nexus-agents 10.2.0 → 11.0.0

package/dist/chunk-5CUI42NO.js

@@ -0,0 +1,1046 @@
+import {
+  getGlobalRegistry
+} from "./chunk-PY6HJQYC.js";
+import {
+  GatewayRediscovery,
+  discoverGatewayOnce,
+  setGatewayRediscovery
+} from "./chunk-IGYZQEKM.js";
+import {
+  GatewayHostRefusedError,
+  buildOpenAICompatAdapters,
+  readOpenAICompatEndpoint,
+  readOpenAICompatEnv
+} from "./chunk-SKM75Y7E.js";
+import {
+  hostnameOf
+} from "./chunk-D33IH5VS.js";
+import {
+  getDefaultCliCircuitBreakerRegistry
+} from "./chunk-V6AJCRAU.js";
+import {
+  createGatewayArmAdapter,
+  gatewayEndpointRejection,
+  isEndpointArmId,
+  logGatewaySlotMapping,
+  resolveGatewayDefault,
+  setGatewayCatalog,
+  setGatewaySlotCatalog
+} from "./chunk-GPRYEKAA.js";
+import {
+  detectSandbox,
+  parseBoolEnv
+} from "./chunk-CH6IBWXH.js";
+import {
+  VOTE_TIMEOUTS
+} from "./chunk-4PN3UVZV.js";
+
+// src/cli-command-catalog.ts
+var COMMAND_CATALOG = [
+  // ── Essential ────────────────────────────────────────────────────────────
+  {
+    command: "(default)",
+    description: "Start MCP server with stdio transport",
+    audience: "essential"
+  },
+  {
+    command: "hello",
+    description: "Show welcome message and quick start (no API keys needed)",
+    audience: "essential"
+  },
+  {
+    command: "setup",
+    description: "Configure CLI integration (MCP + .rules + data dirs)",
+    audience: "essential"
+  },
+  {
+    command: "verify",
+    description: "Check install health (sqlite, adapters, config)",
+    audience: "essential"
+  },
+  {
+    command: "doctor",
+    description: "Detailed health check; no model completions by default; --live probes models",
+    audience: "essential"
+  },
+  {
+    command: "config",
+    description: "Manage configuration (init, get, set, list, export, import)",
+    audience: "essential"
+  },
+  {
+    command: "orchestrate",
+    description: "Execute a task via CLI tools (standalone mode)",
+    audience: "essential"
+  },
+  {
+    command: "vote",
+    // Default panel is 7 roles; `--quick` runs 3 (getVoterRoles in
+    // mcp/tools/consensus-vote.ts). Prior drift: "5-6 agents" here, "6 agents"
+    // in HELP_TEXT, "6 agents by default" in COMMAND_HELP — all wrong (#3209).
+    description: "Run consensus vote on a proposal (7 agents; --quick uses 3)",
+    audience: "essential"
+  },
+  {
+    command: "workflow",
+    description: "Manage and run workflow templates (list, run)",
+    audience: "essential"
+  },
+  {
+    command: "expert",
+    description: "Manage expert agents (list, create, execute)",
+    audience: "essential"
+  },
+  {
+    command: "research",
+    description: "Manage research registry (status, add, stats, refresh)",
+    audience: "essential"
+  },
+  // ── Advanced ─────────────────────────────────────────────────────────────
+  {
+    command: "tour",
+    description: "Guided walkthrough of the four headline tools \u2014 no API keys, no quota (#2851). --non-interactive runs straight through.",
+    audience: "advanced"
+  },
+  {
+    command: "session",
+    description: "Manage session persistence (list, show, export, delete)",
+    audience: "advanced"
+  },
+  {
+    command: "auth",
+    description: "Manage authentication: init/show/rotate MCP tokens; status shows per-CLI auth state",
+    audience: "essential"
+  },
+  {
+    command: "login",
+    description: '[deprecated alias] Soft alias of "auth status"; renamed in #2449',
+    audience: "maintainer"
+  },
+  {
+    command: "usage",
+    description: "Cost / usage / quality dashboard from per-call telemetry (#2469). --format=json for scripting.",
+    audience: "advanced"
+  },
+  {
+    command: "status",
+    description: "At-a-glance project health dashboard",
+    audience: "advanced"
+  },
+  {
+    command: "capabilities",
+    description: "Show model capabilities matrix",
+    audience: "advanced"
+  },
+  {
+    command: "mode",
+    description: "Inspect detected mode (server/orchestrator) + signals + reasoning (#3214)",
+    audience: "advanced"
+  },
+  {
+    command: "jobs",
+    description: "Async job-record maintenance (#6224): `prune` deletes terminal records past the 7-day retention window and marks abandoned pending records failed; --dry-run prints the counts only.",
+    audience: "advanced"
+  },
+  {
+    command: "registry",
+    description: "Inspect + refresh the dynamic model registry (doctor / refresh)",
+    audience: "advanced"
+  },
+  {
+    command: "migrate",
+    description: "Relocate homedir state (sessions, checkpoints, traces, runs, audit, pipeline, tasks) into <repo>/.nexus-agents/ for users adopting NEXUS_REPO_PREFERRED=1. Cross-repo state stays homedir. --dry-run for a no-op plan. Epic #2872.",
+    audience: "advanced"
+  },
+  {
+    command: "init",
+    description: "Initialize portable nexus-agents config in a repo. Flags: --portable (#2305/#2308/#2311), --install / --uninstall (#2311), --gitignore, --mcp-config, --opencode <path> (#2504), --force, --dry-run.",
+    audience: "advanced"
+  },
+  {
+    command: "review",
+    description: "Review a GitHub PR (dogfooding helper)",
+    audience: "advanced"
+  },
+  {
+    command: "scaffold",
+    description: "Generate project files from templates",
+    audience: "advanced"
+  },
+  {
+    command: "validate",
+    description: "Run unified validation (doctor + fitness + config)",
+    audience: "advanced"
+  },
+  {
+    command: "index",
+    description: "Generate and manage codebase index",
+    audience: "advanced"
+  },
+  {
+    command: "improvement-review",
+    description: "Observability-driven improvement loop (#2402). Surfaces threshold breaches; --file-issues opt-in.",
+    audience: "advanced"
+  },
+  {
+    command: "model-drift",
+    description: "Report models the registry does not know and registry models no source lists (#6625). --json; --file-issue opt-in.",
+    audience: "maintainer"
+  },
+  {
+    command: "auto-remediate",
+    description: "Run one auto-remediation cycle (#3540). OFF unless NEXUS_AUTO_REMEDIATE=audit|enforce; never auto-merges.",
+    audience: "maintainer"
+  },
+  {
+    command: "remediation-review",
+    description: "Review audit-mode selections: list \xB7 panel-judge --batch N [--quick] \xB7 sample --n 10 [--seed S] \xB7 mark --evaluator --sound|--unsound [--sample id] \xB7 sign-off --owner \xB7 readiness (human, panel and owner-sample judgments + soak-store alarm).",
+    audience: "maintainer"
+  },
+  // ── Maintainer (hidden by default) ───────────────────────────────────────
+  {
+    command: "demo",
+    description: "API-free exploration mode (marketing/demo flow)",
+    audience: "maintainer"
+  },
+  {
+    command: "hooks",
+    description: "Claude CLI hook integration commands",
+    audience: "maintainer"
+  },
+  {
+    command: "routing-audit",
+    description: "Debug model routing decisions",
+    audience: "maintainer"
+  },
+  {
+    command: "fitness-audit",
+    description: "Run CLI orchestration fitness score audit",
+    audience: "maintainer"
+  },
+  {
+    command: "system-review",
+    description: "Automated system review (5-phase checklist)",
+    audience: "maintainer"
+  },
+  {
+    command: "sprint",
+    description: "Automated sprint planning from open issues",
+    audience: "maintainer"
+  },
+  {
+    command: "evaluate",
+    description: "Self-evaluation of codebase components",
+    audience: "maintainer"
+  },
+  {
+    command: "issue",
+    description: "Issue template validation and management",
+    audience: "maintainer"
+  },
+  {
+    command: "validation",
+    description: "Learning validation dashboard",
+    audience: "maintainer"
+  },
+  {
+    command: "learning-metrics",
+    description: "Aggregated learning metrics dashboard",
+    audience: "maintainer"
+  },
+  {
+    command: "visualize",
+    description: "Generate Mermaid diagrams and ASCII dashboards",
+    audience: "maintainer"
+  },
+  {
+    command: "health",
+    description: "Swarm health metrics dashboard",
+    audience: "maintainer"
+  },
+  {
+    command: "release-notes",
+    description: "Generate release notes from git commits",
+    audience: "maintainer"
+  },
+  {
+    command: "release-validate",
+    description: "Run expert swarm validation for releases",
+    audience: "maintainer"
+  },
+  {
+    command: "release-announce",
+    description: "Generate release announcements (blog, social)",
+    audience: "maintainer"
+  },
+  // ── Internal (hidden everywhere; here for extractor/index completeness) ──
+  {
+    command: "server",
+    // Synonym for the no-arg invocation — `nexus-agents` and
+    // `nexus-agents server` both run `handleServerCommand`. Listed here for
+    // extractor completeness; humans see `(default)` in --help.
+    description: "Start MCP server with stdio transport (explicit form)",
+    audience: "internal"
+  },
+  {
+    command: "e2e-eval",
+    description: "E2E evaluation scenario runner (dev loop)",
+    audience: "internal"
+  },
+  {
+    command: "memory-benchmark",
+    description: "Memory-system benchmark runner (dev loop)",
+    audience: "internal"
+  },
+  {
+    command: "memory-eval",
+    description: "Comparative memory evaluation benchmark (dev loop)",
+    audience: "internal"
+  },
+  {
+    command: "routing-ab",
+    description: "A/B comparison of routing strategies (dev loop)",
+    audience: "internal"
+  },
+  {
+    command: "scenario",
+    description: "Execute a named scenario from the testing framework",
+    audience: "internal"
+  },
+  {
+    command: "warm-up",
+    description: "Warm the model/adapter caches before a run",
+    audience: "internal"
+  }
+];
+function filterCatalog(showAll) {
+  const visible = COMMAND_CATALOG.filter((e) => e.audience !== "internal");
+  if (showAll) return visible;
+  return visible.filter((e) => e.audience !== "maintainer");
+}
+function catalogForExtractors() {
+  return COMMAND_CATALOG.filter((e) => e.command !== "(default)");
+}
+function getCommandDescription(command) {
+  return COMMAND_CATALOG.find((e) => e.command === command)?.description;
+}
+function groupByAudience(entries) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    const existing = groups.get(entry.audience) ?? [];
+    existing.push(entry);
+    groups.set(entry.audience, existing);
+  }
+  return groups;
+}
+var AUDIENCE_HEADINGS = {
+  essential: "Essential \u2014 install, configure, run",
+  advanced: "Advanced \u2014 day-to-day extras",
+  maintainer: "Maintainer \u2014 benchmarks, releases, deep diagnostics",
+  // Never rendered (filterCatalog strips internal before renderCommandsSection
+  // iterates), but required by the Record<CommandAudience, string> contract.
+  internal: "Internal \u2014 dev/eval loops (hidden from --help)"
+};
+function renderCommandsSection(showAll) {
+  const filtered = filterCatalog(showAll);
+  const groups = groupByAudience(filtered);
+  const lines = [];
+  const order = showAll ? ["essential", "advanced", "maintainer"] : ["essential", "advanced"];
+  for (const audience of order) {
+    const entries = groups.get(audience);
+    if (entries === void 0 || entries.length === 0) continue;
+    lines.push(`  ${AUDIENCE_HEADINGS[audience]}`);
+    for (const entry of entries) {
+      lines.push(`    ${entry.command.padEnd(16)} ${entry.description}`);
+    }
+    lines.push("");
+  }
+  if (!showAll) {
+    lines.push("  Run with --all to show maintainer commands (benchmarks, release tooling).");
+  }
+  return lines.join("\n").replace(/\n+$/, "");
+}
+
+// src/cli-help-text.ts
+var COMMANDS_PLACEHOLDER = "__COMMANDS__";
+var HELP_TEXT_FRAME = `
+nexus-agents - Intelligent orchestration platform for AI coding tools
+
+USAGE:
+  nexus-agents [OPTIONS]
+  nexus-agents [COMMAND] [SUBCOMMAND] [OPTIONS]
+
+COMMANDS:
+${COMMANDS_PLACEHOLDER}
+
+OPTIONS:
+  -h, --help           Show this help message
+  -v, --version        Show version information
+  --verbose            Enable verbose output
+  --interactive        Start interactive REPL mode
+  -m, --mode <mode>    Server mode: server, orchestrator (default: server)
+                       - server:       MCP server only (for Claude CLI integration)
+                       - orchestrator: CLI orchestrator (calls Gemini/Codex CLIs)
+
+For command-specific options, run: nexus-agents <command> --help
+(For example: nexus-agents vote --help)
+
+EXAMPLES:
+  nexus-agents hello                Show welcome + quick start (no API keys needed)
+  nexus-agents setup --interactive  Run guided setup wizard
+  nexus-agents verify               Quick install check (run first)
+  nexus-agents auth status          Per-CLI auth state + login fix instructions
+  nexus-agents doctor               Detailed CLI/adapter health check
+  nexus-agents orchestrate -t "..." Run a one-off task via the CLI orchestrator
+  nexus-agents vote --quick -p "X"  3-agent consensus vote on proposal "X"
+  nexus-agents --help --all         Show every command (incl. maintainer tools)
+
+For more information, visit: https://github.com/nexus-substrate/nexus-agents
+`.trim();
+function composeHelp(commandsSection) {
+  return HELP_TEXT_FRAME.replace(COMMANDS_PLACEHOLDER, commandsSection);
+}
+var HELP_TEXT = composeHelp(renderCommandsSection(true));
+function renderHelp(opts) {
+  if (opts.all) return HELP_TEXT;
+  return composeHelp(renderCommandsSection(false));
+}
+
+// src/cli-types.ts
+var EXIT_CODES = {
+  SUCCESS: 0,
+  SERVER_START_FAILED: 1,
+  SHUTDOWN_ERROR: 2,
+  INVALID_ARGS: 3,
+  /** Subcommand is stubbed / advertised but not implemented (#2727). */
+  NOT_IMPLEMENTED: 4
+};
+function cliExit(exitCode, message) {
+  return message === void 0 ? { success: exitCode === EXIT_CODES.SUCCESS, exitCode } : { success: exitCode === EXIT_CODES.SUCCESS, exitCode, message };
+}
+function cliExitFromStatus(status, message) {
+  return cliExit(
+    status === EXIT_CODES.SUCCESS ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED,
+    message
+  );
+}
+var LIFECYCLE_DELEGATED = {
+  __lifecycleDelegated: true
+};
+function isLifecycleDelegated(result) {
+  return result.__lifecycleDelegated === true && !("exitCode" in result);
+}
+var PARSE_ARGS_CONFIG = {
+  options: {
+    help: {
+      type: "boolean",
+      short: "h",
+      default: false
+    },
+    version: {
+      type: "boolean",
+      short: "v",
+      default: false
+    },
+    verbose: {
+      type: "boolean",
+      default: false
+    },
+    interactive: {
+      type: "boolean",
+      default: false
+    },
+    // Tiered --help output (Issue #2135): `--help --all` unhides maintainer commands
+    all: {
+      type: "boolean",
+      default: false
+    },
+    mode: {
+      type: "string",
+      short: "m",
+      default: "server"
+    },
+    output: {
+      type: "string",
+      short: "o"
+    },
+    force: {
+      type: "boolean",
+      short: "f",
+      default: false
+    },
+    format: {
+      type: "string",
+      default: "table"
+    },
+    input: {
+      type: "string",
+      short: "i"
+    },
+    "dry-run": {
+      type: "boolean",
+      default: false
+    },
+    "bandit-stats": {
+      type: "boolean",
+      default: false
+    },
+    // Review command options
+    setup: {
+      type: "boolean",
+      default: false
+    },
+    "skip-checks": {
+      type: "boolean",
+      default: false
+    },
+    // Orchestrate command options (also used in orchestrator mode)
+    task: {
+      type: "string",
+      short: "t"
+    },
+    model: {
+      type: "string"
+    },
+    "max-tokens": {
+      type: "string"
+    },
+    "max-cost-usd": {
+      type: "string"
+    },
+    // Orchestrate engine options (Issue #386)
+    engine: {
+      type: "string",
+      default: "router"
+    },
+    learn: {
+      type: "boolean",
+      default: false
+    },
+    "policy-path": {
+      type: "string"
+    },
+    "max-steps": {
+      type: "string"
+    },
+    // System review command options
+    "create-issue": {
+      type: "boolean",
+      default: false
+    },
+    fix: {
+      type: "boolean",
+      default: false
+    },
+    // Vote command options
+    proposal: {
+      type: "string",
+      short: "p"
+    },
+    // Repeatable. No short letter: every free one is taken, and the two
+    // collisions that already existed silently bound the wrong option (#4922).
+    option: {
+      type: "string",
+      multiple: true
+    },
+    // No `short`. `parseArgs` takes one options object for every command, so
+    // a short letter is global: `-t` was already `task`, which won, and
+    // `vote -t supermajority` silently ran a simple-majority vote. Long form
+    // only — `cli-types.test.ts` pins that no two options share a letter.
+    threshold: {
+      type: "string"
+    },
+    // #6227 — the bar as the tool spells it. `threshold` is the legacy spelling;
+    // the engine's `resolveStrategy` lets `strategy` win when both are given.
+    strategy: {
+      type: "string"
+    },
+    "artifact-file": {
+      type: "string"
+    },
+    // #6227 — `<pr>@<40-hex sha>`: binds the record to a governor-path PR for
+    // `scripts/append-ratification-record.ts`. Validated in `buildVoteOptions`.
+    "ratifies-pr": {
+      type: "string"
+    },
+    quick: {
+      type: "boolean",
+      short: "q",
+      default: false
+    },
+    // #6236 — seconds, read from the same constant `vote --help` renders and
+    // `runVote` falls back to. A hard-coded '90' here ran every seat at less
+    // than a third of the #1640 budget while the help said 300.
+    timeout: {
+      type: "string",
+      default: String(VOTE_TIMEOUTS.defaultMs / 1e3)
+    },
+    // #2630 — error policy for the vote command.
+    "error-policy": {
+      type: "string"
+    },
+    // #4135 — how the vote command maps a no_quorum decision (fail|exit2|retry).
+    "on-no-quorum": {
+      type: "string"
+    },
+    // #6110 — the project the voter prompts name; derived from the cwd when absent.
+    project: {
+      type: "string"
+    },
+    // Learning-metrics command options
+    // No `short` — `-p` is `proposal`, which was declared first and won. See
+    // the note on `threshold`.
+    period: {
+      type: "string"
+    },
+    export: {
+      type: "string"
+    },
+    "no-trends": {
+      type: "boolean",
+      default: false
+    },
+    // Setup command options (Issue #363)
+    "non-interactive": {
+      type: "boolean",
+      default: false
+    },
+    "skip-mcp": {
+      type: "boolean",
+      default: false
+    },
+    "skip-rules": {
+      type: "boolean",
+      default: false
+    },
+    "skip-hooks": {
+      type: "boolean",
+      default: false
+    },
+    "skip-config": {
+      type: "boolean",
+      default: false
+    },
+    "skip-opencode": {
+      type: "boolean",
+      default: false
+    },
+    "skip-gemini": {
+      type: "boolean",
+      default: false
+    },
+    "skip-codex": {
+      type: "boolean",
+      default: false
+    },
+    scope: {
+      type: "string",
+      default: "user"
+    },
+    // Setup --custom-api for OpenAI-compatible gateway configuration (#2124)
+    "custom-api": {
+      type: "string"
+    },
+    "custom-api-key": {
+      type: "string"
+    },
+    "custom-model": {
+      type: "string"
+    },
+    // Demo command options
+    mock: {
+      type: "boolean",
+      default: false
+    },
+    // Doctor command options (Issue #1031)
+    deep: {
+      type: "boolean",
+      default: false
+    },
+    // Doctor live readiness probe (#4376)
+    live: {
+      type: "boolean",
+      default: false
+    },
+    // Doctor gateway section and opt-in completion probe (#6609)
+    gateway: {
+      type: "boolean",
+      default: false
+    },
+    probe: {
+      type: "boolean",
+      default: false
+    },
+    // Registry command options (#2179)
+    json: {
+      type: "boolean",
+      default: false
+    },
+    // model-drift command option (#6625)
+    "file-issue": {
+      type: "boolean",
+      default: false
+    },
+    source: {
+      type: "string"
+    },
+    // init --portable command options (#2305)
+    portable: {
+      type: "boolean",
+      default: false
+    },
+    gitignore: {
+      type: "boolean",
+      default: false
+    },
+    // init --portable --mcp-config flag (#2308)
+    "mcp-config": {
+      type: "boolean",
+      default: false
+    },
+    // init --portable --install / --uninstall flags (#2311)
+    install: {
+      type: "boolean",
+      default: false
+    },
+    uninstall: {
+      type: "boolean",
+      default: false
+    },
+    // improvement-review command options (#2444)
+    "lookback-days": {
+      type: "string"
+    },
+    "file-issues": {
+      type: "boolean",
+      default: false
+    },
+    "min-sample-size": {
+      type: "string"
+    },
+    "fitness-floor": {
+      type: "string"
+    },
+    // init --opencode <path> flag (#2504)
+    opencode: {
+      type: "string"
+    },
+    validate: {
+      type: "boolean",
+      default: false
+    },
+    // remediation-review command options (#3765)
+    evaluator: {
+      type: "string"
+    },
+    owner: {
+      type: "string"
+    },
+    note: {
+      type: "string"
+    },
+    sound: {
+      type: "boolean",
+      default: false
+    },
+    unsound: {
+      type: "boolean",
+      default: false
+    },
+    batch: { type: "string" },
+    n: { type: "string" },
+    seed: { type: "string" },
+    sample: { type: "string" },
+    // session command options (#6693)
+    limit: {
+      type: "string"
+    },
+    markdown: {
+      type: "boolean",
+      default: false
+    },
+    // usage command options (#6693)
+    since: {
+      type: "string"
+    },
+    until: {
+      type: "string"
+    },
+    // validation command options (#6693)
+    "task-type": {
+      type: "string"
+    },
+    "min-sample": {
+      type: "string"
+    },
+    // #6693 follow-up — subcommand flags that usage text advertised and
+    // handlers read, still rejected after #6705. Forwarded by
+    // `buildSubcommandFlagOptions` (cli/subcommand-flag-options.ts). No short
+    // letters: a short letter is global (see the note on `threshold`).
+    vote: { type: "boolean", default: false },
+    topic: { type: "string" },
+    status: { type: "string" },
+    "create-issues": { type: "boolean", default: false },
+    max: { type: "string" },
+    generate: { type: "boolean", default: false },
+    check: { type: "boolean", default: false },
+    strict: { type: "boolean", default: false },
+    silent: { type: "boolean", default: false },
+    "no-check-files": { type: "boolean", default: false },
+    skip: { type: "string", multiple: true }
+  },
+  allowPositionals: true,
+  strict: true
+};
+var VALID_COMMANDS = [
+  "server",
+  "help",
+  "version",
+  "hello",
+  "config",
+  "expert",
+  "workflow",
+  "doctor",
+  "verify",
+  "review",
+  "routing-audit",
+  "orchestrate",
+  "system-review",
+  "vote",
+  "index",
+  "research",
+  "validation",
+  "learning-metrics",
+  "setup",
+  "hooks",
+  "demo",
+  "sprint",
+  "session",
+  "evaluate",
+  "issue",
+  "fitness-audit",
+  "release-notes",
+  "release-validate",
+  "release-announce",
+  "scaffold",
+  "visualize",
+  "capabilities",
+  "status",
+  "memory-benchmark",
+  "auth",
+  "scenario",
+  "warm-up",
+  "e2e-eval",
+  "routing-ab",
+  "memory-eval",
+  "health",
+  "init",
+  "validate",
+  "registry",
+  "login",
+  "usage",
+  "improvement-review",
+  "model-drift",
+  "migrate",
+  "tour",
+  "auto-remediate",
+  "remediation-review",
+  "mode",
+  "jobs"
+];
+function isValidCommand(value) {
+  return VALID_COMMANDS.includes(value);
+}
+
+// src/cli-server-gateway.ts
+async function tryWireGatewayAdapters(logger) {
+  return (await wireGatewayOnce(logger)).adapters;
+}
+async function wireGatewayOnce(logger) {
+  const sandboxActive = detectSandbox().active;
+  const env = readOpenAICompatEnv();
+  if (env === null) {
+    handleMissingEnv(logger, sandboxActive);
+    noticeCliSubprocessFallback(logger);
+    return { adapters: void 0, retryable: false };
+  }
+  const result = await discoverGatewayOnce(logger);
+  if (result === null) {
+    noticeCliSubprocessFallback(logger);
+    return { adapters: void 0, retryable: false };
+  }
+  if (!result.ok && result.error instanceof GatewayHostRefusedError) {
+    handleHostRefused(logger, sandboxActive, result.error.status);
+    noticeCliSubprocessFallback(logger);
+    return { adapters: void 0, retryable: false };
+  }
+  if (!result.ok) {
+    handleProbeFailure(logger, sandboxActive, result.error.message);
+    noticeCliSubprocessFallback(logger);
+    return { adapters: void 0, retryable: true };
+  }
+  if (result.value.length === 0) {
+    handleZeroModels(logger, sandboxActive);
+    noticeCliSubprocessFallback(logger);
+    return { adapters: void 0, retryable: true };
+  }
+  logger.info("OpenAI-compatible gateway wired", {
+    host: hostnameOf(env.baseUrl),
+    modelCount: result.value.length,
+    models: result.value.map((a) => a.modelId)
+  });
+  return { adapters: result.value, retryable: false };
+}
+var cliSubprocessFallbackNoticeLogged = false;
+function noticeCliSubprocessFallback(logger) {
+  if (cliSubprocessFallbackNoticeLogged) return;
+  cliSubprocessFallbackNoticeLogged = true;
+  logger.info(
+    "No in-process gateway is configured, so voter/consensus calls will spawn CLI subprocesses (slower per-vote startup, subject to each CLI's own auth/quota). Set NEXUS_OPENAI_COMPAT_URL and NEXUS_OPENAI_COMPAT_KEY to route voters through an OpenAI-compatible gateway in-process instead (lower latency, no subprocess spawn)."
+  );
+}
+function _resetCliSubprocessFallbackNotice() {
+  cliSubprocessFallbackNoticeLogged = false;
+}
+function resolveDefaultModelAdapter(gatewayAdapters, adapterRegistry) {
+  const primary = gatewayAdapters?.[0];
+  if (primary === void 0) return adapterRegistry.getDefault();
+  const ranked = resolveGatewayDefault();
+  return ranked.kind === "resolved" ? ranked.adapter : primary;
+}
+function registerGatewayArm(adapters, endpoint, registry) {
+  const logger = registry.getLogger();
+  if (adapters === void 0 || adapters.length === 0) {
+    logger.debug("No gateway adapters discovered; no api: arm registered");
+    return void 0;
+  }
+  const armId = `api:${endpoint}`;
+  const rejection = gatewayEndpointRejection(endpoint);
+  if (rejection !== void 0 || !isEndpointArmId(armId)) {
+    logger.warn("Gateway endpoint is not a valid gateway endpoint; no api: arm registered", {
+      reason: rejection ?? "not a valid endpoint id"
+    });
+    return void 0;
+  }
+  registry.registerApiArm(
+    armId,
+    createGatewayArmAdapter(armId, adapters, {
+      circuitBreakerRegistry: getDefaultCliCircuitBreakerRegistry(),
+      logger
+    })
+  );
+  setGatewayCatalog(
+    armId,
+    adapters.map((a) => a.modelId)
+  );
+  logger.info("Gateway registered as one api: arm", { arm: armId, modelCount: adapters.length });
+  return armId;
+}
+async function wireGateway(logger, registry = getGlobalRegistry()) {
+  const { adapters, retryable } = await wireGatewayOnce(logger);
+  const endpoint = readOpenAICompatEndpoint(process.env, logger);
+  const registerArms = (found) => {
+    registerGatewayArm(found, endpoint, registry);
+    if (parseBoolEnv("NEXUS_ROUTE_GATEWAY_ARMS", false)) {
+      const global = getGlobalRegistry();
+      if (global !== registry) registerGatewayArm(found, endpoint, global);
+    }
+  };
+  registerArms(adapters);
+  registerFamilySlots(adapters, logger);
+  if (!retryable) return adapters;
+  const live = [];
+  setGatewayRediscovery(
+    new GatewayRediscovery({
+      target: live,
+      logger,
+      discover: () => rediscoverGateway(logger),
+      onDiscovered: (found) => {
+        registerArms(found);
+        registerFamilySlots(found, logger);
+      }
+    })
+  );
+  return live;
+}
+function registerFamilySlots(adapters, logger) {
+  setGatewaySlotCatalog(adapters ?? []);
+  logGatewaySlotMapping(logger);
+}
+async function rediscoverGateway(logger) {
+  const result = await buildOpenAICompatAdapters(logger);
+  if (result === null) return void 0;
+  if (!result.ok && result.error instanceof GatewayHostRefusedError) {
+    handleHostRefused(logger, false, result.error.status);
+    return "refused";
+  }
+  if (!result.ok) {
+    logger.warn("Gateway re-discovery failed; calls stay on CLI subprocesses", {
+      error: result.error.message
+    });
+    return void 0;
+  }
+  return result.value;
+}
+function handleMissingEnv(logger, sandboxActive) {
+  if (sandboxActive) {
+    logger.error(
+      "Sandbox mode active but NEXUS_OPENAI_COMPAT_URL / NEXUS_OPENAI_COMPAT_KEY are not set. Configure the gateway in your launch env or opencode.json. See docs/guides/SANDBOXED-USAGE.md.",
+      new Error("Missing gateway configuration in sandbox mode")
+    );
+    process.exit(EXIT_CODES.SERVER_START_FAILED);
+  }
+  return void 0;
+}
+function handleProbeFailure(logger, sandboxActive, reason) {
+  if (sandboxActive) {
+    logger.error(
+      "Sandbox mode active and OpenAI-compatible gateway probe failed.",
+      new Error(reason)
+    );
+    process.exit(EXIT_CODES.SERVER_START_FAILED);
+  }
+  logger.warn("OpenAI-compatible gateway probe failed; continuing with CLI adapters", {
+    error: reason
+  });
+  return void 0;
+}
+function handleHostRefused(logger, sandboxActive, status) {
+  const message = `Gateway host ${status.host} refused by the private-address guard: the in-process gateway is NOT in use, and voter/consensus calls fall back to CLI subprocesses. ` + status.remedy;
+  if (sandboxActive) {
+    logger.error(message, new Error(status.reason));
+    process.exit(EXIT_CODES.SERVER_START_FAILED);
+  }
+  logger.warn(message, { host: status.host, reason: status.reason });
+}
+function handleZeroModels(logger, sandboxActive) {
+  if (sandboxActive) {
+    logger.error(
+      "Sandbox mode active and gateway returned 0 models. Check upstream provider quotas / list filters.",
+      new Error("Gateway discovered 0 models")
+    );
+    process.exit(EXIT_CODES.SERVER_START_FAILED);
+  }
+  logger.warn("OpenAI-compatible gateway returned 0 models; ignoring");
+  return void 0;
+}
+
+export {
+  COMMAND_CATALOG,
+  catalogForExtractors,
+  getCommandDescription,
+  renderHelp,
+  EXIT_CODES,
+  cliExit,
+  cliExitFromStatus,
+  LIFECYCLE_DELEGATED,
+  isLifecycleDelegated,
+  PARSE_ARGS_CONFIG,
+  isValidCommand,
+  tryWireGatewayAdapters,
+  _resetCliSubprocessFallbackNotice,
+  resolveDefaultModelAdapter,
+  registerGatewayArm,
+  wireGateway
+};
+//# sourceMappingURL=chunk-5CUI42NO.js.map