nexus-agents 2.145.1 → 2.147.0

package/dist/{chunk-AREFLH3S.js → chunk-Y4NDNQYU.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-J2KMYVWA.js";
+} from "./chunk-RII4VXHO.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2132,4 +2132,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-AREFLH3S.js.map
+//# sourceMappingURL=chunk-Y4NDNQYU.js.map

package/dist/cli.js

@@ -22,7 +22,7 @@ import "./chunk-UUEK5FP6.js";
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-MFTWFPXS.js";
+} from "./chunk-C7PXTRAR.js";
 import "./chunk-LEUP55YB.js";
 import {
   AuthHandler,
@@ -142,7 +142,7 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-IIGRVRKD.js";
+} from "./chunk-VFA66KF5.js";
 import "./chunk-RPTEVESB.js";
 import "./chunk-JQZ5R3EM.js";
 import "./chunk-HFOQKCD2.js";
@@ -170,7 +170,7 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-SDJLXKZZ.js";
+} from "./chunk-LREXQ6DP.js";
 import "./chunk-SOCIRTAC.js";
 import {
   shutdownExpertBridge
@@ -183,7 +183,7 @@ import {
   VoteThresholdSchema,
   executeVoting,
   registerConsensusVoteTool
-} from "./chunk-QKWS3REM.js";
+} from "./chunk-45QUEZNS.js";
 import {
   loadUsageEvents,
   rollupByModel
@@ -196,7 +196,7 @@ import {
   createFullGitHubProvider,
   evaluatePolicy,
   parsePRUrl
-} from "./chunk-ZRRL3YB6.js";
+} from "./chunk-I5T7GUM7.js";
 import "./chunk-SUGO2OSD.js";
 import {
   ReputationCache,
@@ -215,10 +215,11 @@ import {
   registerImprovementReviewTool,
   runImprovementReview,
   scanForSecrets
-} from "./chunk-AREFLH3S.js";
+} from "./chunk-Y4NDNQYU.js";
 import {
   createDefaultPolicyFirewall
-} from "./chunk-J2KMYVWA.js";
+} from "./chunk-RII4VXHO.js";
+import "./chunk-RCQLUJY3.js";
 import {
   PaperStatusSchema,
   createResearchIssue,
@@ -3098,7 +3099,7 @@ var COMMAND_CATALOG = [
   },
   {
     command: "remediation-review",
-    description: "Soundness-review audit-mode selections (#3765): list pending \xB7 mark --evaluator --sound|--unsound \xB7 sign-off --owner.",
+    description: "Soundness-review audit-mode selections (#3765): list pending \xB7 mark --evaluator --sound|--unsound \xB7 sign-off --owner \xB7 readiness (enforce-readiness verdict + harmful-rate).",
     audience: "maintainer"
   },
   // ── Maintainer (hidden by default) ───────────────────────────────────────
@@ -17829,7 +17830,7 @@ function startImprovementReviewScheduler(options) {
   let running = false;
   const runOnce = async () => {
     try {
-      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-K7YYYZCJ.js");
+      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-WMDMS32T.js");
       const input = ImprovementReviewInputSchema2.parse({ fileIssues });
       const result = await runImprovementReview2(input, { logger: logger19 });
       logger19.info("Scheduled improvement_review complete", {
@@ -18144,7 +18145,10 @@ function registerExecuteExpert(ctx, shared) {
     logger: ctx.logger,
     rateLimiter: ctx.rateLimiterFactory.getForTool("execute_expert"),
     cliCache: getSharedCliCache(),
-    ...ctx.securityConfig !== void 0 && { security: ctx.securityConfig }
+    ...ctx.securityConfig !== void 0 && { security: ctx.securityConfig },
+    // #4097: thread the durable logger so ClawGuard AUDIT-mode violations during
+    // the expert's nested tool calls are persisted to the shared hash chain.
+    ...ctx.auditLogger !== void 0 && { auditLogger: ctx.auditLogger }
   });
 }
 function buildWorkflowEngine(ctx) {
@@ -18223,7 +18227,10 @@ function registerOrchestrateToolSafe(ctx) {
       rateLimiter: ctx.rateLimiterFactory.getForTool("orchestrate"),
       security: ctx.securityConfig,
       // Wire model adapter for fallback orchestration path (Issue #827)
-      modelAdapter: ctx.modelAdapter
+      modelAdapter: ctx.modelAdapter,
+      // #4097: thread the durable logger so ClawGuard AUDIT-mode violations
+      // during nested tool calls are persisted to the shared hash chain.
+      ...ctx.auditLogger !== void 0 && { auditLogger: ctx.auditLogger }
     });
   } catch (error) {
     const message = getErrorMessage(error);
@@ -24903,6 +24910,39 @@ function runList(format) {
   process.stdout.write(`${lines.join("\n")}
 `);
 }
+function harmfulRate(ev) {
+  return ev.judgedSelections === 0 ? 0 : (ev.judgedSelections - ev.judgedSound) / ev.judgedSelections;
+}
+function formatReadiness(verdict, evidence, harmful) {
+  const maxPct = Math.round((1 - DEFAULT_ENFORCE_READINESS_CONFIG.minSoundnessRate) * 100);
+  const lines = [
+    `Enforcement readiness: ${verdict.ready ? "READY" : "NOT READY"}`,
+    `harmful-rate: ${String(Math.round(harmful * 100))}% of ${String(evidence.judgedSelections)} judged sound-reviews (threshold \u2264 ${String(maxPct)}%)`,
+    "Criteria:"
+  ];
+  for (const c of verdict.criteria) {
+    lines.push(`  [${c.met ? "PASS" : "FAIL"}] ${c.name}  \u2014  ${c.detail}`);
+  }
+  if (verdict.blockers.length > 0) lines.push(`Blockers: ${verdict.blockers.join(", ")}`);
+  return lines.join("\n");
+}
+function runReadiness(format) {
+  const evidence = buildEnforceReadinessEvidence(
+    readRemediationSoakSummary(),
+    readRemediationReviewSummary()
+  );
+  const verdict = evaluateEnforceReadiness(evidence);
+  const harmful = harmfulRate(evidence);
+  if (format === "json") {
+    process.stdout.write(
+      `${JSON.stringify({ ready: verdict.ready, harmfulRate: harmful, evidence, criteria: verdict.criteria, blockers: verdict.blockers }, null, 2)}
+`
+    );
+    return;
+  }
+  process.stdout.write(`${formatReadiness(verdict, evidence, harmful)}
+`);
+}
 function resolveSound(options) {
   const sound = options.sound === true;
   const unsound = options.unsound === true;
@@ -24991,9 +25031,12 @@ async function handleRemediationReviewCommand(args) {
     case "sign-off":
       runSignOff(args);
       break;
+    case "readiness":
+      runReadiness(args.options.format);
+      break;
     default:
       throw new Error(
-        `remediation-review: unknown subcommand '${sub}' (expected list | mark | sign-off)`
+        `remediation-review: unknown subcommand '${sub}' (expected list | mark | sign-off | readiness)`
       );
   }
   await Promise.resolve();