nexus-agents 2.156.0 → 2.157.0

package/dist/{chunk-GAZMJBCK.js → chunk-3SE57WOV.js}

@@ -18,13 +18,14 @@ import {
   DEFAULT_TASK_TTL_MS,
   DEFAULT_TOOL_RATE_LIMITS,
   clampTaskTtl
-} from "./chunk-IDOAR55M.js";
+} from "./chunk-OXYGRB4C.js";
 import {
   executeExpert
 } from "./chunk-BGAK4N74.js";
 import {
   JobStatusSchema,
   abortJob,
+  checkSimulationAllowed,
   collectRealVotes,
   defaultBusyEnvelope,
   defaultCollisionEnvelope,
@@ -38,10 +39,10 @@ import {
   resolveIdempotency,
   runAsJob,
   runConsensusForGoal,
+  simulationDeniedResult,
   toJobSummary,
-  warnIfSimulatedOutsideTests,
   writeJobCancelled
-} from "./chunk-BEJWHTRX.js";
+} from "./chunk-TT4ZITRU.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
@@ -43466,7 +43467,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-6REGRDS6.js");
+        const { executeVoting } = await import("./consensus-vote-7EBYYBCQ.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -44804,6 +44805,10 @@ function makePrReviewHandler(gatewayAdapters) {
       });
     }
     const input = parsed.data;
+    if (input.simulate) {
+      const simCheck = checkSimulationAllowed("pr_review", ctx.logger);
+      if (!simCheck.allowed) return simulationDeniedResult(simCheck.reason);
+    }
     try {
       if (input.dispatch === "async") {
         return runAsJob({
@@ -47164,8 +47169,11 @@ async function runDevPipelineForGoal(goal, trustTier) {
   const stages = await createStages(input);
   return runDevPipeline(goal, stages, trustTier !== void 0 ? { trustTier } : void 0);
 }
-function buildStructuredOutput(result) {
+function buildStructuredOutput(result, simulated) {
   return {
+    // #4170: stamped only on an explicit NEXUS_ALLOW_SIMULATE=1 opt-in run so
+    // a random demo panel can never pass as a real decision.
+    ...simulated ? { simulated: true } : {},
     completed: result.completed,
     securityPassed: result.securityPassed,
     voteIterations: result.voteIterations,
@@ -47193,10 +47201,10 @@ function buildPipelineOptions(input, trustTier, auditLogger) {
     ...auditLogger !== void 0 ? { auditLogger } : {}
   };
 }
-async function executeDevPipelineBody(taskText, stages, pipelineOptions) {
+async function executeDevPipelineBody(taskText, stages, pipelineOptions, simulated) {
   const result = await runDevPipeline(taskText, stages, pipelineOptions);
   flushPipelineMemory();
-  return toolSuccessStructured(buildStructuredOutput(result));
+  return toolSuccessStructured(buildStructuredOutput(result, simulated));
 }
 async function runDevPipelineHandler(args, logger58, trustTier, auditLogger) {
   const parsed = DevPipelineInputSchema.safeParse(args);
@@ -47207,8 +47215,11 @@ async function runDevPipelineHandler(args, logger58, trustTier, auditLogger) {
     });
   }
   const input = parsed.data;
+  let simulated = false;
   if (input.simulateVotes) {
-    warnIfSimulatedOutsideTests("run_dev_pipeline", logger58);
+    const simCheck = checkSimulationAllowed("run_dev_pipeline", logger58);
+    if (!simCheck.allowed) return simulationDeniedResult(simCheck.reason);
+    simulated = simCheck.optedIn;
   }
   try {
     const taskText = await resolveTaskInput(input);
@@ -47216,10 +47227,11 @@ async function runDevPipelineHandler(args, logger58, trustTier, auditLogger) {
     const pipelineOptions = buildPipelineOptions(input, trustTier, auditLogger);
     const hasOptions = Object.keys(pipelineOptions).length > 0;
     const resolvedOptions = hasOptions ? pipelineOptions : void 0;
+    const run = () => executeDevPipelineBody(taskText, stages, resolvedOptions, simulated);
     if (input.dispatch === "async" && !input.dryRun) {
-      return dispatchAsyncDevPipeline(input, taskText, stages, resolvedOptions, logger58);
+      return dispatchAsyncDevPipeline(input, run, logger58);
     }
-    return await executeDevPipelineBody(taskText, stages, resolvedOptions);
+    return await run();
   } catch (error) {
     return toolStructuredError({
       errorCategory: "internal",
@@ -47227,8 +47239,7 @@ async function runDevPipelineHandler(args, logger58, trustTier, auditLogger) {
     });
   }
 }
-function dispatchAsyncDevPipeline(input, taskText, stages, pipelineOptions, logger58) {
-  const run = () => executeDevPipelineBody(taskText, stages, pipelineOptions);
+function dispatchAsyncDevPipeline(input, run, logger58) {
   if (input.sessionId === void 0) {
     return runAsJob({
       toolName: "run_dev_pipeline",
@@ -47324,7 +47335,7 @@ var PipelineInputSchema = z104.object({
   /** TESTS ONLY — random output, must not be used for real decisions. (#2319) */
   simulateVotes: z104.boolean().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)")
 });
-function buildOutput2(result) {
+function buildOutput2(result, simulated) {
   return {
     success: result.success,
     templateId: result.templateId,
@@ -47333,6 +47344,9 @@ function buildOutput2(result) {
     stepsExecuted: result.stepsExecuted,
     durationMs: result.durationMs,
     error: result.error ?? null,
+    // #4170: stamped only on an explicit NEXUS_ALLOW_SIMULATE=1 opt-in run so
+    // a random demo panel can never pass as a real decision.
+    ...simulated ? { simulated: true } : {},
     // Rate limit awareness (#1802)
     rateLimitHint: result.error?.toLowerCase().includes("rate limit") === true ? "Consider using quickMode or increasing delay between pipeline runs" : void 0
   };
@@ -47400,13 +47414,13 @@ async function runPipelineForGoal(goal, logger58 = createLogger({ tool: "run_pip
   const stages = selectStageRegistry(void 0, goal, agentStages);
   return runAdaptiveOrchestrator(goal, { stages });
 }
-async function executePipelineBody(task, stages, templateId, dryRun) {
+async function executePipelineBody(task, stages, templateId, dryRun, simulated) {
   const result = await runAdaptiveOrchestrator(task, {
     stages,
     templateId,
     dryRun
   });
-  return toolSuccessStructured(buildOutput2(result));
+  return toolSuccessStructured(buildOutput2(result, simulated));
 }
 async function runPipelineHandler(args, logger58) {
   const parsed = PipelineInputSchema.safeParse(args);
@@ -47417,8 +47431,11 @@ async function runPipelineHandler(args, logger58) {
     });
   }
   const input = parsed.data;
+  let simulated = false;
   if (input.simulateVotes) {
-    warnIfSimulatedOutsideTests("run_pipeline", logger58);
+    const simCheck = checkSimulationAllowed("run_pipeline", logger58);
+    if (!simCheck.allowed) return simulationDeniedResult(simCheck.reason);
+    simulated = simCheck.optedIn;
   }
   try {
     const task = await resolveTask(input.task, input.specFile);
@@ -47434,11 +47451,11 @@ async function runPipelineHandler(args, logger58) {
         toolName: "run_pipeline",
         input,
         freshJobId: () => `rp-${randomUUID16()}`,
-        run: () => executePipelineBody(task, stages, input.template, input.dryRun),
+        run: () => executePipelineBody(task, stages, input.template, input.dryRun, simulated),
         logger: logger58
       });
     }
-    return await executePipelineBody(task, stages, input.template, input.dryRun);
+    return await executePipelineBody(task, stages, input.template, input.dryRun, simulated);
   } catch (error) {
     return toolStructuredError({
       errorCategory: "internal",
@@ -48082,6 +48099,10 @@ async function tradeoffPanelHandler(args, ctx) {
     });
   }
   const input = parsed.data;
+  if (input.simulate) {
+    const simCheck = checkSimulationAllowed("supply_chain_tradeoff_panel", ctx.logger);
+    if (!simCheck.allowed) return simulationDeniedResult(simCheck.reason);
+  }
   try {
     if (input.dispatch === "async") {
       return runAsJob({
@@ -51788,4 +51809,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-GAZMJBCK.js.map
+//# sourceMappingURL=chunk-3SE57WOV.js.map