nexus-agents 2.94.0 → 2.95.0

package/dist/cli.js

@@ -13,19 +13,19 @@ import {
   generateSummary,
   parseFindings,
   sumFindings
-} from "./chunk-5ZB3MTA7.js";
-import "./chunk-R2NKJPUX.js";
+} from "./chunk-YYXJ6RTO.js";
+import "./chunk-ZICVVBDW.js";
 import {
   buildOpenAICompatAdapters,
   loadUsageEvents,
   readOpenAICompatEnv,
   rollupByModel
-} from "./chunk-5B4VLSMP.js";
+} from "./chunk-PFOY5ML6.js";
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-ZY2EMD72.js";
-import "./chunk-ROAANOOB.js";
+} from "./chunk-55G7KQ7F.js";
+import "./chunk-FXVJLJUF.js";
 import {
   AuthHandler,
   DEFAULT_EXPERTS,
@@ -168,19 +168,19 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-UC3PVIN4.js";
+} from "./chunk-FYGZ4MEQ.js";
 import {
   resolveToken
-} from "./chunk-OSSGG7KW.js";
+} from "./chunk-5HBDXW44.js";
 import {
   CATEGORY_DISPLAY_NAMES,
   DEFAULT_PR_REVIEW_CONFIG
 } from "./chunk-OK6U5N5Y.js";
-import "./chunk-Q3NUA7CW.js";
-import "./chunk-EDPDH5YT.js";
+import "./chunk-WGA4VGIR.js";
+import "./chunk-3HXWI34V.js";
 import {
   shutdownExpertBridge
-} from "./chunk-2YMRRZRM.js";
+} from "./chunk-2X24T4ZD.js";
 import {
   DEFAULT_VOTE_TIMEOUT_MS,
   ErrorPolicySchema,
@@ -198,34 +198,34 @@ import {
   toolSuccessStructured,
   warnIfSimulatedOutsideTests,
   wrapToolWithTimeout
-} from "./chunk-TNBWHOPY.js";
-import "./chunk-L7I55FAN.js";
-import "./chunk-YDXGYKZJ.js";
+} from "./chunk-VTMQND6B.js";
+import "./chunk-D3JSXVX3.js";
+import "./chunk-LXROEQAO.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   savePapersRegistry,
   synthesizeResearch
-} from "./chunk-G5EBHQ2L.js";
+} from "./chunk-ECZW5FXN.js";
 import {
   classifyTrust,
   createFullGitHubProvider,
   evaluatePolicy,
   parsePRUrl
-} from "./chunk-76535ZNP.js";
-import "./chunk-EJR6U67L.js";
+} from "./chunk-4NVYN2MB.js";
+import "./chunk-LZOTH2GI.js";
 import {
   ReputationCache,
   sanitizeInput
-} from "./chunk-EB43BGAR.js";
-import "./chunk-FUGPKYEJ.js";
+} from "./chunk-O4LVC4MQ.js";
+import "./chunk-BSHDI4BH.js";
 import "./chunk-HFOQKCD2.js";
 import "./chunk-3ACDP4E6.js";
-import "./chunk-OKGHHCS5.js";
+import "./chunk-TEKWQNQ2.js";
 import {
   MemoryError,
   shutdownToolMemory
-} from "./chunk-63OGXDHS.js";
+} from "./chunk-KHZGMF2W.js";
 import {
   CustomExpertDefinitionSchema,
   DATA_SUBDIRECTORIES,
@@ -244,12 +244,12 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-77JUKFTG.js";
-import "./chunk-GMZDRTVJ.js";
-import "./chunk-KSJPDQSG.js";
+} from "./chunk-GC5FH2IA.js";
+import "./chunk-QUPPV6UO.js";
+import "./chunk-Y3OOHHKQ.js";
 import {
   DEFAULTS
-} from "./chunk-43UDRX3N.js";
+} from "./chunk-7GUP6KQQ.js";
 import "./chunk-NUBSJGQZ.js";
 import {
   capitalize,
@@ -261,12 +261,12 @@ import {
   getAvailableClis,
   isRecord,
   probeAllClis
-} from "./chunk-4QESFYGV.js";
-import "./chunk-24WC4XO2.js";
-import "./chunk-XBPFVWA2.js";
+} from "./chunk-3H6Q3RZM.js";
+import "./chunk-47Z3YPOK.js";
+import "./chunk-G42N55ZR.js";
 import "./chunk-ZM4O442V.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-LCLVSNST.js";
+import "./chunk-6IWPN5UB.js";
 import {
   API_TIMEOUTS,
   AgentCapability,
@@ -336,7 +336,7 @@ import {
   validateTimeout,
   writeEmptyLine,
   writeLine
-} from "./chunk-OT6V5ROA.js";
+} from "./chunk-ECBH5INZ.js";
 import {
   applyPortableMode,
   detectSandbox,
@@ -3115,7 +3115,7 @@ ${file.patch}
         violations: policyResult.violations
       });
     }
-    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-JLWEQIN6.js");
+    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-XENJ4E2T.js");
     const body = formatReviewComment2(result);
     const postResult = await provider.createReview(pr.prNumber, body, result.decision);
     if (!postResult.ok) {
@@ -17435,6 +17435,7 @@ function runStpaSafetyAnalysis(logger18, failOnHighSeverity) {
 var defaultLogger = createLogger({ component: "TuneStage" });
 var TUNE_ENFORCE_ENV = "NEXUS_TUNE_ENFORCE";
 var TUNE_ENFORCE_DEMOTION = 0.15;
+var AUDIT_REASON_MAX = 512;
 var TUNE_SIGNAL_TYPES = [
   "signal.fitness_declined",
   "signal.swarm_unhealthy",
@@ -17464,27 +17465,58 @@ function intendedActionFor(event) {
       return void 0;
   }
 }
+function auditDemotion(auditLogger, agentId, adjustment, log) {
+  if (auditLogger === void 0 || adjustment === void 0) return;
+  const reason = adjustment.reason.length > AUDIT_REASON_MAX ? adjustment.reason.slice(0, AUDIT_REASON_MAX) : adjustment.reason;
+  try {
+    auditLogger.log({
+      category: "configuration",
+      severity: "warning",
+      outcome: "success",
+      action: "tune.demote",
+      actor: { type: "system", id: "tune-stage" },
+      description: `Bounded routing demotion applied to ${agentId} (swarm_unhealthy)`,
+      metadata: {
+        cli: agentId,
+        magnitude: TUNE_ENFORCE_DEMOTION,
+        multiplier: adjustment.multiplier,
+        reason,
+        provenance: "signal.swarm_unhealthy",
+        appliedAt: adjustment.appliedAt
+      }
+    });
+  } catch (auditError) {
+    log.warn("TuneStage \u2014 audit log failed (demotion still applied)", {
+      error: getErrorMessage(auditError)
+    });
+  }
+}
+function enforceSwarmDemotion(event, action, auditLogger, log) {
+  const adjustment = getTuneAdjustmentStore().demote(
+    event.agentId,
+    TUNE_ENFORCE_DEMOTION,
+    `swarm_unhealthy: ${event.reason}`
+  );
+  log.info("TuneStage (enforce) \u2014 applied bounded routing demotion", {
+    kind: action.kind,
+    signal: action.signal,
+    agentId: event.agentId,
+    reason: event.reason,
+    multiplier: adjustment?.multiplier
+  });
+  auditDemotion(auditLogger, event.agentId, adjustment, log);
+}
 function createTuneStage(bus, options = {}) {
   const enabled = options.enabled ?? false;
   const log = options.logger ?? defaultLogger;
+  const auditLogger = options.auditLogger;
   return bus.subscribe({ type: [...TUNE_SIGNAL_TYPES] }, (event) => {
     try {
       const action = intendedActionFor(event);
       if (action === void 0) return;
       if (enabled) {
         if (event.type === "signal.swarm_unhealthy") {
-          const adjustment = getTuneAdjustmentStore().demote(
-            event.agentId,
-            TUNE_ENFORCE_DEMOTION,
-            `swarm_unhealthy: ${event.reason}`
-          );
-          log.info("TuneStage (enforce) \u2014 applied bounded routing demotion", {
-            kind: action.kind,
-            signal: action.signal,
-            agentId: event.agentId,
-            reason: event.reason,
-            multiplier: adjustment?.multiplier
-          });
+          enforceSwarmDemotion(event, action, auditLogger, log);
           return;
         }
         log.info("TuneStage (enforce) \u2014 non-routing action, shadow-only", {
@@ -17494,6 +17526,9 @@ function createTuneStage(bus, options = {}) {
         });
         return;
       }
+      if (event.type === "signal.swarm_unhealthy") {
+        getTuneAdjustmentStore().recordIntended(event.agentId, `swarm_unhealthy: ${event.reason}`);
+      }
       log.info("TuneStage (shadow) \u2014 intended action", {
         kind: action.kind,
         signal: action.signal,
@@ -18037,12 +18072,12 @@ function registerToolCategories(ctx) {
     if (allowed(tool.name)) tool.register(ctx.server, buildStandardDeps(ctx, tool.name));
   }
 }
-function initV2PipelineSubsystems(logger18) {
+function initV2PipelineSubsystems(logger18, auditLogger) {
   const pluginRegistry = getPipelinePluginRegistry();
   const pipelineEventBus = getPipelineEventBus();
   const bridge = createEventBusBridge({ source: pipelineEventBus });
   startFeedbackSubscriber(pipelineEventBus, getOutcomeStore());
-  startTuneStage(pipelineEventBus);
+  startTuneStage(pipelineEventBus, auditLogger !== void 0 ? { auditLogger } : void 0);
   startSwarmHealthSignals(getSwarmObserver(), pipelineEventBus);
   startFailoverSignals({ pipelineBus: pipelineEventBus });
   const policyEngine = createDefaultPolicyEngine();
@@ -18079,7 +18114,7 @@ function registerMcpTools(options) {
     logger: toolInfra.logger
   });
   setGlobalToolRateLimiterFactory(rateLimiterFactory);
-  initV2PipelineSubsystems(logger18);
+  initV2PipelineSubsystems(logger18, options.auditLogger);
   const gatewayOptions = { ...options, server: observableServer };
   const ctx = createToolContext(gatewayOptions, toolInfra, rateLimiterFactory);
   registerToolCategories(ctx);
@@ -19370,7 +19405,7 @@ function adaptConfigToLibrary(config) {
 }
 function createBeliefPromoter() {
   return async (event) => {
-    const { getToolMemory } = await import("./tool-memory-YWX4FTIQ.js");
+    const { getToolMemory } = await import("./tool-memory-L7SDFSF5.js");
     const tm = getToolMemory();
     await tm.recordBelief(
       `skill:${event.name}`,
@@ -19742,7 +19777,8 @@ function buildGatewayConfig(config, logger18) {
     ...tierOverrides !== void 0 && { tierOverrides }
   };
 }
-async function initializeAndRegisterTools(server, logger18, policyFirewall, config, feedbackIntegration) {
+async function initializeAndRegisterTools(server, logger18, policyFirewall, config, deps) {
+  const { feedbackIntegration, auditLogger } = deps ?? {};
   logger18.info("Loading built-in workflow templates");
   const builtInTemplates = await initializeBuiltInTemplates();
   logger18.info("Loaded built-in templates", { count: builtInTemplates.size });
@@ -19765,7 +19801,8 @@ async function initializeAndRegisterTools(server, logger18, policyFirewall, conf
     ...allowedPaths !== void 0 && { allowedPaths },
     ...securityConfig !== void 0 && { securityConfig },
     ...workflowConfig !== void 0 && { workflowConfig },
-    ...feedbackIntegration !== void 0 && { feedbackIntegration }
+    ...feedbackIntegration !== void 0 && { feedbackIntegration },
+    ...auditLogger !== null && auditLogger !== void 0 && { auditLogger }
   };
   registerMcpTools(toolsOptions);
 }
@@ -19816,13 +19853,10 @@ async function initializeSubsystems(config, logger18) {
   const policyFirewall = logSecurityConfig(serverLogger, config);
   const auditLogger = initializeAuditLogger(config.security, serverLogger);
   initializeAuth(config, serverLogger);
-  await initializeAndRegisterTools(
-    server,
-    serverLogger,
-    policyFirewall,
-    config,
-    feedbackResult.feedbackIntegration
-  );
+  await initializeAndRegisterTools(server, serverLogger, policyFirewall, config, {
+    feedbackIntegration: feedbackResult.feedbackIntegration,
+    auditLogger
+  });
   return { server, serverLogger, observer, eventBusBridge, auditLogger };
 }
 var SERVER_STARTUP_TIMEOUT_MS = 3e4;
@@ -20236,7 +20270,7 @@ async function handleResearchCommand(args) {
   }
 }
 async function handleRegistryCommand(args) {
-  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-FYVOMCBG.js");
+  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-X3O34FAK.js");
   const subcommand = args.subcommand;
   if (!isValidRegistrySubcommand(subcommand)) {
     process.stdout.write(`${formatRegistryUsage()}
@@ -20284,7 +20318,7 @@ async function handleVerifyCommand(args) {
 async function handleDoctorCommand(args) {
   const exitCode = await doctorCommand({ fix: args.options.fix });
   if (args.options.deep) {
-    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-VFBQ7TY4.js");
+    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-PSNJPELP.js");
     const diag = runDeepDiagnostics2();
     process.stdout.write(formatDeepDiagnostics2(diag) + "\n");
   }
@@ -20328,7 +20362,7 @@ async function handleInitCommand(args) {
   process.exit(result.success ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runInitOpencodeFlow(args) {
-  const { runInitOpencode } = await import("./init-opencode-Y6XKR6WS.js");
+  const { runInitOpencode } = await import("./init-opencode-25AUARJH.js");
   const opencodePath = args.options.opencode;
   if (opencodePath === void 0 || opencodePath === "") {
     process.stderr.write("Error: --opencode requires a path argument.\n");
@@ -20355,7 +20389,7 @@ async function runInitOpencodeFlow(args) {
   process.exit(EXIT_CODES.SUCCESS);
 }
 async function renderOpencodeValidate(opencodePath) {
-  const { runOpencodeValidate } = await import("./init-opencode-Y6XKR6WS.js");
+  const { runOpencodeValidate } = await import("./init-opencode-25AUARJH.js");
   const result = await runOpencodeValidate(opencodePath);
   if (!result.ok) {
     process.stderr.write(`init --opencode --validate: ${result.reason ?? "failed"}
@@ -20395,7 +20429,7 @@ async function handleSetupCommandAsync(args) {
   process.exit(exitCode === 0 ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runCustomApiSetup(args) {
-  const { configureCustomApi } = await import("./setup-custom-api-3M7CU3TF.js");
+  const { configureCustomApi } = await import("./setup-custom-api-KSF2JMTS.js");
   const baseUrl = args.options.customApi;
   if (baseUrl === void 0) return EXIT_CODES.SERVER_START_FAILED;
   const input = {
@@ -22371,6 +22405,7 @@ function collectHealth() {
     failureBreakdown: report.failureBreakdown ?? [],
     cliCount: report.cliWeather.length,
     cliHealth: report.cliWeather.map(toCliSummary),
+    tuneAdjustments: getTuneAdjustmentStore().demotionStats(),
     timestamp: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
@@ -22486,6 +22521,22 @@ ${c.bold}nexus-agents${c.reset}`);
 `);
   }
   renderFailureBreakdown(w, health.failureBreakdown);
+  renderTuneAdjustments(w, health.tuneAdjustments);
+}
+function renderTuneAdjustments(w, stats) {
+  if (stats.length === 0) return;
+  const c = colors;
+  w(
+    `  ${c.bold}Self-Tuning Demotions${c.reset} ${c.dim}(applied = enforced, intended = shadow)${c.reset}
+`
+  );
+  for (const stat2 of stats) {
+    w(
+      `  ${stat2.cli.padEnd(10)} applied: ${c.cyan}${String(stat2.applied)}${c.reset}  intended: ${c.cyan}${String(stat2.intended)}${c.reset}  ${c.dim}${stat2.lastReason}${c.reset}
+`
+    );
+  }
+  w("\n");
 }
 function renderJson2(health) {
   process.stdout.write(JSON.stringify(health, null, 2) + "\n");