nexus-agents 2.80.0 → 2.80.2

package/dist/{dist-NIXVXYIH.js → dist-OFXI4GYH.js}

@@ -18,7 +18,7 @@ import {
   setMemoryRegistry,
   subscribeToMemoryEvents
 } from "./chunk-PQHVC4BD.js";
-import "./chunk-UP2VWCW5.js";
+import "./chunk-PR4QN5HX.js";
 export {
   InMemoryBackend,
   MemoryRegistry,
@@ -39,4 +39,4 @@ export {
   setMemoryRegistry,
   subscribeToMemoryEvents
 };
-//# sourceMappingURL=dist-NIXVXYIH.js.map
+//# sourceMappingURL=dist-OFXI4GYH.js.map

package/dist/{doctor-deep-OF2LXZ6A.js → doctor-deep-2KT4LZA6.js}

@@ -1,12 +1,12 @@
 import {
   formatDeepDiagnostics,
   runDeepDiagnostics
-} from "./chunk-4XGKCVJL.js";
-import "./chunk-YMT6H2HQ.js";
+} from "./chunk-VQBVL3UD.js";
+import "./chunk-4MHE5UVO.js";
 import "./chunk-2JQXC3CK.js";
-import "./chunk-UP2VWCW5.js";
+import "./chunk-PR4QN5HX.js";
 export {
   formatDeepDiagnostics,
   runDeepDiagnostics
 };
-//# sourceMappingURL=doctor-deep-OF2LXZ6A.js.map
+//# sourceMappingURL=doctor-deep-2KT4LZA6.js.map

package/dist/expert-bridge-6NA7MK7T.js

@@ -0,0 +1,11 @@
+import {
+  executeExpert
+} from "./chunk-376MBRLD.js";
+import "./chunk-TLE2YE6G.js";
+import "./chunk-4MHE5UVO.js";
+import "./chunk-2JQXC3CK.js";
+import "./chunk-PR4QN5HX.js";
+export {
+  executeExpert
+};
+//# sourceMappingURL=expert-bridge-6NA7MK7T.js.map

package/dist/{expert-config-HN7U7X2K.js → expert-config-OIIUMJFB.js}

@@ -8,7 +8,7 @@ import {
   safeValidateExpertConfig,
   validateExpertConfig
 } from "./chunk-ZM4O442V.js";
-import "./chunk-UP2VWCW5.js";
+import "./chunk-PR4QN5HX.js";
 export {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -19,4 +19,4 @@ export {
   safeValidateExpertConfig,
   validateExpertConfig
 };
-//# sourceMappingURL=expert-config-HN7U7X2K.js.map
+//# sourceMappingURL=expert-config-OIIUMJFB.js.map

package/dist/factory-IIPDY7QB.js

@@ -0,0 +1,14 @@
+import {
+  createGitHubProvider,
+  createScmProvider
+} from "./chunk-5SBD55T7.js";
+import "./chunk-BQ55PBN4.js";
+import "./chunk-HQR27JGL.js";
+import "./chunk-4MHE5UVO.js";
+import "./chunk-2JQXC3CK.js";
+import "./chunk-PR4QN5HX.js";
+export {
+  createGitHubProvider,
+  createScmProvider
+};
+//# sourceMappingURL=factory-IIPDY7QB.js.map

package/dist/{factory-I54TX7OY.js → factory-VXHVQXKR.js}

@@ -3,15 +3,15 @@ import {
   createCliAdapter,
   getAvailableClis,
   isCliAvailable
-} from "./chunk-ZU2Q3DWE.js";
-import "./chunk-JXDDSNEK.js";
-import "./chunk-YMT6H2HQ.js";
+} from "./chunk-5FUVEIJC.js";
+import "./chunk-JECCDZ2S.js";
+import "./chunk-4MHE5UVO.js";
 import "./chunk-2JQXC3CK.js";
-import "./chunk-UP2VWCW5.js";
+import "./chunk-PR4QN5HX.js";
 export {
   createAllAdapters,
   createCliAdapter,
   getAvailableClis,
   isCliAvailable
 };
-//# sourceMappingURL=factory-I54TX7OY.js.map
+//# sourceMappingURL=factory-VXHVQXKR.js.map

package/dist/index.d.ts

@@ -13978,6 +13978,14 @@ declare class AgenticAdapter implements IAgenticAdapter {
      * to record everything and let the next turn be the budget breaker).
      */
     private processToolCallsParallel;
+    /**
+     * Records one settled parallel-tool outcome into history. Mutates
+     * `state.turns` / `toolResultBlocks` in place and returns `true` when
+     * the outcome signals a tool error (the caller stops *after* draining
+     * every outcome — #2864). Extracted from `processToolCallsParallel`
+     * to keep that method's cyclomatic complexity under the gate.
+     */
+    private drainParallelOutcome;
     /**
      * Per-call wrapper used by parallel execution. Returns a captured
      * outcome (turn + result-block, OR turn + tool-error flag) without
@@ -21620,6 +21628,13 @@ interface ProposalState {
     timeoutId?: ReturnType<typeof setTimeout>;
     /** Number of incremental quorum expansions applied (Issue #1408). */
     expansionRounds?: number;
+    /**
+     * True while a quorum expansion is awaiting its callback for this
+     * proposal. Concurrent `vote()` calls check this to avoid double-
+     * expanding across the `await` gap (Issue #2861). Per-proposal so
+     * independent proposals never block each other.
+     */
+    expansionInFlight?: boolean;
 }
 /**
  * Consensus metrics for monitoring.
@@ -24834,6 +24849,14 @@ declare abstract class BaseCliAdapter implements ICliAdapter {
      * Computes effective timeout for a task.
      */
     private computeTimeout;
+    /**
+     * Whether the shared outer retry loop ({@link executeCliRetryLoop}) is
+     * allowed to retry this adapter's failures. The base adapter honors the
+     * caller's `allowRetry`. Subprocess adapters override this to suppress
+     * the outer loop when their own transient-retry layer is active, so the
+     * two layers do not nest into multiplied spawns (#2824).
+     */
+    protected shouldOuterRetry(opts: Required<ExecutionOptions$1>): boolean;
     /**
      * Executes task with retry logic via shared retry loop.
      */
@@ -24984,6 +25007,16 @@ declare abstract class SubprocessCliAdapter extends BaseCliAdapter {
     protected abstract readonly parser: ICliResponseParser;
     /** Transient-error retry config. Override in subclass to enable. */
     protected readonly transientRetry: TransientRetryConfig;
+    /**
+     * The inner {@link retryTransient} layer is the single retry authority
+     * for subprocess CLIs. When it is enabled (the default), the shared
+     * outer retry loop must not also retry: nesting both meant up to 6
+     * subprocess spawns and ~10-minute hangs on a persistent TIMEOUT, since
+     * the inner layer's timeout extension compounds on every outer attempt
+     * (#2824). The outer loop still runs once, so circuit-breaker failure
+     * recording is unaffected.
+     */
+    protected shouldOuterRetry(opts: Required<ExecutionOptions$1>): boolean;
     /**
      * Gets CLI command and arguments for execution.
      * If stdin is provided, it will be written to the process stdin.
@@ -28401,6 +28434,15 @@ declare function createOrchestratorFactory(config?: OrchestratorFactoryConfig):
  *
  * Analyzes task characteristics and selects the optimal orchestration
  * pattern using a rule-based classification system.
+ *
+ * Scope of `recordOutcome` / `getMetrics` (#2824): the recorded
+ * `PatternOutcome`s live in a buffer owned by this router instance.
+ * `route()` is a deterministic, rule-based classifier — it does NOT
+ * consume recorded outcomes, so there is no per-instance learning to
+ * "lose", and nothing to aggregate across processes. The pair is an
+ * observability surface only. If cross-process pattern metrics are
+ * ever needed, add a dedicated consumer that writes to a shared
+ * `OutcomeStore` rather than widening this router's responsibility.
  */
 declare function createWorkflowRouter(options?: {
     readonly logger?: ILogger | undefined;
@@ -28410,9 +28452,12 @@ declare function createWorkflowRouter(options?: {
 interface IWorkflowRouter {
     /** Routes a task to the optimal workflow pattern. */
     route(signals: TaskSignals, options?: WorkflowRouterOptions): RoutingDecision$1;
-    /** Records an execution outcome for performance tracking. */
+    /**
+     * Records an execution outcome into this router instance's buffer.
+     * Observability only — `route()` never reads it back (#2824).
+     */
     recordOutcome(outcome: PatternOutcome): void;
-    /** Gets aggregated metrics, optionally filtered by pattern. */
+    /** Aggregates this instance's recorded outcomes, optionally filtered by pattern. */
     getMetrics(pattern?: WorkflowPattern): readonly PatternMetrics[];
 }
 
@@ -30828,7 +30873,7 @@ declare class EventBus implements IEventBus {
 /**
  * ArtifactStore — V2 Pipeline Artifact Storage (Issue #912, Phase 4-3)
  *
- * In-memory artifact store with bounded capacity and LRU eviction.
+ * In-memory artifact store with bounded capacity and FIFO eviction.
  * Tracks provenance chains for artifact traceability.
  *
  * @see docs/v2/08-observability-eventing.md
@@ -30873,8 +30918,15 @@ interface ArtifactStoreOptions {
 /**
  * In-memory artifact store with bounded capacity.
  *
- * When the store exceeds maxArtifacts, the oldest artifacts
- * are evicted (FIFO). Content size is validated on put().
+ * When the store exceeds maxArtifacts, the oldest artifacts are evicted
+ * (FIFO — insertion order, never reordered on `get()`). Content size is
+ * validated on put().
+ *
+ * This is a bounded in-memory working cache, NOT the durable audit
+ * substrate (#2867): once `maxArtifacts` is reached, old artifacts and
+ * their provenance are dropped. For tamper-evident, retained audit
+ * history use the on-disk Merkle audit log via the `verify_audit_chain`
+ * MCP tool.
  */
 declare class ArtifactStore implements IArtifactStore {
     private readonly artifacts;
@@ -30886,6 +30938,17 @@ declare class ArtifactStore implements IArtifactStore {
     put(artifact: Artifact): ArtifactRef;
     get(ref: ArtifactRef): Artifact | undefined;
     query(filter: ArtifactFilter): readonly ArtifactRef[];
+    /**
+     * Returns the full provenance chain for an artifact — the artifact
+     * itself plus every ancestor transitively reachable via `inputRefs`
+     * (#2867). Iterative DFS; the `visited` set makes it safe against
+     * cycles and diamond/multi-parent DAGs (each artifact appears once).
+     *
+     * Entries are in reachability (start-node-first DFS) order, not
+     * topological order. An ancestor that has been FIFO-evicted from the
+     * store is silently skipped — the chain truncates there rather than
+     * throwing. A missing root returns `[]`.
+     */
     provenance(ref: ArtifactRef): readonly ProvenanceEntry[];
     private validateContentSize;
     private evictIfNeeded;

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-EKRMWVAH.js";
+} from "./chunk-5SBD55T7.js";
 import {
   ALLOWED_COMMANDS,
   ARTIFACT_TYPES,
@@ -518,7 +518,7 @@ import {
   validateWorkflow,
   validateWorkflowDependencies,
   withLogging
-} from "./chunk-GNRANMQ3.js";
+} from "./chunk-RCNNN4E2.js";
 import "./chunk-AP2FD37C.js";
 import {
   SharedMemoryStore
@@ -527,21 +527,21 @@ import {
   getTokenEnvVars,
   hasToken,
   resolveToken
-} from "./chunk-CTSESEFA.js";
+} from "./chunk-BQ55PBN4.js";
 import "./chunk-X2M7OF27.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
   OpenAIAdapter,
   createOpenAIAdapter
-} from "./chunk-FAJAWO42.js";
+} from "./chunk-HXXRFTKP.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-J5XEJHIQ.js";
+} from "./chunk-FQKQUJBU.js";
 import {
   executeExpert
-} from "./chunk-VS4KB3AX.js";
+} from "./chunk-376MBRLD.js";
 import {
   AgentFindingSchema,
   AgentPerformanceSchema,
@@ -637,10 +637,10 @@ import {
   validateToolInput,
   withModelNotFoundFallback,
   wrapResilientWithFallback
-} from "./chunk-6CJIKX6I.js";
+} from "./chunk-3QRO77LO.js";
 import {
   PROVIDER_ENV_KEYS
-} from "./chunk-JLWKHYIU.js";
+} from "./chunk-GHWTMPPL.js";
 import {
   AdapterModelError,
   BaseAdapter,
@@ -664,8 +664,8 @@ import {
   transformStream,
   validateApiKeyPresence,
   withTimeout
-} from "./chunk-YGKPWUJ6.js";
-import "./chunk-FJHZW7CR.js";
+} from "./chunk-HYNFZQU4.js";
+import "./chunk-H4XSKDI6.js";
 import {
   AgentActionSchema,
   GitHubReviewer,
@@ -698,11 +698,11 @@ import {
   sanitizeInput,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-QVHXEQFM.js";
+} from "./chunk-OO662XRQ.js";
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-UVALD724.js";
+} from "./chunk-HQR27JGL.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -710,7 +710,7 @@ import {
   generateSecurityPlan,
   getRegistryManifest,
   resolveScannerData
-} from "./chunk-RIUUFBX4.js";
+} from "./chunk-TE26NHNW.js";
 import {
   analyzeGitHubRepo,
   analyzeRepo,
@@ -720,10 +720,10 @@ import "./chunk-BQ4YXGGQ.js";
 import {
   PersistentStrategyDistiller,
   RulesSnapshotSchema
-} from "./chunk-SHVGZK4A.js";
+} from "./chunk-C3BOZZQC.js";
 import {
   MemoryError
-} from "./chunk-OO6MTUDS.js";
+} from "./chunk-KN7JWET4.js";
 import {
   AppConfigSchema,
   ExpertConfigSchema,
@@ -742,7 +742,7 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-SJUSQGKH.js";
+} from "./chunk-RFUBLOZQ.js";
 import {
   AvailabilityCache,
   filterAvailableModels,
@@ -751,15 +751,15 @@ import {
   getFallbackChain,
   resetAvailabilityCache,
   resolveFallback
-} from "./chunk-Q2U6SFN2.js";
+} from "./chunk-TLE2YE6G.js";
 import {
   AvailableModelsCache,
   getDefaultAvailableModelsCache,
   setDefaultAvailableModelsCache
-} from "./chunk-HBKZ2DJK.js";
+} from "./chunk-RCWWUZHA.js";
 import {
   DEFAULTS
-} from "./chunk-BSIGP5XF.js";
+} from "./chunk-HDFUSBU3.js";
 import "./chunk-NUBSJGQZ.js";
 import "./chunk-633WH2ML.js";
 import {
@@ -790,8 +790,8 @@ import {
   isCliAvailable,
   isRetryableError,
   sleep
-} from "./chunk-ZU2Q3DWE.js";
-import "./chunk-JXDDSNEK.js";
+} from "./chunk-5FUVEIJC.js";
+import "./chunk-JECCDZ2S.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -802,7 +802,7 @@ import {
   validateExpertConfig
 } from "./chunk-ZM4O442V.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-AYZ6P7CK.js";
+import "./chunk-FBW6XKZJ.js";
 import {
   AgentCapability,
   AgentError,
@@ -879,9 +879,9 @@ import {
   toError,
   unwrap,
   unwrapOr
-} from "./chunk-YMT6H2HQ.js";
+} from "./chunk-4MHE5UVO.js";
 import "./chunk-2JQXC3CK.js";
-import "./chunk-UP2VWCW5.js";
+import "./chunk-PR4QN5HX.js";
 
 // src/adapters/factory.ts
 import { z } from "zod";
@@ -5683,17 +5683,36 @@ var ArtifactStore = class {
     }
     return refs;
   }
+  /**
+   * Returns the full provenance chain for an artifact — the artifact
+   * itself plus every ancestor transitively reachable via `inputRefs`
+   * (#2867). Iterative DFS; the `visited` set makes it safe against
+   * cycles and diamond/multi-parent DAGs (each artifact appears once).
+   *
+   * Entries are in reachability (start-node-first DFS) order, not
+   * topological order. An ancestor that has been FIFO-evicted from the
+   * store is silently skipped — the chain truncates there rather than
+   * throwing. A missing root returns `[]`.
+   */
   provenance(ref) {
-    const artifact = this.artifacts.get(ref.id);
-    if (artifact === void 0) return [];
-    return [
-      {
+    const entries = [];
+    const visited = /* @__PURE__ */ new Set();
+    const stack = [ref.id];
+    while (stack.length > 0) {
+      const id = stack.pop();
+      if (id === void 0 || visited.has(id)) continue;
+      visited.add(id);
+      const artifact = this.artifacts.get(id);
+      if (artifact === void 0) continue;
+      entries.push({
         artifactId: artifact.id,
         plugin: artifact.createdBy,
         timestamp: artifact.createdAt,
         inputArtifacts: artifact.inputRefs.map((r) => r.id)
-      }
-    ];
+      });
+      for (const r of artifact.inputRefs) stack.push(r.id);
+    }
+    return entries;
   }
   // ==========================================================================
   // Internal
@@ -5984,7 +6003,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-BZ6JSN67.js");
+    const { executeVoting } = await import("./consensus-vote-TGTGZSPS.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);