nexus-agents 7.0.1 → 7.0.2

package/dist/chunk-37JIYDVH.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "7.0.2" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-37JIYDVH.js.map

package/dist/{chunk-6E2M3P5A.js → chunk-AGFXJUTS.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-PDMWQ2NK.js";
+} from "./chunk-GAYSJGKD.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2159,4 +2159,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-6E2M3P5A.js.map
+//# sourceMappingURL=chunk-AGFXJUTS.js.map

package/dist/{chunk-PDMWQ2NK.js → chunk-GAYSJGKD.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-MNG6VKJP.js";
+} from "./chunk-37JIYDVH.js";
 import {
   emitClawGuardViolation
 } from "./chunk-6Q3KSZVI.js";
@@ -653,48 +653,50 @@ function measuredTrustTier(context) {
 
 // src/mcp/middleware/tool-input-sanitizer.ts
 var XML_INJECTION_PATTERN = /<\/?(system|human|assistant|instructions|user|prompt|context|tool_use|tool_result)\b[^>]*>/gi;
-var HIDDEN_INSTRUCTION_TRIGGER = /execute|delete|merge|apply/i;
-function hasHiddenInstruction(value) {
+var INJECTION_DETECTORS = [
+  { name: "system_prompt_override", pattern: /ignore (?:all )?previous (?:instructions|rules)/i },
+  { name: "role_impersonation", pattern: /i(?:'m| am) the (?:repo |project )?(?:owner|admin)/i }
+];
+function stripHtmlComments(value) {
   const OPEN = "<!--";
   const CLOSE = "-->";
+  let out = "";
   let from = 0;
+  let removed = 0;
   for (; ; ) {
     const open = value.indexOf(OPEN, from);
-    if (open === -1) return false;
+    if (open === -1) break;
     const close = value.indexOf(CLOSE, open + OPEN.length);
-    if (close === -1) return false;
-    if (HIDDEN_INSTRUCTION_TRIGGER.test(value.slice(open + OPEN.length, close))) {
-      return true;
-    }
+    if (close === -1) break;
+    out += value.slice(from, open);
     from = close + CLOSE.length;
+    removed++;
   }
+  return { cleaned: removed === 0 ? value : out + value.slice(from), removed };
 }
-var INJECTION_DETECTORS = [
-  { name: "system_prompt_override", pattern: /ignore (?:all )?previous (?:instructions|rules)/i },
-  { name: "role_impersonation", pattern: /i(?:'m| am) the (?:repo |project )?(?:owner|admin)/i },
-  // `hidden_instruction` is a scan, not a pattern — see hasHiddenInstruction.
-  { name: "hidden_instruction", match: hasHiddenInstruction }
-];
 function sanitizeString(value) {
   const MAX_PASSES = 5;
   let cleaned = value;
+  let commentsRemoved = 0;
   for (let pass = 0; pass < MAX_PASSES; pass++) {
     XML_INJECTION_PATTERN.lastIndex = 0;
-    const next = cleaned.replace(XML_INJECTION_PATTERN, "");
-    if (next === cleaned) break;
-    cleaned = next;
+    const afterTags = cleaned.replace(XML_INJECTION_PATTERN, "");
+    const { cleaned: afterComments, removed } = stripHtmlComments(afterTags);
+    commentsRemoved += removed;
+    if (afterComments === cleaned) break;
+    cleaned = afterComments;
   }
-  return { cleaned, modified: cleaned !== value };
+  return {
+    cleaned,
+    modified: cleaned !== value,
+    commentsRemoved
+  };
 }
 function detectPatterns(value) {
   const detected = [];
-  for (const { name, pattern, match } of INJECTION_DETECTORS) {
-    if (pattern !== void 0) {
-      pattern.lastIndex = 0;
-      if (pattern.test(value)) detected.push(name);
-    } else if (match?.(value) === true) {
-      detected.push(name);
-    }
+  for (const { name, pattern } of INJECTION_DETECTORS) {
+    pattern.lastIndex = 0;
+    if (pattern.test(value)) detected.push(name);
   }
   return detected;
 }
@@ -704,8 +706,9 @@ function sanitizeValue(value, stats) {
     if (patterns.length > 0) {
       stats.patterns.push(...patterns);
     }
-    const { cleaned, modified } = sanitizeString(value);
+    const { cleaned, modified, commentsRemoved } = sanitizeString(value);
     if (modified) stats.count++;
+    stats.commentsRemoved += commentsRemoved;
     return cleaned;
   }
   if (Array.isArray(value)) {
@@ -722,16 +725,23 @@ function sanitizeValue(value, stats) {
 }
 function sanitizeToolInput(args) {
   if (args === void 0 || args === null) {
-    return { sanitized: args, wasModified: false, modifiedCount: 0, detectedPatterns: [] };
+    return {
+      sanitized: args,
+      wasModified: false,
+      modifiedCount: 0,
+      detectedPatterns: [],
+      commentsRemoved: 0
+    };
   }
-  const stats = { count: 0, patterns: [] };
+  const stats = { count: 0, patterns: [], commentsRemoved: 0 };
   const sanitized = sanitizeValue(args, stats);
   const uniquePatterns = [...new Set(stats.patterns)];
   return {
     sanitized,
     wasModified: stats.count > 0,
     modifiedCount: stats.count,
-    detectedPatterns: uniquePatterns
+    detectedPatterns: uniquePatterns,
+    commentsRemoved: stats.commentsRemoved
   };
 }
 function logSanitizationResult(result, logger, toolName) {
@@ -741,6 +751,12 @@ function logSanitizationResult(result, logger, toolName) {
       modifiedFields: result.modifiedCount
     });
   }
+  if (result.commentsRemoved > 0) {
+    logger.warn("Tool input sanitized \u2014 HTML comments removed", {
+      tool: toolName,
+      commentsRemoved: result.commentsRemoved
+    });
+  }
   if (result.detectedPatterns.length > 0) {
     logger.warn("Injection patterns detected in tool input", {
       tool: toolName,
@@ -2178,6 +2194,7 @@ export {
   logToolInvocationAudit,
   logPolicyAudit,
   logRateLimitAudit,
+  sanitizeToolInput,
   defaultRetryable,
   coarsenFailureCategory,
   toolSuccess,
@@ -2214,4 +2231,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-PDMWQ2NK.js.map
+//# sourceMappingURL=chunk-GAYSJGKD.js.map