nexus-agents 8.7.0 → 8.8.0

package/dist/{chunk-BHG6YOBE.js → chunk-BBMGN7FS.js}

@@ -1,9 +1,9 @@
 import {
   loadPapersRegistry
-} from "./chunk-C64WPHLB.js";
+} from "./chunk-DEXENQXS.js";
 import {
   getErrorMessage
-} from "./chunk-PSCRZOGQ.js";
+} from "./chunk-HEV2C6VS.js";
 
 // src/cli/research-helpers-synthesize.ts
 import { z } from "zod";
@@ -886,4 +886,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=chunk-BHG6YOBE.js.map
+//# sourceMappingURL=chunk-BBMGN7FS.js.map

package/dist/{chunk-RM6WWFAV.js → chunk-BIHRU7WA.js}

@@ -5,34 +5,34 @@ import {
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-MG4LAYXC.js";
+} from "./chunk-W5VBFX65.js";
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-GUNDWP6A.js";
+} from "./chunk-NSHGFRGF.js";
 import {
   CUSTOM_API_BASE_URL_ENV,
   PROVIDER_ENV_KEYS,
   assertCustomApiHostResolvesPublic,
   validateCustomApiBaseUrl
-} from "./chunk-MDVKS5FU.js";
+} from "./chunk-OLR2RIN2.js";
 import {
   nexusMkdtempSync
 } from "./chunk-4HXPNLZS.js";
 import {
   getAvailabilityCache
-} from "./chunk-N4VHPPWC.js";
+} from "./chunk-GUOMNRXZ.js";
 import {
   extractSystemPrompt
 } from "./chunk-QZUG667L.js";
 import {
   generateHyphenId
-} from "./chunk-XIC7XHIV.js";
+} from "./chunk-W37HHXDL.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG,
   getCliCircuitBreakerSnapshot,
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-34ANG6LA.js";
+} from "./chunk-PX422NHD.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
@@ -72,7 +72,7 @@ import {
   resolveCliAlias,
   resolveRetryAfterMs,
   retryAfterMsFromContext
-} from "./chunk-PSCRZOGQ.js";
+} from "./chunk-HEV2C6VS.js";
 
 // src/cli-adapters/cli-to-model-adapter.ts
 var CliToModelAdapter = class {
@@ -4946,4 +4946,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-RM6WWFAV.js.map
+//# sourceMappingURL=chunk-BIHRU7WA.js.map

package/dist/{chunk-FR7JE23L.js → chunk-BNPXE7BD.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-PSCRZOGQ.js";
+} from "./chunk-HEV2C6VS.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -721,4 +721,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-FR7JE23L.js.map
+//# sourceMappingURL=chunk-BNPXE7BD.js.map

package/dist/{chunk-OGSSJAVW.js → chunk-CRKF5LUZ.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-6T3EPABN.js";
 import {
   SessionMemory
-} from "./chunk-EFKGUOJP.js";
+} from "./chunk-F26X4N73.js";
 import {
   StatsOnlyAdapter,
   ensureSharedMemoryRegistry
@@ -15,7 +15,7 @@ import {
 } from "./chunk-YYJFZ7TO.js";
 import {
   generateId
-} from "./chunk-XIC7XHIV.js";
+} from "./chunk-W37HHXDL.js";
 import {
   ErrorCode,
   NexusError,
@@ -29,7 +29,7 @@ import {
   ok,
   openSqliteDatabase,
   setSharedMobiMemDbPathResolver
-} from "./chunk-PSCRZOGQ.js";
+} from "./chunk-HEV2C6VS.js";
 import {
   nexusDataPath
 } from "./chunk-MM223CVS.js";
@@ -5617,4 +5617,4 @@ export {
   reinitializeMemoryBackends,
   ToolMemoryManager
 };
-//# sourceMappingURL=chunk-OGSSJAVW.js.map
+//# sourceMappingURL=chunk-CRKF5LUZ.js.map

package/dist/{chunk-C64WPHLB.js → chunk-DEXENQXS.js}

@@ -5,7 +5,7 @@ import {
   getErrorMessage,
   ok,
   parseBoolEnv
-} from "./chunk-PSCRZOGQ.js";
+} from "./chunk-HEV2C6VS.js";
 
 // src/cli/research-helpers-io.ts
 import * as fs2 from "node:fs/promises";
@@ -156,4 +156,4 @@ export {
   loadPapersRegistry,
   savePapersRegistry
 };
-//# sourceMappingURL=chunk-C64WPHLB.js.map
+//# sourceMappingURL=chunk-DEXENQXS.js.map

package/dist/{chunk-URKAE64B.js → chunk-DY6DVTX2.js}

@@ -3,7 +3,7 @@ import {
   createLogger,
   getDefaultRegistry,
   roundToMicroUsd
-} from "./chunk-PSCRZOGQ.js";
+} from "./chunk-HEV2C6VS.js";
 import {
   getNexusDataDir
 } from "./chunk-MM223CVS.js";
@@ -176,4 +176,4 @@ export {
   loadUsageEvents,
   rollupByModel
 };
-//# sourceMappingURL=chunk-URKAE64B.js.map
+//# sourceMappingURL=chunk-DY6DVTX2.js.map

package/dist/{chunk-RSMO6HZS.js → chunk-DZ5V47RU.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-C3Y274GP.js";
+} from "./chunk-REY2B5LO.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -11,20 +11,20 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-VS2AWCQY.js";
+} from "./chunk-4AE2QO7Q.js";
 import {
   emitPolicyEvent
-} from "./chunk-IXY6ISXK.js";
+} from "./chunk-6AGNJBHE.js";
 import {
   hasToken
-} from "./chunk-3JWQHPGZ.js";
+} from "./chunk-RWZJ2D2N.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-PSCRZOGQ.js";
+} from "./chunk-HEV2C6VS.js";
 
 // src/security/trust-classifier.ts
 function mapAuthorAssociation(association) {
@@ -1247,4 +1247,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-RSMO6HZS.js.map
+//# sourceMappingURL=chunk-DZ5V47RU.js.map

package/dist/{chunk-EFKGUOJP.js → chunk-F26X4N73.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-PSCRZOGQ.js";
+} from "./chunk-HEV2C6VS.js";
 
 // src/context/session-memory.ts
 import * as fs from "node:fs";
@@ -366,4 +366,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-EFKGUOJP.js.map
+//# sourceMappingURL=chunk-F26X4N73.js.map

package/dist/{chunk-N4VHPPWC.js → chunk-GUOMNRXZ.js}

@@ -3,7 +3,7 @@ import {
   MODEL_IDS,
   getTimeProvider,
   resolveModelIdentitySync
-} from "./chunk-PSCRZOGQ.js";
+} from "./chunk-HEV2C6VS.js";
 
 // src/config/model-availability.ts
 var DEFAULT_TTL_MS = 6e4;
@@ -150,4 +150,4 @@ export {
   resetAvailabilityCache,
   filterAvailableModels
 };
-//# sourceMappingURL=chunk-N4VHPPWC.js.map
+//# sourceMappingURL=chunk-GUOMNRXZ.js.map

package/dist/{chunk-PSCRZOGQ.js → chunk-HEV2C6VS.js}

@@ -2653,7 +2653,7 @@ function setDefaultRegistry(registry) {
 }
 async function reloadDefaultRegistry() {
   globalRegistry = buildDefaultRegistry();
-  const { resetGlobalRegistry } = await import("./unified-registry-XICJQUNW.js");
+  const { resetGlobalRegistry } = await import("./unified-registry-IH3UEZLZ.js");
   resetGlobalRegistry();
   return globalRegistry;
 }
@@ -9218,6 +9218,18 @@ var DistilledRuleStage = class {
       (r) => r.cli === cli && (category === void 0 || r.category === category)
     );
   }
+  /**
+   * Score delta for one rule: the action's base delta scaled by
+   * `rule.confidence`, which is `support × effect` (#5004 finding 3).
+   *
+   * `support` is the sigmoid over observations; `effect` is how far the
+   * metric sits past its detector threshold, in [0, 1]. So a 100% failure
+   * rate over 40 tasks moves the score by the full `support`, a 62.5% rate
+   * over the same 40 tasks moves it by a sixteenth of that, a 6/6 failure
+   * stays small because support bounds it, and a rule exactly at threshold
+   * contributes 0. Before #5004 confidence was sample support alone and the
+   * penalty tracked traffic volume rather than performance.
+   */
   computeDelta(rule) {
     const baseDelta = rule.action === "penalize" ? this.config.penaltyDelta : rule.action === "boost" ? this.config.boostDelta : this.config.avoidDelta;
     return baseDelta * rule.confidence;
@@ -9665,6 +9677,26 @@ function sigmoidConfidence(observations, center = 30) {
   const raw = 1 / (1 + Math.exp(-(observations - center) / 5));
   return Math.max(0, Math.min(1, raw));
 }
+function clampUnit(value) {
+  if (!Number.isFinite(value)) return 0;
+  return Math.max(0, Math.min(1, value));
+}
+function effectFor(patternType, metric, thresholds) {
+  switch (patternType) {
+    case "failure-rate":
+      return clampUnit(
+        (metric - thresholds.failureRateThreshold) / (1 - thresholds.failureRateThreshold)
+      );
+    case "success-rate":
+      return clampUnit(
+        (metric - thresholds.successRateThreshold) / (1 - thresholds.successRateThreshold)
+      );
+    case "latency-spike":
+      return clampUnit(
+        (metric - thresholds.latencyRatioThreshold) / thresholds.latencyRatioThreshold
+      );
+  }
+}
 function ruleFingerprint(patternType, cli, category) {
   return `${patternType}:${cli}:${category}`;
 }
@@ -9750,6 +9782,7 @@ function detectLatencyPatterns(groups, threshold) {
   return patterns;
 }
 var StrategyDistiller = class {
+  /** Protected so `PersistentStrategyDistiller` hydrates legacy rules under the live thresholds. */
   config;
   outcomeStore;
   logger;
@@ -9817,6 +9850,13 @@ var StrategyDistiller = class {
   /**
    * Promote high-confidence rules to RoutingMemory.
    * Rules must be active, non-tainted, with sufficient observations and confidence.
+   *
+   * @deprecated No production caller (#5004 finding 4). `DistilledRuleStage`
+   * is the single channel by which distilled rules reach routing; this
+   * second channel into `RoutingMemory` is kept only so the deprecation is
+   * non-breaking. Removal is tracked in #5467. Note the gate now compares
+   * `confidence = support × effect` against `promotionConfidence`, so a rule
+   * that would have promoted on sample size alone may no longer clear it.
    */
   promote(routingMemory) {
     let promoted = 0;
@@ -9856,13 +9896,17 @@ var StrategyDistiller = class {
     if (existing === void 0 && pattern.observationCount < this.config.minObservationsForDraft) {
       return;
     }
-    const confidence = sigmoidConfidence(pattern.observationCount);
+    const support = sigmoidConfidence(pattern.observationCount);
+    const effect = effectFor(pattern.patternType, pattern.metric, this.config);
+    const confidence = support * effect;
     const status = this.computeStatus(pattern.observationCount, existing?.status);
     if (existing !== void 0) {
       this.rules.set(id, {
         ...existing,
         action: pattern.action,
         confidence,
+        support,
+        effect,
         observationCount: pattern.observationCount,
         metric: pattern.metric,
         status,
@@ -9876,6 +9920,8 @@ var StrategyDistiller = class {
         category: pattern.category,
         action: pattern.action,
         confidence,
+        support,
+        effect,
         observationCount: pattern.observationCount,
         metric: pattern.metric,
         status,
@@ -15327,7 +15373,7 @@ var CompositeRouter = class _CompositeRouter {
    */
   async consultUnifiedContext(task) {
     try {
-      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-VKTD245W.js");
+      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-A4BZMTWM.js");
       const ctx = await getContextForTask({
         task: task.content,
         category: inferTaskCategory(task.content),
@@ -16927,6 +16973,7 @@ export {
   createRoutingMemory,
   DEFAULT_DISTILLER_CONFIG,
   sigmoidConfidence,
+  effectFor,
   detectFailurePatterns,
   detectSuccessPatterns,
   detectLatencyPatterns,
@@ -16977,4 +17024,4 @@ export {
   AgentCapability,
   OrchestratorError
 };
-//# sourceMappingURL=chunk-PSCRZOGQ.js.map
+//# sourceMappingURL=chunk-HEV2C6VS.js.map