nexus-agents 2.174.0 → 2.174.2

package/dist/{child-mcp-config-EQ2NKTK2.js → child-mcp-config-GWB7JLIS.js}

@@ -1,6 +1,6 @@
 import {
   createLogger
-} from "./chunk-25ZJ5TCC.js";
+} from "./chunk-Y5JA7XEO.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -60,4 +60,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-EQ2NKTK2.js.map
+//# sourceMappingURL=child-mcp-config-GWB7JLIS.js.map

package/dist/{chunk-26WHBGN6.js → chunk-2CB6QMRX.js}

@@ -1,6 +1,6 @@
 import {
   generateSecurityPlan
-} from "./chunk-MLJAC2UH.js";
+} from "./chunk-UB6APBIY.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-HFOQKCD2.js";
@@ -21,10 +21,10 @@ import {
   DEFAULT_TASK_TTL_MS,
   DEFAULT_TOOL_RATE_LIMITS,
   clampTaskTtl
-} from "./chunk-V4XEPUCM.js";
+} from "./chunk-YUCJ7VSJ.js";
 import {
   executeExpert
-} from "./chunk-ZMM3HJ2E.js";
+} from "./chunk-PN43VH6Z.js";
 import {
   JobStatusSchema,
   abortJob,
@@ -45,21 +45,21 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-VAD2FMNC.js";
+} from "./chunk-OCTNNEXT.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-TZS5IKWW.js";
+} from "./chunk-3P7SMHBU.js";
 import {
   IssueTriage
-} from "./chunk-22NGPM4P.js";
+} from "./chunk-KWKGX7LC.js";
 import {
   resolveEnvMode,
   sanitizeInput
-} from "./chunk-NCGPKRRY.js";
+} from "./chunk-KAL22DYO.js";
 import {
   withPrerequisite
-} from "./chunk-AOOZ6IZB.js";
+} from "./chunk-KYF4YAZO.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -82,18 +82,18 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-MM6UYUIC.js";
+} from "./chunk-5QVJCBM4.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
   emitPipelinePolicyEvent
-} from "./chunk-JUUHARON.js";
+} from "./chunk-VSETLO4Q.js";
 import {
   EventTopics,
   createEvent,
   getGlobalEventBus,
   getGlobalRegistry
-} from "./chunk-4NYZ2VTW.js";
+} from "./chunk-MRRKFMYJ.js";
 import {
   IDENTIFIER_RE,
   LANG_VALUES,
@@ -126,15 +126,15 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-HZB3LIBF.js";
+} from "./chunk-OGR5Q6QO.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-KKFTLDNO.js";
+} from "./chunk-HUYP2XXH.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry
-} from "./chunk-KOK66W2C.js";
+} from "./chunk-DJZGCMNU.js";
 import {
   resolveInsideRoot
 } from "./chunk-NUBSJGQZ.js";
@@ -143,14 +143,14 @@ import {
   MemoryImportance,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-NDNJ3TBM.js";
+} from "./chunk-EDWON3X5.js";
 import {
   STOPWORDS,
   truncateWithInfo
 } from "./chunk-6T3EPABN.js";
 import {
   createSessionMemory
-} from "./chunk-P7BKE3OH.js";
+} from "./chunk-IVINLVGP.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -168,25 +168,25 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-ZLQLBSSQ.js";
+} from "./chunk-K6NXLBHG.js";
 import {
   BaseAdapter,
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-LSMFXWRN.js";
+} from "./chunk-6RRAQFSX.js";
 import {
   DEFAULTS
-} from "./chunk-OPZQQWVW.js";
+} from "./chunk-DGR27REV.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-CERGIC66.js";
+} from "./chunk-RAIFOYRM.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-3DI4CEC7.js";
+} from "./chunk-SGIWJYLJ.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -283,7 +283,7 @@ import {
   selectStrategyByManifest,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-25ZJ5TCC.js";
+} from "./chunk-Y5JA7XEO.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
@@ -28344,7 +28344,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-TAUTDY3F.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-MTJR3AQM.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -43879,7 +43879,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-S7RSXHCS.js");
+    const { createIssueTriage } = await import("./issue-triage-KOIPTNDH.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -43907,7 +43907,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-WOKMAGXB.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-2W2JMFQW.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -45548,7 +45548,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-KOUNAH5O.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-RPSM7Y4Q.js");
     const { getLearningDir } = await import("./learning-persistence-6D5GGT7D.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -45610,7 +45610,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-BOTPCHXJ.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-HAWL7RKO.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -45644,7 +45644,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-YXGRGPCX.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-VNABZRH7.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -45662,7 +45662,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-KOUNAH5O.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-RPSM7Y4Q.js");
     const { getLearningDir } = await import("./learning-persistence-6D5GGT7D.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -45777,7 +45777,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-UJRG6CJS.js");
+        const { executeVoting } = await import("./consensus-vote-BLCQCWPV.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -46218,7 +46218,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-5AIKCDA2.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-TIT43XF4.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -46289,7 +46289,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-5P23NS3N.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-MKSCD567.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -49261,7 +49261,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-M4OE3GLA.js");
+    const { createScmProvider } = await import("./factory-SC5D5P3C.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -50103,7 +50103,7 @@ async function probeSource(source, includeModelIds) {
   }
 }
 async function defaultSources(includeOpenRouter) {
-  const { createAllAdapters: createAllAdapters2 } = await import("./factory-ETFUFSGU.js");
+  const { createAllAdapters: createAllAdapters2 } = await import("./factory-7UFJ6LXW.js");
   const adapters = createAllAdapters2();
   return buildDefaultModelSources(adapters, { includeOpenRouter });
 }
@@ -54123,4 +54123,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-26WHBGN6.js.map
+//# sourceMappingURL=chunk-2CB6QMRX.js.map

package/dist/{chunk-TZS5IKWW.js → chunk-3P7SMHBU.js}

@@ -1,9 +1,9 @@
 import {
   loadPapersRegistry
-} from "./chunk-KOK66W2C.js";
+} from "./chunk-DJZGCMNU.js";
 import {
   getErrorMessage
-} from "./chunk-25ZJ5TCC.js";
+} from "./chunk-Y5JA7XEO.js";
 
 // src/cli/research-helpers-synthesize.ts
 import { z } from "zod";
@@ -876,4 +876,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=chunk-TZS5IKWW.js.map
+//# sourceMappingURL=chunk-3P7SMHBU.js.map

package/dist/{chunk-YXLJNG7E.js → chunk-4PTAG65V.js}

@@ -1,6 +1,6 @@
 import {
   getErrorMessage
-} from "./chunk-25ZJ5TCC.js";
+} from "./chunk-Y5JA7XEO.js";
 
 // src/cli/setup-config.ts
 import { copyFileSync, existsSync, mkdirSync, writeFileSync } from "fs";
@@ -77,4 +77,4 @@ function ensureBackup(outputPath) {
 export {
   runConfigInitSync
 };
-//# sourceMappingURL=chunk-YXLJNG7E.js.map
+//# sourceMappingURL=chunk-4PTAG65V.js.map

package/dist/{chunk-MM6UYUIC.js → chunk-5QVJCBM4.js}

@@ -1,6 +1,6 @@
 import {
   emitClawGuardViolation
-} from "./chunk-JUUHARON.js";
+} from "./chunk-VSETLO4Q.js";
 import {
   CACHE_TIMEOUTS,
   MCP_TIMEOUTS,
@@ -16,7 +16,7 @@ import {
   getTimeProvider,
   ok,
   resolveToolClassGuardMs
-} from "./chunk-25ZJ5TCC.js";
+} from "./chunk-Y5JA7XEO.js";
 import {
   getNexusDataDir
 } from "./chunk-DHVMSIT5.js";
@@ -2023,4 +2023,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-MM6UYUIC.js.map
+//# sourceMappingURL=chunk-5QVJCBM4.js.map

package/dist/{chunk-LSMFXWRN.js → chunk-6RRAQFSX.js}

@@ -11,7 +11,7 @@ import {
   isRateLimitLikeError,
   lookupInTreeCapability,
   ok
-} from "./chunk-25ZJ5TCC.js";
+} from "./chunk-Y5JA7XEO.js";
 
 // src/config/model-parameter-support.ts
 function parseClaudeMajorMinor(bareId) {
@@ -828,4 +828,4 @@ export {
   DEFAULT_COLLECT_STREAM_MAX_CHUNKS,
   collectStream
 };
-//# sourceMappingURL=chunk-LSMFXWRN.js.map
+//# sourceMappingURL=chunk-6RRAQFSX.js.map

package/dist/{chunk-YVVUKVZV.js → chunk-ASJTVA7W.js}

@@ -1,6 +1,6 @@
 import {
   runConfigInitSync
-} from "./chunk-YXLJNG7E.js";
+} from "./chunk-4PTAG65V.js";
 import {
   VERSION,
   checkApiKeys,
@@ -8,13 +8,13 @@ import {
   checkSqlite,
   defaultConfig,
   initDataDirectories
-} from "./chunk-V4XEPUCM.js";
+} from "./chunk-YUCJ7VSJ.js";
 import {
   BUILT_IN_EXPERTS
 } from "./chunk-YPNQPT2F.js";
 import {
   probeAllClis
-} from "./chunk-ZLQLBSSQ.js";
+} from "./chunk-K6NXLBHG.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   colors,
@@ -25,7 +25,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   symbols
-} from "./chunk-25ZJ5TCC.js";
+} from "./chunk-Y5JA7XEO.js";
 import {
   ensureGitignored,
   findRepoRoot
@@ -2001,4 +2001,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=chunk-YVVUKVZV.js.map
+//# sourceMappingURL=chunk-ASJTVA7W.js.map

package/dist/{chunk-OPZQQWVW.js → chunk-DGR27REV.js}

@@ -1,7 +1,6 @@
 import {
   API_TIMEOUTS,
   CLI_TIMEOUTS,
-  ConfigError,
   INTERNAL_TIMEOUTS,
   MCP_TIMEOUTS,
   TEST_TIMEOUTS,
@@ -11,171 +10,11 @@ import {
   createGetRateLimitConfig,
   createGetRetryConfig,
   createGetTimeout,
-  createGetToolRateLimit,
-  createLogger,
-  err,
-  ok
-} from "./chunk-25ZJ5TCC.js";
-
-// src/adapters/sdk/types.ts
-var PROVIDER_ENV_KEYS = {
-  anthropic: "ANTHROPIC_API_KEY",
-  openai: "OPENAI_API_KEY",
-  google: "GOOGLE_AI_API_KEY",
-  "custom-openai": "NEXUS_CUSTOM_API_KEY"
-};
-var CUSTOM_API_BASE_URL_ENV = "NEXUS_CUSTOM_API_BASE_URL";
-var CUSTOM_API_ALLOW_PRIVATE_ENV = "NEXUS_CUSTOM_API_ALLOW_PRIVATE";
-
-// src/adapters/sdk/custom-api-validation.ts
-import { isIPv4, isIPv6 } from "net";
-import { lookup as dnsLookup } from "dns/promises";
-var logger = createLogger({ module: "custom-api-validation" });
-function validateCustomApiBaseUrl(raw, opts = {}) {
-  if (raw === void 0 || raw.trim() === "") {
-    return err(
-      new ConfigError(
-        "Custom API base URL is required but missing. Set NEXUS_CUSTOM_API_BASE_URL or pass `baseUrl` in config."
-      )
-    );
-  }
-  let url;
-  try {
-    url = new URL(raw);
-  } catch {
-    return err(new ConfigError(`Custom API base URL is not a valid URL: ${raw}`));
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") {
-    return err(
-      new ConfigError(`Custom API base URL must use http or https, got "${url.protocol}" in ${raw}`)
-    );
-  }
-  const allowPrivate = opts.allowPrivate === true || resolveAllowPrivateFromEnv();
-  if (!allowPrivate) {
-    const rejection = classifyPrivateHost(url.hostname);
-    if (rejection !== null) {
-      return err(
-        new ConfigError(
-          `Custom API base URL rejected (SSRF guard, reason="${rejection.reason}"): ${rejection.message}. Set ${CUSTOM_API_ALLOW_PRIVATE_ENV}=1 to bypass if the gateway runs on a trusted internal host.`
-        )
-      );
-    }
-  }
-  return ok(url);
-}
-function resolveAllowPrivateFromEnv() {
-  const v = process.env[CUSTOM_API_ALLOW_PRIVATE_ENV];
-  return v === "1" || v === "true";
-}
-function classifyPrivateHost(hostname) {
-  const normalized = normalizeHost(hostname);
-  const literal = classifyIpAddress(normalized);
-  if (literal !== "not_an_ip") {
-    return literal;
-  }
-  if (normalized === "localhost" || normalized.endsWith(".localhost") || normalized.endsWith(".local")) {
-    return {
-      reason: "loopback",
-      message: `hostname "${hostname}" resolves to loopback/mDNS`
-    };
-  }
-  return null;
-}
-function normalizeHost(hostname) {
-  const stripped = hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
-  return stripped.toLowerCase();
-}
-function classifyIpAddress(normalized) {
-  if (isIPv4(normalized)) {
-    return classifyIPv4(normalized);
-  }
-  if (isIPv6(normalized)) {
-    return classifyIPv6(normalized);
-  }
-  return "not_an_ip";
-}
-async function assertCustomApiHostResolvesPublic(hostname, opts = {}) {
-  const allowPrivate = opts.allowPrivate === true || resolveAllowPrivateFromEnv();
-  if (allowPrivate) {
-    return ok(void 0);
-  }
-  const normalized = normalizeHost(hostname);
-  if (isIPv4(normalized) || isIPv6(normalized)) {
-    return ok(void 0);
-  }
-  let addresses;
-  try {
-    addresses = await dnsLookup(hostname, { all: true });
-  } catch (error) {
-    logger.debug("custom-api SSRF resolve check: DNS lookup failed, skipping (fail-open)", {
-      hostname,
-      error: error instanceof Error ? error.message : String(error)
-    });
-    return ok(void 0);
-  }
-  const rejection = firstPrivateAddress(addresses);
-  if (rejection !== null) {
-    return err(
-      new ConfigError(
-        `Custom API base URL rejected (SSRF resolve guard, reason="${rejection.reason}"): hostname "${hostname}" resolved to ${rejection.message}. Set ${CUSTOM_API_ALLOW_PRIVATE_ENV}=1 to bypass if the gateway runs on a trusted internal host.`
-      )
-    );
-  }
-  return ok(void 0);
-}
-function firstPrivateAddress(addresses) {
-  for (const { address } of addresses) {
-    const rejection = classifyIpAddress(address.toLowerCase());
-    if (rejection !== null && rejection !== "not_an_ip") {
-      return rejection;
-    }
-  }
-  return null;
-}
-var IPV4_RULES = [
-  { match: (a) => a === 127, reason: "loopback", label: "IPv4 loopback" },
-  { match: (a) => a === 10, reason: "private_range", label: "IPv4 private (10/8)" },
-  {
-    match: (a, b) => a === 172 && b >= 16 && b <= 31,
-    reason: "private_range",
-    label: "IPv4 private (172.16/12)"
-  },
-  {
-    match: (a, b) => a === 192 && b === 168,
-    reason: "private_range",
-    label: "IPv4 private (192.168/16)"
-  },
-  {
-    match: (a, b) => a === 169 && b === 254,
-    reason: "link_local",
-    label: "IPv4 link-local (169.254/16 \u2014 AWS IMDS)"
-  },
-  { match: (a) => a === 0, reason: "reserved", label: "IPv4 reserved (0/8)" }
-];
-function classifyIPv4(ip) {
-  const parts = ip.split(".").map((p) => Number.parseInt(p, 10));
-  if (parts.length !== 4 || parts.some((n) => Number.isNaN(n))) return null;
-  const [a, b] = parts;
-  for (const rule of IPV4_RULES) {
-    if (rule.match(a, b)) {
-      return { reason: rule.reason, message: `${rule.label} (${ip})` };
-    }
-  }
-  return null;
-}
-function classifyIPv6(ip) {
-  const lower = ip.toLowerCase();
-  if (lower === "::1") return { reason: "loopback", message: `IPv6 loopback (${ip})` };
-  if (lower.startsWith("fe80:"))
-    return { reason: "link_local", message: `IPv6 link-local (${ip})` };
-  if (/^fc|^fd/.test(lower)) {
-    return { reason: "private_range", message: `IPv6 unique-local (${ip}, fc00::/7)` };
-  }
-  return null;
-}
+  createGetToolRateLimit
+} from "./chunk-Y5JA7XEO.js";
 
 // src/config/defaults.ts
-var CUSTOM_API_DEFAULT_MODEL = "gpt-4o";
+var CUSTOM_API_DEFAULT_MODEL = "gpt-5.5";
 var DEFAULTS = {
   /**
    * Default timeout settings in milliseconds.
@@ -388,12 +227,7 @@ var getToolRateLimit = createGetToolRateLimit(DEFAULTS.TOOL_RATE_LIMITS);
 var getEnvVarDocumentation = createGetEnvVarDocumentation(DEFAULTS);
 
 export {
-  PROVIDER_ENV_KEYS,
-  CUSTOM_API_BASE_URL_ENV,
-  CUSTOM_API_ALLOW_PRIVATE_ENV,
-  validateCustomApiBaseUrl,
-  assertCustomApiHostResolvesPublic,
   CUSTOM_API_DEFAULT_MODEL,
   DEFAULTS
 };
-//# sourceMappingURL=chunk-OPZQQWVW.js.map
+//# sourceMappingURL=chunk-DGR27REV.js.map

package/dist/chunk-DGR27REV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config/defaults.ts"],"sourcesContent":["/**\n * Central Configuration Defaults\n *\n * Consolidates common default values used across the codebase.\n * This prevents scattered magic numbers and ensures consistency.\n *\n * Usage:\n *   import { DEFAULTS, getTimeout, TIMEOUT_PROFILES } from '../config/defaults.js';\n *   const timeout = options.timeout ?? DEFAULTS.TIMEOUT_DEFAULTS.cliMs;\n *   const cliTimeout = getTimeoutForCli('claude', 'complex');\n *\n * Environment overrides can be added via NEXUS_* environment variables.\n *\n * @module config/defaults\n * (Source: Central config consolidation initiative)\n */\n\n// Re-export types from defaults-types\nexport type {\n  TaskComplexity,\n  TimeoutProfile,\n  KnownCliName,\n  TimeoutDefaults,\n  RateLimitDefaults,\n  ToolRateLimitConfig,\n  RetryDefaults,\n  CircuitBreakerDefaults,\n} from './defaults-types.js';\n\nexport { isTaskComplexity, isKnownCliName } from './defaults-types.js';\n\n// Re-export timeout profiles (delegates to config/timeouts.ts)\nexport {\n  TIMEOUT_PROFILES,\n  getTimeoutProfile,\n  getTimeoutForCli,\n} from './defaults-timeout-profiles.js';\n\n// Re-export canonical timeout modules (Issue #984)\nexport {\n  CLI_TIMEOUTS,\n  VOTE_TIMEOUTS,\n  MCP_TIMEOUTS,\n  WORKFLOW_TIMEOUTS,\n  GRAPH_TIMEOUTS,\n  PER_CLI_TASK_TIMEOUTS,\n  API_TIMEOUTS,\n  INTERNAL_TIMEOUTS,\n  TEST_TIMEOUTS,\n  TIMEOUT_ENV_VARS,\n  getCliTimeoutProfile,\n  getCliTimeout,\n  resolveVoteTimeout,\n  resolveEnvTimeout,\n  validateTimeout,\n  BACKOFF_CONFIG,\n  AGENT_ROUTER_TIMEOUTS,\n  CODEX_MCP_TIMEOUTS,\n} from './timeouts.js';\n\n// Re-export env helpers (internal use)\nexport { parseIntEnv, parseFloatEnv, parseBoolEnv } from './defaults-env.js';\n\nimport {\n  createGetTimeout,\n  createGetRetryConfig,\n  createGetRateLimitConfig,\n  createGetCircuitBreakerConfig,\n  createGetToolRateLimit,\n  createGetEnvVarDocumentation,\n} from './defaults-env.js';\nimport {\n  API_TIMEOUTS as _API,\n  WORKFLOW_TIMEOUTS as _WF,\n  MCP_TIMEOUTS as _MCP,\n  INTERNAL_TIMEOUTS as _INT,\n  TEST_TIMEOUTS as _TEST,\n  CLI_TIMEOUTS as _CLI,\n} from './timeouts.js';\n\n// ============================================================================\n// Default Model IDs (#2200 Child 4)\n// ============================================================================\n\n/**\n * Default model identifier for the custom OpenAI-compatible API gateway.\n *\n * Used by both `cli/setup-custom-api.ts` (write to nexus-agents.yaml) and\n * `adapters/auto-adapter.ts` (NEXUS_CUSTOM_MODEL env-var fallback). Single\n * source of truth so changes flow through all consumers.\n *\n * `gpt-4o` was the previous value, chosen because it was widely supported across\n * OpenAI-compatible gateways. It is now END-OF-LIFE at OpenAI, so defaulting to\n * it points new operators at a model their gateway may well refuse (#4408).\n *\n * A custom gateway can serve anything, so ANY default here is a guess — the\n * right long-term answer is to discover the model list from the endpoint\n * (`GET /v1/models`, which this repo already implements) rather than assume one.\n * Until that is wired, guess a current model instead of a retired one.\n *\n * Operators are expected to override via `NEXUS_CUSTOM_MODEL`.\n */\nexport const CUSTOM_API_DEFAULT_MODEL = 'gpt-5.5';\n\n// ============================================================================\n// Central Defaults Object\n// ============================================================================\n\n/**\n * Central defaults object containing all configuration categories.\n */\nexport const DEFAULTS = {\n  /**\n   * Default timeout settings in milliseconds.\n   * Values sourced from config/timeouts.ts (Issue #984).\n   */\n  TIMEOUT_DEFAULTS: {\n    /** CLI tool execution timeout in milliseconds. */\n    cliMs: _CLI.default.standard,\n    // cliSimpleMs / cliComplexMs removed in #4180 — never read by any production\n    // code (the matching NEXUS_TIMEOUT_CLISIMPLE/CLICOMPLEX env vars were silent\n    // no-ops, #2977 class). Per-complexity CLI timeouts come from\n    // getTimeoutForCli/TIMEOUT_PROFILES (CLI_TIMEOUTS in config/timeouts.ts).\n    /** API request timeout in milliseconds. */\n    apiMs: _API.defaultMs,\n    /** Maximum API timeout in milliseconds. */\n    apiMaxMs: _API.maxMs,\n    /** Workflow-level timeout in milliseconds (5 minutes). */\n    workflowMs: _WF.workflowMs,\n    /** Maximum workflow timeout in milliseconds (30 minutes). */\n    workflowMaxMs: _WF.workflowMaxMs,\n    /** Step-level timeout in milliseconds. */\n    stepMs: _INT.selfEvalMs,\n    /** MCP operation default timeout in milliseconds (generic, not per-tool). */\n    mcpMs: _API.defaultMs,\n    /** MCP operation maximum timeout in milliseconds. */\n    mcpMaxMs: _MCP.maxMs,\n    /** Health check timeout in milliseconds. */\n    healthCheckMs: _INT.healthCheckMs,\n    /** Global test run timeout in milliseconds (10 minutes). */\n    testGlobalMs: _TEST.globalMs,\n    /** Per-task test timeout in milliseconds. */\n    testTaskMs: _TEST.taskMs,\n    /** Circuit breaker reset timeout in milliseconds. */\n    circuitBreakerResetMs: _INT.circuitBreakerResetMs,\n  },\n\n  /**\n   * Default rate limit settings for outbound operations.\n   */\n  RATE_LIMIT_DEFAULTS: {\n    /** Global requests per minute. */\n    requestsPerMinute: 60,\n    /** Whether rate limiting is enabled by default. */\n    enabled: true,\n    /** Maximum number of concurrent requests. */\n    maxConcurrent: 4,\n    /** Token bucket capacity. */\n    capacity: 100,\n    /** Token bucket refill rate per second. */\n    refillRate: 10,\n    /** Refill interval in milliseconds. */\n    refillIntervalMs: 100,\n  },\n\n  /**\n   * Per-tool rate limit defaults for MCP tools.\n   * (Source: Issue #274 Phase 2 - per-tool rate limits)\n   */\n  TOOL_RATE_LIMITS: {\n    orchestrate: { capacity: 10, refillRate: 10, refillIntervalMs: 60_000 },\n    delegate: { capacity: 20, refillRate: 20, refillIntervalMs: 60_000 },\n    workflow: { capacity: 5, refillRate: 5, refillIntervalMs: 60_000 },\n    expert: { capacity: 30, refillRate: 30, refillIntervalMs: 60_000 },\n  },\n\n  /**\n   * Default retry strategy settings for transient failures.\n   */\n  RETRY_DEFAULTS: {\n    /** Maximum retry attempts before failing. */\n    maxRetries: 3,\n    /** Base delay between retries in milliseconds. */\n    baseDelayMs: 1_000,\n    /** Maximum delay between retries in milliseconds. */\n    maxDelayMs: 30_000,\n    /** Jitter factor (0-1) to randomize retry delays. */\n    jitterFactor: 0.1,\n  },\n\n  /**\n   * Workflow-specific retry defaults.\n   */\n  WORKFLOW_RETRY_DEFAULTS: {\n    /** Maximum retry attempts for workflow steps. */\n    maxRetries: 2,\n    /** Base delay for workflow retries in milliseconds. */\n    baseDelayMs: 2_000,\n    /** Maximum delay for workflow retries in milliseconds. */\n    maxDelayMs: 60_000,\n    /** Jitter factor for workflow retries. */\n    jitterFactor: 0.15,\n  },\n\n  /**\n   * CLI-specific retry defaults.\n   */\n  CLI_RETRY_DEFAULTS: {\n    /** Maximum retry attempts for CLI operations. */\n    maxRetries: 2,\n    /** Base delay for CLI retries in milliseconds. */\n    baseDelayMs: 5_000,\n    /** Maximum delay for CLI retries in milliseconds. */\n    maxDelayMs: 60_000,\n    /** Jitter factor for CLI retries. */\n    jitterFactor: 0.2,\n  },\n\n  /**\n   * Test framework retry defaults.\n   */\n  TEST_RETRY_DEFAULTS: {\n    /** Maximum retries per test task. */\n    maxRetries: 2,\n    /** Whether to retry failed tasks by default. */\n    retryFailedTasks: true,\n  },\n\n  /**\n   * Default buffer sizing for batching and chunked processing.\n   */\n  BUFFER_DEFAULTS: {\n    /** Preferred batch size for bulk operations. */\n    batchSize: 100,\n    /** Chunk size for streaming or segmented processing. */\n    chunkSize: 256,\n    /** Maximum items allowed in a buffer. */\n    maxItems: 1_000,\n    /** Maximum memory size in bytes (10 MB). */\n    maxMemoryBytes: 10 * 1024 * 1024,\n    /** Log buffer flush interval in milliseconds. */\n    logFlushIntervalMs: 5_000,\n  },\n\n  // WORKER_DEFAULTS removed in #2977 — the eight settings under this category\n  // (maxWorkers, poolSize, idleTimeoutMs, workflowMaxParallel, testParallelism,\n  // evaluationMaxWorkers, eventBusMaxHistory, swarmObserverMaxEvents) had zero\n  // production consumers. `getWorkerConfig()` was never called from anywhere\n  // in src/, and the matching NEXUS_WORKERS_* env vars were silent no-ops.\n  // Silent config rot is worse than missing knobs; re-add when a concrete\n  // consumer exists.\n\n  /**\n   * Default circuit breaker settings.\n   * (Source: Issue #81 - Circuit breaker for CLI failures)\n   */\n  CIRCUIT_BREAKER_DEFAULTS: {\n    /** Failure threshold to open circuit. */\n    failureThreshold: 5,\n    /** Reset timeout in milliseconds. */\n    resetTimeoutMs: 30_000,\n    /** Success threshold to close circuit in half-open state. */\n    halfOpenSuccessThreshold: 2,\n    /** Whether to count timeouts as failures. */\n    countTimeoutsAsFailures: true,\n    /** Whether to count auth failures as failures. */\n    countAuthFailuresAsFailures: false,\n    /** Whether to count rate limit errors as failures (#1529). */\n    countRateLimitsAsFailures: true,\n    /** Maximum requests allowed in half-open state. */\n    halfOpenMaxRequests: 3,\n  },\n\n  /**\n   * Default context/memory settings.\n   */\n  CONTEXT_DEFAULTS: {\n    /** Maximum context tokens. */\n    maxTokens: 100_000,\n    /** Token budget warning threshold (80%). */\n    warningThreshold: 0.8,\n    /** Token budget critical threshold (95%). */\n    criticalThreshold: 0.95,\n    /** Maximum history entries to retain. */\n    maxHistoryEntries: 1_000,\n  },\n\n  /**\n   * Default provider/model settings.\n   */\n  PROVIDER_DEFAULTS: {\n    /** Default timeout for provider API calls in ms. */\n    timeout: 30_000,\n    /** Maximum retries for provider requests. */\n    maxRetries: 3,\n    /** Default model tier. */\n    defaultTier: 'balanced' as const,\n    /** Default temperature. */\n    temperatureDefault: 0.3,\n    /** Minimum temperature. */\n    temperatureMin: 0,\n    /** Maximum temperature. */\n    temperatureMax: 1,\n    /** Billing mode: 'plan' (monthly subscription) or 'api' (pay-per-token). Env: NEXUS_BILLING_MODE */\n    billingMode: 'plan' as const,\n  },\n\n  /**\n   * Security-related defaults.\n   */\n  SECURITY_DEFAULTS: {\n    /** Maximum system prompt length in characters. */\n    maxSystemPromptLength: 4_000,\n    /** Default policy execution mode. */\n    policyDefaultMode: 'read-only' as const,\n    /** Default policy mode. */\n    policyMode: 'enforce' as const,\n    /** Default sandbox mode. */\n    sandboxMode: 'policy' as const,\n    /** Whether to fall back to policy mode if container unavailable. */\n    sandboxFallbackToPolicy: true,\n    /** Whether network is enabled in container mode. */\n    sandboxNetworkEnabled: false,\n  },\n} as const;\n\n// ============================================================================\n// Type Exports for DEFAULTS\n// ============================================================================\n\n/** Type for the DEFAULTS object (readonly/const). */\nexport type DefaultsConfig = typeof DEFAULTS;\n\n/** Type for timeout defaults (readonly/const). */\nexport type TimeoutDefaultsConst = typeof DEFAULTS.TIMEOUT_DEFAULTS;\n\n/** Type for rate limit defaults (readonly/const). */\nexport type RateLimitDefaultsConst = typeof DEFAULTS.RATE_LIMIT_DEFAULTS;\n\n/** Type for retry defaults (readonly/const). */\nexport type RetryDefaultsConst = typeof DEFAULTS.RETRY_DEFAULTS;\n\n/** Type for buffer defaults (readonly/const). */\nexport type BufferDefaults = typeof DEFAULTS.BUFFER_DEFAULTS;\n\n/** Type for circuit breaker defaults (readonly/const). */\nexport type CircuitBreakerDefaultsConst = typeof DEFAULTS.CIRCUIT_BREAKER_DEFAULTS;\n\n/** Type for context defaults (readonly/const). */\nexport type ContextDefaults = typeof DEFAULTS.CONTEXT_DEFAULTS;\n\n/** Type for provider defaults (readonly/const). */\nexport type ProviderDefaults = typeof DEFAULTS.PROVIDER_DEFAULTS;\n\n/** Type for security defaults (readonly/const). */\nexport type SecurityDefaults = typeof DEFAULTS.SECURITY_DEFAULTS;\n\n// ============================================================================\n// Environment Override Functions (bound to DEFAULTS)\n// ============================================================================\n\n/**\n * Get timeout with environment override support.\n *\n * @param key - Timeout key (e.g., 'cliMs', 'apiMs')\n * @returns Timeout value in milliseconds\n */\nexport const getTimeout = createGetTimeout(DEFAULTS.TIMEOUT_DEFAULTS);\n\n/**\n * Get retry config with environment override support.\n *\n * @returns Retry configuration\n */\nexport const getRetryConfig = createGetRetryConfig(DEFAULTS.RETRY_DEFAULTS);\n\n/**\n * Get rate limit config with environment override support.\n *\n * @returns Rate limit configuration\n */\nexport const getRateLimitConfig = createGetRateLimitConfig(DEFAULTS.RATE_LIMIT_DEFAULTS);\n\n/**\n * Gets the circuit breaker configuration.\n *\n * @returns Circuit breaker configuration\n */\nexport const getCircuitBreakerConfig = createGetCircuitBreakerConfig(\n  DEFAULTS.CIRCUIT_BREAKER_DEFAULTS\n);\n\n/**\n * Gets the tool rate limit configuration for a specific tool category.\n *\n * @param tool - Tool category (orchestrate, delegate, workflow, expert)\n * @returns Rate limit configuration\n */\nexport const getToolRateLimit = createGetToolRateLimit(DEFAULTS.TOOL_RATE_LIMITS);\n\n// ============================================================================\n// Documentation Helper\n// ============================================================================\n\n/**\n * Returns documentation for all environment variable overrides.\n *\n * @returns Markdown documentation string\n */\nexport const getEnvVarDocumentation = createGetEnvVarDocumentation(DEFAULTS);\n"],"mappings":";;;;;;;;;;;;;;;;AAsGO,IAAM,2BAA2B;AASjC,IAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtB,kBAAkB;AAAA;AAAA,IAEhB,OAAO,aAAK,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMpB,OAAO,aAAK;AAAA;AAAA,IAEZ,UAAU,aAAK;AAAA;AAAA,IAEf,YAAY,kBAAI;AAAA;AAAA,IAEhB,eAAe,kBAAI;AAAA;AAAA,IAEnB,QAAQ,kBAAK;AAAA;AAAA,IAEb,OAAO,aAAK;AAAA;AAAA,IAEZ,UAAU,aAAK;AAAA;AAAA,IAEf,eAAe,kBAAK;AAAA;AAAA,IAEpB,cAAc,cAAM;AAAA;AAAA,IAEpB,YAAY,cAAM;AAAA;AAAA,IAElB,uBAAuB,kBAAK;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA,EAKA,qBAAqB;AAAA;AAAA,IAEnB,mBAAmB;AAAA;AAAA,IAEnB,SAAS;AAAA;AAAA,IAET,eAAe;AAAA;AAAA,IAEf,UAAU;AAAA;AAAA,IAEV,YAAY;AAAA;AAAA,IAEZ,kBAAkB;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAkB;AAAA,IAChB,aAAa,EAAE,UAAU,IAAI,YAAY,IAAI,kBAAkB,IAAO;AAAA,IACtE,UAAU,EAAE,UAAU,IAAI,YAAY,IAAI,kBAAkB,IAAO;AAAA,IACnE,UAAU,EAAE,UAAU,GAAG,YAAY,GAAG,kBAAkB,IAAO;AAAA,IACjE,QAAQ,EAAE,UAAU,IAAI,YAAY,IAAI,kBAAkB,IAAO;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAgB;AAAA;AAAA,IAEd,YAAY;AAAA;AAAA,IAEZ,aAAa;AAAA;AAAA,IAEb,YAAY;AAAA;AAAA,IAEZ,cAAc;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,yBAAyB;AAAA;AAAA,IAEvB,YAAY;AAAA;AAAA,IAEZ,aAAa;AAAA;AAAA,IAEb,YAAY;AAAA;AAAA,IAEZ,cAAc;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,oBAAoB;AAAA;AAAA,IAElB,YAAY;AAAA;AAAA,IAEZ,aAAa;AAAA;AAAA,IAEb,YAAY;AAAA;AAAA,IAEZ,cAAc;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,qBAAqB;AAAA;AAAA,IAEnB,YAAY;AAAA;AAAA,IAEZ,kBAAkB;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,iBAAiB;AAAA;AAAA,IAEf,WAAW;AAAA;AAAA,IAEX,WAAW;AAAA;AAAA,IAEX,UAAU;AAAA;AAAA,IAEV,gBAAgB,KAAK,OAAO;AAAA;AAAA,IAE5B,oBAAoB;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,0BAA0B;AAAA;AAAA,IAExB,kBAAkB;AAAA;AAAA,IAElB,gBAAgB;AAAA;AAAA,IAEhB,0BAA0B;AAAA;AAAA,IAE1B,yBAAyB;AAAA;AAAA,IAEzB,6BAA6B;AAAA;AAAA,IAE7B,2BAA2B;AAAA;AAAA,IAE3B,qBAAqB;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAkB;AAAA;AAAA,IAEhB,WAAW;AAAA;AAAA,IAEX,kBAAkB;AAAA;AAAA,IAElB,mBAAmB;AAAA;AAAA,IAEnB,mBAAmB;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,mBAAmB;AAAA;AAAA,IAEjB,SAAS;AAAA;AAAA,IAET,YAAY;AAAA;AAAA,IAEZ,aAAa;AAAA;AAAA,IAEb,oBAAoB;AAAA;AAAA,IAEpB,gBAAgB;AAAA;AAAA,IAEhB,gBAAgB;AAAA;AAAA,IAEhB,aAAa;AAAA,EACf;AAAA;AAAA;AAAA;AAAA,EAKA,mBAAmB;AAAA;AAAA,IAEjB,uBAAuB;AAAA;AAAA,IAEvB,mBAAmB;AAAA;AAAA,IAEnB,YAAY;AAAA;AAAA,IAEZ,aAAa;AAAA;AAAA,IAEb,yBAAyB;AAAA;AAAA,IAEzB,uBAAuB;AAAA,EACzB;AACF;AA2CO,IAAM,aAAa,iBAAiB,SAAS,gBAAgB;AAO7D,IAAM,iBAAiB,qBAAqB,SAAS,cAAc;AAOnE,IAAM,qBAAqB,yBAAyB,SAAS,mBAAmB;AAOhF,IAAM,0BAA0B;AAAA,EACrC,SAAS;AACX;AAQO,IAAM,mBAAmB,uBAAuB,SAAS,gBAAgB;AAWzE,IAAM,yBAAyB,6BAA6B,QAAQ;","names":[]}

package/dist/{chunk-KOK66W2C.js → chunk-DJZGCMNU.js}

@@ -8,7 +8,7 @@ import {
   getErrorMessage,
   ok,
   parseBoolEnv
-} from "./chunk-25ZJ5TCC.js";
+} from "./chunk-Y5JA7XEO.js";
 
 // src/cli/research-helpers-io.ts
 import * as fs2 from "fs/promises";
@@ -146,4 +146,4 @@ export {
   loadPapersRegistry,
   savePapersRegistry
 };
-//# sourceMappingURL=chunk-KOK66W2C.js.map
+//# sourceMappingURL=chunk-DJZGCMNU.js.map

package/dist/{chunk-TFU5J53T.js → chunk-E35RUETV.js}

@@ -4,7 +4,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-25ZJ5TCC.js";
+} from "./chunk-Y5JA7XEO.js";
 
 // src/scm/types.ts
 var ScmError = class extends Error {
@@ -263,4 +263,4 @@ export {
   ScmError,
   GitHubProvider
 };
-//# sourceMappingURL=chunk-TFU5J53T.js.map
+//# sourceMappingURL=chunk-E35RUETV.js.map