nexus-agents 7.0.1 → 7.0.2

package/dist/{chunk-HA2MM4C2.js → chunk-KUYKSKPV.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-UJPVBDYG.js";
+} from "./chunk-WLIXCNZ6.js";
 import {
   executeExpert
 } from "./chunk-KJWD2V4K.js";
@@ -47,7 +47,7 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-SS5FADQN.js";
+} from "./chunk-OHULIRP6.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -64,7 +64,7 @@ import {
 } from "./chunk-RLBJTZHA.js";
 import {
   withPrerequisite
-} from "./chunk-6E2M3P5A.js";
+} from "./chunk-AGFXJUTS.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -78,6 +78,7 @@ import {
   getToolAnnotations,
   getToolTimeout,
   measuredTrustTier,
+  sanitizeToolInput,
   toSdkCallback,
   toSdkCallbackWithBudgetCheck,
   toolError,
@@ -88,7 +89,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-PDMWQ2NK.js";
+} from "./chunk-GAYSJGKD.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -47524,7 +47525,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-355WNDBN.js");
+        const { executeVoting } = await import("./consensus-vote-62FAN4ZN.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -48829,32 +48830,45 @@ function absoluteQuorumApprove(reviews, valid) {
   return { decision: "approve", verified: true };
 }
 function buildPrReviewProposal(input) {
+  const sanitizeResult = sanitizeToolInput({
+    prTitle: input.prTitle,
+    prDescription: input.prDescription,
+    prDiff: input.prDiff,
+    repoContext: input.repoContext
+  });
+  const safe = sanitizeResult.sanitized;
   const parts = [];
   parts.push(`# Pull Request Review
 `);
-  parts.push(`**Title:** ${input.prTitle}
+  if (sanitizeResult.commentsRemoved > 0) {
+    parts.push(
+      `> **Note:** ${String(sanitizeResult.commentsRemoved)} HTML comment(s) were removed from the untrusted fields below before you saw them (#5258). Comments are invisible in rendered markdown, so they are stripped rather than trusted. This is routine \u2014 GitHub's default PR template contains one \u2014 and is not by itself evidence of an attack.
+`
+    );
+  }
+  parts.push(`**Title:** ${safe.prTitle}
 `);
   if (input.baseRef !== void 0 && input.headRef !== void 0) {
     parts.push(`**Branches:** ${input.headRef} \u2192 ${input.baseRef}
 `);
   }
-  if (input.repoContext !== void 0 && input.repoContext !== "") {
+  if (safe.repoContext !== void 0 && safe.repoContext !== "") {
     parts.push(`
 **Repo context:**
-${input.repoContext}
+${safe.repoContext}
 `);
   }
-  if (input.prDescription !== void 0 && input.prDescription !== "") {
+  if (safe.prDescription !== void 0 && safe.prDescription !== "") {
     parts.push(`
 **Description:**
-${input.prDescription}
+${safe.prDescription}
 `);
   }
   parts.push(`
 ## Diff
 
 \`\`\`diff
-${input.prDiff}
+${safe.prDiff}
 \`\`\`
 `);
   parts.push(`
@@ -56155,4 +56169,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-HA2MM4C2.js.map
+//# sourceMappingURL=chunk-KUYKSKPV.js.map