Nexus

class AgentLoop:
    provider: ModelProvider
    tool_registry: ToolRegistry
    permission_engine: Permissions
    session: Session

    async def run(self, directive: str) -> AgentResult:
        while not done and iteration < max_iterations:
            response = await self.provider.complete(self.session.messages)
            tool_calls = extract_tool_calls(response)
            if not tool_calls:
                break
            results = await self.tool_router.execute(tool_calls)
            self.session.append_tool_results(results)
        return AgentResult(...)

class ToolRouter:
    async def execute(self, calls: list[ToolCall]) -> list[ToolResult]:
        read_only = [c for c in calls if self.registry[c.name].is_read_only]
        mutations = [c for c in calls if not self.registry[c.name].is_read_only]
        # Concurrent for read-only, sequential for mutations
        results = await asyncio.gather(*[self._run(c) for c in read_only])
        for c in mutations:
            results.append(await self._run(c))
        return results

@dataclass
class Identity:
    proxy: ProxyConfig           # IP + port + auth
    fingerprint: BrowserFingerprint # screen, fonts, webGL, canvas
    tls_profile: str              # "chrome_120" for curl_cffi
    cookies: dict[str, str]      # Persistent session cookies
    user_agent: str
    timezone: str                 # Matches proxy geo
    blocked_on: list[str]         # Domains where flagged

class IdentityManager:
    def get_identity(self, domain: str) -> Identity:
        # Get clean identity not blocked on this domain
        # Least-recently-used rotation

    def mark_blocked(self, identity: Identity, domain: str):
        # Flag identity as detected on this domain

@dataclass
class Directive:
    source: str       # "upwork" | "human" | "ingest"
    type: str         # "scrape_job" | "direct" | "kb_ingest"
    description: str  # What to do
    target_url: str | None = None
    metadata: dict = field(default_factory=dict)

[nexus]
name = "Nexus"
data_dir = "./nexus-data"
kb_dir = "./nexus-kb"

[provider]
default = "deepseek"                 # Testing phase
# default = "ollama"                   # Production: self-hosted Gemma 4

[provider.deepseek]
api_key = "${DEEPSEEK_API_KEY}"
base_url = "https://api.deepseek.com/v1"
model = "deepseek-chat"

[provider.ollama]
base_url = "http://gemma-server:11434"  # Dedicated Gemma 4 server
model = "gemma4"

[provider.anthropic]               # Optional fallback
api_key = "${ANTHROPIC_API_KEY}"

[agent]
max_iterations = 50               # Ralph loop safety limit
max_tokens_per_session = 100000
compaction_threshold = 80000

[upwork]
enabled = true
poll_interval_minutes = 30
keywords = ["web scraping", "data extraction", "crawler"]
min_budget = 50

[telegram]
enabled = true
bot_token = "${TELEGRAM_BOT_TOKEN}"
chat_id = "${TELEGRAM_CHAT_ID}"

[events.routes]
# Glob-matched event routing
"scrape.completed" = { sink = "telegram", format = "compact" }
"scrape.failed" = { sink = "telegram", format = "alert" }
"job.found" = { sink = "telegram", format = "compact" }
"*" = { sink = "file", format = "raw" }

[permissions]
mode = "auto"                      # "auto" | "interactive" | "bypass"