nexus-agents 6.3.17 → 7.0.1

package/dist/{chunk-LT2LUIQK.js → chunk-HA2MM4C2.js}

@@ -1,6 +1,6 @@
 import {
   generateSecurityPlan
-} from "./chunk-L3ZVRVHA.js";
+} from "./chunk-VYAXMVI5.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-HFOQKCD2.js";
@@ -21,10 +21,10 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-OI6XXZOE.js";
+} from "./chunk-UJPVBDYG.js";
 import {
   executeExpert
-} from "./chunk-ET67NYCJ.js";
+} from "./chunk-KJWD2V4K.js";
 import {
   JobStatusSchema,
   VOTER_ROLES,
@@ -47,24 +47,24 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-IRHLTW3P.js";
+} from "./chunk-SS5FADQN.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-LUPEM2NF.js";
+} from "./chunk-UVO673OY.js";
 import {
   IssueTriage
-} from "./chunk-T47DKINM.js";
+} from "./chunk-Q6IODDEA.js";
 import {
   resolveEnvMode,
   sanitizeInput
-} from "./chunk-NVFYMGCC.js";
+} from "./chunk-RLBJTZHA.js";
 import {
   withPrerequisite
-} from "./chunk-V2OHGKB5.js";
+} from "./chunk-6E2M3P5A.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -88,18 +88,18 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-N34KB6DR.js";
+} from "./chunk-PDMWQ2NK.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
   emitPipelinePolicyEvent
-} from "./chunk-DR7DYEFQ.js";
+} from "./chunk-6Q3KSZVI.js";
 import {
   EventTopics,
   createEvent,
   getGlobalEventBus,
   getGlobalRegistry
-} from "./chunk-KXQNETUB.js";
+} from "./chunk-D6TL5GZV.js";
 import {
   IDENTIFIER_RE,
   LANG_VALUES,
@@ -132,29 +132,29 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-RSSLLOU6.js";
+} from "./chunk-QAHGHWC7.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   resolveInsideRoot
-} from "./chunk-VNULIWRK.js";
+} from "./chunk-K2AWJGQO.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-SZZRE2VU.js";
+} from "./chunk-XZEYSIGG.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-DXIZQRP5.js";
+} from "./chunk-7U7HAYPB.js";
 import {
   STOPWORDS,
   truncateWithInfo
 } from "./chunk-6T3EPABN.js";
 import {
   createSessionMemory
-} from "./chunk-6ZYJ46HN.js";
+} from "./chunk-JNZ3D5B5.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -172,25 +172,25 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-KYCJ47JZ.js";
+} from "./chunk-BTWKDT4F.js";
 import {
   BaseAdapter,
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-UAKFLKW3.js";
+} from "./chunk-LVYRGNOC.js";
 import {
   DEFAULTS
-} from "./chunk-KLQ352NK.js";
+} from "./chunk-ZD4VEHEG.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-PCZJMNPT.js";
+} from "./chunk-6GYTTWNM.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-XOCNOKIV.js";
+} from "./chunk-33FI7W3G.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -296,7 +296,7 @@ import {
   selectStrategyByManifest,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-UOHOHH72.js";
+} from "./chunk-Y742U2YM.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
@@ -29692,7 +29692,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-ECGC4EFR.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-3OO6N4V6.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -44218,6 +44218,23 @@ var AuditEventSchema = z97.object({
   // Policy and security
   policyName: z97.string().optional(),
   policyDecision: z97.string().optional(),
+  /**
+   * Which occurrence of this `{tool, rule}` near-miss the record represents
+   * (#5228 review). Present only on a sampled `would_deny`.
+   *
+   * TYPED and queryable rather than prose in `description`. The first version
+   * of the sampler wrote the ordinal into the reason string to "avoid a second
+   * schema widening" — two reviewers rejected that, correctly: a machine
+   * consumer counting records would read 14 records as 14 near-misses when
+   * 10,000 occurred, so the record did not structurally represent its own
+   * partial coverage. That is the defect this PR exists to fix, reintroduced
+   * one field over. An additive OPTIONAL field is a minor change, not a second
+   * break, so the stated reason for avoiding it did not hold.
+   *
+   * Absent means "not sampled" — every occurrence was recorded — which is
+   * distinct from `1`.
+   */
+  policyOccurrence: z97.number().int().min(1).optional(),
   violationType: z97.string().optional(),
   // Integrity (for tamper-evidence)
   previousHash: z97.string().optional(),
@@ -44251,6 +44268,8 @@ var AuditEventInputSchema = z97.object({
   metadata: z97.record(z97.string(), z97.unknown()).optional(),
   policyName: z97.string().optional(),
   policyDecision: z97.string().optional(),
+  /** @see AuditEventSchema.policyOccurrence (#5228 review). */
+  policyOccurrence: z97.number().int().min(1).optional(),
   violationType: z97.string().optional()
 });
 var AuditLogConfigSchema = z97.object({
@@ -44712,6 +44731,20 @@ var SYSTEM_ACTOR = {
   id: "nexus-agents",
   name: "Nexus Agents System"
 };
+function policyDecisionFields(decision) {
+  switch (decision) {
+    case "allow":
+      return { severity: "info", outcome: "success" };
+    case "deny":
+      return { severity: "warning", outcome: "denied" };
+    case "would_deny":
+      return { severity: "warning", outcome: "success" };
+    default: {
+      const unreachable = decision;
+      throw new Error(`Unhandled policy decision: ${String(unreachable)}`);
+    }
+  }
+}
 var DROP_WARN_INTERVAL = 1e3;
 var AuditLogger = class {
   storage;
@@ -44868,14 +44901,14 @@ var AuditLogger = class {
       requestId: opts.requestId,
       toolName: opts.toolName,
       durationMs: opts.durationMs,
+      ...opts.policyDecision === void 0 ? {} : { policyDecision: opts.policyDecision },
       metadata: opts.metadata
     });
   }
   logPolicyDecision(opts) {
     this.log({
       category: "authorization",
-      severity: opts.decision === "deny" ? "warning" : "info",
-      outcome: opts.decision === "allow" ? "success" : "denied",
+      ...policyDecisionFields(opts.decision),
       action: "policy.evaluate",
       description: opts.reason,
       actor: opts.actor,
@@ -44883,6 +44916,7 @@ var AuditLogger = class {
       requestId: opts.requestId,
       policyName: opts.policyName,
       policyDecision: opts.decision,
+      ...opts.occurrence === void 0 ? {} : { policyOccurrence: opts.occurrence },
       metadata: opts.metadata
     });
   }
@@ -45538,7 +45572,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-A7JXRGSV.js");
+    const { createIssueTriage } = await import("./issue-triage-2LNYGQRJ.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -45566,7 +45600,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-DWBQLHPG.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-PWRVRFDG.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -47257,7 +47291,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-M2LUBDCR.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-YQQVPLKM.js");
     const { getLearningDir } = await import("./learning-persistence-7O5QYDM7.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -47319,7 +47353,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-5CLHRWID.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-2SMMUPTB.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -47353,7 +47387,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-XMWNDDHY.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-6AVPMHHM.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -47371,7 +47405,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-M2LUBDCR.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-YQQVPLKM.js");
     const { getLearningDir } = await import("./learning-persistence-7O5QYDM7.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -47490,7 +47524,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-OHOQXNTT.js");
+        const { executeVoting } = await import("./consensus-vote-355WNDBN.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -47919,7 +47953,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-3YBPFYMX.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-QY3DDHTD.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -47990,7 +48024,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-TW3D5JPQ.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-SZU4O2TN.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -51134,7 +51168,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-OTIHI4GK.js");
+    const { createScmProvider } = await import("./factory-UFKRSADE.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -52049,7 +52083,7 @@ async function probeSource(source, includeModelIds) {
   }
 }
 async function defaultSources(includeOpenRouter) {
-  const { createAllAdapters: createAllAdapters2 } = await import("./factory-Q7D2MNS2.js");
+  const { createAllAdapters: createAllAdapters2 } = await import("./factory-3BZDQQYM.js");
   const adapters = createAllAdapters2();
   return buildDefaultModelSources(adapters, { includeOpenRouter });
 }
@@ -56121,4 +56155,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-LT2LUIQK.js.map
+//# sourceMappingURL=chunk-HA2MM4C2.js.map