nexus-agents 3.4.3 → 3.4.5

package/dist/{child-mcp-config-EXZDHJBP.js → child-mcp-config-RPGCCPR7.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SNJNRDKZ.js";
 import {
   createLogger
-} from "./chunk-26NSVQ65.js";
+} from "./chunk-FBTBH65X.js";
 import "./chunk-2HUC6NZN.js";
 import "./chunk-OQLFRJCW.js";
 import "./chunk-ZPWHCABL.js";
@@ -62,4 +62,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-EXZDHJBP.js.map
+//# sourceMappingURL=child-mcp-config-RPGCCPR7.js.map

package/dist/{chunk-U64WRZQ2.js → chunk-2KOTMA3Y.js}

@@ -11,7 +11,7 @@ import {
   createGetRetryConfig,
   createGetTimeout,
   createGetToolRateLimit
-} from "./chunk-26NSVQ65.js";
+} from "./chunk-FBTBH65X.js";
 
 // src/config/defaults.ts
 var CUSTOM_API_DEFAULT_MODEL = "gpt-5.5";
@@ -230,4 +230,4 @@ export {
   CUSTOM_API_DEFAULT_MODEL,
   DEFAULTS
 };
-//# sourceMappingURL=chunk-U64WRZQ2.js.map
+//# sourceMappingURL=chunk-2KOTMA3Y.js.map

package/dist/{chunk-DGMNPTPG.js → chunk-5542NZXG.js}

@@ -9,11 +9,11 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-G2C4WNK7.js";
+} from "./chunk-Z53SVS5A.js";
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-26NSVQ65.js";
+} from "./chunk-FBTBH65X.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
 import { randomUUID } from "crypto";
@@ -288,4 +288,4 @@ export {
   formatReviewComment,
   createFailedReview
 };
-//# sourceMappingURL=chunk-DGMNPTPG.js.map
+//# sourceMappingURL=chunk-5542NZXG.js.map

package/dist/{chunk-IHMUW7N5.js → chunk-6DDKUQFD.js}

@@ -2,7 +2,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-26NSVQ65.js";
+} from "./chunk-FBTBH65X.js";
 
 // src/scm/token-resolver.ts
 import { execFile } from "child_process";
@@ -87,4 +87,4 @@ export {
   hasToken,
   getTokenEnvVars
 };
-//# sourceMappingURL=chunk-IHMUW7N5.js.map
+//# sourceMappingURL=chunk-6DDKUQFD.js.map

package/dist/{chunk-7OVUQKM2.js → chunk-7BBHGO7A.js}

@@ -8,7 +8,7 @@ import {
   getTimeProvider,
   isRateLimitText,
   ok
-} from "./chunk-26NSVQ65.js";
+} from "./chunk-FBTBH65X.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -540,4 +540,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-7OVUQKM2.js.map
+//# sourceMappingURL=chunk-7BBHGO7A.js.map

package/dist/{chunk-CYXQRAJ2.js → chunk-CG5TS6GJ.js}

@@ -1,17 +1,17 @@
 import {
   computeCostDetail,
   recordUsageEvent
-} from "./chunk-YWGMDZR4.js";
+} from "./chunk-TU25EPBM.js";
 import {
   BaseAdapter,
   createStream,
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-EV42DVHG.js";
+} from "./chunk-PHEB64A5.js";
 import {
   assertCustomApiHostResolvesPublic
-} from "./chunk-FSDHFY3C.js";
+} from "./chunk-XND2FD6I.js";
 import {
   ConfigError,
   ModelCapability,
@@ -22,7 +22,7 @@ import {
   getTimeProvider,
   getTokenEstimator,
   ok
-} from "./chunk-26NSVQ65.js";
+} from "./chunk-FBTBH65X.js";
 
 // src/adapters/openai-types.ts
 var OPENAI_MODELS = {
@@ -831,4 +831,4 @@ export {
   discoverModels,
   buildOpenAICompatAdapters
 };
-//# sourceMappingURL=chunk-CYXQRAJ2.js.map
+//# sourceMappingURL=chunk-CG5TS6GJ.js.map

package/dist/{chunk-YC3RAOU5.js → chunk-DXORNOYR.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-26NSVQ65.js";
+} from "./chunk-FBTBH65X.js";
 
 // src/context/session-memory.ts
 import * as fs from "fs";
@@ -352,4 +352,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-YC3RAOU5.js.map
+//# sourceMappingURL=chunk-DXORNOYR.js.map

package/dist/{chunk-NNBX6YZI.js → chunk-F4SOZWM5.js}

@@ -2,7 +2,7 @@ import {
   TASK_CATEGORIES,
   getAdaptiveBonus,
   getOutcomeStore
-} from "./chunk-26NSVQ65.js";
+} from "./chunk-FBTBH65X.js";
 
 // src/cli/doctor-deep.ts
 var CLI_NAMES = ["claude", "gemini", "codex", "opencode"];
@@ -106,4 +106,4 @@ export {
   runDeepDiagnostics,
   formatDeepDiagnostics
 };
-//# sourceMappingURL=chunk-NNBX6YZI.js.map
+//# sourceMappingURL=chunk-F4SOZWM5.js.map

package/dist/{chunk-26NSVQ65.js → chunk-FBTBH65X.js}

@@ -2623,7 +2623,7 @@ function setDefaultRegistry(registry) {
 }
 async function reloadDefaultRegistry() {
   globalRegistry = buildDefaultRegistry();
-  const { resetGlobalRegistry } = await import("./unified-registry-7WZ2BLIC.js");
+  const { resetGlobalRegistry } = await import("./unified-registry-OOS6RFJT.js");
   resetGlobalRegistry();
   return globalRegistry;
 }
@@ -10852,6 +10852,13 @@ var SECURITY_KEYWORDS = [
   "xss",
   "csrf",
   "auth",
+  "authentication",
+  "authorization",
+  "authn",
+  "authz",
+  "oauth",
+  "unauthenticated",
+  "unauthorized",
   "penetration",
   "threat",
   "malware",
@@ -10877,6 +10884,36 @@ var ARCHITECTURE_KEYWORDS = [
 ];
 var PROMOTED_ROLES = /* @__PURE__ */ new Set(["security_expert", "architecture_expert"]);
 
+// src/mcp/gateway/keyword-match.ts
+var STEM_KEYWORDS = /* @__PURE__ */ new Set(["vulnerabilit", "cve-"]);
+var REGEX_KEYWORDS = /* @__PURE__ */ new Set(["refactor.*system"]);
+function escapeLiteral(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function stripCodeLikeTokens(text) {
+  return text.replace(/\S+\.(?:ts|tsx|js|jsx|mjs|cjs|json|ya?ml|md|toml|lock)\b/gi, " ").replace(/\b[\w.-]+\/[\w./-]+/g, " ");
+}
+function toPattern(keyword) {
+  if (REGEX_KEYWORDS.has(keyword)) return new RegExp(keyword, "i");
+  if (STEM_KEYWORDS.has(keyword)) return new RegExp(`\\b${escapeLiteral(keyword)}`, "i");
+  return new RegExp(`\\b${escapeLiteral(keyword)}\\b`, "i");
+}
+var PATTERNS = /* @__PURE__ */ new Map();
+function patternFor(keyword) {
+  const cached = PATTERNS.get(keyword);
+  if (cached !== void 0) return cached;
+  const built = toPattern(keyword);
+  PATTERNS.set(keyword, built);
+  return built;
+}
+function findMatchingKeyword(text, keywords) {
+  const prose = stripCodeLikeTokens(text);
+  return keywords.find((kw) => patternFor(kw).test(prose));
+}
+function matchesAnyKeyword(text, keywords) {
+  return findMatchingKeyword(text, keywords) !== void 0;
+}
+
 // src/mcp/gateway/tier-classifier.ts
 var TOOL_TIER_MAP = {
   // Tier 1 — Read-only
@@ -10945,14 +10982,7 @@ function parseTierOverrides(overrides) {
   return Object.keys(result).length > 0 ? result : void 0;
 }
 function containsPromotionKeyword(text) {
-  const lower = text.toLowerCase();
-  for (const kw of SECURITY_KEYWORDS) {
-    if (lower.includes(kw)) return true;
-  }
-  for (const kw of ARCHITECTURE_KEYWORDS) {
-    if (new RegExp(kw, "i").test(text)) return true;
-  }
-  return false;
+  return matchesAnyKeyword(text, SECURITY_KEYWORDS) || matchesAnyKeyword(text, ARCHITECTURE_KEYWORDS);
 }
 
 // src/mcp/gateway/tier-recommender.ts
@@ -14662,7 +14692,7 @@ var CompositeRouter = class _CompositeRouter {
    */
   async consultUnifiedContext(task) {
     try {
-      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-MBGPFZA7.js");
+      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-TCS3ZCHM.js");
       const ctx = await getContextForTask({
         task: task.content,
         category: inferTaskCategory(task.content),
@@ -16217,6 +16247,8 @@ export {
   SECURITY_KEYWORDS,
   ARCHITECTURE_KEYWORDS,
   PROMOTED_ROLES,
+  findMatchingKeyword,
+  matchesAnyKeyword,
   classifyRequestTier,
   parseTierOverrides,
   computeAdaptiveThresholds,
@@ -16246,4 +16278,4 @@ export {
   AgentCapability,
   OrchestratorError
 };
-//# sourceMappingURL=chunk-26NSVQ65.js.map
+//# sourceMappingURL=chunk-FBTBH65X.js.map