nexus-agents 8.3.0 → 8.3.1

package/dist/index.js

@@ -553,7 +553,7 @@ import {
   withLogging,
   withRetry,
   withRetryWrapper
-} from "./chunk-S7UZUGS7.js";
+} from "./chunk-OFUJNXH3.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -574,7 +574,7 @@ import {
   connectTransport,
   createServer,
   startStdioServer
-} from "./chunk-K5GYF2LP.js";
+} from "./chunk-LW6FPSPN.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
@@ -632,7 +632,7 @@ import {
   generateProposalId,
   parseAgentPairKey,
   registerConsensusVoteTool
-} from "./chunk-LY2FJKYX.js";
+} from "./chunk-6SPKOLVU.js";
 import "./chunk-6LDUEA4I.js";
 import {
   allOf
@@ -660,7 +660,7 @@ import {
   requiresHumanApproval,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-PDROJ5FZ.js";
+} from "./chunk-JGBXLELL.js";
 import {
   GitHubProvider,
   ScmError
@@ -681,11 +681,11 @@ import {
   resolveEnvMode,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-ULQFMQE7.js";
+} from "./chunk-PGUZPMT4.js";
 import {
   ImprovementReviewInputSchema,
   registerImprovementReviewTool
-} from "./chunk-R5F7Y5UY.js";
+} from "./chunk-AQF22T74.js";
 import {
   AgentPerformanceSchema,
   ConsensusAlgorithmSchema,
@@ -721,10 +721,10 @@ import {
   toolSuccess,
   toolSuccessStructured,
   validateToolInput
-} from "./chunk-L2BM3TGM.js";
+} from "./chunk-TSZWXRF7.js";
 import {
   VERSION
-} from "./chunk-7IDMD4IN.js";
+} from "./chunk-2OS7HTUM.js";
 import {
   AuditTrail,
   MAX_STRIPPED_ELEMENTS_PER_EVENT,
@@ -2589,7 +2589,18 @@ function resolveFirewallPolicyMode(env = process.env, logger12) {
     FirewallPolicyModeSchema,
     DEFAULT_FIREWALL_POLICY_MODE,
     FIREWALL_POLICY_ENV_VAR,
-    ...logger12 !== void 0 ? [logger12] : []
+    {
+      ...logger12 !== void 0 ? { logger: logger12 } : {},
+      // An explicit-but-invalid value lands on `audit`, NOT on the unset
+      // default `off`. Unset means "the operator has not opted in" and `off` is
+      // right for it; a typo means "the operator opted in and mistyped how",
+      // and answering that with the most permissive mode hands them a firewall
+      // that refuses nothing while they believe it is on. `audit` reports
+      // without refusing, so it cannot break an external caller any more than
+      // `off` can, and it emits the `wouldRefuse` telemetry the rollout is
+      // supposed to be collecting — which `off` does not.
+      invalidFallback: "audit"
+    }
   );
 }
 
@@ -4879,7 +4890,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-ZDBL2EA4.js");
+    const { executeVoting } = await import("./consensus-vote-44WT45UN.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);