating a new breaker.\n *\n * `undefined` means no circuit state is known yet, so callers should fail open.\n */\nexport function getCliCircuitBreakerSnapshot(cliName: CliName): CircuitBreakerSnapshot | undefined {\n  return defaultCliCircuitBreakerRegistry.getAllArmSnapshots().get(cliName);\n}\n\n/**\n * Integrates circuit breaker pattern with CLI adapters.\n * Provides automatic fallback when a CLI's circuit opens.\n */\nexport class CliCircuitBreakerIntegration implements ICliCircuitBreakerIntegration {\n  private readonly registry: CircuitBreakerRegistry;\n  private readonly adapters: Map<CliName, ICliAdapter> = new Map();\n  private readonly config: Required<CliCircuitBreakerConfig>;\n  private readonly logger: ILogger;\n\n  constructor(\n    adapters: ReadonlyArray<ICliAdapter>,\n    config?: CliCircuitBreakerConfig,\n    logger?: ILogger\n  ) {\n    this.config = { ...DEFAULT_CONFIG, ...config };\n    this.logger = logger ?? createLogger({ component: 'cli-circuit-breaker-integration' });\n    this.registry =\n      config === undefined ? defaultCliCircuitBreakerRegistry : new CircuitBreakerRegistry();\n    for (const adapter of adapters) {\n      this.adapters.set(adapter.name, adapter);\n      this.breakerFor(adapter);\n    }\n  }\n\n  async execute(\n    adapter: ICliAdapter,\n    task: CliTask,\n    taskCategory?: TaskCategory\n  ): Promise<Result<CircuitProtectedResult, CircuitError | CliError>> {\n    const primaryCli = adapter.name;\n    const fallbackAttempts: CliName[] = [];\n    let lastError: CircuitError | CliError | undefined;\n\n    const primaryResult = await this.executeWithBreaker(adapter, task);\n    if (primaryResult.ok) {\n      return ok({ response: primaryResult.value, executedBy: primaryCli, usedFallback: false });\n    }\n    lastError = primaryResult.error;\n\n    if (!this.config.enableFallback || !(lastError instanceof CircuitError)) {\n      return err(lastError);\n    }\n\n    for (const cli of this.getFallbackClis(primaryCli, taskCategory, task).slice(\n      0,\n      this.config.maxFallbackAttempts\n    )) {\n      const fallbackAdapter = this.adapters.get(cli);\n      if (!fallbackAdapter) continue;\n      fallbackAttempts.push(cli);\n      this.logger.info('Attempting fallback', { from: primaryCli, to: cli });\n      const result = await this.executeWithBreaker(fallbackAdapter, task);\n      if (result.ok) {\n        return ok({\n          response: result.value,\n          executedBy: cli,\n          usedFallback: true,\n          fallbackAttempts,\n        });\n      }\n      lastError = result.error;\n    }\n\n    this.logger.warn('All fallback attempts failed', { primaryCli, fallbackAttempts });\n    return err(lastError);\n  }\n\n  getHealthStatus(): CliCircuitHealthStatus {\n    const clis: CliCircuitHealthStatus['clis'][number][] = [];\n    let healthyCount = 0;\n    for (const [name, adapter] of this.adapters) {\n      const snapshot = this.breakerFor(adapter).breaker.getSnapshot();\n      const healthy = snapshot.state === 'closed';\n      if (healthy) healthyCount++;\n      clis.push({\n        name,\n        healthy,\n        circuitState: snapshot.state,\n        failureCount: snapshot.failureCount,\n        lastFailureTime: snapshot.lastFailureTime,\n      });\n    }\n    return {\n      clis,\n      systemHealthy: healthyCount > 0,\n      healthyCount,\n      timestamp: getTimeProvider().now(),\n    };\n  }\n\n  getCircuitSnapshots(): Map<CliName, CircuitBreakerSnapshot> {\n    const snapshots = new Map<CliName, CircuitBreakerSnapshot>();\n    for (const [name, adapter] of this.adapters) {\n      snapshots.set(name, this.breakerFor(adapter).breaker.getSnapshot());\n    }\n    return snapshots;\n  }\n\n  resetCircuit(cliName: CliName): void {\n    const adapter = this.adapters.get(cliName);\n    this.registry.resetArm(adapter === undefined ? cliName : this.breakerFor(adapter).key);\n    this.logger.info('Circuit reset', { cliName });\n  }\n\n  resetAllCircuits(): void {\n    this.registry.resetAll();\n    this.logger.info('All circuits reset');\n  }\n\n  addStateChangeListener(listener: CircuitStateChangeListener): void {\n    this.registry.addGlobalStateChangeListener(listener);\n  }\n\n  private async executeWithBreaker(\n    adapter: ICliAdapter,\n    task: CliTask\n  ): Promise<Result<CliResponse, CircuitError | CliError>> {\n    let { key, breaker } = this.breakerFor(adapter, task);\n    let execResult: Result<CliResponse, CliError>;\n    let targetResolved = false;\n    try {\n      await resolveGatewayServedSlot(adapter);\n      const refusal = await this.prepareImplicitRoute(adapter, task);\n      if (refusal !== undefined) return err(refusal);\n      targetResolved = true;\n      ({ key, breaker } = this.breakerFor(adapter, task));\n      const canRun = breaker.canExecute();\n      if (!canRun.ok) return canRun;\n      execResult = await adapter.execute(task);\n    } catch (error) {\n      // A rejected availability probe has not selected a failure domain.\n      // Never charge the provisional plain CLI breaker for that probe.\n      if (targetResolved) breaker.recordFailure('unknown');\n      return err(\n        new CircuitError(`CLI execution threw unexpectedly: ${getErrorMessage(error)}`, {\n          circuitErrorCode: CircuitErrorCode.EXECUTION_FAILED,\n          cliName: adapter.name,\n          armId: key,\n          circuitState: breaker.getState(),\n          cause: error instanceof Error ? error : new Error(String(error)),\n        })\n      );\n    }\n\n    return this.recordOutcome(adapter, breaker, execResult);\n  }\n\n  /** Resolve an implicit OpenCode route before gating, preserving access refusals. */\n  private async prepareImplicitRoute(\n    adapter: ICliAdapter,\n    task: CliTask\n  ): Promise<CliError | undefined> {\n    if (adapter.name !== 'opencode' || task.model !== undefined) return undefined;\n    const refusal = unenforcedAccessModeRefusal(adapter, task);\n    if (refusal !== undefined) return refusal;\n    // A missing/cooled configured model omits --model and runs the default.\n    await adapter.initialize();\n    return undefined;\n  }\n\n  private recordOutcome(\n    adapter: ICliAdapter,\n    breaker: CliCircuitBreaker,\n    execResult: Result<CliResponse, CliError>\n  ): Result<CliResponse, CliError> {\n    const recordsOutcome = this.ownsBreakerOutcome(adapter);\n    if (!execResult.ok) {\n      // #6613: caller-input errors (e.g. invalid model requested) must not count\n      // against the breaker or exhaust half-open probe capacity. #6691: nor\n      // must a call its caller cancelled.\n      if (isCallerInputCliError(execResult.error) || isCallerCancelled(execResult.error)) {\n        breaker.releaseHalfOpenProbe();\n        return err(execResult.error);\n      }\n      if (recordsOutcome) breaker.recordFailure(mapCliErrorToCategory(execResult.error.code));\n      return err(execResult.error);\n    }\n\n    if (recordsOutcome) breaker.recordSuccess();\n    return ok(execResult.value);\n  }\n\n  private breakerFor(\n    adapter: Pick<ICliAdapter, 'name'> & Partial<Pick<ICliAdapter, 'getModelInfo'>>,\n    task?: CliTask\n  ): {\n    key: ObservedArmId;\n    breaker: CliCircuitBreaker;\n  } {\n    const key = breakerKeys.forArm({\n      name: adapter.name,\n      model: task?.model ?? adapter.getModelInfo?.().id,\n      gatewayArm: gatewayServedSlotOf(adapter)?.arm,\n    });\n    return {\n      key,\n      breaker: this.registry.getArmBreaker(key, this.config.perCliConfig[adapter.name]),\n    };\n  }\n\n  /** Marked gateway slots record in the shared registry; private registries own their records. */\n  private ownsBreakerOutcome(adapter: ICliAdapter): boolean {\n    return (\n      this.registry !== defaultCliCircuitBreakerRegistry ||\n      gatewayServedSlotOf(adapter)?.arm === undefined\n    );\n  }\n\n  private getFallbackClis(\n    excludeCli: CliName,\n    taskCategory?: TaskCategory,\n    task?: CliTask\n  ): CliName[] {\n    const chain =\n      taskCategory !== undefined\n        ? getFallbackChainForCategory(taskCategory, CATEGORY_TO_FALLBACK[taskCategory])\n        : this.config.fallbackChain;\n    return [...chain].filter((cli) => {\n      const adapter = this.adapters.get(cli);\n      return (\n        cli !== excludeCli &&\n        adapter !== undefined &&\n        !this.registry.isArmOpen(this.breakerFor(adapter, task).key)\n      );\n    });\n  }\n}\n\n/** Creates a CLI circuit breaker integration with the specified adapters. */\nexport function createCliCircuitBreakerIntegration(\n  adapters: ReadonlyArray<ICliAdapter>,\n  config?: CliCircuitBreakerConfig,\n  logger?: ILogger\n): CliCircuitBreakerIntegration {\n  return new CliCircuitBreakerIntegration(adapters, config, logger);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuCA,IAAM,uBAA+D;AAAA,EACnE,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,SAAS;AAAA,EACT,UAAU;AAAA,EACV,aAAa;AAAA,EACb,eAAe;AAAA,EACf,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,UAAU;AAAA,EACV,QAAQ;AACV;AA8CA,IAAM,yBAAiD,CAAC,UAAU,UAAU,SAAS,UAAU;AAC/F,IAAM,iBAAoD;AAAA,EACxD,cAAc,CAAC;AAAA,EACf,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,qBAAqB;AACvB;AACA,IAAM,mCAAmC,IAAI,uBAAuB;AAMpE,IAAM,iBAAiB,aAAa,EAAE,WAAW,sBAAsB,CAAC;AACxE,iCAAiC,6BAA6B,CAAC,UAAU;AACvE,iBAAe,KAAK,6BAA6B;AAAA,IAC/C,KAAK,MAAM;AAAA,IACX,eAAe,MAAM;AAAA,IACrB,UAAU,MAAM;AAAA,IAChB,cAAc,MAAM;AAAA,IACpB,QAAQ,MAAM;AAAA,EAChB,CAAC;AACH,CAAC;AAGM,SAAS,sCAA8D;AAC5E,SAAO;AACT;AAOO,SAAS,6BAA6B,SAAsD;AACjG,SAAO,iCAAiC,mBAAmB,EAAE,IAAI,OAAO;AAC1E;AAMO,IAAM,+BAAN,MAA4E;AAAA,EAChE;AAAA,EACA,WAAsC,oBAAI,IAAI;AAAA,EAC9C;AAAA,EACA;AAAA,EAEjB,YACE,UACA,QACA,QACA;AACA,SAAK,SAAS,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAC7C,SAAK,SAAS,UAAU,aAAa,EAAE,WAAW,kCAAkC,CAAC;AACrF,SAAK,WACH,WAAW,SAAY,mCAAmC,IAAI,uBAAuB;AACvF,eAAW,WAAW,UAAU;AAC9B,WAAK,SAAS,IAAI,QAAQ,MAAM,OAAO;AACvC,WAAK,WAAW,OAAO;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,SACA,MACA,cACkE;AAClE,UAAM,aAAa,QAAQ;AAC3B,UAAM,mBAA8B,CAAC;AACrC,QAAI;AAEJ,UAAM,gBAAgB,MAAM,KAAK,mBAAmB,SAAS,IAAI;AACjE,QAAI,cAAc,IAAI;AACpB,aAAO,GAAG,EAAE,UAAU,cAAc,OAAO,YAAY,YAAY,cAAc,MAAM,CAAC;AAAA,IAC1F;AACA,gBAAY,cAAc;AAE1B,QAAI,CAAC,KAAK,OAAO,kBAAkB,EAAE,qBAAqB,eAAe;AACvE,aAAO,IAAI,SAAS;AAAA,IACtB;AAEA,eAAW,OAAO,KAAK,gBAAgB,YAAY,cAAc,IAAI,EAAE;AAAA,MACrE;AAAA,MACA,KAAK,OAAO;AAAA,IACd,GAAG;AACD,YAAM,kBAAkB,KAAK,SAAS,IAAI,GAAG;AAC7C,UAAI,CAAC,gBAAiB;AACtB,uBAAiB,KAAK,GAAG;AACzB,WAAK,OAAO,KAAK,uBAAuB,EAAE,MAAM,YAAY,IAAI,IAAI,CAAC;AACrE,YAAM,SAAS,MAAM,KAAK,mBAAmB,iBAAiB,IAAI;AAClE,UAAI,OAAO,IAAI;AACb,eAAO,GAAG;AAAA,UACR,UAAU,OAAO;AAAA,UACjB,YAAY;AAAA,UACZ,cAAc;AAAA,UACd;AAAA,QACF,CAAC;AAAA,MACH;AACA,kBAAY,OAAO;AAAA,IACrB;AAEA,SAAK,OAAO,KAAK,gCAAgC,EAAE,YAAY,iBAAiB,CAAC;AACjF,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA,EAEA,kBAA0C;AACxC,UAAM,OAAiD,CAAC;AACxD,QAAI,eAAe;AACnB,eAAW,CAAC,MAAM,OAAO,KAAK,KAAK,UAAU;AAC3C,YAAM,WAAW,KAAK,WAAW,OAAO,EAAE,QAAQ,YAAY;AAC9D,YAAM,UAAU,SAAS,UAAU;AACnC,UAAI,QAAS;AACb,WAAK,KAAK;AAAA,QACR;AAAA,QACA;AAAA,QACA,cAAc,SAAS;AAAA,QACvB,cAAc,SAAS;AAAA,QACvB,iBAAiB,SAAS;AAAA,MAC5B,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL;AAAA,MACA,eAAe,eAAe;AAAA,MAC9B;AAAA,MACA,WAAW,gBAAgB,EAAE,IAAI;AAAA,IACnC;AAAA,EACF;AAAA,EAEA,sBAA4D;AAC1D,UAAM,YAAY,oBAAI,IAAqC;AAC3D,eAAW,CAAC,MAAM,OAAO,KAAK,KAAK,UAAU;AAC3C,gBAAU,IAAI,MAAM,KAAK,WAAW,OAAO,EAAE,QAAQ,YAAY,CAAC;AAAA,IACpE;AACA,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,SAAwB;AACnC,UAAM,UAAU,KAAK,SAAS,IAAI,OAAO;AACzC,SAAK,SAAS,SAAS,YAAY,SAAY,UAAU,KAAK,WAAW,OAAO,EAAE,GAAG;AACrF,SAAK,OAAO,KAAK,iBAAiB,EAAE,QAAQ,CAAC;AAAA,EAC/C;AAAA,EAEA,mBAAyB;AACvB,SAAK,SAAS,SAAS;AACvB,SAAK,OAAO,KAAK,oBAAoB;AAAA,EACvC;AAAA,EAEA,uBAAuB,UAA4C;AACjE,SAAK,SAAS,6BAA6B,QAAQ;AAAA,EACrD;AAAA,EAEA,MAAc,mBACZ,SACA,MACuD;AACvD,QAAI,EAAE,KAAK,QAAQ,IAAI,KAAK,WAAW,SAAS,IAAI;AACpD,QAAI;AACJ,QAAI,iBAAiB;AACrB,QAAI;AACF,YAAM,yBAAyB,OAAO;AACtC,YAAM,UAAU,MAAM,KAAK,qBAAqB,SAAS,IAAI;AAC7D,UAAI,YAAY,OAAW,QAAO,IAAI,OAAO;AAC7C,uBAAiB;AACjB,OAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,WAAW,SAAS,IAAI;AACjD,YAAM,SAAS,QAAQ,WAAW;AAClC,UAAI,CAAC,OAAO,GAAI,QAAO;AACvB,mBAAa,MAAM,QAAQ,QAAQ,IAAI;AAAA,IACzC,SAAS,OAAO;AAGd,UAAI,eAAgB,SAAQ,cAAc,SAAS;AACnD,aAAO;AAAA,QACL,IAAI,aAAa,qCAAqC,gBAAgB,KAAK,CAAC,IAAI;AAAA,UAC9E,kBAAkB,iBAAiB;AAAA,UACnC,SAAS,QAAQ;AAAA,UACjB,OAAO;AAAA,UACP,cAAc,QAAQ,SAAS;AAAA,UAC/B,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,QACjE,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,KAAK,cAAc,SAAS,SAAS,UAAU;AAAA,EACxD;AAAA;AAAA,EAGA,MAAc,qBACZ,SACA,MAC+B;AAC/B,QAAI,QAAQ,SAAS,cAAc,KAAK,UAAU,OAAW,QAAO;AACpE,UAAM,UAAU,4BAA4B,SAAS,IAAI;AACzD,QAAI,YAAY,OAAW,QAAO;AAElC,UAAM,QAAQ,WAAW;AACzB,WAAO;AAAA,EACT;AAAA,EAEQ,cACN,SACA,SACA,YAC+B;AAC/B,UAAM,iBAAiB,KAAK,mBAAmB,OAAO;AACtD,QAAI,CAAC,WAAW,IAAI;AAIlB,UAAI,sBAAsB,WAAW,KAAK,KAAK,kBAAkB,WAAW,KAAK,GAAG;AAClF,gBAAQ,qBAAqB;AAC7B,eAAO,IAAI,WAAW,KAAK;AAAA,MAC7B;AACA,UAAI,eAAgB,SAAQ,cAAc,sBAAsB,WAAW,MAAM,IAAI,CAAC;AACtF,aAAO,IAAI,WAAW,KAAK;AAAA,IAC7B;AAEA,QAAI,eAAgB,SAAQ,cAAc;AAC1C,WAAO,GAAG,WAAW,KAAK;AAAA,EAC5B;AAAA,EAEQ,WACN,SACA,MAIA;AACA,UAAM,MAAM,YAAY,OAAO;AAAA,MAC7B,MAAM,QAAQ;AAAA,MACd,OAAO,MAAM,SAAS,QAAQ,eAAe,EAAE;AAAA,MAC/C,YAAY,oBAAoB,OAAO,GAAG;AAAA,IAC5C,CAAC;AACD,WAAO;AAAA,MACL;AAAA,MACA,SAAS,KAAK,SAAS,cAAc,KAAK,KAAK,OAAO,aAAa,QAAQ,IAAI,CAAC;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAGQ,mBAAmB,SAA+B;AACxD,WACE,KAAK,aAAa,oCAClB,oBAAoB,OAAO,GAAG,QAAQ;AAAA,EAE1C;AAAA,EAEQ,gBACN,YACA,cACA,MACW;AACX,UAAM,QACJ,iBAAiB,SACb,4BAA4B,cAAc,qBAAqB,YAAY,CAAC,IAC5E,KAAK,OAAO;AAClB,WAAO,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,QAAQ;AAChC,YAAM,UAAU,KAAK,SAAS,IAAI,GAAG;AACrC,aACE,QAAQ,cACR,YAAY,UACZ,CAAC,KAAK,SAAS,UAAU,KAAK,WAAW,SAAS,IAAI,EAAE,GAAG;AAAA,IAE/D,CAAC;AAAA,EACH;AACF;AAGO,SAAS,mCACd,UACA,QACA,QAC8B;AAC9B,SAAO,IAAI,6BAA6B,UAAU,QAAQ,MAAM;AAClE;","names":[]}

package/dist/{chunk-DJ7QTY5J.js → chunk-C5WECFBR.js}

@@ -8,16 +8,16 @@ import {
   requireApiKey,
   validateApiKeyPresence,
   withGatewayUsageRecording
-} from "./chunk-GAJRBRED.js";
+} from "./chunk-HK4LBUYY.js";
 import {
   assertCustomApiHostResolvesPublic,
   hostnameOf,
   redactGatewaySecrets
-} from "./chunk-ZVSJPKEZ.js";
+} from "./chunk-Q5F4OBOK.js";
 import {
   REDACTED_KEY_PLACEHOLDER,
   sanitizeErrorDetails
-} from "./chunk-A5D7666X.js";
+} from "./chunk-2AW2VHMK.js";
 import {
   CUSTOM_API_ALLOW_PRIVATE_ENV,
   ConfigError,
@@ -39,7 +39,7 @@ import {
   ok,
   readModelAllowlist,
   refineGatewayCatalog
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 
 // src/adapters/openai-compat-adapter.ts
 import OpenAI2 from "openai";
@@ -992,4 +992,4 @@ export {
   createOpenAICompatAdapter,
   buildOpenAICompatAdapters
 };
-//# sourceMappingURL=chunk-DJ7QTY5J.js.map
+//# sourceMappingURL=chunk-C5WECFBR.js.map

package/dist/{chunk-KJ46Q24G.js → chunk-DEQRRCHK.js}

@@ -1,7 +1,7 @@
 import {
   getRandomProvider,
   getTimeProvider
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 
 // src/utils/id-utils.ts
 import { randomUUID } from "node:crypto";
@@ -24,4 +24,4 @@ export {
   generateHyphenId,
   generateUUID
 };
-//# sourceMappingURL=chunk-KJ46Q24G.js.map
+//# sourceMappingURL=chunk-DEQRRCHK.js.map

package/dist/{chunk-XBWG4BJU.js → chunk-DG2UY5QU.js}

@@ -7,7 +7,7 @@ import {
   getAdaptiveBonus,
   getOutcomeStore,
   hasMeasuredCategory
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 import {
   TASK_CATEGORIES
 } from "./chunk-4PN3UVZV.js";
@@ -150,4 +150,4 @@ export {
   runDeepDiagnostics,
   formatDeepDiagnostics
 };
-//# sourceMappingURL=chunk-XBWG4BJU.js.map
+//# sourceMappingURL=chunk-DG2UY5QU.js.map

package/dist/{chunk-DYVYV7NZ.js → chunk-DYTB2XW2.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-VOJCSOVL.js";
+} from "./chunk-EPCR2GOE.js";
 import {
   ReputationCache,
   assessReputation,
@@ -9,10 +9,10 @@ import {
   resolveEnvMode,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-3JRQWWBD.js";
+} from "./chunk-JNRDNE26.js";
 import {
   hasToken
-} from "./chunk-UNIRQWHT.js";
+} from "./chunk-RI4IXOZT.js";
 import {
   toContentTrustProvenanceRecord
 } from "./chunk-ZO6ZKR7L.js";
@@ -27,7 +27,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS
 } from "./chunk-4PN3UVZV.js";
@@ -2645,4 +2645,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-DYVYV7NZ.js.map
+//# sourceMappingURL=chunk-DYTB2XW2.js.map

package/dist/{chunk-VOJCSOVL.js → chunk-EPCR2GOE.js}

@@ -3,7 +3,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS
 } from "./chunk-4PN3UVZV.js";
@@ -283,4 +283,4 @@ export {
   ScmError,
   GitHubProvider
 };
-//# sourceMappingURL=chunk-VOJCSOVL.js.map
+//# sourceMappingURL=chunk-EPCR2GOE.js.map

package/dist/{chunk-5IMXQQQX.js → chunk-ETGNAHY3.js}

@@ -5,14 +5,14 @@ import {
   getCurrentRequestContext,
   runWithRequestContext,
   serverCallerInfo
-} from "./chunk-GNGIZJAC.js";
+} from "./chunk-LWLFWWA7.js";
 import {
   DEFAULT_EXECUTION_MODE
 } from "./chunk-ECJ52NSK.js";
 import {
   sanitizeErrorDetails,
   sanitizeStringLeaves
-} from "./chunk-A5D7666X.js";
+} from "./chunk-2AW2VHMK.js";
 import {
   SecurityError,
   TOOL_MANIFEST,
@@ -26,7 +26,7 @@ import {
   getTimeProvider,
   ok,
   resolveInsideRoot
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 import {
   getNexusDataDir,
   parseBoolValue
@@ -2343,4 +2343,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-5IMXQQQX.js.map
+//# sourceMappingURL=chunk-ETGNAHY3.js.map

package/dist/{chunk-KWQ5IR2A.js → chunk-FKMBZ53Y.js}

@@ -7,7 +7,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 
 // src/context/session-memory.ts
 import * as fs from "node:fs";
@@ -374,4 +374,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-KWQ5IR2A.js.map
+//# sourceMappingURL=chunk-FKMBZ53Y.js.map

package/dist/{chunk-WDYK7OAI.js → chunk-FTUBCD52.js}

@@ -4,7 +4,7 @@ import {
 import {
   assessReputation,
   sanitizeInput
-} from "./chunk-3JRQWWBD.js";
+} from "./chunk-JNRDNE26.js";
 import {
   allOf
 } from "./chunk-EZNIYU5T.js";
@@ -13,7 +13,7 @@ import {
   err,
   getTimeProvider,
   ok
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
 import { randomUUID } from "node:crypto";
@@ -477,4 +477,4 @@ export {
   createFailedReview,
   reviewPostingBlock
 };
-//# sourceMappingURL=chunk-WDYK7OAI.js.map
+//# sourceMappingURL=chunk-FTUBCD52.js.map

package/dist/{chunk-ZC6QDPMA.js → chunk-FWSAYHGV.js}

@@ -1,14 +1,14 @@
 import {
   IN_FAMILY_FALLBACK_OPTION
-} from "./chunk-TJ4VWR32.js";
+} from "./chunk-TMHCN5EY.js";
 import {
   sanitizeErrorDetails
-} from "./chunk-A5D7666X.js";
+} from "./chunk-2AW2VHMK.js";
 import {
   classifyExtractedError,
   getTimeProvider,
   isTimeoutText
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 import {
   resolveClassGuardMs
 } from "./chunk-4PN3UVZV.js";
@@ -156,4 +156,4 @@ export {
   SERVES_PROBE_PROMPT,
   probeServes
 };
-//# sourceMappingURL=chunk-ZC6QDPMA.js.map
+//# sourceMappingURL=chunk-FWSAYHGV.js.map

package/dist/{chunk-AWF35M67.js → chunk-H4ACPMJS.js}

@@ -1,14 +1,14 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-VOJCSOVL.js";
+} from "./chunk-EPCR2GOE.js";
 import {
   resolveToken
-} from "./chunk-UNIRQWHT.js";
+} from "./chunk-RI4IXOZT.js";
 import {
   err,
   ok
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 
 // src/scm/factory.ts
 async function createScmProvider(config) {
@@ -41,4 +41,4 @@ export {
   createScmProvider,
   createGitHubProvider
 };
-//# sourceMappingURL=chunk-AWF35M67.js.map
+//# sourceMappingURL=chunk-H4ACPMJS.js.map

package/dist/{chunk-GNGKWFC3.js → chunk-HESQ746B.js}

@@ -6,7 +6,7 @@ import {
   getErrorMessage,
   ok,
   resolveInsideRoot
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 import {
   findRepoRoot,
   getActiveWorkspaceRoot,
@@ -211,4 +211,4 @@ export {
   loadPapersRegistry,
   savePapersRegistry
 };
-//# sourceMappingURL=chunk-GNGKWFC3.js.map
+//# sourceMappingURL=chunk-HESQ746B.js.map

package/dist/{chunk-GAJRBRED.js → chunk-HK4LBUYY.js}

@@ -16,7 +16,7 @@ import {
   ok,
   recordUsageEvent,
   resolveRetryAfterMs
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 
 // src/adapters/base-adapter.ts
 var AdapterModelError = class extends ModelError {
@@ -1113,4 +1113,4 @@ export {
   gatewayAiSdkOptions,
   withGatewayUsageRecording
 };
-//# sourceMappingURL=chunk-GAJRBRED.js.map
+//# sourceMappingURL=chunk-HK4LBUYY.js.map

package/dist/{chunk-GTWTVDLP.js → chunk-II4XITQ6.js}

@@ -7,7 +7,7 @@ import {
   VERSION,
   isNodeVersionSupported,
   recordServerTransport
-} from "./chunk-GNGIZJAC.js";
+} from "./chunk-LWLFWWA7.js";
 import {
   checkGatewayHealth,
   cliFailsVerdict,
@@ -17,14 +17,14 @@ import {
   gatewaySlotServing,
   gatewayVerdict,
   printVoterTransportCheck
-} from "./chunk-42TS2JOS.js";
+} from "./chunk-6H4NUU7G.js";
 import {
   readOpenAICompatEndpoint,
   readOpenAICompatEnv
-} from "./chunk-DJ7QTY5J.js";
+} from "./chunk-C5WECFBR.js";
 import {
   claimGlobalRegistry
-} from "./chunk-PDT6QYKY.js";
+} from "./chunk-TFQMVUWQ.js";
 import {
   CODEX_LEGACY_LANDLOCK_CONFIG,
   CODEX_MCP_SERVER_UNAVAILABLE_REASON,
@@ -32,23 +32,23 @@ import {
   codexSandboxPreflight,
   createAllAdapters,
   createCliAdapter
-} from "./chunk-KLDUWDNU.js";
+} from "./chunk-ONYCBTOH.js";
 import {
   getNexusTmpDir
 } from "./chunk-JPFRRNRR.js";
 import {
   resolveGatewayEnv
-} from "./chunk-ZVSJPKEZ.js";
+} from "./chunk-Q5F4OBOK.js";
 import {
   probeCli
 } from "./chunk-TW6PJYTP.js";
 import {
   SERVES_PROBE_PROMPT
-} from "./chunk-ZC6QDPMA.js";
+} from "./chunk-FWSAYHGV.js";
 import {
   ClaudeCliAdapter,
   IN_FAMILY_FALLBACK_OPTION
-} from "./chunk-TJ4VWR32.js";
+} from "./chunk-TMHCN5EY.js";
 import {
   DEFAULT_CAPABILITIES,
   capitalize,
@@ -73,7 +73,7 @@ import {
   resolveGatewayCostDeclaration,
   symbols,
   writeLine
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 import {
   getLearningDir,
   getOutcomesFile,
@@ -1556,7 +1556,7 @@ async function doctorCommand(options = {}) {
   options.onResult?.(result);
   printDoctorResults(result, void 0, options.deferSummary === true);
   if (options.gateway === true || options.probe === true) {
-    const { formatGatewayReport } = await import("./doctor-gateway-report-3I7KQVU3.js");
+    const { formatGatewayReport } = await import("./doctor-gateway-report-4TXHTWUM.js");
     for (const line of formatGatewayReport(result.gateway, result.clis)) {
       process.stdout.write(line + "\n");
     }
@@ -1575,13 +1575,13 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-VBMDTRCF.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-5MRGQD2G.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
   }
   if (!result.configFile.found) {
-    const { runConfigInitSync } = await import("./setup-config-4NLQBTZH.js");
+    const { runConfigInitSync } = await import("./setup-config-KEPU4NTT.js");
     const configResult = runConfigInitSync(process.cwd(), false, false);
     if (configResult.success && configResult.created) {
       writeLine2(`\u2713 Generated config: ${configResult.path}`);
@@ -1680,4 +1680,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-GTWTVDLP.js.map
+//# sourceMappingURL=chunk-II4XITQ6.js.map

package/dist/{chunk-3JRQWWBD.js → chunk-JNRDNE26.js}

@@ -6,7 +6,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 import {
   CACHE_TIMEOUTS
 } from "./chunk-4PN3UVZV.js";
@@ -511,4 +511,4 @@ export {
   resolveReputationGatingMode,
   gateWithReputation
 };
-//# sourceMappingURL=chunk-3JRQWWBD.js.map
+//# sourceMappingURL=chunk-JNRDNE26.js.map

package/dist/{chunk-GNGIZJAC.js → chunk-LWLFWWA7.js}

@@ -1,10 +1,10 @@
 import {
   getTimeProvider
-} from "./chunk-SU47CN4Q.js";
+} from "./chunk-7XJZTSHW.js";
 
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "9.2.0" : "dev";
+var VERSION = true ? "9.4.0" : "dev";
 var NODE_ENGINE_RANGE = ">=24";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -106,4 +106,4 @@ export {
   contextForLogging,
   measuredTrustTier
 };
-//# sourceMappingURL=chunk-GNGIZJAC.js.map
+//# sourceMappingURL=chunk-LWLFWWA7.js.map