nexus-agents 8.0.1 → 8.1.1

package/dist/{chunk-RB3X45G5.js → chunk-6NCZY4AG.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-OQB3XC5O.js";
 import {
   VERSION
-} from "./chunk-227USJYZ.js";
+} from "./chunk-PZ5IK3IG.js";
 import {
   capitalize
 } from "./chunk-6T3EPABN.js";
@@ -1201,7 +1201,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-SBZB5KMI.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-U7HJ7WKM.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1303,4 +1303,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-RB3X45G5.js.map
+//# sourceMappingURL=chunk-6NCZY4AG.js.map

package/dist/{chunk-INNWBLE4.js → chunk-AK5TXCIS.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-227USJYZ.js";
+} from "./chunk-PZ5IK3IG.js";
 import {
   emitClawGuardViolation
 } from "./chunk-U5YJKJK2.js";
@@ -2231,4 +2231,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-INNWBLE4.js.map
+//# sourceMappingURL=chunk-AK5TXCIS.js.map

package/dist/{chunk-GHIHBN4J.js → chunk-H4GHKPHJ.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-RB3X45G5.js";
+} from "./chunk-6NCZY4AG.js";
 import {
   executeExpert
 } from "./chunk-CCRTVIXF.js";
@@ -47,7 +47,7 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-VMMMRHCW.js";
+} from "./chunk-ZM5KND5Z.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -64,7 +64,7 @@ import {
 } from "./chunk-HS43MFL4.js";
 import {
   withPrerequisite
-} from "./chunk-4VZ5GK5B.js";
+} from "./chunk-WRKQAEPN.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -89,7 +89,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-INNWBLE4.js";
+} from "./chunk-AK5TXCIS.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -1045,6 +1045,14 @@ var NexusEnvSchema = z10.object({
   // Lowercased before parsing, so mixed case is genuinely accepted.
   NEXUS_REPUTATION_GATING: z10.string().refine((v) => ["off", "audit", "enforce"].includes(v.toLowerCase()), {
     message: "Must be one of: off, audit, enforce"
+  }).optional(),
+  // #5382: rollout gate for HostileInputFirewall behaviour changes. Defaults to
+  // `off` — unlike NEXUS_REPUTATION_GATING, which defaults to `enforce` — because
+  // the firewall is a PUBLISHED API with external callers, so a stricter default
+  // would be a silent breaking change. Same tri-state and same coercion as its
+  // two sibling flags; see security/firewall/firewall-policy-mode.ts.
+  NEXUS_FIREWALL_POLICY: z10.string().refine((v) => ["off", "audit", "enforce"].includes(v.toLowerCase()), {
+    message: "Must be one of: off, audit, enforce"
   }).optional()
 });
 var KNOWN_NAMES = Object.keys(NexusEnvSchema.shape);
@@ -47521,7 +47529,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-6MHOJFIA.js");
+        const { executeVoting } = await import("./consensus-vote-VZEMJNOW.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -56164,4 +56172,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-GHIHBN4J.js.map
+//# sourceMappingURL=chunk-H4GHKPHJ.js.map