nexus-agents 8.58.4 → 8.58.6

package/dist/{ast-rule-runner-NIX2R2ER.js → ast-rule-runner-DEO7JRWD.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-TZ6FVGJZ.js";
-import "./chunk-6DYJTPER.js";
+} from "./chunk-UKAGJ224.js";
+import "./chunk-TWL6LR65.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -26,4 +26,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-NIX2R2ER.js.map
+//# sourceMappingURL=ast-rule-runner-DEO7JRWD.js.map

package/dist/{child-mcp-config-LBCDGXVO.js → child-mcp-config-UKY4JZD2.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-T46RV7Y7.js";
 import {
   createLogger
-} from "./chunk-6DYJTPER.js";
+} from "./chunk-TWL6LR65.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -60,4 +60,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-LBCDGXVO.js.map
+//# sourceMappingURL=child-mcp-config-UKY4JZD2.js.map

package/dist/{chunk-MH2IGA2C.js → chunk-257NGWEF.js}

@@ -5,7 +5,7 @@ import {
   MCP_TIMEOUTS,
   TEST_TIMEOUTS,
   WORKFLOW_TIMEOUTS
-} from "./chunk-6DYJTPER.js";
+} from "./chunk-TWL6LR65.js";
 import {
   createGetEnvVarDocumentation,
   createGetTimeout,
@@ -224,4 +224,4 @@ export {
   CUSTOM_API_DEFAULT_MODEL,
   DEFAULTS
 };
-//# sourceMappingURL=chunk-MH2IGA2C.js.map
+//# sourceMappingURL=chunk-257NGWEF.js.map

package/dist/{chunk-XFUWBS6A.js → chunk-2NN3HKP7.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "8.58.4" : "dev";
+var VERSION = true ? "8.58.6" : "dev";
 var NODE_ENGINE_RANGE = ">=22.5.0";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -11,4 +11,4 @@ export {
   NODE_ENGINE_RANGE,
   isNodeVersionSupported
 };
-//# sourceMappingURL=chunk-XFUWBS6A.js.map
+//# sourceMappingURL=chunk-2NN3HKP7.js.map

package/dist/{chunk-KMEGWPIU.js → chunk-47L5YCXT.js}

@@ -4,7 +4,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-6DYJTPER.js";
+} from "./chunk-TWL6LR65.js";
 
 // src/scm/types.ts
 var ScmError = class extends Error {
@@ -281,4 +281,4 @@ export {
   ScmError,
   GitHubProvider
 };
-//# sourceMappingURL=chunk-KMEGWPIU.js.map
+//# sourceMappingURL=chunk-47L5YCXT.js.map

package/dist/{chunk-4FFTWLHX.js → chunk-6WIEJNJE.js}

@@ -5,34 +5,34 @@ import {
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-PSRLUHF2.js";
+} from "./chunk-QNC7HJPJ.js";
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-MH2IGA2C.js";
+} from "./chunk-257NGWEF.js";
 import {
   CUSTOM_API_BASE_URL_ENV,
   PROVIDER_ENV_KEYS,
   assertCustomApiHostResolvesPublic,
   validateCustomApiBaseUrl
-} from "./chunk-5HAKYKCY.js";
+} from "./chunk-UHS465UI.js";
 import {
   nexusMkdtempSync
 } from "./chunk-T46RV7Y7.js";
 import {
   getAvailabilityCache
-} from "./chunk-VUB6RPPH.js";
+} from "./chunk-PW4BOOFF.js";
 import {
   extractSystemPrompt
 } from "./chunk-QZUG667L.js";
 import {
   generateHyphenId
-} from "./chunk-GESWDHFD.js";
+} from "./chunk-I73M6A6N.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG,
   getCliCircuitBreakerSnapshot,
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-67AADYKZ.js";
+} from "./chunk-HA4PGGHG.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
@@ -75,7 +75,7 @@ import {
   resolveCliModelName,
   resolveRetryAfterMs,
   retryAfterMsFromContext
-} from "./chunk-6DYJTPER.js";
+} from "./chunk-TWL6LR65.js";
 import {
   parseBoolValue
 } from "./chunk-BTYRPZON.js";
@@ -2438,7 +2438,7 @@ var LOGIN_HINTS = {
   gemini: "gemini",
   opencode: "opencode auth login"
 };
-var NOT_AUTH_PATTERNS = [
+var AUTH_FAILURE_PATTERNS = [
   /not logged in/i,
   /please run \/?login/i,
   /authentication (?:required|expired|failed)/i,
@@ -2460,12 +2460,20 @@ var NOT_AUTH_PATTERNS = [
   /refresh token .*already used/i,
   /could not be refreshed/i,
   /log ?out and sign in/i,
-  /sign in again/i
+  /sign in again/i,
+  // #6269: the gemini/agy binary's OAuth-personal tier was discontinued; it
+  // writes "Error authenticating: IneligibleTierError: This client is no
+  // longer supported…" to stderr and may still exit 0 with an EMPTY answer.
+  // Neither word matched any pattern above, so the seat was retried as a
+  // parse failure for the whole panel budget instead of falling over.
+  /error authenticating/i,
+  /ineligible ?tier/i
 ];
+function isAuthFailureText(text) {
+  return AUTH_FAILURE_PATTERNS.some((re) => re.test(text));
+}
 function classifyMessage(message) {
-  for (const re of NOT_AUTH_PATTERNS) {
-    if (re.test(message)) return { code: "NOT_AUTHENTICATED", auth: true };
-  }
+  if (isAuthFailureText(message)) return { code: "NOT_AUTHENTICATED", auth: true };
   return { code: "EXECUTION_ERROR", auth: false };
 }
 function resolveCliName(cliName) {
@@ -2584,8 +2592,12 @@ function classifyStderrError(stderr) {
   if (STDERR_CONNECTION_PATTERNS.some((p) => lower.includes(p))) return "CONNECTION_ERROR";
   if (isRateLimitText(stderr)) return "RATE_LIMITED";
   if (isTimeoutText(stderr)) return "TIMEOUT";
+  if (isAuthFailureText(stderr)) return "NOT_AUTHENTICATED";
   return "EXECUTION_ERROR";
 }
+function firstStderrLine(stderr) {
+  return stderr.split("\n").find((line) => line.trim() !== "")?.trim() ?? "";
+}
 var subprocessLogger = createLogger({ component: "subprocess-adapter" });
 var MAX_RESPONSE_STDERR_CHARS = 8e3;
 function successStderrField(stderr) {
@@ -2951,14 +2963,12 @@ var SubprocessCliAdapter = class extends BaseCliAdapter {
    */
   handleSubprocessOutput(stdout, stderr, startTime) {
     if (stderr !== "" && stdout === "") {
-      return err(this.createError("EXECUTION_ERROR", stderr));
+      return err(this.createError(classifyStderrError(stderr), stderr));
     }
     const text = this.parser.extractResponse(stdout);
-    if (text === null) {
-      const errorOnly = this.classifyErrorOnlyStream(stdout);
-      if (errorOnly !== null) return errorOnly;
-      return this.handleUnparseableOutput(stdout, stderr, startTime);
-    }
+    if (text === null) return this.handleNoAnswer(stdout, stderr, startTime);
+    const authFailure = this.classifyEmptyAnswer(text, stderr);
+    if (authFailure !== null) return authFailure;
     const usage = this.parser.extractUsage(stdout);
     const sessionId = this.parser.extractSessionId(stdout);
     const costUsd = this.parser.extractCostUsd?.(stdout) ?? null;
@@ -2972,6 +2982,31 @@ var SubprocessCliAdapter = class extends BaseCliAdapter {
       })
     );
   }
+  /**
+   * The parser found no usable content. An error-only stream (e.g. OpenCode
+   * NDJSON `{"type":"error"}`) surfaced an `errorMessage`: classify it before
+   * the generic PARSE_ERROR path, which would mask the real cause.
+   */
+  handleNoAnswer(stdout, stderr, startTime) {
+    const errorOnly = this.classifyErrorOnlyStream(stdout);
+    if (errorOnly !== null) return errorOnly;
+    return this.handleUnparseableOutput(stdout, stderr, startTime);
+  }
+  /**
+   * #6269: a well-formed envelope carrying NO answer while stderr names a
+   * credential failure is that failure, not a completion. `agy` exits 0 with
+   * `{"status":"SUCCESS","response":""}` and "Error authenticating: …" on
+   * stderr; handing "" downstream had the vote path parse it (and retry the
+   * parse) for the whole panel budget. Returns `null` — no reclassification —
+   * for a non-empty answer, and for an empty answer with stderr that names no
+   * auth failure: empty stderr is NOT evidence, so that case still flows
+   * through as the empty answer it is.
+   */
+  classifyEmptyAnswer(text, stderr) {
+    if (text.trim() !== "" || !isAuthFailureText(stderr)) return null;
+    const msg = `${this.name}: ${firstStderrLine(stderr)}`;
+    return err(this.createError("NOT_AUTHENTICATED", msg));
+  }
   /**
    * Classify an error-only stream — one where the parser surfaced an
    * `errorMessage` but no usable content (so `extractResponse` returned null).
@@ -5176,6 +5211,8 @@ export {
   BaseCliAdapter,
   NEXUS_SUBPROCESS_DEPTH_ENV,
   readSubprocessDepth,
+  sanitizeOutput,
+  isAuthFailureText,
   authRemediation,
   classifyExtractedError,
   SubprocessCliAdapter,
@@ -5211,4 +5248,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-4FFTWLHX.js.map
+//# sourceMappingURL=chunk-6WIEJNJE.js.map