@phuetz/code-buddy 1.3.1 → 1.4.0

package/README.md

@@ -17,7 +17,7 @@
 <p align="center">
   <a href="https://github.com/phuetz/code-buddy/stargazers"><img src="https://img.shields.io/github/stars/phuetz/code-buddy?style=flat-square&logo=github&color=feca57&label=Star" alt="GitHub stars"/></a>
   <img src="https://img.shields.io/badge/Tests-27K%2B-00d26a?style=flat-square&logo=jest" alt="Tests"/>
-  <img src="https://img.shields.io/badge/v1.3.1-GA-blueviolet?style=flat-square" alt="Version 1.3.1 GA"/>
+  <img src="https://img.shields.io/badge/v1.4.0-GA-blueviolet?style=flat-square" alt="Version 1.4.0 GA"/>
 </p>
 
 <br/>
@@ -101,13 +101,32 @@ An open-source, multi-provider AI coding agent with a terminal UI, an HTTP/WebSo
   <img src="docs/screenshots/self-audit-bug-1.png" alt="Self-audit bug found" width="820"/>
 </p>
 
+**On your phone — chat with the same agent over Telegram.** Code Buddy runs as a messaging-channel bot, so the agent you use in the terminal is reachable from your pocket. Real, unedited captures (the bot is named *"Lisa"* here). The system prompt and tools **scale to each question** — light and instant for plain chat, escalating to load tools only when the request needs them (the same on-demand pattern as Codex / Claude):
+
+<table>
+  <tr>
+    <td width="33%" align="center" valign="top">
+      <img src="docs/screenshots/telegram-companion-chat.jpg" alt="Telegram chat: instant greeting, the time, and tomorrow's live weather in Paris via web search" width="250"/><br/>
+      <sub><b>Chat + live tools, on demand</b><br/>"Bonjour" answers instantly; <i>"what time is it?"</i> and <i>"tomorrow's weather in Paris?"</i> pull the time and <b><code>web_search</code></b> tools — only when actually asked.</sub>
+    </td>
+    <td width="33%" align="center" valign="top">
+      <img src="docs/screenshots/telegram-companion-selfcode.jpg" alt="Telegram chat: the agent confirms it can read and inspect its own source code via view_file" width="250"/><br/>
+      <sub><b>Reads its own code</b><br/>Confirms it can inspect its own source (or any accessible file) via <code>view_file</code> — then introduces its recursive self-improvement →</sub>
+    </td>
+    <td width="33%" align="center" valign="top">
+      <img src="docs/screenshots/telegram-companion-recursive.jpg" alt="Telegram chat: the agent explains its recursive self-improvement — Manus-inspired lessons in RULE / PATTERN / CONTEXT categories, stored in .codebuddy/lessons.md" width="250"/><br/>
+      <sub><b>Improves itself across sessions</b><br/>The <code>lessons_*</code> loop (Manus-inspired): after each fix or success it extracts <b>RULE / PATTERN / CONTEXT</b> lessons, persisted to <code>.codebuddy/lessons.md</code> (project + global). <i>Accurate — matches its real source.</i></sub>
+    </td>
+  </tr>
+</table>
+
 More desktop demos (Fleet, Autonomy, Companion, …) and captures: [`cowork/readme.md`](cowork/readme.md#demo) · [`docs/screenshots/`](docs/screenshots/README.md).
 
 ---
 
 ## What's shipped
 
-**1.2.0 GA — these aren't roadmap items.** The captures above are unedited, and the core runs today:
+**1.4.0 GA — these aren't roadmap items.** The captures above are unedited, and the core runs today:
 
 - ✅ **`$0` local coding agent** — a local Ollama model reasons on screen, then calls tools to do real work. *(the demos above)*
 - ✅ **ChatGPT Plus/Pro → `gpt-5.5` at `$0`** — `buddy login`, flat-fee, no API key, no per-token metering.
@@ -301,7 +320,7 @@ Code Buddy is one engine — terminal, desktop, and HTTP — that an LLM drives
 | [Config & modes](#config--modes) | TOML profiles, permission/agent/security modes, model-aware limits | [configuration.md](docs/configuration.md) |
 
 ### Providers & login
-Code Buddy talks to **15 LLM providers** through one OpenAI-compatible dispatcher (`src/codebuddy/client.ts`), picking exactly one strategy at startup: Grok, Claude, GPT, Gemini, Ollama, LM Studio, AWS Bedrock, Azure, Groq, Together, Fireworks, OpenRouter, vLLM, Copilot, Mistral. **`buddy login`** signs into a ChatGPT Plus/Pro subscription (routed via OpenAI's Codex Responses backend) and **`buddy login xai`** into SuperGrok — both **flat-fee, no API key, cost reported `$0.0000`** (no per-token metering). Multiple logins coexist: **`buddy llm`** lists them, **`buddy llm ensemble "<q>"`** asks them all and synthesizes one answer, and `CODEBUDDY_LLM_FAILOVER=1` auto-continues on the next active LLM when one errors (per-provider circuit breakers). `[model_pairs]` in TOML splits an *architect* and *editor* model.
+Code Buddy talks to **15 LLM providers** through one OpenAI-compatible dispatcher (`src/codebuddy/client.ts`), picking exactly one strategy at startup: Grok, Claude, GPT, Gemini, Ollama, LM Studio, AWS Bedrock, Azure, Groq, Together, Fireworks, OpenRouter, vLLM, Copilot, Mistral. **`buddy login`** signs into a ChatGPT Plus/Pro subscription (routed via OpenAI's Codex Responses backend) and **`buddy login xai`** into SuperGrok — both **flat-fee, no API key, cost reported `$0.0000`** (no per-token metering). Multiple logins coexist: **`buddy llm`** lists them, **`buddy llm ensemble "<q>"`** asks them all and synthesizes one answer, and `CODEBUDDY_LLM_FAILOVER=1` auto-continues on the next active LLM when one errors (per-provider circuit breakers). `[model_pairs]` in TOML splits an *architect* and *editor* model. **Validated live (2026-06-23, real keys / local):** chat works on **Mistral, Ollama, Gemini, xAI/Grok, OpenRouter and DeepSeek**; agentic tool-use (real `create_file`/`bash` calls) is confirmed on **Mistral** and **Grok**. Ollama/Grok/ChatGPT are also reproduced in [`docs/proof.md`](docs/proof.md). Anthropic is wired but its key needs API credits to verify. Other listed providers share the same dispatcher but aren't individually load-tested here.
 
 ### The agentic loop
 The core is a stateful multi-turn loop (`src/agent/execution/agent-executor.ts`, `runTurnLoop`): the LLM proposes tool calls, the executor validates + confirms + runs them, feeds results back, and loops until done or you stop. A **middleware pipeline** (`src/agent/middleware/`) adds turn/cost limits, reasoning injection, workflow guards, auto-repair, and quality gates in priority order. Before any risky action the **ConfirmationService** checks permission mode → declarative rules → session flags → the Guardian Agent, and fail-closed guards block catastrophic commands (`rm -rf /`, fork bombs, `drop database`). Run it interactively (`buddy`), one-shot (`buddy -p "<task>"`), or fully autonomous (`buddy --yolo`).
@@ -337,7 +356,7 @@ Layered, fail-closed safety: the **Guardian Agent** scores each operation 0–10
 Code Buddy runs on **20+ messaging platforms** — Telegram, Discord, Slack, WhatsApp, Signal, Matrix, IRC, Nostr, Mattermost, Nextcloud Talk, iMessage (real persistent transports with auto-reconnect) plus REST/webhook adapters (Teams, Google Chat, Feishu, LINE, ntfy, DingTalk, WeCom, …). **DM pairing** prevents unauthorized credit burn: an unknown user gets a 6-char code (15-min TTL) you approve via `buddy pairing approve`. (A few niche adapters — Twitch/Tlon/Gmail — are in-process stubs, and Feishu real-time *inbound* needs the Lark SDK installed.)
 
 ### Git & code intelligence
-`buddy dev run` plans + implements + tests + **auto-commits** with a Conventional-Commit message; **`/pr`** opens a summarized PR; `lsp_rename`/`lsp_code_action` drive language servers for safe refactors; the **bug finder** flags 25+ patterns across 6 languages. For whole-repo understanding, the optional **Code Explorer** (the `gitnexus` MCP server) pre-indexes the repo into a knowledge graph with 31 tools for impact/blast-radius, coupling, hotspots, and execution traces. Code Buddy also runs as an **ACP** agent (`buddy acp`) so editors like Zed can drive it natively.
+`buddy dev run` plans + implements + tests + **auto-commits** with a Conventional-Commit message; **`/pr`** opens a summarized PR; `lsp_rename`/`lsp_code_action` drive language servers for safe refactors; the **bug finder** flags 25+ patterns across 6 languages. For whole-repo understanding, the optional **[Code Explorer](https://github.com/phuetz/code-explorer)** (the `gitnexus` MCP server — a standalone Rust code-intelligence engine) pre-indexes the repo into a knowledge graph with 31 tools for impact/blast-radius, coupling, hotspots, and execution traces, answering structural questions with ~40× less context. Code Buddy also runs as an **ACP** agent (`buddy acp`) so editors like Zed can drive it natively.
 
 ### Config & modes
 Configure via env vars, **TOML profiles** (`[profiles.<name>]`, `buddy --profile`), and per-project `.codebuddy/settings.json`. **Permission modes** gate approvals, **agent modes** (`plan`/`code`/`ask`/`architect`) restrict the tool surface, and **security modes** (`suggest`/`auto-edit`/`full-auto`) tune the approval flow. Per-model capabilities (context window, max output, patch format) live in `src/config/model-tools.ts`. The UI ships in **English and French (complete)**; `de`/`es`/`ja`/`zh` are registered locale scaffolds that currently fall back to English.

package/dist/agent/autonomous/agentic-coding-runner.d.ts

@@ -2,7 +2,7 @@ import { type AgenticCodingApprovalDecision, type AgenticCodingExecutionGate, ty
 import { type AgenticCodingCheckpoint } from './checkpoint-manager.js';
 import { normalizeGitPath, isPathAllowedByContract, resolveRepoPath } from './agentic-coding-paths.js';
 export { normalizeGitPath, isPathAllowedByContract, resolveRepoPath };
-import { type GitNexusContext, type WorldModelInvariants } from '../../tools/gitnexus-tool.js';
+import { type CodeExplorerContext, type WorldModelInvariants } from '../../tools/code-explorer-tool.js';
 import type { FleetDispatchProfile } from '../../fleet/dispatch-profile.js';
 import { persistRunArtifact, applyDeclaredEdits, previewDeclaredEdits, runVerificationCommands } from './agentic-coding-edits.js';
 export { persistRunArtifact, applyDeclaredEdits, previewDeclaredEdits, runVerificationCommands };
@@ -1648,7 +1648,7 @@ export interface AgenticCodingRunReport {
     verificationRequested: boolean;
     workflow: AgenticCodingWorkflowReport;
     workflowBuilderProposal?: AgenticCodingWorkflowBuilderProposalReport;
-    gitnexusEvidence?: GitNexusContext;
+    codeexplorerEvidence?: CodeExplorerContext;
     worldModelInvariants?: WorldModelInvariants | null;
 }
 export interface AgenticCodingObservabilityReport {

package/dist/agent/autonomous/agentic-coding-runner.js

@@ -12,7 +12,7 @@ import { normalizeGitPath, isPathAllowedByContract, resolveRepoPath, } from './a
 // Re-export the extracted path helpers for backward compatibility — they used
 // to be defined in this module and are imported from here elsewhere.
 export { normalizeGitPath, isPathAllowedByContract, resolveRepoPath };
-import { GitNexusTool } from '../../tools/gitnexus-tool.js';
+import { CodeExplorerTool } from '../../tools/code-explorer-tool.js';
 import { evaluateScope } from '../scope-awareness.js';
 import { getActiveRunStore, RunStore } from '../../observability/run-store.js';
 import { ConfirmationService } from '../../utils/confirmation-service.js';
@@ -2473,13 +2473,13 @@ export function buildAgenticCodingEditProposalProducerDispatch(report, artifacts
                         `Recommended tool call: ${fleet.invocation?.tool ?? 'none'} ${JSON.stringify(fleet.invocation?.args ?? {})}`,
                         ...fleet.safety.map((note) => `- ${note}`),
                     ] : []),
-                    ...(report.gitnexusEvidence ? [
+                    ...(report.codeexplorerEvidence ? [
                         '',
-                        '=== GitNexus Context & Insights ===',
-                        `Likely Files to Edit: ${JSON.stringify(report.gitnexusEvidence.likelyFiles)}`,
-                        `Dependent Symbols: ${JSON.stringify(report.gitnexusEvidence.dependentSymbols)}`,
-                        `Tests to Watch: ${JSON.stringify(report.gitnexusEvidence.testsToWatch)}`,
-                        `Notes: ${report.gitnexusEvidence.notes || 'None'}`
+                        '=== CodeExplorer Context & Insights ===',
+                        `Likely Files to Edit: ${JSON.stringify(report.codeexplorerEvidence.likelyFiles)}`,
+                        `Dependent Symbols: ${JSON.stringify(report.codeexplorerEvidence.dependentSymbols)}`,
+                        `Tests to Watch: ${JSON.stringify(report.codeexplorerEvidence.testsToWatch)}`,
+                        `Notes: ${report.codeexplorerEvidence.notes || 'None'}`
                     ] : []),
                     ...(report.worldModelInvariants ? [
                         '',
@@ -2847,7 +2847,7 @@ export function aggregateReports(reports, originalContract, options, status) {
     }
     const uniqueBlockedReasons = Array.from(new Set(blockedReasons));
     const uniqueValidationErrors = Array.from(new Set(validationErrors));
-    const gitnexusEvidence = reports.find(r => r.gitnexusEvidence)?.gitnexusEvidence;
+    const codeexplorerEvidence = reports.find(r => r.codeexplorerEvidence)?.codeexplorerEvidence;
     const worldModelInvariants = reports.find(r => r.worldModelInvariants)?.worldModelInvariants;
     const plan = buildExecutionPlan({
         approvalDecision: undefined,
@@ -2901,7 +2901,7 @@ export function aggregateReports(reports, originalContract, options, status) {
         verification,
         verificationRequested: Boolean(options.runVerification),
         workflow: buildWorkflowReport(plan),
-        gitnexusEvidence,
+        codeexplorerEvidence,
         worldModelInvariants,
     };
 }
@@ -2972,7 +2972,7 @@ export function buildFinalReport(checkpoint) {
         verification,
         verificationRequested: Boolean(options.runVerification),
         workflow: buildWorkflowReport(plan),
-        gitnexusEvidence: checkpoint.gitnexusEvidence,
+        codeexplorerEvidence: checkpoint.codeexplorerEvidence,
         worldModelInvariants: checkpoint.worldModelInvariants,
     };
 }
@@ -3173,24 +3173,24 @@ export async function runAgenticCodingCell(options) {
     const repo = contract?.repo ?? '';
     const rulesFiles = contract ? await collectRulesFiles(contract.repo) : [];
     const executionGate = contract ? assessAgenticCodingExecutionGate(contract) : undefined;
-    let gitnexusEvidence;
+    let codeexplorerEvidence;
     let worldModelInvariants = null;
-    if (checkpointToResume?.gitnexusEvidence) {
-        gitnexusEvidence = checkpointToResume.gitnexusEvidence;
+    if (checkpointToResume?.codeexplorerEvidence) {
+        codeexplorerEvidence = checkpointToResume.codeexplorerEvidence;
     }
     else if (contract) {
-        observability.stepStart('gitnexus-context', { task: contract.task });
-        const gitnexus = new GitNexusTool();
-        gitnexusEvidence = await gitnexus.ask(contract.task);
-        observability.stepEnd('gitnexus-context', { hasEvidence: Boolean(gitnexusEvidence) });
+        observability.stepStart('code-explorer-context', { task: contract.task });
+        const codeExplorer = new CodeExplorerTool();
+        codeexplorerEvidence = await codeExplorer.ask(contract.task);
+        observability.stepEnd('code-explorer-context', { hasEvidence: Boolean(codeexplorerEvidence) });
     }
     if (checkpointToResume?.worldModelInvariants !== undefined) {
         worldModelInvariants = checkpointToResume.worldModelInvariants;
     }
     else if (contract) {
         observability.stepStart('world-model-read', { repo: contract.repo });
-        const gitnexus = new GitNexusTool();
-        worldModelInvariants = await gitnexus.readWorldModel();
+        const codeExplorer = new CodeExplorerTool();
+        worldModelInvariants = await codeExplorer.readWorldModel();
         observability.stepEnd('world-model-read', { hasInvariants: Boolean(worldModelInvariants) });
     }
     let dirtyFiles = [];
@@ -3249,7 +3249,7 @@ export async function runAgenticCodingCell(options) {
             verificationRequested: Boolean(options.runVerification),
             workflow: buildWorkflowReport(plan),
             workflowBuilderProposal,
-            gitnexusEvidence,
+            codeexplorerEvidence,
             worldModelInvariants,
         });
     }
@@ -3277,7 +3277,7 @@ export async function runAgenticCodingCell(options) {
             contract: finalContract,
             step: 'initialized',
             timestamp: new Date().toISOString(),
-            gitnexusEvidence,
+            codeexplorerEvidence,
             worldModelInvariants,
         });
         observability.stepEnd('checkpoint-save', { checkpointStep: 'initialized', runId: options.runId });
@@ -3473,7 +3473,7 @@ export async function runAgenticCodingCell(options) {
                     edges: [],
                 },
                 workflowBuilderProposal,
-                gitnexusEvidence,
+                codeexplorerEvidence,
                 worldModelInvariants,
             };
             const tempArtifacts = deriveAgenticCodingProposalLoopArtifacts(options.editProposalFile || path.join(path.dirname(taskFile), 'proposal-loop.json'));
@@ -3611,7 +3611,7 @@ export async function runAgenticCodingCell(options) {
         verificationRequested: Boolean(options.runVerification),
         workflow: buildWorkflowReport(plan),
         workflowBuilderProposal,
-        gitnexusEvidence,
+        codeexplorerEvidence,
         worldModelInvariants,
     });
 }
@@ -5550,7 +5550,7 @@ export function buildAgenticCodingProposalLoopCoworkWorkspace(check, queue, step
         kind: 'agentic-coding-harness-contract',
         label: 'Harness / security and orchestration contract',
         mode: 'passive',
-        objective: 'Converge Cowork, Code Buddy, GitNexus, Fleet and workflow artifacts around explicit authority boundaries.',
+        objective: 'Converge Cowork, Code Buddy, CodeExplorer, Fleet and workflow artifacts around explicit authority boundaries.',
         safetyNotes: [
             'Harness data is display metadata only.',
             'It defines what each artifact means; it does not execute, approve, write memory, push or deploy.',

package/dist/agent/autonomous/checkpoint-manager.d.ts

@@ -1,6 +1,6 @@
 import { AgenticCodingTaskContract } from './agentic-coding-contract.js';
 import type { AgenticCodingRunOptions, AgenticCodingRunReport, AgenticCodingVerificationResult } from './agentic-coding-runner.js';
-import { GitNexusContext, WorldModelInvariants } from '../../tools/gitnexus-tool.js';
+import { CodeExplorerContext, WorldModelInvariants } from '../../tools/code-explorer-tool.js';
 export interface AgenticCodingCheckpoint {
     runId: string;
     options: AgenticCodingRunOptions;
@@ -12,7 +12,7 @@ export interface AgenticCodingCheckpoint {
     reports?: AgenticCodingRunReport[];
     timestamp: string;
     verification?: AgenticCodingVerificationResult[];
-    gitnexusEvidence?: GitNexusContext;
+    codeexplorerEvidence?: CodeExplorerContext;
     worldModelInvariants?: WorldModelInvariants | null;
 }
 export declare function getCheckpointPath(runId: string): string;

package/dist/agent/base-agent.d.ts

@@ -192,7 +192,7 @@ export declare abstract class BaseAgent extends EventEmitter implements Agent {
     getMCPClient(): MCPClient;
     protected initializeMCP(): void;
     /** Resolves once MCP server initialization has settled (or no-op if MCP was
-     * never started). Headless/one-shot callers await this so the gitnexus-style
+     * never started). Headless/one-shot callers await this so the code-explorer-style
      * MCP tools are registered before the first turn instead of racing init. */
     getMCPReady(): Promise<void>;
     getContextStats(): import("./facades/agent-context-facade.js").ContextStats;

package/dist/agent/base-agent.js

@@ -317,7 +317,7 @@ export class BaseAgent extends EventEmitter {
         this.infrastructureFacade.initializeMCP();
     }
     /** Resolves once MCP server initialization has settled (or no-op if MCP was
-     * never started). Headless/one-shot callers await this so the gitnexus-style
+     * never started). Headless/one-shot callers await this so the code-explorer-style
      * MCP tools are registered before the first turn instead of racing init. */
     getMCPReady() {
         return this.infrastructureFacade.getMCPReady();

package/dist/agent/execution/tool-selection-strategy.js

@@ -39,7 +39,10 @@ const DEFAULT_CONFIG = {
     // "agent proposes, human approves" path, so the model must always see it (a
     // RAG-gated propose tool would rarely surface). `lessons_list` stays out
     // (admin-style, not needed per-turn). Wakes the dormant feature in lessons-tracker.ts.
-    alwaysInclude: ['view_file', 'bash', 'search', 'str_replace_editor', 'web_search', 'remember', 'memory_propose', 'lessons_add', 'lessons_propose', 'lessons_search'],
+    // `tool_search` is ALWAYS exposed so the model can discover & pull ANY tool
+    // on demand when the per-query TF-IDF subset missed it (progressive disclosure,
+    // like Codex/Claude). Without it, a tool outside the top-K is unreachable.
+    alwaysInclude: ['view_file', 'bash', 'search', 'str_replace_editor', 'web_search', 'remember', 'memory_propose', 'lessons_add', 'lessons_propose', 'lessons_search', 'tool_search'],
     useAdaptiveThreshold: true,
     enableCaching: true,
     cacheTTLMs: 5 * 60 * 1000, // 5 minutes

package/dist/agent/hermes-tool-parity-local.js

@@ -1,4 +1,4 @@
-import { CORE_TOOLS, MORPH_EDIT_TOOL, isMorphEnabled, SEARCH_TOOLS, TODO_TOOLS, KANBAN_TOOLS, MESSAGING_TOOLS, YUANBAO_TOOLS, HOMEASSISTANT_TOOLS, MOA_TOOLS, SPOTIFY_TOOLS, X_SEARCH_TOOLS, FEISHU_TOOLS, CRON_TOOLS, WEB_TOOLS, ADVANCED_TOOLS, MULTIMODAL_TOOLS, COMPUTER_CONTROL_TOOLS, BROWSER_TOOLS, CANVAS_TOOLS, AGENT_TOOLS, FIRECRAWL_TOOLS, LSP_TOOLS, SECRETS_TOOLS, ADVISOR_TOOLS, ASK_USER_QUESTION_TOOLS, EXIT_PLAN_MODE_TOOLS, CODEBASE_REPLACE_TOOLS, SESSION_TOOLS, GITNEXUS_TOOLS, } from '../codebuddy/tool-definitions/index.js';
+import { CORE_TOOLS, MORPH_EDIT_TOOL, isMorphEnabled, SEARCH_TOOLS, TODO_TOOLS, KANBAN_TOOLS, MESSAGING_TOOLS, YUANBAO_TOOLS, HOMEASSISTANT_TOOLS, MOA_TOOLS, SPOTIFY_TOOLS, X_SEARCH_TOOLS, FEISHU_TOOLS, CRON_TOOLS, WEB_TOOLS, ADVANCED_TOOLS, MULTIMODAL_TOOLS, COMPUTER_CONTROL_TOOLS, BROWSER_TOOLS, CANVAS_TOOLS, AGENT_TOOLS, FIRECRAWL_TOOLS, LSP_TOOLS, SECRETS_TOOLS, ADVISOR_TOOLS, ASK_USER_QUESTION_TOOLS, EXIT_PLAN_MODE_TOOLS, CODEBASE_REPLACE_TOOLS, SESSION_TOOLS, CODE_EXPLORER_TOOLS, } from '../codebuddy/tool-definitions/index.js';
 import { FLEET_TOOLS } from '../codebuddy/fleet-tool-defs.js';
 import { buildHermesToolParityManifest, } from './hermes-tool-parity-manifest.js';
 export function collectOfflineBuiltinTools() {
@@ -32,7 +32,7 @@ export function collectOfflineBuiltinTools() {
         CODEBASE_REPLACE_TOOLS,
         SESSION_TOOLS,
         FLEET_TOOLS,
-        GITNEXUS_TOOLS,
+        CODE_EXPLORER_TOOLS,
     ];
     const byName = new Map();
     for (const tool of groups.flat()) {

package/dist/agent/tool-handler.js

@@ -16,7 +16,7 @@
  * Tool instances are lazy-loaded on first access for optimal startup time.
  */
 import { TextEditorTool, MorphEditorTool, ImageTool, BashTool, } from "../tools/index.js";
-import { getFormalToolRegistry, createTextEditorTools, createBashTools, createLsTools, createSearchTools, createWebTools, createTodoTools, createCronjobTools, createDockerTools, createKubernetesTools, createGitTools, createMiscTools, createBrowserTools, createProcessTools, createVisionTools, createScriptTools, createPlanTools, createKnowledgeTools, createRelationshipIntelligenceTools, createInternetScoutTools, createLeadScoutTools, createBrowserOperatorTools, createWindowsTools, createMemoryTools, createParallelTools, createAttentionTools, createSkillsInspectionTools, createLessonsTools, createUserModelTools, createAliasTools, createMultimodalTools, createAdvancedTools, createCanvasTools, createLspTools, createMergeConflictTools, createVulnScannerTools, createCodebaseReplaceTools, createAdvisorTools, createFleetTools, createAskUserQuestionTools, createExitPlanModeTools, createGuiTools, createSessionTools, createGitNexusTools, createScreenpipeTools, } from "../tools/registry/index.js";
+import { getFormalToolRegistry, createTextEditorTools, createBashTools, createLsTools, createSearchTools, createWebTools, createTodoTools, createCronjobTools, createDockerTools, createKubernetesTools, createGitTools, createMiscTools, createBrowserTools, createProcessTools, createVisionTools, createScriptTools, createPlanTools, createKnowledgeTools, createRelationshipIntelligenceTools, createInternetScoutTools, createLeadScoutTools, createBrowserOperatorTools, createWindowsTools, createMemoryTools, createParallelTools, createAttentionTools, createSkillsInspectionTools, createLessonsTools, createUserModelTools, createAliasTools, createMultimodalTools, createAdvancedTools, createCanvasTools, createLspTools, createMergeConflictTools, createVulnScannerTools, createCodebaseReplaceTools, createAdvisorTools, createFleetTools, createAskUserQuestionTools, createExitPlanModeTools, createGuiTools, createSessionTools, createCodeExplorerTools, createScreenpipeTools, } from "../tools/registry/index.js";
 import { createRegisterToolTool } from "../tools/register-tool-handler.js";
 import { getMCPManager } from "../codebuddy/tools.js";
 import { getErrorMessage } from "../errors/index.js";
@@ -238,7 +238,7 @@ export class ToolHandler {
             ...createExitPlanModeTools(),
             ...createGuiTools(),
             ...createSessionTools(),
-            ...createGitNexusTools(),
+            ...createCodeExplorerTools(),
             ...createScreenpipeTools(),
             // Self-improvement: the agent can author its own tools (opt-in only).
             ...(process.env.CODEBUDDY_SELF_IMPROVE === 'true' ? [createRegisterToolTool()] : []),

package/dist/codebuddy/providers/provider-chatgpt-responses.d.ts

@@ -124,6 +124,10 @@ export declare class ChatGptResponsesProvider implements Provider {
      */
     private lastTurnReasoningItems;
     private disableModelFallback;
+    /** The model this provider was constructed with (the user's configured
+     *  session model). Never mutated by per-call overrides or fallback, so it is
+     *  the safe remap target when a mis-routed / non-Codex model arrives. */
+    private readonly configuredModel;
     constructor(opts: ChatGptResponsesProviderOptions);
     setModel(model: string): void;
     chat(messages: CodeBuddyMessage[], tools?: CodeBuddyTool[], opts?: ChatOptions): Promise<CodeBuddyResponse>;

package/dist/codebuddy/providers/provider-chatgpt-responses.js

@@ -54,11 +54,7 @@ function pickFallbackModel(current) {
     return FALLBACK_MODELS[idx + 1] ?? null;
 }
 /** Models served only by the classic OpenAI API — the ChatGPT/Codex backend
- *  never exposes them. When one reaches this provider WITHOUT an explicit user
- *  choice (e.g. a secondary call inheriting the global `gpt-4o` config default
- *  instead of the active session model), remap proactively to the known-good
- *  Codex model. This skips a guaranteed-failed round-trip and the noisy
- *  user-facing warning. (smoke-test finding F7, 2026-05-29) */
+ *  never exposes them. (smoke-test finding F7, 2026-05-29) */
 const CODEX_UNSUPPORTED_MODELS = new Set([
     'gpt-4o',
     'gpt-4o-mini',
@@ -66,13 +62,33 @@ const CODEX_UNSUPPORTED_MODELS = new Set([
     'gpt-4',
     'gpt-3.5-turbo',
 ]);
-function resolveCodexModel(model, hasExplicitModel) {
-    if (!hasExplicitModel && CODEX_UNSUPPORTED_MODELS.has(model)) {
-        const remapped = FALLBACK_MODELS[0] ?? 'gpt-5.2';
-        logger.debug(`[chatgpt-responses] "${model}" is not served by the Codex backend; using "${remapped}". Set --model to override.`);
-        return remapped;
-    }
-    return model;
+/** True when the ChatGPT/Codex backend can actually serve `model`: the gpt-5
+ *  family, the o-series reasoning models, and codex-suffixed slugs. Classic
+ *  gpt-4* (CODEX_UNSUPPORTED_MODELS) and other vendors' models (grok-*,
+ *  claude-*, gemini-*, …) are NOT served and would 400. */
+function isCodexServableModel(model) {
+    if (CODEX_UNSUPPORTED_MODELS.has(model))
+        return false;
+    if (FALLBACK_MODELS.includes(model))
+        return true;
+    return /^gpt-5/i.test(model) || /^o[1-9]/i.test(model) || /codex/i.test(model);
+}
+/** When a model the Codex backend cannot serve reaches this provider WITHOUT an
+ *  explicit `--model`, remap proactively — preferring the user's configured
+ *  session model — instead of firing a guaranteed-failed round-trip (and a
+ *  confusing fallback to yet another unsupported slug). Two real mis-routes hit
+ *  this: a secondary call inheriting a classic `gpt-4o` default (F7), and the
+ *  agent's task-router handing back a `grok-*` coding model on a ChatGPT session
+ *  (which otherwise 400s, then falls back to gpt-5.2 and 400s again → crash).
+ *  An explicit `--model` is always respected. (cross-vendor fix, 2026-06-21) */
+function resolveCodexModel(model, hasExplicitModel, configuredModel) {
+    if (hasExplicitModel || isCodexServableModel(model))
+        return model;
+    const target = configuredModel && isCodexServableModel(configuredModel)
+        ? configuredModel
+        : (FALLBACK_MODELS[0] ?? 'gpt-5.2');
+    logger.debug(`[chatgpt-responses] "${model}" is not served by the Codex backend; using "${target}". Set --model to override.`);
+    return target;
 }
 // ─────────────────────────────────────────────────────────────────────
 // Provider implementation
@@ -96,10 +112,15 @@ export class ChatGptResponsesProvider {
      */
     lastTurnReasoningItems = [];
     disableModelFallback;
+    /** The model this provider was constructed with (the user's configured
+     *  session model). Never mutated by per-call overrides or fallback, so it is
+     *  the safe remap target when a mis-routed / non-Codex model arrives. */
+    configuredModel;
     constructor(opts) {
         this.authProvider = opts.authProvider;
         this.refreshAuth = opts.refreshAuth ?? opts.authProvider;
         this.currentModel = opts.model;
+        this.configuredModel = opts.model;
         this.promptCacheKey = `cb-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
         this.disableModelFallback = opts.disableModelFallback ?? false;
     }
@@ -148,7 +169,7 @@ export class ChatGptResponsesProvider {
         };
     }
     async *chatStream(messages, tools = [], opts = {}) {
-        const model = resolveCodexModel(opts.model ?? this.currentModel, opts.model != null);
+        const model = resolveCodexModel(opts.model ?? this.currentModel, opts.model != null, this.configuredModel);
         // If this is a brand-new conversational turn (last user message has
         // no preceding tool round in messages), drop any stale reasoning
         // blobs from the previous turn — they belonged to a different

package/dist/codebuddy/providers/provider-openai-compat.js

@@ -317,6 +317,14 @@ export class OpenAICompatProvider {
         if (this.isLocalInference()) {
             return false;
         }
+        // `search_parameters` is an xAI/Grok-specific field. Sending it to other
+        // OpenAI-compatible providers (Mistral, Groq, Together, Fireworks, …)
+        // is rejected with HTTP 422. When search is off (the default) there is
+        // nothing to send anyway, so omit the field — a plain request must never
+        // carry a disabled-search config that breaks the upstream.
+        if (!searchParams.mode || searchParams.mode === 'off') {
+            return false;
+        }
         if (this.isXaiProvider()) {
             logger.debug('Skipping deprecated search_parameters for xAI provider', {
                 source: 'OpenAICompatProvider',

package/dist/codebuddy/tool-definitions/code-explorer-tools.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CodeExplorer Tool Definitions
+ *
+ * OpenAI function calling schema for the CodeExplorer tool.
+ */
+import type { CodeBuddyTool } from './types.js';
+export declare const CODE_EXPLORER_ASK_TOOL: CodeBuddyTool;
+export declare const CODE_EXPLORER_TOOLS: CodeBuddyTool[];

package/dist/codebuddy/tool-definitions/code-explorer-tools.js

@@ -0,0 +1,24 @@
+/**
+ * CodeExplorer Tool Definitions
+ *
+ * OpenAI function calling schema for the CodeExplorer tool.
+ */
+export const CODE_EXPLORER_ASK_TOOL = {
+    type: 'function',
+    function: {
+        name: 'code_explorer_ask',
+        description: 'Consult CodeExplorer for a query or code understanding request. Returns related files, dependent symbols, tests to watch, and technical recommendations. This is a read-only tool.',
+        parameters: {
+            type: 'object',
+            properties: {
+                query: {
+                    type: 'string',
+                    description: 'The query or task description to ask CodeExplorer about.',
+                },
+            },
+            required: ['query'],
+        },
+    },
+};
+export const CODE_EXPLORER_TOOLS = [CODE_EXPLORER_ASK_TOOL];
+//# sourceMappingURL=code-explorer-tools.js.map

package/dist/codebuddy/tool-definitions/graph-tools.d.ts

@@ -1,5 +1,5 @@
 /**
- * Graph Tool Definitions — GitNexus Knowledge Graph
+ * Graph Tool Definitions — CodeExplorer Knowledge Graph
  *
  * OpenAI function calling schemas for:
  * - analyze_impact: Blast radius analysis for symbol changes

package/dist/codebuddy/tool-definitions/graph-tools.js

@@ -1,5 +1,5 @@
 /**
- * Graph Tool Definitions — GitNexus Knowledge Graph
+ * Graph Tool Definitions — CodeExplorer Knowledge Graph
  *
  * OpenAI function calling schemas for:
  * - analyze_impact: Blast radius analysis for symbol changes

package/dist/codebuddy/tool-definitions/index.d.ts

@@ -37,6 +37,6 @@ export { EXIT_PLAN_MODE_TOOL, EXIT_PLAN_MODE_TOOLS, } from './exit-plan-mode-too
 export { CODEBASE_REPLACE_TOOL, CODEBASE_REPLACE_TOOLS, } from './codebase-replace-tools.js';
 export { GENERATE_DOCUMENT_TOOL, DOCUMENT_GENERATOR_TOOLS, } from './document-tools.js';
 export { SESSION_TOOLS } from './session-tools.js';
-export { GITNEXUS_ASK_TOOL, GITNEXUS_TOOLS, } from './gitnexus-tools.js';
+export { CODE_EXPLORER_ASK_TOOL, CODE_EXPLORER_TOOLS, } from './code-explorer-tools.js';
 export type { CodeBuddyTool as Tool } from './types.js';
 export * from "./windows-tools.js";

package/dist/codebuddy/tool-definitions/index.js

@@ -68,7 +68,7 @@ export { CODEBASE_REPLACE_TOOL, CODEBASE_REPLACE_TOOLS, } from './codebase-repla
 export { GENERATE_DOCUMENT_TOOL, DOCUMENT_GENERATOR_TOOLS, } from './document-tools.js';
 // Session tools (multi-agent coordination — Phase E wake)
 export { SESSION_TOOLS } from './session-tools.js';
-// GitNexus tools
-export { GITNEXUS_ASK_TOOL, GITNEXUS_TOOLS, } from './gitnexus-tools.js';
+// CodeExplorer tools
+export { CODE_EXPLORER_ASK_TOOL, CODE_EXPLORER_TOOLS, } from './code-explorer-tools.js';
 export * from "./windows-tools.js";
 //# sourceMappingURL=index.js.map

package/dist/codebuddy/tools.d.ts

@@ -27,8 +27,8 @@ export declare function getBuiltinToolNames(): string[];
 export declare function initializeToolRegistry(): void;
 export declare function getMCPManager(): MCPManager;
 /**
- * True when the Code Explorer (gitnexus) MCP tools are connected — i.e. at least
- * one `mcp__gitnexus__*` tool is registered. Used to conditionally steer the
+ * True when the Code Explorer (code-explorer) MCP tools are connected — i.e. at least
+ * one `mcp__code-explorer__*` tool is registered. Used to conditionally steer the
  * agent toward Code Explorer for relationship/impact questions. Returns false
  * (no behavior change) whenever Code Explorer is not installed.
  */

package/dist/codebuddy/tools.js

@@ -15,7 +15,7 @@ import { applyToolFilter } from "../utils/tool-filter.js";
 import { TOOL_METADATA } from "../tools/metadata.js";
 import { getPluginMarketplace } from "../plugins/marketplace.js";
 // Import modular tool definitions
-import { CORE_TOOLS, MORPH_EDIT_TOOL, isMorphEnabled, SEARCH_TOOLS, TODO_TOOLS, KANBAN_TOOLS, MESSAGING_TOOLS, YUANBAO_TOOLS, HOMEASSISTANT_TOOLS, MOA_TOOLS, SPOTIFY_TOOLS, X_SEARCH_TOOLS, FEISHU_TOOLS, CRON_TOOLS, WEB_TOOLS, ADVANCED_TOOLS, MULTIMODAL_TOOLS, COMPUTER_CONTROL_TOOLS, BROWSER_TOOLS, CANVAS_TOOLS, AGENT_TOOLS, FIRECRAWL_TOOLS, LSP_TOOLS, SECRETS_TOOLS, ADVISOR_TOOLS, ASK_USER_QUESTION_TOOLS, EXIT_PLAN_MODE_TOOLS, CODEBASE_REPLACE_TOOLS, SESSION_TOOLS, GITNEXUS_TOOLS, WINDOWS_TOOLS, } from "./tool-definitions/index.js";
+import { CORE_TOOLS, MORPH_EDIT_TOOL, isMorphEnabled, SEARCH_TOOLS, TODO_TOOLS, KANBAN_TOOLS, MESSAGING_TOOLS, YUANBAO_TOOLS, HOMEASSISTANT_TOOLS, MOA_TOOLS, SPOTIFY_TOOLS, X_SEARCH_TOOLS, FEISHU_TOOLS, CRON_TOOLS, WEB_TOOLS, ADVANCED_TOOLS, MULTIMODAL_TOOLS, COMPUTER_CONTROL_TOOLS, BROWSER_TOOLS, CANVAS_TOOLS, AGENT_TOOLS, FIRECRAWL_TOOLS, LSP_TOOLS, SECRETS_TOOLS, ADVISOR_TOOLS, ASK_USER_QUESTION_TOOLS, EXIT_PLAN_MODE_TOOLS, CODEBASE_REPLACE_TOOLS, SESSION_TOOLS, CODE_EXPLORER_TOOLS, WINDOWS_TOOLS, } from "./tool-definitions/index.js";
 import { FLEET_TOOLS } from "./fleet-tool-defs.js";
 // Explicit re-exports from tool-definitions (no blanket export *)
 export { CORE_TOOLS, MORPH_EDIT_TOOL, isMorphEnabled, SEARCH_TOOLS, TODO_TOOLS, KANBAN_TOOLS, MESSAGING_TOOLS, YUANBAO_TOOLS, HOMEASSISTANT_TOOLS, MOA_TOOLS, SPOTIFY_TOOLS, X_SEARCH_TOOLS, FEISHU_TOOLS, CRON_TOOLS, WEB_TOOLS, ADVANCED_TOOLS, MULTIMODAL_TOOLS, COMPUTER_CONTROL_TOOLS, BROWSER_TOOLS, CANVAS_TOOLS, REASON_TOOL, EXECUTE_CODE_TOOL, WINDOWS_TOOLS, } from "./tool-definitions/index.js";
@@ -50,7 +50,7 @@ export function getBuiltinToolNames() {
         CODEBASE_REPLACE_TOOLS,
         SESSION_TOOLS,
         FLEET_TOOLS,
-        GITNEXUS_TOOLS,
+        CODE_EXPLORER_TOOLS,
         WINDOWS_TOOLS,
     ];
     return Array.from(new Set(groups.flatMap((tools) => tools.map((tool) => tool.function.name))));
@@ -145,8 +145,8 @@ export function initializeToolRegistry() {
     // Fleet tools — peer_delegate, list_peers (Phase (d).17). Always available;
     // peer_delegate returns a clear error when no peers are connected.
     registerGroup(FLEET_TOOLS);
-    // GitNexus tools
-    registerGroup(GITNEXUS_TOOLS);
+    // CodeExplorer tools
+    registerGroup(CODE_EXPLORER_TOOLS);
     isRegistryInitialized = true;
     logger.debug('Tool registry initialized with built-in tools');
 }
@@ -162,14 +162,14 @@ export function getMCPManager() {
     return mcpManager;
 }
 /**
- * True when the Code Explorer (gitnexus) MCP tools are connected — i.e. at least
- * one `mcp__gitnexus__*` tool is registered. Used to conditionally steer the
+ * True when the Code Explorer (code-explorer) MCP tools are connected — i.e. at least
+ * one `mcp__code-explorer__*` tool is registered. Used to conditionally steer the
  * agent toward Code Explorer for relationship/impact questions. Returns false
  * (no behavior change) whenever Code Explorer is not installed.
  */
 export function isCodeExplorerAvailable() {
     try {
-        return getMCPManager().getTools().some((t) => t.name.startsWith('mcp__gitnexus__'));
+        return getMCPManager().getTools().some((t) => t.name.startsWith('mcp__code-explorer__'));
     }
     catch {
         return false;
@@ -387,18 +387,33 @@ export async function getAllCodeBuddyTools() {
     }
     // Apply CLI tool filter (--enabled-tools, --disabled-tools, --allowed-tools)
     allTools = applyToolFilter(allTools);
-    // When Code Explorer (gitnexus) is connected, make the built-in graph tools
+    // When Code Explorer (code-explorer) is connected, make the built-in graph tools
     // defer to it at the decision point — its graph is broader / more complete.
     // Conditional & non-mutating: returns fresh objects only for code_graph /
-    // codebase_map, and only when a gitnexus tool is present (no change otherwise).
-    if (allTools.some((t) => t.function.name.startsWith('mcp__gitnexus__'))) {
-        const DEFER = ' NOTE: Code Explorer (gitnexus) is available — for code-relationship, blast-radius/impact, ' +
-            'dead-code and cycle questions PREFER its MCP tools (`mcp__gitnexus__impact` / `context` / ' +
-            '`query` / `find_cycles`); use this built-in only as a fallback if a gitnexus tool errors.';
+    // codebase_map, and only when a code-explorer tool is present (no change otherwise).
+    if (allTools.some((t) => t.function.name.startsWith('mcp__code-explorer__'))) {
+        const DEFER = ' NOTE: Code Explorer (code-explorer) is available — for code-relationship, blast-radius/impact, ' +
+            'dead-code and cycle questions PREFER its MCP tools (`mcp__code-explorer__impact` / `context` / ' +
+            '`query` / `find_cycles`); use this built-in only as a fallback if a code-explorer tool errors.';
         allTools = allTools.map((t) => t.function.name === 'code_graph' || t.function.name === 'codebase_map'
             ? { ...t, function: { ...t.function, description: (t.function.description ?? '') + DEFER } }
             : t);
     }
+    // Populate the `tool_search` BM25 index so the model can DISCOVER any tool on
+    // demand (progressive disclosure, like Codex/Claude). It was never
+    // initialized, leaving tool_search blind ("No tools found"). Index the full
+    // set (built-in + MCP + plugin) so a tool outside the per-query TF-IDF subset
+    // is still reachable when the model calls tool_search.
+    try {
+        const { initToolSearchIndex } = await import('../tools/tool-search.js');
+        initToolSearchIndex(allTools.map((t) => ({
+            name: t.function.name,
+            description: t.function.description ?? '',
+        })));
+    }
+    catch {
+        // tool-search is optional — never block tool assembly.
+    }
     return allTools;
 }
 // ============================================================================

package/dist/collaboration/ai-colab-manager.js

@@ -16,8 +16,13 @@ export class AIColabManager {
     workLog = [];
     constructor(workingDirectory = process.cwd()) {
         this.colabFilePath = path.join(workingDirectory, 'COLAB.md');
-        this.tasksFilePath = path.join(workingDirectory, '.codebuddy', 'colab-tasks.json');
-        this.workLogFilePath = path.join(workingDirectory, '.codebuddy', 'colab-worklog.json');
+        // The shared fleet board `.codebuddy/colab-tasks.json` is now owned solely by
+        // FleetColabStore (the kanban_* tools + the autonomous daemon). This legacy
+        // `/colab` manager uses an incompatible schema (`not_started` status, no
+        // version/comment preservation, non-atomic full-file rewrite), so it writes
+        // its OWN files to avoid clobbering the unified board. See ColabKanbanAdapter.
+        this.tasksFilePath = path.join(workingDirectory, '.codebuddy', 'ai-colab-tasks.json');
+        this.workLogFilePath = path.join(workingDirectory, '.codebuddy', 'ai-colab-worklog.json');
         this.config = {
             project: 'Code Buddy',
             version: '1.0.0',
@@ -317,8 +322,8 @@ Couverture de tests actuelle: ${this.config.currentCoverage}% (objectif: ${this.
 
 - \`COLAB.md\` - Document de coordination principal
 - \`CLAUDE.md\` - Instructions de build et développement
-- \`.codebuddy/colab-tasks.json\` - Tâches en cours
-- \`.codebuddy/colab-worklog.json\` - Journal de travail
+- \`.codebuddy/ai-colab-tasks.json\` - Tâches en cours
+- \`.codebuddy/ai-colab-worklog.json\` - Journal de travail
 
 ### Règles de Collaboration