nexus-agents 8.114.0 → 8.116.0

package/dist/{ast-rule-runner-ROCJS5V5.js → ast-rule-runner-GNHF4O4A.js}

@@ -9,9 +9,9 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-MW7YAOG7.js";
+} from "./chunk-G66CSQMK.js";
 import "./chunk-XEPZSDN5.js";
-import "./chunk-7S7DKO4D.js";
+import "./chunk-KZGDUTQN.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -27,4 +27,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-ROCJS5V5.js.map
+//# sourceMappingURL=ast-rule-runner-GNHF4O4A.js.map

package/dist/{child-mcp-config-CLT4G6JV.js → child-mcp-config-DLOIMQKO.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-OITVVSWO.js";
 import {
   createLogger
-} from "./chunk-7S7DKO4D.js";
+} from "./chunk-KZGDUTQN.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -49,4 +49,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-CLT4G6JV.js.map
+//# sourceMappingURL=child-mcp-config-DLOIMQKO.js.map

package/dist/{chunk-2PTEHHTT.js → chunk-4UB3C5R2.js}

@@ -4,7 +4,7 @@ import {
 import {
   assessReputation,
   sanitizeInput
-} from "./chunk-F2MBHW5Y.js";
+} from "./chunk-YYZQUSDZ.js";
 import {
   allOf
 } from "./chunk-EZNIYU5T.js";
@@ -13,7 +13,7 @@ import {
   err,
   getTimeProvider,
   ok
-} from "./chunk-7S7DKO4D.js";
+} from "./chunk-KZGDUTQN.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
 import { randomUUID } from "node:crypto";
@@ -477,4 +477,4 @@ export {
   createFailedReview,
   reviewPostingBlock
 };
-//# sourceMappingURL=chunk-2PTEHHTT.js.map
+//# sourceMappingURL=chunk-4UB3C5R2.js.map

package/dist/{chunk-PWWOIE47.js → chunk-64QDL4SB.js}

@@ -2,7 +2,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-7S7DKO4D.js";
+} from "./chunk-KZGDUTQN.js";
 
 // src/scm/token-resolver.ts
 import { execFile } from "node:child_process";
@@ -87,4 +87,4 @@ export {
   hasToken,
   getTokenEnvVars
 };
-//# sourceMappingURL=chunk-PWWOIE47.js.map
+//# sourceMappingURL=chunk-64QDL4SB.js.map

package/dist/{chunk-X3S62T3S.js → chunk-6UNJI3OG.js}

@@ -1,7 +1,7 @@
 import {
   getErrorMessage,
   getTimeProvider
-} from "./chunk-7S7DKO4D.js";
+} from "./chunk-KZGDUTQN.js";
 
 // src/adapters/gateway-rediscovery.ts
 var GATEWAY_REDISCOVERY_INTERVAL_MS = 6e4;
@@ -79,4 +79,4 @@ export {
   setGatewayRediscovery,
   ensureGatewayDiscovered
 };
-//# sourceMappingURL=chunk-X3S62T3S.js.map
+//# sourceMappingURL=chunk-6UNJI3OG.js.map

package/dist/{chunk-RWKINNVG.js → chunk-7FKLPIUM.js}

@@ -3,7 +3,7 @@ import {
   MODEL_IDS,
   getTimeProvider,
   resolveModelIdentitySync
-} from "./chunk-7S7DKO4D.js";
+} from "./chunk-KZGDUTQN.js";
 
 // src/config/model-availability.ts
 var DEFAULT_TTL_MS = 6e4;
@@ -150,4 +150,4 @@ export {
   resetAvailabilityCache,
   filterAvailableModels
 };
-//# sourceMappingURL=chunk-RWKINNVG.js.map
+//# sourceMappingURL=chunk-7FKLPIUM.js.map

package/dist/{chunk-AVTM3R4Z.js → chunk-B6M5WICO.js}

@@ -1,6 +1,6 @@
 import {
   SERVES_PROBE_PROMPT
-} from "./chunk-5TRZCY36.js";
+} from "./chunk-PHSLNOPR.js";
 import {
   checkGatewayHealth,
   cliFailsVerdict,
@@ -10,13 +10,13 @@ import {
   gatewaySlotServing,
   gatewayVerdict,
   printVoterTransportCheck
-} from "./chunk-LHVKCINJ.js";
+} from "./chunk-ZO6PWR53.js";
 import {
   NODE_ENGINE_RANGE,
   VERSION,
   isNodeVersionSupported,
   recordServerTransport
-} from "./chunk-UBEZZIYC.js";
+} from "./chunk-K3AUOQB2.js";
 import {
   allOf,
   anyOf
@@ -24,10 +24,10 @@ import {
 import {
   readOpenAICompatEndpoint,
   readOpenAICompatEnv
-} from "./chunk-7LBOZF2X.js";
+} from "./chunk-SNAHNAUS.js";
 import {
   claimGlobalRegistry
-} from "./chunk-2RXTHEUD.js";
+} from "./chunk-PUBYBZ2S.js";
 import {
   capitalize
 } from "./chunk-SX5DB6UR.js";
@@ -36,13 +36,14 @@ import {
   ClaudeCliAdapter,
   IN_FAMILY_FALLBACK_OPTION,
   codexMcpServerAvailable,
+  codexSandboxPreflight,
   createAllAdapters,
   isCliAdmitted,
   probeCli
-} from "./chunk-VWXR7HKU.js";
+} from "./chunk-C732JUHQ.js";
 import {
   resolveGatewayEnv
-} from "./chunk-YHPMSOFB.js";
+} from "./chunk-YPI2HTHK.js";
 import {
   getNexusTmpDir
 } from "./chunk-OITVVSWO.js";
@@ -68,7 +69,7 @@ import {
   resolveGatewayCostDeclaration,
   symbols,
   writeLine
-} from "./chunk-7S7DKO4D.js";
+} from "./chunk-KZGDUTQN.js";
 import {
   getLearningDir,
   getOutcomesFile,
@@ -444,6 +445,16 @@ function formatClaudeModelLine(probe) {
   return `${icon} Claude model ${probe.alias}: ${STATUS_LABEL[probe.status]}${detail}`;
 }
 
+// src/cli/doctor-codex-sandbox.ts
+function formatCodexSandboxLine(result) {
+  if (result === void 0) return void 0;
+  if (result.status === "ok") {
+    return `${colors.green}${symbols.check}${colors.reset} Codex read-only sandbox: available`;
+  }
+  const text = result.status === "broken" ? `unavailable \u2014 ${result.reason}; a running MCP server keeps this verdict until restarted` : `unknown \u2014 ${result.reason}; read-only execution proceeds with the configured sandbox`;
+  return `${colors.yellow}${symbols.warn}${colors.reset} Codex read-only sandbox: ${text}`;
+}
+
 // src/cli/doctor-disabled-clis.ts
 var DISABLED_BY_ENV = "disabled by NEXUS_DISABLED_CLIS";
 function disabledCliModelReason(cli, gateway, clis) {
@@ -867,6 +878,8 @@ function printDoctorResults(result) {
   for (const cli of result.clis) printCliResult(cli, covered.includes(cli.name));
   printCliListNotes(result);
   writeLine(formatClaudeModelLine(result.claudeModel));
+  const codexSandboxLine = formatCodexSandboxLine(result.codexSandbox);
+  if (codexSandboxLine !== void 0) writeLine(codexSandboxLine);
   writeLine("");
   writeLine(`${colors.cyan}Checking MCP configuration...${colors.reset}`);
   writeLine("");
@@ -1420,6 +1433,13 @@ function hasAnyAuthMethod(apiKeys, clis, gateway) {
 function measureGateway(check, probe) {
   return (check ?? checkGatewayHealth)({ probe: probe === true });
 }
+async function codexChecksForDoctor(clis, deps) {
+  const installed = clis.find((cli) => cli.name === "codex")?.installed === true;
+  if (!installed) return { mcpClientReady: false };
+  const mcpClientReady = codexMcpServerAvailable();
+  const codexSandbox = await (deps.probeCodexSandbox ?? codexSandboxPreflight)();
+  return { mcpClientReady, codexSandbox };
+}
 async function runDoctor(deps = {}) {
   const allClis = ["claude", "gemini", "codex", "opencode"];
   const disabledClis = allClis.filter((cli) => isCliDisabled(cli));
@@ -1431,8 +1451,7 @@ async function runDoctor(deps = {}) {
   const apiKeys = checkApiKeys();
   const configFile = checkConfigFile();
   const mcpServerReady = checkMcpServerReady();
-  const codexCheck = clis.find((c) => c.name === "codex");
-  const mcpClientReady = (codexCheck?.installed ?? false) && codexMcpServerAvailable();
+  const codexChecks = await codexChecksForDoctor(clis, deps);
   const learningPersistence = checkLearningPersistence();
   const sqliteCheck = await checkSqlite();
   const dataDirectory = checkDataDirectory();
@@ -1457,7 +1476,7 @@ async function runDoctor(deps = {}) {
     apiKeys,
     configFile,
     mcpServerReady,
-    mcpClientReady,
+    ...codexChecks,
     registryAdvisory,
     learningPersistence,
     sqliteCheck,
@@ -1478,7 +1497,7 @@ async function doctorCommand(options = {}) {
   options.onResult?.(result);
   printDoctorResults(result);
   if (options.gateway === true || options.probe === true) {
-    const { formatGatewayReport } = await import("./doctor-gateway-report-6SVJILTL.js");
+    const { formatGatewayReport } = await import("./doctor-gateway-report-BXCDIG32.js");
     for (const line of formatGatewayReport(result.gateway, result.clis)) {
       process.stdout.write(line + "\n");
     }
@@ -1497,13 +1516,13 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-B56LLZNT.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-VP6FGUDK.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
   }
   if (!result.configFile.found) {
-    const { runConfigInitSync } = await import("./setup-config-HNHBQG52.js");
+    const { runConfigInitSync } = await import("./setup-config-MXBTRCST.js");
     const configResult = runConfigInitSync(process.cwd(), false, false);
     if (configResult.success && configResult.created) {
       writeLine2(`\u2713 Generated config: ${configResult.path}`);
@@ -1599,4 +1618,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-AVTM3R4Z.js.map
+//# sourceMappingURL=chunk-B6M5WICO.js.map