nexus-agents 4.26.7 → 4.26.8

package/dist/{chunk-DJWIO7OX.js → chunk-WFWB3MVD.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-OQB3XC5O.js";
 import {
   VERSION
-} from "./chunk-VK42NFA3.js";
+} from "./chunk-EXS7P2VP.js";
 import {
   capitalize
 } from "./chunk-6T3EPABN.js";
@@ -1201,7 +1201,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-5PVWTCFL.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-AUUPYRZO.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1303,4 +1303,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-DJWIO7OX.js.map
+//# sourceMappingURL=chunk-WFWB3MVD.js.map

package/dist/cli.js

@@ -152,7 +152,7 @@ import {
   validateNexusEnv,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-YLSSV4HV.js";
+} from "./chunk-OXD4H42X.js";
 import "./chunk-QFO77VBC.js";
 import "./chunk-HFOQKCD2.js";
 import "./chunk-RSMG2DPB.js";
@@ -171,7 +171,7 @@ import {
   doctorCommand,
   initDataDirectories,
   runDoctor
-} from "./chunk-DJWIO7OX.js";
+} from "./chunk-WFWB3MVD.js";
 import {
   buildOpenAICompatAdapters,
   readOpenAICompatEnv
@@ -189,7 +189,7 @@ import {
   mapOutcomeToDecision,
   recordAuthenticVote,
   registerConsensusVoteTool
-} from "./chunk-KHAB3HWK.js";
+} from "./chunk-5ZLAA73M.js";
 import {
   loadUsageEvents,
   rollupByModel
@@ -225,15 +225,15 @@ import {
   registerImprovementReviewTool,
   runImprovementReview,
   scanForSecrets
-} from "./chunk-ICJI6AIF.js";
+} from "./chunk-D472Q66M.js";
 import {
   createDefaultPolicyFirewall,
   setGlobalPolicyFirewall,
   stagePolicyFirewallForRollout
-} from "./chunk-TBKGR6GC.js";
+} from "./chunk-AU6QDTRD.js";
 import {
   VERSION
-} from "./chunk-VK42NFA3.js";
+} from "./chunk-EXS7P2VP.js";
 import "./chunk-MJQVSJZB.js";
 import {
   createUnifiedRegistry,
@@ -19551,7 +19551,7 @@ function startImprovementReviewScheduler(options) {
   let running = false;
   const runOnce = async () => {
     try {
-      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-RMKHA4DN.js");
+      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-HXZA4BQY.js");
       const input = ImprovementReviewInputSchema2.parse({ fileIssues });
       const result = await runImprovementReview2(input, { logger: logger22 });
       logger22.info("Scheduled improvement_review complete", {

package/dist/{consensus-vote-4DCHWMDH.js → consensus-vote-ZDQFTMDT.js}

@@ -11,11 +11,11 @@ import {
   resetCorrelationTracker,
   runConsensusForGoal,
   unwrapVoteOrThrow
-} from "./chunk-KHAB3HWK.js";
+} from "./chunk-5ZLAA73M.js";
 import "./chunk-NAL4EHFM.js";
 import "./chunk-OQB3XC5O.js";
-import "./chunk-TBKGR6GC.js";
-import "./chunk-VK42NFA3.js";
+import "./chunk-AU6QDTRD.js";
+import "./chunk-EXS7P2VP.js";
 import "./chunk-MJQVSJZB.js";
 import "./chunk-N3SKF4YT.js";
 import "./chunk-PU2NTY6U.js";
@@ -50,4 +50,4 @@ export {
   runConsensusForGoal,
   unwrapVoteOrThrow
 };
-//# sourceMappingURL=consensus-vote-4DCHWMDH.js.map
+//# sourceMappingURL=consensus-vote-ZDQFTMDT.js.map

package/dist/{improvement-review-RMKHA4DN.js → improvement-review-HXZA4BQY.js}

@@ -11,9 +11,9 @@ import {
   loadSelfEvalSignals,
   registerImprovementReviewTool,
   runImprovementReview
-} from "./chunk-ICJI6AIF.js";
-import "./chunk-TBKGR6GC.js";
-import "./chunk-VK42NFA3.js";
+} from "./chunk-D472Q66M.js";
+import "./chunk-AU6QDTRD.js";
+import "./chunk-EXS7P2VP.js";
 import "./chunk-MJQVSJZB.js";
 import "./chunk-6Q4XUAE5.js";
 import "./chunk-GBHJ37V3.js";
@@ -33,4 +33,4 @@ export {
   registerImprovementReviewTool,
   runImprovementReview
 };
-//# sourceMappingURL=improvement-review-RMKHA4DN.js.map
+//# sourceMappingURL=improvement-review-HXZA4BQY.js.map

package/dist/index.d.ts

@@ -24263,8 +24263,13 @@ interface ExecuteExpertResponse {
  * Uses MCP Tasks primitive (SEP-1686) via registerToolTask for async execution.
  * taskSupport: 'optional' preserves sync fallback for clients without task support.
  *
- * Uses createSecureHandler for standardized security middleware (Issue #531).
- * Includes timeout protection for CVE-2026-0621 mitigation (Issue #271).
+ * NOT wrapped by createSecureHandler or wrapToolWithTimeout (#4981). Of the 46
+ * tool modules this is the only one outside the standard middleware stack: it
+ * registers through registerToolTask, so it creates no RequestContext, emits
+ * no `Tool invocation started` pair, and no tool-audit record. An earlier
+ * version of this comment claimed it used createSecureHandler (Issue #531)
+ * and that it carried the #271 timeout protection; neither is true as wired.
+ * Whether the tasks primitive can take those wrappers is part of #4978.
  *
  * @category MCP
  * @param server - MCP server instance

package/dist/index.js

@@ -553,7 +553,7 @@ import {
   withLogging,
   withRetry,
   withRetryWrapper
-} from "./chunk-YLSSV4HV.js";
+} from "./chunk-OXD4H42X.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -574,7 +574,7 @@ import {
   connectTransport,
   createServer,
   startStdioServer
-} from "./chunk-DJWIO7OX.js";
+} from "./chunk-WFWB3MVD.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
@@ -632,7 +632,7 @@ import {
   generateProposalId,
   parseAgentPairKey,
   registerConsensusVoteTool
-} from "./chunk-KHAB3HWK.js";
+} from "./chunk-5ZLAA73M.js";
 import "./chunk-NAL4EHFM.js";
 import {
   allOf
@@ -683,7 +683,7 @@ import {
 import {
   ImprovementReviewInputSchema,
   registerImprovementReviewTool
-} from "./chunk-ICJI6AIF.js";
+} from "./chunk-D472Q66M.js";
 import {
   AgentPerformanceSchema,
   ConsensusAlgorithmSchema,
@@ -719,10 +719,10 @@ import {
   toolSuccess,
   toolSuccessStructured,
   validateToolInput
-} from "./chunk-TBKGR6GC.js";
+} from "./chunk-AU6QDTRD.js";
 import {
   VERSION
-} from "./chunk-VK42NFA3.js";
+} from "./chunk-EXS7P2VP.js";
 import {
   AuditTrail,
   MAX_STRIPPED_ELEMENTS_PER_EVENT,
@@ -4729,7 +4729,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-4DCHWMDH.js");
+    const { executeVoting } = await import("./consensus-vote-ZDQFTMDT.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);

package/dist/{setup-data-dir-5PVWTCFL.js → setup-data-dir-AUUPYRZO.js}

@@ -2,11 +2,11 @@ import {
   NEXUS_DATA_DIR,
   describeDataDirFix,
   initDataDirectories
-} from "./chunk-DJWIO7OX.js";
+} from "./chunk-WFWB3MVD.js";
 import "./chunk-VCM2NHH7.js";
 import "./chunk-NAL4EHFM.js";
 import "./chunk-OQB3XC5O.js";
-import "./chunk-VK42NFA3.js";
+import "./chunk-EXS7P2VP.js";
 import "./chunk-6T3EPABN.js";
 import "./chunk-IED5SFCF.js";
 import "./chunk-QUVWKVKU.js";
@@ -26,4 +26,4 @@ export {
   describeDataDirFix,
   initDataDirectories
 };
-//# sourceMappingURL=setup-data-dir-5PVWTCFL.js.map
+//# sourceMappingURL=setup-data-dir-AUUPYRZO.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-agents",
-  "version": "4.26.7",
+  "version": "4.26.8",
   "description": "Governance substrate for AI coding agents — adversarial PR review, drift-detected rules, tamper-evident audit, and closed-loop outcome routing for Claude, Codex, Gemini, and OpenCode",
   "mcpName": "io.github.nexus-substrate/nexus-agents",
   "license": "MIT",