nexus-agents 2.170.0 → 2.171.0

package/dist/{init-opencode-LDI5E5LW.js → init-opencode-Y7WPFCY7.js}

@@ -1,12 +1,12 @@
 import {
   discoverModels,
   readOpencodeGateway
-} from "./chunk-OIT75IRK.js";
-import "./chunk-NXSY4G4Y.js";
-import "./chunk-JOYOOEPJ.js";
+} from "./chunk-DLVDFJXU.js";
+import "./chunk-7AJWIOMT.js";
+import "./chunk-4KVAHGMB.js";
 import {
   createLogger
-} from "./chunk-GVTXP6F6.js";
+} from "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -175,4 +175,4 @@ export {
   runInitOpencode,
   runOpencodeValidate
 };
-//# sourceMappingURL=init-opencode-LDI5E5LW.js.map
+//# sourceMappingURL=init-opencode-Y7WPFCY7.js.map

package/dist/{issue-triage-WWQEY7PL.js → issue-triage-4P3TDIJQ.js}

@@ -2,11 +2,11 @@ import {
   IssueTriage,
   createIssueTriage,
   formatTriageComment
-} from "./chunk-WKW5SEP7.js";
-import "./chunk-C6IAXFNC.js";
-import "./chunk-DEE2UTYV.js";
-import "./chunk-OYBAKU7N.js";
-import "./chunk-GVTXP6F6.js";
+} from "./chunk-RQGORCFM.js";
+import "./chunk-RAK6PTNM.js";
+import "./chunk-CEDSYAAI.js";
+import "./chunk-BTH745HU.js";
+import "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -15,4 +15,4 @@ export {
   createIssueTriage,
   formatTriageComment
 };
-//# sourceMappingURL=issue-triage-WWQEY7PL.js.map
+//# sourceMappingURL=issue-triage-4P3TDIJQ.js.map

package/dist/{pr-reviewer-helpers-HDP24LGZ.js → pr-reviewer-helpers-4JX2LEVZ.js}

@@ -17,10 +17,10 @@ import {
   parseFindings,
   parseSeverity,
   sumFindings
-} from "./chunk-OFVUBY6Z.js";
+} from "./chunk-AJIDYCQG.js";
 import "./chunk-WAYGXUSM.js";
-import "./chunk-DEE2UTYV.js";
-import "./chunk-GVTXP6F6.js";
+import "./chunk-CEDSYAAI.js";
+import "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -44,4 +44,4 @@ export {
   parseSeverity,
   sumFindings
 };
-//# sourceMappingURL=pr-reviewer-helpers-HDP24LGZ.js.map
+//# sourceMappingURL=pr-reviewer-helpers-4JX2LEVZ.js.map

package/dist/{registry-command-PZY7HWKO.js → registry-command-CTYTYRXF.js}

@@ -7,7 +7,7 @@ import {
   loadGeneratedRegistryEntries,
   loadUserManifestOverlay,
   reloadDefaultRegistry
-} from "./chunk-GVTXP6F6.js";
+} from "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import {
   nexusDataPath
@@ -249,4 +249,4 @@ export {
   isValidRegistrySubcommand,
   registryCommand
 };
-//# sourceMappingURL=registry-command-PZY7HWKO.js.map
+//# sourceMappingURL=registry-command-CTYTYRXF.js.map

package/dist/{repo-security-plan-IYKDY5PW.js → repo-security-plan-4CXBXLAY.js}

@@ -3,9 +3,9 @@ import {
   buildPlanFromAnalysis,
   generateSecurityPlan,
   resolveScannerData
-} from "./chunk-JYDXHV4L.js";
+} from "./chunk-B4XT3B2E.js";
 import "./chunk-HFOQKCD2.js";
-import "./chunk-GVTXP6F6.js";
+import "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -15,4 +15,4 @@ export {
   generateSecurityPlan,
   resolveScannerData
 };
-//# sourceMappingURL=repo-security-plan-IYKDY5PW.js.map
+//# sourceMappingURL=repo-security-plan-4CXBXLAY.js.map

package/dist/{research-helpers-synthesize-XSOFXRFK.js → research-helpers-synthesize-23OXMV47.js}

@@ -1,10 +1,10 @@
 import {
   AttributedInsightSchema,
   synthesizeResearch
-} from "./chunk-6TN2Z2AQ.js";
-import "./chunk-RZJQZ5P3.js";
+} from "./chunk-DYFF72HX.js";
+import "./chunk-ZSWXEDI6.js";
 import "./chunk-NUBSJGQZ.js";
-import "./chunk-GVTXP6F6.js";
+import "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -12,4 +12,4 @@ export {
   AttributedInsightSchema,
   synthesizeResearch
 };
-//# sourceMappingURL=research-helpers-synthesize-XSOFXRFK.js.map
+//# sourceMappingURL=research-helpers-synthesize-23OXMV47.js.map

package/dist/{routing-memory-JTNH2BXS.js → routing-memory-AWCOIW27.js}

@@ -2,7 +2,7 @@ import {
   DEFAULT_ROUTING_MEMORY_CONFIG,
   RoutingMemory,
   createRoutingMemory
-} from "./chunk-GVTXP6F6.js";
+} from "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -11,4 +11,4 @@ export {
   RoutingMemory,
   createRoutingMemory
 };
-//# sourceMappingURL=routing-memory-JTNH2BXS.js.map
+//# sourceMappingURL=routing-memory-AWCOIW27.js.map

package/dist/security/ast-rules/command-exec-go.yml

@@ -0,0 +1,15 @@
+id: command-exec-go
+language: go
+severity: warning
+message: External command execution — verify args are not attacker-controlled
+rule:
+  # A bare selector-expression pattern (`exec.Command($$$ARGS)`) does not
+  # reliably match against the dynamically-registered Go grammar (verified
+  # against @ast-grep/napi@0.44.1 + @ast-grep/lang-go@0.0.6): the pattern
+  # parser needs a valid enclosing Go context to resolve the `call_expression`
+  # selector for a dotted callee. The explicit context+selector form matches
+  # correctly and still excludes local/aliased near-misses (a bare `Command(x)`
+  # call, or a `myexec.Command(...)` call through a differently-named object).
+  pattern:
+    context: 'func f() { exec.Command($$$ARGS) }'
+    selector: call_expression

package/dist/security/ast-rules/dangerous-eval-python.yml

@@ -0,0 +1,8 @@
+id: dangerous-eval-python
+language: python
+severity: error
+message: Dynamic code execution via eval/exec
+rule:
+  any:
+    - pattern: eval($CODE)
+    - pattern: exec($CODE)

package/dist/security/ast-rules/shell-injection-python.yml

@@ -0,0 +1,13 @@
+id: shell-injection-python
+language: python
+severity: error
+message: Possible shell injection — shell=True / os.system with dynamic input
+rule:
+  any:
+    - pattern: os.system($CMD)
+    # ast-grep's multi-meta-var cannot match a trailing empty `$$$B` right
+    # after another matched arg (a napi/dynamic-lang quirk, verified against
+    # @ast-grep/napi@0.44.1 + @ast-grep/lang-python@0.0.6) — `shell=True` as
+    # the LAST arg needs its own arm alongside the "more args follow" arm.
+    - pattern: subprocess.$FN($$$A, shell=True, $$$B)
+    - pattern: subprocess.$FN($$$A, shell=True)

package/dist/{session-memory-RJZ447UX.js → session-memory-P53QXKGV.js}

@@ -6,8 +6,8 @@ import {
   SessionMemory,
   SessionMemoryError,
   createSessionMemory
-} from "./chunk-PIODB4SW.js";
-import "./chunk-GVTXP6F6.js";
+} from "./chunk-O4J34GZT.js";
+import "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -20,4 +20,4 @@ export {
   SessionMemoryError,
   createSessionMemory
 };
-//# sourceMappingURL=session-memory-RJZ447UX.js.map
+//# sourceMappingURL=session-memory-P53QXKGV.js.map

package/dist/{setup-command-35MCRS33.js → setup-command-IRW76CNQ.js}

@@ -8,22 +8,22 @@ import {
   runWizard,
   setupCommand,
   setupCommandAsync
-} from "./chunk-P4PLZZCR.js";
-import "./chunk-HTM32H2E.js";
-import "./chunk-BGV3IF3G.js";
-import "./chunk-OIT75IRK.js";
-import "./chunk-NXSY4G4Y.js";
+} from "./chunk-PP5QL4EJ.js";
+import "./chunk-S66XOAMZ.js";
+import "./chunk-E53VLN73.js";
+import "./chunk-DLVDFJXU.js";
+import "./chunk-7AJWIOMT.js";
 import "./chunk-NUBSJGQZ.js";
 import "./chunk-6T3EPABN.js";
 import "./chunk-ZM4O442V.js";
-import "./chunk-SCHD7NZD.js";
-import "./chunk-JOYOOEPJ.js";
-import "./chunk-JLG5AUZB.js";
-import "./chunk-Z4AWOPXA.js";
-import "./chunk-UXXNNT5D.js";
+import "./chunk-5UDKUPZB.js";
+import "./chunk-4KVAHGMB.js";
+import "./chunk-QFS5VOB6.js";
+import "./chunk-76Q63KJM.js";
+import "./chunk-SUWN54CK.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-DCXCVEZP.js";
-import "./chunk-GVTXP6F6.js";
+import "./chunk-IC3NZHPT.js";
+import "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -38,4 +38,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=setup-command-35MCRS33.js.map
+//# sourceMappingURL=setup-command-IRW76CNQ.js.map

package/dist/{setup-config-JV23ZYPO.js → setup-config-B7WLUMUU.js}

@@ -1,11 +1,11 @@
 import {
   runConfigInitSync
-} from "./chunk-HTM32H2E.js";
-import "./chunk-GVTXP6F6.js";
+} from "./chunk-S66XOAMZ.js";
+import "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
 export {
   runConfigInitSync
 };
-//# sourceMappingURL=setup-config-JV23ZYPO.js.map
+//# sourceMappingURL=setup-config-B7WLUMUU.js.map

package/dist/{setup-custom-api-LMA445OB.js → setup-custom-api-B6QGKSEY.js}

@@ -3,11 +3,11 @@ import {
   CUSTOM_API_BASE_URL_ENV,
   CUSTOM_API_DEFAULT_MODEL,
   validateCustomApiBaseUrl
-} from "./chunk-JLG5AUZB.js";
+} from "./chunk-QFS5VOB6.js";
 import {
   err,
   ok
-} from "./chunk-GVTXP6F6.js";
+} from "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -105,4 +105,4 @@ function buildShellFragment(params) {
 export {
   configureCustomApi
 };
-//# sourceMappingURL=setup-custom-api-LMA445OB.js.map
+//# sourceMappingURL=setup-custom-api-B6QGKSEY.js.map

package/dist/{tool-memory-K6EYH3FQ.js → tool-memory-QUFVINHN.js}

@@ -3,13 +3,13 @@ import {
   getToolMemory,
   reinitializeMemoryBackends,
   shutdownToolMemory
-} from "./chunk-MG4JBADQ.js";
+} from "./chunk-LFKCJQ7G.js";
 import "./chunk-6T3EPABN.js";
-import "./chunk-PIODB4SW.js";
+import "./chunk-O4J34GZT.js";
 import "./chunk-PINS44XA.js";
 import "./chunk-KSQSWEFH.js";
-import "./chunk-DCXCVEZP.js";
-import "./chunk-GVTXP6F6.js";
+import "./chunk-IC3NZHPT.js";
+import "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -19,4 +19,4 @@ export {
   reinitializeMemoryBackends,
   shutdownToolMemory
 };
-//# sourceMappingURL=tool-memory-K6EYH3FQ.js.map
+//# sourceMappingURL=tool-memory-QUFVINHN.js.map

package/dist/{unified-registry-MJA6IBDD.js → unified-registry-4NOWT2MU.js}

@@ -4,15 +4,15 @@ import {
   getGlobalRegistry,
   resetGlobalRegistry,
   withDefaultOnRetirement
-} from "./chunk-RJDJMOX6.js";
-import "./chunk-SCHD7NZD.js";
-import "./chunk-JOYOOEPJ.js";
-import "./chunk-JLG5AUZB.js";
-import "./chunk-Z4AWOPXA.js";
-import "./chunk-UXXNNT5D.js";
+} from "./chunk-Z5GJ4FXW.js";
+import "./chunk-5UDKUPZB.js";
+import "./chunk-4KVAHGMB.js";
+import "./chunk-QFS5VOB6.js";
+import "./chunk-76Q63KJM.js";
+import "./chunk-SUWN54CK.js";
 import "./chunk-QZUG667L.js";
-import "./chunk-DCXCVEZP.js";
-import "./chunk-GVTXP6F6.js";
+import "./chunk-IC3NZHPT.js";
+import "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -23,4 +23,4 @@ export {
   resetGlobalRegistry,
   withDefaultOnRetirement
 };
-//# sourceMappingURL=unified-registry-MJA6IBDD.js.map
+//# sourceMappingURL=unified-registry-4NOWT2MU.js.map

package/dist/{weather-report-ID4ZNUAF.js → weather-report-MCLS5MFZ.js}

@@ -5,7 +5,7 @@ import {
   getModelWeatherSummary,
   queryWithLookback,
   shouldExplore
-} from "./chunk-GVTXP6F6.js";
+} from "./chunk-QBCWORAK.js";
 import "./chunk-AXTD4TFK.js";
 import "./chunk-DHVMSIT5.js";
 import "./chunk-ZPWHCABL.js";
@@ -17,4 +17,4 @@ export {
   queryWithLookback,
   shouldExplore
 };
-//# sourceMappingURL=weather-report-ID4ZNUAF.js.map
+//# sourceMappingURL=weather-report-MCLS5MFZ.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-agents",
-  "version": "2.170.0",
+  "version": "2.171.0",
   "description": "Governance substrate for AI coding agents — adversarial PR review, drift-detected rules, tamper-evident audit, and closed-loop outcome routing for Claude, Codex, Gemini, and OpenCode",
   "mcpName": "io.github.nexus-substrate/nexus-agents",
   "license": "MIT",
@@ -20,6 +20,7 @@
     "dist",
     "scripts/postinstall.js",
     "src/workflows/templates",
+    "src/security/ast-rules",
     "README.md"
   ],
   "repository": {
@@ -63,6 +64,8 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.110.0",
+    "@ast-grep/lang-go": "0.0.6",
+    "@ast-grep/lang-python": "0.0.6",
     "@ast-grep/napi": "0.44.1",
     "@google/genai": "^1.52.0",
     "@modelcontextprotocol/sdk": "^1.29.0",

package/src/security/ast-rules/command-exec-go.yml

@@ -0,0 +1,15 @@
+id: command-exec-go
+language: go
+severity: warning
+message: External command execution — verify args are not attacker-controlled
+rule:
+  # A bare selector-expression pattern (`exec.Command($$$ARGS)`) does not
+  # reliably match against the dynamically-registered Go grammar (verified
+  # against @ast-grep/napi@0.44.1 + @ast-grep/lang-go@0.0.6): the pattern
+  # parser needs a valid enclosing Go context to resolve the `call_expression`
+  # selector for a dotted callee. The explicit context+selector form matches
+  # correctly and still excludes local/aliased near-misses (a bare `Command(x)`
+  # call, or a `myexec.Command(...)` call through a differently-named object).
+  pattern:
+    context: 'func f() { exec.Command($$$ARGS) }'
+    selector: call_expression

package/src/security/ast-rules/dangerous-eval-python.yml

@@ -0,0 +1,8 @@
+id: dangerous-eval-python
+language: python
+severity: error
+message: Dynamic code execution via eval/exec
+rule:
+  any:
+    - pattern: eval($CODE)
+    - pattern: exec($CODE)

package/src/security/ast-rules/fixtures/sample.go

@@ -0,0 +1,33 @@
+// Fixture for the command-exec-go ast-grep rule.
+//
+// One rule-hit per statement keeps the red/green test assertions (ruleId +
+// line number) stable across edits. Generic sample data only (input, x) —
+// no project- or vendor-specific names.
+package fixtures
+
+import "os/exec"
+
+// PositiveDirectCall shells out via the standard library exec.Command —
+// POSITIVE: command-exec-go.
+func PositiveDirectCall(input string) {
+	exec.Command("sh", "-c", input) // POSITIVE: command-exec-go (exec.Command)
+}
+
+// Command is a local helper of the SAME NAME as the stdlib call, but it is
+// not `exec.Command` (no selector on the `exec` package) — must NOT match.
+func Command(x string) string {
+	return x // NEGATIVE: local `Command(...)` helper, not `exec.Command`
+}
+
+// NegativeLocalHelper calls the local helper above directly — NEGATIVE.
+func NegativeLocalHelper(x string) string {
+	return Command(x) // NEGATIVE: bare `Command(...)` call, no `exec.` selector
+}
+
+// NegativeAliasedNearMiss calls a `.Command(...)` method through a package
+// alias that is NOT literally named `exec` — the ast-grep pattern matches on
+// the literal identifier `exec`, so an aliased or differently-named package
+// must not match.
+func NegativeAliasedNearMiss(input string) {
+	myexec.Command("sh", "-c", input) // NEGATIVE: object is `myexec`, not `exec`
+}

package/src/security/ast-rules/fixtures/sample.py

@@ -0,0 +1,41 @@
+"""Fixture for dangerous-eval-python / shell-injection-python ast-grep rules.
+
+Each function below is intentionally tiny and self-contained: one rule-hit
+per line keeps the red/green test assertions (ruleId + line number) stable
+across edits. Generic sample data only (payload/user_input/cmd) — no
+project- or vendor-specific names.
+"""
+
+
+def positive_eval(user_input):
+    return eval(user_input)  # POSITIVE: dangerous-eval-python (eval)
+
+
+def positive_exec(payload):
+    exec(payload)  # POSITIVE: dangerous-eval-python (exec)
+
+
+def positive_os_system(cmd):
+    import os
+
+    os.system(cmd)  # POSITIVE: shell-injection-python (os.system)
+
+
+def positive_subprocess_shell_true(cmd):
+    import subprocess
+
+    subprocess.run(cmd, shell=True)  # POSITIVE: shell-injection-python (shell=True)
+
+
+def negative_evaluate(x):
+    return evaluate(x)  # NEGATIVE: not `eval` — must not match dangerous-eval-python
+
+
+def negative_executor(y):
+    return executor(y)  # NEGATIVE: not `exec` — must not match dangerous-eval-python
+
+
+def negative_subprocess_no_shell(cmd):
+    import subprocess
+
+    return subprocess.run(cmd)  # NEGATIVE: no shell=True — must not match shell-injection-python

package/src/security/ast-rules/shell-injection-python.yml

@@ -0,0 +1,13 @@
+id: shell-injection-python
+language: python
+severity: error
+message: Possible shell injection — shell=True / os.system with dynamic input
+rule:
+  any:
+    - pattern: os.system($CMD)
+    # ast-grep's multi-meta-var cannot match a trailing empty `$$$B` right
+    # after another matched arg (a napi/dynamic-lang quirk, verified against
+    # @ast-grep/napi@0.44.1 + @ast-grep/lang-python@0.0.6) — `shell=True` as
+    # the LAST arg needs its own arm alongside the "more args follow" arm.
+    - pattern: subprocess.$FN($$$A, shell=True, $$$B)
+    - pattern: subprocess.$FN($$$A, shell=True)