nexus-agents 12.5.0 → 12.6.0

package/dist/{ast-rule-runner-6QQRHBNT.js → ast-rule-runner-XEQ5VAVV.js}

@@ -9,11 +9,11 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-XIKYDLXZ.js";
-import "./chunk-ZKWBLGZN.js";
+} from "./chunk-KW5INM6Y.js";
+import "./chunk-3BSLRRPJ.js";
 import "./chunk-XBEKMUTO.js";
-import "./chunk-7GAUB763.js";
-import "./chunk-VF6BUZLS.js";
+import "./chunk-NMIAGVWS.js";
+import "./chunk-ZWWPRNNJ.js";
 import "./chunk-G3M3UVAW.js";
 import "./chunk-POLWDIVY.js";
 import "./chunk-RM3RFAKU.js";
@@ -34,4 +34,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-6QQRHBNT.js.map
+//# sourceMappingURL=ast-rule-runner-XEQ5VAVV.js.map

package/dist/{child-mcp-config-XGSBBDPD.js → child-mcp-config-I2OAUNME.js}

@@ -1,10 +1,10 @@
 import {
   nexusMkdtempSync
 } from "./chunk-EBKVMMWA.js";
-import "./chunk-ZKWBLGZN.js";
+import "./chunk-3BSLRRPJ.js";
 import "./chunk-XBEKMUTO.js";
-import "./chunk-7GAUB763.js";
-import "./chunk-VF6BUZLS.js";
+import "./chunk-NMIAGVWS.js";
+import "./chunk-ZWWPRNNJ.js";
 import "./chunk-G3M3UVAW.js";
 import "./chunk-POLWDIVY.js";
 import {
@@ -81,4 +81,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-XGSBBDPD.js.map
+//# sourceMappingURL=child-mcp-config-I2OAUNME.js.map

package/dist/{chunk-7G6I4ZFK.js → chunk-2MF4NNPO.js}

@@ -1,13 +1,13 @@
 import {
   ensureGatewayDiscovered,
   gatewayDiscoveryGeneration
-} from "./chunk-623SVONB.js";
+} from "./chunk-I3J4CPNU.js";
 import {
   isRateLimitText
-} from "./chunk-ZKWBLGZN.js";
+} from "./chunk-3BSLRRPJ.js";
 import {
   resolveCliSlot
-} from "./chunk-7GAUB763.js";
+} from "./chunk-NMIAGVWS.js";
 import {
   createLogger,
   getTimeProvider
@@ -82,7 +82,7 @@ async function dispatchWithMcpConfig(router, content, expertType, start, options
   let config;
   if (requestedAccessModeOf(options) === "default") {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-XGSBBDPD.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-I2OAUNME.js");
       config = await generateMcpConfig();
       activeMcpConfigs.add(config);
     } catch (error) {
@@ -171,8 +171,8 @@ async function getRouter() {
   }
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-4HF6KCS2.js");
-    const { createCompositeRouter } = await import("./composite-router-AH4SEXFC.js");
+    const { createAllAdapters } = await import("./factory-JJIJMMSM.js");
+    const { createCompositeRouter } = await import("./composite-router-OJIITGKG.js");
     const adapters = createAllAdapters();
     const superseded = generation !== routerGeneration;
     if (adapters.size === 0) {
@@ -183,7 +183,7 @@ async function getRouter() {
     if (superseded) return router;
     cachedRouter = router;
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-YMNSN2GN.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-AH7J5ASH.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
@@ -324,4 +324,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-7G6I4ZFK.js.map
+//# sourceMappingURL=chunk-2MF4NNPO.js.map

package/dist/{chunk-ZKWBLGZN.js → chunk-3BSLRRPJ.js}

@@ -15,7 +15,7 @@ import {
   lookupInTreeCapability,
   resolveCliCostPer1M,
   resolveCliModelName
-} from "./chunk-7GAUB763.js";
+} from "./chunk-NMIAGVWS.js";
 import {
   DEFAULT_MODEL_PER_CLI,
   buildInTreeEntries,
@@ -26,7 +26,7 @@ import {
   pricingSourceOf,
   resolveModelIdentitySync,
   unpricedCliCostPer1M
-} from "./chunk-VF6BUZLS.js";
+} from "./chunk-ZWWPRNNJ.js";
 import {
   ensureLearningDir,
   getDecisionCostFile,
@@ -3584,93 +3584,41 @@ function estimateTokens(text) {
   return getTokenEstimator().estimateText(text);
 }
 
-// src/cli-adapters/types-capability.ts
-var CLI_VERSION_REQUIREMENTS = {
-  claude: {
-    minimum: "2.0.0",
-    recommended: "2.0.76",
-    breaking: []
-  },
-  // #4346: the `gemini` arm now runs the Antigravity CLI (`agy`), which
-  // replaced the retired standalone gemini CLI. Versions are agy's, not
-  // gemini's — an installed gemini 0.5x would fail the minimum, which is
-  // correct: it cannot serve.
-  gemini: {
-    minimum: "1.0.0",
-    recommended: "1.1.9",
-    breaking: []
-  },
-  codex: {
-    minimum: "0.70.0",
-    recommended: "0.77.0",
-    breaking: []
-  },
-  opencode: {
-    minimum: "0.1.0",
-    recommended: "0.1.0",
-    breaking: []
+// src/adapters/abort-utils.ts
+var AbortError = class extends Error {
+  name = "AbortError";
+  constructor(message = "Operation aborted") {
+    super(message);
   }
 };
-var DEFAULT_CAPABILITIES = buildCliCapabilityProfiles();
-
-// src/learning/routing-decision-mappers.ts
-function recordedArm(armId) {
-  return routingArmCliSlot(armId) ?? armId;
+function throwIfAborted(signal, message) {
+  if (signal?.aborted === true) throw new AbortError(message);
 }
-function mapFeedbackRoutingDecision(decision, context) {
-  return {
-    id: context.id,
-    traceId: context.traceId,
-    timestamp: context.timestamp,
-    routerType: context.routerType,
-    routerTypeMeasured: context.routerTypeMeasured,
-    query: context.query ?? "",
-    selectedModel: recordedArm(decision.cliName),
-    confidence: decision.confidence,
-    selectedTier: routingArmCliSlot(decision.cliName) === void 0 ? void 0 : decision.preferenceTier
-  };
+function isCallerCancelled(error) {
+  return error.cause instanceof AbortError;
 }
-function mapObserverRoutingDecision(decision, context) {
-  return {
-    timestamp: context.timestamp,
-    taskId: context.taskId,
-    taskDescription: context.query.length > 100 ? context.query.substring(0, 100) + "..." : context.query,
-    selectedCli: recordedArm(decision.cliName),
-    confidence: decision.confidence,
-    reason: decision.reason,
-    alternatives: decision.alternatives.map(recordedArm),
-    stagesExecuted: decision.stagesExecuted,
-    decisionTimeMs: decision.decisionTimeMs,
-    withinBudget: decision.withinBudget,
-    topsisScore: decision.topsisScore,
-    ucbScore: decision.ucbScore
-  };
+function isTimeoutAbortReason(reason) {
+  return typeof reason === "object" && reason !== null && reason.name === "TimeoutError";
 }
-function mapStoredRoutingDecision(decision, context) {
-  const profile = decision.taskProfile;
-  return {
-    id: context.id,
-    traceId: context.traceId,
-    timestamp: context.timestamp,
-    routerType: context.routerType,
-    routerTypeMeasured: context.routerTypeMeasured,
-    selectedModel: recordedArm(decision.cliName),
-    alternativeModels: decision.alternatives.map(recordedArm),
-    confidence: decision.confidence,
-    reason: decision.reason,
-    taskProfile: {
-      contextRequired: profile.contextRequired,
-      reasoningComplexity: profile.reasoningComplexity,
-      codeGeneration: profile.codeGeneration,
-      multimodal: profile.multimodal,
-      parallelizable: profile.parallelizable,
-      budgetSensitive: profile.budgetSensitive,
-      taskType: profile.taskType,
-      ...profile.detectedProductType !== void 0 && {
-        detectedProductType: profile.detectedProductType
+function raceAbort(promise, signal) {
+  if (signal === void 0) return promise;
+  if (signal.aborted) return Promise.reject(new AbortError());
+  return new Promise((resolve4, reject) => {
+    const onAbort = () => {
+      reject(new AbortError());
+    };
+    signal.addEventListener("abort", onAbort, { once: true });
+    promise.then(
+      (value) => {
+        signal.removeEventListener("abort", onAbort);
+        resolve4(value);
+      },
+      (error) => {
+        signal.removeEventListener("abort", onAbort);
+        reject(error instanceof Error ? error : new Error(String(error)));
       }
-    }
-  };
+    );
+  });
 }
 
 // src/cli-adapters/cli-error-helpers.ts
@@ -3831,43 +3779,6 @@ function getRateLimitStats() {
   return stats;
 }
 
-// src/adapters/abort-utils.ts
-var AbortError = class extends Error {
-  name = "AbortError";
-  constructor(message = "Operation aborted") {
-    super(message);
-  }
-};
-function throwIfAborted(signal, message) {
-  if (signal?.aborted === true) throw new AbortError(message);
-}
-function isCallerCancelled(error) {
-  return error.cause instanceof AbortError;
-}
-function isTimeoutAbortReason(reason) {
-  return typeof reason === "object" && reason !== null && reason.name === "TimeoutError";
-}
-function raceAbort(promise, signal) {
-  if (signal === void 0) return promise;
-  if (signal.aborted) return Promise.reject(new AbortError());
-  return new Promise((resolve4, reject) => {
-    const onAbort = () => {
-      reject(new AbortError());
-    };
-    signal.addEventListener("abort", onAbort, { once: true });
-    promise.then(
-      (value) => {
-        signal.removeEventListener("abort", onAbort);
-        resolve4(value);
-      },
-      (error) => {
-        signal.removeEventListener("abort", onAbort);
-        reject(error instanceof Error ? error : new Error(String(error)));
-      }
-    );
-  });
-}
-
 // src/cli-adapters/cli-error-helpers.ts
 var RETRYABLE_ERROR_CODES = /* @__PURE__ */ new Set([
   "TIMEOUT",
@@ -3909,6 +3820,34 @@ function createHostUnavailableCliError(message, cli) {
 function isHostUnavailableCliError(error) {
   return error.cause instanceof HostUnavailableError;
 }
+function boundedPreSpawnReason(reason) {
+  switch (reason) {
+    case "invalid-policy":
+    case "invalid-deadline":
+    case "expired-before-spawn":
+    case "permit-consumed":
+      return reason;
+    default:
+      return "invalid-policy";
+  }
+}
+var NativePreSpawnRefusal = class extends Error {
+  reason;
+  constructor(reason) {
+    const bounded = boundedPreSpawnReason(reason);
+    super(`Native completion refused before spawn (${bounded})`);
+    this.name = "NativePreSpawnRefusal";
+    this.reason = bounded;
+    Object.freeze(this);
+  }
+};
+function createNativePreSpawnRefusal(reason, cli) {
+  const cause = new NativePreSpawnRefusal(reason);
+  return createCliError("EXECUTION_ERROR", cause.message, cli, cause);
+}
+function isNativePreSpawnRefusal(error) {
+  return error.cause instanceof NativePreSpawnRefusal;
+}
 var CallerDeadlineAbortError = class extends Error {
 };
 function isCallerAbortCause(cause) {
@@ -3934,6 +3873,151 @@ function isCallerInputCliError(error) {
   return error.cause instanceof ValidationError;
 }
 
+// src/cli-adapters/native-execution-policy.ts
+var NATIVE_EXECUTION_POLICY = /* @__PURE__ */ Symbol("native-execution-policy");
+var issued = /* @__PURE__ */ new WeakMap();
+function hasIssuedNativeExecutionPolicy(options) {
+  const policy = options[NATIVE_EXECUTION_POLICY];
+  return policy !== void 0 && issued.has(policy);
+}
+function nativeExecutionBudget(policy, signal) {
+  const state = typeof policy === "object" && policy !== null ? issued.get(policy) : void 0;
+  if (state === void 0) return err({ reason: "invalid-policy" });
+  const remaining = state.deadlineAt - getTimeProvider().now();
+  if (remaining <= 0) return err({ reason: "expired-before-spawn" });
+  const combined = signal === void 0 ? state.signal : AbortSignal.any([state.signal, signal]);
+  if (combined.aborted) {
+    return err({
+      reason: isTimeoutAbortReason(combined.reason) ? "expired-before-spawn" : "cancelled-before-spawn"
+    });
+  }
+  return ok({ timeoutMs: Math.ceil(remaining), signal: combined });
+}
+function nativeExecutionOptions(policy, signal) {
+  const budget = nativeExecutionBudget(policy, signal);
+  if (!budget.ok) return budget;
+  return ok({
+    ...budget.value,
+    allowRetry: false,
+    maxRetries: 0,
+    [NATIVE_EXECUTION_POLICY]: policy
+  });
+}
+function consumeNativeSpawnPermit(policy, signal) {
+  const budget = nativeExecutionBudget(policy, signal);
+  if (!budget.ok) return budget;
+  const state = issued.get(policy);
+  if (state === void 0) return err({ reason: "invalid-policy" });
+  if (state.attempted) return err({ reason: "permit-consumed" });
+  state.attempted = true;
+  return budget;
+}
+function nativePolicyRefusalError(refusal, cli) {
+  return refusal.reason === "cancelled-before-spawn" ? createCallerAbortCliError(void 0, "Caller cancelled before native spawn", cli) : createNativePreSpawnRefusal(refusal.reason, cli);
+}
+function resolveNativeSpawnOptions(options, cli, consume) {
+  const policy = options[NATIVE_EXECUTION_POLICY];
+  if (policy === void 0) {
+    return options.signal?.aborted === true ? err(createCallerAbortCliError(options.signal.reason, "Aborted before spawn", cli)) : ok(options);
+  }
+  const budget = consume ? consumeNativeSpawnPermit(policy, options.signal) : nativeExecutionBudget(policy, options.signal);
+  if (!budget.ok) return err(nativePolicyRefusalError(budget.error, cli));
+  return ok({
+    ...options,
+    signal: budget.value.signal,
+    timeoutMs: Math.min(options.timeoutMs, budget.value.timeoutMs)
+  });
+}
+
+// src/cli-adapters/types-capability.ts
+var CLI_VERSION_REQUIREMENTS = {
+  claude: {
+    minimum: "2.0.0",
+    recommended: "2.0.76",
+    breaking: []
+  },
+  // #4346: the `gemini` arm now runs the Antigravity CLI (`agy`), which
+  // replaced the retired standalone gemini CLI. Versions are agy's, not
+  // gemini's — an installed gemini 0.5x would fail the minimum, which is
+  // correct: it cannot serve.
+  gemini: {
+    minimum: "1.0.0",
+    recommended: "1.1.9",
+    breaking: []
+  },
+  codex: {
+    minimum: "0.70.0",
+    recommended: "0.77.0",
+    breaking: []
+  },
+  opencode: {
+    minimum: "0.1.0",
+    recommended: "0.1.0",
+    breaking: []
+  }
+};
+var DEFAULT_CAPABILITIES = buildCliCapabilityProfiles();
+
+// src/learning/routing-decision-mappers.ts
+function recordedArm(armId) {
+  return routingArmCliSlot(armId) ?? armId;
+}
+function mapFeedbackRoutingDecision(decision, context) {
+  return {
+    id: context.id,
+    traceId: context.traceId,
+    timestamp: context.timestamp,
+    routerType: context.routerType,
+    routerTypeMeasured: context.routerTypeMeasured,
+    query: context.query ?? "",
+    selectedModel: recordedArm(decision.cliName),
+    confidence: decision.confidence,
+    selectedTier: routingArmCliSlot(decision.cliName) === void 0 ? void 0 : decision.preferenceTier
+  };
+}
+function mapObserverRoutingDecision(decision, context) {
+  return {
+    timestamp: context.timestamp,
+    taskId: context.taskId,
+    taskDescription: context.query.length > 100 ? context.query.substring(0, 100) + "..." : context.query,
+    selectedCli: recordedArm(decision.cliName),
+    confidence: decision.confidence,
+    reason: decision.reason,
+    alternatives: decision.alternatives.map(recordedArm),
+    stagesExecuted: decision.stagesExecuted,
+    decisionTimeMs: decision.decisionTimeMs,
+    withinBudget: decision.withinBudget,
+    topsisScore: decision.topsisScore,
+    ucbScore: decision.ucbScore
+  };
+}
+function mapStoredRoutingDecision(decision, context) {
+  const profile = decision.taskProfile;
+  return {
+    id: context.id,
+    traceId: context.traceId,
+    timestamp: context.timestamp,
+    routerType: context.routerType,
+    routerTypeMeasured: context.routerTypeMeasured,
+    selectedModel: recordedArm(decision.cliName),
+    alternativeModels: decision.alternatives.map(recordedArm),
+    confidence: decision.confidence,
+    reason: decision.reason,
+    taskProfile: {
+      contextRequired: profile.contextRequired,
+      reasoningComplexity: profile.reasoningComplexity,
+      codeGeneration: profile.codeGeneration,
+      multimodal: profile.multimodal,
+      parallelizable: profile.parallelizable,
+      budgetSensitive: profile.budgetSensitive,
+      taskType: profile.taskType,
+      ...profile.detectedProductType !== void 0 && {
+        detectedProductType: profile.detectedProductType
+      }
+    }
+  };
+}
+
 // src/cli-adapters/access-mode.ts
 var RESTRICTED_MODES = {
   "read-only-analysis": { label: "read-only analysis", declaredBy: "enforcesReadOnlyAnalysis" },
@@ -4170,7 +4254,7 @@ function adapterReadiness(adapter, options) {
   const ceiling = resolveClassGuardMs("interactive");
   const requested = options.timeoutMs ?? ceiling;
   const timeoutMs = Number.isFinite(requested) && requested > 0 ? Math.min(requested, ceiling) : ceiling;
-  const flight = import("./cli-readiness-G4JHCTUS.js").then(({ probeServes }) => probeServes(adapter, timeoutMs)).finally(() => readinessFlights.delete(adapter));
+  const flight = import("./cli-readiness-4XOIA7HB.js").then(({ probeServes }) => probeServes(adapter, timeoutMs)).finally(() => readinessFlights.delete(adapter));
   readinessFlights.set(adapter, flight);
   return flight;
 }
@@ -4180,7 +4264,7 @@ async function servesListedModel(adapter, modelId, cli) {
     const models = await adapter.listModels();
     if (models.length === 0) return "unknown";
     const requestedKey = canonicalModelKey(modelId);
-    const findCanonicalModel2 = cli === "codex" ? (await import("./model-config-helpers-XSFPSIU4.js")).findCanonicalModel : void 0;
+    const findCanonicalModel2 = cli === "codex" ? (await import("./model-config-helpers-76F52NYN.js")).findCanonicalModel : void 0;
     const requestedEntry = requestedKey === null ? findCanonicalModel2?.("codex", modelId) : void 0;
     const listed = models.some((model) => {
       const listedEntry = findCanonicalModel2?.("codex", model.id);
@@ -5730,7 +5814,7 @@ var ModelToCliAdapter = class {
   }
   async execute(task, options) {
     const gatewayArm = this.gatewayArmField().gatewayArm;
-    const breaker = gatewayArm !== void 0 && this.modelAdapter.providerId === `cli-${this.name}` ? (await import("./cli-circuit-breaker-YMNSN2GN.js")).getDefaultCliCircuitBreakerRegistry().getArmBreaker(breakerKeys.forArm({ name: this.name, gatewayArm })) : void 0;
+    const breaker = gatewayArm !== void 0 && this.modelAdapter.providerId === `cli-${this.name}` ? (await import("./cli-circuit-breaker-AH7J5ASH.js")).getDefaultCliCircuitBreakerRegistry().getArmBreaker(breakerKeys.forArm({ name: this.name, gatewayArm })) : void 0;
     const result = await this.modelAdapter.complete(this.toCompletionRequest(task, options));
     if (!result.ok) {
       const cliError = this.toCliError(result.error);
@@ -18081,7 +18165,7 @@ function applyDistillationSwitch(config) {
 }
 async function nativeAgyTierOptions(arm, adapter) {
   if (arm !== "gemini" || gatewayServedSlotOf(adapter) !== void 0) return {};
-  const { GeminiCliAdapter } = await import("./gemini-adapter-SYJ672KC.js");
+  const { GeminiCliAdapter } = await import("./gemini-adapter-QOKHQPOE.js");
   if (!(cliBinaryAdapterOf(adapter) instanceof GeminiCliAdapter)) return {};
   return {
     liveModelIds: new Set(
@@ -18318,7 +18402,7 @@ var CompositeRouter = class _CompositeRouter {
    */
   async consultUnifiedContext(task) {
     try {
-      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-TLEEMPE5.js");
+      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-P4WAQWKW.js");
       const ctx = await getContextForTask({
         task: task.content,
         category: inferTaskCategory(task.content),
@@ -19817,14 +19901,11 @@ export {
   toError,
   getErrorMessage,
   getFallbackChainForCategory,
-  CLI_VERSION_REQUIREMENTS,
-  DEFAULT_CAPABILITIES,
-  breakerKeys,
-  resolveAuthEvidence,
-  canonicalModelKey,
-  countDistinctModels,
-  UNRESOLVED_MODEL_ID,
-  assessPanelIndependence,
+  AbortError,
+  throwIfAborted,
+  isCallerCancelled,
+  isTimeoutAbortReason,
+  raceAbort,
   isRateLimitText,
   isDurableCapacityText,
   isDurableCapacityError,
@@ -19833,25 +19914,35 @@ export {
   resolveRetryAfterMs,
   toRateLimitError,
   recordRateLimitEvent,
-  GEMINI_CLI_COMMAND,
-  isAuthFailureText,
-  authRemediation,
-  classifyExtractedError,
-  parseCliErrorEnvelope,
-  AbortError,
-  throwIfAborted,
-  isCallerCancelled,
-  isTimeoutAbortReason,
-  raceAbort,
   RETRYABLE_ERROR_CODES,
   isTimeoutText,
   createCliError,
   createCallerInputCliError,
   createHostUnavailableCliError,
   isHostUnavailableCliError,
+  createNativePreSpawnRefusal,
+  isNativePreSpawnRefusal,
   isCallerAbortError,
   createCallerAbortCliError,
   isCallerInputCliError,
+  NATIVE_EXECUTION_POLICY,
+  hasIssuedNativeExecutionPolicy,
+  nativeExecutionOptions,
+  nativePolicyRefusalError,
+  resolveNativeSpawnOptions,
+  CLI_VERSION_REQUIREMENTS,
+  DEFAULT_CAPABILITIES,
+  breakerKeys,
+  resolveAuthEvidence,
+  canonicalModelKey,
+  countDistinctModels,
+  UNRESOLVED_MODEL_ID,
+  assessPanelIndependence,
+  GEMINI_CLI_COMMAND,
+  isAuthFailureText,
+  authRemediation,
+  classifyExtractedError,
+  parseCliErrorEnvelope,
   OutcomeStore,
   getOutcomeStore,
   resetOutcomeStore,
@@ -20114,4 +20205,4 @@ export {
   AgentCapability,
   OrchestratorError
 };
-//# sourceMappingURL=chunk-ZKWBLGZN.js.map
+//# sourceMappingURL=chunk-3BSLRRPJ.js.map