nexus-agents 8.76.2 → 8.77.0

package/dist/{ast-rule-runner-BXBBL5G7.js → ast-rule-runner-U5N43D4U.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-AONC4VYB.js";
-import "./chunk-WFHUSSKZ.js";
+} from "./chunk-LIVTFARG.js";
+import "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -26,4 +26,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-BXBBL5G7.js.map
+//# sourceMappingURL=ast-rule-runner-U5N43D4U.js.map

package/dist/{child-mcp-config-3IELNFHI.js → child-mcp-config-IRZHH2TU.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-HERI7LXN.js";
 import {
   createLogger
-} from "./chunk-WFHUSSKZ.js";
+} from "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -60,4 +60,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-3IELNFHI.js.map
+//# sourceMappingURL=child-mcp-config-IRZHH2TU.js.map

package/dist/{chunk-UF3BNMOV.js → chunk-33HHRRKZ.js}

@@ -5,38 +5,40 @@ import {
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-MSSRXYMZ.js";
+} from "./chunk-XQ34WJOM.js";
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-VKLUJZQV.js";
+} from "./chunk-WUN3IB3T.js";
 import {
   assertCustomApiHostResolvesPublic,
+  hostnameOf,
+  readGatewayEnv,
+  redactApiKey,
   validateCustomApiBaseUrl
-} from "./chunk-CAIJB3CO.js";
+} from "./chunk-ACXBBUW3.js";
 import {
   nexusMkdtempSync
 } from "./chunk-HERI7LXN.js";
 import {
   getAvailabilityCache
-} from "./chunk-VFTP7WSH.js";
+} from "./chunk-J76ZM6QF.js";
 import {
   extractSystemPrompt
 } from "./chunk-QZUG667L.js";
 import {
   generateHyphenId
-} from "./chunk-AWCSYKUR.js";
+} from "./chunk-QNRB5U7W.js";
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG,
   getCliCircuitBreakerSnapshot,
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-T52Y554H.js";
+} from "./chunk-7RCC7WGS.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
   CLI_VERSION_REQUIREMENTS,
   CODEX_MCP_TIMEOUTS,
-  CUSTOM_API_BASE_URL_ENV,
   DEFAULT_CAPABILITIES,
   ErrorCode,
   FALLBACK_CONTEXT_WINDOW,
@@ -76,7 +78,7 @@ import {
   resolveRetryAfterMs,
   retryAfterMsFromContext,
   warnIfGatewayCostUndeclared
-} from "./chunk-WFHUSSKZ.js";
+} from "./chunk-5CIP4EWI.js";
 import {
   parseBoolValue
 } from "./chunk-RNDHNRSX.js";
@@ -1154,12 +1156,12 @@ function isGenerateObjectResult(value) {
 }
 function resolveApiKey(providerId, configKey) {
   if (configKey !== void 0) return configKey;
-  const envVar = PROVIDER_ENV_KEYS[providerId];
-  return process.env[envVar];
+  if (providerId === "custom-openai") return readGatewayEnv().apiKey;
+  return process.env[PROVIDER_ENV_KEYS[providerId]];
 }
 function resolveAndValidateCustomBaseUrl(config) {
   if (config.providerId !== "custom-openai") return void 0;
-  const raw = config.baseUrl ?? process.env[CUSTOM_API_BASE_URL_ENV];
+  const raw = config.baseUrl ?? readGatewayEnv().baseUrl;
   const validated = validateCustomApiBaseUrl(raw);
   if (!validated.ok) throw validated.error;
   return validated.value.toString();
@@ -1433,9 +1435,10 @@ var SdkAdapter = class extends BaseAdapter {
    * Converts a caught error into a Result error with categorized ErrorCode.
    */
   toErrorResult(error, code) {
-    const message = getErrorMessage(error);
-    const safeMessage = sanitizeOutput(message);
-    const errorObj = error instanceof Error ? error : new Error(safeMessage);
+    const apiKey = resolveApiKey(this.sdkProviderId, this.sdkConfig.apiKey);
+    const safeMessage = sanitizeOutput(redactApiKey(getErrorMessage(error), apiKey));
+    const errorObj = new Error(safeMessage);
+    if (error instanceof Error) errorObj.name = error.name;
     this.logger.error(`SDK adapter error (${this.sdkProviderId})`, errorObj);
     const retryAfterMs = code === ErrorCode.MODEL_RATE_LIMITED ? resolveRetryAfterMs(error, safeMessage) : void 0;
     const modelError = new AdapterModelError(`${this.sdkProviderId} SDK error: ${safeMessage}`, {
@@ -1671,26 +1674,26 @@ function tryApiAdapter(config, logger6) {
   return null;
 }
 function tryCustomOpenAiAdapter(logger6) {
-  const customKey = resolveApiKeyFromEnv(void 0, "NEXUS_CUSTOM_API_KEY");
-  const customBaseUrl = process.env["NEXUS_CUSTOM_API_BASE_URL"];
-  if (customKey === void 0 || customBaseUrl === void 0 || customBaseUrl === "") {
-    return null;
-  }
+  const { baseUrl: customBaseUrl, apiKey: customKey } = readGatewayEnv(process.env, logger6);
+  if (customKey === void 0 || customBaseUrl === void 0) return null;
   const customModelId = process.env["NEXUS_CUSTOM_MODEL"] ?? CUSTOM_API_DEFAULT_MODEL;
-  logger6.info("Using custom-openai SDK adapter", {
-    model: customModelId,
-    baseUrl: customBaseUrl
-  });
+  const host = hostnameOf(customBaseUrl);
+  logger6.info("Using custom-openai SDK adapter", { model: customModelId, host });
   return {
-    adapter: new SdkAdapter({
-      providerId: "custom-openai",
-      modelId: customModelId,
-      apiKey: customKey,
-      baseUrl: customBaseUrl
-    }),
+    // The caller's logger reaches the adapter, so what it logs on a failed
+    // call is observable where the selection was made (#4392 inc 3 review).
+    adapter: new SdkAdapter(
+      {
+        providerId: "custom-openai",
+        modelId: customModelId,
+        apiKey: customKey,
+        baseUrl: customBaseUrl
+      },
+      logger6
+    ),
     source: "api",
     name: "custom-openai",
-    reason: `Using custom OpenAI-compatible gateway at ${customBaseUrl} (model: ${customModelId})`
+    reason: `Using custom OpenAI-compatible gateway at ${host} (model: ${customModelId})`
   };
 }
 function resolveApiVendor(name) {
@@ -5266,4 +5269,4 @@ export {
   SdkAdapter,
   createAutoAdapter
 };
-//# sourceMappingURL=chunk-UF3BNMOV.js.map
+//# sourceMappingURL=chunk-33HHRRKZ.js.map