nexus-agents 4.29.3 → 4.29.4

package/dist/{chunk-JKLMPBSL.js → chunk-4AIIPSOD.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-FXUZW7IY.js";
+} from "./chunk-FCCDE2MC.js";
 import {
   emitClawGuardViolation
 } from "./chunk-RV57MIQU.js";
@@ -2116,4 +2116,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-JKLMPBSL.js.map
+//# sourceMappingURL=chunk-4AIIPSOD.js.map

package/dist/{chunk-MEU6YH4G.js → chunk-DTKGR6NY.js}

@@ -23,7 +23,7 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-JKLMPBSL.js";
+} from "./chunk-4AIIPSOD.js";
 import {
   assessPanelIndependence,
   countDistinctModels,
@@ -6720,6 +6720,7 @@ function registerConsensusVoteTool(server, deps) {
 }
 
 export {
+  VOTER_ROLES,
   JobStatusSchema,
   isAbandonedJob,
   writeJobCancelled,
@@ -6737,7 +6738,6 @@ export {
   DEFAULT_VOTE_TIMEOUT_MS,
   isRateLimitError,
   PersistentOutcomeStore,
-  VOTER_ROLES,
   NoAdapterError,
   collectRealVotes,
   VotingRoundPhaseSchema,
@@ -6803,4 +6803,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-MEU6YH4G.js.map
+//# sourceMappingURL=chunk-DTKGR6NY.js.map

package/dist/chunk-FCCDE2MC.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "4.29.4" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-FCCDE2MC.js.map

package/dist/{chunk-IFL7MZQT.js → chunk-JL52FIXV.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-JKLMPBSL.js";
+} from "./chunk-4AIIPSOD.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2133,4 +2133,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-IFL7MZQT.js.map
+//# sourceMappingURL=chunk-JL52FIXV.js.map

package/dist/{chunk-DDE4TLD6.js → chunk-NIEIQARS.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-OQB3XC5O.js";
 import {
   VERSION
-} from "./chunk-FXUZW7IY.js";
+} from "./chunk-FCCDE2MC.js";
 import {
   capitalize
 } from "./chunk-6T3EPABN.js";
@@ -1201,7 +1201,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-R26GPW7G.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-2PDBROZJ.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1303,4 +1303,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-DDE4TLD6.js.map
+//# sourceMappingURL=chunk-NIEIQARS.js.map

package/dist/{chunk-F3E6ZZO3.js → chunk-XKVMHHAI.js}

@@ -21,12 +21,13 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-DDE4TLD6.js";
+} from "./chunk-NIEIQARS.js";
 import {
   executeExpert
 } from "./chunk-XEGZYUPX.js";
 import {
   JobStatusSchema,
+  VOTER_ROLES,
   abortJob,
   checkSimulationAllowed,
   collectRealVotes,
@@ -46,7 +47,7 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-MEU6YH4G.js";
+} from "./chunk-DTKGR6NY.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -63,7 +64,7 @@ import {
 } from "./chunk-UBWHBW7S.js";
 import {
   withPrerequisite
-} from "./chunk-IFL7MZQT.js";
+} from "./chunk-JL52FIXV.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -87,7 +88,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-JKLMPBSL.js";
+} from "./chunk-4AIIPSOD.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -871,6 +872,9 @@ function levenshtein(a, b) {
 var positiveIntStr = z10.string().regex(/^\d+$/, "Must be a positive integer string");
 var boolStr = z10.enum(["true", "false"]);
 var floatStr = z10.string().regex(/^\d+(\.\d+)?$/, "Must be a non-negative number string");
+var boolLooseStr = z10.string().refine((v) => ["true", "1", "false", "0"].includes(v.toLowerCase()), {
+  message: "Must be one of: true, false, 1, 0"
+});
 var NexusEnvSchema = z10.object({
   // --- Timeouts ---
   NEXUS_TIMEOUT_CLI: positiveIntStr.optional(),
@@ -996,9 +1000,77 @@ var NexusEnvSchema = z10.object({
   NEXUS_HOOK_VERBOSE: boolStr.optional(),
   NEXUS_SESSIONS_DB: z10.string().optional(),
   NEXUS_DISABLE_SESSIONS: boolStr.optional(),
-  NEXUS_DISABLE_METRICS: boolStr.optional()
+  NEXUS_DISABLE_METRICS: boolStr.optional(),
+  // --- Read by production code but previously unregistered (#5142) ---
+  // Each type below was verified against the consuming call site, not inferred
+  // from the name. Registering with a wrong type would replace "unknown
+  // variable" with "invalid value" on a value that actually works — trading one
+  // misreport for a worse one. Variables whose accepted set needed a judgement
+  // call are tracked in docs/ops/env-schema-coverage-baseline.json instead.
+  // Paths, URLs, tokens and term lists: any non-empty string is legal, so
+  // z.string() is the accurate type rather than a permissive stand-in.
+  NEXUS_CODEPR_TOKEN: z10.string().optional(),
+  NEXUS_CUSTOM_API_BASE_URL: z10.string().optional(),
+  NEXUS_CUSTOM_API_KEY: z10.string().optional(),
+  NEXUS_CUSTOM_MODEL: z10.string().optional(),
+  NEXUS_MODEL_REGISTRY_OVERLAY: z10.string().optional(),
+  NEXUS_OPENAI_COMPAT_KEY: z10.string().optional(),
+  NEXUS_OPENAI_COMPAT_URL: z10.string().optional(),
+  NEXUS_OPENCODE_CONFIG: z10.string().optional(),
+  NEXUS_PR_REVIEW_RECORDS_PATH: z10.string().optional(),
+  NEXUS_SENSITIVE_REFS: z10.string().optional(),
+  NEXUS_SUBPROCESS_EXTRA_ENV: z10.string().optional(),
+  NEXUS_VOTE_RECORDS_PATH: z10.string().optional(),
+  // parseIntEnv / parseInt consumers: a non-integer is discarded in favour of
+  // the default, so reporting it as invalid tells the user their setting was
+  // ignored rather than letting it fail silently.
+  NEXUS_CI_HEALTH_MAX_BYTES: positiveIntStr.optional(),
+  NEXUS_IMPROVEMENT_REVIEW_INTERVAL_MS: positiveIntStr.optional(),
+  NEXUS_MCP_DEPTH: positiveIntStr.optional(),
+  NEXUS_SUBPROCESS_DEPTH: positiveIntStr.optional(),
+  // `0` is meaningful here — it disables async job dispatch entirely — so this
+  // is non-negative, not positive (job-concurrency.ts:106 accepts `>= 0`).
+  NEXUS_JOB_MAX_CONCURRENT_TOTAL: z10.string().regex(/^\d+$/, "Must be a non-negative integer string").optional(),
+  // parseBoolEnv consumers (config/defaults-env.ts:50). The helper accepts
+  // exactly true|1|false|0, case-insensitively — NOT yes/no/on/off, which fall
+  // through to the default. Accepting a wider set here would tell the user
+  // `yes` works when the code silently ignores it.
+  NEXUS_IMPROVEMENT_REVIEW_FILE_ISSUES: boolLooseStr.optional(),
+  NEXUS_NO_SCAFFOLD: boolLooseStr.optional(),
+  NEXUS_TUNE_ENFORCE: boolLooseStr.optional(),
+  NEXUS_VERSION_CHECK: boolLooseStr.optional(),
+  // Lowercased before parsing, so mixed case is genuinely accepted.
+  NEXUS_REPUTATION_GATING: z10.string().refine((v) => ["off", "audit", "enforce"].includes(v.toLowerCase()), {
+    message: "Must be one of: off, audit, enforce"
+  }).optional()
 });
 var KNOWN_NAMES = Object.keys(NexusEnvSchema.shape);
+var DYNAMIC_FAMILIES = [
+  {
+    // cli/voter-model-overrides.ts:24 — `NEXUS_VOTER_MODEL_${role.toUpperCase()}`
+    prefix: "NEXUS_VOTER_MODEL_",
+    suffixes: Object.keys(VOTER_ROLES).map((r) => r.toUpperCase())
+  },
+  {
+    // mcp/jobs/job-concurrency.ts:85 — `NEXUS_JOB_MAX_CONCURRENT_${tool.toUpperCase()}`
+    // The suffix is an arbitrary MCP tool name. Importing the tool registry here
+    // would couple config to MCP and risk an import cycle, so the suffix is
+    // matched structurally. The cost is honest and bounded: a misspelt TOOL name
+    // in this one family is not flagged. The alternative — leaving the whole
+    // family unregistered — misreports every CORRECT use, which is worse.
+    prefix: "NEXUS_JOB_MAX_CONCURRENT_",
+    suffixes: "any-identifier"
+  }
+];
+function isDynamicFamilyMember(name) {
+  return DYNAMIC_FAMILIES.some((family) => {
+    if (!name.startsWith(family.prefix)) return false;
+    const suffix = name.slice(family.prefix.length);
+    if (suffix === "") return false;
+    if (family.suffixes === "any-identifier") return /^[A-Z][A-Z0-9_]*$/.test(suffix);
+    return family.suffixes.includes(suffix);
+  });
+}
 function suggestSimilar(name, known) {
   let best = null;
   let bestDist = 4;
@@ -1015,6 +1087,9 @@ function classifyEnvKeys(nexusKeys, env) {
   const knownRecord = {};
   const unknownVars = [];
   for (const key of nexusKeys) {
+    if (isDynamicFamilyMember(key)) {
+      continue;
+    }
     if (KNOWN_NAMES.includes(key)) {
       const value = env[key];
       if (value !== void 0) {
@@ -47448,7 +47523,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-X7GYVWC7.js");
+        const { executeVoting } = await import("./consensus-vote-4BCQ4GRD.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -51985,6 +52060,7 @@ async function probeSource(source, includeModelIds) {
     return {
       transport: source.name,
       ok: true,
+      servesModels: ids.length > 0,
       modelCount: ids.length,
       sampleModelIds: ids.slice(0, 5),
       ...includeModelIds ? { modelIds: ids } : {}
@@ -51993,6 +52069,7 @@ async function probeSource(source, includeModelIds) {
     return {
       transport: source.name,
       ok: false,
+      servesModels: false,
       modelCount: 0,
       sampleModelIds: [],
       error: error instanceof Error ? error.message : String(error)
@@ -52020,10 +52097,11 @@ async function listAvailableModelsHandler(args, deps, logger59) {
   const transports = await Promise.all(sources.map((s) => probeSource(s, includeModelIds)));
   const response = {
     transports,
-    healthyTransports: transports.filter((t) => t.ok).length,
+    healthyTransports: transports.filter((t) => t.servesModels).length,
+    reachableTransports: transports.filter((t) => t.ok).length,
     totalTransports: transports.length,
     totalModels: transports.reduce((sum, t) => sum + t.modelCount, 0),
-    note: "Probe results \u2014 existence only; the in-tree registry remains authoritative for pricing/capability."
+    note: "Probe results \u2014 existence only; the in-tree registry remains authoritative for pricing/capability. healthyTransports counts transports that can serve a model; reachableTransports counts probes that merely succeeded."
   };
   logger59.debug("list_available_models probed transports", {
     healthy: response.healthyTransports,
@@ -56073,4 +56151,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-F3E6ZZO3.js.map
+//# sourceMappingURL=chunk-XKVMHHAI.js.map