nexus-agents 8.100.0 → 8.102.0

package/dist/{ast-rule-runner-5S3B2F7B.js → ast-rule-runner-AWL7WA6O.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-PA3L4YLB.js";
-import "./chunk-F23W7Z6M.js";
+} from "./chunk-TDJ2FZF3.js";
+import "./chunk-NPLCVC3G.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -26,4 +26,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-5S3B2F7B.js.map
+//# sourceMappingURL=ast-rule-runner-AWL7WA6O.js.map

package/dist/{child-mcp-config-XAPZFOSJ.js → child-mcp-config-JQLYDUUY.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-OITVVSWO.js";
 import {
   createLogger
-} from "./chunk-F23W7Z6M.js";
+} from "./chunk-NPLCVC3G.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -56,4 +56,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-XAPZFOSJ.js.map
+//# sourceMappingURL=child-mcp-config-JQLYDUUY.js.map

package/dist/{chunk-OUBCCWNV.js → chunk-22ORYF2M.js}

@@ -1,12 +1,12 @@
 import {
   VERSION
-} from "./chunk-BSTGUADO.js";
-import {
-  sanitizeErrorDetails
-} from "./chunk-2NDA4DHW.js";
+} from "./chunk-6I2O2TTX.js";
 import {
   DEFAULT_EXECUTION_MODE
 } from "./chunk-ECJ52NSK.js";
+import {
+  sanitizeErrorDetails
+} from "./chunk-2NDA4DHW.js";
 import {
   CACHE_TIMEOUTS,
   MCP_TIMEOUTS,
@@ -23,7 +23,7 @@ import {
   getTimeProvider,
   ok,
   resolveToolClassGuardMs
-} from "./chunk-F23W7Z6M.js";
+} from "./chunk-NPLCVC3G.js";
 import {
   getNexusDataDir,
   parseBoolValue
@@ -2342,4 +2342,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-OUBCCWNV.js.map
+//# sourceMappingURL=chunk-22ORYF2M.js.map

package/dist/{chunk-JMVE5ZMR.js → chunk-2JLWILT3.js}

@@ -1,9 +1,9 @@
 import {
   loadPapersRegistry
-} from "./chunk-XCKWAVAW.js";
+} from "./chunk-EQHSJEX3.js";
 import {
   getErrorMessage
-} from "./chunk-F23W7Z6M.js";
+} from "./chunk-NPLCVC3G.js";
 
 // src/cli/research-helpers-synthesize.ts
 import { z } from "zod";
@@ -876,4 +876,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=chunk-JMVE5ZMR.js.map
+//# sourceMappingURL=chunk-2JLWILT3.js.map

package/dist/{chunk-EN7RV5VK.js → chunk-3JPTRESH.js}

@@ -1,21 +1,27 @@
 import {
   SERVES_PROBE_PROMPT
-} from "./chunk-4ECZEXUP.js";
+} from "./chunk-HRWT6UU6.js";
 import {
-  readOpenAICompatEndpoint,
-  readOpenAICompatEnv
-} from "./chunk-JBK2O46P.js";
-import {
-  allOf
-} from "./chunk-EZNIYU5T.js";
+  printVoterTransportCheck
+} from "./chunk-C2MLEXZC.js";
 import {
   NODE_ENGINE_RANGE,
   VERSION,
   isNodeVersionSupported
-} from "./chunk-BSTGUADO.js";
+} from "./chunk-6I2O2TTX.js";
+import {
+  allOf
+} from "./chunk-EZNIYU5T.js";
+import {
+  checkGatewayHost,
+  createOpenAICompatAdapter,
+  discoverGatewayCatalog,
+  readOpenAICompatEndpoint,
+  readOpenAICompatEnv
+} from "./chunk-EZSDF2RN.js";
 import {
   claimGlobalRegistry
-} from "./chunk-FRZN32H3.js";
+} from "./chunk-RWH4GY4O.js";
 import {
   capitalize
 } from "./chunk-7LP6VJRP.js";
@@ -27,27 +33,26 @@ import {
   createAllAdapters,
   isCliDisabled,
   probeCli
-} from "./chunk-QYDVF72S.js";
+} from "./chunk-DXWTSSZ5.js";
+import {
+  gatewayProxyUrl
+} from "./chunk-7IP3RMJY.js";
 import {
   resolveGatewayEnv
-} from "./chunk-KCK5ASQG.js";
+} from "./chunk-NEZQ3YTI.js";
 import {
   getNexusTmpDir
 } from "./chunk-OITVVSWO.js";
 import {
   DEFAULT_CAPABILITIES,
-  DEFAULT_OPENAI_COMPAT_ENDPOINT,
-  GATEWAY_COST_ENV,
-  OPENAI_COMPAT_ENDPOINT_ENV,
-  OPENAI_COMPAT_KEY_ENV,
-  OPENAI_COMPAT_URL_ENV,
   colors,
   countEligibleOutcomesInFile,
   countRoutedOutcomesInFile,
   createLogger,
-  describeGatewayCostDeclaration,
   err,
   gatewayCostStatus,
+  gatewayModelFamily,
+  gatewaySlotMapping,
   getCliModelName,
   getDefaultModelForCli,
   getDefaultRegistry,
@@ -60,7 +65,7 @@ import {
   resolveGatewayCostDeclaration,
   symbols,
   writeLine
-} from "./chunk-F23W7Z6M.js";
+} from "./chunk-NPLCVC3G.js";
 import {
   getLearningDir,
   getOutcomesFile,
@@ -419,49 +424,6 @@ function formatClaudeModelLine(probe) {
   return `${icon} Claude model ${probe.alias}: ${STATUS_LABEL[probe.status]}${detail}`;
 }
 
-// src/cli/doctor-voter-transport.ts
-var CHECK = `${colors.green}${symbols.check}${colors.reset}`;
-var WARN = `${colors.yellow}${symbols.warn}${colors.reset}`;
-function printVoterTransportCheck(check) {
-  if (check.configured) {
-    writeLine(`${CHECK} Voter transport: In-process gateway`);
-    printGatewayCostLine(check.cost);
-    printDeprecatedEnvLines(check.deprecatedEnv);
-    return;
-  }
-  writeLine(`${CHECK} Voter transport: ${colors.dim}CLI subprocess${colors.reset}`);
-  writeLine(
-    `  ${colors.dim}Set ${OPENAI_COMPAT_URL_ENV} and ${OPENAI_COMPAT_KEY_ENV} for faster in-process voting${colors.reset}`
-  );
-  printDeprecatedEnvLines(check.deprecatedEnv);
-}
-function printDeprecatedEnvLines(deprecatedEnv) {
-  if (deprecatedEnv === void 0 || deprecatedEnv.length === 0) return;
-  for (const d of deprecatedEnv) {
-    const status = d.shadowed ? `ignored because ${d.replacement} is set` : "honoured";
-    writeLine(
-      `${WARN} ${d.name} is deprecated \u2014 use ${d.replacement} (alias until the next major, #6291); ${status}`
-    );
-  }
-  writeLine(
-    `  ${colors.dim}The legacy names configure only the single-model custom-openai path; renaming to NEXUS_OPENAI_COMPAT_* opts into the gateway path (model discovery, in-process voter transport, api:<endpoint> arm)${colors.reset}`
-  );
-}
-var CEILING_CONSEQUENCE = "the task-class cost ceiling and the per-task budget exclude this gateway until declared";
-var GAP_LINES = {
-  unset: `Gateway cost: UNSET \u2014 set ${GATEWAY_COST_ENV}=free|local|priced[:<in>,<out>]; ${CEILING_CONSEQUENCE}`,
-  invalid: `Gateway cost: INVALID \u2014 ${GATEWAY_COST_ENV} does not parse (the startup env warning names the reason); ${CEILING_CONSEQUENCE}`,
-  "no-default": `Gateway cost: NOT DECLARED for the voter gateway \u2014 ${GATEWAY_COST_ENV} names neither a bare declaration nor this gateway's endpoint (${OPENAI_COMPAT_ENDPOINT_ENV}, default ${DEFAULT_OPENAI_COMPAT_ENDPOINT}); add a bare or <endpoint>= entry; ${CEILING_CONSEQUENCE}`
-};
-function printGatewayCostLine(cost) {
-  if (cost === void 0) return;
-  if (typeof cost === "string") {
-    writeLine(`${WARN} ${GAP_LINES[cost]}`);
-    return;
-  }
-  writeLine(`${CHECK} Gateway cost: ${describeGatewayCostDeclaration(cost)}`);
-}
-
 // src/cli/doctor-disabled-clis.ts
 function printDisabledClis(disabled) {
   if (disabled.length === 0) return;
@@ -520,9 +482,129 @@ function readGlobalVersion(exec) {
   }
 }
 
+// src/cli/doctor-gateway.ts
+var PROBE_FAMILIES = ["anthropic", "openai", "google"];
+var PROBE_SLOT = {
+  anthropic: "claude",
+  openai: "codex",
+  google: "gemini"
+};
+var PROBE_MAX_TOKENS = 256;
+var PROBE_TIMEOUT_MS = 3e4;
+async function checkGatewayHealth(options = {}) {
+  const config = options.config !== void 0 ? options.config : readOpenAICompatEnv();
+  if (config === null) return { state: "not_configured" };
+  const env = options.env ?? process.env;
+  const proxy = proxyStatus(config, env);
+  const guard = await checkGatewayHost(config.baseUrl);
+  if (guard.state === "refused_private_host") {
+    const { host: host2, reason, remedy } = guard;
+    return { state: "refused_private_host", host: host2, reason, remedy, proxy };
+  }
+  const host = guard.host;
+  const discovered = await discoverGatewayCatalog(config);
+  if (!discovered.ok) {
+    return {
+      state: "discovery_failed",
+      host,
+      error: redact(discovered.error.message, config),
+      proxy
+    };
+  }
+  const { listedCount, models } = discovered.value;
+  if (models.length === 0) return { state: "no_chat_models", host, listedCount, proxy };
+  const adapters = models.map((m) => createOpenAICompatAdapter(m.id, config, m.created));
+  const slots = gatewaySlotMapping(adapters, env);
+  return {
+    state: "healthy",
+    host,
+    listedCount,
+    chatCount: models.length,
+    allowlistActive: (config.modelAllowlist ?? []).length > 0,
+    census: censusOf(models.map((m) => m.id)),
+    slots,
+    proxy,
+    probes: options.probe === true ? await probeFamilies(adapters, slots, config) : "skipped"
+  };
+}
+function censusOf(ids) {
+  const census = {
+    anthropic: 0,
+    openai: 0,
+    google: 0,
+    unknown: 0
+  };
+  for (const id of ids) {
+    const family = gatewayModelFamily(id);
+    const bucket = family === void 0 || family === "other" ? "unknown" : family;
+    census[bucket] += 1;
+  }
+  return census;
+}
+function proxyStatus(config, env) {
+  if (config.proxyUrl !== void 0) return { kind: "proxy", proxyHost: proxyHostOf(config) };
+  if (gatewayProxyUrl(config.baseUrl, env) !== void 0) return { kind: "ignored" };
+  const withoutNoProxy = { ...env, no_proxy: void 0, NO_PROXY: void 0 };
+  if (gatewayProxyUrl(config.baseUrl, withoutNoProxy) !== void 0) return { kind: "exempt" };
+  return { kind: "direct" };
+}
+function proxyHostOf(config) {
+  try {
+    return new URL(config.proxyUrl ?? "").host;
+  } catch {
+    return "<unparseable proxy>";
+  }
+}
+async function probeFamilies(adapters, slots, config) {
+  const probes = [];
+  for (const family of PROBE_FAMILIES) {
+    const model = slots[PROBE_SLOT[family]];
+    const adapter = adapters.find((a) => a.modelId === model);
+    if (adapter === void 0) {
+      probes.push({ family, outcome: "no_model" });
+      continue;
+    }
+    probes.push(await probeOne(family, adapter, config));
+  }
+  return probes;
+}
+async function probeOne(family, adapter, config) {
+  const clock = getTimeProvider();
+  const started = clock.now();
+  const base = { family, model: adapter.modelId };
+  try {
+    const result = await adapter.complete({
+      messages: [{ role: "user", content: "Reply with the single word OK." }],
+      maxTokens: PROBE_MAX_TOKENS,
+      timeoutMs: PROBE_TIMEOUT_MS
+    });
+    const latencyMs = clock.now() - started;
+    if (result.ok) return { ...base, outcome: "ok", latencyMs };
+    return { ...base, outcome: "failed", latencyMs, error: redact(result.error.message, config) };
+  } catch (e) {
+    const latencyMs = clock.now() - started;
+    return { ...base, outcome: "failed", latencyMs, error: redact(getErrorMessage(e), config) };
+  }
+}
+function redact(message, config) {
+  const secrets = [config.apiKey, ...Object.values(config.extraHeaders ?? {})];
+  return secrets.filter((s) => s !== "").reduce((text, secret) => text.replaceAll(secret, "<redacted>"), message);
+}
+function gatewayVerdict(health) {
+  if (health.state === "not_configured") return "absent";
+  if (health.state !== "healthy") return "fail";
+  const failed = health.probes !== "skipped" && health.probes.some((p) => p.outcome === "failed");
+  return failed ? "fail" : "pass";
+}
+function cliFailsVerdict(cli, gateway) {
+  if (!cli.installed) return gateway !== "pass";
+  return !cli.authenticated || cli.versionStatus === "unsupported";
+}
+
 // src/cli/doctor-verdict-terms.ts
 function failingVerdictTerms(result) {
-  const terms = [];
+  const gateway = gatewayVerdict(result.gateway);
+  const terms = gatewayTerms(result.gateway, gateway);
   if (!result.nodeVersion.supported) terms.push("node version");
   if (!result.mcpServerReady) terms.push("MCP server");
   if (!installFreshnessIsHealthy(result.installFreshness)) {
@@ -530,13 +612,14 @@ function failingVerdictTerms(result) {
   }
   if (!scratchSeverityIsAcceptable(worstSeverity(result.scratchSpace))) terms.push("scratch space");
   for (const c of result.clis) {
-    if (!c.installed || !c.authenticated || c.versionStatus === "unsupported") {
-      terms.push(`CLI ${c.name}`);
-    }
+    if (cliFailsVerdict(c, gateway)) terms.push(`CLI ${c.name}`);
   }
-  if (result.clis.length === 0) terms.push("no CLIs detected");
+  if (result.clis.length === 0 && gateway !== "pass") terms.push("no CLIs detected");
   return terms;
 }
+function gatewayTerms(health, verdict) {
+  return verdict === "fail" && health.state !== "not_configured" ? [`gateway ${health.host}`] : [];
+}
 
 // src/cli/doctor-formatting.ts
 function formatStatus(healthy, warn = false) {
@@ -820,7 +903,7 @@ function printDoctorResults(result) {
   writeLine(`${colors.cyan}Checking MCP configuration...${colors.reset}`);
   writeLine("");
   printMcpModes(result);
-  printVoterTransportCheck(result.voterTransport);
+  printVoterTransportCheck(result.voterTransport, result.gateway);
   writeLine("");
   writeLine(`${colors.cyan}Checking capabilities...${colors.reset}`);
   writeLine("");
@@ -1336,17 +1419,20 @@ function voterGatewayCostDeclaration(endpoint) {
   return resolveGatewayCostDeclaration(`api:${endpoint}`) ?? "no-default";
 }
 function isAllHealthy(input) {
-  return input.nodeSupported && input.hasAuthMethod && input.mcpServerReady && installFreshnessIsHealthy(input.installFreshness) && scratchSeverityIsAcceptable(worstSeverity(input.scratchSpace)) && // whenEmpty = false: zero detected CLIs is not a healthy install (#4581).
-  allOf(
-    input.clis,
-    (c) => c.installed && c.authenticated && c.versionStatus !== "unsupported",
-    false
-  );
+  return input.gateway !== "fail" && input.nodeSupported && input.hasAuthMethod && input.mcpServerReady && installFreshnessIsHealthy(input.installFreshness) && scratchSeverityIsAcceptable(worstSeverity(input.scratchSpace)) && // whenEmpty: zero detected CLIs is not a healthy install (#4581) — unless
+  // a passing gateway serves the slots (#6609), as on a gateway-only host.
+  allOf(input.clis, (c) => !cliFailsVerdict(c, input.gateway), input.gateway === "pass");
 }
 function probeClaudeModelFor(clis, probe = (installed) => probeClaudePinnedModel({ installed })) {
   const claudeCheck = clis.find((c) => c.name === "claude");
   return probe(claudeCheck?.installed === true);
 }
+function hasAnyAuthMethod(apiKeys, clis, gateway) {
+  return apiKeys.some((k) => k.configured) || clis.some((c) => c.installed && c.authenticated) || gateway === "pass";
+}
+function measureGateway(check, probe) {
+  return (check ?? checkGatewayHealth)({ probe: probe === true });
+}
 async function runDoctor(deps = {}) {
   const allClis = ["claude", "gemini", "codex", "opencode"];
   const disabledClis = allClis.filter((cli) => isCliDisabled(cli));
@@ -1366,14 +1452,16 @@ async function runDoctor(deps = {}) {
   const dataDirectory = checkDataDirectory();
   const sandbox = checkSandbox();
   const env = collectEnvironmentChecks();
-  const hasAuthMethod = apiKeys.some((k) => k.configured) || clis.some((c) => c.installed && c.authenticated);
+  const gateway = await measureGateway(deps.checkGateway, deps.gatewayProbe);
+  const gatewayTerm = gatewayVerdict(gateway);
   const allHealthy = isAllHealthy({
     nodeSupported: nodeVersion.supported,
-    hasAuthMethod,
+    hasAuthMethod: hasAnyAuthMethod(apiKeys, clis, gatewayTerm),
     mcpServerReady,
     installFreshness: env.installFreshness,
     scratchSpace: env.scratchSpace,
-    clis
+    clis,
+    gateway: gatewayTerm
   });
   return {
     clis,
@@ -1389,14 +1477,19 @@ async function runDoctor(deps = {}) {
     dataDirectory,
     sandbox,
     ...env,
+    gateway,
     claudeModel,
     allHealthy,
     timestamp: new Date(getTimeProvider().now())
   };
 }
 async function doctorCommand(options = {}) {
-  const result = await runDoctor();
+  const result = await runDoctor({ gatewayProbe: options.probe === true });
   printDoctorResults(result);
+  if (options.gateway === true || options.probe === true) {
+    const { formatGatewayReport } = await import("./doctor-gateway-report-Q5RXOEMR.js");
+    for (const line of formatGatewayReport(result.gateway)) process.stdout.write(line + "\n");
+  }
   if (options.fix === true) {
     await runDoctorFix(result);
   }
@@ -1411,13 +1504,13 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-UXUSHIIL.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-7Y7A3RUJ.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
   }
   if (!result.configFile.found) {
-    const { runConfigInitSync } = await import("./setup-config-2EUIGDXM.js");
+    const { runConfigInitSync } = await import("./setup-config-YZ6E7RSF.js");
     const configResult = runConfigInitSync(process.cwd(), false, false);
     if (configResult.success && configResult.created) {
       writeLine2(`\u2713 Generated config: ${configResult.path}`);
@@ -1513,4 +1606,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-EN7RV5VK.js.map
+//# sourceMappingURL=chunk-3JPTRESH.js.map