nexus-agents 2.139.0 → 2.140.0

package/dist/{child-mcp-config-3WBDH4XF.js → child-mcp-config-VQJVJZLS.js}

@@ -1,6 +1,6 @@
 import {
   createLogger
-} from "./chunk-ALYAJ7UB.js";
+} from "./chunk-7HSJD6OA.js";
 import "./chunk-NL7SZQPW.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -60,4 +60,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-3WBDH4XF.js.map
+//# sourceMappingURL=child-mcp-config-VQJVJZLS.js.map

package/dist/{chunk-NHHSBKFL.js → chunk-23UHZ7JY.js}

@@ -2,7 +2,7 @@ import {
   CACHE_TIMEOUTS,
   createLogger,
   getTimeProvider
-} from "./chunk-ALYAJ7UB.js";
+} from "./chunk-7HSJD6OA.js";
 
 // src/security/trust-types.ts
 import { z } from "zod";
@@ -560,4 +560,4 @@ export {
   resolveReputationGatingMode,
   gateWithReputation
 };
-//# sourceMappingURL=chunk-NHHSBKFL.js.map
+//# sourceMappingURL=chunk-23UHZ7JY.js.map

package/dist/{chunk-IVUFSLFJ.js → chunk-37SXU3KQ.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-ALYAJ7UB.js";
+} from "./chunk-7HSJD6OA.js";
 
 // src/context/session-memory.ts
 import * as fs from "fs";
@@ -352,4 +352,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-IVUFSLFJ.js.map
+//# sourceMappingURL=chunk-37SXU3KQ.js.map

package/dist/{chunk-POET73HP.js → chunk-3B3ER6KT.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-ALYAJ7UB.js";
+} from "./chunk-7HSJD6OA.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -721,4 +721,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-POET73HP.js.map
+//# sourceMappingURL=chunk-3B3ER6KT.js.map

package/dist/{chunk-2ML4HOUH.js → chunk-5HMUQ7ZJ.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-FSVDHN6X.js";
+} from "./chunk-JBDQSP2L.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -11,14 +11,14 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-NHHSBKFL.js";
+} from "./chunk-23UHZ7JY.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-ALYAJ7UB.js";
+} from "./chunk-7HSJD6OA.js";
 
 // src/security/trust-classifier.ts
 function mapAuthorAssociation(association) {
@@ -1401,4 +1401,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-2ML4HOUH.js.map
+//# sourceMappingURL=chunk-5HMUQ7ZJ.js.map

package/dist/{chunk-PYFCJRBU.js → chunk-6FFQGIUG.js}

@@ -4,24 +4,24 @@ import {
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-H3AWLMZC.js";
+} from "./chunk-OFP2D3SD.js";
 import {
   CUSTOM_API_BASE_URL_ENV,
   CUSTOM_API_DEFAULT_MODEL,
   PROVIDER_ENV_KEYS,
   assertCustomApiHostResolvesPublic,
   validateCustomApiBaseUrl
-} from "./chunk-2GYETCPK.js";
+} from "./chunk-T6AP4TJ4.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG
-} from "./chunk-WWDMH5XY.js";
+} from "./chunk-YPQTKQ5K.js";
 import {
   getAvailabilityCache
-} from "./chunk-EUHUAF3A.js";
+} from "./chunk-GVOBWKHX.js";
 import {
   generateHyphenId
-} from "./chunk-PI5QEJ54.js";
+} from "./chunk-BQ3HZAZG.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
@@ -57,7 +57,7 @@ import {
   loadModelsDevSnapshot,
   ok,
   resolveCliAlias
-} from "./chunk-ALYAJ7UB.js";
+} from "./chunk-7HSJD6OA.js";
 
 // src/cli-adapters/cli-to-model-adapter.ts
 var CliToModelAdapter = class {
@@ -2121,6 +2121,11 @@ var BaseCliAdapter = class {
 };
 
 // src/cli-adapters/subprocess-env.ts
+var NEXUS_SUBPROCESS_DEPTH_ENV = "NEXUS_SUBPROCESS_DEPTH";
+function readSubprocessDepth(env = process.env) {
+  const raw = Number.parseInt(env[NEXUS_SUBPROCESS_DEPTH_ENV] ?? "0", 10);
+  return Number.isFinite(raw) && raw > 0 ? raw : 0;
+}
 var BASE_ENV_EXACT = [
   "PATH",
   "HOME",
@@ -2169,26 +2174,37 @@ var CLI_VENDOR_KEYS = {
     "OPENROUTER_API_KEY"
   ]
 };
-function isAllowed(key, vendorKeys) {
+var NEXUS_SUBPROCESS_EXTRA_ENV = "NEXUS_SUBPROCESS_EXTRA_ENV";
+function readExtraEnvNames(env) {
+  const raw = env[NEXUS_SUBPROCESS_EXTRA_ENV];
+  if (raw === void 0 || raw.trim() === "") return [];
+  return raw.split(/[,\s]+/).map((t) => t.trim()).filter((t) => t.length > 0);
+}
+function isAllowed(key, vendorKeys, extraEnv) {
   if (BASE_ENV_EXACT.includes(key)) return true;
   if (vendorKeys.includes(key)) return true;
+  if (extraEnv.includes(key)) return true;
   return BASE_ENV_PREFIXES.some((prefix) => key.startsWith(prefix));
 }
 function buildChildEnv(cliName) {
   const source = process.env;
   const childEnv = {};
+  const nextDepth = String(readSubprocessDepth(source) + 1);
   if (source["NEXUS_SUBPROCESS_ENV_ALLOWLIST"] === "0") {
     for (const [key, value] of Object.entries(source)) {
       if (value !== void 0 && key !== "CLAUDECODE") childEnv[key] = value;
     }
+    childEnv[NEXUS_SUBPROCESS_DEPTH_ENV] = nextDepth;
     return childEnv;
   }
   const vendorKeys = CLI_VENDOR_KEYS[cliName];
+  const extraEnv = readExtraEnvNames(source);
   for (const [key, value] of Object.entries(source)) {
     if (value === void 0) continue;
     if (key === "CLAUDECODE") continue;
-    if (isAllowed(key, vendorKeys)) childEnv[key] = value;
+    if (isAllowed(key, vendorKeys, extraEnv)) childEnv[key] = value;
   }
+  childEnv[NEXUS_SUBPROCESS_DEPTH_ENV] = nextDepth;
   return childEnv;
 }
 
@@ -4805,6 +4821,8 @@ export {
   categorizeError2 as categorizeError,
   executeCliRetryLoop,
   BaseCliAdapter,
+  NEXUS_SUBPROCESS_DEPTH_ENV,
+  readSubprocessDepth,
   authRemediation,
   SubprocessCliAdapter,
   asRecord,
@@ -4838,4 +4856,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-PYFCJRBU.js.map
+//# sourceMappingURL=chunk-6FFQGIUG.js.map