nexus-agents 2.56.0 → 2.57.0

package/dist/{chunk-VKZKC4SM.js → chunk-EDGG3RQE.js}

@@ -1,6 +1,6 @@
 import {
   createLogger
-} from "./chunk-UOUJZIKH.js";
+} from "./chunk-R2Y57PM3.js";
 
 // src/swe-bench/mcp-config.ts
 import { writeFile, mkdtemp, rm } from "fs/promises";
@@ -58,4 +58,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=chunk-VKZKC4SM.js.map
+//# sourceMappingURL=chunk-EDGG3RQE.js.map

package/dist/{chunk-2SPRLBOS.js → chunk-EZXOJZYE.js}

@@ -2,7 +2,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-UOUJZIKH.js";
+} from "./chunk-R2Y57PM3.js";
 
 // src/scm/token-resolver.ts
 import { execFile } from "child_process";
@@ -87,4 +87,4 @@ export {
   hasToken,
   getTokenEnvVars
 };
-//# sourceMappingURL=chunk-2SPRLBOS.js.map
+//# sourceMappingURL=chunk-EZXOJZYE.js.map

package/dist/{chunk-W5AJRK4U.js → chunk-GMOGKX4E.js}

@@ -5,7 +5,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-UOUJZIKH.js";
+} from "./chunk-R2Y57PM3.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -353,4 +353,4 @@ export {
   CircuitBreakerRegistry,
   mapCliErrorToCategory
 };
-//# sourceMappingURL=chunk-W5AJRK4U.js.map
+//# sourceMappingURL=chunk-GMOGKX4E.js.map

package/dist/chunk-H43PABG4.js

@@ -0,0 +1,402 @@
+import {
+  API_TIMEOUTS,
+  CLI_TIMEOUTS,
+  INTERNAL_TIMEOUTS,
+  MCP_TIMEOUTS,
+  TEST_TIMEOUTS,
+  WORKFLOW_TIMEOUTS
+} from "./chunk-R2Y57PM3.js";
+
+// src/config/defaults-env.ts
+function parseIntEnv(envKey, fallback) {
+  const envValue = process.env[envKey];
+  if (envValue === void 0) {
+    return fallback;
+  }
+  const parsed = parseInt(envValue, 10);
+  return isNaN(parsed) || parsed <= 0 ? fallback : parsed;
+}
+function parseFloatEnv(envKey, fallback) {
+  const envValue = process.env[envKey];
+  if (envValue === void 0) {
+    return fallback;
+  }
+  const parsed = parseFloat(envValue);
+  return isNaN(parsed) || !isFinite(parsed) ? fallback : parsed;
+}
+function parseBoolEnv(envKey, fallback) {
+  const envValue = process.env[envKey]?.toLowerCase();
+  if (envValue === void 0) {
+    return fallback;
+  }
+  if (envValue === "true" || envValue === "1") return true;
+  if (envValue === "false" || envValue === "0") return false;
+  return fallback;
+}
+function createGetTimeout(timeoutDefaults) {
+  return (key) => {
+    const envKey = `NEXUS_TIMEOUT_${key.replace(/Ms$/, "").toUpperCase()}`;
+    return parseIntEnv(envKey, timeoutDefaults[key]);
+  };
+}
+function createGetRetryConfig(retryDefaults) {
+  return () => {
+    return {
+      maxRetries: parseIntEnv("NEXUS_RETRY_MAX_RETRIES", retryDefaults.maxRetries),
+      baseDelayMs: parseIntEnv("NEXUS_RETRY_BASE_DELAY", retryDefaults.baseDelayMs),
+      maxDelayMs: parseIntEnv("NEXUS_RETRY_MAX_DELAY", retryDefaults.maxDelayMs),
+      jitterFactor: parseFloatEnv("NEXUS_RETRY_JITTER", retryDefaults.jitterFactor)
+    };
+  };
+}
+function createGetRateLimitConfig(rateLimitDefaults) {
+  return () => {
+    return {
+      requestsPerMinute: parseIntEnv("NEXUS_RATE_LIMIT_RPM", rateLimitDefaults.requestsPerMinute),
+      enabled: parseBoolEnv("NEXUS_RATE_LIMIT_ENABLED", rateLimitDefaults.enabled),
+      maxConcurrent: parseIntEnv(
+        "NEXUS_RATE_LIMIT_MAX_CONCURRENT",
+        rateLimitDefaults.maxConcurrent
+      ),
+      capacity: parseIntEnv("NEXUS_RATE_LIMIT_CAPACITY", rateLimitDefaults.capacity),
+      refillRate: parseIntEnv("NEXUS_RATE_LIMIT_REFILL_RATE", rateLimitDefaults.refillRate),
+      refillIntervalMs: parseIntEnv(
+        "NEXUS_RATE_LIMIT_REFILL_INTERVAL",
+        rateLimitDefaults.refillIntervalMs
+      )
+    };
+  };
+}
+function createGetWorkerConfig(workerDefaults) {
+  return () => {
+    return {
+      maxWorkers: parseIntEnv("NEXUS_WORKERS_MAX", workerDefaults.maxWorkers),
+      poolSize: parseIntEnv("NEXUS_WORKERS_POOL_SIZE", workerDefaults.poolSize),
+      idleTimeoutMs: parseIntEnv("NEXUS_WORKERS_IDLE_TIMEOUT", workerDefaults.idleTimeoutMs),
+      workflowMaxParallel: parseIntEnv(
+        "NEXUS_WORKFLOW_MAX_PARALLEL",
+        workerDefaults.workflowMaxParallel
+      ),
+      testParallelism: parseIntEnv("NEXUS_TEST_PARALLELISM", workerDefaults.testParallelism),
+      evaluationMaxWorkers: parseIntEnv(
+        "NEXUS_EVALUATION_MAX_WORKERS",
+        workerDefaults.evaluationMaxWorkers
+      ),
+      eventBusMaxHistory: parseIntEnv(
+        "NEXUS_EVENTBUS_MAX_HISTORY",
+        workerDefaults.eventBusMaxHistory
+      ),
+      swarmObserverMaxEvents: parseIntEnv(
+        "NEXUS_SWARM_OBSERVER_MAX_EVENTS",
+        workerDefaults.swarmObserverMaxEvents
+      )
+    };
+  };
+}
+function createGetCircuitBreakerConfig(cbDefaults) {
+  return () => {
+    return {
+      failureThreshold: parseIntEnv("NEXUS_CIRCUIT_BREAKER_THRESHOLD", cbDefaults.failureThreshold),
+      resetTimeoutMs: parseIntEnv("NEXUS_CIRCUIT_BREAKER_RESET_TIMEOUT", cbDefaults.resetTimeoutMs),
+      halfOpenSuccessThreshold: cbDefaults.halfOpenSuccessThreshold,
+      countTimeoutsAsFailures: cbDefaults.countTimeoutsAsFailures,
+      countAuthFailuresAsFailures: cbDefaults.countAuthFailuresAsFailures,
+      countRateLimitsAsFailures: cbDefaults.countRateLimitsAsFailures,
+      halfOpenMaxRequests: cbDefaults.halfOpenMaxRequests
+    };
+  };
+}
+function createGetToolRateLimit(toolRateLimits) {
+  return (tool) => {
+    return toolRateLimits[tool];
+  };
+}
+function createGetEnvVarDocumentation(defaults) {
+  return () => {
+    const t = defaults.TIMEOUT_DEFAULTS;
+    const r = defaults.RATE_LIMIT_DEFAULTS;
+    const rt = defaults.RETRY_DEFAULTS;
+    const w = defaults.WORKER_DEFAULTS;
+    const cb = defaults.CIRCUIT_BREAKER_DEFAULTS;
+    return `# Environment Variable Overrides
+
+All defaults can be overridden via environment variables using the NEXUS_ prefix.
+
+## Timeouts
+
+| Variable | Default | Description |
+| -------- | ------- | ----------- |
+| NEXUS_TIMEOUT_CLI | ${String(t.cliMs)} | CLI execution timeout (ms) |
+| NEXUS_TIMEOUT_API | ${String(t.apiMs)} | API request timeout (ms) |
+| NEXUS_TIMEOUT_WORKFLOW | ${String(t.workflowMs)} | Workflow timeout (ms) |
+| NEXUS_TIMEOUT_MCP | ${String(t.mcpMs)} | MCP operation timeout (ms) |
+
+## Rate Limits
+
+| Variable | Default | Description |
+| -------- | ------- | ----------- |
+| NEXUS_RATE_LIMIT_RPM | ${String(r.requestsPerMinute)} | Requests per minute |
+| NEXUS_RATE_LIMIT_ENABLED | ${String(r.enabled)} | Enable rate limiting |
+| NEXUS_RATE_LIMIT_CAPACITY | ${String(r.capacity)} | Token bucket capacity |
+
+## Retries
+
+| Variable | Default | Description |
+| -------- | ------- | ----------- |
+| NEXUS_RETRY_MAX_RETRIES | ${String(rt.maxRetries)} | Maximum retry attempts |
+| NEXUS_RETRY_BASE_DELAY | ${String(rt.baseDelayMs)} | Base delay (ms) |
+| NEXUS_RETRY_MAX_DELAY | ${String(rt.maxDelayMs)} | Maximum delay (ms) |
+| NEXUS_RETRY_JITTER | ${String(rt.jitterFactor)} | Jitter factor (0-1) |
+
+## Workers
+
+| Variable | Default | Description |
+| -------- | ------- | ----------- |
+| NEXUS_WORKERS_MAX | ${String(w.maxWorkers)} | Maximum workers |
+| NEXUS_WORKERS_POOL_SIZE | ${String(w.poolSize)} | Worker pool size |
+| NEXUS_WORKFLOW_MAX_PARALLEL | ${String(w.workflowMaxParallel)} | Max parallel workflow steps |
+| NEXUS_TEST_PARALLELISM | ${String(w.testParallelism)} | Test parallelism |
+
+## Circuit Breaker
+
+| Variable | Default | Description |
+| -------- | ------- | ----------- |
+| NEXUS_CIRCUIT_BREAKER_THRESHOLD | ${String(cb.failureThreshold)} | Failure threshold |
+| NEXUS_CIRCUIT_BREAKER_RESET_TIMEOUT | ${String(cb.resetTimeoutMs)} | Reset timeout (ms) |
+`;
+  };
+}
+
+// src/config/defaults.ts
+var CUSTOM_API_DEFAULT_MODEL = "gpt-4o";
+var DEFAULTS = {
+  /**
+   * Default timeout settings in milliseconds.
+   * Values sourced from config/timeouts.ts (Issue #984).
+   */
+  TIMEOUT_DEFAULTS: {
+    /** CLI tool execution timeout in milliseconds. */
+    cliMs: CLI_TIMEOUTS.default.standard,
+    /** Simple CLI task timeout (single function, quick query). */
+    cliSimpleMs: CLI_TIMEOUTS.default.simple,
+    /** Complex CLI task timeout (codebase-wide, deep analysis). */
+    cliComplexMs: CLI_TIMEOUTS.default.complex,
+    /** API request timeout in milliseconds. */
+    apiMs: API_TIMEOUTS.defaultMs,
+    /** Maximum API timeout in milliseconds. */
+    apiMaxMs: API_TIMEOUTS.maxMs,
+    /** Workflow-level timeout in milliseconds (5 minutes). */
+    workflowMs: WORKFLOW_TIMEOUTS.workflowMs,
+    /** Maximum workflow timeout in milliseconds (30 minutes). */
+    workflowMaxMs: WORKFLOW_TIMEOUTS.workflowMaxMs,
+    /** Step-level timeout in milliseconds. */
+    stepMs: INTERNAL_TIMEOUTS.selfEvalMs,
+    /** MCP operation default timeout in milliseconds (generic, not per-tool). */
+    mcpMs: API_TIMEOUTS.defaultMs,
+    /** MCP operation maximum timeout in milliseconds. */
+    mcpMaxMs: MCP_TIMEOUTS.maxMs,
+    /** Health check timeout in milliseconds. */
+    healthCheckMs: INTERNAL_TIMEOUTS.healthCheckMs,
+    /** Global test run timeout in milliseconds (10 minutes). */
+    testGlobalMs: TEST_TIMEOUTS.globalMs,
+    /** Per-task test timeout in milliseconds. */
+    testTaskMs: TEST_TIMEOUTS.taskMs,
+    /** Circuit breaker reset timeout in milliseconds. */
+    circuitBreakerResetMs: INTERNAL_TIMEOUTS.circuitBreakerResetMs
+  },
+  /**
+   * Default rate limit settings for outbound operations.
+   */
+  RATE_LIMIT_DEFAULTS: {
+    /** Global requests per minute. */
+    requestsPerMinute: 60,
+    /** Whether rate limiting is enabled by default. */
+    enabled: true,
+    /** Maximum number of concurrent requests. */
+    maxConcurrent: 4,
+    /** Token bucket capacity. */
+    capacity: 100,
+    /** Token bucket refill rate per second. */
+    refillRate: 10,
+    /** Refill interval in milliseconds. */
+    refillIntervalMs: 100
+  },
+  /**
+   * Per-tool rate limit defaults for MCP tools.
+   * (Source: Issue #274 Phase 2 - per-tool rate limits)
+   */
+  TOOL_RATE_LIMITS: {
+    orchestrate: { capacity: 10, refillRate: 10, refillIntervalMs: 6e4 },
+    delegate: { capacity: 20, refillRate: 20, refillIntervalMs: 6e4 },
+    workflow: { capacity: 5, refillRate: 5, refillIntervalMs: 6e4 },
+    expert: { capacity: 30, refillRate: 30, refillIntervalMs: 6e4 }
+  },
+  /**
+   * Default retry strategy settings for transient failures.
+   */
+  RETRY_DEFAULTS: {
+    /** Maximum retry attempts before failing. */
+    maxRetries: 3,
+    /** Base delay between retries in milliseconds. */
+    baseDelayMs: 1e3,
+    /** Maximum delay between retries in milliseconds. */
+    maxDelayMs: 3e4,
+    /** Jitter factor (0-1) to randomize retry delays. */
+    jitterFactor: 0.1
+  },
+  /**
+   * Workflow-specific retry defaults.
+   */
+  WORKFLOW_RETRY_DEFAULTS: {
+    /** Maximum retry attempts for workflow steps. */
+    maxRetries: 2,
+    /** Base delay for workflow retries in milliseconds. */
+    baseDelayMs: 2e3,
+    /** Maximum delay for workflow retries in milliseconds. */
+    maxDelayMs: 6e4,
+    /** Jitter factor for workflow retries. */
+    jitterFactor: 0.15
+  },
+  /**
+   * CLI-specific retry defaults.
+   */
+  CLI_RETRY_DEFAULTS: {
+    /** Maximum retry attempts for CLI operations. */
+    maxRetries: 2,
+    /** Base delay for CLI retries in milliseconds. */
+    baseDelayMs: 5e3,
+    /** Maximum delay for CLI retries in milliseconds. */
+    maxDelayMs: 6e4,
+    /** Jitter factor for CLI retries. */
+    jitterFactor: 0.2
+  },
+  /**
+   * Test framework retry defaults.
+   */
+  TEST_RETRY_DEFAULTS: {
+    /** Maximum retries per test task. */
+    maxRetries: 2,
+    /** Whether to retry failed tasks by default. */
+    retryFailedTasks: true
+  },
+  /**
+   * Default buffer sizing for batching and chunked processing.
+   */
+  BUFFER_DEFAULTS: {
+    /** Preferred batch size for bulk operations. */
+    batchSize: 100,
+    /** Chunk size for streaming or segmented processing. */
+    chunkSize: 256,
+    /** Maximum items allowed in a buffer. */
+    maxItems: 1e3,
+    /** Maximum memory size in bytes (10 MB). */
+    maxMemoryBytes: 10 * 1024 * 1024,
+    /** Log buffer flush interval in milliseconds. */
+    logFlushIntervalMs: 5e3
+  },
+  /**
+   * Default worker pool sizing.
+   */
+  WORKER_DEFAULTS: {
+    /** Maximum number of workers. */
+    maxWorkers: 8,
+    /** Default worker pool size. */
+    poolSize: 4,
+    /** Worker idle timeout in milliseconds (5 minutes). */
+    idleTimeoutMs: 5 * 6e4,
+    /** Maximum parallel workflow steps. */
+    workflowMaxParallel: 5,
+    /** Test framework parallelism. */
+    testParallelism: 3,
+    /** Evaluation harness max workers. */
+    evaluationMaxWorkers: 8,
+    /** EventBus max history size. */
+    eventBusMaxHistory: 1e3,
+    /** Swarm observer max events. */
+    swarmObserverMaxEvents: 1e4
+  },
+  /**
+   * Default circuit breaker settings.
+   * (Source: Issue #81 - Circuit breaker for CLI failures)
+   */
+  CIRCUIT_BREAKER_DEFAULTS: {
+    /** Failure threshold to open circuit. */
+    failureThreshold: 5,
+    /** Reset timeout in milliseconds. */
+    resetTimeoutMs: 3e4,
+    /** Success threshold to close circuit in half-open state. */
+    halfOpenSuccessThreshold: 2,
+    /** Whether to count timeouts as failures. */
+    countTimeoutsAsFailures: true,
+    /** Whether to count auth failures as failures. */
+    countAuthFailuresAsFailures: false,
+    /** Whether to count rate limit errors as failures (#1529). */
+    countRateLimitsAsFailures: true,
+    /** Maximum requests allowed in half-open state. */
+    halfOpenMaxRequests: 3
+  },
+  /**
+   * Default context/memory settings.
+   */
+  CONTEXT_DEFAULTS: {
+    /** Maximum context tokens. */
+    maxTokens: 1e5,
+    /** Token budget warning threshold (80%). */
+    warningThreshold: 0.8,
+    /** Token budget critical threshold (95%). */
+    criticalThreshold: 0.95,
+    /** Maximum history entries to retain. */
+    maxHistoryEntries: 1e3
+  },
+  /**
+   * Default provider/model settings.
+   */
+  PROVIDER_DEFAULTS: {
+    /** Default timeout for provider API calls in ms. */
+    timeout: 3e4,
+    /** Maximum retries for provider requests. */
+    maxRetries: 3,
+    /** Default model tier. */
+    defaultTier: "balanced",
+    /** Default temperature. */
+    temperatureDefault: 0.3,
+    /** Minimum temperature. */
+    temperatureMin: 0,
+    /** Maximum temperature. */
+    temperatureMax: 1,
+    /** Billing mode: 'plan' (monthly subscription) or 'api' (pay-per-token). Env: NEXUS_BILLING_MODE */
+    billingMode: "plan"
+  },
+  /**
+   * Security-related defaults.
+   */
+  SECURITY_DEFAULTS: {
+    /** Maximum system prompt length in characters. */
+    maxSystemPromptLength: 4e3,
+    /** Default policy execution mode. */
+    policyDefaultMode: "read-only",
+    /** Default policy mode. */
+    policyMode: "enforce",
+    /** Default sandbox mode. */
+    sandboxMode: "policy",
+    /** Whether to fall back to policy mode if container unavailable. */
+    sandboxFallbackToPolicy: true,
+    /** Whether network is enabled in container mode. */
+    sandboxNetworkEnabled: false
+  }
+};
+var getTimeout = createGetTimeout(DEFAULTS.TIMEOUT_DEFAULTS);
+var getRetryConfig = createGetRetryConfig(DEFAULTS.RETRY_DEFAULTS);
+var getRateLimitConfig = createGetRateLimitConfig(DEFAULTS.RATE_LIMIT_DEFAULTS);
+var getWorkerConfig = createGetWorkerConfig(DEFAULTS.WORKER_DEFAULTS);
+var getCircuitBreakerConfig = createGetCircuitBreakerConfig(
+  DEFAULTS.CIRCUIT_BREAKER_DEFAULTS
+);
+var getToolRateLimit = createGetToolRateLimit(DEFAULTS.TOOL_RATE_LIMITS);
+var getEnvVarDocumentation = createGetEnvVarDocumentation(DEFAULTS);
+
+export {
+  CUSTOM_API_DEFAULT_MODEL,
+  DEFAULTS
+};
+//# sourceMappingURL=chunk-H43PABG4.js.map

package/dist/chunk-H43PABG4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config/defaults-env.ts","../src/config/defaults.ts"],"sourcesContent":["/**\n * Environment Variable Override Helpers\n *\n * Provides utilities for reading configuration from environment variables\n * with type-safe fallbacks to defaults.\n *\n * @module config/defaults-env\n */\n\nimport type {\n  CircuitBreakerDefaults,\n  RateLimitDefaults,\n  RetryDefaults,\n  ToolRateLimitConfig,\n  WorkerDefaults,\n} from './defaults-types.js';\n\n// ============================================================================\n// Environment Variable Parsers\n// ============================================================================\n\n/**\n * Parses an integer from an environment variable with fallback.\n */\nexport function parseIntEnv(envKey: string, fallback: number): number {\n  const envValue = process.env[envKey];\n  if (envValue === undefined) {\n    return fallback;\n  }\n  const parsed = parseInt(envValue, 10);\n  return isNaN(parsed) || parsed <= 0 ? fallback : parsed;\n}\n\n/**\n * Parses a float from an environment variable with fallback.\n */\nexport function parseFloatEnv(envKey: string, fallback: number): number {\n  const envValue = process.env[envKey];\n  if (envValue === undefined) {\n    return fallback;\n  }\n  const parsed = parseFloat(envValue);\n  return isNaN(parsed) || !isFinite(parsed) ? fallback : parsed;\n}\n\n/**\n * Parses a boolean from an environment variable with fallback.\n * Only 'true'/'1' are truthy, 'false'/'0' are falsy.\n * Any other value returns the fallback.\n */\nexport function parseBoolEnv(envKey: string, fallback: boolean): boolean {\n  const envValue = process.env[envKey]?.toLowerCase();\n  if (envValue === undefined) {\n    return fallback;\n  }\n  if (envValue === 'true' || envValue === '1') return true;\n  if (envValue === 'false' || envValue === '0') return false;\n  return fallback;\n}\n\n// ============================================================================\n// Config Getter Types (for lazy initialization)\n// ============================================================================\n\n/** Timeout defaults type from DEFAULTS object */\nexport interface TimeoutDefaultsConst {\n  readonly cliMs: number;\n  readonly cliSimpleMs: number;\n  readonly cliComplexMs: number;\n  readonly apiMs: number;\n  readonly apiMaxMs: number;\n  readonly workflowMs: number;\n  readonly workflowMaxMs: number;\n  readonly stepMs: number;\n  readonly mcpMs: number;\n  readonly mcpMaxMs: number;\n  readonly healthCheckMs: number;\n  readonly testGlobalMs: number;\n  readonly testTaskMs: number;\n  readonly circuitBreakerResetMs: number;\n}\n\n/** Tool rate limits type from DEFAULTS object */\nexport interface ToolRateLimitsConst {\n  readonly orchestrate: ToolRateLimitConfig;\n  readonly delegate: ToolRateLimitConfig;\n  readonly workflow: ToolRateLimitConfig;\n  readonly expert: ToolRateLimitConfig;\n}\n\n/** Rate limit defaults type from DEFAULTS object */\ninterface RateLimitDefaultsConst {\n  readonly requestsPerMinute: number;\n  readonly enabled: boolean;\n  readonly maxConcurrent: number;\n  readonly capacity: number;\n  readonly refillRate: number;\n  readonly refillIntervalMs: number;\n}\n\n/** Retry defaults type from DEFAULTS object */\ninterface RetryDefaultsConst {\n  readonly maxRetries: number;\n  readonly baseDelayMs: number;\n  readonly maxDelayMs: number;\n  readonly jitterFactor: number;\n}\n\n/** Worker defaults type from DEFAULTS object */\ninterface WorkerDefaultsConst {\n  readonly maxWorkers: number;\n  readonly poolSize: number;\n  readonly idleTimeoutMs: number;\n  readonly workflowMaxParallel: number;\n  readonly testParallelism: number;\n  readonly evaluationMaxWorkers: number;\n  readonly eventBusMaxHistory: number;\n  readonly swarmObserverMaxEvents: number;\n}\n\n/** Circuit breaker defaults type from DEFAULTS object */\ninterface CircuitBreakerDefaultsConst {\n  readonly failureThreshold: number;\n  readonly resetTimeoutMs: number;\n  readonly halfOpenSuccessThreshold: number;\n  readonly countTimeoutsAsFailures: boolean;\n  readonly countAuthFailuresAsFailures: boolean;\n  readonly countRateLimitsAsFailures: boolean;\n  readonly halfOpenMaxRequests: number;\n}\n\n// ============================================================================\n// Config Getter Factory Functions\n// ============================================================================\n\n/**\n * Creates a timeout getter function bound to the DEFAULTS object.\n */\nexport function createGetTimeout(\n  timeoutDefaults: TimeoutDefaultsConst\n): (key: keyof TimeoutDefaultsConst) => number {\n  return (key: keyof TimeoutDefaultsConst): number => {\n    const envKey = `NEXUS_TIMEOUT_${key.replace(/Ms$/, '').toUpperCase()}`;\n    return parseIntEnv(envKey, timeoutDefaults[key]);\n  };\n}\n\n/**\n * Creates a retry config getter function bound to the DEFAULTS object.\n */\nexport function createGetRetryConfig(retryDefaults: RetryDefaultsConst): () => RetryDefaults {\n  return (): RetryDefaults => {\n    return {\n      maxRetries: parseIntEnv('NEXUS_RETRY_MAX_RETRIES', retryDefaults.maxRetries),\n      baseDelayMs: parseIntEnv('NEXUS_RETRY_BASE_DELAY', retryDefaults.baseDelayMs),\n      maxDelayMs: parseIntEnv('NEXUS_RETRY_MAX_DELAY', retryDefaults.maxDelayMs),\n      jitterFactor: parseFloatEnv('NEXUS_RETRY_JITTER', retryDefaults.jitterFactor),\n    };\n  };\n}\n\n/**\n * Creates a rate limit config getter function bound to the DEFAULTS object.\n */\nexport function createGetRateLimitConfig(\n  rateLimitDefaults: RateLimitDefaultsConst\n): () => RateLimitDefaults {\n  return (): RateLimitDefaults => {\n    return {\n      requestsPerMinute: parseIntEnv('NEXUS_RATE_LIMIT_RPM', rateLimitDefaults.requestsPerMinute),\n      enabled: parseBoolEnv('NEXUS_RATE_LIMIT_ENABLED', rateLimitDefaults.enabled),\n      maxConcurrent: parseIntEnv(\n        'NEXUS_RATE_LIMIT_MAX_CONCURRENT',\n        rateLimitDefaults.maxConcurrent\n      ),\n      capacity: parseIntEnv('NEXUS_RATE_LIMIT_CAPACITY', rateLimitDefaults.capacity),\n      refillRate: parseIntEnv('NEXUS_RATE_LIMIT_REFILL_RATE', rateLimitDefaults.refillRate),\n      refillIntervalMs: parseIntEnv(\n        'NEXUS_RATE_LIMIT_REFILL_INTERVAL',\n        rateLimitDefaults.refillIntervalMs\n      ),\n    };\n  };\n}\n\n/**\n * Creates a worker config getter function bound to the DEFAULTS object.\n */\nexport function createGetWorkerConfig(workerDefaults: WorkerDefaultsConst): () => WorkerDefaults {\n  return (): WorkerDefaults => {\n    return {\n      maxWorkers: parseIntEnv('NEXUS_WORKERS_MAX', workerDefaults.maxWorkers),\n      poolSize: parseIntEnv('NEXUS_WORKERS_POOL_SIZE', workerDefaults.poolSize),\n      idleTimeoutMs: parseIntEnv('NEXUS_WORKERS_IDLE_TIMEOUT', workerDefaults.idleTimeoutMs),\n      workflowMaxParallel: parseIntEnv(\n        'NEXUS_WORKFLOW_MAX_PARALLEL',\n        workerDefaults.workflowMaxParallel\n      ),\n      testParallelism: parseIntEnv('NEXUS_TEST_PARALLELISM', workerDefaults.testParallelism),\n      evaluationMaxWorkers: parseIntEnv(\n        'NEXUS_EVALUATION_MAX_WORKERS',\n        workerDefaults.evaluationMaxWorkers\n      ),\n      eventBusMaxHistory: parseIntEnv(\n        'NEXUS_EVENTBUS_MAX_HISTORY',\n        workerDefaults.eventBusMaxHistory\n      ),\n      swarmObserverMaxEvents: parseIntEnv(\n        'NEXUS_SWARM_OBSERVER_MAX_EVENTS',\n        workerDefaults.swarmObserverMaxEvents\n      ),\n    };\n  };\n}\n\n/**\n * Creates a circuit breaker config getter function bound to the DEFAULTS object.\n */\nexport function createGetCircuitBreakerConfig(\n  cbDefaults: CircuitBreakerDefaultsConst\n): () => CircuitBreakerDefaults {\n  return (): CircuitBreakerDefaults => {\n    return {\n      failureThreshold: parseIntEnv('NEXUS_CIRCUIT_BREAKER_THRESHOLD', cbDefaults.failureThreshold),\n      resetTimeoutMs: parseIntEnv('NEXUS_CIRCUIT_BREAKER_RESET_TIMEOUT', cbDefaults.resetTimeoutMs),\n      halfOpenSuccessThreshold: cbDefaults.halfOpenSuccessThreshold,\n      countTimeoutsAsFailures: cbDefaults.countTimeoutsAsFailures,\n      countAuthFailuresAsFailures: cbDefaults.countAuthFailuresAsFailures,\n      countRateLimitsAsFailures: cbDefaults.countRateLimitsAsFailures,\n      halfOpenMaxRequests: cbDefaults.halfOpenMaxRequests,\n    };\n  };\n}\n\n/**\n * Creates a tool rate limit getter function bound to the DEFAULTS object.\n */\nexport function createGetToolRateLimit(\n  toolRateLimits: ToolRateLimitsConst\n): (tool: keyof ToolRateLimitsConst) => ToolRateLimitConfig {\n  return (tool: keyof ToolRateLimitsConst): ToolRateLimitConfig => {\n    return toolRateLimits[tool];\n  };\n}\n\n// ============================================================================\n// Documentation Helper\n// ============================================================================\n\n/** DEFAULTS structure for documentation generation */\ninterface DefaultsForDocs {\n  readonly TIMEOUT_DEFAULTS: TimeoutDefaultsConst;\n  readonly RATE_LIMIT_DEFAULTS: RateLimitDefaultsConst;\n  readonly RETRY_DEFAULTS: RetryDefaultsConst;\n  readonly WORKER_DEFAULTS: WorkerDefaultsConst;\n  readonly CIRCUIT_BREAKER_DEFAULTS: CircuitBreakerDefaultsConst;\n}\n\n/**\n * Creates a documentation generator function bound to the DEFAULTS object.\n *\n * @param defaults - The DEFAULTS object\n * @returns Function that generates environment variable documentation\n */\nexport function createGetEnvVarDocumentation(defaults: DefaultsForDocs): () => string {\n  return (): string => {\n    const t = defaults.TIMEOUT_DEFAULTS;\n    const r = defaults.RATE_LIMIT_DEFAULTS;\n    const rt = defaults.RETRY_DEFAULTS;\n    const w = defaults.WORKER_DEFAULTS;\n    const cb = defaults.CIRCUIT_BREAKER_DEFAULTS;\n\n    return `# Environment Variable Overrides\n\nAll defaults can be overridden via environment variables using the NEXUS_ prefix.\n\n## Timeouts\n\n| Variable | Default | Description |\n| -------- | ------- | ----------- |\n| NEXUS_TIMEOUT_CLI | ${String(t.cliMs)} | CLI execution timeout (ms) |\n| NEXUS_TIMEOUT_API | ${String(t.apiMs)} | API request timeout (ms) |\n| NEXUS_TIMEOUT_WORKFLOW | ${String(t.workflowMs)} | Workflow timeout (ms) |\n| NEXUS_TIMEOUT_MCP | ${String(t.mcpMs)} | MCP operation timeout (ms) |\n\n## Rate Limits\n\n| Variable | Default | Description |\n| -------- | ------- | ----------- |\n| NEXUS_RATE_LIMIT_RPM | ${String(r.requestsPerMinute)} | Requests per minute |\n| NEXUS_RATE_LIMIT_ENABLED | ${String(r.enabled)} | Enable rate limiting |\n| NEXUS_RATE_LIMIT_CAPACITY | ${String(r.capacity)} | Token bucket capacity |\n\n## Retries\n\n| Variable | Default | Description |\n| -------- | ------- | ----------- |\n| NEXUS_RETRY_MAX_RETRIES | ${String(rt.maxRetries)} | Maximum retry attempts |\n| NEXUS_RETRY_BASE_DELAY | ${String(rt.baseDelayMs)} | Base delay (ms) |\n| NEXUS_RETRY_MAX_DELAY | ${String(rt.maxDelayMs)} | Maximum delay (ms) |\n| NEXUS_RETRY_JITTER | ${String(rt.jitterFactor)} | Jitter factor (0-1) |\n\n## Workers\n\n| Variable | Default | Description |\n| -------- | ------- | ----------- |\n| NEXUS_WORKERS_MAX | ${String(w.maxWorkers)} | Maximum workers |\n| NEXUS_WORKERS_POOL_SIZE | ${String(w.poolSize)} | Worker pool size |\n| NEXUS_WORKFLOW_MAX_PARALLEL | ${String(w.workflowMaxParallel)} | Max parallel workflow steps |\n| NEXUS_TEST_PARALLELISM | ${String(w.testParallelism)} | Test parallelism |\n\n## Circuit Breaker\n\n| Variable | Default | Description |\n| -------- | ------- | ----------- |\n| NEXUS_CIRCUIT_BREAKER_THRESHOLD | ${String(cb.failureThreshold)} | Failure threshold |\n| NEXUS_CIRCUIT_BREAKER_RESET_TIMEOUT | ${String(cb.resetTimeoutMs)} | Reset timeout (ms) |\n`;\n  };\n}\n","/**\n * Central Configuration Defaults\n *\n * Consolidates common default values used across the codebase.\n * This prevents scattered magic numbers and ensures consistency.\n *\n * Usage:\n *   import { DEFAULTS, getTimeout, TIMEOUT_PROFILES } from '../config/defaults.js';\n *   const timeout = options.timeout ?? DEFAULTS.TIMEOUT_DEFAULTS.cliMs;\n *   const cliTimeout = getTimeoutForCli('claude', 'complex');\n *\n * Environment overrides can be added via NEXUS_* environment variables.\n *\n * @module config/defaults\n * (Source: Central config consolidation initiative)\n */\n\n// Re-export types from defaults-types\nexport type {\n  TaskComplexity,\n  TimeoutProfile,\n  KnownCliName,\n  TimeoutDefaults,\n  RateLimitDefaults,\n  ToolRateLimitConfig,\n  RetryDefaults,\n  WorkerDefaults,\n  CircuitBreakerDefaults,\n} from './defaults-types.js';\n\nexport { isTaskComplexity, isKnownCliName } from './defaults-types.js';\n\n// Re-export timeout profiles (delegates to config/timeouts.ts)\nexport {\n  TIMEOUT_PROFILES,\n  getTimeoutProfile,\n  getTimeoutForCli,\n} from './defaults-timeout-profiles.js';\n\n// Re-export canonical timeout modules (Issue #984)\nexport {\n  CLI_TIMEOUTS,\n  VOTE_TIMEOUTS,\n  MCP_TIMEOUTS,\n  WORKFLOW_TIMEOUTS,\n  GRAPH_TIMEOUTS,\n  PER_CLI_TASK_TIMEOUTS,\n  API_TIMEOUTS,\n  INTERNAL_TIMEOUTS,\n  TEST_TIMEOUTS,\n  TIMEOUT_ENV_VARS,\n  getCliTimeoutProfile,\n  getCliTimeout,\n  resolveVoteTimeout,\n  resolveEnvTimeout,\n  validateTimeout,\n  BACKOFF_CONFIG,\n  AGENT_ROUTER_TIMEOUTS,\n  CODEX_MCP_TIMEOUTS,\n} from './timeouts.js';\n\n// Re-export env helpers (internal use)\nexport { parseIntEnv, parseFloatEnv, parseBoolEnv } from './defaults-env.js';\n\nimport {\n  createGetTimeout,\n  createGetRetryConfig,\n  createGetRateLimitConfig,\n  createGetWorkerConfig,\n  createGetCircuitBreakerConfig,\n  createGetToolRateLimit,\n  createGetEnvVarDocumentation,\n} from './defaults-env.js';\nimport {\n  API_TIMEOUTS as _API,\n  WORKFLOW_TIMEOUTS as _WF,\n  MCP_TIMEOUTS as _MCP,\n  INTERNAL_TIMEOUTS as _INT,\n  TEST_TIMEOUTS as _TEST,\n  CLI_TIMEOUTS as _CLI,\n} from './timeouts.js';\n\n// ============================================================================\n// Default Model IDs (#2200 Child 4)\n// ============================================================================\n\n/**\n * Default model identifier for the custom OpenAI-compatible API gateway.\n *\n * Used by both `cli/setup-custom-api.ts` (write to nexus-agents.yaml) and\n * `adapters/auto-adapter.ts` (NEXUS_CUSTOM_MODEL env-var fallback). Single\n * source of truth so changes flow through all consumers.\n *\n * `gpt-4o` is widely supported across OpenAI-compatible gateways (vLLM,\n * LiteLLM, Together AI, etc.) — a pragmatic baseline rather than the\n * cheapest or most capable. Operators are expected to override.\n */\nexport const CUSTOM_API_DEFAULT_MODEL = 'gpt-4o';\n\n// ============================================================================\n// Central Defaults Object\n// ============================================================================\n\n/**\n * Central defaults object containing all configuration categories.\n */\nexport const DEFAULTS = {\n  /**\n   * Default timeout settings in milliseconds.\n   * Values sourced from config/timeouts.ts (Issue #984).\n   */\n  TIMEOUT_DEFAULTS: {\n    /** CLI tool execution timeout in milliseconds. */\n    cliMs: _CLI.default.standard,\n    /** Simple CLI task timeout (single function, quick query). */\n    cliSimpleMs: _CLI.default.simple,\n    /** Complex CLI task timeout (codebase-wide, deep analysis). */\n    cliComplexMs: _CLI.default.complex,\n    /** API request timeout in milliseconds. */\n    apiMs: _API.defaultMs,\n    /** Maximum API timeout in milliseconds. */\n    apiMaxMs: _API.maxMs,\n    /** Workflow-level timeout in milliseconds (5 minutes). */\n    workflowMs: _WF.workflowMs,\n    /** Maximum workflow timeout in milliseconds (30 minutes). */\n    workflowMaxMs: _WF.workflowMaxMs,\n    /** Step-level timeout in milliseconds. */\n    stepMs: _INT.selfEvalMs,\n    /** MCP operation default timeout in milliseconds (generic, not per-tool). */\n    mcpMs: _API.defaultMs,\n    /** MCP operation maximum timeout in milliseconds. */\n    mcpMaxMs: _MCP.maxMs,\n    /** Health check timeout in milliseconds. */\n    healthCheckMs: _INT.healthCheckMs,\n    /** Global test run timeout in milliseconds (10 minutes). */\n    testGlobalMs: _TEST.globalMs,\n    /** Per-task test timeout in milliseconds. */\n    testTaskMs: _TEST.taskMs,\n    /** Circuit breaker reset timeout in milliseconds. */\n    circuitBreakerResetMs: _INT.circuitBreakerResetMs,\n  },\n\n  /**\n   * Default rate limit settings for outbound operations.\n   */\n  RATE_LIMIT_DEFAULTS: {\n    /** Global requests per minute. */\n    requestsPerMinute: 60,\n    /** Whether rate limiting is enabled by default. */\n    enabled: true,\n    /** Maximum number of concurrent requests. */\n    maxConcurrent: 4,\n    /** Token bucket capacity. */\n    capacity: 100,\n    /** Token bucket refill rate per second. */\n    refillRate: 10,\n    /** Refill interval in milliseconds. */\n    refillIntervalMs: 100,\n  },\n\n  /**\n   * Per-tool rate limit defaults for MCP tools.\n   * (Source: Issue #274 Phase 2 - per-tool rate limits)\n   */\n  TOOL_RATE_LIMITS: {\n    orchestrate: { capacity: 10, refillRate: 10, refillIntervalMs: 60_000 },\n    delegate: { capacity: 20, refillRate: 20, refillIntervalMs: 60_000 },\n    workflow: { capacity: 5, refillRate: 5, refillIntervalMs: 60_000 },\n    expert: { capacity: 30, refillRate: 30, refillIntervalMs: 60_000 },\n  },\n\n  /**\n   * Default retry strategy settings for transient failures.\n   */\n  RETRY_DEFAULTS: {\n    /** Maximum retry attempts before failing. */\n    maxRetries: 3,\n    /** Base delay between retries in milliseconds. */\n    baseDelayMs: 1_000,\n    /** Maximum delay between retries in milliseconds. */\n    maxDelayMs: 30_000,\n    /** Jitter factor (0-1) to randomize retry delays. */\n    jitterFactor: 0.1,\n  },\n\n  /**\n   * Workflow-specific retry defaults.\n   */\n  WORKFLOW_RETRY_DEFAULTS: {\n    /** Maximum retry attempts for workflow steps. */\n    maxRetries: 2,\n    /** Base delay for workflow retries in milliseconds. */\n    baseDelayMs: 2_000,\n    /** Maximum delay for workflow retries in milliseconds. */\n    maxDelayMs: 60_000,\n    /** Jitter factor for workflow retries. */\n    jitterFactor: 0.15,\n  },\n\n  /**\n   * CLI-specific retry defaults.\n   */\n  CLI_RETRY_DEFAULTS: {\n    /** Maximum retry attempts for CLI operations. */\n    maxRetries: 2,\n    /** Base delay for CLI retries in milliseconds. */\n    baseDelayMs: 5_000,\n    /** Maximum delay for CLI retries in milliseconds. */\n    maxDelayMs: 60_000,\n    /** Jitter factor for CLI retries. */\n    jitterFactor: 0.2,\n  },\n\n  /**\n   * Test framework retry defaults.\n   */\n  TEST_RETRY_DEFAULTS: {\n    /** Maximum retries per test task. */\n    maxRetries: 2,\n    /** Whether to retry failed tasks by default. */\n    retryFailedTasks: true,\n  },\n\n  /**\n   * Default buffer sizing for batching and chunked processing.\n   */\n  BUFFER_DEFAULTS: {\n    /** Preferred batch size for bulk operations. */\n    batchSize: 100,\n    /** Chunk size for streaming or segmented processing. */\n    chunkSize: 256,\n    /** Maximum items allowed in a buffer. */\n    maxItems: 1_000,\n    /** Maximum memory size in bytes (10 MB). */\n    maxMemoryBytes: 10 * 1024 * 1024,\n    /** Log buffer flush interval in milliseconds. */\n    logFlushIntervalMs: 5_000,\n  },\n\n  /**\n   * Default worker pool sizing.\n   */\n  WORKER_DEFAULTS: {\n    /** Maximum number of workers. */\n    maxWorkers: 8,\n    /** Default worker pool size. */\n    poolSize: 4,\n    /** Worker idle timeout in milliseconds (5 minutes). */\n    idleTimeoutMs: 5 * 60_000,\n    /** Maximum parallel workflow steps. */\n    workflowMaxParallel: 5,\n    /** Test framework parallelism. */\n    testParallelism: 3,\n    /** Evaluation harness max workers. */\n    evaluationMaxWorkers: 8,\n    /** EventBus max history size. */\n    eventBusMaxHistory: 1_000,\n    /** Swarm observer max events. */\n    swarmObserverMaxEvents: 10_000,\n  },\n\n  /**\n   * Default circuit breaker settings.\n   * (Source: Issue #81 - Circuit breaker for CLI failures)\n   */\n  CIRCUIT_BREAKER_DEFAULTS: {\n    /** Failure threshold to open circuit. */\n    failureThreshold: 5,\n    /** Reset timeout in milliseconds. */\n    resetTimeoutMs: 30_000,\n    /** Success threshold to close circuit in half-open state. */\n    halfOpenSuccessThreshold: 2,\n    /** Whether to count timeouts as failures. */\n    countTimeoutsAsFailures: true,\n    /** Whether to count auth failures as failures. */\n    countAuthFailuresAsFailures: false,\n    /** Whether to count rate limit errors as failures (#1529). */\n    countRateLimitsAsFailures: true,\n    /** Maximum requests allowed in half-open state. */\n    halfOpenMaxRequests: 3,\n  },\n\n  /**\n   * Default context/memory settings.\n   */\n  CONTEXT_DEFAULTS: {\n    /** Maximum context tokens. */\n    maxTokens: 100_000,\n    /** Token budget warning threshold (80%). */\n    warningThreshold: 0.8,\n    /** Token budget critical threshold (95%). */\n    criticalThreshold: 0.95,\n    /** Maximum history entries to retain. */\n    maxHistoryEntries: 1_000,\n  },\n\n  /**\n   * Default provider/model settings.\n   */\n  PROVIDER_DEFAULTS: {\n    /** Default timeout for provider API calls in ms. */\n    timeout: 30_000,\n    /** Maximum retries for provider requests. */\n    maxRetries: 3,\n    /** Default model tier. */\n    defaultTier: 'balanced' as const,\n    /** Default temperature. */\n    temperatureDefault: 0.3,\n    /** Minimum temperature. */\n    temperatureMin: 0,\n    /** Maximum temperature. */\n    temperatureMax: 1,\n    /** Billing mode: 'plan' (monthly subscription) or 'api' (pay-per-token). Env: NEXUS_BILLING_MODE */\n    billingMode: 'plan' as const,\n  },\n\n  /**\n   * Security-related defaults.\n   */\n  SECURITY_DEFAULTS: {\n    /** Maximum system prompt length in characters. */\n    maxSystemPromptLength: 4_000,\n    /** Default policy execution mode. */\n    policyDefaultMode: 'read-only' as const,\n    /** Default policy mode. */\n    policyMode: 'enforce' as const,\n    /** Default sandbox mode. */\n    sandboxMode: 'policy' as const,\n    /** Whether to fall back to policy mode if container unavailable. */\n    sandboxFallbackToPolicy: true,\n    /** Whether network is enabled in container mode. */\n    sandboxNetworkEnabled: false,\n  },\n} as const;\n\n// ============================================================================\n// Type Exports for DEFAULTS\n// ============================================================================\n\n/** Type for the DEFAULTS object (readonly/const). */\nexport type DefaultsConfig = typeof DEFAULTS;\n\n/** Type for timeout defaults (readonly/const). */\nexport type TimeoutDefaultsConst = typeof DEFAULTS.TIMEOUT_DEFAULTS;\n\n/** Type for rate limit defaults (readonly/const). */\nexport type RateLimitDefaultsConst = typeof DEFAULTS.RATE_LIMIT_DEFAULTS;\n\n/** Type for retry defaults (readonly/const). */\nexport type RetryDefaultsConst = typeof DEFAULTS.RETRY_DEFAULTS;\n\n/** Type for buffer defaults (readonly/const). */\nexport type BufferDefaults = typeof DEFAULTS.BUFFER_DEFAULTS;\n\n/** Type for worker defaults (readonly/const). */\nexport type WorkerDefaultsConst = typeof DEFAULTS.WORKER_DEFAULTS;\n\n/** Type for circuit breaker defaults (readonly/const). */\nexport type CircuitBreakerDefaultsConst = typeof DEFAULTS.CIRCUIT_BREAKER_DEFAULTS;\n\n/** Type for context defaults (readonly/const). */\nexport type ContextDefaults = typeof DEFAULTS.CONTEXT_DEFAULTS;\n\n/** Type for provider defaults (readonly/const). */\nexport type ProviderDefaults = typeof DEFAULTS.PROVIDER_DEFAULTS;\n\n/** Type for security defaults (readonly/const). */\nexport type SecurityDefaults = typeof DEFAULTS.SECURITY_DEFAULTS;\n\n// ============================================================================\n// Environment Override Functions (bound to DEFAULTS)\n// ============================================================================\n\n/**\n * Get timeout with environment override support.\n *\n * @param key - Timeout key (e.g., 'cliMs', 'apiMs')\n * @returns Timeout value in milliseconds\n */\nexport const getTimeout = createGetTimeout(DEFAULTS.TIMEOUT_DEFAULTS);\n\n/**\n * Get retry config with environment override support.\n *\n * @returns Retry configuration\n */\nexport const getRetryConfig = createGetRetryConfig(DEFAULTS.RETRY_DEFAULTS);\n\n/**\n * Get rate limit config with environment override support.\n *\n * @returns Rate limit configuration\n */\nexport const getRateLimitConfig = createGetRateLimitConfig(DEFAULTS.RATE_LIMIT_DEFAULTS);\n\n/**\n * Get worker config with environment override support.\n *\n * @returns Worker configuration\n */\nexport const getWorkerConfig = createGetWorkerConfig(DEFAULTS.WORKER_DEFAULTS);\n\n/**\n * Gets the circuit breaker configuration.\n *\n * @returns Circuit breaker configuration\n */\nexport const getCircuitBreakerConfig = createGetCircuitBreakerConfig(\n  DEFAULTS.CIRCUIT_BREAKER_DEFAULTS\n);\n\n/**\n * Gets the tool rate limit configuration for a specific tool category.\n *\n * @param tool - Tool category (orchestrate, delegate, workflow, expert)\n * @returns Rate limit configuration\n */\nexport const getToolRateLimit = createGetToolRateLimit(DEFAULTS.TOOL_RATE_LIMITS);\n\n// ============================================================================\n// Documentation Helper\n// ============================================================================\n\n/**\n * Returns documentation for all environment variable overrides.\n *\n * @returns Markdown documentation string\n */\nexport const getEnvVarDocumentation = createGetEnvVarDocumentation(DEFAULTS);\n"],"mappings":";;;;;;;;;;AAwBO,SAAS,YAAY,QAAgB,UAA0B;AACpE,QAAM,WAAW,QAAQ,IAAI,MAAM;AACnC,MAAI,aAAa,QAAW;AAC1B,WAAO;AAAA,EACT;AACA,QAAM,SAAS,SAAS,UAAU,EAAE;AACpC,SAAO,MAAM,MAAM,KAAK,UAAU,IAAI,WAAW;AACnD;AAKO,SAAS,cAAc,QAAgB,UAA0B;AACtE,QAAM,WAAW,QAAQ,IAAI,MAAM;AACnC,MAAI,aAAa,QAAW;AAC1B,WAAO;AAAA,EACT;AACA,QAAM,SAAS,WAAW,QAAQ;AAClC,SAAO,MAAM,MAAM,KAAK,CAAC,SAAS,MAAM,IAAI,WAAW;AACzD;AAOO,SAAS,aAAa,QAAgB,UAA4B;AACvE,QAAM,WAAW,QAAQ,IAAI,MAAM,GAAG,YAAY;AAClD,MAAI,aAAa,QAAW;AAC1B,WAAO;AAAA,EACT;AACA,MAAI,aAAa,UAAU,aAAa,IAAK,QAAO;AACpD,MAAI,aAAa,WAAW,aAAa,IAAK,QAAO;AACrD,SAAO;AACT;AAgFO,SAAS,iBACd,iBAC6C;AAC7C,SAAO,CAAC,QAA4C;AAClD,UAAM,SAAS,iBAAiB,IAAI,QAAQ,OAAO,EAAE,EAAE,YAAY,CAAC;AACpE,WAAO,YAAY,QAAQ,gBAAgB,GAAG,CAAC;AAAA,EACjD;AACF;AAKO,SAAS,qBAAqB,eAAwD;AAC3F,SAAO,MAAqB;AAC1B,WAAO;AAAA,MACL,YAAY,YAAY,2BAA2B,cAAc,UAAU;AAAA,MAC3E,aAAa,YAAY,0BAA0B,cAAc,WAAW;AAAA,MAC5E,YAAY,YAAY,yBAAyB,cAAc,UAAU;AAAA,MACzE,cAAc,cAAc,sBAAsB,cAAc,YAAY;AAAA,IAC9E;AAAA,EACF;AACF;AAKO,SAAS,yBACd,mBACyB;AACzB,SAAO,MAAyB;AAC9B,WAAO;AAAA,MACL,mBAAmB,YAAY,wBAAwB,kBAAkB,iBAAiB;AAAA,MAC1F,SAAS,aAAa,4BAA4B,kBAAkB,OAAO;AAAA,MAC3E,eAAe;AAAA,QACb;AAAA,QACA,kBAAkB;AAAA,MACpB;AAAA,MACA,UAAU,YAAY,6BAA6B,kBAAkB,QAAQ;AAAA,MAC7E,YAAY,YAAY,gCAAgC,kBAAkB,UAAU;AAAA,MACpF,kBAAkB;AAAA,QAChB;AAAA,QACA,kBAAkB;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AACF;AAKO,SAAS,sBAAsB,gBAA2D;AAC/F,SAAO,MAAsB;AAC3B,WAAO;AAAA,MACL,YAAY,YAAY,qBAAqB,eAAe,UAAU;AAAA,MACtE,UAAU,YAAY,2BAA2B,eAAe,QAAQ;AAAA,MACxE,eAAe,YAAY,8BAA8B,eAAe,aAAa;AAAA,MACrF,qBAAqB;AAAA,QACnB;AAAA,QACA,eAAe;AAAA,MACjB;AAAA,MACA,iBAAiB,YAAY,0BAA0B,eAAe,eAAe;AAAA,MACrF,sBAAsB;AAAA,QACpB;AAAA,QACA,eAAe;AAAA,MACjB;AAAA,MACA,oBAAoB;AAAA,QAClB;AAAA,QACA,eAAe;AAAA,MACjB;AAAA,MACA,wBAAwB;AAAA,QACtB;AAAA,QACA,eAAe;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACF;AAKO,SAAS,8BACd,YAC8B;AAC9B,SAAO,MAA8B;AACnC,WAAO;AAAA,MACL,kBAAkB,YAAY,mCAAmC,WAAW,gBAAgB;AAAA,MAC5F,gBAAgB,YAAY,uCAAuC,WAAW,cAAc;AAAA,MAC5F,0BAA0B,WAAW;AAAA,MACrC,yBAAyB,WAAW;AAAA,MACpC,6BAA6B,WAAW;AAAA,MACxC,2BAA2B,WAAW;AAAA,MACtC,qBAAqB,WAAW;AAAA,IAClC;AAAA,EACF;AACF;AAKO,SAAS,uBACd,gBAC0D;AAC1D,SAAO,CAAC,SAAyD;AAC/D,WAAO,eAAe,IAAI;AAAA,EAC5B;AACF;AAqBO,SAAS,6BAA6B,UAAyC;AACpF,SAAO,MAAc;AACnB,UAAM,IAAI,SAAS;AACnB,UAAM,IAAI,SAAS;AACnB,UAAM,KAAK,SAAS;AACpB,UAAM,IAAI,SAAS;AACnB,UAAM,KAAK,SAAS;AAEpB,WAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAQa,OAAO,EAAE,KAAK,CAAC;AAAA,wBACf,OAAO,EAAE,KAAK,CAAC;AAAA,6BACV,OAAO,EAAE,UAAU,CAAC;AAAA,wBACzB,OAAO,EAAE,KAAK,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAMZ,OAAO,EAAE,iBAAiB,CAAC;AAAA,+BACvB,OAAO,EAAE,OAAO,CAAC;AAAA,gCAChB,OAAO,EAAE,QAAQ,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,8BAMpB,OAAO,GAAG,UAAU,CAAC;AAAA,6BACtB,OAAO,GAAG,WAAW,CAAC;AAAA,4BACvB,OAAO,GAAG,UAAU,CAAC;AAAA,yBACxB,OAAO,GAAG,YAAY,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAMxB,OAAO,EAAE,UAAU,CAAC;AAAA,8BACd,OAAO,EAAE,QAAQ,CAAC;AAAA,kCACd,OAAO,EAAE,mBAAmB,CAAC;AAAA,6BAClC,OAAO,EAAE,eAAe,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sCAMhB,OAAO,GAAG,gBAAgB,CAAC;AAAA,0CACvB,OAAO,GAAG,cAAc,CAAC;AAAA;AAAA,EAEjE;AACF;;;AC9NO,IAAM,2BAA2B;AASjC,IAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtB,kBAAkB;AAAA;AAAA,IAEhB,OAAO,aAAK,QAAQ;AAAA;AAAA,IAEpB,aAAa,aAAK,QAAQ;AAAA;AAAA,IAE1B,cAAc,aAAK,QAAQ;AAAA;AAAA,IAE3B,OAAO,aAAK;AAAA;AAAA,IAEZ,UAAU,aAAK;AAAA;AAAA,IAEf,YAAY,kBAAI;AAAA;AAAA,IAEhB,eAAe,kBAAI;AAAA;AAAA,IAEnB,QAAQ,kBAAK;AAAA;AAAA,IAEb,OAAO,aAAK;AAAA;AAAA,IAEZ,UAAU,aAAK;AAAA;AAAA,IAEf,eAAe,kBAAK;AAAA;AAAA,IAEpB,cAAc,cAAM;AAAA;AAAA,IAEpB,YAAY,cAAM;AAAA;AAAA,IAElB,uBAAuB,kBAAK;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA,EAKA,qBAAqB;AAAA;AAAA,IAEnB,mBAAmB;AAAA;AAAA,IAEnB,SAAS;AAAA;AAAA,IAET,eAAe;AAAA;AAAA,IAEf,UAAU;AAAA;AAAA,IAEV,YAAY;AAAA;AAAA,IAEZ,kBAAkB;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAkB;AAAA,IAChB,aAAa,EAAE,UAAU,IAAI,YAAY,IAAI,kBAAkB,IAAO;AAAA,IACtE,UAAU,EAAE,UAAU,IAAI,YAAY,IAAI,kBAAkB,IAAO;AAAA,IACnE,UAAU,EAAE,UAAU,GAAG,YAAY,GAAG,kBAAkB,IAAO;AAAA,IACjE,QAAQ,EAAE,UAAU,IAAI,YAAY,IAAI,kBAAkB,IAAO;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAgB;AAAA;AAAA,IAEd,YAAY;AAAA;AAAA,IAEZ,aAAa;AAAA;AAAA,IAEb,YAAY;AAAA;AAAA,IAEZ,cAAc;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,yBAAyB;AAAA;AAAA,IAEvB,YAAY;AAAA;AAAA,IAEZ,aAAa;AAAA;AAAA,IAEb,YAAY;AAAA;AAAA,IAEZ,cAAc;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,oBAAoB;AAAA;AAAA,IAElB,YAAY;AAAA;AAAA,IAEZ,aAAa;AAAA;AAAA,IAEb,YAAY;AAAA;AAAA,IAEZ,cAAc;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,qBAAqB;AAAA;AAAA,IAEnB,YAAY;AAAA;AAAA,IAEZ,kBAAkB;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,iBAAiB;AAAA;AAAA,IAEf,WAAW;AAAA;AAAA,IAEX,WAAW;AAAA;AAAA,IAEX,UAAU;AAAA;AAAA,IAEV,gBAAgB,KAAK,OAAO;AAAA;AAAA,IAE5B,oBAAoB;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAKA,iBAAiB;AAAA;AAAA,IAEf,YAAY;AAAA;AAAA,IAEZ,UAAU;AAAA;AAAA,IAEV,eAAe,IAAI;AAAA;AAAA,IAEnB,qBAAqB;AAAA;AAAA,IAErB,iBAAiB;AAAA;AAAA,IAEjB,sBAAsB;AAAA;AAAA,IAEtB,oBAAoB;AAAA;AAAA,IAEpB,wBAAwB;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,0BAA0B;AAAA;AAAA,IAExB,kBAAkB;AAAA;AAAA,IAElB,gBAAgB;AAAA;AAAA,IAEhB,0BAA0B;AAAA;AAAA,IAE1B,yBAAyB;AAAA;AAAA,IAEzB,6BAA6B;AAAA;AAAA,IAE7B,2BAA2B;AAAA;AAAA,IAE3B,qBAAqB;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAkB;AAAA;AAAA,IAEhB,WAAW;AAAA;AAAA,IAEX,kBAAkB;AAAA;AAAA,IAElB,mBAAmB;AAAA;AAAA,IAEnB,mBAAmB;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,mBAAmB;AAAA;AAAA,IAEjB,SAAS;AAAA;AAAA,IAET,YAAY;AAAA;AAAA,IAEZ,aAAa;AAAA;AAAA,IAEb,oBAAoB;AAAA;AAAA,IAEpB,gBAAgB;AAAA;AAAA,IAEhB,gBAAgB;AAAA;AAAA,IAEhB,aAAa;AAAA,EACf;AAAA;AAAA;AAAA;AAAA,EAKA,mBAAmB;AAAA;AAAA,IAEjB,uBAAuB;AAAA;AAAA,IAEvB,mBAAmB;AAAA;AAAA,IAEnB,YAAY;AAAA;AAAA,IAEZ,aAAa;AAAA;AAAA,IAEb,yBAAyB;AAAA;AAAA,IAEzB,uBAAuB;AAAA,EACzB;AACF;AA8CO,IAAM,aAAa,iBAAiB,SAAS,gBAAgB;AAO7D,IAAM,iBAAiB,qBAAqB,SAAS,cAAc;AAOnE,IAAM,qBAAqB,yBAAyB,SAAS,mBAAmB;AAOhF,IAAM,kBAAkB,sBAAsB,SAAS,eAAe;AAOtE,IAAM,0BAA0B;AAAA,EACrC,SAAS;AACX;AAQO,IAAM,mBAAmB,uBAAuB,SAAS,gBAAgB;AAWzE,IAAM,yBAAyB,6BAA6B,QAAQ;","names":[]}

package/dist/{chunk-IOU7F5PH.js → chunk-K7EA5OV4.js}

@@ -3,7 +3,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-UOUJZIKH.js";
+} from "./chunk-R2Y57PM3.js";
 
 // src/scm/types.ts
 var ScmError = class extends Error {
@@ -243,4 +243,4 @@ export {
   ScmError,
   GitHubProvider
 };
-//# sourceMappingURL=chunk-IOU7F5PH.js.map
+//# sourceMappingURL=chunk-K7EA5OV4.js.map

package/dist/{chunk-KRIFBGWZ.js → chunk-PTGBJFSD.js}

@@ -2,13 +2,13 @@ import {
   CircuitBreakerRegistry,
   CircuitError,
   mapCliErrorToCategory
-} from "./chunk-W5AJRK4U.js";
+} from "./chunk-GMOGKX4E.js";
 import {
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-UOUJZIKH.js";
+} from "./chunk-R2Y57PM3.js";
 
 // src/cli-adapters/fallback-chains.ts
 import { z } from "zod";
@@ -192,4 +192,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-KRIFBGWZ.js.map
+//# sourceMappingURL=chunk-PTGBJFSD.js.map

package/dist/{chunk-EKYT4NMD.js → chunk-QGZBCD2A.js}

@@ -1,9 +1,9 @@
 import {
   getErrorMessage
-} from "./chunk-UOUJZIKH.js";
+} from "./chunk-R2Y57PM3.js";
 
 // src/cli/setup-config.ts
-import { existsSync, writeFileSync } from "fs";
+import { copyFileSync, existsSync, writeFileSync } from "fs";
 import { resolve } from "path";
 var DEFAULT_CONFIG_FILE = "nexus-agents.yaml";
 var SETUP_CONFIG_TEMPLATE = `# Nexus Agents Configuration
@@ -38,14 +38,12 @@ function runConfigInitSync(projectRoot, force, dryRun) {
       message: `Would create: ${outputPath}`
     };
   }
+  const backup = ensureBackup(outputPath);
+  if ("error" in backup) return backup.error;
   try {
     writeFileSync(outputPath, SETUP_CONFIG_TEMPLATE, "utf-8");
-    return {
-      success: true,
-      path: outputPath,
-      created: true,
-      message: `Created: ${outputPath}`
-    };
+    const message = backup.path !== void 0 ? `Created: ${outputPath} (backup saved at ${backup.path})` : `Created: ${outputPath}`;
+    return { success: true, path: outputPath, created: true, message };
   } catch (error) {
     return {
       success: false,
@@ -55,8 +53,25 @@ function runConfigInitSync(projectRoot, force, dryRun) {
     };
   }
 }
+function ensureBackup(outputPath) {
+  if (!existsSync(outputPath)) return { path: void 0 };
+  const backupPath = `${outputPath}.bak.${String(Date.now())}`;
+  try {
+    copyFileSync(outputPath, backupPath);
+    return { path: backupPath };
+  } catch (err) {
+    return {
+      error: {
+        success: false,
+        path: outputPath,
+        created: false,
+        message: `Failed to back up existing config: ${getErrorMessage(err)}`
+      }
+    };
+  }
+}
 
 export {
   runConfigInitSync
 };
-//# sourceMappingURL=chunk-EKYT4NMD.js.map
+//# sourceMappingURL=chunk-QGZBCD2A.js.map

package/dist/chunk-QGZBCD2A.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/setup-config.ts"],"sourcesContent":["/**\n * Synchronous config file generation for setup command.\n *\n * Reuses the CONFIG_TEMPLATE from config-init.ts pattern but provides\n * a synchronous API suitable for the setup command flow.\n *\n * @module cli/setup-config\n * (Source: Issue #1252 - Setup auto-generates nexus-agents.yaml)\n */\n\nimport { copyFileSync, existsSync, writeFileSync } from 'node:fs';\nimport { resolve } from 'node:path';\nimport { getErrorMessage } from '../core/index.js';\n\n/** Default configuration file name. */\nconst DEFAULT_CONFIG_FILE = 'nexus-agents.yaml';\n\n/** Result of the config generation step. */\nexport interface ConfigStepResult {\n  readonly success: boolean;\n  readonly path: string;\n  readonly created: boolean;\n  readonly message: string;\n}\n\n/**\n * Minimal YAML config template for setup command.\n * Intentionally brief — just enough to get started.\n * Users can run `nexus-agents config init` for the full template.\n */\nconst SETUP_CONFIG_TEMPLATE = `# Nexus Agents Configuration\n# Generated by: nexus-agents setup\n# Full template: nexus-agents config init\n\nmodels:\n  default: claude-sonnet-4\n\nexperts:\n  builtin: true\n\nlogging:\n  level: info\n  format: json\n`;\n\n/**\n * Generates a nexus-agents.yaml config file synchronously.\n *\n * @param projectRoot - Directory to create config in.\n * @param force - Overwrite existing config.\n * @param dryRun - Report what would happen without writing.\n */\nexport function runConfigInitSync(\n  projectRoot: string,\n  force: boolean,\n  dryRun: boolean\n): ConfigStepResult {\n  const outputPath = resolve(projectRoot, DEFAULT_CONFIG_FILE);\n\n  if (existsSync(outputPath) && !force) {\n    return {\n      success: true,\n      path: outputPath,\n      created: false,\n      message: 'Config already exists (use --force to overwrite)',\n    };\n  }\n\n  if (dryRun) {\n    return {\n      success: true,\n      path: outputPath,\n      created: true,\n      message: `Would create: ${outputPath}`,\n    };\n  }\n\n  const backup = ensureBackup(outputPath);\n  if ('error' in backup) return backup.error;\n\n  try {\n    writeFileSync(outputPath, SETUP_CONFIG_TEMPLATE, 'utf-8');\n    const message =\n      backup.path !== undefined\n        ? `Created: ${outputPath} (backup saved at ${backup.path})`\n        : `Created: ${outputPath}`;\n    return { success: true, path: outputPath, created: true, message };\n  } catch (error: unknown) {\n    return {\n      success: false,\n      path: outputPath,\n      created: false,\n      message: `Failed: ${getErrorMessage(error)}`,\n    };\n  }\n}\n\n/**\n * Saves a timestamped backup of an existing config file before overwrite (#2183).\n *\n * Returns `{ path }` with the backup path (or undefined if no existing file)\n * on success, or `{ error }` with a populated `ConfigStepResult` on failure.\n * Failure to write the backup aborts the overwrite — better to keep the\n * user's customizations intact than to lose them silently.\n */\nfunction ensureBackup(\n  outputPath: string\n): { path: string | undefined } | { error: ConfigStepResult } {\n  if (!existsSync(outputPath)) return { path: undefined };\n  const backupPath = `${outputPath}.bak.${String(Date.now())}`;\n  try {\n    copyFileSync(outputPath, backupPath);\n    return { path: backupPath };\n  } catch (err: unknown) {\n    return {\n      error: {\n        success: false,\n        path: outputPath,\n        created: false,\n        message: `Failed to back up existing config: ${getErrorMessage(err)}`,\n      },\n    };\n  }\n}\n"],"mappings":";;;;;AAUA,SAAS,cAAc,YAAY,qBAAqB;AACxD,SAAS,eAAe;AAIxB,IAAM,sBAAsB;AAe5B,IAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsBvB,SAAS,kBACd,aACA,OACA,QACkB;AAClB,QAAM,aAAa,QAAQ,aAAa,mBAAmB;AAE3D,MAAI,WAAW,UAAU,KAAK,CAAC,OAAO;AACpC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAAA,EACF;AAEA,MAAI,QAAQ;AACV,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,SAAS;AAAA,MACT,SAAS,iBAAiB,UAAU;AAAA,IACtC;AAAA,EACF;AAEA,QAAM,SAAS,aAAa,UAAU;AACtC,MAAI,WAAW,OAAQ,QAAO,OAAO;AAErC,MAAI;AACF,kBAAc,YAAY,uBAAuB,OAAO;AACxD,UAAM,UACJ,OAAO,SAAS,SACZ,YAAY,UAAU,qBAAqB,OAAO,IAAI,MACtD,YAAY,UAAU;AAC5B,WAAO,EAAE,SAAS,MAAM,MAAM,YAAY,SAAS,MAAM,QAAQ;AAAA,EACnE,SAAS,OAAgB;AACvB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,SAAS;AAAA,MACT,SAAS,WAAW,gBAAgB,KAAK,CAAC;AAAA,IAC5C;AAAA,EACF;AACF;AAUA,SAAS,aACP,YAC4D;AAC5D,MAAI,CAAC,WAAW,UAAU,EAAG,QAAO,EAAE,MAAM,OAAU;AACtD,QAAM,aAAa,GAAG,UAAU,QAAQ,OAAO,KAAK,IAAI,CAAC,CAAC;AAC1D,MAAI;AACF,iBAAa,YAAY,UAAU;AACnC,WAAO,EAAE,MAAM,WAAW;AAAA,EAC5B,SAAS,KAAc;AACrB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS,sCAAsC,gBAAgB,GAAG,CAAC;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AACF;","names":[]}