nexus-agents 4.36.0 → 4.37.0

package/dist/{chunk-ZQ7OWDUQ.js → chunk-2VZH3Z2D.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-3RMLFFBU.js";
+} from "./chunk-64VWIHJF.js";
 import {
   emitClawGuardViolation
 } from "./chunk-ZSNWRX2B.js";
@@ -2116,4 +2116,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-ZQ7OWDUQ.js.map
+//# sourceMappingURL=chunk-2VZH3Z2D.js.map

package/dist/chunk-64VWIHJF.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "4.37.0" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-64VWIHJF.js.map

package/dist/{chunk-ON6PAMK2.js → chunk-GRG5DKZV.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-OQB3XC5O.js";
 import {
   VERSION
-} from "./chunk-3RMLFFBU.js";
+} from "./chunk-64VWIHJF.js";
 import {
   capitalize
 } from "./chunk-6T3EPABN.js";
@@ -1225,7 +1225,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-VRQ67VE7.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-WRYKIBU6.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1327,4 +1327,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-ON6PAMK2.js.map
+//# sourceMappingURL=chunk-GRG5DKZV.js.map

package/dist/{chunk-TDKEGV7D.js → chunk-H5Y7VFAE.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-ON6PAMK2.js";
+} from "./chunk-GRG5DKZV.js";
 import {
   executeExpert
 } from "./chunk-WTQEMR7D.js";
@@ -47,7 +47,7 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-4TEFLHHX.js";
+} from "./chunk-YPCOOGFI.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -64,7 +64,7 @@ import {
 } from "./chunk-C2LEM7RD.js";
 import {
   withPrerequisite
-} from "./chunk-O4DD7R6D.js";
+} from "./chunk-SIWSOSV3.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -88,7 +88,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-ZQ7OWDUQ.js";
+} from "./chunk-2VZH3Z2D.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -47305,7 +47305,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-6M47CZWC.js");
+        const { executeVoting } = await import("./consensus-vote-X7DPY5S3.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -48779,6 +48779,14 @@ function registerPrReviewTool(server, deps) {
   const description = "Run multi-voter consensus review on a PR diff (#2233). 5 voters (architect, security, devex, catfish, scope_steward) each emit approve/request_changes/abstain with reasoning and citations. Reuses consensus_vote infra; experimental.";
   const secureHandler = createSecureHandler(makePrReviewHandler(deps.gatewayAdapters), {
     toolName: "pr_review",
+    // Everything this tool reviews is attacker-controlled. `buildPrompt`
+    // interpolates `prDescription` and `prDiff` into the voter prompt a few
+    // lines above "Decide: should it be merged as-is? APPROVE if ...", so an
+    // injection payload in a PR body would sit beside the verdict instruction
+    // in front of five model voters. `.rules/untrusted-input.md` classifies PR
+    // bodies as Tier 2/3; without this the handler took the permissive
+    // 'standard' default and `checkSecurityTier` never ran.
+    securityTier: "external",
     rateLimiter: deps.rateLimiter,
     logger: logger58
   });
@@ -55933,4 +55941,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-TDKEGV7D.js.map
+//# sourceMappingURL=chunk-H5Y7VFAE.js.map