nexus-agents 4.29.3 → 4.29.5

package/dist/{child-mcp-config-4CY57QIH.js → child-mcp-config-QOBQRH24.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-4OW67KT2.js";
 import {
   createLogger
-} from "./chunk-6Q4XUAE5.js";
+} from "./chunk-WJ5TFKDF.js";
 import "./chunk-GBHJ37V3.js";
 import "./chunk-OGHEKPLD.js";
 import "./chunk-ZPWHCABL.js";
@@ -62,4 +62,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-4CY57QIH.js.map
+//# sourceMappingURL=child-mcp-config-QOBQRH24.js.map

package/dist/{chunk-DETBD53N.js → chunk-2DBVUHFA.js}

@@ -2,7 +2,7 @@ import {
   TASK_CATEGORIES,
   getAdaptiveBonus,
   getOutcomeStore
-} from "./chunk-6Q4XUAE5.js";
+} from "./chunk-WJ5TFKDF.js";
 
 // src/cli/doctor-deep.ts
 var CLI_NAMES = ["claude", "gemini", "codex", "opencode"];
@@ -106,4 +106,4 @@ export {
   runDeepDiagnostics,
   formatDeepDiagnostics
 };
-//# sourceMappingURL=chunk-DETBD53N.js.map
+//# sourceMappingURL=chunk-2DBVUHFA.js.map

package/dist/{chunk-UBWHBW7S.js → chunk-3IM3OPZH.js}

@@ -2,7 +2,7 @@ import {
   CACHE_TIMEOUTS,
   createLogger,
   getTimeProvider
-} from "./chunk-6Q4XUAE5.js";
+} from "./chunk-WJ5TFKDF.js";
 
 // src/security/trust-types.ts
 import { z } from "zod";
@@ -560,4 +560,4 @@ export {
   resolveReputationGatingMode,
   gateWithReputation
 };
-//# sourceMappingURL=chunk-UBWHBW7S.js.map
+//# sourceMappingURL=chunk-3IM3OPZH.js.map

package/dist/{chunk-B5LCD3AL.js → chunk-3RZJU5JS.js}

@@ -5,13 +5,13 @@ import {
   loadTechniquesRegistry,
   resolveInsideRoot,
   savePapersRegistry
-} from "./chunk-TB3QGUDW.js";
+} from "./chunk-SFZ67DTA.js";
 import {
   resolveToken
-} from "./chunk-V353Q4L7.js";
+} from "./chunk-KXNT76HR.js";
 import {
   getToolMemory
-} from "./chunk-PU2NTY6U.js";
+} from "./chunk-WYKMINTU.js";
 import {
   capitalizeWords,
   tokenizeFiltered,
@@ -37,7 +37,7 @@ import {
   getTimeProvider,
   ok,
   registerPersistentDistillerFactory
-} from "./chunk-6Q4XUAE5.js";
+} from "./chunk-WJ5TFKDF.js";
 import {
   ensureLearningDir,
   getRulesFile
@@ -4132,4 +4132,4 @@ export {
   DEFAULT_CONTEXT_BUDGET_TOKENS,
   getContextPromptPrefix
 };
-//# sourceMappingURL=chunk-B5LCD3AL.js.map
+//# sourceMappingURL=chunk-3RZJU5JS.js.map

package/dist/{chunk-Q245FDK6.js → chunk-4ZDNZAGJ.js}

@@ -8,7 +8,7 @@ import {
   getTimeProvider,
   isRateLimitText,
   ok
-} from "./chunk-6Q4XUAE5.js";
+} from "./chunk-WJ5TFKDF.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -541,4 +541,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-Q245FDK6.js.map
+//# sourceMappingURL=chunk-4ZDNZAGJ.js.map

package/dist/{chunk-F3E6ZZO3.js → chunk-5RIAPSAF.js}

@@ -1,6 +1,6 @@
 import {
   generateSecurityPlan
-} from "./chunk-QFO77VBC.js";
+} from "./chunk-GZUHLCRE.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-HFOQKCD2.js";
@@ -21,12 +21,13 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-DDE4TLD6.js";
+} from "./chunk-I4M3ICTG.js";
 import {
   executeExpert
-} from "./chunk-XEGZYUPX.js";
+} from "./chunk-UPKYWLPL.js";
 import {
   JobStatusSchema,
+  VOTER_ROLES,
   abortJob,
   checkSimulationAllowed,
   collectRealVotes,
@@ -46,24 +47,24 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-MEU6YH4G.js";
+} from "./chunk-S6AUSZVL.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-I6JRNQ6S.js";
+} from "./chunk-JPTB4M6V.js";
 import {
   IssueTriage
-} from "./chunk-LLJ65HUO.js";
+} from "./chunk-FWRLD7W7.js";
 import {
   resolveEnvMode,
   sanitizeInput
-} from "./chunk-UBWHBW7S.js";
+} from "./chunk-3IM3OPZH.js";
 import {
   withPrerequisite
-} from "./chunk-IFL7MZQT.js";
+} from "./chunk-ZRBUE6WG.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -87,18 +88,18 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-JKLMPBSL.js";
+} from "./chunk-Q7GOBLAY.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
   emitPipelinePolicyEvent
-} from "./chunk-RV57MIQU.js";
+} from "./chunk-ULZFVZFW.js";
 import {
   EventTopics,
   createEvent,
   getGlobalEventBus,
   getGlobalRegistry
-} from "./chunk-N3SKF4YT.js";
+} from "./chunk-KYTV2JFH.js";
 import {
   IDENTIFIER_RE,
   LANG_VALUES,
@@ -131,29 +132,29 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-B5LCD3AL.js";
+} from "./chunk-3RZJU5JS.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   resolveInsideRoot
-} from "./chunk-TB3QGUDW.js";
+} from "./chunk-SFZ67DTA.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-V353Q4L7.js";
+} from "./chunk-KXNT76HR.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-PU2NTY6U.js";
+} from "./chunk-WYKMINTU.js";
 import {
   STOPWORDS,
   truncateWithInfo
 } from "./chunk-6T3EPABN.js";
 import {
   createSessionMemory
-} from "./chunk-N3NC2XCW.js";
+} from "./chunk-S4TJBGI2.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -171,25 +172,25 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-IED5SFCF.js";
+} from "./chunk-VOXVWYD4.js";
 import {
   BaseAdapter,
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-QUVWKVKU.js";
+} from "./chunk-CQHUNYJN.js";
 import {
   DEFAULTS
-} from "./chunk-2YI27D27.js";
+} from "./chunk-Z22LKOBY.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-X4DJYX63.js";
+} from "./chunk-SX2K66SG.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-OBMDRABJ.js";
+} from "./chunk-ISA73Z6I.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -293,7 +294,7 @@ import {
   selectStrategyByManifest,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-6Q4XUAE5.js";
+} from "./chunk-WJ5TFKDF.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
@@ -871,6 +872,9 @@ function levenshtein(a, b) {
 var positiveIntStr = z10.string().regex(/^\d+$/, "Must be a positive integer string");
 var boolStr = z10.enum(["true", "false"]);
 var floatStr = z10.string().regex(/^\d+(\.\d+)?$/, "Must be a non-negative number string");
+var boolLooseStr = z10.string().refine((v) => ["true", "1", "false", "0"].includes(v.toLowerCase()), {
+  message: "Must be one of: true, false, 1, 0"
+});
 var NexusEnvSchema = z10.object({
   // --- Timeouts ---
   NEXUS_TIMEOUT_CLI: positiveIntStr.optional(),
@@ -996,9 +1000,77 @@ var NexusEnvSchema = z10.object({
   NEXUS_HOOK_VERBOSE: boolStr.optional(),
   NEXUS_SESSIONS_DB: z10.string().optional(),
   NEXUS_DISABLE_SESSIONS: boolStr.optional(),
-  NEXUS_DISABLE_METRICS: boolStr.optional()
+  NEXUS_DISABLE_METRICS: boolStr.optional(),
+  // --- Read by production code but previously unregistered (#5142) ---
+  // Each type below was verified against the consuming call site, not inferred
+  // from the name. Registering with a wrong type would replace "unknown
+  // variable" with "invalid value" on a value that actually works — trading one
+  // misreport for a worse one. Variables whose accepted set needed a judgement
+  // call are tracked in docs/ops/env-schema-coverage-baseline.json instead.
+  // Paths, URLs, tokens and term lists: any non-empty string is legal, so
+  // z.string() is the accurate type rather than a permissive stand-in.
+  NEXUS_CODEPR_TOKEN: z10.string().optional(),
+  NEXUS_CUSTOM_API_BASE_URL: z10.string().optional(),
+  NEXUS_CUSTOM_API_KEY: z10.string().optional(),
+  NEXUS_CUSTOM_MODEL: z10.string().optional(),
+  NEXUS_MODEL_REGISTRY_OVERLAY: z10.string().optional(),
+  NEXUS_OPENAI_COMPAT_KEY: z10.string().optional(),
+  NEXUS_OPENAI_COMPAT_URL: z10.string().optional(),
+  NEXUS_OPENCODE_CONFIG: z10.string().optional(),
+  NEXUS_PR_REVIEW_RECORDS_PATH: z10.string().optional(),
+  NEXUS_SENSITIVE_REFS: z10.string().optional(),
+  NEXUS_SUBPROCESS_EXTRA_ENV: z10.string().optional(),
+  NEXUS_VOTE_RECORDS_PATH: z10.string().optional(),
+  // parseIntEnv / parseInt consumers: a non-integer is discarded in favour of
+  // the default, so reporting it as invalid tells the user their setting was
+  // ignored rather than letting it fail silently.
+  NEXUS_CI_HEALTH_MAX_BYTES: positiveIntStr.optional(),
+  NEXUS_IMPROVEMENT_REVIEW_INTERVAL_MS: positiveIntStr.optional(),
+  NEXUS_MCP_DEPTH: positiveIntStr.optional(),
+  NEXUS_SUBPROCESS_DEPTH: positiveIntStr.optional(),
+  // `0` is meaningful here — it disables async job dispatch entirely — so this
+  // is non-negative, not positive (job-concurrency.ts:106 accepts `>= 0`).
+  NEXUS_JOB_MAX_CONCURRENT_TOTAL: z10.string().regex(/^\d+$/, "Must be a non-negative integer string").optional(),
+  // parseBoolEnv consumers (config/defaults-env.ts:50). The helper accepts
+  // exactly true|1|false|0, case-insensitively — NOT yes/no/on/off, which fall
+  // through to the default. Accepting a wider set here would tell the user
+  // `yes` works when the code silently ignores it.
+  NEXUS_IMPROVEMENT_REVIEW_FILE_ISSUES: boolLooseStr.optional(),
+  NEXUS_NO_SCAFFOLD: boolLooseStr.optional(),
+  NEXUS_TUNE_ENFORCE: boolLooseStr.optional(),
+  NEXUS_VERSION_CHECK: boolLooseStr.optional(),
+  // Lowercased before parsing, so mixed case is genuinely accepted.
+  NEXUS_REPUTATION_GATING: z10.string().refine((v) => ["off", "audit", "enforce"].includes(v.toLowerCase()), {
+    message: "Must be one of: off, audit, enforce"
+  }).optional()
 });
 var KNOWN_NAMES = Object.keys(NexusEnvSchema.shape);
+var DYNAMIC_FAMILIES = [
+  {
+    // cli/voter-model-overrides.ts:24 — `NEXUS_VOTER_MODEL_${role.toUpperCase()}`
+    prefix: "NEXUS_VOTER_MODEL_",
+    suffixes: Object.keys(VOTER_ROLES).map((r) => r.toUpperCase())
+  },
+  {
+    // mcp/jobs/job-concurrency.ts:85 — `NEXUS_JOB_MAX_CONCURRENT_${tool.toUpperCase()}`
+    // The suffix is an arbitrary MCP tool name. Importing the tool registry here
+    // would couple config to MCP and risk an import cycle, so the suffix is
+    // matched structurally. The cost is honest and bounded: a misspelt TOOL name
+    // in this one family is not flagged. The alternative — leaving the whole
+    // family unregistered — misreports every CORRECT use, which is worse.
+    prefix: "NEXUS_JOB_MAX_CONCURRENT_",
+    suffixes: "any-identifier"
+  }
+];
+function isDynamicFamilyMember(name) {
+  return DYNAMIC_FAMILIES.some((family) => {
+    if (!name.startsWith(family.prefix)) return false;
+    const suffix = name.slice(family.prefix.length);
+    if (suffix === "") return false;
+    if (family.suffixes === "any-identifier") return /^[A-Z][A-Z0-9_]*$/.test(suffix);
+    return family.suffixes.includes(suffix);
+  });
+}
 function suggestSimilar(name, known) {
   let best = null;
   let bestDist = 4;
@@ -1015,6 +1087,9 @@ function classifyEnvKeys(nexusKeys, env) {
   const knownRecord = {};
   const unknownVars = [];
   for (const key of nexusKeys) {
+    if (isDynamicFamilyMember(key)) {
+      continue;
+    }
     if (KNOWN_NAMES.includes(key)) {
       const value = env[key];
       if (value !== void 0) {
@@ -29609,7 +29684,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-3FKBPUAP.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-O7ULA6GX.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -45406,7 +45481,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-BOGQS5GP.js");
+    const { createIssueTriage } = await import("./issue-triage-SDH7RVQ6.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -45434,7 +45509,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-V2O6X3DO.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-IARKL3BV.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -47215,7 +47290,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-KWYEIP5P.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-6VZAC4FV.js");
     const { getLearningDir } = await import("./learning-persistence-7O5QYDM7.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -47277,7 +47352,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-3TBYM4JY.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-2XTCURFY.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -47311,7 +47386,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-53POQURI.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-UUPXHSXM.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -47329,7 +47404,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-KWYEIP5P.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-6VZAC4FV.js");
     const { getLearningDir } = await import("./learning-persistence-7O5QYDM7.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -47448,7 +47523,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-X7GYVWC7.js");
+        const { executeVoting } = await import("./consensus-vote-ITFU2C77.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -47887,7 +47962,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-33AC5GSK.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-UPDIAIQH.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -47958,7 +48033,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-566UGL3B.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-WQCQRNPZ.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -51089,7 +51164,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-RUAHWBQX.js");
+    const { createScmProvider } = await import("./factory-4EUZKQ3C.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -51985,6 +52060,7 @@ async function probeSource(source, includeModelIds) {
     return {
       transport: source.name,
       ok: true,
+      servesModels: ids.length > 0,
       modelCount: ids.length,
       sampleModelIds: ids.slice(0, 5),
       ...includeModelIds ? { modelIds: ids } : {}
@@ -51993,6 +52069,7 @@ async function probeSource(source, includeModelIds) {
     return {
       transport: source.name,
       ok: false,
+      servesModels: false,
       modelCount: 0,
       sampleModelIds: [],
       error: error instanceof Error ? error.message : String(error)
@@ -52002,7 +52079,7 @@ async function probeSource(source, includeModelIds) {
   }
 }
 async function defaultSources(includeOpenRouter) {
-  const { createAllAdapters: createAllAdapters2 } = await import("./factory-RBAYQAL2.js");
+  const { createAllAdapters: createAllAdapters2 } = await import("./factory-P2G2A5RD.js");
   const adapters = createAllAdapters2();
   return buildDefaultModelSources(adapters, { includeOpenRouter });
 }
@@ -52020,10 +52097,11 @@ async function listAvailableModelsHandler(args, deps, logger59) {
   const transports = await Promise.all(sources.map((s) => probeSource(s, includeModelIds)));
   const response = {
     transports,
-    healthyTransports: transports.filter((t) => t.ok).length,
+    healthyTransports: transports.filter((t) => t.servesModels).length,
+    reachableTransports: transports.filter((t) => t.ok).length,
     totalTransports: transports.length,
     totalModels: transports.reduce((sum, t) => sum + t.modelCount, 0),
-    note: "Probe results \u2014 existence only; the in-tree registry remains authoritative for pricing/capability."
+    note: "Probe results \u2014 existence only; the in-tree registry remains authoritative for pricing/capability. healthyTransports counts transports that can serve a model; reachableTransports counts probes that merely succeeded."
   };
   logger59.debug("list_available_models probed transports", {
     healthy: response.healthyTransports,
@@ -56073,4 +56151,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-F3E6ZZO3.js.map
+//# sourceMappingURL=chunk-5RIAPSAF.js.map