nexus-agents 4.37.1 → 5.0.0

package/dist/{chunk-D6TYDK4U.js → chunk-CAQ5KUPL.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-XHW3KDPI.js";
+} from "./chunk-KRIAQJ7L.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2159,4 +2159,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-D6TYDK4U.js.map
+//# sourceMappingURL=chunk-CAQ5KUPL.js.map

package/dist/chunk-EYOJLWOA.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "5.0.0" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-EYOJLWOA.js.map

package/dist/{chunk-IWWPNL5K.js.map → chunk-EYOJLWOA.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts"],"sourcesContent":["/**\n * nexus-agents - Version constant\n *\n * Injected at build time via tsup define from package.json.\n * Do NOT edit this value manually — it is replaced during build.\n */\n\ndeclare const __NEXUS_VERSION__: string;\n\nexport const VERSION: string = typeof __NEXUS_VERSION__ !== 'undefined' ? __NEXUS_VERSION__ : 'dev';\n"],"mappings":";AASO,IAAM,UAAkB,OAA2C,WAAoB;","names":[]}
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["/**\n * nexus-agents - Version constant\n *\n * Injected at build time via tsup define from package.json.\n * Do NOT edit this value manually — it is replaced during build.\n */\n\ndeclare const __NEXUS_VERSION__: string;\n\nexport const VERSION: string = typeof __NEXUS_VERSION__ !== 'undefined' ? __NEXUS_VERSION__ : 'dev';\n"],"mappings":";AASO,IAAM,UAAkB,OAA2C,UAAoB;","names":[]}

package/dist/{chunk-XHW3KDPI.js → chunk-KRIAQJ7L.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-IWWPNL5K.js";
+} from "./chunk-EYOJLWOA.js";
 import {
   emitClawGuardViolation
 } from "./chunk-ZSNWRX2B.js";
@@ -652,7 +652,21 @@ var XML_INJECTION_PATTERN = /<\/?(system|human|assistant|instructions|user|promp
 var INJECTION_DETECTORS = [
   { name: "system_prompt_override", pattern: /ignore (?:all )?previous (?:instructions|rules)/i },
   { name: "role_impersonation", pattern: /i(?:'m| am) the (?:repo |project )?(?:owner|admin)/i },
-  { name: "hidden_instruction", pattern: /<!--[\s\S]*?(?:execute|delete|merge|apply)[\s\S]*?-->/i }
+  // The trigger must sit INSIDE one comment. `[\s\S]*?` used to cross an
+  // intervening `-->`, so any body with an opening comment, a trigger word
+  // anywhere in ordinary prose, and a later closing comment matched — a real
+  // PR body like "<!-- header -->\nsafe to merge after CI\n<!-- footer -->"
+  // was flagged (#5258). `(?:(?!-->)[\s\S])*?` is the standard tempered-dot
+  // form: consume any character that does not begin the terminator.
+  //
+  // KNOWN RESIDUAL: GitHub's default PR template contains
+  // "<!-- Please delete options that are not relevant -->", where the trigger
+  // genuinely is inside a single comment. Containment cannot help there; the
+  // trigger vocabulary overlaps ordinary English. Tracked in #5258.
+  {
+    name: "hidden_instruction",
+    pattern: /<!--(?:(?!-->)[\s\S])*?(?:execute|delete|merge|apply)(?:(?!-->)[\s\S])*?-->/i
+  }
 ];
 function sanitizeString(value) {
   const MAX_PASSES = 5;
@@ -2116,4 +2130,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-XHW3KDPI.js.map
+//# sourceMappingURL=chunk-KRIAQJ7L.js.map