nexus-agents 2.55.1 → 2.57.0

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-TCQNNY4J.js";
+} from "./chunk-XEMRMZUN.js";
 import {
   ALLOWED_COMMANDS,
   ARTIFACT_TYPES,
@@ -15,7 +15,6 @@ import {
   AgentRunnerError,
   AgentStateMachine,
   AnalysisError,
-  AppConfigSchema,
   ArchitectureExpert,
   ArtifactRefSchema,
   AuditActorSchema,
@@ -31,7 +30,6 @@ import {
   AuditSeveritySchema,
   AuditTrail,
   AuthorizationMethodSchema,
-  AvailabilityCache,
   BUILT_IN_RULES,
   BUILT_IN_TEMPLATES,
   BaseAgent,
@@ -61,7 +59,6 @@ import {
   CreateExpertInputSchema,
   CrossTreeInfoSchema,
   CrossTreeStrategySchema,
-  DEFAULTS,
   DEFAULT_ACTIVATION_OPTIONS,
   DEFAULT_BUDGET,
   DEFAULT_CAPABILITIES as DEFAULT_CAPABILITIES2,
@@ -114,8 +111,6 @@ import {
   Expert,
   ExpertAssignmentSchema,
   ExpertCollaborationPattern,
-  ExpertConfigSchema,
-  ExpertDefinitionSchema,
   ExpertDomainSchema,
   ExpertFactory,
   ExpertFactoryAdapter,
@@ -157,16 +152,15 @@ import {
   ListWorkflowsInputSchema,
   LoadedSkillSetSchema,
   LockedWriter,
-  LoggingConfigSchema,
+  MAX_DIFF_LENGTH,
   MAX_EXECUTION_TIME_MS,
+  MAX_STRIPPED_ELEMENTS_PER_EVENT,
   MIN_EXPERTS_FOR_PATTERN,
   MODEL_CAPABILITIES,
   MemoryQueryInputSchema,
   MemoryStatsInputSchema,
   MemoryWriteInputSchema,
-  ModelConfigSchema,
   ModelSelectionSchema,
-  ModelTiersSchema,
   NexusAgentExecutor,
   NodeStateSchema,
   OrchestrateInputSchema,
@@ -181,6 +175,7 @@ import {
   PIPELINE_TEMPLATES,
   PLUGIN_TRUST_LEVELS,
   PROMPT_DEFINITIONS,
+  PR_REVIEW_ROLES,
   ParallelProtocol,
   PatchApplicator,
   PatchApplicatorError,
@@ -192,10 +187,10 @@ import {
   PluginRegistry,
   PolicyEngine,
   PolicyGateSpecSchema,
+  PrReviewInputSchema,
   PredictionWriteError,
   PredictionWriter,
   ProtocolFactory,
-  ProviderConfigSchema,
   PruningStrategy,
   QualitySignalsSchema,
   QueryTraceInputSchema,
@@ -235,7 +230,6 @@ import {
   SWE_BENCH_SYSTEM_PROMPT,
   ScoreBreakdownSchema,
   SearchCodebaseInputSchema,
-  SecurityConfigSchema,
   SecurityErrorCodeSchema,
   SecurityExpert,
   SelectionError,
@@ -308,13 +302,13 @@ import {
   VulnerabilitySchema,
   VulnerabilitySeveritySchema,
   WaveScheduler,
-  WorkflowConfigSchema,
   WorkflowDefinitionSchema,
   WorkflowDefinitionSchema2,
   WorkflowInputsSchema,
   WorkflowOrchestratorAdapter,
   WorkflowStepSchema,
   WorkflowStepSchema2,
+  aggregatePrDecisions,
   aggregateResults,
   analyzeFailures,
   analyzeTask,
@@ -328,6 +322,7 @@ import {
   buildEnrichedPrompt,
   buildHarnessArgs,
   buildHarnessCommand,
+  buildPrReviewProposal,
   calculateDistributionStats,
   calculateEstimatedRemaining,
   calculateMetrics,
@@ -439,7 +434,6 @@ import {
   curateContext,
   customReducer,
   decomposeSpec,
-  defaultConfig,
   delegateInputToTaskContract,
   detectTestFramework,
   emitCorroborationEvent,
@@ -479,7 +473,6 @@ import {
   extractRepoFromInstanceId,
   extractRepoName,
   extractStateValue,
-  filterAvailableModels,
   filterByRepo,
   filterByVersion,
   findMissingDependencies,
@@ -488,13 +481,11 @@ import {
   formatContextForPrompt,
   formatValidationResult,
   generateReport,
-  getAvailabilityCache,
   getAvailableRoles,
   getBuiltInTemplates,
   getBuiltInTemplatesPath,
   getBuiltInTemplatesWithMetadata,
   getCapabilitiesForRole,
-  getCliForModelId,
   getCompletedInstanceIds,
   getCompletedSteps,
   getCpuCores,
@@ -504,11 +495,9 @@ import {
   getExecutionDuration,
   getExecutionOrder,
   getExpertRegistry,
-  getFallbackChain,
   getGraphRegistry,
   getGraphWorkflowList,
   getInstance,
-  getKnownNexusVarNames,
   getMemoryInfo,
   getPipelinePluginRegistry,
   getPolicy,
@@ -546,6 +535,7 @@ import {
   mapResolutionStatus,
   mapStateToPhase,
   mapTestStatus,
+  mapVoteDecisionToPrDecision,
   meanConfidenceInterval,
   orchestrateInputToTaskContract,
   overwrite,
@@ -579,6 +569,7 @@ import {
   registerMemoryWriteTool,
   registerModelsResource,
   registerOrchestrateTool,
+  registerPrReviewTool,
   registerPrompts,
   registerQueryTraceTool,
   registerRegistryImportTool,
@@ -598,11 +589,9 @@ import {
   registerSearchCodebaseTool,
   registerTools,
   registerWeatherReportTool,
-  resetAvailabilityCache,
   resetPipelinePluginRegistry,
   resetRegistry,
   resolveExpression,
-  resolveFallback,
   resolveInput,
   resolveStringExpressions,
   resolveV2Config,
@@ -642,7 +631,6 @@ import {
   validateEnvironment,
   validateExpressions,
   validateICTM,
-  validateNexusEnv,
   validatePatch,
   validatePatchFormat,
   validatePrediction,
@@ -658,12 +646,12 @@ import {
   validateWorkflowDependencies,
   withLogging,
   writePredictions
-} from "./chunk-KVWHK72T.js";
+} from "./chunk-ZL3IBCH6.js";
 import {
   getTokenEnvVars,
   hasToken,
   resolveToken
-} from "./chunk-2SPRLBOS.js";
+} from "./chunk-EZXOJZYE.js";
 import "./chunk-X2M7OF27.js";
 import {
   AdapterModelError,
@@ -780,11 +768,11 @@ import {
   validateApiKeyPresence,
   validateToolInput,
   withTimeout
-} from "./chunk-BPMQRYGU.js";
+} from "./chunk-BOZ26RIB.js";
 import {
   PROVIDER_ENV_KEYS
-} from "./chunk-R66AWJJ7.js";
-import "./chunk-JERFBN73.js";
+} from "./chunk-YU4NABXM.js";
+import "./chunk-TC46TRLR.js";
 import {
   AgentActionSchema,
   GitHubReviewer,
@@ -817,11 +805,11 @@ import {
   sanitizeInput,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-FWSTXEG2.js";
+} from "./chunk-AFSIP6JH.js";
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-IOU7F5PH.js";
+} from "./chunk-K7EA5OV4.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -829,7 +817,7 @@ import {
   generateSecurityPlan,
   getRegistryManifest,
   resolveScannerData
-} from "./chunk-Q5TKQWOI.js";
+} from "./chunk-V5CGWMYL.js";
 import {
   analyzeGitHubRepo,
   analyzeRepo,
@@ -840,6 +828,36 @@ import "./chunk-BQ4YXGGQ.js";
 import {
   SharedMemoryStore
 } from "./chunk-ED6VQWNG.js";
+import {
+  AppConfigSchema,
+  AvailabilityCache,
+  ExpertConfigSchema,
+  ExpertDefinitionSchema,
+  LoggingConfigSchema,
+  ModelConfigSchema,
+  ModelTiersSchema,
+  ProviderConfigSchema,
+  SecurityConfigSchema,
+  VERSION,
+  WorkflowConfigSchema,
+  closeServer,
+  connectTransport,
+  createServer,
+  defaultConfig,
+  filterAvailableModels,
+  getAvailabilityCache,
+  getCliForModelId,
+  getFallbackChain,
+  getKnownNexusVarNames,
+  resetAvailabilityCache,
+  resolveFallback,
+  startStdioServer,
+  validateNexusEnv
+} from "./chunk-Y7CD6AZW.js";
+import {
+  DEFAULTS
+} from "./chunk-H43PABG4.js";
+import "./chunk-NUBSJGQZ.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -849,29 +867,22 @@ import {
   safeValidateExpertConfig,
   validateExpertConfig
 } from "./chunk-GJVHRJO2.js";
-import {
-  VERSION,
-  closeServer,
-  connectTransport,
-  createServer,
-  startStdioServer
-} from "./chunk-OC7RMLN2.js";
-import "./chunk-NYNBDP7M.js";
+import "./chunk-7Y36JLES.js";
 import {
   MemoryError
-} from "./chunk-3IDJSFWT.js";
+} from "./chunk-TFEFN37P.js";
 import "./chunk-633WH2ML.js";
 import {
   generateMcpConfig,
   getDefaultAllowedTools
-} from "./chunk-VKZKC4SM.js";
+} from "./chunk-EDGG3RQE.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-KRIFBGWZ.js";
+} from "./chunk-PTGBJFSD.js";
 import {
   executeExpert
-} from "./chunk-VLVHPC72.js";
+} from "./chunk-ZUWOFHNC.js";
 import {
   BaseCliAdapter,
   CLI_TIMEOUT_PROFILES,
@@ -900,8 +911,8 @@ import {
   isCliAvailable,
   isRetryableError,
   sleep
-} from "./chunk-RSUCXOQM.js";
-import "./chunk-W5AJRK4U.js";
+} from "./chunk-SXWZS2V4.js";
+import "./chunk-GMOGKX4E.js";
 import {
   AgentCapability,
   AgentError,
@@ -952,8 +963,10 @@ import {
   detectTrend,
   err,
   extractNonErrorMessage,
+  findCanonicalModel,
   formatZodError,
   generateWeatherReport,
+  getCliModelName,
   getErrorMessage,
   getOutcomeStore,
   getRandomProvider,
@@ -972,7 +985,7 @@ import {
   toError,
   unwrap,
   unwrapOr
-} from "./chunk-UOUJZIKH.js";
+} from "./chunk-R2Y57PM3.js";
 import {
   RULES_FILE,
   ensureLearningDir
@@ -1593,20 +1606,14 @@ var OPENAI_MODELS = {
   GPT_5_2: "gpt-5.2",
   GPT_5_2_INSTANT: "gpt-5.2-chat-latest",
   GPT_5_2_PRO: "gpt-5.2-pro",
-  GPT_5_2_CODEX: "gpt-5.2-codex",
+  GPT_5_2_CODEX: getCliModelName("codex-5.2"),
   GPT_4O: "gpt-4o-2024-11-20",
   GPT_4O_MINI: "gpt-4o-mini-2024-07-18",
   GPT_4_TURBO: "gpt-4-turbo-2024-04-09",
   GPT_35_TURBO: "gpt-3.5-turbo-0125"
 };
 var OPENAI_MODEL_ALIASES = {
-  // GPT-5.2 aliases
-  "gpt-5.2": OPENAI_MODELS.GPT_5_2,
   "gpt-5.2-instant": OPENAI_MODELS.GPT_5_2_INSTANT,
-  "gpt-5.2-chat-latest": OPENAI_MODELS.GPT_5_2_INSTANT,
-  "gpt-5.2-pro": OPENAI_MODELS.GPT_5_2_PRO,
-  "gpt-5.2-codex": OPENAI_MODELS.GPT_5_2_CODEX,
-  // GPT-4o aliases
   "gpt-4o": OPENAI_MODELS.GPT_4O,
   "gpt-4o-mini": OPENAI_MODELS.GPT_4O_MINI,
   "gpt-4-turbo": OPENAI_MODELS.GPT_4_TURBO,
@@ -2314,24 +2321,17 @@ import { GoogleGenAI } from "@google/genai";
 
 // src/adapters/gemini-types.ts
 var GEMINI_MODELS = {
-  PRO_2_5: "gemini-2.5-pro",
-  FLASH_2_5: "gemini-2.5-flash",
+  PRO_2_5: getCliModelName("gemini-pro"),
+  FLASH_2_5: getCliModelName("gemini-flash"),
+  // Legacy — not in canonical registry. Kept for backward compat.
   FLASH_2_0: "gemini-2.0-flash",
   PRO_1_5: "gemini-1.5-pro",
   FLASH_1_5: "gemini-1.5-flash"
 };
 var GEMINI_MODEL_ALIASES = {
-  // Gemini 2.5 aliases (current latest)
-  "gemini-2.5-pro": GEMINI_MODELS.PRO_2_5,
-  "gemini-2.5-flash": GEMINI_MODELS.FLASH_2_5,
-  // Gemini 2.0 aliases
   "gemini-2.0-flash": GEMINI_MODELS.FLASH_2_0,
-  // Gemini 1.5 aliases
   "gemini-1.5-pro": GEMINI_MODELS.PRO_1_5,
-  "gemini-1.5-flash": GEMINI_MODELS.FLASH_1_5,
-  // Short aliases (point to latest versions — Gemini 2.5)
-  "gemini-flash": GEMINI_MODELS.FLASH_2_5,
-  "gemini-pro": GEMINI_MODELS.PRO_2_5
+  "gemini-1.5-flash": GEMINI_MODELS.FLASH_1_5
 };
 var DEFAULT_MAX_TOKENS3 = 8192;
 function mapStopReason3(finishReason) {
@@ -2399,6 +2399,8 @@ function mapToolToFunctionDeclaration(tool) {
   };
 }
 function resolveModelId2(modelId) {
+  const canonical = findCanonicalModel("gemini", modelId);
+  if (canonical?.cliModelName !== void 0) return canonical.cliModelName;
   return GEMINI_MODEL_ALIASES[modelId] ?? modelId;
 }
 function getModelCapabilities3(modelId) {
@@ -4860,7 +4862,7 @@ var HostileInputFirewall = class {
     }
     const result = sanitizeInput(
       meta.content,
-      meta.authorAssociation,
+      mapAuthorAssociation(meta.authorAssociation),
       meta.username,
       {
         allowlistedMaintainers: [...this.allowlisted],
@@ -4872,7 +4874,8 @@ var HostileInputFirewall = class {
         source: meta.sourceType,
         wasModified: result.wasModified,
         strippedCount: result.strippedElements.length,
-        injectionFlagCount: result.injectionFlags.length
+        injectionFlagCount: result.injectionFlags.length,
+        strippedElements: result.strippedElements.slice(0, MAX_STRIPPED_ELEMENTS_PER_EVENT).map((e) => ({ tag: e.tag, reason: e.reason }))
       });
     }
     return result;
@@ -4940,7 +4943,7 @@ function createPassthroughSanitized(meta) {
     content: meta.content,
     originalLength: meta.content.length,
     trustTier: "3",
-    userRole: meta.authorAssociation,
+    userRole: mapAuthorAssociation(meta.authorAssociation),
     injectionFlags: [],
     strippedElements: [],
     wasModified: false,
@@ -4950,7 +4953,7 @@ function createPassthroughSanitized(meta) {
 function createPassthroughClassification(meta) {
   return {
     trustTier: "3",
-    userRole: meta.authorAssociation,
+    userRole: mapAuthorAssociation(meta.authorAssociation),
     isAllowlisted: false,
     wasDowngraded: false,
     reason: "Trust classification disabled \u2014 default Tier 3"
@@ -6374,7 +6377,13 @@ var ArtifactStore = class {
   }
   put(artifact) {
     this.validateContentSize(artifact);
-    this.evictIfNeeded();
+    const isReplace = this.artifacts.has(artifact.id);
+    if (isReplace) {
+      const idx = this.insertOrder.indexOf(artifact.id);
+      if (idx !== -1) this.insertOrder.splice(idx, 1);
+    } else {
+      this.evictIfNeeded();
+    }
     this.artifacts.set(artifact.id, artifact);
     this.insertOrder.push(artifact.id);
     return { id: artifact.id, type: artifact.type };
@@ -6691,7 +6700,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-G6H532ME.js");
+    const { executeVoting } = await import("./consensus-vote-CQ2JP6DC.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -7057,6 +7066,7 @@ export {
   LockedWriter,
   LoggingConfigSchema,
   MANIPULATION_CATEGORY,
+  MAX_DIFF_LENGTH,
   MAX_DYNAMIC_EXPERTS,
   MAX_EXECUTION_TIME_MS,
   MEM0_TARGETS,
@@ -7106,6 +7116,7 @@ export {
   PLUGIN_TRUST_LEVELS,
   PRIVACY_CATEGORY,
   PROMPT_DEFINITIONS,
+  PR_REVIEW_ROLES,
   PairwiseVotingHistorySchema,
   ParallelProtocol,
   ParseError,
@@ -7125,6 +7136,7 @@ export {
   PolicyError,
   PolicyFirewall,
   PolicyGateSpecSchema,
+  PrReviewInputSchema,
   PredictionWriteError,
   PredictionWriter,
   PreferenceRouter,
@@ -7316,6 +7328,7 @@ export {
   WorkflowOrchestratorAdapter,
   WorkflowStepSchema2 as WorkflowStepSchema,
   actorFromContext,
+  aggregatePrDecisions,
   aggregateResults,
   analysisToTaskContract,
   analyzeTask2 as analyzeDelegateTask,
@@ -7336,6 +7349,7 @@ export {
   buildHarnessCommand,
   buildPendingResult,
   buildPlanFromAnalysis,
+  buildPrReviewProposal,
   buildDependencyGraph as buildSkillDependencyGraph,
   buildTimeoutResult,
   calculateDelay,
@@ -7693,6 +7707,7 @@ export {
   mapResolutionStatus,
   mapStateToPhase,
   mapTestStatus,
+  mapVoteDecisionToPrDecision,
   meanConfidenceInterval,
   mergeStreams,
   normalizeRepoId,
@@ -7733,6 +7748,7 @@ export {
   registerMemoryWriteTool,
   registerModelsResource,
   registerOrchestrateTool,
+  registerPrReviewTool,
   registerPrompts,
   registerQueryTraceTool,
   registerRegistryImportTool,