nexus-agents 2.97.1 → 2.99.0

package/dist/{child-mcp-config-WVPJIK2J.js → child-mcp-config-OWCVT4NN.js}

@@ -1,6 +1,6 @@
 import {
   createLogger
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 
@@ -59,4 +59,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-WVPJIK2J.js.map
+//# sourceMappingURL=child-mcp-config-OWCVT4NN.js.map

package/dist/{chunk-D3OT7TOA.js → chunk-3XSEFOI5.js}

@@ -1,13 +1,13 @@
 import {
   getToolMemory
-} from "./chunk-IHKPGTF3.js";
+} from "./chunk-ZOBDTJNG.js";
 import {
   CLI_NAMES,
   StrategyDistiller,
   createLogger,
   getOutcomeStore,
   registerPersistentDistillerFactory
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 import {
   ensureLearningDir,
   getRulesFile
@@ -273,4 +273,4 @@ export {
   inferTaskCategory,
   summarizeContextForPrompt
 };
-//# sourceMappingURL=chunk-D3OT7TOA.js.map
+//# sourceMappingURL=chunk-3XSEFOI5.js.map

package/dist/{chunk-KKVH3PDK.js → chunk-5T6S6HFY.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-EY7LL4F4.js";
+} from "./chunk-J545CO5K.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -11,13 +11,13 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-SZNNT2DH.js";
+} from "./chunk-VD4TXDMR.js";
 import {
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 
 // src/security/trust-classifier.ts
 function mapAuthorAssociation(association) {
@@ -1368,4 +1368,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-KKVH3PDK.js.map
+//# sourceMappingURL=chunk-5T6S6HFY.js.map

package/dist/{chunk-T5TYWM5S.js → chunk-5WY3N7VX.js}

@@ -8,7 +8,7 @@ import {
   getErrorMessage,
   ok,
   parseBoolEnv
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 
 // src/cli/research-helpers-synthesize.ts
 import { z } from "zod";
@@ -1015,4 +1015,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=chunk-T5TYWM5S.js.map
+//# sourceMappingURL=chunk-5WY3N7VX.js.map

package/dist/{chunk-6IN4MKDA.js → chunk-6IHEDRKI.js}

@@ -1,11 +1,11 @@
 import {
   resolveCliSlot
-} from "./chunk-N5656LE3.js";
+} from "./chunk-HBZUXO4Q.js";
 import {
   createLogger,
   getTimeProvider,
   isRateLimitText
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 
 // src/pipeline/expert-bridge.ts
 function resolveCliFromModelString(model) {
@@ -21,7 +21,7 @@ async function getMcpConfigPath() {
   if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;
   mcpConfigInitPromise ??= (async () => {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-WVPJIK2J.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-OWCVT4NN.js");
       const config = await generateMcpConfig();
       cachedMcpConfigPath = config.configPath;
       cachedMcpConfigCleanup = config.cleanup;
@@ -71,8 +71,8 @@ var routerInitPromise = null;
 async function getRouter() {
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-ZIZYUDKH.js");
-    const { createCompositeRouter } = await import("./composite-router-POFAM7T4.js");
+    const { createAllAdapters } = await import("./factory-NJRJAZKK.js");
+    const { createCompositeRouter } = await import("./composite-router-JJNQIHX6.js");
     const adapters = createAllAdapters();
     if (adapters.size === 0) {
       routerInitPromise = null;
@@ -80,7 +80,7 @@ async function getRouter() {
     }
     cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-STKW4DTL.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-IPNNNVIT.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
@@ -185,4 +185,4 @@ export {
   shutdownExpertBridge,
   executeExpert
 };
-//# sourceMappingURL=chunk-6IN4MKDA.js.map
+//# sourceMappingURL=chunk-6IHEDRKI.js.map

package/dist/{chunk-674NONPG.js → chunk-A7XUXJWL.js}

@@ -5,7 +5,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -354,4 +354,4 @@ export {
   CircuitBreakerRegistry,
   mapCliErrorToCategory
 };
-//# sourceMappingURL=chunk-674NONPG.js.map
+//# sourceMappingURL=chunk-A7XUXJWL.js.map

package/dist/{chunk-HZGHPBTV.js → chunk-AH67WRET.js}

@@ -1,7 +1,7 @@
 import {
   getRandomProvider,
   getTimeProvider
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 
 // src/utils/id-utils.ts
 import { randomUUID } from "crypto";
@@ -24,4 +24,4 @@ export {
   generateHyphenId,
   generateUUID
 };
-//# sourceMappingURL=chunk-HZGHPBTV.js.map
+//# sourceMappingURL=chunk-AH67WRET.js.map

package/dist/{chunk-T7IIFT3B.js → chunk-AN3IGMJT.js}

@@ -4,12 +4,12 @@ import {
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-GERVGPTF.js";
+} from "./chunk-BO6QUVXI.js";
 import {
   CUSTOM_API_BASE_URL_ENV,
   PROVIDER_ENV_KEYS,
   validateCustomApiBaseUrl
-} from "./chunk-65LE457J.js";
+} from "./chunk-J76KHBF3.js";
 import {
   NOOP_NOTIFIER,
   createMcpNotifier,
@@ -21,16 +21,16 @@ import {
   toolSuccess,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-5LGAPYX7.js";
+} from "./chunk-JFFI54DW.js";
 import {
   getToolMemory
-} from "./chunk-IHKPGTF3.js";
+} from "./chunk-ZOBDTJNG.js";
 import {
   getDefaultAvailableModelsCache
-} from "./chunk-OSHCOBDK.js";
+} from "./chunk-CJODZY4U.js";
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-UNOOL6EN.js";
+} from "./chunk-XO25FS24.js";
 import {
   createCliAdapter,
   createCliDetectionCache,
@@ -39,7 +39,7 @@ import {
   isCliAvailable,
   sanitizeOutput,
   withTimeout
-} from "./chunk-ML4IF3PS.js";
+} from "./chunk-EM7NUGMG.js";
 import {
   AgentError,
   CLI_NAMES,
@@ -78,7 +78,7 @@ import {
   resolveCliAlias,
   resolveVoteTimeout,
   toRateLimitError
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 import {
   ensureLearningDir,
   getOutcomesFile,
@@ -6996,7 +6996,7 @@ async function processVotesWithCascade(engineVotes, opts) {
 var CONTRARIAN_ESCALATION_THRESHOLD = 0.8;
 async function runContrarianCheck(proposal, log) {
   try {
-    const { executeExpert } = await import("./expert-bridge-IAQPOJAQ.js");
+    const { executeExpert } = await import("./expert-bridge-EOVHUCJ4.js");
     const prompt = [
       "You are a contrarian analyst. Your job is to find reasons this proposal should be REJECTED.",
       "Look for: YAGNI (not needed), MISALIGNED (wrong tech/architecture), SECURITY_RISK, SCOPE_CREEP.",
@@ -7487,4 +7487,4 @@ export {
   CONSENSUS_VOTE_OUTPUT_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-T7IIFT3B.js.map
+//# sourceMappingURL=chunk-AN3IGMJT.js.map

package/dist/{chunk-WXDWDGVL.js → chunk-BKUKBOGV.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -721,4 +721,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-WXDWDGVL.js.map
+//# sourceMappingURL=chunk-BKUKBOGV.js.map

package/dist/{chunk-GERVGPTF.js → chunk-BO6QUVXI.js}

@@ -10,7 +10,7 @@ import {
   getTokenEstimator,
   isRateLimitLikeError,
   ok
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 
 // src/adapters/base-adapter.ts
 var AdapterModelError = class extends ModelError {
@@ -707,4 +707,4 @@ export {
   DEFAULT_COLLECT_STREAM_MAX_CHUNKS,
   collectStream
 };
-//# sourceMappingURL=chunk-GERVGPTF.js.map
+//# sourceMappingURL=chunk-BO6QUVXI.js.map

package/dist/{chunk-OSHCOBDK.js → chunk-CJODZY4U.js}

@@ -1,6 +1,6 @@
 import {
   createLogger
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 
 // src/config/available-models-cache.ts
 var logger = createLogger({ component: "available-models-cache" });
@@ -150,4 +150,4 @@ export {
   getDefaultAvailableModelsCache,
   setDefaultAvailableModelsCache
 };
-//# sourceMappingURL=chunk-OSHCOBDK.js.map
+//# sourceMappingURL=chunk-CJODZY4U.js.map

package/dist/{chunk-HIWO2WWP.js → chunk-DLNCQO6L.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 
 // src/context/session-memory.ts
 import * as fs from "fs";
@@ -351,4 +351,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-HIWO2WWP.js.map
+//# sourceMappingURL=chunk-DLNCQO6L.js.map

package/dist/{chunk-ML4IF3PS.js → chunk-EM7NUGMG.js}

@@ -1,10 +1,10 @@
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG
-} from "./chunk-674NONPG.js";
+} from "./chunk-A7XUXJWL.js";
 import {
   generateHyphenId
-} from "./chunk-HZGHPBTV.js";
+} from "./chunk-AH67WRET.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
@@ -27,7 +27,7 @@ import {
   getTimeProvider,
   isRateLimitText,
   ok
-} from "./chunk-JTQLV374.js";
+} from "./chunk-M774MKHE.js";
 
 // src/cli-adapters/subprocess-adapter.ts
 import { spawn } from "child_process";
@@ -2153,6 +2153,21 @@ var DEFAULT_CODEX_MCP_OPTIONS = {
   trackUsage: true,
   onProgress: void 0
 };
+var NEXUS_MCP_DEPTH_ENV = "NEXUS_MCP_DEPTH";
+var MAX_CODEX_MCP_SPAWN_DEPTH = 0;
+function readMcpDepth(env = process.env) {
+  const raw = Number.parseInt(env[NEXUS_MCP_DEPTH_ENV] ?? "0", 10);
+  return Number.isFinite(raw) && raw > 0 ? raw : 0;
+}
+function nextCodexMcpDepthOrThrow(env = process.env) {
+  const depth = readMcpDepth(env);
+  if (depth > MAX_CODEX_MCP_SPAWN_DEPTH) {
+    throw new Error(
+      `Refusing to spawn 'codex mcp-server': already nested inside a nexus-spawned codex MCP context (${NEXUS_MCP_DEPTH_ENV}=${String(depth)}). This breaks the recursive codex\u2194nexus MCP spawn loop (#3350). If you intentionally configured codex to launch nexus-agents as an MCP server, remove that '[mcp_servers.nexus-agents]' entry from ~/.codex/config.toml.`
+    );
+  }
+  return String(depth + 1);
+}
 function extractTextFromContent(content) {
   if (content === void 0 || content.length === 0) {
     return null;
@@ -2217,11 +2232,13 @@ var CodexMcpAdapter = class extends BaseCliAdapter {
     }
     this.initCapacityTracker();
     this.logger.debug("Initializing Codex MCP connection");
+    const childDepth = nextCodexMcpDepthOrThrow();
     try {
       this.mcpTransport = new StdioClientTransport({
         command: "codex",
         args: ["mcp-server"],
-        stderr: "pipe"
+        stderr: "pipe",
+        env: { [NEXUS_MCP_DEPTH_ENV]: childDepth }
       });
       this.client = new Client({ name: "nexus-agents", version: "2.0.0" }, { capabilities: {} });
       await this.client.connect(this.mcpTransport);
@@ -3291,4 +3308,4 @@ export {
   isCliAvailable,
   getAvailableClis
 };
-//# sourceMappingURL=chunk-ML4IF3PS.js.map
+//# sourceMappingURL=chunk-EM7NUGMG.js.map