nexus-agents 2.89.1 → 2.90.0

package/dist/{chunk-LZECDSJY.js → chunk-AQTHLUCP.js}

@@ -2,7 +2,7 @@ import {
   TASK_CATEGORIES,
   getAdaptiveBonus,
   getOutcomeStore
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 
 // src/cli/doctor-deep.ts
 var CLI_NAMES = ["claude", "gemini", "codex", "opencode"];
@@ -106,4 +106,4 @@ export {
   runDeepDiagnostics,
   formatDeepDiagnostics
 };
-//# sourceMappingURL=chunk-LZECDSJY.js.map
+//# sourceMappingURL=chunk-AQTHLUCP.js.map

package/dist/{chunk-KR6UR263.js → chunk-CGSVTROC.js}

@@ -7,7 +7,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 
 // src/cli/research-helpers-synthesize.ts
 import { z } from "zod";
@@ -1015,4 +1015,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=chunk-KR6UR263.js.map
+//# sourceMappingURL=chunk-CGSVTROC.js.map

package/dist/{chunk-3MYPFPYL.js → chunk-E6W4Z6GN.js}

@@ -3,14 +3,14 @@ import {
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-O5F6QAIG.js";
+} from "./chunk-3FVSYMHK.js";
 import {
   ModelCapability,
   err,
   getCliModelName,
   getTokenEstimator,
   ok
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 
 // src/adapters/openai-types.ts
 var OPENAI_MODELS = {
@@ -553,4 +553,4 @@ export {
   OpenAIAdapter,
   createOpenAIAdapter
 };
-//# sourceMappingURL=chunk-3MYPFPYL.js.map
+//# sourceMappingURL=chunk-E6W4Z6GN.js.map

package/dist/{chunk-QCZEC7H4.js → chunk-EAT4GTMT.js}

@@ -2,7 +2,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 
 // src/scm/token-resolver.ts
 import { execFile } from "child_process";
@@ -87,4 +87,4 @@ export {
   hasToken,
   getTokenEnvVars
 };
-//# sourceMappingURL=chunk-QCZEC7H4.js.map
+//# sourceMappingURL=chunk-EAT4GTMT.js.map

package/dist/{chunk-XV7V3B35.js → chunk-EFHZHCF2.js}

@@ -3,7 +3,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 
 // src/scm/types.ts
 var ScmError = class extends Error {
@@ -258,4 +258,4 @@ export {
   ScmError,
   GitHubProvider
 };
-//# sourceMappingURL=chunk-XV7V3B35.js.map
+//# sourceMappingURL=chunk-EFHZHCF2.js.map

package/dist/{chunk-RAUA6B2M.js → chunk-EUR32RSL.js}

@@ -1,10 +1,10 @@
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-QCZEC7H4.js";
+} from "./chunk-EAT4GTMT.js";
 import {
   executeExpert
-} from "./chunk-EUMVRLJL.js";
+} from "./chunk-S6FXRXYE.js";
 import {
   EventTopics,
   JobStatusSchema,
@@ -42,7 +42,7 @@ import {
   writeJobComplete,
   writeJobFailed,
   writeJobPending
-} from "./chunk-7QTWFRHH.js";
+} from "./chunk-4N54BTZU.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
@@ -51,14 +51,14 @@ import {
   normalizeTopicToCanonical,
   savePapersRegistry,
   synthesizeResearch
-} from "./chunk-KR6UR263.js";
+} from "./chunk-CGSVTROC.js";
 import {
   IssueTriage,
   sanitizeInput
-} from "./chunk-O5OJNB4C.js";
+} from "./chunk-L3S7HOAS.js";
 import {
   generateSecurityPlan
-} from "./chunk-WF2YOYY7.js";
+} from "./chunk-57HMLBYN.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-HFOQKCD2.js";
@@ -71,25 +71,25 @@ import {
   getContextForTask,
   inferTaskCategory,
   summarizeContextForPrompt
-} from "./chunk-W7YR5SGV.js";
+} from "./chunk-4GOT42ZA.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-SI7ZBCGU.js";
+} from "./chunk-7QXEK3O6.js";
 import {
   DEFAULT_TASK_TTL_MS,
   DEFAULT_TOOL_RATE_LIMITS,
   clampTaskTtl
-} from "./chunk-MXHJMSYQ.js";
+} from "./chunk-IBRZK662.js";
 import {
   getAvailabilityCache,
   resolveFallback
-} from "./chunk-MHPOJAPZ.js";
+} from "./chunk-SFZESA5O.js";
 import {
   DEFAULTS
-} from "./chunk-SRTQUTCB.js";
+} from "./chunk-3HTUYAKS.js";
 import {
   resolveInsideRoot
 } from "./chunk-NUBSJGQZ.js";
@@ -105,11 +105,11 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-MKKQ3CQJ.js";
+} from "./chunk-X5BQF6HM.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-WWY6V4NK.js";
+} from "./chunk-PRGNJRID.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -121,7 +121,7 @@ import {
 } from "./chunk-PQHVC4BD.js";
 import {
   createSessionMemory
-} from "./chunk-UISGEXHO.js";
+} from "./chunk-YEQE7WLP.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -192,7 +192,7 @@ import {
   resolveModelIdentitySync,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 import {
   getNexusDataDir,
   nexusDataPath,
@@ -26886,7 +26886,7 @@ async function populateUnifiedContextOnState(state) {
   try {
     const taskCandidate = state["task"];
     if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-    const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-OBGV7Y2U.js");
+    const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-C4CNVKR5.js");
     const ctx = await getContextForTask2({
       task: taskCandidate,
       category: inferTaskCategory2(taskCandidate),
@@ -42521,7 +42521,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-U3PSWSCY.js");
+    const { createIssueTriage } = await import("./issue-triage-J2MUXK6R.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -42549,7 +42549,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-6KWMO2HT.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-VIWFPPGZ.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -43331,7 +43331,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-FSLRKYIC.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-HGCDSZ5R.js");
     const { getLearningDir } = await import("./learning-persistence-UKPO7RYK.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -43388,7 +43388,7 @@ function recordRoutingExperience(category, success, durationMs) {
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-XBYTU4KZ.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-PYO46COZ.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -43422,7 +43422,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-YLD3VXUC.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-RWAMQHBL.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -43440,7 +43440,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-FSLRKYIC.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-HGCDSZ5R.js");
     const { getLearningDir } = await import("./learning-persistence-UKPO7RYK.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -43546,7 +43546,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-5NIBODVH.js");
+        const { executeVoting } = await import("./consensus-vote-B6W7YQ6K.js");
         const votingResult = await executeVoting(
           {
             proposal: plan.slice(0, 4e3),
@@ -44473,7 +44473,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-IDK2V5JN.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-CNZ4C3FN.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -44544,7 +44544,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-WOUJAXSZ.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-5MFY7GGQ.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -51160,7 +51160,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-4RSAV4FC.js");
+    const { createScmProvider } = await import("./factory-NNSXCD25.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -51874,4 +51874,4 @@ export {
   detectBackend,
   createTaskTracker
 };
-//# sourceMappingURL=chunk-RAUA6B2M.js.map
+//# sourceMappingURL=chunk-EUR32RSL.js.map

package/dist/{chunk-MXHJMSYQ.js → chunk-IBRZK662.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULTS
-} from "./chunk-SRTQUTCB.js";
+} from "./chunk-3HTUYAKS.js";
 import {
   resolveInsideRoot
 } from "./chunk-NUBSJGQZ.js";
@@ -10,7 +10,7 @@ import {
 import {
   createAllAdapters,
   probeCli
-} from "./chunk-MKKQ3CQJ.js";
+} from "./chunk-X5BQF6HM.js";
 import {
   CliNameSchema,
   DEFAULT_CAPABILITIES,
@@ -26,7 +26,7 @@ import {
   ok,
   symbols,
   writeLine
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 import {
   detectSandbox,
   getLearningDir,
@@ -40,7 +40,7 @@ import {
 } from "./chunk-CH7QIDHQ.js";
 
 // src/version.ts
-var VERSION = true ? "2.89.1" : "dev";
+var VERSION = true ? "2.90.0" : "dev";
 
 // src/config/schemas-core.ts
 import { z } from "zod";
@@ -2096,7 +2096,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { runSetup } = await import("./setup-command-IRBQGUWR.js");
+    const { runSetup } = await import("./setup-command-Z7TRZUDI.js");
     const setupResult = runSetup({
       skipMcp: true,
       skipRules: true,
@@ -2110,7 +2110,7 @@ async function runDoctorFix(result) {
     }
   }
   if (!result.configFile.found) {
-    const { runConfigInitSync } = await import("./setup-config-7MK6PRX6.js");
+    const { runConfigInitSync } = await import("./setup-config-QPS4K5QU.js");
     const configResult = runConfigInitSync(process.cwd(), false, false);
     if (configResult.success && configResult.created) {
       writeLine2(`\u2713 Generated config: ${configResult.path}`);
@@ -2208,4 +2208,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-MXHJMSYQ.js.map
+//# sourceMappingURL=chunk-IBRZK662.js.map

package/dist/{chunk-AKO5H63G.js → chunk-JYIKPBXW.js}

@@ -5,7 +5,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -354,4 +354,4 @@ export {
   CircuitBreakerRegistry,
   mapCliErrorToCategory
 };
-//# sourceMappingURL=chunk-AKO5H63G.js.map
+//# sourceMappingURL=chunk-JYIKPBXW.js.map

package/dist/{chunk-O5OJNB4C.js → chunk-L3S7HOAS.js}

@@ -1,14 +1,14 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-XV7V3B35.js";
+} from "./chunk-EFHZHCF2.js";
 import {
   CACHE_TIMEOUTS,
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 
 // src/security/trust-types.ts
 import { z } from "zod";
@@ -867,33 +867,35 @@ var ReputationCache = class {
     return this.cache.size;
   }
 };
+var HOSTILE_INJECTION_FLAGS = [
+  "system_prompt_manipulation",
+  "fake_conversation",
+  "authority_claim",
+  "hidden_content"
+];
+function hasHostileInjection(flags) {
+  return flags.some((f) => HOSTILE_INJECTION_FLAGS.includes(f));
+}
+function isRapidCommenting(m) {
+  return m.recentCommentCount !== void 0 && m.recentCommentWindowMinutes !== void 0 && m.recentCommentCount > SUSPICIOUS_THRESHOLDS.rapidCommentThreshold && m.recentCommentWindowMinutes <= SUSPICIOUS_THRESHOLDS.rapidCommentWindowMinutes;
+}
+function isMismatchedAuthority(m) {
+  if (!m.injectionFlags.includes("authority_claim")) return false;
+  const association = m.authorAssociation.toUpperCase();
+  return association !== "OWNER" && association !== "MEMBER";
+}
 function detectSuspiciousSignals(metadata) {
   const signals = [];
-  if (metadata.accountAgeDays < SUSPICIOUS_THRESHOLDS.newAccountDays) {
+  const { accountAgeDays, priorContributions } = metadata;
+  if (accountAgeDays !== void 0 && accountAgeDays < SUSPICIOUS_THRESHOLDS.newAccountDays) {
     signals.push("new_account");
   }
-  if (metadata.priorContributions < SUSPICIOUS_THRESHOLDS.minContributions) {
+  if (priorContributions !== void 0 && priorContributions < SUSPICIOUS_THRESHOLDS.minContributions) {
     signals.push("no_prior_contributions");
   }
-  const hostileInjectionFlags = [
-    "system_prompt_manipulation",
-    "fake_conversation",
-    "authority_claim",
-    "hidden_content"
-  ];
-  const hasHostileFlags = metadata.injectionFlags.some((f) => hostileInjectionFlags.includes(f));
-  if (hasHostileFlags) {
-    signals.push("injection_patterns_detected");
-  }
-  if (metadata.recentCommentCount > SUSPICIOUS_THRESHOLDS.rapidCommentThreshold && metadata.recentCommentWindowMinutes <= SUSPICIOUS_THRESHOLDS.rapidCommentWindowMinutes) {
-    signals.push("rapid_comments");
-  }
-  const hasAuthorityClaim = metadata.injectionFlags.includes("authority_claim");
-  const association = metadata.authorAssociation.toUpperCase();
-  const isAuthoritative = association === "OWNER" || association === "MEMBER";
-  if (hasAuthorityClaim && !isAuthoritative) {
-    signals.push("mismatched_authority_claim");
-  }
+  if (hasHostileInjection(metadata.injectionFlags)) signals.push("injection_patterns_detected");
+  if (isRapidCommenting(metadata)) signals.push("rapid_comments");
+  if (isMismatchedAuthority(metadata)) signals.push("mismatched_authority_claim");
   return signals;
 }
 function calculateReputationScore(metadata, signals, userRole) {
@@ -907,8 +909,12 @@ function calculateReputationScore(metadata, signals, userRole) {
     unknown: 0
   };
   score += roleBonus[userRole];
-  score += Math.min(metadata.accountAgeDays / DAYS_PER_YEAR_APPROX, 10);
-  score += Math.min(metadata.priorContributions, 10);
+  if (metadata.accountAgeDays !== void 0) {
+    score += Math.min(metadata.accountAgeDays / DAYS_PER_YEAR_APPROX, 10);
+  }
+  if (metadata.priorContributions !== void 0) {
+    score += Math.min(metadata.priorContributions, 10);
+  }
   const signalPenalty = {
     new_account: -15,
     no_prior_contributions: -10,
@@ -969,6 +975,12 @@ function assessReputation(metadata, cache) {
   cache?.set(metadata.username, assessment);
   return assessment;
 }
+function reconcileTrustTier(classifierTier, reputation) {
+  if (classifierTier === "1") return "1";
+  const repTier = reputation?.effectiveTrustTier;
+  if (repTier === void 0) return classifierTier;
+  return TRUST_TIER_NUMERIC[repTier] > TRUST_TIER_NUMERIC[classifierTier] ? repTier : classifierTier;
+}
 function buildReason(role, signals, tier) {
   if (signals.length === 0) {
     return `Role ${role} \u2192 Tier ${tier} (no suspicious signals)`;
@@ -1390,7 +1402,7 @@ var IssueTriage = class {
     const trustResult = this.classifyAuthor(issueResult);
     const reputation = this.assessAuthorReputation(issueResult, comments);
     const actions = this.generateActions(safeTitle, safeBody, issueResult, trustResult);
-    const validatedActions = this.validateActions(actions, trustResult);
+    const validatedActions = this.validateActions(actions, trustResult, reputation);
     const result = this.buildResult({
       issue: issueResult,
       actions: validatedActions,
@@ -1489,9 +1501,9 @@ var IssueTriage = class {
    * This completes the #828 wiring by integrating corroboration-validator.
    * (Source: Issue #828 — policy-gate + corroboration-validator wiring)
    */
-  validateActions(actions, trustResult) {
+  validateActions(actions, trustResult, reputation) {
     const context = {
-      inputTrustTier: trustResult.trustTier,
+      inputTrustTier: reconcileTrustTier(trustResult.trustTier, reputation),
       hasWriteAccess: !this.config.dryRun,
       hasSecretAccess: false
     };
@@ -1648,6 +1660,7 @@ export {
   SuspiciousSignalSchema,
   ReputationCache,
   assessReputation,
+  reconcileTrustTier,
   parsePRUrl,
   GitHubReviewer,
   GitHubUserInfo,
@@ -1656,4 +1669,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-O5OJNB4C.js.map
+//# sourceMappingURL=chunk-L3S7HOAS.js.map