nexus-agents 8.119.0 → 8.121.0

package/dist/{ast-rule-runner-FYYKLLPP.js → ast-rule-runner-SDHMWTXU.js}

@@ -9,9 +9,9 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-YGM44KWX.js";
+} from "./chunk-QSNMA5UG.js";
 import "./chunk-XEPZSDN5.js";
-import "./chunk-AGLJ5HC6.js";
+import "./chunk-DIEZXS7C.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -27,4 +27,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-FYYKLLPP.js.map
+//# sourceMappingURL=ast-rule-runner-SDHMWTXU.js.map

package/dist/{child-mcp-config-XPFSENYA.js → child-mcp-config-NPZCRCIF.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-OITVVSWO.js";
 import {
   createLogger
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
 import "./chunk-PX6F3LHL.js";
@@ -49,4 +49,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-XPFSENYA.js.map
+//# sourceMappingURL=child-mcp-config-NPZCRCIF.js.map

package/dist/{chunk-DSS3IZBD.js → chunk-2R4VI2T3.js}

@@ -12,7 +12,7 @@ import {
   isRateLimitText,
   observedArmDisplaySlot,
   ok
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -614,4 +614,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-DSS3IZBD.js.map
+//# sourceMappingURL=chunk-2R4VI2T3.js.map

package/dist/{chunk-VTQP7NEX.js → chunk-5KGJP263.js}

@@ -4,7 +4,7 @@ import {
 import {
   assessReputation,
   sanitizeInput
-} from "./chunk-W4QXKXZ5.js";
+} from "./chunk-AVJ6AMGT.js";
 import {
   allOf
 } from "./chunk-EZNIYU5T.js";
@@ -13,7 +13,7 @@ import {
   err,
   getTimeProvider,
   ok
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
 import { randomUUID } from "node:crypto";
@@ -477,4 +477,4 @@ export {
   createFailedReview,
   reviewPostingBlock
 };
-//# sourceMappingURL=chunk-VTQP7NEX.js.map
+//# sourceMappingURL=chunk-5KGJP263.js.map

package/dist/{chunk-GMJ64YRZ.js → chunk-6K5OU3EA.js}

@@ -7,7 +7,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 
 // src/adapters/gateway-redaction.ts
 var GATEWAY_REDACTED = "<redacted>";
@@ -341,4 +341,4 @@ export {
   validateCustomApiBaseUrl,
   assertCustomApiHostResolvesPublic
 };
-//# sourceMappingURL=chunk-GMJ64YRZ.js.map
+//# sourceMappingURL=chunk-6K5OU3EA.js.map

package/dist/{chunk-7UJMX3NX.js → chunk-74NOCE4H.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-SX5DB6UR.js";
 import {
   SessionMemory
-} from "./chunk-ED4IXZTH.js";
+} from "./chunk-KN3C2YSG.js";
 import {
   TRUST_TIER_NUMERIC,
   TrustTierSchema
@@ -22,7 +22,7 @@ import {
 } from "./chunk-MUJCGBZW.js";
 import {
   generateId
-} from "./chunk-UFRUE44X.js";
+} from "./chunk-TKV6IYJ4.js";
 import {
   ErrorCode,
   NexusError,
@@ -36,7 +36,7 @@ import {
   ok,
   openSqliteDatabase,
   setSharedMobiMemDbPathResolver
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 import {
   nexusDataPath
 } from "./chunk-LWOX65CP.js";
@@ -5843,4 +5843,4 @@ export {
   shutdownToolMemory,
   ToolMemoryManager
 };
-//# sourceMappingURL=chunk-7UJMX3NX.js.map
+//# sourceMappingURL=chunk-74NOCE4H.js.map

package/dist/{chunk-FKRWRXLE.js → chunk-7LAGIDPY.js}

@@ -2,7 +2,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 
 // src/scm/token-resolver.ts
 import { execFile } from "node:child_process";
@@ -87,4 +87,4 @@ export {
   hasToken,
   getTokenEnvVars
 };
-//# sourceMappingURL=chunk-FKRWRXLE.js.map
+//# sourceMappingURL=chunk-7LAGIDPY.js.map

package/dist/{chunk-BDOGS7WG.js → chunk-ASFX3JAO.js}

@@ -1,10 +1,10 @@
 import {
   getTimeProvider
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "8.119.0" : "dev";
+var VERSION = true ? "8.121.0" : "dev";
 var NODE_ENGINE_RANGE = ">=22.5.0";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -106,4 +106,4 @@ export {
   contextForLogging,
   measuredTrustTier
 };
-//# sourceMappingURL=chunk-BDOGS7WG.js.map
+//# sourceMappingURL=chunk-ASFX3JAO.js.map

package/dist/{chunk-W4QXKXZ5.js → chunk-AVJ6AMGT.js}

@@ -7,7 +7,7 @@ import {
   CACHE_TIMEOUTS,
   createLogger,
   getTimeProvider
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 
 // src/security/input-sanitizer.ts
 var DANGEROUS_HTML_PATTERN = /<(picture|source|img)\b[^>]*>[\s\S]*?<\/\1>|<(picture|source|img)\b[^>]*\/?>/gi;
@@ -509,4 +509,4 @@ export {
   resolveReputationGatingMode,
   gateWithReputation
 };
-//# sourceMappingURL=chunk-W4QXKXZ5.js.map
+//# sourceMappingURL=chunk-AVJ6AMGT.js.map

package/dist/{chunk-IUZAW2QV.js → chunk-B3GWSR2R.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-WBUQN5RD.js";
+} from "./chunk-V7LZT5KN.js";
 import {
   ReputationCache,
   assessReputation,
@@ -9,10 +9,10 @@ import {
   resolveEnvMode,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-W4QXKXZ5.js";
+} from "./chunk-AVJ6AMGT.js";
 import {
   hasToken
-} from "./chunk-FKRWRXLE.js";
+} from "./chunk-7LAGIDPY.js";
 import {
   toContentTrustProvenanceRecord
 } from "./chunk-ZO6ZKR7L.js";
@@ -28,7 +28,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 
 // src/security/firewall/firewall-policy-mode.ts
 import { z } from "zod";
@@ -2661,4 +2661,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-IUZAW2QV.js.map
+//# sourceMappingURL=chunk-B3GWSR2R.js.map

package/dist/{chunk-BQJDVBCK.js → chunk-BBPMYYAT.js}

@@ -4,16 +4,16 @@ import {
   createOpenAICompatAdapter,
   discoverGatewayCatalog,
   readOpenAICompatEnv
-} from "./chunk-Q6KRNF54.js";
+} from "./chunk-RFR3EIDL.js";
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-SXEDI4V5.js";
+} from "./chunk-JOPVATLZ.js";
 import {
   gatewayProxyUrl
-} from "./chunk-SIY2AUF6.js";
+} from "./chunk-P7GJRX2R.js";
 import {
   redactGatewaySecrets
-} from "./chunk-GMJ64YRZ.js";
+} from "./chunk-6K5OU3EA.js";
 import {
   DEFAULT_OPENAI_COMPAT_ENDPOINT,
   GATEWAY_COST_ENV,
@@ -31,7 +31,7 @@ import {
   isCliDisabled,
   symbols,
   writeLine
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 
 // src/cli/doctor-gateway-slots.ts
 var FAMILY_SLOTS = [
@@ -398,4 +398,4 @@ export {
   formatGatewayReport,
   formatGatewaySlotWarnings
 };
-//# sourceMappingURL=chunk-BQJDVBCK.js.map
+//# sourceMappingURL=chunk-BBPMYYAT.js.map

package/dist/{chunk-KUAUYG5I.js → chunk-BGLJOUVX.js}

@@ -9,7 +9,7 @@ import {
   logGatewaySlotMapping,
   resolveModelIdentitySync,
   setGatewaySlotCatalog
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 
 // src/config/model-availability.ts
 var DEFAULT_TTL_MS = 6e4;
@@ -160,7 +160,7 @@ function discoverGatewayOnce(logger = defaultLogger) {
 }
 async function runProbe(logger) {
   try {
-    const { buildOpenAICompatAdapters: build } = await import("./openai-compat-adapter-DCSJTDO2.js");
+    const { buildOpenAICompatAdapters: build } = await import("./openai-compat-adapter-OLYLE4LK.js");
     return await build(logger);
   } catch (error) {
     return err(new ConfigError(`Gateway discovery threw: ${getErrorMessage(error)}`));
@@ -291,4 +291,4 @@ export {
   setGatewayRediscovery,
   ensureGatewayDiscovered
 };
-//# sourceMappingURL=chunk-KUAUYG5I.js.map
+//# sourceMappingURL=chunk-BGLJOUVX.js.map

package/dist/{chunk-NVVDC4JB.js → chunk-CW5UVJGN.js}

@@ -1,6 +1,6 @@
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-SXEDI4V5.js";
+} from "./chunk-JOPVATLZ.js";
 import {
   nexusMkdtempSync
 } from "./chunk-OITVVSWO.js";
@@ -8,7 +8,7 @@ import {
   ensureGatewayDiscovered,
   gatewayDiscoveryStatus,
   getAvailabilityCache
-} from "./chunk-KUAUYG5I.js";
+} from "./chunk-BGLJOUVX.js";
 import {
   AdapterModelError,
   BaseAdapter,
@@ -17,8 +17,9 @@ import {
   planOptionalParams,
   readGatewayTransport,
   requireApiKey,
-  validateApiKeyPresence
-} from "./chunk-SIY2AUF6.js";
+  validateApiKeyPresence,
+  withGatewayUsageRecording
+} from "./chunk-P7GJRX2R.js";
 import {
   assertCustomApiHostResolvesPublic,
   hostnameOf,
@@ -27,22 +28,22 @@ import {
   readGatewayEnv,
   redactApiKey,
   validateCustomApiBaseUrl
-} from "./chunk-GMJ64YRZ.js";
+} from "./chunk-6K5OU3EA.js";
 import {
   sanitizeOutput
-} from "./chunk-OTPXA2UT.js";
+} from "./chunk-P5H2WLPA.js";
 import {
   extractSystemPrompt
 } from "./chunk-QZUG667L.js";
 import {
   generateHyphenId
-} from "./chunk-UFRUE44X.js";
+} from "./chunk-TKV6IYJ4.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG,
   getCliCircuitBreakerSnapshot,
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-DSS3IZBD.js";
+} from "./chunk-2R4VI2T3.js";
 import {
   CLI_NAMES,
   CLI_SUBPROCESS_TIMEOUTS,
@@ -114,7 +115,7 @@ import {
   unenforcedAccessModeRefusal,
   warnIfGatewayCostUndeclared,
   withEnforcedAccessMode
-} from "./chunk-AGLJ5HC6.js";
+} from "./chunk-DIEZXS7C.js";
 import {
   parseBoolValue
 } from "./chunk-LWOX65CP.js";
@@ -1308,6 +1309,62 @@ function createCliDetectionCache(config) {
   return new CliDetectionCache(config);
 }
 
+// src/adapters/auto-adapter-gateway.ts
+function tryCustomOpenAiAdapter(logger7) {
+  const {
+    baseUrl: customBaseUrl,
+    apiKey: customKey,
+    deprecated
+  } = readGatewayEnv(process.env, logger7);
+  if (customKey === void 0 || customBaseUrl === void 0) return null;
+  const choice = customModelChoice(logger7);
+  if (choice === null) return null;
+  const { modelId: customModelId, note } = choice;
+  const modelVerified = deprecated.some((use) => !use.shadowed) ? void 0 : choice.modelVerified;
+  const host = hostnameOf(customBaseUrl);
+  logger7.info("Using custom-openai SDK adapter", { model: customModelId, host });
+  const adapter = new SdkAdapter(
+    {
+      providerId: "custom-openai",
+      modelId: customModelId,
+      apiKey: customKey,
+      baseUrl: customBaseUrl
+    },
+    logger7
+  );
+  return {
+    // Snapshot the selection on the call's adapter, rather than reading the
+    // resilient proxy's mutable health after a refresh/failover (#6862).
+    // Always wrapped, so pricing never depends on whether discovery measured
+    // the choice: every custom-openai call is priced by the gateway declaration.
+    adapter: withGatewayUsageRecording(adapter, "api:custom-openai", modelVerified),
+    source: "api",
+    name: "custom-openai",
+    reason: `Using custom OpenAI-compatible gateway at ${host} (model: ${customModelId}${note})`,
+    ...modelVerified !== void 0 && { modelVerified }
+  };
+}
+function customModelChoice(logger7) {
+  const d = resolveGatewayDefault(process.env, logger7);
+  if (d.kind === "inactive") {
+    const modelId = process.env["NEXUS_CUSTOM_MODEL"] ?? CUSTOM_API_DEFAULT_MODEL;
+    if (gatewayDiscoveryStatus() !== "failed") return { modelId, note: "" };
+    logger7.warn(
+      `Gateway discovery failed, so the custom-openai model '${modelId}' is sent unverified; set NEXUS_CUSTOM_MODEL to a model the gateway serves, or run \`nexus-agents doctor --gateway\``,
+      { model: modelId }
+    );
+    return { modelId, note: "; unverified: gateway discovery failed", modelVerified: false };
+  }
+  if (d.kind === "resolved")
+    return {
+      modelId: d.adapter.modelId,
+      note: `; gateway default by ${d.via}`,
+      modelVerified: true
+    };
+  logger7.warn("Gateway catalogue has no chat model; the custom-openai default is unavailable");
+  return null;
+}
+
 // src/adapters/auto-adapter.ts
 var defaultLogger = createLogger({ component: "auto-adapter" });
 function resolveCache(config, logger7) {
@@ -1396,7 +1453,8 @@ function tryGatewaySlot(config, logger7) {
     adapter: createGatewaySlotAdapter(preferredCli, slot.adapter),
     source: "api",
     name: preferredCli,
-    reason: `CLI '${preferredCli}' is not available; gateway ${slot.family} model '${modelId}' serves the slot (${slot.via})`
+    reason: `CLI '${preferredCli}' is not available; gateway ${slot.family} model '${modelId}' serves the slot (${slot.via})`,
+    modelVerified: true
   };
 }
 function resolveApiKeyFromEnv(configKey, envVar) {
@@ -1446,47 +1504,6 @@ function tryApiAdapter(config, logger7) {
   logger7.info("No API keys available for any provider");
   return null;
 }
-function tryCustomOpenAiAdapter(logger7) {
-  const { baseUrl: customBaseUrl, apiKey: customKey } = readGatewayEnv(process.env, logger7);
-  if (customKey === void 0 || customBaseUrl === void 0) return null;
-  const choice = customModelChoice(logger7);
-  if (choice === null) return null;
-  const { modelId: customModelId, note } = choice;
-  const host = hostnameOf(customBaseUrl);
-  logger7.info("Using custom-openai SDK adapter", { model: customModelId, host });
-  return {
-    // The caller's logger reaches the adapter, so what it logs on a failed
-    // call is observable where the selection was made (#4392 inc 3 review).
-    adapter: new SdkAdapter(
-      {
-        providerId: "custom-openai",
-        modelId: customModelId,
-        apiKey: customKey,
-        baseUrl: customBaseUrl
-      },
-      logger7
-    ),
-    source: "api",
-    name: "custom-openai",
-    reason: `Using custom OpenAI-compatible gateway at ${host} (model: ${customModelId}${note})`
-  };
-}
-function customModelChoice(logger7) {
-  const d = resolveGatewayDefault(process.env, logger7);
-  if (d.kind === "inactive") {
-    const modelId = process.env["NEXUS_CUSTOM_MODEL"] ?? CUSTOM_API_DEFAULT_MODEL;
-    if (gatewayDiscoveryStatus() !== "failed") return { modelId, note: "" };
-    logger7.warn(
-      `Gateway discovery failed, so the custom-openai model '${modelId}' is sent unverified; set NEXUS_CUSTOM_MODEL to a model the gateway serves, or run \`nexus-agents doctor --gateway\``,
-      { model: modelId }
-    );
-    return { modelId, note: "; unverified: gateway discovery failed" };
-  }
-  if (d.kind === "resolved")
-    return { modelId: d.adapter.modelId, note: `; gateway default by ${d.via}` };
-  logger7.warn("Gateway catalogue has no chat model; the custom-openai default is unavailable");
-  return null;
-}
 function resolveApiVendor(name) {
   switch (name) {
     case "anthropic":
@@ -5573,4 +5590,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-NVVDC4JB.js.map
+//# sourceMappingURL=chunk-CW5UVJGN.js.map