nexus-agents 2.59.0 → 2.60.0

package/dist/chunk-FDNWRZNJ.js

@@ -0,0 +1,22 @@
+// src/config/nexus-data-dir.ts
+import { homedir } from "os";
+import { join, resolve } from "path";
+function getNexusDataDir() {
+  const fromEnv = process.env["NEXUS_DATA_DIR"]?.trim();
+  if (fromEnv !== void 0 && fromEnv !== "") {
+    return resolve(fromEnv);
+  }
+  return join(homedir(), ".nexus-agents");
+}
+function resetNexusDataDirCache() {
+}
+function nexusDataPath(...segments) {
+  return join(getNexusDataDir(), ...segments);
+}
+
+export {
+  getNexusDataDir,
+  resetNexusDataDirCache,
+  nexusDataPath
+};
+//# sourceMappingURL=chunk-FDNWRZNJ.js.map

package/dist/chunk-FDNWRZNJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config/nexus-data-dir.ts"],"sourcesContent":["/**\n * Nexus runtime data directory resolver (#2302, child of #2301).\n *\n * Returns the absolute path under which nexus-agents stores all runtime\n * state — memory, learning, audit, voting, sessions, checkpoints, traces,\n * model registry. Single source of truth so portable / sandbox / CI\n * deployments can redirect state to a workspace-local folder via the\n * `NEXUS_DATA_DIR` environment variable.\n *\n * Resolution order (first match wins):\n * 1. `NEXUS_DATA_DIR` env var if set + non-empty (resolved against `cwd`).\n * 2. `<homedir>/.nexus-agents` (zero-breakage fallback).\n *\n * No caching, no filesystem walks, no discovery. The contrarian-narrowed\n * scope (#2301 vote) explicitly defers ancestor-walking to a separate\n * child with a security design pass per CVE-2022-24765. Recomputing the\n * trivial env-or-homedir lookup on each call is ~100ns and avoids cache\n * coordination issues with tests that mock `homedir()`.\n *\n * @module config/nexus-data-dir\n */\n\nimport { homedir } from 'node:os';\nimport { join, resolve } from 'node:path';\n\n/** Returns the absolute path to the nexus-agents data directory. */\nexport function getNexusDataDir(): string {\n  const fromEnv = process.env['NEXUS_DATA_DIR']?.trim();\n  if (fromEnv !== undefined && fromEnv !== '') {\n    return resolve(fromEnv);\n  }\n  return join(homedir(), '.nexus-agents');\n}\n\n/**\n * No-op kept for source-compatibility with consumers that called this\n * earlier in development. The resolver is no longer cached, so resetting\n * is unnecessary. Kept exported (rather than removed) to avoid breaking\n * imports in tests that may have already adopted it.\n */\nexport function resetNexusDataDirCache(): void {\n  // intentionally empty — see module docstring\n}\n\n/** Returns a path joined under the resolved data directory. */\nexport function nexusDataPath(...segments: string[]): string {\n  return join(getNexusDataDir(), ...segments);\n}\n"],"mappings":";AAsBA,SAAS,eAAe;AACxB,SAAS,MAAM,eAAe;AAGvB,SAAS,kBAA0B;AACxC,QAAM,UAAU,QAAQ,IAAI,gBAAgB,GAAG,KAAK;AACpD,MAAI,YAAY,UAAa,YAAY,IAAI;AAC3C,WAAO,QAAQ,OAAO;AAAA,EACxB;AACA,SAAO,KAAK,QAAQ,GAAG,eAAe;AACxC;AAQO,SAAS,yBAA+B;AAE/C;AAGO,SAAS,iBAAiB,UAA4B;AAC3D,SAAO,KAAK,gBAAgB,GAAG,GAAG,QAAQ;AAC5C;","names":[]}

package/dist/{chunk-L3NHOUEX.js → chunk-FEWWXGFE.js}

@@ -6,6 +6,9 @@ import {
 import {
   CUSTOM_API_DEFAULT_MODEL
 } from "./chunk-H43PABG4.js";
+import {
+  nexusDataPath
+} from "./chunk-FDNWRZNJ.js";
 import {
   SessionMemory
 } from "./chunk-7Y36JLES.js";
@@ -862,8 +865,8 @@ var COMPILED_PATH_PATTERNS = UNBYPASSABLE_PATH_PATTERNS.map((pattern) => ({
   pattern,
   regex: compileGlobToRegex(pattern)
 }));
-function isPathDenied(path4) {
-  const normalized = path4.toLowerCase();
+function isPathDenied(path3) {
+  const normalized = path3.toLowerCase();
   return COMPILED_PATH_PATTERNS.some((c) => c.regex.test(normalized));
 }
 function isToolDenied(toolName) {
@@ -973,8 +976,8 @@ function denyToToolResult(decision, requestId) {
 // src/security/access-constraint-deriver/chain-adapter.ts
 function toGuardArgs(args) {
   if (typeof args !== "object" || args === null) return void 0;
-  const path4 = args["path"];
-  return typeof path4 === "string" && path4.length > 0 ? { path: path4 } : void 0;
+  const path3 = args["path"];
+  return typeof path3 === "string" && path3.length > 0 ? { path: path3 } : void 0;
 }
 function createAccessPolicyChainMiddleware(toolName) {
   return async (args, ctx, next) => {
@@ -7863,11 +7866,9 @@ function createCorrelationTracker(config) {
 
 // src/consensus/correlation-persistence.ts
 import * as fs from "fs";
-import * as path from "path";
-import * as os from "os";
 import { z as z7 } from "zod";
 var logger5 = createLogger({ component: "correlation-persistence" });
-var VOTING_DIR = path.join(".nexus-agents", "voting");
+var VOTING_SUBDIR = "voting";
 var CORRELATIONS_FILE = "correlations.json";
 var FILE_MODE = 384;
 var DIR_MODE = 448;
@@ -7889,10 +7890,10 @@ var PersistedCorrelationDataSchema = z7.object({
   savedAt: z7.iso.datetime()
 });
 function getCorrelationDataPath() {
-  return path.join(os.homedir(), VOTING_DIR, CORRELATIONS_FILE);
+  return nexusDataPath(VOTING_SUBDIR, CORRELATIONS_FILE);
 }
 function ensureVotingDirectory() {
-  const dirPath = path.join(os.homedir(), VOTING_DIR);
+  const dirPath = nexusDataPath(VOTING_SUBDIR);
   try {
     fs.mkdirSync(dirPath, { recursive: true, mode: DIR_MODE });
     return ok(void 0);
@@ -8147,8 +8148,7 @@ function buildResponse(input, result) {
 
 // src/mcp/tools/tool-memory.ts
 import * as fs3 from "fs";
-import * as os3 from "os";
-import * as path3 from "path";
+import * as path2 from "path";
 
 // src/context/belief-core-types.ts
 import { z as z9 } from "zod";
@@ -9338,11 +9338,11 @@ function getNextKeys(currentKey, edges, opts) {
   }
   return next;
 }
-function buildTraversalResult(entry, depth, path4, edge) {
+function buildTraversalResult(entry, depth, path3, edge) {
   if (edge !== void 0) {
-    return { entry, depth, path: path4, edge };
+    return { entry, depth, path: path3, edge };
   }
-  return { entry, depth, path: path4 };
+  return { entry, depth, path: path3 };
 }
 function bfsTraverse(config) {
   const { db, startKey, opts } = config;
@@ -9559,8 +9559,8 @@ var GraphMemoryBackend = class {
       if (!memoryExists(db, to))
         return Promise.resolve(err(new MemoryError(`To key not found: ${to}`)));
       const resolved = resolveTraversalOptions(opts);
-      const path4 = findShortestPath(db, from, to, resolved);
-      return Promise.resolve(ok(path4));
+      const path3 = findShortestPath(db, from, to, resolved);
+      return Promise.resolve(ok(path3));
     } catch (error) {
       const cause = error instanceof Error ? error : new Error(String(error));
       return Promise.resolve(err(new MemoryError("Path finding failed", { cause })));
@@ -10345,8 +10345,8 @@ var AgenticMemoryBackend = class {
 
 // src/context/belief-memory-persistence.ts
 import * as fs2 from "fs";
-import * as os2 from "os";
-import * as path2 from "path";
+import * as os from "os";
+import * as path from "path";
 
 // src/context/belief-persistence-types.ts
 import { z as z16 } from "zod";
@@ -10424,7 +10424,7 @@ var BeliefSnapshotSchema = z16.object({
 });
 
 // src/context/belief-memory-persistence.ts
-var BELIEFS_DIR = path2.join(os2.homedir(), ".nexus-agents", "memory", "beliefs");
+var BELIEFS_DIR = path.join(os.homedir(), ".nexus-agents", "memory", "beliefs");
 var MAX_SNAPSHOT_FILES = 10;
 var SNAPSHOT_VERSION = 1;
 function optProp(key, value) {
@@ -10616,7 +10616,7 @@ function enforceRetention(logger11) {
     const files = getSnapshotFiles();
     if (files.length <= MAX_SNAPSHOT_FILES) return;
     const toDelete = files.slice(MAX_SNAPSHOT_FILES);
-    for (const file of toDelete) fs2.unlinkSync(path2.join(BELIEFS_DIR, file));
+    for (const file of toDelete) fs2.unlinkSync(path.join(BELIEFS_DIR, file));
     logger11.debug("Belief snapshot retention enforced", {
       kept: MAX_SNAPSHOT_FILES,
       deleted: toDelete.length
@@ -10633,7 +10633,7 @@ function saveBeliefSnapshot(data, logger11) {
     const snapshot = createSnapshot(data);
     const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
     const filename = `beliefs-${timestamp}.json`;
-    const filepath = path2.join(BELIEFS_DIR, filename);
+    const filepath = path.join(BELIEFS_DIR, filename);
     fs2.writeFileSync(filepath, JSON.stringify(snapshot, null, 2), "utf-8");
     logger11.info("Belief memory snapshot saved", { filename, beliefs: snapshot.beliefs.length });
     enforceRetention(logger11);
@@ -10653,7 +10653,7 @@ function loadBeliefSnapshot(logger11) {
     }
     for (const file of files.slice(0, 3)) {
       try {
-        const filepath = path2.join(BELIEFS_DIR, file);
+        const filepath = path.join(BELIEFS_DIR, file);
         const raw = JSON.parse(fs2.readFileSync(filepath, "utf-8"));
         const validation = BeliefSnapshotSchema.safeParse(raw);
         if (!validation.success) {
@@ -11774,13 +11774,13 @@ async function queryAdaptiveMemory(adaptive, query, keywords, limit, log) {
 }
 
 // src/mcp/tools/tool-memory.ts
-var MEMORY_BASE = path3.join(os3.homedir(), ".nexus-agents", "memory");
-var DEFAULT_MEMORY_DIR = path3.join(MEMORY_BASE, "sessions");
-var AGENTIC_DB_PATH = path3.join(MEMORY_BASE, "agentic.db");
-var ADAPTIVE_DB_PATH = path3.join(MEMORY_BASE, "adaptive.db");
-var TYPED_DB_PATH = path3.join(MEMORY_BASE, "typed.db");
-var MOBIMEM_DB_PATH = path3.join(MEMORY_BASE, "mobimem.db");
-var MARKDOWN_DIR = path3.join(MEMORY_BASE, "markdown");
+var MEMORY_BASE = nexusDataPath("memory");
+var DEFAULT_MEMORY_DIR = path2.join(MEMORY_BASE, "sessions");
+var AGENTIC_DB_PATH = path2.join(MEMORY_BASE, "agentic.db");
+var ADAPTIVE_DB_PATH = path2.join(MEMORY_BASE, "adaptive.db");
+var TYPED_DB_PATH = path2.join(MEMORY_BASE, "typed.db");
+var MOBIMEM_DB_PATH = path2.join(MEMORY_BASE, "mobimem.db");
+var MARKDOWN_DIR = path2.join(MEMORY_BASE, "markdown");
 var sharedInstance = null;
 function getToolMemory(logger11) {
   sharedInstance ??= new ToolMemoryManager(logger11);
@@ -13228,4 +13228,4 @@ export {
   CONSENSUS_VOTE_OUTPUT_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-L3NHOUEX.js.map
+//# sourceMappingURL=chunk-FEWWXGFE.js.map