nexus-ai-pro 2.22.0 → 3.0.0

package/API_STABILITY.md

@@ -1,7 +1,7 @@
 # API Stability Policy
 
-This policy describes compatibility guarantees for `nexus-ai-pro`. The 2.x guarantees apply beginning
-with version 2.0.0, as the 1.x guarantees applied from 1.0.0. The sections for the 1.x stages below
+This policy describes compatibility guarantees for `nexus-ai-pro`. The 3.x guarantees apply beginning
+with version 3.0.0, as the 2.x guarantees applied from 2.0.0 and the 1.x guarantees from 1.0.0. The sections for the 1.x stages below
 still describe each surface; where they say "the 1.x rules", read the rules of the current major line.
 
 ## Release stages
@@ -67,6 +67,39 @@ graduation:
 | Upgrade | A migration test from the previous minor |
 | Soak | A long-running test with flat memory and no leaked handles |
 
+## 3.0 stage (3.0.0)
+
+3.0 is a major release. It turns on the three defaults 2.21 previewed — incremental tracing on a
+durable trace store, the Redis operation store's dispatch index, and `hash-v2` for a deployment first
+recorded — and removes `OpenApiTools.skipped` and `GraphCheckpointV2`, both deprecated in 2.x. Nothing
+stored changes: checkpoints of version 1 and 2, the state store's keys, operation records, and recorded
+deployments read as they did, and the state store's keys are read by every later 3.x.
+`useDefaults('2.x')` and `NEXUS_DEFAULTS=2.x` keep 2.x's three defaults through 3.x.
+[MIGRATING.md](./MIGRATING.md) covers each change. The rollout is proven against the published 2.21.0
+package, in `tests/upgrade-3.test.ts`: a 2.21 worker and a 3.0 worker share a Redis prefix, each
+claiming what it should and 3.0 finding the rest after one `reindex()`, and 2.21 and 3.0 replicas
+place every thread alike, whichever records a deployment first.
+
+Removed: `OpenApiTools.skipped`, always empty since 2.22, and `GraphCheckpointV2`, for `GraphCheckpoint`.
+Everything else 3.0 adds is stable from the start and additive, unless this section says otherwise.
+
+### Graduation
+
+The studio's sign-in leaves experimental status: `oidcSignIn()`, `OidcSignInOptions`,
+`SIGN_IN_COOKIE`, and the `/auth/login`, `/auth/callback`, and `/auth/logout` routes.
+
+| Requirement | Evidence |
+| --- | --- |
+| API stability | Covered by the compatibility rules, with no planned breaking change |
+| Conformance | Signs a person in through Dex v2.46.0, run in a container on every build, where a wrong password is kept and a reused code refused: `studio/test/signin-dex.test.ts`; every way a callback can be wrong, a token for another client among them, against a provider written from the specification: `studio/test/signin.test.ts` |
+| Crash recovery | n/a: it keeps nothing; a session is a signed cookie, and a sign-in in progress is one the person carries |
+| Concurrency | A sign-in begun on one replica finishes on another, and every replica sharing the secret reads the session: `studio/test/signin.test.ts` |
+| Load | 500 reads on a sign-in session cost at most twice the same reads on a personal token: `studio/test/signin.test.ts` |
+| Tenant isolation | A tenant from a claim reads only that tenant's sources, comments, and audit entries: `studio/test/signin.test.ts`, `studio/test/tenants.test.ts` |
+| Security | [Review](./SECURITY.md#the-studio-and-its-accounts), reviewed for 2.22, its findings closed |
+| Upgrade | A session sealed by 2.22.0 is read: `studio/test/signin.test.ts` |
+| Soak | 1,000 sign-ins and their reads with flat memory: `studio/test/signin.test.ts` |
+
 ## 2.22 stage (2.22.0)
 
 Everything 2.22 adds is stable from the start and additive, unless this section says otherwise.

package/CHANGELOG.md

@@ -4,6 +4,37 @@ Notable changes to this project are recorded here. The format follows [Keep a Ch
 
 ## [Unreleased]
 
+## [3.0.0] - 2026-10-30
+
+3.0, a major release. It turns on the three defaults 2.21 previewed, and removes the two names 2.x
+deprecated; nothing stored changes, and `useDefaults('2.x')` keeps 2.x's defaults for an application
+that upgrades first. [MIGRATING.md](./MIGRATING.md) covers each change, and `nexus migrate` finds what
+it touches.
+
+### Breaking
+
+- **A tracer on a durable store writes as it runs.** `TracerOptions.incremental` defaults to true on a
+  store whose `durable` is not `false`: each run is written as it starts and again as it ends, so a
+  run in a process that dies is not lost, at twice the writes. A store in memory still writes at the end.
+- **The Redis operation store keeps its dispatch index**, where the client has `zadd`, `zrem`, and
+  `zrangebyscore`, so a claim reads the same few records however long the queue. Work a worker
+  without the index queued is found once `reindex()` runs: call it once the last 2.x worker sharing the
+  prefix has stopped.
+- **A deployment first recorded on 3.0 places threads by `hash-v2`**, which spreads sequential ids
+  evenly. A deployment already recorded keeps its strategy, so no thread moves.
+- **`OpenApiTools.skipped` is removed.** It was always empty since every operation became a tool.
+- **`GraphCheckpointV2` is removed**, for `GraphCheckpoint`, which it named. `nexus migrate` renames it.
+
+### Changed
+
+- **The studio's sign-in is stable.** Every build signs a person in through Dex, an OpenID Connect
+  provider run in a container: its configuration read, the code exchanged with the client secret and
+  PKCE, its ID token verified against its keys, a wrong password kept at Dex, and a used code refused.
+  `oidcSignIn()`, `OidcSignInOptions`, `SIGN_IN_COOKIE`, and the `/auth/` routes leave experimental
+  status, with their evidence in API_STABILITY.md.
+- **Gemini's voice is in the live workflow.** It speaks a sentence in one of Gemini's voices and hears it
+  back; it graduates when that run passes.
+
 ## [2.22.0] - 2026-10-29
 
 MCP over streamable HTTP both ways, OpenAPI tools that send each operation's credentials, tokens, keys,
@@ -3492,7 +3523,8 @@ shared policy vocabulary is in place for a future release that revisits this.
 - URL fetching rejects unsafe private-network targets and limits response reads.
 - CLI and audit findings no longer disclose detected secret values.
 
-[Unreleased]: https://github.com/mkhitar-abrahamyan/nexus-ai/compare/v2.22.0...HEAD
+[Unreleased]: https://github.com/mkhitar-abrahamyan/nexus-ai/compare/v3.0.0...HEAD
+[3.0.0]: https://github.com/mkhitar-abrahamyan/nexus-ai/compare/v2.22.0...v3.0.0
 [2.22.0]: https://github.com/mkhitar-abrahamyan/nexus-ai/compare/v2.21.0...v2.22.0
 [2.21.0]: https://github.com/mkhitar-abrahamyan/nexus-ai/compare/v2.20.2...v2.21.0
 [2.20.2]: https://github.com/mkhitar-abrahamyan/nexus-ai/compare/v2.20.1...v2.20.2

package/MIGRATING.md

@@ -1,4 +1,138 @@
-# Migrating to 2.0
+# Migrating
+
+- [To 3.0](#migrating-to-30), from 2.x
+- [To 2.0](#migrating-to-20), from 1.x
+
+## Migrating to 3.0
+
+3.0 turns on three defaults that 2.x kept opt-in, and removes two names 2.x deprecated. Nothing stored
+changes: checkpoints, operation records, the server's state, and recorded deployments read as 2.x
+wrote them. Most code compiles unchanged, but the three defaults change what a deployment does, so read
+each before the upgrade reaches production.
+
+To upgrade first and take the defaults later, keep 2.x's for now, on every replica:
+
+```ts
+import { useDefaults } from 'nexus-ai-pro/config';
+
+useDefaults('2.x'); // before creating a tracer, an operation store, or a deployment
+```
+
+or set `NEXUS_DEFAULTS=2.x` in the environment. Then `npx nexus doctor --upgrade 3.0` says what turning
+them on would change for your deployment, and `npx nexus migrate src` finds the removed names.
+
+| Change | The codemod | By hand |
+| --- | --- | --- |
+| [A tracer on a durable store writes as it runs](#a-tracer-on-a-durable-store-writes-as-it-runs) | — | Expect twice the trace writes; close abandoned runs |
+| [The Redis operation store keeps its index](#the-redis-operation-store-keeps-its-index) | — | Call `reindex()` once no worker without the index is left |
+| [A new deployment places threads by `hash-v2`](#a-new-deployment-places-threads-by-hash-v2) | — | Give `bucket()` the deployment's strategy |
+| [`OpenApiTools.skipped` is removed](#openapitoolsskipped-is-removed) | Lists each read | Delete it |
+| [`GraphCheckpointV2` is removed](#graphcheckpointv2-is-removed) | Renames it | — |
+| [`useDefaults('3.0')` changes nothing](#usedefaults30-changes-nothing) | Lists each call | Delete it |
+
+### A tracer on a durable store writes as it runs
+
+`TracerOptions.incremental` defaults to true on a store whose `durable` is not `false`. Each run is
+written when it starts and again when it ends, so a run in a process that dies stays in the store with
+every run beneath it that finished, and a run in progress can be watched. A store in memory, such as
+`MemoryTraceStore`, still writes each trace when its root finishes.
+
+- A store takes twice the writes, and a JSON Lines file twice the lines, the later one winning.
+- A run a dead process left stays `running` until `closeAbandonedRuns()` closes it. Call it when a
+  worker starts, or on a schedule.
+- Sampling is decided when the root starts. A trace not sampled is held in memory and written at the
+  end when tail sampling keeps it, so `keepErrors` still shows every failure.
+- A store of your own that keeps runs only in memory says `durable: false`, and is written at the end.
+
+```ts
+// Before: 2.x wrote each trace when its root finished
+const tracer = new Tracer({ store });
+
+// After, to keep that
+const tracer = new Tracer({ store, incremental: false });
+```
+
+### The Redis operation store keeps its index
+
+`RedisOperationStore` keeps queued work in a sorted set by age, and leased work in one by lease expiry,
+wherever its client has `zadd`, `zrem`, and `zrangebyscore`. A claim then reads the same few records
+with 100,000 operations queued as with 1,000. A client without those commands is not refused: the store
+reads every record, as 2.x did.
+
+A worker without the index, as every 2.x worker is unless asked, writes records without index
+entries, so work it queues is in the index only once `reindex()` adds it. Either way works:
+
+- **Roll 3.0 out, then reindex.** While 2.x workers run, they claim what they queued. Once the last of
+  them has stopped, call `reindex()` once, so the 3.0 workers find what was left. It is safe while
+  workers are busy.
+- **Turn the index on first, on 2.x.** On 2.2 or later, give every worker sharing the prefix
+  `index: true`, or on 2.21 `useDefaults('3.0')`, and call `reindex()` once; 3.0 then changes nothing.
+
+```ts
+const operations = new RedisOperationStore(redis);
+await operations.reindex(); // once no worker without the index shares the prefix
+```
+
+`index: false` keeps 2.x's behaviour.
+
+### A new deployment places threads by `hash-v2`
+
+A deployment first recorded on 3.0 places new threads and stateless runs by `hash-v2`, which spreads
+sequential ids, such as `user-1` to `user-500`, as evenly as random ones. A deployment already recorded
+keeps the strategy it records, `fnv1a-v1` before 3.0, so no thread moves through the upgrade;
+`Deployments.bucketing()` moves one when you choose to.
+
+`bucket()` still places a key by `fnv1a-v1` unless it is given a strategy, so code that predicts where a
+thread lands passes the deployment's:
+
+```ts
+// Before
+const onCanary = bucket(`support:${threadId}`) < 0.1;
+
+// After
+const deployment = await deployments.get('support');
+const onCanary = bucket(`support:${threadId}`, deployment?.bucketStrategy) < 0.1;
+```
+
+`bucketStrategy: 'fnv1a-v1'` on `Deployments.assistant()` keeps 2.x's strategy for a deployment not
+yet recorded. During a rolling upgrade, the replica that first records a deployment, by its first
+canary or split, decides its strategy, and every replica of 2.5 or later then reads it from the record;
+pass `bucketStrategy` to choose rather than leave it to the replica.
+
+### `OpenApiTools.skipped` is removed
+
+Every operation of an OpenAPI document becomes a tool since 2.22, its body sent whatever its type, so
+`skipped` was always empty. Delete each read. The codemod lists them, in files that use the OpenAPI
+tools.
+
+### `GraphCheckpointV2` is removed
+
+It was another name for `GraphCheckpoint`, kept since 1.25. The codemod renames it and keeps your local
+name:
+
+```ts
+// Before
+import type { GraphCheckpointV2 } from 'nexus-ai-pro/graph';
+
+// After
+import type { GraphCheckpoint as GraphCheckpointV2 } from 'nexus-ai-pro/graph';
+```
+
+### `useDefaults('3.0')` changes nothing
+
+An application that previewed 3.0 with `useDefaults('3.0')` or `NEXUS_DEFAULTS=3.0` already runs as 3.0
+does. The call and the variable change nothing now, and can go. `useDefaults('2.x')` and
+`NEXUS_DEFAULTS=2.x` keep 2.x's three defaults through 3.x.
+
+### What does not change
+
+- Checkpoints of version 1 and 2 are read by both checkpointers and by `migrateCheckpoint()`.
+- The server's state keys, sessions, API keys, operation records, and recorded deployments read as 2.x
+  wrote them.
+- Every other default, and every API this guide does not name.
+- Node.js 22 or later.
+
+## Migrating to 2.0
 
 2.0.0 removes what the 1.x line deprecated, and runs every call of every family through one
 lifecycle. Most applications change only their imports, and a codemod does that.
@@ -31,7 +165,7 @@ upgrade, and work through the table.
 | [Claude 4.6 onward think adaptively](#claude-46-onward-think-adaptively) | — | Nothing |
 | [Tool calls reach providers whole](#tool-calls-reach-providers-whole) | — | Nothing |
 
-## The root import keeps only the core
+### The root import keeps only the core
 
 In 2.0, `nexus-ai-pro` exports the core client and nothing else:
 
@@ -71,7 +205,7 @@ is in the [packaging guide](https://github.com/mkhitar-abrahamyan/nexus-ai/blob/
 
 The root import now costs about 325 KB, down from 572 KB.
 
-## Validators and Node types are optional
+### Validators and Node types are optional
 
 `zod`, `ajv`, `ajv-formats`, and `@types/node` are optional peer dependencies. A production install
 is the package alone, about 5.3 MB instead of 12.3 MB.
@@ -88,7 +222,7 @@ install. A zod shape is checked through each field's own `safeParse`.
 The request check in the guardrails, `SchemaValidator`, no longer uses zod. It reports the same
 fields by the same paths; the wording of its findings changed.
 
-## A response's `estimatedCost` is removed
+### A response's `estimatedCost` is removed
 
 The formatted string on a response's metadata is gone. Read the numeric cost, and format it yourself:
 
@@ -104,7 +238,7 @@ if (cost) console.log(new Intl.NumberFormat('en-US', { style: 'currency', curren
 A plan's `estimatedCost`, from `ai.plan()`, is an object and stays. A custom provider that set the
 string should drop it; `buildMeta()` fills `usage` and `cost`.
 
-## Modalities say which way they flow
+### Modalities say which way they flow
 
 A model's `modalities` list mixed inputs and outputs: `vision` meant an image in, and `image` meant an
 image out. 2.0 removes it, and the `Modality` type with it. Every entry declares `inputModalities` and
@@ -128,7 +262,7 @@ models: { registry: { 'my-model': { inputModalities: ['text', 'image'], outputMo
 In routing requirements, replace `modalities` with `inputModalities` or `outputModalities`.
 `modalitiesOf()` still reads both lists, and now requires both.
 
-## Checkpoints are version 2
+### Checkpoints are version 2
 
 A checkpoint 2.x writes has a `version` of 2, an `id`, its `tasks` always spelled out, and every
 pending question in `interrupts`. The single `interrupt` field is gone.
@@ -152,7 +286,7 @@ so a thread left waiting resumes after the upgrade.
 | Build a checkpoint by hand | Use `toCheckpoint()`, which fills in the version, id, tasks, and questions |
 | Named `GraphCheckpointV2` | It still compiles; it is now another name for `GraphCheckpoint` |
 
-## Options that were never read are removed
+### Options that were never read are removed
 
 These were accepted and ignored, and warned once per process since they were deprecated. The codemod
 lists each one it finds.
@@ -170,11 +304,11 @@ lists each one it finds.
 Delete them. Nothing changes, because nothing read them. Approval before a tool runs is
 `interruptOn` on `createAgent()`.
 
-## `ImageManagerConfig` is removed
+### `ImageManagerConfig` is removed
 
 It was another name for `ImageConfig`. The codemod renames the import and keeps your local name.
 
-## Pipeline step names are a closed list
+### Pipeline step names are a closed list
 
 `PipelineStepName` lists the built-in stages only, so a `switch` over it can be exhaustive. A step you
 add with `use()` is recorded as `customStep`, with its own name in `custom`.
@@ -195,7 +329,7 @@ Metrics for a custom step keep its own name as their `step` label.
 `PipelineRunner` are generic over the request and the response. Both default to a completion's, so
 existing code compiles unchanged.
 
-## Streams open on their first read
+### Streams open on their first read
 
 `ai.stream()` returns at once. Authorization, the rate limit, guardrails, routing, and the budget run
 when the stream is first read, so their errors come out of the loop:
@@ -216,7 +350,7 @@ Streams now get what completions always had. They are audited and counted, the c
 circuit breaker apply, and the `done` chunk carries the request id and a cost priced on the routed
 model.
 
-## Every call runs through the lifecycle
+### Every call runs through the lifecycle
 
 Completions, streams, embeddings, voice, telephony, images, realtime sessions, graphs, agents, jobs,
 and batches share one [lifecycle](https://github.com/mkhitar-abrahamyan/nexus-ai/blob/main/docs/lifecycle.md).
@@ -244,7 +378,7 @@ To use the lifecycle, set `lifecycle` on the client: an `authorize` callback, a
 `hooks`. Pass `ai.lifecycle` to graphs, agents, workflows, realtime sessions, queues, and batches to
 make their runs operations of the client too.
 
-## Responses are priced on the routed model
+### Responses are priced on the routed model
 
 The client now prices each response on the model the request was routed to, as the registry names
 it. Providers often answer with a dated snapshot name the registry does not file. In 1.x, pricing on
@@ -252,7 +386,7 @@ that echo cost the call nothing, so OpenAI responses could show a cost of 0, and
 DeepSeek, and Cohere models filed under a prefix. Expect those costs to be priced in 2.0, and budgets
 to count them. A charge the provider reports, with `basis: 'reported'`, is kept as it is.
 
-## The model registry is current
+### The model registry is current
 
 The bundled registry was checked against each provider's documentation on 2026-10-02.
 
@@ -269,7 +403,7 @@ The bundled registry was checked against each provider's documentation on 2026-1
 
 `describeModel()` shows what a name resolves to and when its entry was verified.
 
-## Claude 4.6 onward think adaptively
+### Claude 4.6 onward think adaptively
 
 From the 4.6 generation on, Claude takes adaptive thinking and an effort level, not a thinking budget.
 After 4.6 a budget is rejected, so 1.x requests with `reasoning` failed on those models. 2.0 sends what
@@ -277,7 +411,7 @@ each model accepts, and the [core guide](docs/core.md#reasoning) has the details
 your code. From 4.7 on, Claude also rejects a non-default `temperature` or `topP`, so the client
 drops one and records a capability warning.
 
-## Tool calls reach providers whole
+### Tool calls reach providers whole
 
 In 1.x the OpenAI, Anthropic, and Google adapters dropped a conversation's tool calls and the ids that
 link results to them. A real tool loop could fail on its second turn. 2.0 sends both the way each API
@@ -287,7 +421,7 @@ Two things are new beside it. A tool can return `toolOutput()`, whose text, imag
 references go back as the tool message itself. And a model that produces images returns them on
 `response.assets`.
 
-## For provider authors
+### For provider authors
 
 The provider contracts only grew:
 
@@ -298,6 +432,6 @@ The provider contracts only grew:
 
 A provider written for 1.x compiles unchanged.
 
-## Runtime
+### Runtime
 
 2.0 runs on Node 22 and newer.

package/README.md

@@ -345,13 +345,17 @@ Shipped so far:
 - 2.22 MCP over streamable HTTP both ways, with prompts, resources, and a server's questions back to
   the client; OpenAPI tools that send each operation's credentials; tokens, API keys, and sessions the
   server issues; and a studio that signs people in with your identity provider and serves many
-  tenants, each seeing only its own.
-
-Upgrading from 1.x: `npx nexus migrate src --write` moves your imports, and
-[MIGRATING.md](https://github.com/mkhitar-abrahamyan/nexus-ai/blob/main/MIGRATING.md) covers the rest.
-Next, in 2.23, Pinecone, images, the Gemini embedding batch tier, media understanding, video, typed
-decisions, Gemini Live, SIP, and both phone providers graduate once the live workflow passes against
-each. The
+  tenants, each seeing only its own;
+- 3.0 the three defaults 2.21 previewed, on: tracing written as it runs, the Redis dispatch index, and
+  `hash-v2` for a new deployment, with `useDefaults('2.x')` for an application that upgrades first;
+  and the studio's sign-in, stable, proven against a real OpenID Connect provider on every build.
+
+Upgrading from 2.x: 3.0 turns on three defaults 2.x kept opt-in, and `useDefaults('2.x')` keeps them
+off until you are ready; from 1.x, `npx nexus migrate src --write` moves your imports.
+[MIGRATING.md](https://github.com/mkhitar-abrahamyan/nexus-ai/blob/main/MIGRATING.md) covers both.
+Next, in 3.1, Pinecone, images, the Gemini embedding batch tier, media understanding, video, typed
+decisions, Gemini Live, SIP, both phone providers, and Gemini's voice graduate once the live workflow
+passes against each. The
 [roadmap](https://github.com/mkhitar-abrahamyan/nexus-ai/blob/main/ROADMAP.md) lists what comes after, in the order
 applications ask for it.
 

package/SECURITY.md

@@ -281,8 +281,8 @@ Findings, each fixed in 2.5 with a test in `studio/test/security.test.ts`:
 - **A proposal's pull-request link was rendered as stored.** The content security policy already
   blocked a `javascript:` address. Only `http` and `https` links are rendered now.
 
-Signing in and tenants, reviewed for 2.22, with tests in `studio/test/signin.test.ts` and
-`studio/test/tenants.test.ts`:
+Signing in and tenants, reviewed for 2.22, with tests in `studio/test/signin.test.ts`,
+`studio/test/tenants.test.ts`, and, against Dex, a real provider, `studio/test/signin-dex.test.ts`:
 - The provider's configuration must name the issuer the studio was given. An ID token must verify
   against the provider's keys, name that issuer and the studio's client as its audience, and carry
   the sign-in's nonce; a token for several clients must name the studio as `azp`.

package/dist/agent/openapi.d.ts

@@ -133,17 +133,6 @@ export interface OpenApiTools {
     operations: OpenApiOperation[];
     /** The JSON Schema of what each tool returns, by name: its first success response's. Pass it to `emulatedTools()` as `results`. */
     results: Record<string, Record<string, unknown>>;
-    /**
-     * Operations that could not become tools, and why.
-     *
-     * @deprecated Every operation becomes a tool since 2.22, its body sent whatever its type, so this is
-     * always empty. It is removed in 3.0.
-     */
-    skipped: Array<{
-        method: string;
-        path: string;
-        reason: string;
-    }>;
     /** What the API sends the application, which no tool calls: its webhooks and its operations' callbacks. */
     webhooks: OpenApiWebhook[];
 }

package/dist/agent/openapi.js

@@ -83,7 +83,6 @@ export function openApiTools(document, options = {}) {
         tools,
         operations,
         results,
-        skipped: [],
         webhooks: webhooksOf(doc),
     };
 }

package/dist/cli/migrate.d.ts

@@ -16,10 +16,11 @@ export interface MigrationOutcome {
     notes: MigrationNote[];
 }
 /**
- * Migrates one file's text to the 2.0 imports: names the root import drops are imported from their
- * subpaths, names that moved under another name keep their local name through an alias, and deprecated
- * aliases are replaced. What cannot be rewritten safely — a namespace import of the root, a dynamic
- * import, a read of `estimatedCost` — is reported instead of guessed at.
+ * Migrates one file's text to 2.0's imports and 3.0's names: names the root import drops are imported
+ * from their subpaths, names that moved under another name keep their local name through an alias, and
+ * deprecated aliases are replaced. What cannot be rewritten safely — a namespace import of the root, a
+ * dynamic import, a read of `estimatedCost` or of the OpenAPI tools' `skipped` — is reported instead
+ * of guessed at.
  *
  * Markdown is migrated inside its TypeScript and JavaScript code blocks only. Running it twice changes
  * nothing the second time.

package/dist/cli/migrate.js

@@ -2,7 +2,10 @@ import { readdir, readFile, stat, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { CliUsageError, flagBool, writeJson } from './args.js';
 import { ROOT_MOVES } from './root-moves.js';
-const RENAMES = { ImageManagerConfig: 'ImageConfig' };
+const RENAMES = {
+    ImageManagerConfig: 'ImageConfig',
+    GraphCheckpointV2: 'GraphCheckpoint',
+};
 const PACKAGE = 'nexus-ai-pro';
 const CODE_EXTENSIONS = new Set(['.ts', '.tsx', '.mts', '.cts', '.js', '.jsx', '.mjs', '.cjs']);
 const MARKDOWN_EXTENSIONS = new Set(['.md', '.mdx']);
@@ -139,6 +142,20 @@ function migrateCode(text, lineOffset) {
             message: "a response's `estimatedCost` string is removed in 2.0: read `cost.amount`, a number, and format it",
         });
     }
+    if (/nexus-ai-pro\/agent\/openapi|\b(?:loadOpenApiTools|openApiTools)\(/.test(text)) {
+        for (const match of text.matchAll(/\.skipped\b/g)) {
+            notes.push({
+                line: at(match.index ?? 0),
+                message: 'if this reads the OpenAPI tools, `skipped` was always empty since 2.22 and is removed in 3.0: delete the read',
+            });
+        }
+    }
+    for (const match of text.matchAll(/\buseDefaults\(\s*(['"])3\.0\1\s*\)/g)) {
+        notes.push({
+            line: at(match.index ?? 0),
+            message: "3.0's defaults are the default in 3.0: the call changes nothing, and can go",
+        });
+    }
     for (const { pattern, message } of REMOVED_OPTIONS) {
         for (const match of text.matchAll(pattern))
             notes.push({ line: at(match.index ?? 0), message });

package/dist/core/defaults.d.ts

@@ -1,10 +1,9 @@
 /**
- * Which release's defaults apply where an option is left out: 2.x's, or a preview of 3.0's. 3.0 turns on
- * three settings that 2.x keeps opt-in, because turning them on changes what an upgrade does; the
- * preview turns on all three at once, so an application can run as 3.0 will before it upgrades. An
- * option set explicitly always wins, under either.
+ * Which release's defaults apply where an option is left out: 3.0's, or 2.x's. 3.0 turns on three
+ * settings that 2.x kept opt-in; `2.x` keeps all three off at once, so an application can upgrade first
+ * and turn them on when it is ready. An option set explicitly always wins, under either.
  */
-/** A release whose defaults apply: `2.x`, the default, or `3.0`, a preview of the next major release's. */
+/** A release whose defaults apply: `3.0`, the default, or `2.x`, which keeps 2.x's three settings off. */
 export type NexusDefaults = '2.x' | '3.0';
 /** One default that 3.0 changes: what it is, what 2.x does, what 3.0 does, and what to do first. */
 export interface DefaultChange {
@@ -12,23 +11,24 @@ export interface DefaultChange {
     setting: string;
     /** Where it is set. */
     module: string;
-    /** What 2.x does when the option is left out. */
+    /** What 2.x did when the option is left out, as `useDefaults('2.x')` still does. */
     today: string;
-    /** What 3.0, and the preview, does when it is left out. */
+    /** What 3.0 does when it is left out. */
     next: string;
     /** What to do before turning it on, if anything. */
     before: string;
 }
-/** The defaults 3.0 changes, each turned on by the preview. */
+/** The defaults 3.0 changes, each kept as 2.x had it by `useDefaults('2.x')`. */
 export declare const DEFAULT_CHANGES: readonly DefaultChange[];
 /**
- * Chooses which release's defaults apply to everything created after it: `3.0` previews the next
- * major release's, `2.x` returns to today's. Call it before creating a tracer, an operation store, or
- * a deployment: each reads the defaults when it is created. Overrides `NEXUS_DEFAULTS`.
+ * Chooses which release's defaults apply to everything created after it: `3.0`, the default, or `2.x`,
+ * which keeps the three settings 3.0 turns on off, for an application that upgrades before it turns them
+ * on. Call it before creating a tracer, an operation store, or a deployment: each reads the defaults when
+ * it is created. Overrides `NEXUS_DEFAULTS`.
  */
 export declare function useDefaults(release: NexusDefaults): void;
 /**
  * The defaults in effect: as `useDefaults()` chose, else the `NEXUS_DEFAULTS` environment variable,
- * `2.x` or `3.0`, else `2.x`. Throws for any other value of the variable, rather than ignore a typo.
+ * `2.x` or `3.0`, else `3.0`. Throws for any other value of the variable, rather than ignore a typo.
  */
 export declare function nexusDefaults(): NexusDefaults;

package/dist/core/defaults.js

@@ -11,7 +11,7 @@ export const DEFAULT_CHANGES = [
         module: 'nexus-ai-pro/operations',
         today: 'false: finding queued work reads every record',
         next: 'true where the client has zadd, zrem, and zrangebyscore: queued and leased work is kept in sorted sets',
-        before: 'Run 2.2 or later on every worker sharing the prefix, and call reindex() once.',
+        before: 'Call reindex() once no worker without the index shares the prefix: work such a worker queued is in the index only after it.',
     },
     {
         setting: 'Deployments bucketStrategy',
@@ -30,7 +30,7 @@ export function nexusDefaults() {
         return chosen;
     const variable = globalThis.process?.env
         ?.NEXUS_DEFAULTS;
-    return variable === undefined || variable === '' ? '2.x' : checked(variable, 'NEXUS_DEFAULTS');
+    return variable === undefined || variable === '' ? '3.0' : checked(variable, 'NEXUS_DEFAULTS');
 }
 function checked(release, where) {
     if (release === '2.x' || release === '3.0')

package/dist/doctor/index.js

@@ -304,7 +304,7 @@ async function upgradeCheck(upgrade, deployment) {
     return {
         status: 'warn',
         detail: `${findings.join('; ')}.`,
-        hint: "Run with 3.0's defaults now: call useDefaults('3.0') before creating anything, or set NEXUS_DEFAULTS=3.0.",
+        hint: "Turn 3.0's defaults on, on every replica together: remove useDefaults('2.x') and NEXUS_DEFAULTS=2.x, which keep 2.x's.",
     };
 }
 function kindOf(value) {

package/dist/graph/checkpoint-migration.d.ts

@@ -1,10 +1,4 @@
 import type { ChannelSchema, GraphCheckpoint, GraphCheckpointV1, GraphTask, PendingInterrupt, StoredGraphCheckpoint } from '../types/graph.js';
-/**
- * The 2.0 checkpoint schema under the name 1.25 gave it, so code written against 1.25 compiles.
- *
- * @deprecated Use `GraphCheckpoint`, which is this schema in 2.0.
- */
-export type GraphCheckpointV2<S extends ChannelSchema = ChannelSchema> = GraphCheckpoint<S>;
 /**
  * Reads a checkpoint in the current schema from one in either schema. A custom checkpointer whose
  * store still holds 1.x checkpoints can return them as they are, since the graph calls this on every

package/dist/graph/index.d.ts

@@ -1,5 +1,5 @@
 export { CompiledGraph, StateGraph, createGraph } from './graph.js';
-export { type CheckpointDraft, type GraphCheckpointV2, migrateCheckpoint, toCheckpoint, } from './checkpoint-migration.js';
+export { type CheckpointDraft, migrateCheckpoint, toCheckpoint, } from './checkpoint-migration.js';
 export { appendList, appendSet, counter, lastValue, mergeObject, reducerChannel, } from './channels.js';
 export { MemoryGraphCheckpointer, OperationStoreCheckpointer, type MemoryGraphCheckpointerOptions, type OperationStoreCheckpointerOptions, } from './checkpointer.js';
 export { GraphDrainedError, GraphError, GraphInterrupt, GraphNodeError, GraphNodeTimeoutError, GraphNotInterruptedError, GraphStepLimitError, GraphThreadNotFoundError, GraphValidationError, interruptKey, } from './errors.js';

package/dist/operations/adapters.d.ts

@@ -39,11 +39,12 @@ export interface RedisOperationStoreOptions {
      * truth; an index entry only says where to look, and one that no longer matches its record is
      * skipped and removed.
      *
-     * Off by default, because a 2.1 worker writes records without index entries. Turn it on once every
-     * worker sharing the prefix runs 2.2, then call `reindex()` once to index what is already there.
-     * Under 3.0's defaults, `useDefaults('3.0')`, on where the client has the commands it needs.
-     * Needs `zadd`, `zrem`, and `zrangebyscore`; with `eval`, a record and its index entries change in
-     * one step.
+     * On by default where the client has the commands it needs, and off under 2.x's defaults,
+     * `useDefaults('2.x')`. A worker without the index writes records without index entries, so what it
+     * queued is found once `reindex()` indexes what is already there: call it once no such worker
+     * shares the prefix. Needs
+     * `zadd`, `zrem`, and `zrangebyscore`; with `eval`, a record and its index entries change in one
+     * step.
      */
     index?: boolean;
 }

package/dist/server/deployments.d.ts

@@ -46,8 +46,8 @@ export interface RevisionedAssistantOptions {
     /** What the assistant is, reported by the assistants endpoint. */
     description?: string;
     /**
-     * How the deployment places threads, when it is first recorded. Defaults to `fnv1a-v1`, and under
-     * 3.0's defaults, `useDefaults('3.0')`, to `hash-v2`. A deployment already recorded keeps its own;
+     * How the deployment places threads, when it is first recorded. Defaults to `hash-v2`, and under
+     * 2.x's defaults, `useDefaults('2.x')`, to `fnv1a-v1`. A deployment already recorded keeps its own;
      * `Deployments.bucketing()` changes it.
      */
     bucketStrategy?: BucketStrategy;

package/dist/tracing/tracer.d.ts

@@ -33,8 +33,8 @@ export interface TracerOptions {
      * run stays in the store with every run that finished, and a run in progress can be watched.
      * Sampling is then decided when the root starts. A trace not sampled is still held in memory and
      * written at the end when tail sampling keeps it, so `keepErrors` still shows every failure.
-     * Defaults to false, which writes at the end, as before; under 3.0's defaults, `useDefaults('3.0')`,
-     * to true on a durable store, one whose `durable` is not `false`.
+     * Defaults to true on a durable store, one whose `durable` is not `false`, and to false, which writes
+     * at the end, on one in memory and under 2.x's defaults, `useDefaults('2.x')`.
      */
     incremental?: boolean;
     /**

package/dist/version.d.ts

@@ -2,4 +2,4 @@
  * This package's version, recorded where provenance matters, such as on every experiment. A test
  * keeps it equal to `package.json`.
  */
-export declare const NEXUS_VERSION = "2.22.0";
+export declare const NEXUS_VERSION = "3.0.0";

package/dist/version.js

@@ -1 +1 @@
-export const NEXUS_VERSION = '2.22.0';
+export const NEXUS_VERSION = '3.0.0';

package/dist-cjs/agent/openapi.d.ts

@@ -133,17 +133,6 @@ export interface OpenApiTools {
     operations: OpenApiOperation[];
     /** The JSON Schema of what each tool returns, by name: its first success response's. Pass it to `emulatedTools()` as `results`. */
     results: Record<string, Record<string, unknown>>;
-    /**
-     * Operations that could not become tools, and why.
-     *
-     * @deprecated Every operation becomes a tool since 2.22, its body sent whatever its type, so this is
-     * always empty. It is removed in 3.0.
-     */
-    skipped: Array<{
-        method: string;
-        path: string;
-        reason: string;
-    }>;
     /** What the API sends the application, which no tool calls: its webhooks and its operations' callbacks. */
     webhooks: OpenApiWebhook[];
 }

package/dist-cjs/agent/openapi.js

@@ -91,7 +91,6 @@ function openApiTools(document, options = {}) {
         tools,
         operations,
         results,
-        skipped: [],
         webhooks: webhooksOf(doc),
     };
 }

package/dist-cjs/cli/migrate.d.ts

@@ -16,10 +16,11 @@ export interface MigrationOutcome {
     notes: MigrationNote[];
 }
 /**
- * Migrates one file's text to the 2.0 imports: names the root import drops are imported from their
- * subpaths, names that moved under another name keep their local name through an alias, and deprecated
- * aliases are replaced. What cannot be rewritten safely — a namespace import of the root, a dynamic
- * import, a read of `estimatedCost` — is reported instead of guessed at.
+ * Migrates one file's text to 2.0's imports and 3.0's names: names the root import drops are imported
+ * from their subpaths, names that moved under another name keep their local name through an alias, and
+ * deprecated aliases are replaced. What cannot be rewritten safely — a namespace import of the root, a
+ * dynamic import, a read of `estimatedCost` or of the OpenAPI tools' `skipped` — is reported instead
+ * of guessed at.
  *
  * Markdown is migrated inside its TypeScript and JavaScript code blocks only. Running it twice changes
  * nothing the second time.

package/dist-cjs/cli/migrate.js

@@ -10,7 +10,10 @@ const promises_1 = require("node:fs/promises");
 const node_path_1 = __importDefault(require("node:path"));
 const args_js_1 = require("./args.js");
 const root_moves_js_1 = require("./root-moves.js");
-const RENAMES = { ImageManagerConfig: 'ImageConfig' };
+const RENAMES = {
+    ImageManagerConfig: 'ImageConfig',
+    GraphCheckpointV2: 'GraphCheckpoint',
+};
 const PACKAGE = 'nexus-ai-pro';
 const CODE_EXTENSIONS = new Set(['.ts', '.tsx', '.mts', '.cts', '.js', '.jsx', '.mjs', '.cjs']);
 const MARKDOWN_EXTENSIONS = new Set(['.md', '.mdx']);
@@ -147,6 +150,20 @@ function migrateCode(text, lineOffset) {
             message: "a response's `estimatedCost` string is removed in 2.0: read `cost.amount`, a number, and format it",
         });
     }
+    if (/nexus-ai-pro\/agent\/openapi|\b(?:loadOpenApiTools|openApiTools)\(/.test(text)) {
+        for (const match of text.matchAll(/\.skipped\b/g)) {
+            notes.push({
+                line: at(match.index ?? 0),
+                message: 'if this reads the OpenAPI tools, `skipped` was always empty since 2.22 and is removed in 3.0: delete the read',
+            });
+        }
+    }
+    for (const match of text.matchAll(/\buseDefaults\(\s*(['"])3\.0\1\s*\)/g)) {
+        notes.push({
+            line: at(match.index ?? 0),
+            message: "3.0's defaults are the default in 3.0: the call changes nothing, and can go",
+        });
+    }
     for (const { pattern, message } of REMOVED_OPTIONS) {
         for (const match of text.matchAll(pattern))
             notes.push({ line: at(match.index ?? 0), message });

package/dist-cjs/core/defaults.d.ts

@@ -1,10 +1,9 @@
 /**
- * Which release's defaults apply where an option is left out: 2.x's, or a preview of 3.0's. 3.0 turns on
- * three settings that 2.x keeps opt-in, because turning them on changes what an upgrade does; the
- * preview turns on all three at once, so an application can run as 3.0 will before it upgrades. An
- * option set explicitly always wins, under either.
+ * Which release's defaults apply where an option is left out: 3.0's, or 2.x's. 3.0 turns on three
+ * settings that 2.x kept opt-in; `2.x` keeps all three off at once, so an application can upgrade first
+ * and turn them on when it is ready. An option set explicitly always wins, under either.
  */
-/** A release whose defaults apply: `2.x`, the default, or `3.0`, a preview of the next major release's. */
+/** A release whose defaults apply: `3.0`, the default, or `2.x`, which keeps 2.x's three settings off. */
 export type NexusDefaults = '2.x' | '3.0';
 /** One default that 3.0 changes: what it is, what 2.x does, what 3.0 does, and what to do first. */
 export interface DefaultChange {
@@ -12,23 +11,24 @@ export interface DefaultChange {
     setting: string;
     /** Where it is set. */
     module: string;
-    /** What 2.x does when the option is left out. */
+    /** What 2.x did when the option is left out, as `useDefaults('2.x')` still does. */
     today: string;
-    /** What 3.0, and the preview, does when it is left out. */
+    /** What 3.0 does when it is left out. */
     next: string;
     /** What to do before turning it on, if anything. */
     before: string;
 }
-/** The defaults 3.0 changes, each turned on by the preview. */
+/** The defaults 3.0 changes, each kept as 2.x had it by `useDefaults('2.x')`. */
 export declare const DEFAULT_CHANGES: readonly DefaultChange[];
 /**
- * Chooses which release's defaults apply to everything created after it: `3.0` previews the next
- * major release's, `2.x` returns to today's. Call it before creating a tracer, an operation store, or
- * a deployment: each reads the defaults when it is created. Overrides `NEXUS_DEFAULTS`.
+ * Chooses which release's defaults apply to everything created after it: `3.0`, the default, or `2.x`,
+ * which keeps the three settings 3.0 turns on off, for an application that upgrades before it turns them
+ * on. Call it before creating a tracer, an operation store, or a deployment: each reads the defaults when
+ * it is created. Overrides `NEXUS_DEFAULTS`.
  */
 export declare function useDefaults(release: NexusDefaults): void;
 /**
  * The defaults in effect: as `useDefaults()` chose, else the `NEXUS_DEFAULTS` environment variable,
- * `2.x` or `3.0`, else `2.x`. Throws for any other value of the variable, rather than ignore a typo.
+ * `2.x` or `3.0`, else `3.0`. Throws for any other value of the variable, rather than ignore a typo.
  */
 export declare function nexusDefaults(): NexusDefaults;

package/dist-cjs/core/defaults.js

@@ -16,7 +16,7 @@ exports.DEFAULT_CHANGES = [
         module: 'nexus-ai-pro/operations',
         today: 'false: finding queued work reads every record',
         next: 'true where the client has zadd, zrem, and zrangebyscore: queued and leased work is kept in sorted sets',
-        before: 'Run 2.2 or later on every worker sharing the prefix, and call reindex() once.',
+        before: 'Call reindex() once no worker without the index shares the prefix: work such a worker queued is in the index only after it.',
     },
     {
         setting: 'Deployments bucketStrategy',
@@ -35,7 +35,7 @@ function nexusDefaults() {
         return chosen;
     const variable = globalThis.process?.env
         ?.NEXUS_DEFAULTS;
-    return variable === undefined || variable === '' ? '2.x' : checked(variable, 'NEXUS_DEFAULTS');
+    return variable === undefined || variable === '' ? '3.0' : checked(variable, 'NEXUS_DEFAULTS');
 }
 function checked(release, where) {
     if (release === '2.x' || release === '3.0')

package/dist-cjs/doctor/index.js

@@ -343,7 +343,7 @@ async function upgradeCheck(upgrade, deployment) {
     return {
         status: 'warn',
         detail: `${findings.join('; ')}.`,
-        hint: "Run with 3.0's defaults now: call useDefaults('3.0') before creating anything, or set NEXUS_DEFAULTS=3.0.",
+        hint: "Turn 3.0's defaults on, on every replica together: remove useDefaults('2.x') and NEXUS_DEFAULTS=2.x, which keep 2.x's.",
     };
 }
 function kindOf(value) {

package/dist-cjs/graph/checkpoint-migration.d.ts

@@ -1,10 +1,4 @@
 import type { ChannelSchema, GraphCheckpoint, GraphCheckpointV1, GraphTask, PendingInterrupt, StoredGraphCheckpoint } from '../types/graph.js';
-/**
- * The 2.0 checkpoint schema under the name 1.25 gave it, so code written against 1.25 compiles.
- *
- * @deprecated Use `GraphCheckpoint`, which is this schema in 2.0.
- */
-export type GraphCheckpointV2<S extends ChannelSchema = ChannelSchema> = GraphCheckpoint<S>;
 /**
  * Reads a checkpoint in the current schema from one in either schema. A custom checkpointer whose
  * store still holds 1.x checkpoints can return them as they are, since the graph calls this on every

package/dist-cjs/graph/index.d.ts

@@ -1,5 +1,5 @@
 export { CompiledGraph, StateGraph, createGraph } from './graph.js';
-export { type CheckpointDraft, type GraphCheckpointV2, migrateCheckpoint, toCheckpoint, } from './checkpoint-migration.js';
+export { type CheckpointDraft, migrateCheckpoint, toCheckpoint, } from './checkpoint-migration.js';
 export { appendList, appendSet, counter, lastValue, mergeObject, reducerChannel, } from './channels.js';
 export { MemoryGraphCheckpointer, OperationStoreCheckpointer, type MemoryGraphCheckpointerOptions, type OperationStoreCheckpointerOptions, } from './checkpointer.js';
 export { GraphDrainedError, GraphError, GraphInterrupt, GraphNodeError, GraphNodeTimeoutError, GraphNotInterruptedError, GraphStepLimitError, GraphThreadNotFoundError, GraphValidationError, interruptKey, } from './errors.js';

package/dist-cjs/operations/adapters.d.ts

@@ -39,11 +39,12 @@ export interface RedisOperationStoreOptions {
      * truth; an index entry only says where to look, and one that no longer matches its record is
      * skipped and removed.
      *
-     * Off by default, because a 2.1 worker writes records without index entries. Turn it on once every
-     * worker sharing the prefix runs 2.2, then call `reindex()` once to index what is already there.
-     * Under 3.0's defaults, `useDefaults('3.0')`, on where the client has the commands it needs.
-     * Needs `zadd`, `zrem`, and `zrangebyscore`; with `eval`, a record and its index entries change in
-     * one step.
+     * On by default where the client has the commands it needs, and off under 2.x's defaults,
+     * `useDefaults('2.x')`. A worker without the index writes records without index entries, so what it
+     * queued is found once `reindex()` indexes what is already there: call it once no such worker
+     * shares the prefix. Needs
+     * `zadd`, `zrem`, and `zrangebyscore`; with `eval`, a record and its index entries change in one
+     * step.
      */
     index?: boolean;
 }

package/dist-cjs/server/deployments.d.ts

@@ -46,8 +46,8 @@ export interface RevisionedAssistantOptions {
     /** What the assistant is, reported by the assistants endpoint. */
     description?: string;
     /**
-     * How the deployment places threads, when it is first recorded. Defaults to `fnv1a-v1`, and under
-     * 3.0's defaults, `useDefaults('3.0')`, to `hash-v2`. A deployment already recorded keeps its own;
+     * How the deployment places threads, when it is first recorded. Defaults to `hash-v2`, and under
+     * 2.x's defaults, `useDefaults('2.x')`, to `fnv1a-v1`. A deployment already recorded keeps its own;
      * `Deployments.bucketing()` changes it.
      */
     bucketStrategy?: BucketStrategy;

package/dist-cjs/tracing/tracer.d.ts

@@ -33,8 +33,8 @@ export interface TracerOptions {
      * run stays in the store with every run that finished, and a run in progress can be watched.
      * Sampling is then decided when the root starts. A trace not sampled is still held in memory and
      * written at the end when tail sampling keeps it, so `keepErrors` still shows every failure.
-     * Defaults to false, which writes at the end, as before; under 3.0's defaults, `useDefaults('3.0')`,
-     * to true on a durable store, one whose `durable` is not `false`.
+     * Defaults to true on a durable store, one whose `durable` is not `false`, and to false, which writes
+     * at the end, on one in memory and under 2.x's defaults, `useDefaults('2.x')`.
      */
     incremental?: boolean;
     /**

package/dist-cjs/version.d.ts

@@ -2,4 +2,4 @@
  * This package's version, recorded where provenance matters, such as on every experiment. A test
  * keeps it equal to `package.json`.
  */
-export declare const NEXUS_VERSION = "2.22.0";
+export declare const NEXUS_VERSION = "3.0.0";

package/dist-cjs/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NEXUS_VERSION = void 0;
-exports.NEXUS_VERSION = '2.22.0';
+exports.NEXUS_VERSION = '3.0.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-ai-pro",
-  "version": "2.22.0",
+  "version": "3.0.0",
   "description": "Typed AI framework for TypeScript: provider routing and failover, durable agent graphs and workflows, retrieval over any vector store, MCP, evals, guardrails, and cost control",
   "type": "module",
   "main": "dist-cjs/index.js",
@@ -2204,6 +2204,7 @@
     "express": "^5.1.0",
     "nexus-ai-pro-2-0": "npm:nexus-ai-pro@^2.0.0",
     "nexus-ai-pro-2-1": "npm:nexus-ai-pro@^2.1.0",
+    "nexus-ai-pro-2-21": "npm:nexus-ai-pro@^2.21.0",
     "nexus-ai-pro-2-3": "npm:nexus-ai-pro@^2.3.0",
     "nexus-ai-pro-2-5": "npm:nexus-ai-pro@^2.5.0",
     "nexus-ai-pro-2-7": "npm:nexus-ai-pro@^2.7.0",