nexus-agents 2.80.0 → 2.80.1

package/dist/{chunk-SJUSQGKH.js → chunk-TFTP7EUQ.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULTS
-} from "./chunk-BSIGP5XF.js";
+} from "./chunk-54UT2JUQ.js";
 import {
   resolveInsideRoot
 } from "./chunk-NUBSJGQZ.js";
@@ -10,7 +10,7 @@ import {
 import {
   createAllAdapters,
   probeCli
-} from "./chunk-ZU2Q3DWE.js";
+} from "./chunk-EPZMFIAX.js";
 import {
   CliNameSchema,
   DEFAULT_CAPABILITIES,
@@ -26,7 +26,7 @@ import {
   ok,
   symbols,
   writeLine
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-T4E6UFFC.js";
 import {
   detectSandbox,
   getLearningDir,
@@ -40,7 +40,7 @@ import {
 } from "./chunk-2JQXC3CK.js";
 
 // src/version.ts
-var VERSION = true ? "2.80.0" : "dev";
+var VERSION = true ? "2.80.1" : "dev";
 
 // src/config/schemas-core.ts
 import { z } from "zod";
@@ -2107,7 +2107,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { runSetup } = await import("./setup-command-ZPLPOJF2.js");
+    const { runSetup } = await import("./setup-command-OXJ32UAI.js");
     const setupResult = runSetup({
       skipMcp: true,
       skipRules: true,
@@ -2121,7 +2121,7 @@ async function runDoctorFix(result) {
     }
   }
   if (!result.configFile.found) {
-    const { runConfigInitSync } = await import("./setup-config-F7VRWXY3.js");
+    const { runConfigInitSync } = await import("./setup-config-KNMVMGDD.js");
     const configResult = runConfigInitSync(process.cwd(), false, false);
     if (configResult.success && configResult.created) {
       writeLine2(`\u2713 Generated config: ${configResult.path}`);
@@ -2219,4 +2219,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-SJUSQGKH.js.map
+//# sourceMappingURL=chunk-TFTP7EUQ.js.map

package/dist/{chunk-VS4KB3AX.js → chunk-UEKTTIDA.js}

@@ -1,12 +1,12 @@
 import {
   getCliForModelId
-} from "./chunk-Q2U6SFN2.js";
+} from "./chunk-MUIA32LU.js";
 import {
   MODEL_IDS,
   createLogger,
   getTimeProvider,
   isRateLimitText
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-T4E6UFFC.js";
 
 // src/pipeline/expert-bridge.ts
 function resolveCliFromModelString(model) {
@@ -21,7 +21,7 @@ var cachedMcpConfigPath = null;
 async function getMcpConfigPath() {
   if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;
   try {
-    const { generateMcpConfig } = await import("./child-mcp-config-SM5I7USN.js");
+    const { generateMcpConfig } = await import("./child-mcp-config-Q6UMCPGZ.js");
     const config = await generateMcpConfig();
     cachedMcpConfigPath = config.configPath;
     return cachedMcpConfigPath;
@@ -52,13 +52,13 @@ function adaptCompositeRouter(compositeRouter) {
 }
 async function getRouter() {
   if (cachedRouter !== null) return cachedRouter;
-  const { createAllAdapters } = await import("./factory-I54TX7OY.js");
-  const { createCompositeRouter } = await import("./composite-router-UYFYSMBT.js");
+  const { createAllAdapters } = await import("./factory-45NHZFLK.js");
+  const { createCompositeRouter } = await import("./composite-router-ZP72LQFH.js");
   const adapters = createAllAdapters();
   if (adapters.size === 0) return null;
   cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));
   try {
-    const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-JGX54DAD.js");
+    const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-EUERR2HK.js");
     cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
   } catch (error) {
     const msg = error instanceof Error ? error.message : String(error);
@@ -160,4 +160,4 @@ ${prompt}`;
 export {
   executeExpert
 };
-//# sourceMappingURL=chunk-VS4KB3AX.js.map
+//# sourceMappingURL=chunk-UEKTTIDA.js.map

package/dist/{chunk-UGXR4PAY.js → chunk-WZ2T4T7N.js}

@@ -1,6 +1,6 @@
 import {
   runConfigInitSync
-} from "./chunk-2DBPZQLO.js";
+} from "./chunk-D4NEYNBO.js";
 import {
   VERSION,
   checkApiKeys,
@@ -8,10 +8,10 @@ import {
   checkSqlite,
   defaultConfig,
   initDataDirectories
-} from "./chunk-SJUSQGKH.js";
+} from "./chunk-TFTP7EUQ.js";
 import {
   probeAllClis
-} from "./chunk-ZU2Q3DWE.js";
+} from "./chunk-EPZMFIAX.js";
 import {
   BUILT_IN_EXPERTS
 } from "./chunk-ZM4O442V.js";
@@ -25,7 +25,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   symbols
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-T4E6UFFC.js";
 import {
   ensureGitignored,
   findRepoRoot
@@ -1974,4 +1974,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=chunk-UGXR4PAY.js.map
+//# sourceMappingURL=chunk-WZ2T4T7N.js.map

package/dist/{cli-circuit-breaker-JGX54DAD.js → cli-circuit-breaker-EUERR2HK.js}

@@ -1,13 +1,13 @@
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-J5XEJHIQ.js";
-import "./chunk-JXDDSNEK.js";
-import "./chunk-YMT6H2HQ.js";
+} from "./chunk-GODRGVF4.js";
+import "./chunk-7UM5XRGG.js";
+import "./chunk-T4E6UFFC.js";
 import "./chunk-2JQXC3CK.js";
 import "./chunk-UP2VWCW5.js";
 export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=cli-circuit-breaker-JGX54DAD.js.map
+//# sourceMappingURL=cli-circuit-breaker-EUERR2HK.js.map

package/dist/cli.js

@@ -12,18 +12,18 @@ import {
   parseFindings,
   sumFindings
 } from "./chunk-3RZWLQSC.js";
-import "./chunk-4XGKCVJL.js";
+import "./chunk-7ZKZ7K7J.js";
 import {
   buildOpenAICompatAdapters,
   loadUsageEvents,
   readOpenAICompatEnv,
   rollupByModel
-} from "./chunk-EVZ7YR7H.js";
+} from "./chunk-HR7C4DSA.js";
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-UGXR4PAY.js";
-import "./chunk-2DBPZQLO.js";
+} from "./chunk-WZ2T4T7N.js";
+import "./chunk-D4NEYNBO.js";
 import {
   AuthHandler,
   DEFAULT_EXPERTS,
@@ -153,56 +153,61 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-GNRANMQ3.js";
+} from "./chunk-LDD272PW.js";
 import "./chunk-AP2FD37C.js";
 import "./chunk-ED6VQWNG.js";
 import {
   resolveToken
-} from "./chunk-CTSESEFA.js";
+} from "./chunk-NCBWA6RU.js";
 import {
   CATEGORY_DISPLAY_NAMES,
   DEFAULT_PR_REVIEW_CONFIG
 } from "./chunk-X2M7OF27.js";
-import "./chunk-FAJAWO42.js";
-import "./chunk-J5XEJHIQ.js";
-import "./chunk-VS4KB3AX.js";
+import "./chunk-5WN3WGXG.js";
+import "./chunk-GODRGVF4.js";
+import "./chunk-UEKTTIDA.js";
 import {
   DEFAULT_VOTE_TIMEOUT_MS,
   ErrorPolicySchema,
   VOTER_ROLES,
   VoteThresholdSchema,
   createDefaultPolicyFirewall,
+  createSecureHandler,
   createUnifiedRegistry,
   executeVoting,
   getToolAnnotations,
+  getToolTimeout,
   registerConsensusVoteTool,
+  toSdkCallback,
   toolStructuredError,
-  warnIfSimulatedOutsideTests
-} from "./chunk-6CJIKX6I.js";
-import "./chunk-JLWKHYIU.js";
-import "./chunk-YGKPWUJ6.js";
+  toolSuccessStructured,
+  warnIfSimulatedOutsideTests,
+  wrapToolWithTimeout
+} from "./chunk-D3MQ4U2R.js";
+import "./chunk-I5KYDT23.js";
+import "./chunk-33LDLZCC.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   savePapersRegistry,
   synthesizeResearch
-} from "./chunk-FJHZW7CR.js";
+} from "./chunk-Q4DXTNGR.js";
 import {
   classifyTrust,
   createFullGitHubProvider,
   evaluatePolicy,
   parsePRUrl,
   sanitizeInput
-} from "./chunk-QVHXEQFM.js";
-import "./chunk-UVALD724.js";
-import "./chunk-RIUUFBX4.js";
+} from "./chunk-O2ECPTFH.js";
+import "./chunk-SX3P2PD2.js";
+import "./chunk-MVIYQMQM.js";
 import "./chunk-7J7PNOJQ.js";
 import "./chunk-BQ4YXGGQ.js";
-import "./chunk-SHVGZK4A.js";
+import "./chunk-L7433REX.js";
 import {
   MemoryError,
   shutdownToolMemory
-} from "./chunk-OO6MTUDS.js";
+} from "./chunk-NALIFUBD.js";
 import {
   CustomExpertDefinitionSchema,
   DATA_SUBDIRECTORIES,
@@ -221,12 +226,12 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-SJUSQGKH.js";
-import "./chunk-Q2U6SFN2.js";
-import "./chunk-HBKZ2DJK.js";
+} from "./chunk-TFTP7EUQ.js";
+import "./chunk-MUIA32LU.js";
+import "./chunk-D5C5N5Q4.js";
 import {
   DEFAULTS
-} from "./chunk-BSIGP5XF.js";
+} from "./chunk-54UT2JUQ.js";
 import "./chunk-NUBSJGQZ.js";
 import {
   capitalize,
@@ -238,11 +243,11 @@ import {
   getAvailableClis,
   isRecord,
   probeAllClis
-} from "./chunk-ZU2Q3DWE.js";
-import "./chunk-JXDDSNEK.js";
+} from "./chunk-EPZMFIAX.js";
+import "./chunk-7UM5XRGG.js";
 import "./chunk-ZM4O442V.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-AYZ6P7CK.js";
+import "./chunk-ALDKPBOZ.js";
 import {
   API_TIMEOUTS,
   AgentCapability,
@@ -310,7 +315,7 @@ import {
   validateTimeout,
   writeEmptyLine,
   writeLine
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-T4E6UFFC.js";
 import {
   applyPortableMode,
   detectSandbox,
@@ -3238,6 +3243,9 @@ function safeExecSandboxed(commandString, options = {}) {
     if (options.cwd !== void 0) {
       execOptions.cwd = options.cwd;
     }
+    if (options.stdin !== void 0) {
+      execOptions.input = options.stdin;
+    }
     const result = execSync(commandString, execOptions);
     return typeof result === "string" ? result.trim() : result.toString("utf-8").trim();
   } catch (error) {
@@ -5951,9 +5959,6 @@ function validateGitHubIssue(issueNumber) {
   });
   return output2 !== null;
 }
-function escapeForShell(text) {
-  return text.replace(/'/g, "'\\''");
-}
 function formatVoteComment(result) {
   const now = new Date(getTimeProvider().now()).toLocaleDateString("en-US", {
     timeZone: "America/New_York",
@@ -5990,11 +5995,10 @@ ${voteRows}
 }
 function recordVoteToGitHub(issueNumber, result) {
   const comment = formatVoteComment(result);
-  const escapedComment = escapeForShell(comment);
-  const output2 = safeExecSandboxed(
-    `gh issue comment ${String(issueNumber)} --body '${escapedComment}'`,
-    { context: "gh" }
-  );
+  const output2 = safeExecSandboxed(`gh issue comment ${String(issueNumber)} --body-file -`, {
+    context: "gh",
+    stdin: comment
+  });
   if (output2 !== null) {
     writeLine(
       `${colors.green}${symbols.check}${colors.reset} Vote recorded to issue #${String(issueNumber)}
@@ -6730,7 +6734,7 @@ function generateSprintTitle(duration) {
     month: "2-digit",
     day: "2-digit"
   });
-  return `sprint: ${dateStr} (${duration})`;
+  return `sprint: ${dateStr} - ${duration}`;
 }
 function formatIssueForBody(issue) {
   const effort = issue.estimatedEffort !== void 0 ? ` (${issue.estimatedEffort})` : "";
@@ -6812,10 +6816,9 @@ function generateProposal(issues, options) {
 function createSprintIssue(proposal) {
   try {
     const escapedTitle = proposal.title.replace(/'/g, "'\\''");
-    const escapedBody = proposal.body.replace(/'/g, "'\\''");
     const output2 = safeExecSandboxed(
-      `gh issue create --title '${escapedTitle}' --body '${escapedBody}' --label 'epic'`,
-      { context: "gh" }
+      `gh issue create --title '${escapedTitle}' --body-file - --label epic`,
+      { context: "gh", stdin: proposal.body }
     );
     if (output2 === null) {
       return null;
@@ -16890,7 +16893,45 @@ function buildStructuredOutput(result) {
   };
 }
 var RUN_DEV_PIPELINE_DESCRIPTION = "Run the multi-agent development pipeline. Accepts direct task instructions, a plan file, or a spec file. Supports dry-run (plan+vote only).";
-function registerDevPipelineTool(server, _deps) {
+async function runDevPipelineHandler(args, logger18) {
+  const parsed = DevPipelineInputSchema.safeParse(args);
+  if (!parsed.success) {
+    return toolStructuredError({
+      errorCategory: "validation",
+      message: `Invalid input: ${formatZodError(parsed.error)}`
+    });
+  }
+  const input = parsed.data;
+  if (input.simulateVotes) {
+    warnIfSimulatedOutsideTests("run_dev_pipeline", logger18);
+  }
+  try {
+    const taskText = await resolveTaskInput(input);
+    const stages = await createStages(input);
+    const pipelineOptions = {
+      ...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {},
+      ...input.dryRun ? { dryRun: true } : {},
+      ...input.mode === "harness" ? { mode: "harness" } : {}
+    };
+    const hasOptions = Object.keys(pipelineOptions).length > 0;
+    const result = await runDevPipeline(taskText, stages, hasOptions ? pipelineOptions : void 0);
+    flushPipelineMemory();
+    return toolSuccessStructured(buildStructuredOutput(result));
+  } catch (error) {
+    return toolStructuredError({
+      errorCategory: "internal",
+      message: `Pipeline error: ${getErrorMessage(error)}`
+    });
+  }
+}
+function registerDevPipelineTool(server, deps) {
+  const logger18 = deps.logger ?? createLogger({ tool: "run_dev_pipeline" });
+  const secureHandler = createSecureHandler(
+    (args) => runDevPipelineHandler(args, logger18),
+    { toolName: "run_dev_pipeline", rateLimiter: deps.rateLimiter, logger: logger18 }
+  );
+  const timeoutMs = getToolTimeout("run_dev_pipeline", deps.security);
+  const wrapped = wrapToolWithTimeout("run_dev_pipeline", secureHandler, { timeoutMs, logger: logger18 });
   server.registerTool(
     "run_dev_pipeline",
     {
@@ -16898,41 +16939,9 @@ function registerDevPipelineTool(server, _deps) {
       inputSchema: DevPipelineInputSchema.shape,
       annotations: getToolAnnotations("run_dev_pipeline")
     },
-    async (args) => {
-      const input = DevPipelineInputSchema.parse(args);
-      if (input.simulateVotes) {
-        warnIfSimulatedOutsideTests("run_dev_pipeline", createLogger({ tool: "run_dev_pipeline" }));
-      }
-      try {
-        const taskText = await resolveTaskInput(input);
-        const stages = await createStages(input);
-        const pipelineOptions = {
-          ...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {},
-          ...input.dryRun ? { dryRun: true } : {},
-          ...input.mode === "harness" ? { mode: "harness" } : {}
-        };
-        const hasOptions = Object.keys(pipelineOptions).length > 0;
-        const result = await runDevPipeline(
-          taskText,
-          stages,
-          hasOptions ? pipelineOptions : void 0
-        );
-        flushPipelineMemory();
-        const structured = buildStructuredOutput(result);
-        return {
-          content: [{ type: "text", text: JSON.stringify(structured, null, 2) }],
-          structuredContent: structured
-        };
-      } catch (error) {
-        return {
-          ...toolStructuredError({
-            errorCategory: "internal",
-            message: `Pipeline error: ${getErrorMessage(error)}`
-          })
-        };
-      }
-    }
+    toSdkCallback(wrapped)
   );
+  logger18.info("Registered run_dev_pipeline tool");
 }
 
 // src/cli-server-stpa.ts
@@ -18957,7 +18966,7 @@ function adaptConfigToLibrary(config) {
 }
 function createBeliefPromoter() {
   return async (event) => {
-    const { getToolMemory } = await import("./tool-memory-COZK6SR7.js");
+    const { getToolMemory } = await import("./tool-memory-LUXUOE6Q.js");
     const tm = getToolMemory();
     await tm.recordBelief(
       `skill:${event.name}`,
@@ -19817,7 +19826,7 @@ async function handleResearchCommand(args) {
   }
 }
 async function handleRegistryCommand(args) {
-  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-NZLX7ZFV.js");
+  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-YMZPSW7S.js");
   const subcommand = args.subcommand;
   if (!isValidRegistrySubcommand(subcommand)) {
     process.stdout.write(`${formatRegistryUsage()}
@@ -19865,7 +19874,7 @@ async function handleVerifyCommand(args) {
 async function handleDoctorCommand(args) {
   const exitCode = await doctorCommand({ fix: args.options.fix });
   if (args.options.deep) {
-    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-OF2LXZ6A.js");
+    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-ZMBSG2DF.js");
     const diag = runDeepDiagnostics2();
     process.stdout.write(formatDeepDiagnostics2(diag) + "\n");
   }
@@ -19909,7 +19918,7 @@ async function handleInitCommand(args) {
   process.exit(result.success ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runInitOpencodeFlow(args) {
-  const { runInitOpencode } = await import("./init-opencode-FE7HVWQL.js");
+  const { runInitOpencode } = await import("./init-opencode-WFL4OXMB.js");
   const opencodePath = args.options.opencode;
   if (opencodePath === void 0 || opencodePath === "") {
     process.stderr.write("Error: --opencode requires a path argument.\n");
@@ -19936,7 +19945,7 @@ async function runInitOpencodeFlow(args) {
   process.exit(EXIT_CODES.SUCCESS);
 }
 async function renderOpencodeValidate(opencodePath) {
-  const { runOpencodeValidate } = await import("./init-opencode-FE7HVWQL.js");
+  const { runOpencodeValidate } = await import("./init-opencode-WFL4OXMB.js");
   const result = await runOpencodeValidate(opencodePath);
   if (!result.ok) {
     process.stderr.write(`init --opencode --validate: ${result.reason ?? "failed"}
@@ -19976,7 +19985,7 @@ async function handleSetupCommandAsync(args) {
   process.exit(exitCode === 0 ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runCustomApiSetup(args) {
-  const { configureCustomApi } = await import("./setup-custom-api-XTJ6YZM6.js");
+  const { configureCustomApi } = await import("./setup-custom-api-4EYRKCHB.js");
   const baseUrl = args.options.customApi;
   if (baseUrl === void 0) return EXIT_CODES.SERVER_START_FAILED;
   const input = {