nexus-agents 6.3.17 → 7.0.1

package/dist/{chunk-MB2YIETU.js → chunk-IWTK6FDT.js}

@@ -4,7 +4,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-UOHOHH72.js";
+} from "./chunk-Y742U2YM.js";
 
 // src/scm/types.ts
 var ScmError = class extends Error {
@@ -263,4 +263,4 @@ export {
   ScmError,
   GitHubProvider
 };
-//# sourceMappingURL=chunk-MB2YIETU.js.map
+//# sourceMappingURL=chunk-IWTK6FDT.js.map

package/dist/{chunk-5EEEPQZY.js → chunk-JJT7NVNY.js}

@@ -12,11 +12,11 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-NVFYMGCC.js";
+} from "./chunk-RLBJTZHA.js";
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-UOHOHH72.js";
+} from "./chunk-Y742U2YM.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
 import { randomUUID } from "crypto";
@@ -303,4 +303,4 @@ export {
   createFailedReview,
   reviewPostingBlock
 };
-//# sourceMappingURL=chunk-5EEEPQZY.js.map
+//# sourceMappingURL=chunk-JJT7NVNY.js.map

package/dist/{chunk-6ZYJ46HN.js → chunk-JNZ3D5B5.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-UOHOHH72.js";
+} from "./chunk-Y742U2YM.js";
 
 // src/context/session-memory.ts
 import * as fs from "fs";
@@ -366,4 +366,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-6ZYJ46HN.js.map
+//# sourceMappingURL=chunk-JNZ3D5B5.js.map

package/dist/{chunk-VNULIWRK.js → chunk-K2AWJGQO.js}

@@ -5,7 +5,7 @@ import {
   getErrorMessage,
   ok,
   parseBoolEnv
-} from "./chunk-UOHOHH72.js";
+} from "./chunk-Y742U2YM.js";
 
 // src/cli/research-helpers-io.ts
 import * as fs2 from "fs/promises";
@@ -156,4 +156,4 @@ export {
   loadPapersRegistry,
   savePapersRegistry
 };
-//# sourceMappingURL=chunk-VNULIWRK.js.map
+//# sourceMappingURL=chunk-K2AWJGQO.js.map

package/dist/{chunk-ET67NYCJ.js → chunk-KJWD2V4K.js}

@@ -1,11 +1,11 @@
 import {
   resolveCliSlot
-} from "./chunk-PCZJMNPT.js";
+} from "./chunk-6GYTTWNM.js";
 import {
   createLogger,
   getTimeProvider,
   isRateLimitText
-} from "./chunk-UOHOHH72.js";
+} from "./chunk-Y742U2YM.js";
 
 // src/pipeline/expert-bridge.ts
 function resolveCliFromModelString(model) {
@@ -21,7 +21,7 @@ async function getMcpConfigPath() {
   if (cachedMcpConfigPath !== null) return cachedMcpConfigPath;
   mcpConfigInitPromise ??= (async () => {
     try {
-      const { generateMcpConfig } = await import("./child-mcp-config-IPWKOUSE.js");
+      const { generateMcpConfig } = await import("./child-mcp-config-ORXLS5HP.js");
       const config = await generateMcpConfig();
       cachedMcpConfigPath = config.configPath;
       cachedMcpConfigCleanup = config.cleanup;
@@ -93,8 +93,8 @@ var routerInitPromise = null;
 async function getRouter() {
   if (cachedRouter !== null) return cachedRouter;
   routerInitPromise ??= (async () => {
-    const { createAllAdapters } = await import("./factory-Q7D2MNS2.js");
-    const { createCompositeRouter } = await import("./composite-router-GEQSU4S3.js");
+    const { createAllAdapters } = await import("./factory-3BZDQQYM.js");
+    const { createCompositeRouter } = await import("./composite-router-GE24MYPP.js");
     const adapters = createAllAdapters();
     if (adapters.size === 0) {
       routerInitPromise = null;
@@ -102,7 +102,7 @@ async function getRouter() {
     }
     cachedRouter = adaptCompositeRouter(createCompositeRouter(adapters));
     try {
-      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-TEW4RTM2.js");
+      const { createCliCircuitBreakerIntegration } = await import("./cli-circuit-breaker-5FYJDS5O.js");
       cachedCircuitBreaker = createCliCircuitBreakerIntegration([...adapters.values()]);
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
@@ -213,4 +213,4 @@ export {
   tokenSplitFromUsage,
   executeExpert
 };
-//# sourceMappingURL=chunk-ET67NYCJ.js.map
+//# sourceMappingURL=chunk-KJWD2V4K.js.map

package/dist/{chunk-UAKFLKW3.js → chunk-LVYRGNOC.js}

@@ -13,7 +13,7 @@ import {
   lookupInTreeCapability,
   ok,
   resolveRetryAfterMs
-} from "./chunk-UOHOHH72.js";
+} from "./chunk-Y742U2YM.js";
 
 // src/config/model-parameter-support.ts
 function parseClaudeMajorMinor(bareId) {
@@ -834,4 +834,4 @@ export {
   DEFAULT_COLLECT_STREAM_MAX_CHUNKS,
   collectStream
 };
-//# sourceMappingURL=chunk-UAKFLKW3.js.map
+//# sourceMappingURL=chunk-LVYRGNOC.js.map

package/dist/chunk-MNG6VKJP.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "7.0.1" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-MNG6VKJP.js.map

package/dist/{chunk-KASDQSEA.js.map → chunk-MNG6VKJP.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts"],"sourcesContent":["/**\n * nexus-agents - Version constant\n *\n * Injected at build time via tsup define from package.json.\n * Do NOT edit this value manually — it is replaced during build.\n */\n\ndeclare const __NEXUS_VERSION__: string;\n\nexport const VERSION: string = typeof __NEXUS_VERSION__ !== 'undefined' ? __NEXUS_VERSION__ : 'dev';\n"],"mappings":";AASO,IAAM,UAAkB,OAA2C,WAAoB;","names":[]}
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["/**\n * nexus-agents - Version constant\n *\n * Injected at build time via tsup define from package.json.\n * Do NOT edit this value manually — it is replaced during build.\n */\n\ndeclare const __NEXUS_VERSION__: string;\n\nexport const VERSION: string = typeof __NEXUS_VERSION__ !== 'undefined' ? __NEXUS_VERSION__ : 'dev';\n"],"mappings":";AASO,IAAM,UAAkB,OAA2C,UAAoB;","names":[]}

package/dist/{chunk-N34KB6DR.js → chunk-PDMWQ2NK.js}

@@ -1,9 +1,9 @@
 import {
   VERSION
-} from "./chunk-KASDQSEA.js";
+} from "./chunk-MNG6VKJP.js";
 import {
   emitClawGuardViolation
-} from "./chunk-DR7DYEFQ.js";
+} from "./chunk-6Q3KSZVI.js";
 import {
   CACHE_TIMEOUTS,
   MCP_TIMEOUTS,
@@ -19,7 +19,7 @@ import {
   getTimeProvider,
   ok,
   resolveToolClassGuardMs
-} from "./chunk-UOHOHH72.js";
+} from "./chunk-Y742U2YM.js";
 import {
   getNexusDataDir
 } from "./chunk-OGHEKPLD.js";
@@ -338,7 +338,11 @@ var PolicyFirewall = class {
       return {
         allowed: true,
         reason: `[WARN MODE] Would be denied: ${decision.reason}`,
-        ruleName: rule.name
+        ruleName: rule.name,
+        // The evaluator is the only place that KNOWS this was a denial the mode
+        // overrode; saying so explicitly is what lets the audit path record it
+        // without inferring the fact from other fields (#4991).
+        overriddenByWarnMode: true
       };
     }
     return denialDecision;
@@ -765,6 +769,79 @@ function stagePolicyFirewallForRollout(firewall, logger) {
   return firewall;
 }
 
+// src/mcp/middleware/would-deny-sampler.ts
+var MAX_TRACKED_PAIRS = 500;
+var IDLE_RESET_MS = 10 * 60 * 1e3;
+var occurrences = /* @__PURE__ */ new Map();
+function pairKey(toolName, ruleName) {
+  return `${toolName}::${ruleName ?? "(unnamed rule)"}`;
+}
+function isPowerOfTwo(n) {
+  return n > 0 && (n & n - 1) === 0;
+}
+function sampleWouldDeny(toolName, ruleName) {
+  if (occurrences.size >= MAX_TRACKED_PAIRS) occurrences.clear();
+  const now = getTimeProvider().now();
+  const key = pairKey(toolName, ruleName);
+  const prior = occurrences.get(key);
+  const stale = prior !== void 0 && now - prior.lastSeenMs > IDLE_RESET_MS;
+  const occurrence = prior === void 0 || stale ? 1 : prior.count + 1;
+  occurrences.set(key, { count: occurrence, lastSeenMs: now });
+  return { emit: isPowerOfTwo(occurrence), occurrence };
+}
+function describeOccurrence(occurrence) {
+  if (occurrence <= 1) return "";
+  return ` (occurrence ${String(occurrence)}; intermediate occurrences of this rule were sampled out)`;
+}
+
+// src/mcp/middleware/policy-audit-emit.ts
+function recordPolicyVerdict(config, requestContext, verdict, ruleName) {
+  const auditLogger = config.auditLogger;
+  if (!auditLogger) return;
+  if (verdict !== "would_deny") {
+    emitPolicyAudit({
+      auditLogger,
+      toolName: config.toolName,
+      ctx: requestContext,
+      decision: verdict,
+      reason: "policy denied"
+    });
+    return;
+  }
+  const sample = sampleWouldDeny(config.toolName, ruleName);
+  if (!sample.emit) return;
+  emitPolicyAudit({
+    auditLogger,
+    toolName: config.toolName,
+    ctx: requestContext,
+    decision: verdict,
+    reason: `policy would have denied (warn mode)${describeOccurrence(sample.occurrence)}`,
+    occurrence: sample.occurrence
+  });
+}
+function emitPolicyAudit({
+  auditLogger,
+  toolName,
+  ctx,
+  decision,
+  reason,
+  occurrence
+}) {
+  const actor = actorFromContext(ctx);
+  auditLogger.logPolicyDecision({
+    policyName: "default",
+    decision,
+    reason,
+    toolName,
+    actor,
+    requestId: ctx.requestId,
+    // Typed and queryable, not only prose in `reason` (#5228 review): a
+    // consumer counting records must be able to see that 14 records stand for
+    // 10,000 occurrences without parsing a sentence.
+    ...occurrence === void 0 ? {} : { occurrence }
+  });
+}
+
 // src/mcp/middleware/secure-handler.ts
 function rateLimitError(nextTokenMs) {
   return toolStructuredError({
@@ -845,15 +922,26 @@ function checkPolicy(opts) {
       reason: decision.reason,
       ruleName: decision.ruleName
     });
-    return policyDeniedError(decision.reason, opts.requestId);
+    return {
+      result: policyDeniedError(decision.reason, opts.requestId),
+      verdict: "deny",
+      ruleName: decision.ruleName
+    };
+  }
+  if (decision.overriddenByWarnMode === true) {
+    opts.logger.debug("Policy would have denied (warn mode)", {
+      reason: decision.reason,
+      ruleName: decision.ruleName
+    });
+    return { result: null, verdict: "would_deny", ruleName: decision.ruleName };
   }
   opts.logger.debug("Policy check passed", { reason: decision.reason });
-  return null;
+  return { result: null, verdict: null };
 }
 function runPolicyCheck(config, sanitizedArgs, mode, logger, requestContext) {
   const firewall = config.policyFirewall ?? getGlobalPolicyFirewall();
-  if (!firewall) return null;
-  const pResult = checkPolicy({
+  if (!firewall) return { error: null, nearMiss: false };
+  const { result, verdict, ruleName } = checkPolicy({
     firewall,
     toolName: config.toolName,
     args: sanitizedArgs,
@@ -862,10 +950,10 @@ function runPolicyCheck(config, sanitizedArgs, mode, logger, requestContext) {
     logger,
     requestId: requestContext.requestId
   });
-  if (pResult && config.auditLogger) {
-    emitPolicyAudit(config.auditLogger, config.toolName, requestContext, "policy denied");
+  if (verdict !== null && config.auditLogger) {
+    recordPolicyVerdict(config, requestContext, verdict, ruleName);
   }
-  return pResult;
+  return { error: result, nearMiss: verdict === "would_deny" };
 }
 async function executeHandler(handler, args, ctx, logger, logLifecycle) {
   const startTime = getTimeProvider().now();
@@ -879,36 +967,25 @@ async function executeHandler(handler, args, ctx, logger, logLifecycle) {
   }
   return result;
 }
-function emitToolAudit(auditLogger, toolName, ctx, result, durationMs) {
+function emitToolAudit({
+  auditLogger,
+  toolName,
+  ctx,
+  outcome,
+  durationMs,
+  nearMiss
+}) {
   const actor = actorFromContext(ctx);
-  const outcome = resultToOutcome(result.isError, false);
   auditLogger.logToolInvocation({
     toolName,
     outcome,
     actor,
     requestId: ctx.requestId,
-    durationMs
-  });
-}
-function emitToolAuditException(auditLogger, toolName, ctx, durationMs) {
-  const actor = actorFromContext(ctx);
-  auditLogger.logToolInvocation({
-    toolName,
-    outcome: "error",
-    actor,
-    requestId: ctx.requestId,
-    durationMs
-  });
-}
-function emitPolicyAudit(auditLogger, toolName, ctx, reason) {
-  const actor = actorFromContext(ctx);
-  auditLogger.logPolicyDecision({
-    policyName: "default",
-    decision: "deny",
-    reason,
-    toolName,
-    actor,
-    requestId: ctx.requestId
+    durationMs,
+    // The fact the sampler must never suppress: this call EXECUTED and a rule
+    // would have denied it. The policy record carries the detail and may be
+    // sampled; this says the action itself was not clean, on every occurrence.
+    ...nearMiss ? { policyDecision: "would_deny" } : {}
   });
 }
 function emitRateLimitAudit(auditLogger, toolName, ctx) {
@@ -937,23 +1014,23 @@ function checkSecurityTier(config, sanitizeResult, logger) {
 }
 function runPreChecks(config, args, mode, requestContext, logger) {
   const sizeResult = checkInputSize(args, logger, requestContext.requestId);
-  if (sizeResult) return { error: sizeResult, sanitizedArgs: args };
+  if (sizeResult) return { error: sizeResult, sanitizedArgs: args, nearMiss: false };
   const sanitizeResult = sanitizeToolInput(args);
   logSanitizationResult(sanitizeResult, logger, config.toolName);
   const sanitizedArgs = sanitizeResult.wasModified ? sanitizeResult.sanitized : args;
   const tierError = checkSecurityTier(config, sanitizeResult, logger);
-  if (tierError !== null) return { error: tierError, sanitizedArgs };
+  if (tierError !== null) return { error: tierError, sanitizedArgs, nearMiss: false };
   if (config.rateLimiter) {
     const rlResult = checkRateLimit(config.rateLimiter, logger);
     if (rlResult) {
       if (config.auditLogger)
         emitRateLimitAudit(config.auditLogger, config.toolName, requestContext);
-      return { error: rlResult, sanitizedArgs };
+      return { error: rlResult, sanitizedArgs, nearMiss: false };
     }
   }
-  const pResult = runPolicyCheck(config, sanitizedArgs, mode, logger, requestContext);
-  if (pResult) return { error: pResult, sanitizedArgs };
-  return { error: null, sanitizedArgs };
+  const policy = runPolicyCheck(config, sanitizedArgs, mode, logger, requestContext);
+  if (policy.error) return { error: policy.error, sanitizedArgs, nearMiss: policy.nearMiss };
+  return { error: null, sanitizedArgs, nearMiss: policy.nearMiss };
 }
 function createSecureHandler(handler, config) {
   const logger = config.logger ?? createLogger({ tool: config.toolName });
@@ -970,17 +1047,16 @@ function createSecureHandler(handler, config) {
     if (inherited === void 0) {
       requestLogger.info("Tool invocation started");
     }
-    const { error: preCheckError, sanitizedArgs } = runPreChecks(
-      config,
-      args,
-      mode,
-      requestContext,
-      requestLogger
-    );
+    const {
+      error: preCheckError,
+      sanitizedArgs,
+      nearMiss
+    } = runPreChecks(config, args, mode, requestContext, requestLogger);
     if (preCheckError) return preCheckError;
     return executeAndAudit(handler, sanitizedArgs, config, {
       requestContext,
       requestLogger,
+      nearMiss,
       logLifecycle: inherited === void 0
     });
   };
@@ -998,25 +1074,28 @@ async function executeAndAudit(handler, sanitizedArgs, config, invocation) {
     );
     sanitizeToolResult(result, requestLogger);
     if (config.auditLogger) {
-      emitToolAudit(
-        config.auditLogger,
-        config.toolName,
-        requestContext,
-        result,
-        getTimeProvider().now() - execStartTime
-      );
+      emitToolAudit({
+        auditLogger: config.auditLogger,
+        toolName: config.toolName,
+        ctx: requestContext,
+        outcome: resultToOutcome(result.isError, false),
+        durationMs: getTimeProvider().now() - execStartTime,
+        nearMiss: invocation.nearMiss
+      });
     }
     return result;
   } catch (error) {
     const rawMessage = error instanceof Error ? error.message : "Unknown error";
     requestLogger.error("Tool execution failed", error instanceof Error ? error : void 0);
     if (config.auditLogger) {
-      emitToolAuditException(
-        config.auditLogger,
-        config.toolName,
-        requestContext,
-        getTimeProvider().now() - execStartTime
-      );
+      emitToolAudit({
+        auditLogger: config.auditLogger,
+        toolName: config.toolName,
+        ctx: requestContext,
+        outcome: "error",
+        durationMs: getTimeProvider().now() - execStartTime,
+        nearMiss: invocation.nearMiss
+      });
     }
     const sanitized = sanitizeOutput(rawMessage, requestLogger);
     return internalError(sanitized, requestContext.requestId);
@@ -2135,4 +2214,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-N34KB6DR.js.map
+//# sourceMappingURL=chunk-PDMWQ2NK.js.map