nexus-agents 2.139.1 → 2.140.0

package/dist/{child-mcp-config-CFK5AQ7R.js → child-mcp-config-VQJVJZLS.js}

@@ -1,6 +1,6 @@
 import {
   createLogger
-} from "./chunk-VJK3JMES.js";
+} from "./chunk-7HSJD6OA.js";
 import "./chunk-NL7SZQPW.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -60,4 +60,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-CFK5AQ7R.js.map
+//# sourceMappingURL=child-mcp-config-VQJVJZLS.js.map

package/dist/{chunk-OCHI2CH6.js → chunk-23UHZ7JY.js}

@@ -2,7 +2,7 @@ import {
   CACHE_TIMEOUTS,
   createLogger,
   getTimeProvider
-} from "./chunk-VJK3JMES.js";
+} from "./chunk-7HSJD6OA.js";
 
 // src/security/trust-types.ts
 import { z } from "zod";
@@ -560,4 +560,4 @@ export {
   resolveReputationGatingMode,
   gateWithReputation
 };
-//# sourceMappingURL=chunk-OCHI2CH6.js.map
+//# sourceMappingURL=chunk-23UHZ7JY.js.map

package/dist/{chunk-MZQ66FRR.js → chunk-37SXU3KQ.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-VJK3JMES.js";
+} from "./chunk-7HSJD6OA.js";
 
 // src/context/session-memory.ts
 import * as fs from "fs";
@@ -352,4 +352,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-MZQ66FRR.js.map
+//# sourceMappingURL=chunk-37SXU3KQ.js.map

package/dist/{chunk-DIMJZBPS.js → chunk-3B3ER6KT.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-VJK3JMES.js";
+} from "./chunk-7HSJD6OA.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -721,4 +721,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-DIMJZBPS.js.map
+//# sourceMappingURL=chunk-3B3ER6KT.js.map

package/dist/{chunk-JMLKKPNQ.js → chunk-5HMUQ7ZJ.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-GHN4BA6W.js";
+} from "./chunk-JBDQSP2L.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -11,14 +11,14 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-OCHI2CH6.js";
+} from "./chunk-23UHZ7JY.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-VJK3JMES.js";
+} from "./chunk-7HSJD6OA.js";
 
 // src/security/trust-classifier.ts
 function mapAuthorAssociation(association) {
@@ -1401,4 +1401,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-JMLKKPNQ.js.map
+//# sourceMappingURL=chunk-5HMUQ7ZJ.js.map

package/dist/{chunk-FVQP3TSQ.js → chunk-6FFQGIUG.js}

@@ -4,24 +4,24 @@ import {
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-KEFQSK6F.js";
+} from "./chunk-OFP2D3SD.js";
 import {
   CUSTOM_API_BASE_URL_ENV,
   CUSTOM_API_DEFAULT_MODEL,
   PROVIDER_ENV_KEYS,
   assertCustomApiHostResolvesPublic,
   validateCustomApiBaseUrl
-} from "./chunk-XEUA3DFO.js";
+} from "./chunk-T6AP4TJ4.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG
-} from "./chunk-3YEJZV4U.js";
+} from "./chunk-YPQTKQ5K.js";
 import {
   getAvailabilityCache
-} from "./chunk-P2CQ7FAJ.js";
+} from "./chunk-GVOBWKHX.js";
 import {
   generateHyphenId
-} from "./chunk-6YLZ67I3.js";
+} from "./chunk-BQ3HZAZG.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
@@ -57,7 +57,7 @@ import {
   loadModelsDevSnapshot,
   ok,
   resolveCliAlias
-} from "./chunk-VJK3JMES.js";
+} from "./chunk-7HSJD6OA.js";
 
 // src/cli-adapters/cli-to-model-adapter.ts
 var CliToModelAdapter = class {
@@ -2174,9 +2174,16 @@ var CLI_VENDOR_KEYS = {
     "OPENROUTER_API_KEY"
   ]
 };
-function isAllowed(key, vendorKeys) {
+var NEXUS_SUBPROCESS_EXTRA_ENV = "NEXUS_SUBPROCESS_EXTRA_ENV";
+function readExtraEnvNames(env) {
+  const raw = env[NEXUS_SUBPROCESS_EXTRA_ENV];
+  if (raw === void 0 || raw.trim() === "") return [];
+  return raw.split(/[,\s]+/).map((t) => t.trim()).filter((t) => t.length > 0);
+}
+function isAllowed(key, vendorKeys, extraEnv) {
   if (BASE_ENV_EXACT.includes(key)) return true;
   if (vendorKeys.includes(key)) return true;
+  if (extraEnv.includes(key)) return true;
   return BASE_ENV_PREFIXES.some((prefix) => key.startsWith(prefix));
 }
 function buildChildEnv(cliName) {
@@ -2191,10 +2198,11 @@ function buildChildEnv(cliName) {
     return childEnv;
   }
   const vendorKeys = CLI_VENDOR_KEYS[cliName];
+  const extraEnv = readExtraEnvNames(source);
   for (const [key, value] of Object.entries(source)) {
     if (value === void 0) continue;
     if (key === "CLAUDECODE") continue;
-    if (isAllowed(key, vendorKeys)) childEnv[key] = value;
+    if (isAllowed(key, vendorKeys, extraEnv)) childEnv[key] = value;
   }
   childEnv[NEXUS_SUBPROCESS_DEPTH_ENV] = nextDepth;
   return childEnv;
@@ -4848,4 +4856,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-FVQP3TSQ.js.map
+//# sourceMappingURL=chunk-6FFQGIUG.js.map