@nexus-cortex/core 4.134.3 → 4.134.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/middleware/permissions/DefaultPolicies.d.ts +10 -0
- package/dist/middleware/permissions/DefaultPolicies.d.ts.map +1 -1
- package/dist/middleware/permissions/DefaultPolicies.js +47 -0
- package/dist/middleware/permissions/DefaultPolicies.js.map +1 -1
- package/dist/tools/registries/BaseToolRegistry.js +2 -2
- package/package.json +3 -3
|
@@ -10,6 +10,16 @@
|
|
|
10
10
|
* @created 2025-11-13
|
|
11
11
|
*/
|
|
12
12
|
import type { PermissionPolicy } from '../contracts/MiddlewareContracts.js';
|
|
13
|
+
/**
|
|
14
|
+
* 2026-11-13 (operator's M2 session 28a43865): with no desktop package installed, deepseek-flash answered "do you have desktop tools?"
|
|
15
|
+
* by screenshotting the real screen, posting a CoreGraphics input event and scripting Safari/Chrome — all through plain Bash, around every
|
|
16
|
+
* guard the desktop tool has (off by default, failsafe, stop latch, audit). Screen capture, synthetic input and app scripting through Bash
|
|
17
|
+
* therefore ALWAYS ask (blacklist tier: auto-approve does not cover it) unless the user enabled the desktop surface
|
|
18
|
+
* (NEXUS_DESKTOP + the package), which is the same power granted on purpose. Returns the category for the prompt, else undefined.
|
|
19
|
+
*/
|
|
20
|
+
export declare function nativeAutomationCategory(cmd: string): string | undefined;
|
|
21
|
+
/** The orient scripts the harness itself ships (CORTEX_ROOT/.cortex/orient, CORTEX_ROOT/docs/prompts/orient-scaffold.sh). */
|
|
22
|
+
export declare function isShippedOrientCommand(cmd: string, env?: NodeJS.ProcessEnv): boolean;
|
|
13
23
|
/**
|
|
14
24
|
* Whitelist Policy: Safe research/read operations that never need approval
|
|
15
25
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"DefaultPolicies.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/DefaultPolicies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;
|
|
1
|
+
{"version":3,"file":"DefaultPolicies.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/DefaultPolicies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAK5E;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOxE;AAED,6HAA6H;AAC7H,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAMjG;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,gBA0K7B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,EAAE,gBAiC5B,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,EAAE,gBAiH7B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,gBAAgB,EAI7C,CAAC"}
|
|
@@ -10,6 +10,36 @@
|
|
|
10
10
|
* @created 2025-11-13
|
|
11
11
|
*/
|
|
12
12
|
import { analyzeBashCommand } from './bashCommandView.js';
|
|
13
|
+
import * as path from 'node:path';
|
|
14
|
+
import { resolveDesktop } from '../../config/localDesktop.js';
|
|
15
|
+
/**
|
|
16
|
+
* 2026-11-13 (operator's M2 session 28a43865): with no desktop package installed, deepseek-flash answered "do you have desktop tools?"
|
|
17
|
+
* by screenshotting the real screen, posting a CoreGraphics input event and scripting Safari/Chrome — all through plain Bash, around every
|
|
18
|
+
* guard the desktop tool has (off by default, failsafe, stop latch, audit). Screen capture, synthetic input and app scripting through Bash
|
|
19
|
+
* therefore ALWAYS ask (blacklist tier: auto-approve does not cover it) unless the user enabled the desktop surface
|
|
20
|
+
* (NEXUS_DESKTOP + the package), which is the same power granted on purpose. Returns the category for the prompt, else undefined.
|
|
21
|
+
*/
|
|
22
|
+
export function nativeAutomationCategory(cmd) {
|
|
23
|
+
const c = String(cmd ?? '');
|
|
24
|
+
if (/\bscreencapture\b|\bimport\s+-window\b|\bxwd\b/.test(c))
|
|
25
|
+
return 'screen capture';
|
|
26
|
+
if (/\bCGEvent(Post|PostToPid|CreateMouseEvent|CreateKeyboardEvent|CreateScrollWheelEvent)\b|\bcliclick\b|\bx?dotool\b|\bydotool\b/.test(c))
|
|
27
|
+
return 'synthetic mouse/keyboard input';
|
|
28
|
+
if (/\bosascript\b/.test(c) && /System Events|\bkeystroke\b|\bkey code\b|\bclick\b|do JavaScript|execute javascript/i.test(c))
|
|
29
|
+
return 'app or UI scripting (AppleScript/JXA)';
|
|
30
|
+
if (/\bsafaridriver\b|\bshortcuts\s+run\b/.test(c))
|
|
31
|
+
return 'browser or Shortcuts automation';
|
|
32
|
+
return undefined;
|
|
33
|
+
}
|
|
34
|
+
/** The orient scripts the harness itself ships (CORTEX_ROOT/.cortex/orient, CORTEX_ROOT/docs/prompts/orient-scaffold.sh). */
|
|
35
|
+
export function isShippedOrientCommand(cmd, env = process.env) {
|
|
36
|
+
const root = (env.CORTEX_ROOT ?? '').trim();
|
|
37
|
+
if (!root)
|
|
38
|
+
return false;
|
|
39
|
+
const shipped = new Set([path.join(root, '.cortex', 'orient'), path.join(root, 'docs', 'prompts', 'orient-scaffold.sh')]);
|
|
40
|
+
const m = /^sh\s+(['"]?)([^'"\s;&|<>$`]+)\1(?:\s+2>&1)?(?:\s*\|\s*head(?:\s+-n)?(?:\s+-?\d+)?)?$/.exec(cmd.trim());
|
|
41
|
+
return !!m && shipped.has(path.normalize(m[2]));
|
|
42
|
+
}
|
|
13
43
|
/**
|
|
14
44
|
* Whitelist Policy: Safe research/read operations that never need approval
|
|
15
45
|
*
|
|
@@ -137,6 +167,12 @@ export const whitelistPolicy = {
|
|
|
137
167
|
return { allowed: true }; // A write — pass-through to graylist
|
|
138
168
|
}
|
|
139
169
|
const matchText = structure.view.trim();
|
|
170
|
+
// 2026-11-13 (operator's fuzzycortex run): the harness's OWN shipped orient script (the prompt tells the model to run it first) asked
|
|
171
|
+
// for Bash approval every session. Exactly `sh <shipped path>` (optionally `2>&1` and `| head [-n] N`) is whitelisted; a project's
|
|
172
|
+
// own ./.cortex/orient stays behind approval — that one is arbitrary project code.
|
|
173
|
+
if (isShippedOrientCommand(matchText)) {
|
|
174
|
+
return { allowed: true, tier: 'whitelist' };
|
|
175
|
+
}
|
|
140
176
|
// Check if command matches any safe command (with or without args)
|
|
141
177
|
const isSafeCommand = safeReadCommands.some((safe) => {
|
|
142
178
|
// Exact match (e.g., "ls" === "ls")
|
|
@@ -265,6 +301,17 @@ export const blacklistPolicy = {
|
|
|
265
301
|
const bl = analyzeBashCommand(cmd);
|
|
266
302
|
const scanText = bl.interpreterFed ? cmd : bl.view;
|
|
267
303
|
const isDangerous = dangerousPatterns.some((pattern) => scanText.includes(pattern));
|
|
304
|
+
// Native automation (see nativeAutomationCategory): scan the FULL command — a heredoc that writes a script and runs it in the same
|
|
305
|
+
// call is how the M2 session posted its CGEvent.
|
|
306
|
+
const native = nativeAutomationCategory(cmd);
|
|
307
|
+
if (native && !resolveDesktop().using) {
|
|
308
|
+
return {
|
|
309
|
+
allowed: false,
|
|
310
|
+
reason: `NATIVE AUTOMATION (${native}) acts on your real screen/apps outside the desktop tool's safety rails — always asks unless you enable the desktop surface (cortex desktop enable)`,
|
|
311
|
+
canApprove: true,
|
|
312
|
+
tier: 'blacklist',
|
|
313
|
+
};
|
|
314
|
+
}
|
|
268
315
|
if (isDangerous) {
|
|
269
316
|
const previewCmd = cmd.substring(0, 50) + (cmd.length > 50 ? '...' : '');
|
|
270
317
|
return {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"DefaultPolicies.js","sourceRoot":"","sources":["../../../src/middleware/permissions/DefaultPolicies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"DefaultPolicies.js","sourceRoot":"","sources":["../../../src/middleware/permissions/DefaultPolicies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC5B,IAAI,gDAAgD,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACtF,IAAI,+HAA+H,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,gCAAgC,CAAC;IACrL,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,sFAAsF,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,uCAAuC,CAAC;IAC9K,IAAI,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,iCAAiC,CAAC;IAC7F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG;IACtF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC1H,MAAM,CAAC,GAAG,uFAAuF,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACnH,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAqB;IAC/C,IAAI,EAAE,oCAAoC;IAC1C,QAAQ,EAAE,GAAG;IACb,OAAO,EAAE,IAAI;IAEb,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1B,wDAAwD;QACxD,MAAM,cAAc,GAAG;YACrB,MAAM;YACN,MAAM;YACN,MAAM;YACN,YAAY;YACZ,WAAW;YACX,UAAU;YACV,cAAc;YACd,yBAAyB;YACzB,kBAAkB;YAClB,wBAAwB;YACxB,0BAA0B;YAC1B,cAAc;YACd,aAAa;YACb,0BAA0B;YAC1B,2BAA2B;YAC3B,UAAU;YACV,aAAa;YACb,uEAAuE;YACvE,0DAA0D;YAC1D,mBAAmB;YACnB,kBAAkB;YAClB,mEAAmE;YACnE,aAAa;SACd,CAAC;QAEF,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,WAAW,EAAE,uDAAuD;aAC3E,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEtD,0CAA0C;YAC1C,MAAM,gBAAgB,GAAG;gBACvB,IAAI,EAAE,KAAK,EAAY,aAAa;gBACpC,KAAK,EAAkB,0BAA0B;gBACjD,QAAQ,EAAE,IAAI,EAAS,YAAY;gBACnC,MAAM,EAAiB,aAAa;gBACpC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAG,aAAa;gBACrD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAU,SAAS;gBACjD,MAAM,EAAE,QAAQ,EAAO,aAAa;gBACpC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAG,kBAAkB;gBAC/C,KAAK,EAAE,UAAU,EAAM,cAAc;gBACrC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAG,cAAc;gBAC7C,OAAO,EAAE,MAAM,EAAQ,cAAc;gBACrC,IAAI,EAAE,IAAI,EAAa,aAAa;gBACpC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAI,eAAe;gBACtC,SAAS,EAAc,kBAAkB;gBACzC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAG,kBAAkB;gBACzC,MAAM,EAAE,KAAK,EAAU,kBAAkB;gBACzC,MAAM,EAAE,MAAM,EAAS,YAAY;gBACnC,MAAM,EAAiB,iBAAiB;gBAExC,gDAAgD;gBAChD,YAAY,EAAW,oDAAoD;gBAC3E,SAAS,EAAc,gCAAgC;gBACvD,UAAU,EAAa,2CAA2C;gBAClE,UAAU,EAAa,wBAAwB;gBAC/C,YAAY,EAAW,gBAAgB;gBACvC,YAAY,EAAW,eAAe;gBACtC,SAAS,EAAc,YAAY;gBACnC,YAAY,EAAW,iBAAiB;gBACxC,WAAW,EAAY,yBAAyB;gBAChD,cAAc,EAAS,mBAAmB;gBAC1C,cAAc,EAAS,qBAAqB;gBAC5C,aAAa,EAAU,oBAAoB;gBAC3C,UAAU,EAAa,oBAAoB;gBAC3C,mBAAmB,EAAI,cAAc;gBACrC,kBAAkB,EAAK,mBAAmB;gBAC1C,eAAe,EAAQ,kBAAkB;gBACzC,kBAAkB,EAAK,qBAAqB;gBAC5C,kBAAkB,EAAK,eAAe;gBACtC,cAAc,EAAS,eAAe;gBACtC,cAAc,EAAS,oBAAoB;gBAC3C,mBAAmB,EAAI,gBAAgB;gBACvC,mBAAmB,EAAI,iBAAiB;gBACxC,gBAAgB,EAAO,cAAc;gBACrC,kBAAkB,EAAK,kBAAkB;gBACzC,gBAAgB,EAAO,mBAAmB;gBAC1C,eAAe,EAAQ,yBAAyB;gBAChD,qBAAqB,EAAE,gBAAgB;gBACvC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAc,eAAe;gBACjE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAO,8BAA8B;gBAChF,cAAc,EAAE,mBAAmB,EAAe,sBAAsB;gBACxE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAG,eAAe;gBACvE,SAAS,EAAE,cAAc,EAAG,oDAAoD;gBAChF,KAAK,EAAE,cAAc,EAAO,+BAA+B;gBAC3D,QAAQ,EAAE,UAAU,EAAQ,kCAAkC;gBAC9D,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAG,eAAe;gBAC3C,SAAS,EAAc,oDAAoD;gBAC3E,IAAI,EAAE,IAAI,EAAa,uBAAuB;gBAC9C,KAAK,EAAE,KAAK,EAAW,8CAA8C;gBACrE,SAAS,EAAE,aAAa,EAAG,qBAAqB;gBAChD,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAG,kCAAkC;gBAC5E,SAAS,EAAc,kBAAkB;gBACzC,MAAM,EAAiB,iBAAiB;gBACxC,IAAI,CAAC,0BAA0B;aAChC,CAAC;YAEF,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,kEAAkE;YAClE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,yEAAyE;YACzE,iEAAiE;YACjE,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,SAAS,CAAC,oBAAoB,EAAE,CAAC;gBACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,qCAAqC;YACjE,CAAC;YACD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAExC,sIAAsI;YACtI,mIAAmI;YACnI,mFAAmF;YACnF,IAAI,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAC9C,CAAC;YAED,mEAAmE;YACnE,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;gBACnD,oCAAoC;gBACpC,IAAI,SAAS,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;gBAEpC,4DAA4D;gBAC5D,2EAA2E;gBAC3E,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAElD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,0EAA0E;YAC1E,mEAAmE;YACnE,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/E,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAY,EAAE,EAAE;gBAC1D,sEAAsE;gBACtE,+BAA+B;gBAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjE,IAAI,CAAC,OAAO;oBAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;gBACnD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;oBACpC,4CAA4C;oBAC5C,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;gBAC5D,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,aAAa,IAAI,eAAe,EAAE,CAAC;gBACrC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,WAAW,EAAE,uDAAuD;iBAC3E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,4CAA4C;IACxE,CAAC;CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAqB;IAC9C,IAAI,EAAE,2BAA2B;IACjC,QAAQ,EAAE,EAAE;IACZ,OAAO,EAAE,IAAI;IAEb,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1B,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QAExD,6BAA6B;QAC7B,IAAI,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,8BAA8B;gBACzD,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,UAAU,EAAE,uBAAuB;aAC1C,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,6DAA6D;QAC7D,2CAA2C;QAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,wDAAwD;gBAChE,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,UAAU;aACjB,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,eAAe;IAC3C,CAAC;CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAqB;IAC/C,IAAI,EAAE,gCAAgC;IACtC,QAAQ,EAAE,IAAI,EAAE,mCAAmC;IACnD,OAAO,EAAE,IAAI;IAEb,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1B,0BAA0B;QAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC;YAC7C,MAAM,iBAAiB,GAAG;gBACxB,QAAQ;gBACR,QAAQ;gBACR,QAAQ;gBACR,MAAM;gBACN,aAAa,EAAE,YAAY;gBAC3B,WAAW;gBACX,cAAc;gBACd,UAAU;gBACV,MAAM;gBACN,MAAM;gBACN,OAAO;gBACP,uBAAuB;gBACvB,gBAAgB;gBAChB,aAAa;gBACb,aAAa;gBACb,aAAa;gBACb,WAAW;gBACX,WAAW;gBACX,UAAU;gBACV,QAAQ;gBACR,UAAU;gBACV,OAAO;gBACP,SAAS;gBACT,UAAU;gBACV,SAAS;aACV,CAAC;YAEF,qEAAqE;YACrE,yEAAyE;YACzE,kEAAkE;YAClE,8DAA8D;YAC9D,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YACnD,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAEpF,mIAAmI;YACnI,iDAAiD;YACjD,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,CAAC;gBACtC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,sBAAsB,MAAM,qJAAqJ;oBACzL,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,WAAW;iBAClB,CAAC;YACJ,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,cAAc,UAAU,6BAA6B;oBAC7D,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,WAAW,EAAE,2BAA2B;iBAC/C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;YAExG,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAE3E,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,iCAAiC,QAAQ,EAAE;oBACnD,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,WAAW;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,iEAAiE;QACjE,eAAe;QACf,yFAAyF;QACzF,iFAAiF;QACjF,uDAAuD;QACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC;YAE7C,2FAA2F;YAC3F,sEAAsE;YACtE,gFAAgF;YAChF,0FAA0F;YAC1F,MAAM,mBAAmB,GAAG,kHAAkH,CAAC;YAE/I,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,gDAAgD;oBACxD,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,WAAW;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,eAAe;IAC3C,CAAC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuB;IACjD,eAAe,EAAE,gCAAgC;IACjD,eAAe,EAAE,eAAe;IAChC,cAAc,EAAE,6BAA6B;CAC9C,CAAC"}
|
|
@@ -462,7 +462,7 @@ BEST PRACTICES:
|
|
|
462
462
|
description: `Search the web for current information. Use when you need facts, documentation, API references, or recent events beyond your training data.
|
|
463
463
|
|
|
464
464
|
WHEN TO USE: verifying claims, finding library docs, checking current versions, looking up error messages, researching APIs or services.
|
|
465
|
-
WHEN NOT TO USE: if the answer is in the codebase (use Grep/Read), or if you need to interact with the page (use Browse).
|
|
465
|
+
WHEN NOT TO USE: if the answer is in the codebase (use Grep/Read), or if you need to interact with the page (use the browser tools: Browse, or nexus-browser__browse when that server is connected; SearchTools finds them).
|
|
466
466
|
TASK INTEGRITY: research documentation and concepts — never search for a task's published solution, reference implementation, or expected answer. Your deliverable must be produced by work you execute in this workspace; a retrieved or recited solution is a failed task.
|
|
467
467
|
|
|
468
468
|
Results are text snippets from search engines. May not include full page content — use WebFetch to read a specific URL from the results.`,
|
|
@@ -509,7 +509,7 @@ Results are text snippets from search engines. May not include full page content
|
|
|
509
509
|
description: `Fetch and read content from a specific URL. Returns the page's text content (HTML stripped).
|
|
510
510
|
|
|
511
511
|
WHEN TO USE: reading documentation pages, API references, blog posts, changelogs, or any URL you already have.
|
|
512
|
-
WHEN NOT TO USE: if the page requires JavaScript rendering, login, or interaction (use Browse
|
|
512
|
+
WHEN NOT TO USE: if the page requires JavaScript rendering, login, or interaction (use the browser tools instead: Browse, or nexus-browser__browse when that server is connected; SearchTools finds them). If you need to search first and don't have a URL (use WebSearch).
|
|
513
513
|
TASK INTEGRITY: fetch documentation, never a task's published solution or reference implementation — deliverables must derive from work executed in this workspace.
|
|
514
514
|
|
|
515
515
|
The 'prompt' parameter guides what to extract — use it to focus on specific sections rather than getting the entire page.`,
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@nexus-cortex/core",
|
|
3
|
-
"version": "4.134.
|
|
3
|
+
"version": "4.134.4",
|
|
4
4
|
"description": "Core orchestration library implementing Claude CLI architecture patterns",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.js",
|
|
@@ -49,8 +49,8 @@
|
|
|
49
49
|
"@gradio/client": "^2.3.1",
|
|
50
50
|
"@growthbook/growthbook": "1.8.0",
|
|
51
51
|
"@modelcontextprotocol/sdk": "^1.20.2",
|
|
52
|
-
"@nexus-cortex/executors": "4.134.
|
|
53
|
-
"@nexus-cortex/types": "4.134.
|
|
52
|
+
"@nexus-cortex/executors": "4.134.4",
|
|
53
|
+
"@nexus-cortex/types": "4.134.4",
|
|
54
54
|
"@types/uuid": "^10.0.0",
|
|
55
55
|
"ajv": "^8.12.0",
|
|
56
56
|
"chokidar": "^3.6.0",
|