nexus-agents 8.49.2 → 8.49.4

package/dist/{chunk-QMC6VZIG.js → chunk-JOGUFMAL.js}

@@ -1,6 +1,6 @@
 import {
   generateSecurityPlan
-} from "./chunk-RJSW5FD3.js";
+} from "./chunk-JPKYVL2B.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-4GDMHCKX.js";
@@ -21,10 +21,10 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-SQMOYI5K.js";
+} from "./chunk-ATLURWUL.js";
 import {
   executeExpert
-} from "./chunk-GLDK3R2H.js";
+} from "./chunk-XPEKWXUS.js";
 import {
   JobStatusSchema,
   VOTER_ROLES,
@@ -57,7 +57,7 @@ import {
   toJobSummary,
   updateStage,
   writeJobCancelled
-} from "./chunk-BRFZ37RM.js";
+} from "./chunk-FPYDHQD3.js";
 import {
   allOf,
   anyOf
@@ -65,19 +65,19 @@ import {
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-MPJILKDK.js";
+} from "./chunk-LGCWDR3L.js";
 import {
   IssueTriage,
   createDurableAuditSink,
   createDurableAuditTrail
-} from "./chunk-ZQVU3NKP.js";
+} from "./chunk-BDYQFMQK.js";
 import {
   resolveEnvMode,
   sanitizeInput
-} from "./chunk-4Y5TFSYP.js";
+} from "./chunk-7W52VFPC.js";
 import {
   withPrerequisite
-} from "./chunk-V6RCRB2O.js";
+} from "./chunk-W3JNCSL7.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -102,18 +102,18 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-2PSE4DWT.js";
+} from "./chunk-7MIW3J7Y.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
   emitPipelinePolicyEvent
-} from "./chunk-MOVW4ZFU.js";
+} from "./chunk-43LGGVVL.js";
 import {
   EventTopics,
   createEvent,
   getGlobalEventBus,
   getGlobalRegistry
-} from "./chunk-6GKP2RLC.js";
+} from "./chunk-WBLXK2PO.js";
 import {
   IDENTIFIER_RE,
   LANG_VALUES,
@@ -146,7 +146,7 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-FASXNWT3.js";
+} from "./chunk-IMBB776Y.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
@@ -154,25 +154,25 @@ import {
   loadTechniquesRegistry,
   resolveInsideRoot,
   resolveRegistryRoot
-} from "./chunk-WNEVQONR.js";
+} from "./chunk-Y6MCG2MI.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-53EL53NC.js";
+} from "./chunk-372VJU2A.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
   MemoryType,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-F6LB2JEI.js";
+} from "./chunk-FZ5RDVFM.js";
 import {
   STOPWORDS,
   truncateWithInfo
 } from "./chunk-7LP6VJRP.js";
 import {
   createSessionMemory
-} from "./chunk-2CB4RKGK.js";
+} from "./chunk-BN6K5SJZ.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -190,25 +190,25 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-GFW5IMOF.js";
+} from "./chunk-PJV4K6Z5.js";
 import {
   BaseAdapter,
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-YLTUPAKL.js";
+} from "./chunk-V6U6RRB3.js";
 import {
   DEFAULTS
-} from "./chunk-ZWJOB76B.js";
+} from "./chunk-KFCG7WOU.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-KITJQPDR.js";
+} from "./chunk-HMV2IMRW.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-P6D43B4F.js";
+} from "./chunk-AM2GECED.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -320,7 +320,7 @@ import {
   selectStrategyByManifest,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-VKBFV6OD.js";
+} from "./chunk-DFU7VH63.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
@@ -30029,7 +30029,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-JLTSIPDG.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-5U4EAFB5.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -45762,7 +45762,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-7QOEFZP5.js");
+    const { createIssueTriage } = await import("./issue-triage-NOI4YDMO.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -45790,7 +45790,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-GK7M6JDD.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-GUECULZG.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -46164,7 +46164,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-VJCYTWP3.js");
+    const { executeVoting } = await import("./consensus-vote-EL7K6J3C.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -47726,7 +47726,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-JUYGIQI4.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-AFBQBZWJ.js");
     const { getLearningDir } = await import("./learning-persistence-TQJVPLDN.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -47788,7 +47788,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-S3FP5MQY.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-H4GFL6DB.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -47822,7 +47822,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-7M3VSROJ.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-PW24UU5Q.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -47840,7 +47840,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-JUYGIQI4.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-AFBQBZWJ.js");
     const { getLearningDir } = await import("./learning-persistence-TQJVPLDN.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -47959,7 +47959,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-VJCYTWP3.js");
+        const { executeVoting } = await import("./consensus-vote-EL7K6J3C.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -48390,7 +48390,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-5LWQYXLC.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-KH7Q7F3V.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -48461,7 +48461,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-MTS46MYL.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-MSUGXPG5.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -51866,7 +51866,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-AX4DQMR4.js");
+    const { createScmProvider } = await import("./factory-ZZ7GTBR7.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -52797,7 +52797,7 @@ async function probeSource(source, includeModelIds) {
   }
 }
 async function defaultSources(includeOpenRouter) {
-  const { createAllAdapters: createAllAdapters2 } = await import("./factory-K6QWZRX3.js");
+  const { createAllAdapters: createAllAdapters2 } = await import("./factory-HQQQGPHK.js");
   const adapters = createAllAdapters2();
   return buildDefaultModelSources(adapters, { includeOpenRouter });
 }
@@ -56865,4 +56865,4 @@ export {
   startPipelineEventBridge,
   shutdownPipelineEventBridge
 };
-//# sourceMappingURL=chunk-QMC6VZIG.js.map
+//# sourceMappingURL=chunk-JOGUFMAL.js.map

package/dist/{chunk-RJSW5FD3.js → chunk-JPKYVL2B.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-VKBFV6OD.js";
+} from "./chunk-DFU7VH63.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -740,4 +740,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-RJSW5FD3.js.map
+//# sourceMappingURL=chunk-JPKYVL2B.js.map

package/dist/{chunk-ZWJOB76B.js → chunk-KFCG7WOU.js}

@@ -5,7 +5,7 @@ import {
   MCP_TIMEOUTS,
   TEST_TIMEOUTS,
   WORKFLOW_TIMEOUTS
-} from "./chunk-VKBFV6OD.js";
+} from "./chunk-DFU7VH63.js";
 import {
   createGetEnvVarDocumentation,
   createGetTimeout,
@@ -224,4 +224,4 @@ export {
   CUSTOM_API_DEFAULT_MODEL,
   DEFAULTS
 };
-//# sourceMappingURL=chunk-ZWJOB76B.js.map
+//# sourceMappingURL=chunk-KFCG7WOU.js.map

package/dist/{chunk-RCTVIHUT.js → chunk-KFWKOCQM.js}

@@ -4,7 +4,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-VKBFV6OD.js";
+} from "./chunk-DFU7VH63.js";
 
 // src/scm/types.ts
 var ScmError = class extends Error {
@@ -281,4 +281,4 @@ export {
   ScmError,
   GitHubProvider
 };
-//# sourceMappingURL=chunk-RCTVIHUT.js.map
+//# sourceMappingURL=chunk-KFWKOCQM.js.map

package/dist/{chunk-MPJILKDK.js → chunk-LGCWDR3L.js}

@@ -1,9 +1,9 @@
 import {
   loadPapersRegistry
-} from "./chunk-WNEVQONR.js";
+} from "./chunk-Y6MCG2MI.js";
 import {
   getErrorMessage
-} from "./chunk-VKBFV6OD.js";
+} from "./chunk-DFU7VH63.js";
 
 // src/cli/research-helpers-synthesize.ts
 import { z } from "zod";
@@ -876,4 +876,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=chunk-MPJILKDK.js.map
+//# sourceMappingURL=chunk-LGCWDR3L.js.map

package/dist/{chunk-FYFHFTZG.js → chunk-NWFBGL2J.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "8.49.2" : "dev";
+var VERSION = true ? "8.49.4" : "dev";
 var NODE_ENGINE_RANGE = ">=22.5.0";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -11,4 +11,4 @@ export {
   NODE_ENGINE_RANGE,
   isNodeVersionSupported
 };
-//# sourceMappingURL=chunk-FYFHFTZG.js.map
+//# sourceMappingURL=chunk-NWFBGL2J.js.map

package/dist/{chunk-N56KU4KM.js → chunk-P3Z7SLZM.js}

@@ -8,7 +8,7 @@ import {
   getTimeProvider,
   isRateLimitText,
   ok
-} from "./chunk-VKBFV6OD.js";
+} from "./chunk-DFU7VH63.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -541,4 +541,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-N56KU4KM.js.map
+//# sourceMappingURL=chunk-P3Z7SLZM.js.map

package/dist/{chunk-GFW5IMOF.js → chunk-PJV4K6Z5.js}

@@ -5,34 +5,34 @@ import {
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-YLTUPAKL.js";
+} from "./chunk-V6U6RRB3.js";
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-ZWJOB76B.js";
+} from "./chunk-KFCG7WOU.js";
 import {
   CUSTOM_API_BASE_URL_ENV,
   PROVIDER_ENV_KEYS,
   assertCustomApiHostResolvesPublic,
   validateCustomApiBaseUrl
-} from "./chunk-VDBBLFZR.js";
+} from "./chunk-W7S4KPBE.js";
 import {
   nexusMkdtempSync
 } from "./chunk-T46RV7Y7.js";
 import {
   getAvailabilityCache
-} from "./chunk-KITJQPDR.js";
+} from "./chunk-HMV2IMRW.js";
 import {
   extractSystemPrompt
 } from "./chunk-QZUG667L.js";
 import {
   generateHyphenId
-} from "./chunk-P6D43B4F.js";
+} from "./chunk-AM2GECED.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG,
   getCliCircuitBreakerSnapshot,
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-N56KU4KM.js";
+} from "./chunk-P3Z7SLZM.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
@@ -73,7 +73,7 @@ import {
   resolveCliModelName,
   resolveRetryAfterMs,
   retryAfterMsFromContext
-} from "./chunk-VKBFV6OD.js";
+} from "./chunk-DFU7VH63.js";
 import {
   parseBoolValue
 } from "./chunk-BTYRPZON.js";
@@ -3833,6 +3833,10 @@ var CODEX_LEGACY_DEFAULTS = {
   inputCost: 1.1,
   outputCost: 4.4
 };
+var CODEX_LEGACY_LANDLOCK_CONFIG = "features.use_legacy_landlock=true";
+function codexPlatformSandboxArgs(platform = process.platform) {
+  return platform === "linux" ? ["-c", CODEX_LEGACY_LANDLOCK_CONFIG] : [];
+}
 function toCodexModelSlug(model, logger6) {
   const slug = resolveCliModelName("codex", model);
   if (slug === void 0) {
@@ -3849,9 +3853,11 @@ var CodexCliAdapter = class extends SubprocessCliAdapter {
   name = "codex";
   parser = new CodexResponseParser();
   model;
+  platform;
   constructor(options) {
     super(options?.logger);
     this.model = options?.model ?? getCliModelName(getDefaultModelForCli("codex"));
+    this.platform = options?.platform ?? process.platform;
   }
   /** Key-free model enumeration via the models.dev snapshot (#3405). */
   listModels() {
@@ -3884,7 +3890,7 @@ var CodexCliAdapter = class extends SubprocessCliAdapter {
     if (model !== "") {
       args.push("-m", toCodexModelSlug(model, this.logger));
     }
-    args.push("-s", "read-only");
+    args.push("-s", "read-only", ...codexPlatformSandboxArgs(this.platform));
     args.push("--skip-git-repo-check");
     let cleanup;
     if (task.systemPrompt !== void 0 && task.systemPrompt !== "") {
@@ -3966,12 +3972,14 @@ var CodexMcpAdapter = class extends BaseCliAdapter {
   name = "codex";
   transport = "mcp";
   model;
+  platform;
   client;
   mcpTransport;
   connected = false;
   constructor(options) {
     super(options?.logger ?? createLogger({ component: "codex-mcp-adapter" }));
     this.model = options?.model ?? getCliModelName(getDefaultModelForCli("codex"));
+    this.platform = options?.platform ?? process.platform;
   }
   /**
    * Key-free model enumeration via the models.dev snapshot (#3405), matching
@@ -4016,7 +4024,7 @@ var CodexMcpAdapter = class extends BaseCliAdapter {
     try {
       this.mcpTransport = new StdioClientTransport({
         command: "codex",
-        args: ["mcp-server"],
+        args: ["mcp-server", ...codexPlatformSandboxArgs(this.platform)],
         stderr: "pipe",
         env: { [NEXUS_MCP_DEPTH_ENV]: childDepth }
       });
@@ -4992,4 +5000,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-GFW5IMOF.js.map
+//# sourceMappingURL=chunk-PJV4K6Z5.js.map