nexus-agents 4.37.1 → 4.37.2

package/dist/chunk-3BL6HLHW.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "4.37.2" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-3BL6HLHW.js.map

package/dist/{chunk-JKCSBEVL.js → chunk-BL2RCXGC.js}

@@ -23,7 +23,7 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-XHW3KDPI.js";
+} from "./chunk-DLWXTCLB.js";
 import {
   assessPanelIndependence,
   countDistinctModels,
@@ -6848,4 +6848,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-JKCSBEVL.js.map
+//# sourceMappingURL=chunk-BL2RCXGC.js.map

package/dist/{chunk-D6TYDK4U.js → chunk-DIMPT3NS.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-XHW3KDPI.js";
+} from "./chunk-DLWXTCLB.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2159,4 +2159,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-D6TYDK4U.js.map
+//# sourceMappingURL=chunk-DIMPT3NS.js.map

package/dist/{chunk-XHW3KDPI.js → chunk-DLWXTCLB.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-IWWPNL5K.js";
+} from "./chunk-3BL6HLHW.js";
 import {
   emitClawGuardViolation
 } from "./chunk-ZSNWRX2B.js";
@@ -652,7 +652,21 @@ var XML_INJECTION_PATTERN = /<\/?(system|human|assistant|instructions|user|promp
 var INJECTION_DETECTORS = [
   { name: "system_prompt_override", pattern: /ignore (?:all )?previous (?:instructions|rules)/i },
   { name: "role_impersonation", pattern: /i(?:'m| am) the (?:repo |project )?(?:owner|admin)/i },
-  { name: "hidden_instruction", pattern: /<!--[\s\S]*?(?:execute|delete|merge|apply)[\s\S]*?-->/i }
+  // The trigger must sit INSIDE one comment. `[\s\S]*?` used to cross an
+  // intervening `-->`, so any body with an opening comment, a trigger word
+  // anywhere in ordinary prose, and a later closing comment matched — a real
+  // PR body like "<!-- header -->\nsafe to merge after CI\n<!-- footer -->"
+  // was flagged (#5258). `(?:(?!-->)[\s\S])*?` is the standard tempered-dot
+  // form: consume any character that does not begin the terminator.
+  //
+  // KNOWN RESIDUAL: GitHub's default PR template contains
+  // "<!-- Please delete options that are not relevant -->", where the trigger
+  // genuinely is inside a single comment. Containment cannot help there; the
+  // trigger vocabulary overlaps ordinary English. Tracked in #5258.
+  {
+    name: "hidden_instruction",
+    pattern: /<!--(?:(?!-->)[\s\S])*?(?:execute|delete|merge|apply)(?:(?!-->)[\s\S])*?-->/i
+  }
 ];
 function sanitizeString(value) {
   const MAX_PASSES = 5;
@@ -2116,4 +2130,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-XHW3KDPI.js.map
+//# sourceMappingURL=chunk-DLWXTCLB.js.map