nexus-agents 8.127.2 → 8.127.3

package/dist/{chunk-MFFQMSZE.js → chunk-4BOMMHUE.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-2IKFZJQO.js";
 import {
   withPrerequisite
-} from "./chunk-PJK7D5WY.js";
+} from "./chunk-HBDVJXZO.js";
 import {
   generateSecurityPlan
 } from "./chunk-DAV5URDU.js";
@@ -41,7 +41,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-ZQWNLCUU.js";
+} from "./chunk-P25EFRTP.js";
 import {
   executeExpert
 } from "./chunk-YMZZVKX7.js";
@@ -96,7 +96,7 @@ import {
   withFileLock,
   withWarnings,
   writeJobCancelled
-} from "./chunk-HBU4TS4G.js";
+} from "./chunk-DMPSZJOB.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -122,12 +122,12 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-KSUHCDKP.js";
+} from "./chunk-CHEE634Q.js";
 import {
   VERSION,
   createRequestContext,
   measuredTrustTier
-} from "./chunk-IPUOSGL7.js";
+} from "./chunk-WWZEJP6X.js";
 import {
   allOf,
   anyOf
@@ -47060,7 +47060,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-UCUFI2OU.js");
+    const { executeVoting } = await import("./consensus-vote-PNVJR6HL.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -48207,7 +48207,7 @@ function createVoteStage({ config, startStage }) {
     const strategy = config.votingStrategy ?? "higher_order";
     await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
     try {
-      const { executeVoting } = await import("./consensus-vote-UCUFI2OU.js");
+      const { executeVoting } = await import("./consensus-vote-PNVJR6HL.js");
       const proposal = buildVoteProposal(plan, research);
       const votingResult = await executeVoting(
         {
@@ -57918,4 +57918,4 @@ export {
   initializeSandbox,
   getSandboxMode
 };
-//# sourceMappingURL=chunk-MFFQMSZE.js.map
+//# sourceMappingURL=chunk-4BOMMHUE.js.map

package/dist/{chunk-KSUHCDKP.js → chunk-CHEE634Q.js}

@@ -5,7 +5,7 @@ import {
   getCurrentRequestContext,
   runWithRequestContext,
   serverCallerInfo
-} from "./chunk-IPUOSGL7.js";
+} from "./chunk-WWZEJP6X.js";
 import {
   DEFAULT_EXECUTION_MODE
 } from "./chunk-ECJ52NSK.js";
@@ -812,17 +812,17 @@ function checkSecurityTier(tier, sanitizeResult, logger) {
     tier
   };
 }
-function emitSecurityTierAudit(auditLogger, toolName, ctx, refusal) {
+function emitSecurityTierAudit(auditLogger, toolName, ctx, refusal2) {
   auditLogger.logSecurityEvent({
-    eventType: refusal.eventType,
+    eventType: refusal2.eventType,
     // `critical` is this enum's security-violation level ('info' / 'warning' /
     // 'critical'); a refused injection attempt is not routine noise, and the
     // level is what a downstream consumer filters on.
     severity: "critical",
     actor: actorFromContext(ctx),
-    description: refusal.eventType === "sanitization_incomplete" ? `Tool '${toolName}' refused input the sanitizer could not reduce to a fixed point.` : `Tool '${toolName}' refused input carrying injection patterns [${refusal.patterns.join(", ")}].`,
+    description: refusal2.eventType === "sanitization_incomplete" ? `Tool '${toolName}' refused input the sanitizer could not reduce to a fixed point.` : `Tool '${toolName}' refused input carrying injection patterns [${refusal2.patterns.join(", ")}].`,
     requestId: ctx.requestId,
-    metadata: { toolName, tier: refusal.tier, patterns: [...refusal.patterns] }
+    metadata: { toolName, tier: refusal2.tier, patterns: [...refusal2.patterns] }
   });
 }
 
@@ -1156,6 +1156,84 @@ function checkPolicyForDispatchedTool(opts) {
   ).error;
 }
 
+// src/mcp/middleware/install-state.ts
+import { readFileSync, statSync } from "node:fs";
+import { basename, dirname, isAbsolute, relative, resolve as resolve2, sep as sep2 } from "node:path";
+import { fileURLToPath } from "node:url";
+var moduleDirectory = dirname(fileURLToPath(import.meta.url));
+var packagePath = basename(moduleDirectory) === "dist" ? resolve2(moduleDirectory, "../package.json") : void 0;
+var cachedMtime;
+var installedVersion = VERSION;
+var refusal;
+var warned = false;
+function warnOnce(logger, message) {
+  if (warned) return;
+  warned = true;
+  logger.warn(message);
+}
+function refuseInstall(version, logger) {
+  const message = `nexus-agents was upgraded from ${VERSION} to ${version} while this MCP server was running; restart the MCP server (or your client) to load the new version.`;
+  warnOnce(logger, message);
+  refusal = toolStructuredError({ errorCategory: "business", message });
+  return refusal;
+}
+function checkRunningInstall(logger) {
+  if (packagePath === void 0) {
+    warnOnce(
+      logger,
+      "Running install check unmeasured: starting package.json cannot be determined; skipping check."
+    );
+    return void 0;
+  }
+  if (refusal !== void 0) return refusal;
+  try {
+    const mtime = statSync(packagePath).mtimeMs;
+    if (mtime !== cachedMtime) {
+      installedVersion = readInstalledVersion(packagePath);
+      cachedMtime = mtime;
+    }
+    return installedVersion === VERSION ? void 0 : refuseInstall(installedVersion, logger);
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      return refuseInstall("removed", logger);
+    }
+    const message = "Running install check could not read package.json; restart the MCP server (or your client).";
+    warnOnce(logger, message);
+    return toolStructuredError({ errorCategory: "internal", message });
+  }
+}
+function mapInstallModuleError(error, logger) {
+  if (packagePath === void 0) return void 0;
+  const target = missingModuleTarget(error);
+  if (target === void 0) return void 0;
+  const path = moduleTargetPath(target);
+  if (path === void 0) return void 0;
+  if (!isAbsolute(path)) return void 0;
+  const within = relative(moduleDirectory, path);
+  if (within === "" || within === ".." || within.startsWith(`..${sep2}`) || isAbsolute(within))
+    return void 0;
+  return checkRunningInstall(logger) ?? refuseInstall("unknown (installation changed)", logger);
+}
+function moduleTargetPath(target) {
+  try {
+    return target.startsWith("file:") ? fileURLToPath(target) : target;
+  } catch {
+    return void 0;
+  }
+}
+function readInstalledVersion(path) {
+  const pkg = JSON.parse(readFileSync(path, "utf8"));
+  if (typeof pkg !== "object" || pkg === null || !("version" in pkg) || typeof pkg.version !== "string") {
+    throw new Error("Installed package.json has no version");
+  }
+  return pkg.version;
+}
+function missingModuleTarget(error) {
+  if (!(error instanceof Error) || !("code" in error)) return void 0;
+  if (error.code !== "ERR_MODULE_NOT_FOUND" && error.code !== "MODULE_NOT_FOUND") return void 0;
+  return /Cannot find module ['"]([^'"]+)['"]/.exec(error.message)?.[1];
+}
+
 // src/mcp/middleware/secure-handler.ts
 function internalError(message, requestId) {
   return toolStructuredError({
@@ -1276,11 +1354,11 @@ function runPreChecks(config, args, mode, requestContext, logger) {
     // sanitization touched it.
     ...measureRawFields(config.rawHashFields, args)
   };
-  const refusal = checkSecurityTier(config.securityTier ?? "standard", sanitizeResult, logger);
-  if (refusal !== null) {
+  const refusal2 = checkSecurityTier(config.securityTier ?? "standard", sanitizeResult, logger);
+  if (refusal2 !== null) {
     if (config.auditLogger)
-      emitSecurityTierAudit(config.auditLogger, config.toolName, requestContext, refusal);
-    return { error: refusal.error, sanitizedArgs, nearMiss: false, sanitization };
+      emitSecurityTierAudit(config.auditLogger, config.toolName, requestContext, refusal2);
+    return { error: refusal2.error, sanitizedArgs, nearMiss: false, sanitization };
   }
   if (config.rateLimiter) {
     const denial = checkRateLimit(config.rateLimiter, logger);
@@ -1301,6 +1379,8 @@ function createSecureHandler(handler, config) {
     config = { ...config, auditLogger: registeredAuditLogger };
   const logger = config.logger ?? createLogger({ tool: config.toolName });
   return async (args) => {
+    const installError = checkRunningInstall(logger);
+    if (installError !== void 0) return installError;
     const mode = config.executionMode ?? getGlobalExecutionMode();
     const ctxOpts = {
       toolName: config.toolName,
@@ -1365,6 +1445,8 @@ async function executeAndAudit(handler, sanitizedArgs, config, invocation) {
         nearMiss: invocation.nearMiss
       });
     }
+    const installError = mapInstallModuleError(error, requestLogger);
+    if (installError !== void 0) return installError;
     const sanitized = sanitizeOutput(rawMessage, requestLogger);
     return internalError(sanitized, requestContext.requestId);
   }
@@ -1434,7 +1516,7 @@ async function withProgressHeartbeat(toolName, notifier, operation, intervalMs =
 // src/mcp/middleware/tool-wrapper.ts
 import { randomUUID } from "node:crypto";
 import { appendFileSync, existsSync, mkdirSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { dirname as dirname2, join } from "node:path";
 
 // src/mcp/middleware/timeout-guard.ts
 var DEFAULT_TIMEOUT_MS = TIMEOUT_GUARD.defaultMs;
@@ -1903,7 +1985,7 @@ var ensuredDirs = /* @__PURE__ */ new Set();
 function appendTimeoutMismatchEvent(event) {
   try {
     const path = join(getNexusDataDir(), TIMEOUT_MISMATCH_TELEMETRY_REL_PATH);
-    const dir = dirname(path);
+    const dir = dirname2(path);
     if (!ensuredDirs.has(dir)) {
       if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
       ensuredDirs.add(dir);
@@ -2253,4 +2335,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-KSUHCDKP.js.map
+//# sourceMappingURL=chunk-CHEE634Q.js.map