nexus-agents 2.92.2 → 2.92.4

package/dist/{chunk-3HVSXLPL.js → chunk-MZFWRU6E.js}

@@ -40,7 +40,7 @@ import {
 } from "./chunk-CH7QIDHQ.js";
 
 // src/version.ts
-var VERSION = true ? "2.92.2" : "dev";
+var VERSION = true ? "2.92.4" : "dev";
 
 // src/config/schemas-core.ts
 import { z } from "zod";
@@ -2096,7 +2096,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { runSetup } = await import("./setup-command-BMELLUUX.js");
+    const { runSetup } = await import("./setup-command-E35O56BN.js");
     const setupResult = runSetup({
       skipMcp: true,
       skipRules: true,
@@ -2208,4 +2208,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-3HVSXLPL.js.map
+//# sourceMappingURL=chunk-MZFWRU6E.js.map

package/dist/{chunk-XNBPE6WG.js → chunk-VUVCSWMC.js}

@@ -8,7 +8,7 @@ import {
   checkSqlite,
   defaultConfig,
   initDataDirectories
-} from "./chunk-3HVSXLPL.js";
+} from "./chunk-MZFWRU6E.js";
 import {
   probeAllClis
 } from "./chunk-X5BQF6HM.js";
@@ -1987,4 +1987,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=chunk-XNBPE6WG.js.map
+//# sourceMappingURL=chunk-VUVCSWMC.js.map

package/dist/{chunk-G5XKEUAP.js → chunk-VYNNVUY6.js}

@@ -9,7 +9,7 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-NR4NSTJH.js";
+} from "./chunk-27CNQPQ4.js";
 import {
   createLogger,
   getTimeProvider
@@ -288,4 +288,4 @@ export {
   formatReviewComment,
   createFailedReview
 };
-//# sourceMappingURL=chunk-G5XKEUAP.js.map
+//# sourceMappingURL=chunk-VYNNVUY6.js.map

package/dist/cli.js

@@ -13,7 +13,7 @@ import {
   generateSummary,
   parseFindings,
   sumFindings
-} from "./chunk-G5XKEUAP.js";
+} from "./chunk-VYNNVUY6.js";
 import "./chunk-AQTHLUCP.js";
 import {
   buildOpenAICompatAdapters,
@@ -24,7 +24,7 @@ import {
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-XNBPE6WG.js";
+} from "./chunk-VUVCSWMC.js";
 import "./chunk-2SMTCNXP.js";
 import {
   AuthHandler,
@@ -164,7 +164,7 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-F47QKVPH.js";
+} from "./chunk-4LEUIAYB.js";
 import {
   resolveToken
 } from "./chunk-EAT4GTMT.js";
@@ -194,7 +194,7 @@ import {
   toolSuccessStructured,
   warnIfSimulatedOutsideTests,
   wrapToolWithTimeout
-} from "./chunk-UYOHV3EG.js";
+} from "./chunk-JCYCITBK.js";
 import "./chunk-3FVSYMHK.js";
 import "./chunk-Y7E5ZWRQ.js";
 import {
@@ -208,12 +208,12 @@ import {
   createFullGitHubProvider,
   evaluatePolicy,
   parsePRUrl
-} from "./chunk-L6JZCAFH.js";
+} from "./chunk-IHPYT6WU.js";
 import "./chunk-EFHZHCF2.js";
 import {
   ReputationCache,
   sanitizeInput
-} from "./chunk-NR4NSTJH.js";
+} from "./chunk-27CNQPQ4.js";
 import "./chunk-57HMLBYN.js";
 import "./chunk-HFOQKCD2.js";
 import "./chunk-3ACDP4E6.js";
@@ -240,7 +240,7 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-3HVSXLPL.js";
+} from "./chunk-MZFWRU6E.js";
 import "./chunk-SFZESA5O.js";
 import "./chunk-6Q33PBXC.js";
 import {
@@ -3109,7 +3109,7 @@ ${file.patch}
         violations: policyResult.violations
       });
     }
-    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-RBUEJI6V.js");
+    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-CI72F4XM.js");
     const body = formatReviewComment2(result);
     const postResult = await provider.createReview(pr.prNumber, body, result.decision);
     if (!postResult.ok) {

package/dist/{consensus-vote-VSRNSZ5J.js → consensus-vote-4RIUUEZQ.js}

@@ -6,7 +6,7 @@ import {
   executeVoting,
   registerConsensusVoteTool,
   resetCorrelationTracker
-} from "./chunk-UYOHV3EG.js";
+} from "./chunk-JCYCITBK.js";
 import "./chunk-3FVSYMHK.js";
 import "./chunk-Y7E5ZWRQ.js";
 import "./chunk-7QXEK3O6.js";
@@ -30,4 +30,4 @@ export {
   registerConsensusVoteTool,
   resetCorrelationTracker
 };
-//# sourceMappingURL=consensus-vote-VSRNSZ5J.js.map
+//# sourceMappingURL=consensus-vote-4RIUUEZQ.js.map

package/dist/index.d.ts

@@ -27879,6 +27879,161 @@ declare function isMutatingAction(actionType: AgentActionType): boolean;
  */
 declare function requiresCitation(actionType: AgentActionType): boolean;
 
+/**
+ * nexus-agents/security - Audit Trail
+ *
+ * Machine-readable JSON audit events for security pipeline decisions.
+ * Every trust classification, policy gate decision, corroboration check,
+ * and reputation assessment is recorded as a structured event.
+ *
+ * Satisfies CLAUDE.md requirement: "Every action on untrusted input must
+ * log: trust tier, sources cited, policy gate decision, stripped content."
+ *
+ * @module security/audit-trail
+ * (Source: Issue #832 — Security audit trail)
+ */
+
+/**
+ * Discriminated union of audit event types.
+ * Each event captures a single security pipeline decision.
+ */
+type AuditEvent = TrustClassificationEvent | PolicyGateEvent | CorroborationEvent | ReputationEvent | SanitizationEvent | GraphExecutionAuditEvent;
+/** Base fields shared by all audit events. */
+interface AuditEventBase {
+    readonly id: string;
+    readonly timestamp: string;
+    readonly component: string;
+}
+/** Trust classification decision. */
+interface TrustClassificationEvent extends AuditEventBase {
+    readonly type: 'trust_classification';
+    readonly username: string;
+    readonly assignedTier: TrustTier;
+    readonly userRole: string;
+    readonly isAllowlisted: boolean;
+    readonly wasDowngraded: boolean;
+    readonly reason: string;
+}
+/** Policy gate evaluation result. */
+interface PolicyGateEvent extends AuditEventBase {
+    readonly type: 'policy_gate';
+    readonly actionType: AgentActionType;
+    readonly allowed: boolean;
+    readonly requiresApproval: boolean;
+    readonly inputTrustTier: TrustTier;
+    readonly violationRules: readonly string[];
+}
+/** Corroboration validation result. */
+interface CorroborationEvent extends AuditEventBase {
+    readonly type: 'corroboration';
+    readonly actionType: AgentActionType;
+    readonly satisfied: boolean;
+    readonly sourceCount: number;
+    readonly missingRequirements: readonly string[];
+}
+/** Reputation assessment result. */
+interface ReputationEvent extends AuditEventBase {
+    readonly type: 'reputation';
+    readonly username: string;
+    readonly reputationScore: number;
+    readonly isSuspicious: boolean;
+    readonly effectiveTier: TrustTier;
+    readonly signalCount: number;
+}
+/** Summary of a single element stripped during sanitization. */
+interface StrippedElementSummary {
+    /** Truncated tag text (≤30 chars + '...' from the sanitizer). */
+    readonly tag: string;
+    /** Reason the element was removed (e.g. 'Trail of Bits injection vector'). */
+    readonly reason: string;
+}
+/** Input sanitization result. */
+interface SanitizationEvent extends AuditEventBase {
+    readonly type: 'sanitization';
+    readonly source: string;
+    readonly wasModified: boolean;
+    readonly strippedCount: number;
+    readonly injectionFlagCount: number;
+    /**
+     * Per-element tag/reason details, truncated to at most
+     * MAX_STRIPPED_ELEMENTS_PER_EVENT entries. Required by CLAUDE.md's
+     * Untrusted Input Policy: "Log stripped elements for audit trail."
+     */
+    readonly strippedElements: readonly StrippedElementSummary[];
+}
+/** Graph execution lifecycle event (Issue #839). */
+interface GraphExecutionAuditEvent extends AuditEventBase {
+    readonly type: 'graph_execution';
+    readonly graphEvent: string;
+    readonly nodeId?: string;
+    readonly stepNumber: number;
+    readonly detail: string;
+}
+/** Query filter for retrieving audit events. */
+interface AuditQuery {
+    readonly type?: AuditEvent['type'];
+    readonly since?: string;
+    readonly until?: string;
+    readonly trustTier?: TrustTier;
+    readonly limit?: number;
+}
+/**
+ * Append-only audit trail for security pipeline decisions.
+ * Events are bounded by MAX_EVENTS to prevent unbounded growth.
+ */
+declare class AuditTrail {
+    private events;
+    private nextId;
+    /** Appends an event to the trail. Returns the assigned event ID. */
+    append(event: Omit<AuditEvent, 'id' | 'timestamp'>): string;
+    /** Queries events matching the given filter. */
+    query(filter?: AuditQuery): readonly AuditEvent[];
+    /** Returns the total number of events. */
+    get size(): number;
+    /** Clears all events. */
+    clear(): void;
+    /** Enforces MAX_EVENTS bound. */
+    private enforceLimit;
+}
+/**
+ * Records a trust classification decision.
+ */
+declare function emitTrustEvent(trail: AuditTrail, data: Omit<TrustClassificationEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
+/**
+ * Records a policy gate evaluation.
+ */
+declare function emitPolicyEvent(trail: AuditTrail, data: Omit<PolicyGateEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
+/**
+ * Records a corroboration validation.
+ */
+declare function emitCorroborationEvent(trail: AuditTrail, data: Omit<CorroborationEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
+/**
+ * Records a reputation assessment.
+ */
+declare function emitReputationEvent(trail: AuditTrail, data: Omit<ReputationEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
+/**
+ * Records an input sanitization result.
+ */
+declare function emitSanitizationEvent(trail: AuditTrail, data: Omit<SanitizationEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
+/**
+ * Records a graph execution lifecycle event.
+ */
+declare function emitGraphExecutionEvent(trail: AuditTrail, data: Omit<GraphExecutionAuditEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
+/**
+ * Creates an onEvent callback that bridges graph events to the audit trail.
+ * Pass the returned function as `onEvent` in GraphExecuteOptions.
+ *
+ * @example
+ * const trail = createAuditTrail();
+ * await executeGraph(graph, inputs, { onEvent: createGraphAuditBridge(trail) });
+ */
+declare function createGraphAuditBridge(trail: AuditTrail): (event: {
+    readonly type: string;
+    readonly [key: string]: unknown;
+}) => void;
+/** Creates a new AuditTrail instance. */
+declare function createAuditTrail(): AuditTrail;
+
 /**
  * nexus-agents/security - Policy Gate
  *
@@ -27941,7 +28096,7 @@ interface ActionContext {
  * @param context - The current execution context.
  * @returns PolicyDecision with violations and approval requirements.
  */
-declare function evaluatePolicy$1(action: AgentAction, context: ActionContext): PolicyDecision$1;
+declare function evaluatePolicy$1(action: AgentAction, context: ActionContext, auditTrail?: AuditTrail): PolicyDecision$1;
 /**
  * Quick check: can this action type proceed at all given the input trust tier?
  * Useful for early rejection before full policy evaluation.
@@ -28078,161 +28233,6 @@ declare class ReputationCache {
  */
 declare function assessReputation(metadata: GitHubUserMetadata, cache?: ReputationCache): ReputationAssessment;
 
-/**
- * nexus-agents/security - Audit Trail
- *
- * Machine-readable JSON audit events for security pipeline decisions.
- * Every trust classification, policy gate decision, corroboration check,
- * and reputation assessment is recorded as a structured event.
- *
- * Satisfies CLAUDE.md requirement: "Every action on untrusted input must
- * log: trust tier, sources cited, policy gate decision, stripped content."
- *
- * @module security/audit-trail
- * (Source: Issue #832 — Security audit trail)
- */
-
-/**
- * Discriminated union of audit event types.
- * Each event captures a single security pipeline decision.
- */
-type AuditEvent = TrustClassificationEvent | PolicyGateEvent | CorroborationEvent | ReputationEvent | SanitizationEvent | GraphExecutionAuditEvent;
-/** Base fields shared by all audit events. */
-interface AuditEventBase {
-    readonly id: string;
-    readonly timestamp: string;
-    readonly component: string;
-}
-/** Trust classification decision. */
-interface TrustClassificationEvent extends AuditEventBase {
-    readonly type: 'trust_classification';
-    readonly username: string;
-    readonly assignedTier: TrustTier;
-    readonly userRole: string;
-    readonly isAllowlisted: boolean;
-    readonly wasDowngraded: boolean;
-    readonly reason: string;
-}
-/** Policy gate evaluation result. */
-interface PolicyGateEvent extends AuditEventBase {
-    readonly type: 'policy_gate';
-    readonly actionType: AgentActionType;
-    readonly allowed: boolean;
-    readonly requiresApproval: boolean;
-    readonly inputTrustTier: TrustTier;
-    readonly violationRules: readonly string[];
-}
-/** Corroboration validation result. */
-interface CorroborationEvent extends AuditEventBase {
-    readonly type: 'corroboration';
-    readonly actionType: AgentActionType;
-    readonly satisfied: boolean;
-    readonly sourceCount: number;
-    readonly missingRequirements: readonly string[];
-}
-/** Reputation assessment result. */
-interface ReputationEvent extends AuditEventBase {
-    readonly type: 'reputation';
-    readonly username: string;
-    readonly reputationScore: number;
-    readonly isSuspicious: boolean;
-    readonly effectiveTier: TrustTier;
-    readonly signalCount: number;
-}
-/** Summary of a single element stripped during sanitization. */
-interface StrippedElementSummary {
-    /** Truncated tag text (≤30 chars + '...' from the sanitizer). */
-    readonly tag: string;
-    /** Reason the element was removed (e.g. 'Trail of Bits injection vector'). */
-    readonly reason: string;
-}
-/** Input sanitization result. */
-interface SanitizationEvent extends AuditEventBase {
-    readonly type: 'sanitization';
-    readonly source: string;
-    readonly wasModified: boolean;
-    readonly strippedCount: number;
-    readonly injectionFlagCount: number;
-    /**
-     * Per-element tag/reason details, truncated to at most
-     * MAX_STRIPPED_ELEMENTS_PER_EVENT entries. Required by CLAUDE.md's
-     * Untrusted Input Policy: "Log stripped elements for audit trail."
-     */
-    readonly strippedElements: readonly StrippedElementSummary[];
-}
-/** Graph execution lifecycle event (Issue #839). */
-interface GraphExecutionAuditEvent extends AuditEventBase {
-    readonly type: 'graph_execution';
-    readonly graphEvent: string;
-    readonly nodeId?: string;
-    readonly stepNumber: number;
-    readonly detail: string;
-}
-/** Query filter for retrieving audit events. */
-interface AuditQuery {
-    readonly type?: AuditEvent['type'];
-    readonly since?: string;
-    readonly until?: string;
-    readonly trustTier?: TrustTier;
-    readonly limit?: number;
-}
-/**
- * Append-only audit trail for security pipeline decisions.
- * Events are bounded by MAX_EVENTS to prevent unbounded growth.
- */
-declare class AuditTrail {
-    private events;
-    private nextId;
-    /** Appends an event to the trail. Returns the assigned event ID. */
-    append(event: Omit<AuditEvent, 'id' | 'timestamp'>): string;
-    /** Queries events matching the given filter. */
-    query(filter?: AuditQuery): readonly AuditEvent[];
-    /** Returns the total number of events. */
-    get size(): number;
-    /** Clears all events. */
-    clear(): void;
-    /** Enforces MAX_EVENTS bound. */
-    private enforceLimit;
-}
-/**
- * Records a trust classification decision.
- */
-declare function emitTrustEvent(trail: AuditTrail, data: Omit<TrustClassificationEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
-/**
- * Records a policy gate evaluation.
- */
-declare function emitPolicyEvent(trail: AuditTrail, data: Omit<PolicyGateEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
-/**
- * Records a corroboration validation.
- */
-declare function emitCorroborationEvent(trail: AuditTrail, data: Omit<CorroborationEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
-/**
- * Records a reputation assessment.
- */
-declare function emitReputationEvent(trail: AuditTrail, data: Omit<ReputationEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
-/**
- * Records an input sanitization result.
- */
-declare function emitSanitizationEvent(trail: AuditTrail, data: Omit<SanitizationEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
-/**
- * Records a graph execution lifecycle event.
- */
-declare function emitGraphExecutionEvent(trail: AuditTrail, data: Omit<GraphExecutionAuditEvent, 'id' | 'timestamp' | 'type' | 'component'>): string;
-/**
- * Creates an onEvent callback that bridges graph events to the audit trail.
- * Pass the returned function as `onEvent` in GraphExecuteOptions.
- *
- * @example
- * const trail = createAuditTrail();
- * await executeGraph(graph, inputs, { onEvent: createGraphAuditBridge(trail) });
- */
-declare function createGraphAuditBridge(trail: AuditTrail): (event: {
-    readonly type: string;
-    readonly [key: string]: unknown;
-}) => void;
-/** Creates a new AuditTrail instance. */
-declare function createAuditTrail(): AuditTrail;
-
 /**
  * nexus-agents/security/firewall - Types
  *
@@ -28345,6 +28345,14 @@ interface FirewallResult {
      */
     readonly effectiveTrustTier: TrustTier;
     readonly atl: string;
+    /**
+     * Rule-of-Two assessment surfaced by the `policyEnforcement` stage (#3198):
+     * present (with `severity: 'block'`) when the effective tier is untrusted AND
+     * the configured context has both write and secret access. The firewall is a
+     * signal provider — it SURFACES this for the consumer to enforce; it does not
+     * hard-block. `undefined` when the stage is disabled or the rule holds.
+     */
+    readonly ruleOfTwoViolation?: Violation;
     readonly auditEvents: readonly {
         readonly id: string;
         readonly type: string;
@@ -28362,6 +28370,7 @@ declare class HostileInputFirewall {
     private readonly adapter;
     private readonly reputationCache;
     private readonly auditTrail;
+    private readonly context;
     constructor(config: FirewallConfig);
     /**
      * Processes untrusted input through the firewall pipeline.
@@ -29828,6 +29837,12 @@ declare function createCorrelationTracker(config?: Partial<HigherOrderVotingConf
 /** Options for creating OWVoting instance. */
 interface OWVotingOptions {
     readonly config?: Partial<HigherOrderVotingConfig>;
+    /**
+     * Algorithm label this instance reports (#3168). Defaults to `simple_majority`
+     * for backward compatibility; `HigherOrderVotingStrategy` sets `opinion_wise`.
+     * Keeps the label consistent whether constructed directly or via a factory.
+     */
+    readonly algorithm?: ConsensusAlgorithm;
 }
 /**
  * Opinion-Wise higher-order voting implementation.
@@ -29854,7 +29869,6 @@ declare function createOWVoting(options?: OWVotingOptions): IHigherOrderVoting;
  * Wraps OWVoting to provide IVotingStrategy interface.
  */
 declare class HigherOrderVotingStrategy extends OWVoting implements IVotingStrategy {
-    readonly algorithm: ConsensusAlgorithm;
     constructor(options?: OWVotingOptions);
 }
 /** Creates a higher-order voting strategy for use with ConsensusEngine. */