nexus-agents 8.130.4 → 8.130.6

package/dist/{ast-rule-runner-P42U5PCG.js → ast-rule-runner-3M77VFHJ.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-TPUD2XJI.js";
-import "./chunk-ZRB3WUEW.js";
+} from "./chunk-G5F44YKP.js";
+import "./chunk-VVQXRBA7.js";
 import "./chunk-XBEKMUTO.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
@@ -27,4 +27,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-P42U5PCG.js.map
+//# sourceMappingURL=ast-rule-runner-3M77VFHJ.js.map

package/dist/{child-mcp-config-JVBLHGPR.js → child-mcp-config-NHSUFBNN.js}

@@ -1,9 +1,9 @@
 import {
-  nexusMkdtemp
-} from "./chunk-OITVVSWO.js";
+  nexusMkdtempSync
+} from "./chunk-JPFRRNRR.js";
 import {
   createLogger
-} from "./chunk-ZRB3WUEW.js";
+} from "./chunk-VVQXRBA7.js";
 import "./chunk-XBEKMUTO.js";
 import "./chunk-UE7A2XHM.js";
 import "./chunk-LWOX65CP.js";
@@ -11,8 +11,21 @@ import "./chunk-PX6F3LHL.js";
 
 // src/cli-adapters/child-mcp-config.ts
 import { writeFile, rm } from "node:fs/promises";
+import { rmSync } from "node:fs";
 import { join } from "node:path";
 var logger = createLogger({ component: "swe-bench-mcp-config" });
+var activeMcpDirs = /* @__PURE__ */ new Set();
+function cleanupOnExit() {
+  for (const dir of activeMcpDirs) {
+    try {
+      rmSync(dir, { recursive: true, force: true });
+    } catch (error) {
+      logger.debug("MCP-config exit cleanup failed", {
+        error: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+}
 function resolveCliPath(override) {
   if (override !== void 0) return override;
   const distDir = join(__dirname, "..");
@@ -35,19 +48,30 @@ function buildConfig(options) {
 }
 async function generateMcpConfig(options) {
   const config = buildConfig(options);
-  const tempDir = await nexusMkdtemp("nexus-mcp-");
+  const tempDir = nexusMkdtempSync("nexus-mcp-");
   const configPath = join(tempDir, "mcp-config.json");
-  await writeFile(configPath, JSON.stringify(config, null, 2), "utf-8");
+  if (activeMcpDirs.size === 0) process.on("exit", cleanupOnExit);
+  activeMcpDirs.add(tempDir);
   const cleanup = async () => {
-    await rm(tempDir, { recursive: true, force: true }).catch((e) => {
+    try {
+      await rm(tempDir, { recursive: true, force: true });
+      activeMcpDirs.delete(tempDir);
+      if (activeMcpDirs.size === 0) process.removeListener("exit", cleanupOnExit);
+    } catch (e) {
       logger.debug("Best-effort cleanup failed", {
         error: e instanceof Error ? e.message : String(e)
       });
-    });
+    }
   };
-  return { configPath, cleanup };
+  try {
+    await writeFile(configPath, JSON.stringify(config, null, 2), "utf-8");
+    return { configPath, cleanup };
+  } catch (error) {
+    await cleanup();
+    throw error;
+  }
 }
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-JVBLHGPR.js.map
+//# sourceMappingURL=child-mcp-config-NHSUFBNN.js.map

package/dist/child-mcp-config-NHSUFBNN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli-adapters/child-mcp-config.ts"],"sourcesContent":["/**\n * nexus-agents/cli-adapters - Child CLI MCP Config Generator\n *\n * Generates MCP server configuration for child Claude CLI sessions so\n * spawned agents can call back into nexus-agents' MCP tools (memory,\n * research, etc.). Used by `pipeline/expert-bridge.ts` to give expert\n * agents tool access. Originally lived under `swe-bench/` (#1413);\n * relocated here in #2515 — the helper is generic CLI-spawn\n * infrastructure, not benchmark-specific.\n *\n * The generated config grants NO tool approvals. It only tells the child\n * where the nexus-agents MCP server is; whether an expert may actually call\n * one of its tools follows the host's Claude permission settings (for\n * example `defaultMode`). Measured 2026-09-24: in auto mode the calls run,\n * in default mode they are refused (#6784). An unused `allowedTools` list\n * that read like a guard but was never passed to the CLI was removed then.\n *\n * @module cli-adapters/child-mcp-config\n */\n\nimport { writeFile, rm } from 'node:fs/promises';\nimport { rmSync } from 'node:fs';\nimport { nexusMkdtempSync } from '../config/nexus-tmp-dir.js';\nimport { join } from 'node:path';\nimport { createLogger } from '../core/index.js';\n\nconst logger = createLogger({ component: 'swe-bench-mcp-config' });\n\n// Async finally blocks cannot run after process.exit (#4631). One listener\n// covers concurrent configs; SIGKILL cannot execute any in-process cleanup.\nconst activeMcpDirs = new Set<string>();\n\nfunction cleanupOnExit(): void {\n  for (const dir of activeMcpDirs) {\n    try {\n      rmSync(dir, { recursive: true, force: true });\n    } catch (error: unknown) {\n      logger.debug('MCP-config exit cleanup failed', {\n        error: error instanceof Error ? error.message : String(error),\n      });\n    }\n  }\n}\n\n/**\n * MCP server entry in Claude CLI config format.\n */\ninterface McpServerEntry {\n  readonly command: string;\n  readonly args: readonly string[];\n  readonly env?: Readonly<Record<string, string>>;\n}\n\n/**\n * MCP config file format for Claude CLI (--mcp-config).\n */\ninterface McpConfigFile {\n  readonly mcpServers: Readonly<Record<string, McpServerEntry>>;\n}\n\n/**\n * Options for generating MCP config.\n */\nexport interface McpConfigOptions {\n  /** Path to nexus-agents CLI entry point. */\n  readonly cliPath?: string;\n  /** Additional environment variables for the MCP server. */\n  readonly env?: Readonly<Record<string, string>>;\n}\n\n/**\n * Resolves the nexus-agents CLI path.\n * Uses the built dist/cli.js relative to this package.\n */\nfunction resolveCliPath(override?: string): string {\n  if (override !== undefined) return override;\n  // Resolve relative to this file: src/swe-bench/ → dist/cli.js\n  // At runtime we're in dist/swe-bench/, so go up one level\n  const distDir = join(__dirname, '..');\n  return join(distDir, 'cli.js');\n}\n\n/**\n * Env marker naming a child server (#6795). The child's stdio caller is an\n * expert CLI driven by a model, not the operator, so the child must not\n * measure it at tier 1; `connectTransport` reads this and records the caller\n * as unmeasured.\n */\nconst MCP_CHILD_ENV = 'NEXUS_MCP_CHILD';\n\n/**\n * Builds the MCP config object for a nexus-agents server.\n */\nfunction buildConfig(options?: McpConfigOptions): McpConfigFile {\n  const cliPath = resolveCliPath(options?.cliPath);\n\n  const entry: McpServerEntry = {\n    command: 'node',\n    args: [cliPath, '--mode=server'],\n    // The child marker is applied LAST so caller-supplied env cannot unset it.\n    env: { ...options?.env, [MCP_CHILD_ENV]: '1' },\n  };\n\n  return {\n    mcpServers: {\n      'nexus-agents': entry,\n    },\n  };\n}\n\n/**\n * Generated MCP config with path and cleanup function.\n */\nexport interface GeneratedMcpConfig {\n  /** Path to the generated config file. */\n  readonly configPath: string;\n  /** Cleanup function to remove temp files. */\n  readonly cleanup: () => Promise<void>;\n}\n\n/**\n * Generates an MCP config file for Claude CLI child sessions.\n *\n * Creates a temporary JSON file that can be passed to `claude --mcp-config`.\n * Returns the file path and a cleanup function.\n */\nexport async function generateMcpConfig(options?: McpConfigOptions): Promise<GeneratedMcpConfig> {\n  const config = buildConfig(options);\n\n  // Creation and exit registration must occur in one turn: async mkdtemp\n  // can finish in its worker before JS can register cleanup (#4631).\n  const tempDir = nexusMkdtempSync('nexus-mcp-');\n  const configPath = join(tempDir, 'mcp-config.json');\n\n  if (activeMcpDirs.size === 0) process.on('exit', cleanupOnExit);\n  activeMcpDirs.add(tempDir);\n\n  const cleanup = async (): Promise<void> => {\n    try {\n      await rm(tempDir, { recursive: true, force: true });\n      activeMcpDirs.delete(tempDir);\n      if (activeMcpDirs.size === 0) process.removeListener('exit', cleanupOnExit);\n    } catch (e: unknown) {\n      logger.debug('Best-effort cleanup failed', {\n        error: e instanceof Error ? e.message : String(e),\n      });\n    }\n  };\n\n  try {\n    await writeFile(configPath, JSON.stringify(config, null, 2), 'utf-8');\n    return { configPath, cleanup };\n  } catch (error: unknown) {\n    await cleanup();\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAoBA,SAAS,WAAW,UAAU;AAC9B,SAAS,cAAc;AAEvB,SAAS,YAAY;AAGrB,IAAM,SAAS,aAAa,EAAE,WAAW,uBAAuB,CAAC;AAIjE,IAAM,gBAAgB,oBAAI,IAAY;AAEtC,SAAS,gBAAsB;AAC7B,aAAW,OAAO,eAAe;AAC/B,QAAI;AACF,aAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IAC9C,SAAS,OAAgB;AACvB,aAAO,MAAM,kCAAkC;AAAA,QAC7C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAgCA,SAAS,eAAe,UAA2B;AACjD,MAAI,aAAa,OAAW,QAAO;AAGnC,QAAM,UAAU,KAAK,WAAW,IAAI;AACpC,SAAO,KAAK,SAAS,QAAQ;AAC/B;AAQA,IAAM,gBAAgB;AAKtB,SAAS,YAAY,SAA2C;AAC9D,QAAM,UAAU,eAAe,SAAS,OAAO;AAE/C,QAAM,QAAwB;AAAA,IAC5B,SAAS;AAAA,IACT,MAAM,CAAC,SAAS,eAAe;AAAA;AAAA,IAE/B,KAAK,EAAE,GAAG,SAAS,KAAK,CAAC,aAAa,GAAG,IAAI;AAAA,EAC/C;AAEA,SAAO;AAAA,IACL,YAAY;AAAA,MACV,gBAAgB;AAAA,IAClB;AAAA,EACF;AACF;AAkBA,eAAsB,kBAAkB,SAAyD;AAC/F,QAAM,SAAS,YAAY,OAAO;AAIlC,QAAM,UAAU,iBAAiB,YAAY;AAC7C,QAAM,aAAa,KAAK,SAAS,iBAAiB;AAElD,MAAI,cAAc,SAAS,EAAG,SAAQ,GAAG,QAAQ,aAAa;AAC9D,gBAAc,IAAI,OAAO;AAEzB,QAAM,UAAU,YAA2B;AACzC,QAAI;AACF,YAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAClD,oBAAc,OAAO,OAAO;AAC5B,UAAI,cAAc,SAAS,EAAG,SAAQ,eAAe,QAAQ,aAAa;AAAA,IAC5E,SAAS,GAAY;AACnB,aAAO,MAAM,8BAA8B;AAAA,QACzC,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,OAAO;AACpE,WAAO,EAAE,YAAY,QAAQ;AAAA,EAC/B,SAAS,OAAgB;AACvB,UAAM,QAAQ;AACd,UAAM;AAAA,EACR;AACF;","names":[]}

package/dist/{chunk-BMFPFCDH.js → chunk-2MWL47YX.js}

@@ -8,7 +8,7 @@ import {
   MCP_TIMEOUTS,
   TEST_TIMEOUTS,
   WORKFLOW_TIMEOUTS
-} from "./chunk-ZRB3WUEW.js";
+} from "./chunk-VVQXRBA7.js";
 import {
   createGetToolRateLimit
 } from "./chunk-LWOX65CP.js";
@@ -223,4 +223,4 @@ export {
   CUSTOM_API_DEFAULT_MODEL,
   DEFAULTS
 };
-//# sourceMappingURL=chunk-BMFPFCDH.js.map
+//# sourceMappingURL=chunk-2MWL47YX.js.map

package/dist/{chunk-G2OCXWFR.js → chunk-3MWUYHEE.js}

@@ -8,7 +8,7 @@ import {
   getAdaptiveBonus,
   getOutcomeStore,
   hasMeasuredCategory
-} from "./chunk-ZRB3WUEW.js";
+} from "./chunk-VVQXRBA7.js";
 
 // src/cli/doctor-deep.ts
 var CLI_NAMES = ["claude", "gemini", "codex", "opencode"];
@@ -148,4 +148,4 @@ export {
   runDeepDiagnostics,
   formatDeepDiagnostics
 };
-//# sourceMappingURL=chunk-G2OCXWFR.js.map
+//# sourceMappingURL=chunk-3MWUYHEE.js.map

package/dist/{chunk-JOYN26BG.js → chunk-4AP64XCN.js}

@@ -7,7 +7,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-ZRB3WUEW.js";
+} from "./chunk-VVQXRBA7.js";
 
 // src/adapters/gateway-redaction.ts
 var GATEWAY_REDACTED = "<redacted>";
@@ -341,4 +341,4 @@ export {
   validateCustomApiBaseUrl,
   assertCustomApiHostResolvesPublic
 };
-//# sourceMappingURL=chunk-JOYN26BG.js.map
+//# sourceMappingURL=chunk-4AP64XCN.js.map

package/dist/{chunk-QDGM3LNQ.js → chunk-4FYLSRZJ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-ZO6ZKR7L.js";
 import {
   SessionMemory
-} from "./chunk-5MNTAXZ4.js";
+} from "./chunk-ERHP5N36.js";
 import {
   TRUST_TIER_NUMERIC,
   TrustTierSchema
@@ -17,7 +17,7 @@ import {
 } from "./chunk-ROYGBFVE.js";
 import {
   generateId
-} from "./chunk-BLBAXXM7.js";
+} from "./chunk-P7F52452.js";
 import {
   ErrorCode,
   NexusError,
@@ -34,7 +34,7 @@ import {
   stringifyValue,
   tokenize,
   tokenizeFiltered
-} from "./chunk-ZRB3WUEW.js";
+} from "./chunk-VVQXRBA7.js";
 import {
   nexusDataPath
 } from "./chunk-LWOX65CP.js";
@@ -5841,4 +5841,4 @@ export {
   shutdownToolMemory,
   ToolMemoryManager
 };
-//# sourceMappingURL=chunk-QDGM3LNQ.js.map
+//# sourceMappingURL=chunk-4FYLSRZJ.js.map

package/dist/{chunk-LEWJQLEC.js → chunk-6YWV4ZAL.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-6SGB2REH.js";
+} from "./chunk-RSFEYQA5.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -21,7 +21,7 @@ import {
   hasMeasuredCategory,
   isDeclaredNeverDeprecate,
   isRegisteredToolName
-} from "./chunk-ZRB3WUEW.js";
+} from "./chunk-VVQXRBA7.js";
 import {
   getNexusDataDir,
   nexusDataPath
@@ -2428,4 +2428,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-LEWJQLEC.js.map
+//# sourceMappingURL=chunk-6YWV4ZAL.js.map

package/dist/{chunk-BVNRU5WX.js → chunk-B2LLOTB2.js}

@@ -1,14 +1,14 @@
 import {
   createAutoAdapter
-} from "./chunk-5FUAP5RK.js";
+} from "./chunk-JJU2GHK7.js";
 import {
   ensureGatewayDiscovered,
   gatewayDiscoveryGeneration
-} from "./chunk-VGGRQQ4L.js";
+} from "./chunk-HDDXP26H.js";
 import {
   getDefaultCliCircuitBreakerRegistry,
   mapModelErrorToCategory
-} from "./chunk-A3VN5QVF.js";
+} from "./chunk-EQTKZHO6.js";
 import {
   CircularBuffer,
   ConfigError,
@@ -33,7 +33,7 @@ import {
   recordRateLimitEvent,
   toRateLimitError,
   warnIfGatewayCostUndeclared
-} from "./chunk-ZRB3WUEW.js";
+} from "./chunk-VVQXRBA7.js";
 
 // src/agents/collaboration/event-bus-helpers.ts
 import { randomUUID } from "node:crypto";
@@ -1040,4 +1040,4 @@ export {
   getGlobalRegistry,
   resetGlobalRegistry
 };
-//# sourceMappingURL=chunk-BVNRU5WX.js.map
+//# sourceMappingURL=chunk-B2LLOTB2.js.map