nexus-agents 8.76.2 → 8.77.0

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-MCRMY7K7.js";
+} from "./chunk-WABZQ477.js";
 import {
   ALLOWED_COMMANDS,
   ARTIFACT_TYPES,
@@ -552,7 +552,7 @@ import {
   withLogging,
   withRetry,
   withRetryWrapper
-} from "./chunk-PE4QQAAY.js";
+} from "./chunk-5XAJU5ZV.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -560,7 +560,7 @@ import {
   generateSecurityPlan,
   getRegistryManifest,
   resolveScannerData
-} from "./chunk-ZVQ2Q7OM.js";
+} from "./chunk-AVEDKF3J.js";
 import {
   analyzeGitHubRepo,
   analyzeRepo,
@@ -578,18 +578,18 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-AONC4VYB.js";
+} from "./chunk-LIVTFARG.js";
 import "./chunk-3KDQKVCJ.js";
 import {
   closeServer,
   connectTransport,
   createServer,
   startStdioServer
-} from "./chunk-BAGUYKZL.js";
-import "./chunk-MSPYAOAU.js";
+} from "./chunk-GS5OJHJJ.js";
+import "./chunk-DWQ7TG5L.js";
 import {
   executeExpert
-} from "./chunk-PJZQQYLJ.js";
+} from "./chunk-GHNHZSDW.js";
 import {
   AgentFindingSchema,
   ConsensusEngine,
@@ -638,17 +638,17 @@ import {
   generateProposalId,
   parseAgentPairKey,
   registerConsensusVoteTool
-} from "./chunk-F76Y5QXV.js";
+} from "./chunk-I2MSRFXZ.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
   OpenAIAdapter,
   createOpenAIAdapter
-} from "./chunk-RC4ZQ4ZE.js";
+} from "./chunk-Q6JZQWQB.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
-import "./chunk-A6QRKIGL.js";
+import "./chunk-4FDESAVV.js";
 import {
   AgentActionSchema,
   AuditTrail,
@@ -687,11 +687,11 @@ import {
   resolveFirewallPolicyMode,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-G744HQMZ.js";
+} from "./chunk-VIVM7X76.js";
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-GOXBEH6M.js";
+} from "./chunk-VFFG3HIY.js";
 import {
   GitHubUserRoleSchema,
   InjectionFlagSchema,
@@ -706,11 +706,11 @@ import {
   assessReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-T6W3N3N3.js";
+} from "./chunk-F7R2E74V.js";
 import {
   ImprovementReviewInputSchema,
   registerImprovementReviewTool
-} from "./chunk-IDPA4X6J.js";
+} from "./chunk-6IUAMO5M.js";
 import {
   AgentPerformanceSchema,
   ConsensusAlgorithmSchema,
@@ -747,17 +747,17 @@ import {
   toolSuccess,
   toolSuccessStructured,
   validateToolInput
-} from "./chunk-J527NA52.js";
+} from "./chunk-LZGSWYDX.js";
 import {
   VERSION
-} from "./chunk-EVBLCOEN.js";
+} from "./chunk-QBZ6DBJL.js";
 import {
   RegistryAlreadyInitializedError,
   UnifiedAdapterRegistry,
   createUnifiedRegistry,
   getGlobalRegistry,
   resetGlobalRegistry
-} from "./chunk-CMG3P6OI.js";
+} from "./chunk-PSCY6MSD.js";
 import {
   PersistentStrategyDistiller,
   RulesSnapshotSchema,
@@ -765,19 +765,19 @@ import {
   TokenCounter,
   TokenCounterProvider,
   createTokenCounter
-} from "./chunk-6E3DFUYA.js";
+} from "./chunk-EMWRUQQS.js";
 import "./chunk-W654ME6B.js";
-import "./chunk-MRGBENPM.js";
+import "./chunk-NEIPHVTA.js";
 import {
   getTokenEnvVars,
   hasToken,
   resolveToken
-} from "./chunk-IPI4I2UW.js";
+} from "./chunk-CMZPHXDH.js";
 import {
   MemoryError
-} from "./chunk-NOSQXAW3.js";
+} from "./chunk-YUDJV6JF.js";
 import "./chunk-7LP6VJRP.js";
-import "./chunk-NBTG2OQC.js";
+import "./chunk-AE2U6NUZ.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -822,7 +822,7 @@ import {
   isCliAvailable,
   isRetryableError,
   sleep
-} from "./chunk-UF3BNMOV.js";
+} from "./chunk-33HHRRKZ.js";
 import {
   AdapterModelError,
   BaseAdapter,
@@ -844,9 +844,9 @@ import {
   tapStream,
   transformStream,
   withTimeout
-} from "./chunk-MSSRXYMZ.js";
-import "./chunk-VKLUJZQV.js";
-import "./chunk-CAIJB3CO.js";
+} from "./chunk-XQ34WJOM.js";
+import "./chunk-WUN3IB3T.js";
+import "./chunk-ACXBBUW3.js";
 import "./chunk-HERI7LXN.js";
 import {
   AvailabilityCache,
@@ -856,13 +856,13 @@ import {
   getFallbackChain,
   resetAvailabilityCache,
   resolveFallback
-} from "./chunk-VFTP7WSH.js";
+} from "./chunk-J76ZM6QF.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-AWCSYKUR.js";
+import "./chunk-QNRB5U7W.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-T52Y554H.js";
+} from "./chunk-7RCC7WGS.js";
 import {
   AgentCapability,
   AgentError,
@@ -942,7 +942,7 @@ import {
   toError,
   unwrap,
   unwrapOr
-} from "./chunk-WFHUSSKZ.js";
+} from "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";

package/dist/{init-opencode-WXEXOV6X.js → init-opencode-R5JTQZG5.js}

@@ -1,12 +1,12 @@
 import {
   discoverModels,
   readOpencodeGateway
-} from "./chunk-RC4ZQ4ZE.js";
-import "./chunk-MSSRXYMZ.js";
-import "./chunk-CAIJB3CO.js";
+} from "./chunk-Q6JZQWQB.js";
+import "./chunk-XQ34WJOM.js";
+import "./chunk-ACXBBUW3.js";
 import {
   createLogger
-} from "./chunk-WFHUSSKZ.js";
+} from "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -176,4 +176,4 @@ export {
   runInitOpencode,
   runOpencodeValidate
 };
-//# sourceMappingURL=init-opencode-WXEXOV6X.js.map
+//# sourceMappingURL=init-opencode-R5JTQZG5.js.map

package/dist/issue-triage-6KIGFUFJ.js

@@ -0,0 +1,16 @@
+import {
+  IssueTriage,
+  createIssueTriage
+} from "./chunk-VIVM7X76.js";
+import "./chunk-VFFG3HIY.js";
+import "./chunk-F7R2E74V.js";
+import "./chunk-CMZPHXDH.js";
+import "./chunk-5CIP4EWI.js";
+import "./chunk-4UHDDCRB.js";
+import "./chunk-RNDHNRSX.js";
+import "./chunk-PX6F3LHL.js";
+export {
+  IssueTriage,
+  createIssueTriage
+};
+//# sourceMappingURL=issue-triage-6KIGFUFJ.js.map

package/dist/{pr-reviewer-helpers-VRPD3CNI.js → pr-reviewer-helpers-HRM74BLX.js}

@@ -20,11 +20,11 @@ import {
   parseSeverity,
   reviewPostingBlock,
   sumFindings
-} from "./chunk-FRHYZJGC.js";
+} from "./chunk-SKAPTWVH.js";
 import "./chunk-3KDQKVCJ.js";
 import "./chunk-OQB3XC5O.js";
-import "./chunk-T6W3N3N3.js";
-import "./chunk-WFHUSSKZ.js";
+import "./chunk-F7R2E74V.js";
+import "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -51,4 +51,4 @@ export {
   reviewPostingBlock,
   sumFindings
 };
-//# sourceMappingURL=pr-reviewer-helpers-VRPD3CNI.js.map
+//# sourceMappingURL=pr-reviewer-helpers-HRM74BLX.js.map

package/dist/{registry-command-JZLWVBLG.js → registry-command-ZPKPR6WV.js}

@@ -7,7 +7,7 @@ import {
   loadGeneratedRegistryEntries,
   loadUserManifestOverlay,
   reloadDefaultRegistry
-} from "./chunk-WFHUSSKZ.js";
+} from "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import {
   nexusDataPath
@@ -249,4 +249,4 @@ export {
   isValidRegistrySubcommand,
   registryCommand
 };
-//# sourceMappingURL=registry-command-JZLWVBLG.js.map
+//# sourceMappingURL=registry-command-ZPKPR6WV.js.map

package/dist/{repo-security-plan-IS65FSZF.js → repo-security-plan-LXKTNEGB.js}

@@ -3,9 +3,9 @@ import {
   buildPlanFromAnalysis,
   generateSecurityPlan,
   resolveScannerData
-} from "./chunk-ZVQ2Q7OM.js";
+} from "./chunk-AVEDKF3J.js";
 import "./chunk-4GDMHCKX.js";
-import "./chunk-WFHUSSKZ.js";
+import "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -15,4 +15,4 @@ export {
   generateSecurityPlan,
   resolveScannerData
 };
-//# sourceMappingURL=repo-security-plan-IS65FSZF.js.map
+//# sourceMappingURL=repo-security-plan-LXKTNEGB.js.map

package/dist/{research-helpers-synthesize-TLZPEOAU.js → research-helpers-synthesize-FZLLZSJM.js}

@@ -1,9 +1,9 @@
 import {
   AttributedInsightSchema,
   synthesizeResearch
-} from "./chunk-A6QRKIGL.js";
-import "./chunk-MRGBENPM.js";
-import "./chunk-WFHUSSKZ.js";
+} from "./chunk-4FDESAVV.js";
+import "./chunk-NEIPHVTA.js";
+import "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -11,4 +11,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=research-helpers-synthesize-TLZPEOAU.js.map
+//# sourceMappingURL=research-helpers-synthesize-FZLLZSJM.js.map

package/dist/{routing-memory-YHEH7ULH.js → routing-memory-35Z7UVYC.js}

@@ -2,7 +2,7 @@ import {
   DEFAULT_ROUTING_MEMORY_CONFIG,
   RoutingMemory,
   createRoutingMemory
-} from "./chunk-WFHUSSKZ.js";
+} from "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -11,4 +11,4 @@ export {
   RoutingMemory,
   createRoutingMemory
 };
-//# sourceMappingURL=routing-memory-YHEH7ULH.js.map
+//# sourceMappingURL=routing-memory-35Z7UVYC.js.map

package/dist/{session-memory-5MD3ZFJX.js → session-memory-G7VGV2SC.js}

@@ -6,8 +6,8 @@ import {
   SessionMemory,
   SessionMemoryError,
   createSessionMemory
-} from "./chunk-NBTG2OQC.js";
-import "./chunk-WFHUSSKZ.js";
+} from "./chunk-AE2U6NUZ.js";
+import "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -20,4 +20,4 @@ export {
   SessionMemoryError,
   createSessionMemory
 };
-//# sourceMappingURL=session-memory-5MD3ZFJX.js.map
+//# sourceMappingURL=session-memory-G7VGV2SC.js.map

package/dist/{setup-config-RFOBGXUH.js → setup-config-KLKXB2LM.js}

@@ -1,11 +1,11 @@
 import {
   runConfigInitSync
-} from "./chunk-FMAJIIXZ.js";
-import "./chunk-WFHUSSKZ.js";
+} from "./chunk-UNPDTD6N.js";
+import "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
 export {
   runConfigInitSync
 };
-//# sourceMappingURL=setup-config-RFOBGXUH.js.map
+//# sourceMappingURL=setup-config-KLKXB2LM.js.map

package/dist/{setup-custom-api-DKXRZY4C.js → setup-custom-api-TJMRUQFK.js}

@@ -1,15 +1,18 @@
 import {
   CUSTOM_API_DEFAULT_MODEL
-} from "./chunk-VKLUJZQV.js";
+} from "./chunk-WUN3IB3T.js";
 import {
+  hostnameOf,
+  readGatewayEnv,
   validateCustomApiBaseUrl
-} from "./chunk-CAIJB3CO.js";
+} from "./chunk-ACXBBUW3.js";
 import {
   CUSTOM_API_ALLOW_PRIVATE_ENV,
-  CUSTOM_API_BASE_URL_ENV,
+  OPENAI_COMPAT_KEY_ENV,
+  OPENAI_COMPAT_URL_ENV,
   err,
   ok
-} from "./chunk-WFHUSSKZ.js";
+} from "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -29,7 +32,7 @@ async function configureCustomApi(input) {
   if (input.skipProbe !== true && !probeSucceeded) {
     return err(
       new Error(
-        `Gateway probe failed: GET ${stripTrailingSlash(baseUrl)}/models did not return 2xx. Check that the URL is the chat-completions base (typically ends with /v1) and the API key has /models read scope.`
+        `Gateway probe failed: GET /models on ${hostnameOf(baseUrl)} did not return 2xx. Check that the URL is the chat-completions base (typically ends with /v1) and the API key has /models read scope.`
       )
     );
   }
@@ -63,12 +66,12 @@ var defaultFetcher = async (url, init) => {
 };
 async function resolveApiKey(input) {
   if (input.apiKey !== void 0 && input.apiKey !== "") return ok(input.apiKey);
-  const envKey = process.env["NEXUS_CUSTOM_API_KEY"];
-  if (envKey !== void 0 && envKey !== "") return ok(envKey);
+  const envKey = readGatewayEnv().apiKey;
+  if (envKey !== void 0) return ok(envKey);
   if (input.nonInteractive === true) {
     return err(
       new Error(
-        "Custom API key required but not provided. Pass --custom-api-key or set NEXUS_CUSTOM_API_KEY."
+        `Custom API key required but not provided. Pass --custom-api-key or set ${OPENAI_COMPAT_KEY_ENV}.`
       )
     );
   }
@@ -95,8 +98,8 @@ function buildShellFragment(params) {
   const { baseUrl, apiKey, model, allowPrivate } = params;
   const lines = [
     "# nexus-agents custom-openai gateway (nexus-agents setup --custom-api)",
-    `export ${CUSTOM_API_BASE_URL_ENV}="${baseUrl}"`,
-    `export NEXUS_CUSTOM_API_KEY="${apiKey}"`,
+    `export ${OPENAI_COMPAT_URL_ENV}="${baseUrl}"`,
+    `export ${OPENAI_COMPAT_KEY_ENV}="${apiKey}"`,
     `export NEXUS_CUSTOM_MODEL="${model}"`
   ];
   if (allowPrivate === true) {
@@ -107,4 +110,4 @@ function buildShellFragment(params) {
 export {
   configureCustomApi
 };
-//# sourceMappingURL=setup-custom-api-DKXRZY4C.js.map
+//# sourceMappingURL=setup-custom-api-TJMRUQFK.js.map

package/dist/setup-custom-api-TJMRUQFK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/setup-custom-api.ts"],"sourcesContent":["/**\n * Interactive setup for a custom OpenAI-compatible gateway (#2124).\n *\n * Closes the last child of epic #2119. The runtime adapter (#2125) is\n * already live — this module is the ergonomics layer: a single command\n * that validates the URL, probes connectivity, and tells the user\n * exactly what env vars to set for their shell.\n *\n * Writes nothing by default (dry-run is the safe behavior for a CLI\n * that touches shell state). Prints the shell fragment; user copies\n * it into ~/.bashrc / ~/.zshrc / ~/.config/fish/config.fish. Rationale:\n * harness-neutral — we don't know which shell the user runs or where\n * their nexus-agents.yaml lives.\n *\n * @module cli/setup-custom-api\n */\n\nimport { createInterface } from 'node:readline';\nimport { validateCustomApiBaseUrl } from '../adapters/sdk/custom-api-validation.js';\nimport {\n  CUSTOM_API_ALLOW_PRIVATE_ENV,\n  OPENAI_COMPAT_KEY_ENV,\n  OPENAI_COMPAT_URL_ENV,\n} from '../adapters/sdk/types.js';\nimport { hostnameOf, readGatewayEnv } from '../adapters/sdk/gateway-env.js';\nimport { CUSTOM_API_DEFAULT_MODEL as DEFAULT_MODEL } from '../config/defaults.js';\nimport { ok, err, type Result } from '../core/index.js';\n\n/** Inputs to `configureCustomApi`. */\nexport interface CustomApiSetupInput {\n  /** Gateway base URL (required). SSRF guard from adapters/sdk is applied. */\n  readonly baseUrl: string;\n  /** API key. If absent, `configureCustomApi` will prompt (or fail non-interactively). */\n  readonly apiKey?: string;\n  /** Model id to default to. Omitted → documented fallback \"gpt-4o\". */\n  readonly model?: string;\n  /** Skip the TTY prompt for the API key — useful for CI and scripting. */\n  readonly nonInteractive?: boolean;\n  /** Omit HTTP probe — useful for dry-run / offline verify. */\n  readonly skipProbe?: boolean;\n  /** Allow private / loopback base URLs (overrides the SSRF guard). */\n  readonly allowPrivate?: boolean;\n  /** Stream for prompts/output. Defaults to process.stdout / stdin. */\n  readonly stream?: { readonly output: NodeJS.WritableStream };\n  /**\n   * Pluggable HTTP fetcher for tests. Defaults to global fetch.\n   * Called as `fetch(url, { headers })`; should return `{ status, body }`.\n   */\n  readonly fetcher?: HttpFetcher;\n}\n\n/** Minimal HTTP fetcher shape — lets tests inject a mock without network. */\nexport type HttpFetcher = (\n  url: string,\n  init: { readonly headers: Readonly<Record<string, string>> }\n) => Promise<{ readonly status: number; readonly body: string }>;\n\n/** Outcome of `configureCustomApi`. */\nexport interface CustomApiSetupResult {\n  /** Validated base URL (may differ trivially from input — e.g. canonical form). */\n  readonly baseUrl: string;\n  /** Resolved model id. */\n  readonly model: string;\n  /** Whether the /v1/models probe succeeded (always true unless skipped). */\n  readonly probeSucceeded: boolean;\n  /**\n   * Shell fragment the user should add to their shell rc so nexus-agents\n   * picks up the gateway on subsequent invocations. Already-set env\n   * equivalents of these lines are all that's needed at runtime.\n   */\n  readonly shellFragment: string;\n}\n\n/**\n * Configures a custom OpenAI-compatible gateway.\n *\n * Steps:\n * 1. Validate base URL via the SSRF guard (same as the runtime adapter).\n * 2. Resolve the API key (from input, env, or TTY prompt).\n * 3. Probe `GET {baseUrl}/models` with Bearer auth to confirm connectivity.\n * 4. Emit the shell-fragment the user adds to their shell rc.\n *\n * Returns an `ok` Result on success, or a `ConfigError`-bearing `err`\n * Result on any failure (invalid URL, missing API key in non-interactive,\n * probe failure). Never throws.\n */\nexport async function configureCustomApi(\n  input: CustomApiSetupInput\n): Promise<Result<CustomApiSetupResult, Error>> {\n  const urlValidation = validateCustomApiBaseUrl(input.baseUrl, {\n    ...(input.allowPrivate === true ? { allowPrivate: true } : {}),\n  });\n  if (!urlValidation.ok) return err(urlValidation.error);\n  const baseUrl = urlValidation.value.toString();\n\n  const apiKeyResult = await resolveApiKey(input);\n  if (!apiKeyResult.ok) return err(apiKeyResult.error);\n  const apiKey = apiKeyResult.value;\n\n  const probeSucceeded = input.skipProbe === true ? false : await runProbe(baseUrl, apiKey, input);\n  if (input.skipProbe !== true && !probeSucceeded) {\n    return err(\n      new Error(\n        `Gateway probe failed: GET /models on ${hostnameOf(baseUrl)} did not return 2xx. ` +\n          `Check that the URL is the chat-completions base (typically ends with /v1) and the API key has /models read scope.`\n      )\n    );\n  }\n\n  const model = input.model ?? DEFAULT_MODEL;\n  return ok({\n    baseUrl,\n    model,\n    probeSucceeded,\n    shellFragment: buildShellFragment({ baseUrl, apiKey, model, allowPrivate: input.allowPrivate }),\n  });\n}\n\nfunction stripTrailingSlash(s: string): string {\n  return s.endsWith('/') ? s.slice(0, -1) : s;\n}\n\n/**\n * Performs the /v1/models probe. Returns true on any 2xx response.\n * Swallows errors into `false` — the caller reports the failure.\n */\nasync function runProbe(\n  baseUrl: string,\n  apiKey: string,\n  input: CustomApiSetupInput\n): Promise<boolean> {\n  const url = `${stripTrailingSlash(baseUrl)}/models`;\n  const fetcher = input.fetcher ?? defaultFetcher;\n  try {\n    const res = await fetcher(url, {\n      headers: { Authorization: `Bearer ${apiKey}`, Accept: 'application/json' },\n    });\n    return res.status >= 200 && res.status < 300;\n  } catch {\n    return false;\n  }\n}\n\nconst defaultFetcher: HttpFetcher = async (url, init) => {\n  const res = await fetch(url, { headers: init.headers });\n  const body = await res.text();\n  return { status: res.status, body };\n};\n\n/**\n * Resolves the API key in priority order: input → env var (the gateway-env\n * resolver: `NEXUS_OPENAI_COMPAT_KEY`, or its deprecated alias\n * `NEXUS_CUSTOM_API_KEY`, #4392 increment 3) → TTY prompt (unless\n * non-interactive, in which case the absence is a fail).\n */\nasync function resolveApiKey(input: CustomApiSetupInput): Promise<Result<string, Error>> {\n  if (input.apiKey !== undefined && input.apiKey !== '') return ok(input.apiKey);\n  const envKey = readGatewayEnv().apiKey;\n  if (envKey !== undefined) return ok(envKey);\n  if (input.nonInteractive === true) {\n    return err(\n      new Error(\n        `Custom API key required but not provided. Pass --custom-api-key or set ${OPENAI_COMPAT_KEY_ENV}.`\n      )\n    );\n  }\n  const prompted = await promptForApiKey(input.stream?.output ?? process.stdout);\n  if (prompted === '') {\n    return err(new Error('No API key entered; aborting.'));\n  }\n  return ok(prompted);\n}\n\nasync function promptForApiKey(out: NodeJS.WritableStream): Promise<string> {\n  out.write('Enter the API key for your custom gateway: ');\n  const rl = createInterface({ input: process.stdin, output: process.stdout, terminal: true });\n  try {\n    return await new Promise<string>((resolve) => {\n      rl.question('', (answer) => {\n        resolve(answer.trim());\n      });\n    });\n  } finally {\n    rl.close();\n  }\n}\n\n/**\n * Formats the shell fragment the user should paste into their shell rc.\n * Designed to be POSIX-portable; fish users can adapt `export` to `set -gx`.\n *\n * Writes the current names (#4392 increment 3): `NEXUS_OPENAI_COMPAT_URL` /\n * `NEXUS_OPENAI_COMPAT_KEY`, which configure both the single-model\n * `custom-openai` path this command sets up and the discovery/voter gateway\n * path. `NEXUS_CUSTOM_MODEL` is not deprecated — it pins the single model.\n */\nfunction buildShellFragment(params: {\n  readonly baseUrl: string;\n  readonly apiKey: string;\n  readonly model: string;\n  readonly allowPrivate: boolean | undefined;\n}): string {\n  const { baseUrl, apiKey, model, allowPrivate } = params;\n  const lines: string[] = [\n    '# nexus-agents custom-openai gateway (nexus-agents setup --custom-api)',\n    `export ${OPENAI_COMPAT_URL_ENV}=\"${baseUrl}\"`,\n    `export ${OPENAI_COMPAT_KEY_ENV}=\"${apiKey}\"`,\n    `export NEXUS_CUSTOM_MODEL=\"${model}\"`,\n  ];\n  if (allowPrivate === true) {\n    lines.push(`export ${CUSTOM_API_ALLOW_PRIVATE_ENV}=1   # SSRF-guard bypass`);\n  }\n  return lines.join('\\n') + '\\n';\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAiBA,SAAS,uBAAuB;AAqEhC,eAAsB,mBACpB,OAC8C;AAC9C,QAAM,gBAAgB,yBAAyB,MAAM,SAAS;AAAA,IAC5D,GAAI,MAAM,iBAAiB,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,EAC9D,CAAC;AACD,MAAI,CAAC,cAAc,GAAI,QAAO,IAAI,cAAc,KAAK;AACrD,QAAM,UAAU,cAAc,MAAM,SAAS;AAE7C,QAAM,eAAe,MAAM,cAAc,KAAK;AAC9C,MAAI,CAAC,aAAa,GAAI,QAAO,IAAI,aAAa,KAAK;AACnD,QAAM,SAAS,aAAa;AAE5B,QAAM,iBAAiB,MAAM,cAAc,OAAO,QAAQ,MAAM,SAAS,SAAS,QAAQ,KAAK;AAC/F,MAAI,MAAM,cAAc,QAAQ,CAAC,gBAAgB;AAC/C,WAAO;AAAA,MACL,IAAI;AAAA,QACF,wCAAwC,WAAW,OAAO,CAAC;AAAA,MAE7D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,SAAS;AAC7B,SAAO,GAAG;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe,mBAAmB,EAAE,SAAS,QAAQ,OAAO,cAAc,MAAM,aAAa,CAAC;AAAA,EAChG,CAAC;AACH;AAEA,SAAS,mBAAmB,GAAmB;AAC7C,SAAO,EAAE,SAAS,GAAG,IAAI,EAAE,MAAM,GAAG,EAAE,IAAI;AAC5C;AAMA,eAAe,SACb,SACA,QACA,OACkB;AAClB,QAAM,MAAM,GAAG,mBAAmB,OAAO,CAAC;AAC1C,QAAM,UAAU,MAAM,WAAW;AACjC,MAAI;AACF,UAAM,MAAM,MAAM,QAAQ,KAAK;AAAA,MAC7B,SAAS,EAAE,eAAe,UAAU,MAAM,IAAI,QAAQ,mBAAmB;AAAA,IAC3E,CAAC;AACD,WAAO,IAAI,UAAU,OAAO,IAAI,SAAS;AAAA,EAC3C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAM,iBAA8B,OAAO,KAAK,SAAS;AACvD,QAAM,MAAM,MAAM,MAAM,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC;AACtD,QAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,SAAO,EAAE,QAAQ,IAAI,QAAQ,KAAK;AACpC;AAQA,eAAe,cAAc,OAA4D;AACvF,MAAI,MAAM,WAAW,UAAa,MAAM,WAAW,GAAI,QAAO,GAAG,MAAM,MAAM;AAC7E,QAAM,SAAS,eAAe,EAAE;AAChC,MAAI,WAAW,OAAW,QAAO,GAAG,MAAM;AAC1C,MAAI,MAAM,mBAAmB,MAAM;AACjC,WAAO;AAAA,MACL,IAAI;AAAA,QACF,0EAA0E,qBAAqB;AAAA,MACjG;AAAA,IACF;AAAA,EACF;AACA,QAAM,WAAW,MAAM,gBAAgB,MAAM,QAAQ,UAAU,QAAQ,MAAM;AAC7E,MAAI,aAAa,IAAI;AACnB,WAAO,IAAI,IAAI,MAAM,+BAA+B,CAAC;AAAA,EACvD;AACA,SAAO,GAAG,QAAQ;AACpB;AAEA,eAAe,gBAAgB,KAA6C;AAC1E,MAAI,MAAM,6CAA6C;AACvD,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,UAAU,KAAK,CAAC;AAC3F,MAAI;AACF,WAAO,MAAM,IAAI,QAAgB,CAAC,YAAY;AAC5C,SAAG,SAAS,IAAI,CAAC,WAAW;AAC1B,gBAAQ,OAAO,KAAK,CAAC;AAAA,MACvB,CAAC;AAAA,IACH,CAAC;AAAA,EACH,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;AAWA,SAAS,mBAAmB,QAKjB;AACT,QAAM,EAAE,SAAS,QAAQ,OAAO,aAAa,IAAI;AACjD,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA,UAAU,qBAAqB,KAAK,OAAO;AAAA,IAC3C,UAAU,qBAAqB,KAAK,MAAM;AAAA,IAC1C,8BAA8B,KAAK;AAAA,EACrC;AACA,MAAI,iBAAiB,MAAM;AACzB,UAAM,KAAK,UAAU,4BAA4B,0BAA0B;AAAA,EAC7E;AACA,SAAO,MAAM,KAAK,IAAI,IAAI;AAC5B;","names":[]}

package/dist/setup-data-dir-VCSQTZ6L.js

@@ -0,0 +1,30 @@
+import {
+  NEXUS_DATA_DIR,
+  describeDataDirFix,
+  initDataDirectories
+} from "./chunk-GS5OJHJJ.js";
+import "./chunk-DWQ7TG5L.js";
+import "./chunk-Q6JZQWQB.js";
+import "./chunk-OQB3XC5O.js";
+import "./chunk-QBZ6DBJL.js";
+import "./chunk-PSCY6MSD.js";
+import "./chunk-7LP6VJRP.js";
+import "./chunk-33HHRRKZ.js";
+import "./chunk-XQ34WJOM.js";
+import "./chunk-WUN3IB3T.js";
+import "./chunk-ACXBBUW3.js";
+import "./chunk-HERI7LXN.js";
+import "./chunk-J76ZM6QF.js";
+import "./chunk-QZUG667L.js";
+import "./chunk-QNRB5U7W.js";
+import "./chunk-7RCC7WGS.js";
+import "./chunk-5CIP4EWI.js";
+import "./chunk-4UHDDCRB.js";
+import "./chunk-RNDHNRSX.js";
+import "./chunk-PX6F3LHL.js";
+export {
+  NEXUS_DATA_DIR,
+  describeDataDirFix,
+  initDataDirectories
+};
+//# sourceMappingURL=setup-data-dir-VCSQTZ6L.js.map

package/dist/{tool-memory-HCCMGPVI.js → tool-memory-65MWYDEP.js}

@@ -4,13 +4,13 @@ import {
   getToolMemory,
   reinitializeMemoryBackends,
   shutdownToolMemory
-} from "./chunk-NOSQXAW3.js";
+} from "./chunk-YUDJV6JF.js";
 import "./chunk-7LP6VJRP.js";
-import "./chunk-NBTG2OQC.js";
+import "./chunk-AE2U6NUZ.js";
 import "./chunk-RKLT2TOT.js";
 import "./chunk-MUJCGBZW.js";
-import "./chunk-AWCSYKUR.js";
-import "./chunk-WFHUSSKZ.js";
+import "./chunk-QNRB5U7W.js";
+import "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -21,4 +21,4 @@ export {
   reinitializeMemoryBackends,
   shutdownToolMemory
 };
-//# sourceMappingURL=tool-memory-HCCMGPVI.js.map
+//# sourceMappingURL=tool-memory-65MWYDEP.js.map

package/dist/{unified-registry-3TWHRO5L.js → unified-registry-2HCLBGWM.js}

@@ -5,17 +5,17 @@ import {
   createUnifiedRegistry,
   getGlobalRegistry,
   resetGlobalRegistry
-} from "./chunk-CMG3P6OI.js";
-import "./chunk-UF3BNMOV.js";
-import "./chunk-MSSRXYMZ.js";
-import "./chunk-VKLUJZQV.js";
-import "./chunk-CAIJB3CO.js";
+} from "./chunk-PSCY6MSD.js";
+import "./chunk-33HHRRKZ.js";
+import "./chunk-XQ34WJOM.js";
+import "./chunk-WUN3IB3T.js";
+import "./chunk-ACXBBUW3.js";
 import "./chunk-HERI7LXN.js";
-import "./chunk-VFTP7WSH.js";
+import "./chunk-J76ZM6QF.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-AWCSYKUR.js";
-import "./chunk-T52Y554H.js";
-import "./chunk-WFHUSSKZ.js";
+import "./chunk-QNRB5U7W.js";
+import "./chunk-7RCC7WGS.js";
+import "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -27,4 +27,4 @@ export {
   getGlobalRegistry,
   resetGlobalRegistry
 };
-//# sourceMappingURL=unified-registry-3TWHRO5L.js.map
+//# sourceMappingURL=unified-registry-2HCLBGWM.js.map

package/dist/{weather-report-MGOA7OOC.js → weather-report-RMRBC6LH.js}

@@ -3,7 +3,7 @@ import {
   getAdaptiveBonus,
   queryWithLookback,
   shouldExplore
-} from "./chunk-WFHUSSKZ.js";
+} from "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -13,4 +13,4 @@ export {
   queryWithLookback,
   shouldExplore
 };
-//# sourceMappingURL=weather-report-MGOA7OOC.js.map
+//# sourceMappingURL=weather-report-RMRBC6LH.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-agents",
-  "version": "8.76.2",
+  "version": "8.77.0",
   "description": "Governance substrate for AI coding agents — adversarial PR review, drift-detected rules, tamper-evident audit, and closed-loop outcome routing for Claude, Codex, Gemini, and OpenCode",
   "mcpName": "io.github.nexus-substrate/nexus-agents",
   "license": "MIT",