nexus-agents 8.21.0 → 8.22.0

package/dist/{ast-rule-runner-U6QJUMBQ.js → ast-rule-runner-SDQOIQRZ.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-7WTTZRV2.js";
-import "./chunk-AL44KHC6.js";
+} from "./chunk-ZGN5NO47.js";
+import "./chunk-AITXIX5S.js";
 import "./chunk-7WJGV5DN.js";
 import "./chunk-J7QCZRVK.js";
 import "./chunk-ZPWHCABL.js";
@@ -26,4 +26,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-U6QJUMBQ.js.map
+//# sourceMappingURL=ast-rule-runner-SDQOIQRZ.js.map

package/dist/{child-mcp-config-UEDU27VQ.js → child-mcp-config-ODRZEYO4.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-DKHBIJO4.js";
 import {
   createLogger
-} from "./chunk-AL44KHC6.js";
+} from "./chunk-AITXIX5S.js";
 import "./chunk-7WJGV5DN.js";
 import "./chunk-J7QCZRVK.js";
 import "./chunk-ZPWHCABL.js";
@@ -62,4 +62,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-UEDU27VQ.js.map
+//# sourceMappingURL=child-mcp-config-ODRZEYO4.js.map

package/dist/{chunk-SKBDJDRW.js → chunk-3F2WBIAE.js}

@@ -3,7 +3,7 @@ import {
   MODEL_IDS,
   getTimeProvider,
   resolveModelIdentitySync
-} from "./chunk-AL44KHC6.js";
+} from "./chunk-AITXIX5S.js";
 
 // src/config/model-availability.ts
 var DEFAULT_TTL_MS = 6e4;
@@ -150,4 +150,4 @@ export {
   resetAvailabilityCache,
   filterAvailableModels
 };
-//# sourceMappingURL=chunk-SKBDJDRW.js.map
+//# sourceMappingURL=chunk-3F2WBIAE.js.map

package/dist/{chunk-VJLTHKKA.js → chunk-3R6IOJLN.js}

@@ -1,6 +1,6 @@
 import {
   getTimeProvider
-} from "./chunk-AL44KHC6.js";
+} from "./chunk-AITXIX5S.js";
 
 // src/security/audit-trail.ts
 var MAX_EVENTS = 1e4;
@@ -205,4 +205,4 @@ export {
   createGraphAuditBridge,
   createAuditTrail
 };
-//# sourceMappingURL=chunk-VJLTHKKA.js.map
+//# sourceMappingURL=chunk-3R6IOJLN.js.map

package/dist/{chunk-V7L3KXDY.js → chunk-4BTSZ5FM.js}

@@ -1,7 +1,7 @@
 import {
   getRandomProvider,
   getTimeProvider
-} from "./chunk-AL44KHC6.js";
+} from "./chunk-AITXIX5S.js";
 
 // src/utils/id-utils.ts
 import { randomUUID } from "node:crypto";
@@ -24,4 +24,4 @@ export {
   generateHyphenId,
   generateUUID
 };
-//# sourceMappingURL=chunk-V7L3KXDY.js.map
+//# sourceMappingURL=chunk-4BTSZ5FM.js.map

package/dist/{chunk-OEEUFDGL.js → chunk-52ZXFIYU.js}

@@ -13,7 +13,7 @@ import {
   lookupInTreeCapability,
   ok,
   resolveRetryAfterMs
-} from "./chunk-AL44KHC6.js";
+} from "./chunk-AITXIX5S.js";
 
 // src/config/model-parameter-support.ts
 function parseClaudeMajorMinor(bareId) {
@@ -834,4 +834,4 @@ export {
   DEFAULT_COLLECT_STREAM_MAX_CHUNKS,
   collectStream
 };
-//# sourceMappingURL=chunk-OEEUFDGL.js.map
+//# sourceMappingURL=chunk-52ZXFIYU.js.map

package/dist/{chunk-MZLBC4C2.js → chunk-5KDANU4X.js}

@@ -8,7 +8,7 @@ import {
   getTimeProvider,
   isRateLimitText,
   ok
-} from "./chunk-AL44KHC6.js";
+} from "./chunk-AITXIX5S.js";
 
 // src/cli-adapters/circuit-breaker-types.ts
 var CircuitErrorCode = {
@@ -541,4 +541,4 @@ export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=chunk-MZLBC4C2.js.map
+//# sourceMappingURL=chunk-5KDANU4X.js.map

package/dist/{chunk-D6NQ7D4K.js → chunk-5MJQCHS4.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-SWQILV5C.js";
+} from "./chunk-SE2EXART.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -12,7 +12,7 @@ import {
   resolveEnvMode,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-QKIWUNKO.js";
+} from "./chunk-JO4RQSXK.js";
 import {
   MAX_STRIPPED_ELEMENTS_PER_EVENT,
   createAuditTrail,
@@ -20,10 +20,10 @@ import {
   emitReputationEvent,
   emitSanitizationEvent,
   emitTrustEvent
-} from "./chunk-VJLTHKKA.js";
+} from "./chunk-3R6IOJLN.js";
 import {
   hasToken
-} from "./chunk-HGDDJZLF.js";
+} from "./chunk-WDTSF5AA.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   createLogger,
@@ -31,7 +31,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-AL44KHC6.js";
+} from "./chunk-AITXIX5S.js";
 
 // src/security/firewall/firewall-policy-mode.ts
 import { z } from "zod";
@@ -1775,7 +1775,7 @@ var IssueTriage = class {
     const { owner, repo, issueNumber } = parseResult.value;
     const fetchResult = await this.fetchIssueData(owner, repo, issueNumber);
     if (!fetchResult.ok) return fetchResult;
-    const { issue: issueResult } = fetchResult.value;
+    const { issue: issueResult, existingLabels } = fetchResult.value;
     const safeTitle = this.sanitizeContent(issueResult.title, issueResult.author);
     const safeBody = this.sanitizeContent(issueResult.body, issueResult.author);
     const reputation = this.assessAuthorReputation(fetchResult.value);
@@ -1797,7 +1797,7 @@ var IssueTriage = class {
     }
     const actions = this.generateActions(safeTitle, safeBody, issueResult, trustResult);
     const withEscalation = applySafetyActions(actions, gateDecision, reputation, issueResult);
-    const validatedActions = this.validateActions(withEscalation, gateDecision);
+    const validatedActions = this.validateActions(withEscalation, gateDecision, existingLabels);
     const result = this.buildResult({
       issue: issueResult,
       actions: validatedActions,
@@ -1934,14 +1934,15 @@ var IssueTriage = class {
    * This completes the #828 wiring by integrating corroboration-validator.
    * (Source: Issue #828 — policy-gate + corroboration-validator wiring)
    */
-  validateActions(actions, gateDecision) {
+  validateActions(actions, gateDecision, existingLabels) {
     const context = {
       inputTrustTier: gateDecision.enforcedTier,
-      ...this.accessContext()
+      ...this.accessContext(),
+      ...existingLabels !== void 0 ? { existingLabels } : {}
     };
     return actions.map((action) => {
       const policyDecision = evaluatePolicy(action, context);
-      const corrobResult = this.validateActionCorroboration(action);
+      const corrobResult = validateCorroboration(action);
       return {
         type: action.type,
         description: describeAction(action),
@@ -1951,14 +1952,6 @@ var IssueTriage = class {
       };
     });
   }
-  /**
-   * Validates corroboration for a single action.
-   * This is the second NEW security module wiring completing #828.
-   * (Source: Issue #828 — corroboration-validator wiring)
-   */
-  validateActionCorroboration(action) {
-    return validateCorroboration(action);
-  }
   /**
    * Builds the final triage result.
    */
@@ -2023,19 +2016,7 @@ var IssueTriage = class {
     const detailResult = await provider.getIssueDetail(issueNumber);
     if (!detailResult.ok) return err(detailResult.error);
     const detail = detailResult.value;
-    const issue = {
-      number: detail.number,
-      title: detail.title,
-      body: detail.body,
-      author: detail.author,
-      authorAssociation: detail.authorAssociation,
-      owner,
-      repo,
-      url: detail.url,
-      state: detail.state,
-      labels: [...detail.labels],
-      createdAt: detail.createdAt
-    };
+    const issue = { ...detail, owner, repo };
     const commentsResult = await provider.listCommentDetails(issueNumber);
     if (!commentsResult.ok) {
       logger5.warn("Failed to fetch issue comments; activity reputation is unmeasured", {
@@ -2045,10 +2026,21 @@ var IssueTriage = class {
     }
     const comments = commentsResult.ok ? mapIssueComments(commentsResult.value) : [];
     const commentsAvailable = commentsResult.ok;
+    const labelsResult = await provider.listRepositoryLabels();
+    if (!labelsResult.ok) {
+      logger5.warn("Failed to fetch repository labels; label validity is unmeasured", {
+        issueNumber,
+        error: labelsResult.error.message
+      });
+    }
     const accountAgeDays = await this.fetchAccountAgeDays(provider, detail.author);
-    return ok(
-      accountAgeDays !== void 0 ? { issue, comments, commentsAvailable, accountAgeDays } : { issue, comments, commentsAvailable }
-    );
+    return ok({
+      issue,
+      comments,
+      commentsAvailable,
+      ...accountAgeDays !== void 0 ? { accountAgeDays } : {},
+      ...labelsResult.ok ? { existingLabels: new Set(labelsResult.value) } : {}
+    });
   }
   /**
    * Best-effort lookup of a GitHub user's account age in days. Returns
@@ -2118,4 +2110,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-D6NQ7D4K.js.map
+//# sourceMappingURL=chunk-5MJQCHS4.js.map