nexus-agents 3.11.0 → 3.12.0

package/dist/{child-mcp-config-MJNB5GXS.js → child-mcp-config-63B5ZK2U.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SNJNRDKZ.js";
 import {
   createLogger
-} from "./chunk-6VUIQQ3O.js";
+} from "./chunk-3VZWKZ5Q.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -62,4 +62,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-MJNB5GXS.js.map
+//# sourceMappingURL=child-mcp-config-63B5ZK2U.js.map

package/dist/{chunk-JBSL2HKV.js → chunk-227ICA6P.js}

@@ -1,9 +1,9 @@
 import {
   loadPapersRegistry
-} from "./chunk-MAP3BVCT.js";
+} from "./chunk-OATAIRGV.js";
 import {
   getErrorMessage
-} from "./chunk-6VUIQQ3O.js";
+} from "./chunk-3VZWKZ5Q.js";
 
 // src/cli/research-helpers-synthesize.ts
 import { z } from "zod";
@@ -876,4 +876,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=chunk-JBSL2HKV.js.map
+//# sourceMappingURL=chunk-227ICA6P.js.map

package/dist/{chunk-G5GOWK5T.js → chunk-3NYMGWW7.js}

@@ -11,7 +11,7 @@ import {
   createGetRetryConfig,
   createGetTimeout,
   createGetToolRateLimit
-} from "./chunk-6VUIQQ3O.js";
+} from "./chunk-3VZWKZ5Q.js";
 
 // src/config/defaults.ts
 var CUSTOM_API_DEFAULT_MODEL = "gpt-5.5";
@@ -230,4 +230,4 @@ export {
   CUSTOM_API_DEFAULT_MODEL,
   DEFAULTS
 };
-//# sourceMappingURL=chunk-G5GOWK5T.js.map
+//# sourceMappingURL=chunk-3NYMGWW7.js.map

package/dist/{chunk-SOCKDRK6.js → chunk-3P6G3HQA.js}

@@ -1,9 +1,9 @@
 import {
   createAutoAdapter
-} from "./chunk-M7566JRS.js";
+} from "./chunk-RPZ3Y7OI.js";
 import {
   mapModelErrorToCategory
-} from "./chunk-KLMXZRDK.js";
+} from "./chunk-OWYVY7W5.js";
 import {
   CLI_NAMES,
   CircularBuffer,
@@ -21,7 +21,7 @@ import {
   ok,
   recordRateLimitEvent,
   toRateLimitError
-} from "./chunk-6VUIQQ3O.js";
+} from "./chunk-3VZWKZ5Q.js";
 
 // src/agents/collaboration/event-bus-helpers.ts
 import { randomUUID } from "crypto";
@@ -833,4 +833,4 @@ export {
   getGlobalRegistry,
   resetGlobalRegistry
 };
-//# sourceMappingURL=chunk-SOCKDRK6.js.map
+//# sourceMappingURL=chunk-3P6G3HQA.js.map

package/dist/{chunk-6VUIQQ3O.js → chunk-3VZWKZ5Q.js}

@@ -2623,7 +2623,7 @@ function setDefaultRegistry(registry) {
 }
 async function reloadDefaultRegistry() {
   globalRegistry = buildDefaultRegistry();
-  const { resetGlobalRegistry } = await import("./unified-registry-PKDBZ6FO.js");
+  const { resetGlobalRegistry } = await import("./unified-registry-QZPQF3ZC.js");
   resetGlobalRegistry();
   return globalRegistry;
 }
@@ -12517,6 +12517,48 @@ var LatencyClassSchema = z18.enum([
   "async-job-body"
 ]);
 var MaturityTierSchema = z18.enum(["experimental", "beta", "stable"]);
+var FilesystemScopeSchema = z18.enum([
+  /** No filesystem writes at all. */
+  "none",
+  /** Writes confined to the gitignored `.nexus-agents/` data + scratch tree. */
+  "nexus-data-dir",
+  /** Writes into a dedicated working copy (worktree/sandbox), not the checkout. */
+  "workspace",
+  /** Writes into the user's repository checkout. */
+  "repo"
+]);
+var SpawnScopeSchema = z18.enum([
+  "none",
+  /** May invoke the agent CLIs the adapter layer wraps. */
+  "agent-cli",
+  /** May invoke arbitrary developer tooling (build, test, package managers). */
+  "dev-tooling"
+]);
+var NetworkScopeSchema = z18.enum([
+  "none",
+  /** Model/LLM provider endpoints only. */
+  "llm-provider",
+  /** Source-control APIs (issues, PRs, contents). */
+  "vcs-api",
+  /** General web fetch / search. */
+  "web"
+]);
+var VcsScopeSchema = z18.enum([
+  "none",
+  /** Read-only queries. */
+  "read",
+  /** May post comments/reviews, but not change refs. */
+  "comment",
+  /** May commit and push. */
+  "push"
+]);
+var ExecuteEnvelopeSchema = z18.object({
+  filesystem: FilesystemScopeSchema,
+  spawn: SpawnScopeSchema,
+  /** Network classes reachable. `['none']` means no outbound calls. */
+  network: z18.array(NetworkScopeSchema).min(1),
+  vcs: VcsScopeSchema
+}).strict();
 var CostProfileSchema = z18.enum(["low", "medium", "high", "variable"]);
 var WorkflowPatternSchema = z18.enum([
   "sequential",
@@ -12607,7 +12649,15 @@ var StrategyManifestSchema = z18.object({
    * no claim on any signal). Each rule is a {@link SelectionRule}; the router
    * applies the highest-priority matching rule across the whole registry.
    */
-  selectionRules: z18.array(SelectionRuleSchema).min(1).optional()
+  selectionRules: z18.array(SelectionRuleSchema).min(1).optional(),
+  /**
+   * The bounded blast radius this strategy is permitted when EXECUTED
+   * (#4655). Optional in the schema so a manifest can register before its
+   * envelope is graded — but a strategy with no envelope is REFUSED at
+   * execute-time (fail-closed), and the CI gate requires one for all live
+   * strategies. Absent therefore means "cannot execute", never "unbounded".
+   */
+  executeEnvelope: ExecuteEnvelopeSchema.optional()
 }).strict();
 var StrategyManifestRegistrySchema = z18.object({
   version: z18.number().int().positive(),
@@ -12666,6 +12716,24 @@ var RAW_REGISTRY = {
       maturityTier: "stable",
       latencyClass: "pipeline",
       authorityTier: "suggest",
+      /**
+       * #4655. Shared runner (`createAgentStages`, agent-executor.ts:493).
+       * `filesystem: 'repo'` is the HONEST call rather than 'nexus-data-dir':
+       * the pipeline's own writes stay in the data dir (dev-pipeline.ts:446),
+       * but the quality gate runs the repo's `typecheck`/`lint`/`tests` scripts
+       * in `process.cwd()` (agent-executor.ts:749-755, quality-gate.ts:88), and
+       * what those write is arbitrary by definition. Declaring the narrower
+       * scope would be a statement we cannot stand behind.
+       */
+      executeEnvelope: {
+        filesystem: "repo",
+        spawn: "dev-tooling",
+        // OSV advisory API (osv-lookup.ts:158) alongside the model providers.
+        network: ["llm-provider", "web"],
+        // The gh/glab tracker exists (task-tracker.ts:106) but is wired only
+        // when `repo` is set, which the run path never sets.
+        vcs: "none"
+      },
       // Multi-stage dev gate (test / lint / typecheck) — bounded fan-out.
       costProfile: "medium",
       // The default for any non-trivial sequential task (single-shot outranks it
@@ -12683,6 +12751,13 @@ var RAW_REGISTRY = {
       maturityTier: "stable",
       latencyClass: "pipeline",
       authorityTier: "suggest",
+      /** #4655. Same shared runner and quality gate as dev-pipeline. */
+      executeEnvelope: {
+        filesystem: "repo",
+        spawn: "dev-tooling",
+        network: ["llm-provider", "web"],
+        vcs: "none"
+      },
       // Templated multi-stage pipeline — bounded fan-out.
       costProfile: "medium",
       // The audit template is more specific than the plain sequential default:
@@ -12730,6 +12805,17 @@ var RAW_REGISTRY = {
       maturityTier: "stable",
       latencyClass: "multi-llm-panel",
       authorityTier: "advisory",
+      /**
+       * #4655. Voters run through the same CLI bridge (consensus-vote.ts:444),
+       * but the strategy itself only persists vote records and cost summaries
+       * into the nexus data dir — it runs no repo tooling.
+       */
+      executeEnvelope: {
+        filesystem: "nexus-data-dir",
+        spawn: "agent-cli",
+        network: ["llm-provider"],
+        vcs: "none"
+      },
       // N independent voter calls per decision (up to the 7-voter panel) — high.
       costProfile: "high",
       // An explicit consensus requirement outranks every template/pattern choice.
@@ -12762,6 +12848,16 @@ var RAW_REGISTRY = {
       maturityTier: "stable",
       latencyClass: "pipeline",
       authorityTier: "suggest",
+      /**
+       * #4655. `research` is a literal alias of the pipeline executor
+       * (run-tool.ts:288), so its envelope must match `pipeline` exactly.
+       */
+      executeEnvelope: {
+        filesystem: "repo",
+        spawn: "dev-tooling",
+        network: ["llm-provider", "web"],
+        vcs: "none"
+      },
       // Spend scales with research breadth (sources gathered, depth) — input-dependent.
       costProfile: "variable",
       // A research template outranks the structural pattern fallback.
@@ -14905,7 +15001,7 @@ var CompositeRouter = class _CompositeRouter {
    */
   async consultUnifiedContext(task) {
     try {
-      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-JNXUAPWJ.js");
+      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-FSV4WUJO.js");
       const ctx = await getContextForTask({
         task: task.content,
         category: inferTaskCategory(task.content),
@@ -16494,4 +16590,4 @@ export {
   AgentCapability,
   OrchestratorError
 };
-//# sourceMappingURL=chunk-6VUIQQ3O.js.map
+//# sourceMappingURL=chunk-3VZWKZ5Q.js.map