nexus-agents 2.89.0 → 2.89.1

package/dist/{chunk-QA6YV4YF.js → chunk-7QTWFRHH.js}

@@ -1595,25 +1595,26 @@ function internalError(message, requestId) {
 var MAX_INPUT_SIZE_BYTES = 10 * 1024 * 1024;
 var SECRET_PATTERNS = [
   // API keys with common prefixes
-  /\b(sk-[a-zA-Z0-9]{20,})\b/,
-  /\b(pk-[a-zA-Z0-9]{20,})\b/,
+  /\b(sk-[a-zA-Z0-9]{20,})\b/g,
+  /\b(pk-[a-zA-Z0-9]{20,})\b/g,
   // AWS-style keys
-  /\b(AKIA[A-Z0-9]{16})\b/,
+  /\b(AKIA[A-Z0-9]{16})\b/g,
   // Bearer tokens in output
-  /Bearer\s+[a-zA-Z0-9_\-.~+/]+=*/,
+  /Bearer\s+[a-zA-Z0-9_\-.~+/]+=*/g,
   // Generic long hex secrets (40+ chars)
-  /\b[0-9a-f]{40,}\b/i,
+  /\b[0-9a-f]{40,}\b/gi,
   // password= or token= in output
-  /(?:password|token|secret|apikey|api_key)\s*[=:]\s*\S{8,}/i
+  /(?:password|token|secret|apikey|api_key)\s*[=:]\s*\S{8,}/gi
 ];
 function sanitizeOutput2(text, logger11) {
   let sanitized = text;
   for (const pattern of SECRET_PATTERNS) {
-    if (pattern.test(sanitized)) {
+    const before = sanitized;
+    sanitized = sanitized.replace(pattern, "[REDACTED]");
+    if (sanitized !== before) {
       logger11.warn("Potential secret detected in tool output, redacting", {
         pattern: pattern.source.slice(0, 30)
       });
-      sanitized = sanitized.replace(pattern, "[REDACTED]");
     }
   }
   return sanitized;
@@ -3317,7 +3318,7 @@ var ResilientAdapter = class {
   async *stream(request) {
     const adapter = await this.ensureAdapter();
     if (adapter === void 0) {
-      return;
+      throw new ModelError("No model adapter available");
     }
     yield* adapter.stream(request);
   }
@@ -9602,4 +9603,4 @@ export {
   CONSENSUS_VOTE_OUTPUT_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-QA6YV4YF.js.map
+//# sourceMappingURL=chunk-7QTWFRHH.js.map