nexus-agents 2.81.2 → 2.81.4

package/dist/{composite-router-SKHVZ4UF.js → composite-router-4CF3P5D4.js}

@@ -4,7 +4,7 @@ import {
   CompositeRoutingError,
   DEFAULT_COMPOSITE_CONFIG,
   createCompositeRouter
-} from "./chunk-LJIB6TNE.js";
+} from "./chunk-HFSSADUV.js";
 import "./chunk-I2HMWH4R.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -14,4 +14,4 @@ export {
   DEFAULT_COMPOSITE_CONFIG,
   createCompositeRouter
 };
-//# sourceMappingURL=composite-router-SKHVZ4UF.js.map
+//# sourceMappingURL=composite-router-4CF3P5D4.js.map

package/dist/{consensus-vote-VBXLXVFF.js → consensus-vote-7PLEGFWZ.js}

@@ -5,18 +5,18 @@ import {
   executeVoting,
   registerConsensusVoteTool,
   resetCorrelationTracker
-} from "./chunk-P4W7PV6L.js";
-import "./chunk-M66MYHBT.js";
-import "./chunk-YLYT7GSG.js";
-import "./chunk-PZEE6T5Y.js";
-import "./chunk-73K7575Z.js";
-import "./chunk-V2KWEIV5.js";
+} from "./chunk-R2VJY7Z4.js";
+import "./chunk-AMFVUDWI.js";
+import "./chunk-M5ABED6T.js";
+import "./chunk-JSQV2EOZ.js";
+import "./chunk-7JLSKX3U.js";
+import "./chunk-2HBQ6XXA.js";
 import "./chunk-633WH2ML.js";
-import "./chunk-BMNWUPJO.js";
-import "./chunk-LIEFKEAO.js";
+import "./chunk-WVSQGGAH.js";
+import "./chunk-5TM5VL23.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-PV3OEDLO.js";
-import "./chunk-LJIB6TNE.js";
+import "./chunk-B3MCX46I.js";
+import "./chunk-HFSSADUV.js";
 import "./chunk-I2HMWH4R.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -27,4 +27,4 @@ export {
   registerConsensusVoteTool,
   resetCorrelationTracker
 };
-//# sourceMappingURL=consensus-vote-VBXLXVFF.js.map
+//# sourceMappingURL=consensus-vote-7PLEGFWZ.js.map

package/dist/{context-retriever-KLJ5X4TL.js → context-retriever-R5W4I4IB.js}

@@ -2,12 +2,12 @@ import {
   getContextForTask,
   inferTaskCategory,
   summarizeContextForPrompt
-} from "./chunk-4OPS2AUD.js";
-import "./chunk-PZEE6T5Y.js";
+} from "./chunk-S5HMID6I.js";
+import "./chunk-JSQV2EOZ.js";
 import "./chunk-633WH2ML.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-PV3OEDLO.js";
-import "./chunk-LJIB6TNE.js";
+import "./chunk-B3MCX46I.js";
+import "./chunk-HFSSADUV.js";
 import "./chunk-I2HMWH4R.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -15,4 +15,4 @@ export {
   inferTaskCategory,
   summarizeContextForPrompt
 };
-//# sourceMappingURL=context-retriever-KLJ5X4TL.js.map
+//# sourceMappingURL=context-retriever-R5W4I4IB.js.map

package/dist/{doctor-deep-IH4FG5YZ.js → doctor-deep-7JTGI33O.js}

@@ -1,12 +1,12 @@
 import {
   formatDeepDiagnostics,
   runDeepDiagnostics
-} from "./chunk-S77SLJ2J.js";
-import "./chunk-LJIB6TNE.js";
+} from "./chunk-ZBABWKEA.js";
+import "./chunk-HFSSADUV.js";
 import "./chunk-I2HMWH4R.js";
 import "./chunk-PR4QN5HX.js";
 export {
   formatDeepDiagnostics,
   runDeepDiagnostics
 };
-//# sourceMappingURL=doctor-deep-IH4FG5YZ.js.map
+//# sourceMappingURL=doctor-deep-7JTGI33O.js.map

package/dist/expert-bridge-J5ZKCYL5.js

@@ -0,0 +1,11 @@
+import {
+  executeExpert
+} from "./chunk-2GW2FZXY.js";
+import "./chunk-6M44ZXB4.js";
+import "./chunk-HFSSADUV.js";
+import "./chunk-I2HMWH4R.js";
+import "./chunk-PR4QN5HX.js";
+export {
+  executeExpert
+};
+//# sourceMappingURL=expert-bridge-J5ZKCYL5.js.map

package/dist/{factory-FTE7TDCT.js → factory-DD2FPM3H.js}

@@ -1,14 +1,14 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-Q27M6KHP.js";
-import "./chunk-UZCDHAY3.js";
-import "./chunk-UTL2SFIN.js";
-import "./chunk-LJIB6TNE.js";
+} from "./chunk-BZVYU4YD.js";
+import "./chunk-ZAY5M2AN.js";
+import "./chunk-PPV23O3J.js";
+import "./chunk-HFSSADUV.js";
 import "./chunk-I2HMWH4R.js";
 import "./chunk-PR4QN5HX.js";
 export {
   createGitHubProvider,
   createScmProvider
 };
-//# sourceMappingURL=factory-FTE7TDCT.js.map
+//# sourceMappingURL=factory-DD2FPM3H.js.map

package/dist/{factory-CQUDIMIG.js → factory-E2CKCYIK.js}

@@ -3,9 +3,9 @@ import {
   createCliAdapter,
   getAvailableClis,
   isCliAvailable
-} from "./chunk-BMNWUPJO.js";
-import "./chunk-LIEFKEAO.js";
-import "./chunk-LJIB6TNE.js";
+} from "./chunk-WVSQGGAH.js";
+import "./chunk-5TM5VL23.js";
+import "./chunk-HFSSADUV.js";
 import "./chunk-I2HMWH4R.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -14,4 +14,4 @@ export {
   getAvailableClis,
   isCliAvailable
 };
-//# sourceMappingURL=factory-CQUDIMIG.js.map
+//# sourceMappingURL=factory-E2CKCYIK.js.map

package/dist/index.d.ts

@@ -30966,12 +30966,38 @@ type PolicyDecision = {
     readonly reason: string;
     readonly escalateTo?: string;
 };
+/**
+ * Typed snapshot of the pipeline state available to policy rules (#2932).
+ *
+ * Listing the fields by name (instead of an untyped `Record<string, unknown>`)
+ * surfaces missing-producer bugs at compile time. The pre-#2932 untyped
+ * shape let `securityReviewRule`, `costBudgetRule`, `highRiskApprovalRule`,
+ * and `boundedIterationRule` read keys that no producer ever wrote — every
+ * comparison evaluated against `undefined`, so every rule allowed. Those
+ * four rules were deleted in the same change; this interface lists only
+ * the fields with a real producer chain.
+ *
+ * Adding a new rule means adding its input field here AND wiring a
+ * producer that writes it onto `TaskContract.metadata` upstream of
+ * `checkPipelinePolicy`.
+ */
+interface PipelineStateSnapshot {
+    /**
+     * Caller trust tier (`'1'`..`'4'` per `security/trust-types.ts`). Producers
+     * include `trust-classifier`, `input-sanitizer`, `firewall-pipeline`, and
+     * `mcp/middleware/request-context`; threading the value into
+     * `TaskContract.metadata.trustTier` is owner-scoped follow-up work — see
+     * the corresponding issue. When absent, `trustTierRule` allows (the
+     * existing fail-open default for unknown trust).
+     */
+    readonly trustTier?: string;
+}
 /** Context provided to policy rules for evaluation. */
 interface PolicyContext {
     readonly taskId: string;
     readonly stageId: string;
     readonly stageType: string;
-    readonly pipelineState: Readonly<Record<string, unknown>>;
+    readonly pipelineState: PipelineStateSnapshot;
 }
 /** A policy rule with priority-ordered evaluation. */
 interface PolicyRule {

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-Q27M6KHP.js";
+} from "./chunk-BZVYU4YD.js";
 import {
   ALLOWED_COMMANDS,
   ARTIFACT_TYPES,
@@ -518,7 +518,7 @@ import {
   validateWorkflow,
   validateWorkflowDependencies,
   withLogging
-} from "./chunk-37ZXD5B6.js";
+} from "./chunk-M6KXR4LO.js";
 import "./chunk-AP2FD37C.js";
 import {
   SharedMemoryStore
@@ -527,21 +527,21 @@ import {
   getTokenEnvVars,
   hasToken,
   resolveToken
-} from "./chunk-UZCDHAY3.js";
+} from "./chunk-ZAY5M2AN.js";
 import "./chunk-X2M7OF27.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
   OpenAIAdapter,
   createOpenAIAdapter
-} from "./chunk-PKBKWWPK.js";
+} from "./chunk-K7WUEKCD.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-T7RGD5JW.js";
+} from "./chunk-XZECNG2Q.js";
 import {
   executeExpert
-} from "./chunk-SVKH6ASN.js";
+} from "./chunk-2GW2FZXY.js";
 import {
   AgentFindingSchema,
   AgentPerformanceSchema,
@@ -637,10 +637,10 @@ import {
   validateToolInput,
   withModelNotFoundFallback,
   wrapResilientWithFallback
-} from "./chunk-P4W7PV6L.js";
+} from "./chunk-R2VJY7Z4.js";
 import {
   PROVIDER_ENV_KEYS
-} from "./chunk-M66MYHBT.js";
+} from "./chunk-AMFVUDWI.js";
 import {
   AdapterModelError,
   BaseAdapter,
@@ -664,8 +664,8 @@ import {
   transformStream,
   validateApiKeyPresence,
   withTimeout
-} from "./chunk-YLYT7GSG.js";
-import "./chunk-ERWTZSAR.js";
+} from "./chunk-M5ABED6T.js";
+import "./chunk-EGK4RZV5.js";
 import {
   AgentActionSchema,
   GitHubReviewer,
@@ -698,11 +698,11 @@ import {
   sanitizeInput,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-RLQZOEMX.js";
+} from "./chunk-ITMLH7TF.js";
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-UTL2SFIN.js";
+} from "./chunk-PPV23O3J.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -710,7 +710,7 @@ import {
   generateSecurityPlan,
   getRegistryManifest,
   resolveScannerData
-} from "./chunk-SZ7VPIRA.js";
+} from "./chunk-RGKUBFTE.js";
 import {
   analyzeGitHubRepo,
   analyzeRepo,
@@ -720,10 +720,10 @@ import "./chunk-BQ4YXGGQ.js";
 import {
   PersistentStrategyDistiller,
   RulesSnapshotSchema
-} from "./chunk-4OPS2AUD.js";
+} from "./chunk-S5HMID6I.js";
 import {
   MemoryError
-} from "./chunk-PZEE6T5Y.js";
+} from "./chunk-JSQV2EOZ.js";
 import {
   AppConfigSchema,
   ExpertConfigSchema,
@@ -742,7 +742,7 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-6KO6LO3L.js";
+} from "./chunk-F7N2T53R.js";
 import {
   AvailabilityCache,
   filterAvailableModels,
@@ -751,15 +751,15 @@ import {
   getFallbackChain,
   resetAvailabilityCache,
   resolveFallback
-} from "./chunk-WZGCVCRQ.js";
+} from "./chunk-6M44ZXB4.js";
 import {
   AvailableModelsCache,
   getDefaultAvailableModelsCache,
   setDefaultAvailableModelsCache
-} from "./chunk-73K7575Z.js";
+} from "./chunk-7JLSKX3U.js";
 import {
   DEFAULTS
-} from "./chunk-V2KWEIV5.js";
+} from "./chunk-2HBQ6XXA.js";
 import "./chunk-NUBSJGQZ.js";
 import "./chunk-633WH2ML.js";
 import {
@@ -790,8 +790,8 @@ import {
   isCliAvailable,
   isRetryableError,
   sleep
-} from "./chunk-BMNWUPJO.js";
-import "./chunk-LIEFKEAO.js";
+} from "./chunk-WVSQGGAH.js";
+import "./chunk-5TM5VL23.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -802,7 +802,7 @@ import {
   validateExpertConfig
 } from "./chunk-ZM4O442V.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-PV3OEDLO.js";
+import "./chunk-B3MCX46I.js";
 import {
   AgentCapability,
   AgentError,
@@ -879,7 +879,7 @@ import {
   toError,
   unwrap,
   unwrapOr
-} from "./chunk-LJIB6TNE.js";
+} from "./chunk-HFSSADUV.js";
 import "./chunk-I2HMWH4R.js";
 import "./chunk-PR4QN5HX.js";
 
@@ -6003,14 +6003,18 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-VBXLXVFF.js");
+    const { executeVoting } = await import("./consensus-vote-7PLEGFWZ.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
   } catch (error) {
     const msg = error instanceof Error ? error.message : String(error);
-    log.warn("Vote execution failed, auto-approving", { error: msg });
-    return { kind: "approved", approvalPercentage: 0 };
+    log.warn("Vote execution failed, treating as rejected", { error: msg });
+    return {
+      kind: "rejected",
+      feedback: `Vote infrastructure failed \u2014 no consensus produced: ${msg}`,
+      approvalPercentage: 0
+    };
   }
 }
 function parseVotingResult(result) {