nexus-agents 8.76.2 → 8.78.0

package/dist/cli.js

@@ -23,11 +23,11 @@ import {
   parseExpertReview,
   reviewPostingBlock,
   sumFindings
-} from "./chunk-FRHYZJGC.js";
-import "./chunk-2P4HP2A6.js";
+} from "./chunk-SKAPTWVH.js";
+import "./chunk-T63EIQYI.js";
 import {
   runConfigInitSync
-} from "./chunk-FMAJIIXZ.js";
+} from "./chunk-UNPDTD6N.js";
 import {
   AuthHandler,
   CustomExpertDefinitionSchema,
@@ -156,11 +156,11 @@ import {
   validateNexusEnv,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-PE4QQAAY.js";
-import "./chunk-ZVQ2Q7OM.js";
+} from "./chunk-3K7OHJLM.js";
+import "./chunk-AVEDKF3J.js";
 import "./chunk-4GDMHCKX.js";
 import "./chunk-7ETWTSTB.js";
-import "./chunk-AONC4VYB.js";
+import "./chunk-LIVTFARG.js";
 import {
   CATEGORY_DISPLAY_NAMES,
   DEFAULT_PR_REVIEW_CONFIG
@@ -176,11 +176,11 @@ import {
   doctorCommand,
   initDataDirectories,
   runDoctor
-} from "./chunk-BAGUYKZL.js";
-import "./chunk-MSPYAOAU.js";
+} from "./chunk-7ZMNE7U2.js";
+import "./chunk-DWQ7TG5L.js";
 import {
   shutdownExpertBridge
-} from "./chunk-PJZQQYLJ.js";
+} from "./chunk-GHNHZSDW.js";
 import {
   ConsensusVoteInputSchema,
   DEFAULT_VOTE_TIMEOUT_MS,
@@ -198,19 +198,19 @@ import {
   registerConsensusVoteTool,
   seatFallbacks,
   toRecordDecision
-} from "./chunk-F76Y5QXV.js";
+} from "./chunk-ER76ZRBU.js";
 import {
   buildOpenAICompatAdapters,
   readOpenAICompatEndpoint,
   readOpenAICompatEnv
-} from "./chunk-RC4ZQ4ZE.js";
+} from "./chunk-Q6JZQWQB.js";
 import {
   allOf,
   anyOf
 } from "./chunk-OQB3XC5O.js";
 import {
   synthesizeResearch
-} from "./chunk-A6QRKIGL.js";
+} from "./chunk-4FDESAVV.js";
 import {
   DRAFT_REPLY_BODY_MAX_LENGTH,
   configureUntrustedInputFirewall,
@@ -219,14 +219,14 @@ import {
   firewallInputFor,
   parsePRUrl,
   runUntrustedInputFirewall,
-  validateAgentAction,
-  validateCorroboration
-} from "./chunk-G744HQMZ.js";
-import "./chunk-GOXBEH6M.js";
+  validateActionCorroboration,
+  validateAgentAction
+} from "./chunk-OZFXXGGZ.js";
+import "./chunk-VFFG3HIY.js";
 import {
   ReputationCache,
   sanitizeInput
-} from "./chunk-T6W3N3N3.js";
+} from "./chunk-F7R2E74V.js";
 import {
   ImprovementReviewInputSchema,
   calculateFitnessScore,
@@ -240,23 +240,23 @@ import {
   registerImprovementReviewTool,
   runImprovementReview,
   scanForSecrets
-} from "./chunk-IDPA4X6J.js";
+} from "./chunk-NW5MCYOE.js";
 import {
   createDefaultPolicyFirewall,
   setGlobalPolicyFirewall,
   setSecureHandlerAuditLogger,
   stagePolicyFirewallForRollout
-} from "./chunk-J527NA52.js";
+} from "./chunk-5EXZHBAQ.js";
 import {
   NODE_ENGINE_RANGE,
   VERSION,
   isNodeVersionSupported
-} from "./chunk-EVBLCOEN.js";
+} from "./chunk-MYF73MI3.js";
 import {
   claimGlobalRegistry,
   createUnifiedRegistry,
   getGlobalRegistry
-} from "./chunk-CMG3P6OI.js";
+} from "./chunk-PSCY6MSD.js";
 import {
   CodebaseIndexSchema,
   PaperStatusSchema,
@@ -282,7 +282,7 @@ import {
   loadSourcesRegistry,
   rankDiscoveredItems,
   saveSourcesRegistry
-} from "./chunk-6E3DFUYA.js";
+} from "./chunk-EMWRUQQS.js";
 import {
   getTsMorph
 } from "./chunk-W654ME6B.js";
@@ -290,21 +290,21 @@ import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   savePapersRegistry
-} from "./chunk-MRGBENPM.js";
+} from "./chunk-NEIPHVTA.js";
 import {
   resolveToken
-} from "./chunk-IPI4I2UW.js";
+} from "./chunk-CMZPHXDH.js";
 import {
   MemoryError,
   configureToolMemory,
   shutdownToolMemory
-} from "./chunk-NOSQXAW3.js";
+} from "./chunk-YUDJV6JF.js";
 import {
   capitalize,
   capitalizeKebab,
   truncateText
 } from "./chunk-7LP6VJRP.js";
-import "./chunk-NBTG2OQC.js";
+import "./chunk-AE2U6NUZ.js";
 import {
   BUILT_IN_EXPERTS
 } from "./chunk-AHI43IQB.js";
@@ -318,23 +318,26 @@ import {
   probeAllClis,
   readSubprocessDepth,
   safeJsonParse
-} from "./chunk-UF3BNMOV.js";
-import "./chunk-MSSRXYMZ.js";
+} from "./chunk-33HHRRKZ.js";
+import "./chunk-XQ34WJOM.js";
 import {
   DEFAULTS
-} from "./chunk-VKLUJZQV.js";
-import "./chunk-CAIJB3CO.js";
+} from "./chunk-WUN3IB3T.js";
+import {
+  hostnameOf,
+  warnDeprecatedGatewayEnvOnce
+} from "./chunk-ACXBBUW3.js";
 import {
   getNexusTmpDir,
   nexusMkdtempSync
 } from "./chunk-HERI7LXN.js";
-import "./chunk-VFTP7WSH.js";
+import "./chunk-J76ZM6QF.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-AWCSYKUR.js";
+import "./chunk-QNRB5U7W.js";
 import {
   getDefaultCliCircuitBreakerRegistry,
   mapModelErrorToCategory
-} from "./chunk-T52Y554H.js";
+} from "./chunk-7RCC7WGS.js";
 import {
   API_TIMEOUTS,
   AgentCapability,
@@ -422,7 +425,7 @@ import {
   validateTimeout,
   writeEmptyLine,
   writeLine
-} from "./chunk-WFHUSSKZ.js";
+} from "./chunk-5CIP4EWI.js";
 import "./chunk-4UHDDCRB.js";
 import {
   applyPortableMode,
@@ -4283,6 +4286,16 @@ function reportUnverifiedCorroboration(corroboration, log) {
 function notEvaluated(rule, message) {
   return { allowed: false, hasRuleOfTwoViolation: false, violations: [{ rule, message }] };
 }
+function corroborationViolation(decision) {
+  if (decision.satisfied) return [];
+  const missing = decision.missing.join("; ");
+  return [
+    {
+      rule: "INSUFFICIENT_CORROBORATION",
+      message: decision.refused ? `refused at stage ${decision.stage} under enforce: ${missing}` : missing
+    }
+  ];
+}
 function auditReviewAction(draft, input, gate, log) {
   const validated2 = validateAgentAction({
     type: "DraftReply",
@@ -4293,13 +4306,13 @@ function auditReviewAction(draft, input, gate, log) {
   if (!validated2.ok) return notEvaluated("INVALID_ACTION", validated2.error);
   const decision = evaluateActionThroughFirewall(input, { ...gate, action: validated2.value });
   if (!decision.ok) return notEvaluated("FIREWALL_ERROR", decision.error.message);
-  const corroboration = validateCorroboration(validated2.value);
-  reportUnverifiedCorroboration(corroboration, log);
-  const corroborationViolation = corroboration.satisfied ? [] : [{ rule: "INSUFFICIENT_CORROBORATION", message: corroboration.missing.join("; ") }];
+  const corroboration = validateActionCorroboration(validated2.value);
+  if (!corroboration.ok) return notEvaluated("FIREWALL_ERROR", corroboration.error.message);
+  if (!corroboration.value.refused) reportUnverifiedCorroboration(corroboration.value, log);
   return {
-    allowed: decision.value.allowed && corroboration.satisfied,
+    allowed: decision.value.allowed && corroboration.value.satisfied,
     hasRuleOfTwoViolation: decision.value.violations.some((v) => v.rule === "RULE_OF_TWO"),
-    violations: [...decision.value.violations, ...corroborationViolation]
+    violations: [...decision.value.violations, ...corroborationViolation(corroboration.value)]
   };
 }
 
@@ -4572,7 +4585,7 @@ Provide a structured review with:
    * (Source: Issue #828 — Wire policy gate into production pipeline)
    */
   async postReviewToGitHub(provider, pr, result, gateDecision, reputation) {
-    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-VRPD3CNI.js");
+    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-HRM74BLX.js");
     const formattedBody = formatReviewComment2(result);
     const body = truncateText(formattedBody, DRAFT_REPLY_BODY_MAX_LENGTH, "\u2026[review truncated]");
     const sources = buildReviewCitations(pr.files);
@@ -12244,7 +12257,7 @@ function probeGrammars(register, parse6, probes = GRAMMAR_PROBES) {
 }
 async function loadGrammarModules() {
   const [{ ensurePolyglotLangs }, napi] = await Promise.all([
-    import("./ast-rule-runner-BXBBL5G7.js"),
+    import("./ast-rule-runner-U5N43D4U.js"),
     import("@ast-grep/napi")
   ]);
   return { register: ensurePolyglotLangs, parse: napi.parse };
@@ -19710,7 +19723,7 @@ function startImprovementReviewScheduler(options) {
   let running = false;
   const runOnce = async () => {
     try {
-      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-UEVIATKC.js");
+      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-VC46AY77.js");
       const input = ImprovementReviewInputSchema2.parse({ fileIssues });
       const result = await runImprovementReview2(input, { logger: logger22 });
       logger22.info("Scheduled improvement_review complete", {
@@ -20994,6 +21007,7 @@ var GatewayArmAdapter = class {
 
 // src/cli-server-gateway.ts
 async function tryWireGatewayAdapters(logger22) {
+  warnDeprecatedGatewayEnvOnce(process.env, logger22);
   const sandboxActive = detectSandbox().active;
   const env2 = readOpenAICompatEnv();
   if (env2 === null) {
@@ -21017,7 +21031,7 @@ async function tryWireGatewayAdapters(logger22) {
     return void 0;
   }
   logger22.info("OpenAI-compatible gateway wired", {
-    baseUrl: env2.baseUrl,
+    host: hostnameOf(env2.baseUrl),
     modelCount: result.value.length,
     models: result.value.map((a) => a.modelId)
   });
@@ -21996,7 +22010,7 @@ function adaptConfigToLibrary(config) {
 }
 function createBeliefPromoter() {
   return async (event) => {
-    const { getToolMemory } = await import("./tool-memory-HCCMGPVI.js");
+    const { getToolMemory } = await import("./tool-memory-65MWYDEP.js");
     const tm = getToolMemory();
     await tm.recordBelief(
       `skill:${event.name}`,
@@ -23270,7 +23284,7 @@ async function handleResearchCommand(args) {
   }
 }
 async function handleRegistryCommand(args) {
-  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-JZLWVBLG.js");
+  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-ZPKPR6WV.js");
   const subcommand = args.subcommand;
   if (!isValidRegistrySubcommand(subcommand)) {
     process.stdout.write(`${formatRegistryUsage()}
@@ -23318,12 +23332,12 @@ async function handleVerifyCommand(args) {
 async function handleDoctorCommand(args) {
   const exitCode = await doctorCommand({ fix: args.options.fix });
   if (args.options.deep) {
-    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-LBPZXYN4.js");
+    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-WWOPRJJS.js");
     const diag = runDeepDiagnostics2();
     process.stdout.write(formatDeepDiagnostics2(diag) + "\n");
   }
   if (args.options.live) {
-    const { runLiveReadiness, formatLiveReadiness } = await import("./doctor-live-QAT3FLUJ.js");
+    const { runLiveReadiness, formatLiveReadiness } = await import("./doctor-live-55CKYQ6V.js");
     const report = await runLiveReadiness();
     process.stdout.write(formatLiveReadiness(report) + "\n");
     if (report.some((r) => r.levels.serves.status === "failed")) {
@@ -24056,7 +24070,7 @@ async function runInitPortableFlow(args) {
   return cliExit(result.success ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runInitOpencodeFlow(args) {
-  const { runInitOpencode } = await import("./init-opencode-WXEXOV6X.js");
+  const { runInitOpencode } = await import("./init-opencode-R5JTQZG5.js");
   const opencodePath = args.options.opencode;
   if (opencodePath === void 0 || opencodePath === "") {
     process.stderr.write("Error: --opencode requires a path argument.\n");
@@ -24082,7 +24096,7 @@ async function runInitOpencodeFlow(args) {
   return cliExit(EXIT_CODES.SUCCESS);
 }
 async function renderOpencodeValidate(opencodePath) {
-  const { runOpencodeValidate } = await import("./init-opencode-WXEXOV6X.js");
+  const { runOpencodeValidate } = await import("./init-opencode-R5JTQZG5.js");
   const result = await runOpencodeValidate(opencodePath);
   if (!result.ok) {
     process.stderr.write(`init --opencode --validate: ${result.reason ?? "failed"}
@@ -24121,7 +24135,7 @@ async function handleSetupCommandAsync(args) {
   return cliExitFromStatus(exitCode);
 }
 async function runCustomApiSetup(args) {
-  const { configureCustomApi } = await import("./setup-custom-api-DKXRZY4C.js");
+  const { configureCustomApi } = await import("./setup-custom-api-TJMRUQFK.js");
   const baseUrl = args.options.customApi;
   if (baseUrl === void 0) return EXIT_CODES.SERVER_START_FAILED;
   const input = {
@@ -24137,7 +24151,7 @@ async function runCustomApiSetup(args) {
     return EXIT_CODES.SERVER_START_FAILED;
   }
   const { baseUrl: canonical, model, probeSucceeded, shellFragment } = result.value;
-  process.stdout.write(`\u2713 Gateway validated: ${canonical}
+  process.stdout.write(`\u2713 Gateway validated: ${hostnameOf(canonical)}
 `);
   process.stdout.write(`\u2713 Model: ${model}
 `);