nexus-agents 2.80.0 → 2.80.2

package/dist/{chunk-HBKZ2DJK.js → chunk-RCWWUZHA.js}

@@ -1,6 +1,6 @@
 import {
   createLogger
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-4MHE5UVO.js";
 
 // src/config/available-models-cache.ts
 var logger = createLogger({ component: "available-models-cache" });
@@ -150,4 +150,4 @@ export {
   getDefaultAvailableModelsCache,
   setDefaultAvailableModelsCache
 };
-//# sourceMappingURL=chunk-HBKZ2DJK.js.map
+//# sourceMappingURL=chunk-RCWWUZHA.js.map

package/dist/{chunk-SJUSQGKH.js → chunk-RFUBLOZQ.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULTS
-} from "./chunk-BSIGP5XF.js";
+} from "./chunk-HDFUSBU3.js";
 import {
   resolveInsideRoot
 } from "./chunk-NUBSJGQZ.js";
@@ -10,7 +10,7 @@ import {
 import {
   createAllAdapters,
   probeCli
-} from "./chunk-ZU2Q3DWE.js";
+} from "./chunk-5FUVEIJC.js";
 import {
   CliNameSchema,
   DEFAULT_CAPABILITIES,
@@ -26,7 +26,7 @@ import {
   ok,
   symbols,
   writeLine
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-4MHE5UVO.js";
 import {
   detectSandbox,
   getLearningDir,
@@ -40,7 +40,7 @@ import {
 } from "./chunk-2JQXC3CK.js";
 
 // src/version.ts
-var VERSION = true ? "2.80.0" : "dev";
+var VERSION = true ? "2.80.2" : "dev";
 
 // src/config/schemas-core.ts
 import { z } from "zod";
@@ -2107,7 +2107,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { runSetup } = await import("./setup-command-ZPLPOJF2.js");
+    const { runSetup } = await import("./setup-command-VJLR47CI.js");
     const setupResult = runSetup({
       skipMcp: true,
       skipRules: true,
@@ -2121,7 +2121,7 @@ async function runDoctorFix(result) {
     }
   }
   if (!result.configFile.found) {
-    const { runConfigInitSync } = await import("./setup-config-F7VRWXY3.js");
+    const { runConfigInitSync } = await import("./setup-config-F7NK2KVC.js");
     const configResult = runConfigInitSync(process.cwd(), false, false);
     if (configResult.success && configResult.created) {
       writeLine2(`\u2713 Generated config: ${configResult.path}`);
@@ -2219,4 +2219,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-SJUSQGKH.js.map
+//# sourceMappingURL=chunk-RFUBLOZQ.js.map

package/dist/{chunk-RIUUFBX4.js → chunk-TE26NHNW.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-4MHE5UVO.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -721,4 +721,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-RIUUFBX4.js.map
+//# sourceMappingURL=chunk-TE26NHNW.js.map

package/dist/{chunk-Q2U6SFN2.js → chunk-TLE2YE6G.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_MODEL_PER_CLI,
   getTimeProvider
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-4MHE5UVO.js";
 
 // src/config/model-availability.ts
 var DEFAULT_TTL_MS = 6e4;
@@ -133,4 +133,4 @@ export {
   resetAvailabilityCache,
   filterAvailableModels
 };
-//# sourceMappingURL=chunk-Q2U6SFN2.js.map
+//# sourceMappingURL=chunk-TLE2YE6G.js.map

package/dist/{chunk-4XGKCVJL.js → chunk-VQBVL3UD.js}

@@ -2,7 +2,7 @@ import {
   TASK_CATEGORIES,
   getAdaptiveBonus,
   getOutcomeStore
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-4MHE5UVO.js";
 
 // src/cli/doctor-deep.ts
 var CLI_NAMES = ["claude", "gemini", "codex", "opencode"];
@@ -106,4 +106,4 @@ export {
   runDeepDiagnostics,
   formatDeepDiagnostics
 };
-//# sourceMappingURL=chunk-4XGKCVJL.js.map
+//# sourceMappingURL=chunk-VQBVL3UD.js.map

package/dist/{cli-circuit-breaker-JGX54DAD.js → cli-circuit-breaker-MAN2V7DA.js}

@@ -1,13 +1,13 @@
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-J5XEJHIQ.js";
-import "./chunk-JXDDSNEK.js";
-import "./chunk-YMT6H2HQ.js";
+} from "./chunk-FQKQUJBU.js";
+import "./chunk-JECCDZ2S.js";
+import "./chunk-4MHE5UVO.js";
 import "./chunk-2JQXC3CK.js";
-import "./chunk-UP2VWCW5.js";
+import "./chunk-PR4QN5HX.js";
 export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=cli-circuit-breaker-JGX54DAD.js.map
+//# sourceMappingURL=cli-circuit-breaker-MAN2V7DA.js.map

package/dist/cli.js

@@ -12,18 +12,18 @@ import {
   parseFindings,
   sumFindings
 } from "./chunk-3RZWLQSC.js";
-import "./chunk-4XGKCVJL.js";
+import "./chunk-VQBVL3UD.js";
 import {
   buildOpenAICompatAdapters,
   loadUsageEvents,
   readOpenAICompatEnv,
   rollupByModel
-} from "./chunk-EVZ7YR7H.js";
+} from "./chunk-2ZRTLW2G.js";
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-UGXR4PAY.js";
-import "./chunk-2DBPZQLO.js";
+} from "./chunk-7BSVRW2O.js";
+import "./chunk-LUVQUKW5.js";
 import {
   AuthHandler,
   DEFAULT_EXPERTS,
@@ -153,56 +153,61 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-GNRANMQ3.js";
+} from "./chunk-RCNNN4E2.js";
 import "./chunk-AP2FD37C.js";
 import "./chunk-ED6VQWNG.js";
 import {
   resolveToken
-} from "./chunk-CTSESEFA.js";
+} from "./chunk-BQ55PBN4.js";
 import {
   CATEGORY_DISPLAY_NAMES,
   DEFAULT_PR_REVIEW_CONFIG
 } from "./chunk-X2M7OF27.js";
-import "./chunk-FAJAWO42.js";
-import "./chunk-J5XEJHIQ.js";
-import "./chunk-VS4KB3AX.js";
+import "./chunk-HXXRFTKP.js";
+import "./chunk-FQKQUJBU.js";
+import "./chunk-376MBRLD.js";
 import {
   DEFAULT_VOTE_TIMEOUT_MS,
   ErrorPolicySchema,
   VOTER_ROLES,
   VoteThresholdSchema,
   createDefaultPolicyFirewall,
+  createSecureHandler,
   createUnifiedRegistry,
   executeVoting,
   getToolAnnotations,
+  getToolTimeout,
   registerConsensusVoteTool,
+  toSdkCallback,
   toolStructuredError,
-  warnIfSimulatedOutsideTests
-} from "./chunk-6CJIKX6I.js";
-import "./chunk-JLWKHYIU.js";
-import "./chunk-YGKPWUJ6.js";
+  toolSuccessStructured,
+  warnIfSimulatedOutsideTests,
+  wrapToolWithTimeout
+} from "./chunk-3QRO77LO.js";
+import "./chunk-GHWTMPPL.js";
+import "./chunk-HYNFZQU4.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   savePapersRegistry,
   synthesizeResearch
-} from "./chunk-FJHZW7CR.js";
+} from "./chunk-H4XSKDI6.js";
 import {
   classifyTrust,
   createFullGitHubProvider,
   evaluatePolicy,
   parsePRUrl,
   sanitizeInput
-} from "./chunk-QVHXEQFM.js";
-import "./chunk-UVALD724.js";
-import "./chunk-RIUUFBX4.js";
+} from "./chunk-OO662XRQ.js";
+import "./chunk-HQR27JGL.js";
+import "./chunk-TE26NHNW.js";
 import "./chunk-7J7PNOJQ.js";
 import "./chunk-BQ4YXGGQ.js";
-import "./chunk-SHVGZK4A.js";
+import "./chunk-C3BOZZQC.js";
 import {
   MemoryError,
   shutdownToolMemory
-} from "./chunk-OO6MTUDS.js";
+} from "./chunk-KN7JWET4.js";
 import {
   CustomExpertDefinitionSchema,
   DATA_SUBDIRECTORIES,
@@ -221,12 +226,12 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-SJUSQGKH.js";
-import "./chunk-Q2U6SFN2.js";
-import "./chunk-HBKZ2DJK.js";
+} from "./chunk-RFUBLOZQ.js";
+import "./chunk-TLE2YE6G.js";
+import "./chunk-RCWWUZHA.js";
 import {
   DEFAULTS
-} from "./chunk-BSIGP5XF.js";
+} from "./chunk-HDFUSBU3.js";
 import "./chunk-NUBSJGQZ.js";
 import {
   capitalize,
@@ -238,11 +243,11 @@ import {
   getAvailableClis,
   isRecord,
   probeAllClis
-} from "./chunk-ZU2Q3DWE.js";
-import "./chunk-JXDDSNEK.js";
+} from "./chunk-5FUVEIJC.js";
+import "./chunk-JECCDZ2S.js";
 import "./chunk-ZM4O442V.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-AYZ6P7CK.js";
+import "./chunk-FBW6XKZJ.js";
 import {
   API_TIMEOUTS,
   AgentCapability,
@@ -310,7 +315,7 @@ import {
   validateTimeout,
   writeEmptyLine,
   writeLine
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-4MHE5UVO.js";
 import {
   applyPortableMode,
   detectSandbox,
@@ -319,7 +324,7 @@ import {
   getPerRepoSubdirs,
   nexusDataPath
 } from "./chunk-2JQXC3CK.js";
-import "./chunk-UP2VWCW5.js";
+import "./chunk-PR4QN5HX.js";
 
 // src/cli/cli-log-bootstrap.ts
 import { argv, env } from "process";
@@ -3078,7 +3083,7 @@ ${file.patch}
         violations: policyResult.violations
       });
     }
-    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-L4L324FQ.js");
+    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-WYPUYQ2U.js");
     const body = formatReviewComment2(result);
     const postResult = await provider.createReview(pr.prNumber, body, result.decision);
     if (!postResult.ok) {
@@ -3238,6 +3243,9 @@ function safeExecSandboxed(commandString, options = {}) {
     if (options.cwd !== void 0) {
       execOptions.cwd = options.cwd;
     }
+    if (options.stdin !== void 0) {
+      execOptions.input = options.stdin;
+    }
     const result = execSync(commandString, execOptions);
     return typeof result === "string" ? result.trim() : result.toString("utf-8").trim();
   } catch (error) {
@@ -5951,9 +5959,6 @@ function validateGitHubIssue(issueNumber) {
   });
   return output2 !== null;
 }
-function escapeForShell(text) {
-  return text.replace(/'/g, "'\\''");
-}
 function formatVoteComment(result) {
   const now = new Date(getTimeProvider().now()).toLocaleDateString("en-US", {
     timeZone: "America/New_York",
@@ -5990,11 +5995,10 @@ ${voteRows}
 }
 function recordVoteToGitHub(issueNumber, result) {
   const comment = formatVoteComment(result);
-  const escapedComment = escapeForShell(comment);
-  const output2 = safeExecSandboxed(
-    `gh issue comment ${String(issueNumber)} --body '${escapedComment}'`,
-    { context: "gh" }
-  );
+  const output2 = safeExecSandboxed(`gh issue comment ${String(issueNumber)} --body-file -`, {
+    context: "gh",
+    stdin: comment
+  });
   if (output2 !== null) {
     writeLine(
       `${colors.green}${symbols.check}${colors.reset} Vote recorded to issue #${String(issueNumber)}
@@ -6730,7 +6734,7 @@ function generateSprintTitle(duration) {
     month: "2-digit",
     day: "2-digit"
   });
-  return `sprint: ${dateStr} (${duration})`;
+  return `sprint: ${dateStr} - ${duration}`;
 }
 function formatIssueForBody(issue) {
   const effort = issue.estimatedEffort !== void 0 ? ` (${issue.estimatedEffort})` : "";
@@ -6812,10 +6816,9 @@ function generateProposal(issues, options) {
 function createSprintIssue(proposal) {
   try {
     const escapedTitle = proposal.title.replace(/'/g, "'\\''");
-    const escapedBody = proposal.body.replace(/'/g, "'\\''");
     const output2 = safeExecSandboxed(
-      `gh issue create --title '${escapedTitle}' --body '${escapedBody}' --label 'epic'`,
-      { context: "gh" }
+      `gh issue create --title '${escapedTitle}' --body-file - --label epic`,
+      { context: "gh", stdin: proposal.body }
     );
     if (output2 === null) {
       return null;
@@ -14352,7 +14355,7 @@ function getBlueskyConfig() {
 }
 async function loadAtproto() {
   try {
-    const mod = await import("./dist-RLMRWMYO.js");
+    const mod = await import("./dist-APHOQ26Z.js");
     return { AtpAgent: mod.AtpAgent, RichText: mod.RichText };
   } catch {
     return void 0;
@@ -16890,7 +16893,45 @@ function buildStructuredOutput(result) {
   };
 }
 var RUN_DEV_PIPELINE_DESCRIPTION = "Run the multi-agent development pipeline. Accepts direct task instructions, a plan file, or a spec file. Supports dry-run (plan+vote only).";
-function registerDevPipelineTool(server, _deps) {
+async function runDevPipelineHandler(args, logger18) {
+  const parsed = DevPipelineInputSchema.safeParse(args);
+  if (!parsed.success) {
+    return toolStructuredError({
+      errorCategory: "validation",
+      message: `Invalid input: ${formatZodError(parsed.error)}`
+    });
+  }
+  const input = parsed.data;
+  if (input.simulateVotes) {
+    warnIfSimulatedOutsideTests("run_dev_pipeline", logger18);
+  }
+  try {
+    const taskText = await resolveTaskInput(input);
+    const stages = await createStages(input);
+    const pipelineOptions = {
+      ...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {},
+      ...input.dryRun ? { dryRun: true } : {},
+      ...input.mode === "harness" ? { mode: "harness" } : {}
+    };
+    const hasOptions = Object.keys(pipelineOptions).length > 0;
+    const result = await runDevPipeline(taskText, stages, hasOptions ? pipelineOptions : void 0);
+    flushPipelineMemory();
+    return toolSuccessStructured(buildStructuredOutput(result));
+  } catch (error) {
+    return toolStructuredError({
+      errorCategory: "internal",
+      message: `Pipeline error: ${getErrorMessage(error)}`
+    });
+  }
+}
+function registerDevPipelineTool(server, deps) {
+  const logger18 = deps.logger ?? createLogger({ tool: "run_dev_pipeline" });
+  const secureHandler = createSecureHandler(
+    (args) => runDevPipelineHandler(args, logger18),
+    { toolName: "run_dev_pipeline", rateLimiter: deps.rateLimiter, logger: logger18 }
+  );
+  const timeoutMs = getToolTimeout("run_dev_pipeline", deps.security);
+  const wrapped = wrapToolWithTimeout("run_dev_pipeline", secureHandler, { timeoutMs, logger: logger18 });
   server.registerTool(
     "run_dev_pipeline",
     {
@@ -16898,41 +16939,9 @@ function registerDevPipelineTool(server, _deps) {
       inputSchema: DevPipelineInputSchema.shape,
       annotations: getToolAnnotations("run_dev_pipeline")
     },
-    async (args) => {
-      const input = DevPipelineInputSchema.parse(args);
-      if (input.simulateVotes) {
-        warnIfSimulatedOutsideTests("run_dev_pipeline", createLogger({ tool: "run_dev_pipeline" }));
-      }
-      try {
-        const taskText = await resolveTaskInput(input);
-        const stages = await createStages(input);
-        const pipelineOptions = {
-          ...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {},
-          ...input.dryRun ? { dryRun: true } : {},
-          ...input.mode === "harness" ? { mode: "harness" } : {}
-        };
-        const hasOptions = Object.keys(pipelineOptions).length > 0;
-        const result = await runDevPipeline(
-          taskText,
-          stages,
-          hasOptions ? pipelineOptions : void 0
-        );
-        flushPipelineMemory();
-        const structured = buildStructuredOutput(result);
-        return {
-          content: [{ type: "text", text: JSON.stringify(structured, null, 2) }],
-          structuredContent: structured
-        };
-      } catch (error) {
-        return {
-          ...toolStructuredError({
-            errorCategory: "internal",
-            message: `Pipeline error: ${getErrorMessage(error)}`
-          })
-        };
-      }
-    }
+    toSdkCallback(wrapped)
   );
+  logger18.info("Registered run_dev_pipeline tool");
 }
 
 // src/cli-server-stpa.ts
@@ -18957,7 +18966,7 @@ function adaptConfigToLibrary(config) {
 }
 function createBeliefPromoter() {
   return async (event) => {
-    const { getToolMemory } = await import("./tool-memory-COZK6SR7.js");
+    const { getToolMemory } = await import("./tool-memory-RZ7NJCPV.js");
     const tm = getToolMemory();
     await tm.recordBelief(
       `skill:${event.name}`,
@@ -19817,7 +19826,7 @@ async function handleResearchCommand(args) {
   }
 }
 async function handleRegistryCommand(args) {
-  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-NZLX7ZFV.js");
+  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-AKJBYP5N.js");
   const subcommand = args.subcommand;
   if (!isValidRegistrySubcommand(subcommand)) {
     process.stdout.write(`${formatRegistryUsage()}
@@ -19865,7 +19874,7 @@ async function handleVerifyCommand(args) {
 async function handleDoctorCommand(args) {
   const exitCode = await doctorCommand({ fix: args.options.fix });
   if (args.options.deep) {
-    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-OF2LXZ6A.js");
+    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-2KT4LZA6.js");
     const diag = runDeepDiagnostics2();
     process.stdout.write(formatDeepDiagnostics2(diag) + "\n");
   }
@@ -19909,7 +19918,7 @@ async function handleInitCommand(args) {
   process.exit(result.success ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runInitOpencodeFlow(args) {
-  const { runInitOpencode } = await import("./init-opencode-FE7HVWQL.js");
+  const { runInitOpencode } = await import("./init-opencode-26YCTSR4.js");
   const opencodePath = args.options.opencode;
   if (opencodePath === void 0 || opencodePath === "") {
     process.stderr.write("Error: --opencode requires a path argument.\n");
@@ -19936,7 +19945,7 @@ async function runInitOpencodeFlow(args) {
   process.exit(EXIT_CODES.SUCCESS);
 }
 async function renderOpencodeValidate(opencodePath) {
-  const { runOpencodeValidate } = await import("./init-opencode-FE7HVWQL.js");
+  const { runOpencodeValidate } = await import("./init-opencode-26YCTSR4.js");
   const result = await runOpencodeValidate(opencodePath);
   if (!result.ok) {
     process.stderr.write(`init --opencode --validate: ${result.reason ?? "failed"}
@@ -19976,7 +19985,7 @@ async function handleSetupCommandAsync(args) {
   process.exit(exitCode === 0 ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runCustomApiSetup(args) {
-  const { configureCustomApi } = await import("./setup-custom-api-XTJ6YZM6.js");
+  const { configureCustomApi } = await import("./setup-custom-api-53SYDF4L.js");
   const baseUrl = args.options.customApi;
   if (baseUrl === void 0) return EXIT_CODES.SERVER_START_FAILED;
   const input = {