nexus-agents 8.3.0 → 8.3.2

package/dist/cli.js

@@ -19,7 +19,7 @@ import {
   parseFindings,
   reviewPostingBlock,
   sumFindings
-} from "./chunk-UPEBXNNC.js";
+} from "./chunk-PSAXQXL5.js";
 import "./chunk-6MPT2NRF.js";
 import {
   runConfigInitSync
@@ -153,7 +153,7 @@ import {
   validateNexusEnv,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-S7UZUGS7.js";
+} from "./chunk-ONSYYUB4.js";
 import "./chunk-ZYPEHPRM.js";
 import "./chunk-DGWT7DXX.js";
 import "./chunk-64GMIUM5.js";
@@ -172,7 +172,7 @@ import {
   doctorCommand,
   initDataDirectories,
   runDoctor
-} from "./chunk-K5GYF2LP.js";
+} from "./chunk-3RMLDTUF.js";
 import {
   buildOpenAICompatAdapters,
   readOpenAICompatEnv
@@ -191,7 +191,7 @@ import {
   recordAuthenticVote,
   registerConsensusVoteTool,
   toRecordDecision
-} from "./chunk-LY2FJKYX.js";
+} from "./chunk-44I4XVRU.js";
 import {
   loadUsageEvents,
   rollupByModel
@@ -208,12 +208,12 @@ import {
   createFullGitHubProvider,
   evaluatePolicy,
   parsePRUrl
-} from "./chunk-PDROJ5FZ.js";
+} from "./chunk-JGBXLELL.js";
 import "./chunk-QP423I4T.js";
 import {
   ReputationCache,
   sanitizeInput
-} from "./chunk-ULQFMQE7.js";
+} from "./chunk-PGUZPMT4.js";
 import {
   ImprovementReviewInputSchema,
   calculateFitnessScore,
@@ -227,15 +227,15 @@ import {
   registerImprovementReviewTool,
   runImprovementReview,
   scanForSecrets
-} from "./chunk-R5F7Y5UY.js";
+} from "./chunk-3OU7XMEP.js";
 import {
   createDefaultPolicyFirewall,
   setGlobalPolicyFirewall,
   stagePolicyFirewallForRollout
-} from "./chunk-L2BM3TGM.js";
+} from "./chunk-VULYVX6X.js";
 import {
   VERSION
-} from "./chunk-7IDMD4IN.js";
+} from "./chunk-LZBARHPR.js";
 import "./chunk-U5YJKJK2.js";
 import {
   createUnifiedRegistry,
@@ -4459,7 +4459,7 @@ ${file.patch}
         violations: policyResult.violations
       });
     }
-    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-74SUOXOV.js");
+    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-NRVB6RVY.js");
     const body = formatReviewComment2(result);
     const postResult = await provider.createReview(pr.prNumber, body, result.decision);
     if (!postResult.ok) {
@@ -19586,7 +19586,7 @@ function startImprovementReviewScheduler(options) {
   let running = false;
   const runOnce = async () => {
     try {
-      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-ZTF544Y7.js");
+      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-UECHDBER.js");
       const input = ImprovementReviewInputSchema2.parse({ fileIssues });
       const result = await runImprovementReview2(input, { logger: logger22 });
       logger22.info("Scheduled improvement_review complete", {

package/dist/{consensus-vote-ZDBL2EA4.js → consensus-vote-H67IAMI2.js}

@@ -11,11 +11,11 @@ import {
   resetCorrelationTracker,
   runConsensusForGoal,
   unwrapVoteOrThrow
-} from "./chunk-LY2FJKYX.js";
+} from "./chunk-44I4XVRU.js";
 import "./chunk-6LDUEA4I.js";
 import "./chunk-OQB3XC5O.js";
-import "./chunk-L2BM3TGM.js";
-import "./chunk-7IDMD4IN.js";
+import "./chunk-VULYVX6X.js";
+import "./chunk-LZBARHPR.js";
 import "./chunk-U5YJKJK2.js";
 import "./chunk-F4AT3BCP.js";
 import "./chunk-4U62WRPL.js";
@@ -50,4 +50,4 @@ export {
   runConsensusForGoal,
   unwrapVoteOrThrow
 };
-//# sourceMappingURL=consensus-vote-ZDBL2EA4.js.map
+//# sourceMappingURL=consensus-vote-H67IAMI2.js.map

package/dist/{improvement-review-ZTF544Y7.js → improvement-review-UECHDBER.js}

@@ -11,9 +11,9 @@ import {
   loadSelfEvalSignals,
   registerImprovementReviewTool,
   runImprovementReview
-} from "./chunk-R5F7Y5UY.js";
-import "./chunk-L2BM3TGM.js";
-import "./chunk-7IDMD4IN.js";
+} from "./chunk-3OU7XMEP.js";
+import "./chunk-VULYVX6X.js";
+import "./chunk-LZBARHPR.js";
 import "./chunk-U5YJKJK2.js";
 import "./chunk-3MBGQAO2.js";
 import "./chunk-ITCKXMOH.js";
@@ -33,4 +33,4 @@ export {
   registerImprovementReviewTool,
   runImprovementReview
 };
-//# sourceMappingURL=improvement-review-ZTF544Y7.js.map
+//# sourceMappingURL=improvement-review-UECHDBER.js.map

package/dist/index.d.ts

@@ -27268,6 +27268,46 @@ interface PrReviewCoverage {
     readonly strategy: 'budget';
 }
 
+/**
+ * Proposal construction for `pr_review`.
+ *
+ * Extracted from `pr-review-tool.ts` (#5385), which sat at 398 of its 400-line
+ * budget — threading the sanitization disclosure through pushed it over, and
+ * this is the cohesive piece to move, because the builder IS the sanitization
+ * concern. A pure move apart from the `removedBeforeThisCall` parameter that
+ * issue adds.
+ *
+ * `pr-review-tool.ts` re-exports the symbol, so both barrels
+ * (`mcp/index.ts`, `mcp/tools/index.ts`), the published `exports/mcp.ts`, and
+ * `scripts/pr-review-local.ts` / `scripts/pr-review-eval-run.ts` keep importing
+ * it unchanged. The `PrReviewInput` import is type-only and therefore erased,
+ * so the re-export creates no runtime cycle.
+ *
+ * @module mcp/tools/pr-review-proposal
+ */
+
+/** Builds the proposal text passed to voters. The voters are designed for
+ * yes/no proposals — by framing the diff as "should this PR be merged?" we
+ * get usable output without needing new system prompts (Child 3 will add
+ * those).
+ *
+ * **Sanitization lives HERE, not at the tool boundary (#5258 item B).** The
+ * `securityTier: 'external'` declared on the registered tool only protects the
+ * MCP path, because the middleware is constructed inside `registerPrReviewTool`.
+ * Three other callers reach the voters without it — `.github/workflows/
+ * pr-review.yml`, `scripts/pr-review-local.ts` (the documented default path)
+ * and `scripts/pr-review-eval-run.ts` — each importing this builder directly
+ * from `dist/index.js`. On those paths a hostile PR body reached five voters
+ * unfenced, next to the words "should it be merged as-is?".
+ *
+ * This function is the one chokepoint all four callers pass through, so the
+ * protection is attached to the data rather than to one entry point. The MCP
+ * tier check still runs earlier and still refuses; this is the floor beneath
+ * it, and it strips rather than refuses so the script paths degrade instead of
+ * failing shut. Double-sanitizing on the MCP path is idempotent and harmless.
+ */
+declare function buildPrReviewProposal(input: Pick<PrReviewInput, 'prTitle' | 'prDescription' | 'prDiff' | 'repoContext' | 'baseRef' | 'headRef'>, removedBeforeThisCall?: number): string;
+
 /**
  * nexus-agents/mcp - PR Review Tool (#2233 Child 1)
  *
@@ -27418,27 +27458,7 @@ declare function mapVoteDecisionToPrDecision(voteDecision: 'approve' | 'reject'
  * the baseline behavior.
  */
 declare function aggregatePrDecisions(reviews: readonly PrReviewVote[], errorPolicy?: 'standard' | 'absolute_quorum'): PrReviewAggregate;
-/** Builds the proposal text passed to voters. The voters are designed for
- * yes/no proposals — by framing the diff as "should this PR be merged?" we
- * get usable output without needing new system prompts (Child 3 will add
- * those).
- *
- * **Sanitization lives HERE, not at the tool boundary (#5258 item B).** The
- * `securityTier: 'external'` declared on the registered tool only protects the
- * MCP path, because the middleware is constructed inside `registerPrReviewTool`.
- * Three other callers reach the voters without it — `.github/workflows/
- * pr-review.yml`, `scripts/pr-review-local.ts` (the documented default path)
- * and `scripts/pr-review-eval-run.ts` — each importing this builder directly
- * from `dist/index.js`. On those paths a hostile PR body reached five voters
- * unfenced, next to the words "should it be merged as-is?".
- *
- * This function is the one chokepoint all four callers pass through, so the
- * protection is attached to the data rather than to one entry point. The MCP
- * tier check still runs earlier and still refuses; this is the floor beneath
- * it, and it strips rather than refuses so the script paths degrade instead of
- * failing shut. Double-sanitizing on the MCP path is idempotent and harmless.
- */
-declare function buildPrReviewProposal(input: Pick<PrReviewInput, 'prTitle' | 'prDescription' | 'prDiff' | 'repoContext' | 'baseRef' | 'headRef'>): string;
+
 /** @category MCP */
 declare function registerPrReviewTool(server: McpServer, deps: PrReviewDeps): void;
 
@@ -31361,10 +31381,10 @@ declare const FIREWALL_POLICY_ENV_VAR = "NEXUS_FIREWALL_POLICY";
 /**
  * Resolve the firewall policy mode from the environment.
  *
- * Never throws: an invalid value coerces to the default and emits one `warn`,
- * because a security layer must not fail-closed at startup on an operator typo
- * (#3130). Unset or empty resolves silently — absence is the normal state, not
- * a misconfiguration.
+ * Never throws, because a security layer must not fail-closed at startup on an
+ * operator typo (#3130). The two non-happy paths resolve DIFFERENTLY, though:
+ * unset or empty resolves silently to `off` (absence is the normal state), while
+ * an explicit-but-invalid value resolves to `audit` and emits one `warn`.
  *
  * @param env    Environment to read (injectable for tests).
  * @param logger Injectable for tests; defaults to the shared module logger.

package/dist/index.js

@@ -553,7 +553,7 @@ import {
   withLogging,
   withRetry,
   withRetryWrapper
-} from "./chunk-S7UZUGS7.js";
+} from "./chunk-ONSYYUB4.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -574,7 +574,7 @@ import {
   connectTransport,
   createServer,
   startStdioServer
-} from "./chunk-K5GYF2LP.js";
+} from "./chunk-3RMLDTUF.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
@@ -632,7 +632,7 @@ import {
   generateProposalId,
   parseAgentPairKey,
   registerConsensusVoteTool
-} from "./chunk-LY2FJKYX.js";
+} from "./chunk-44I4XVRU.js";
 import "./chunk-6LDUEA4I.js";
 import {
   allOf
@@ -660,7 +660,7 @@ import {
   requiresHumanApproval,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-PDROJ5FZ.js";
+} from "./chunk-JGBXLELL.js";
 import {
   GitHubProvider,
   ScmError
@@ -681,11 +681,11 @@ import {
   resolveEnvMode,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-ULQFMQE7.js";
+} from "./chunk-PGUZPMT4.js";
 import {
   ImprovementReviewInputSchema,
   registerImprovementReviewTool
-} from "./chunk-R5F7Y5UY.js";
+} from "./chunk-3OU7XMEP.js";
 import {
   AgentPerformanceSchema,
   ConsensusAlgorithmSchema,
@@ -721,10 +721,10 @@ import {
   toolSuccess,
   toolSuccessStructured,
   validateToolInput
-} from "./chunk-L2BM3TGM.js";
+} from "./chunk-VULYVX6X.js";
 import {
   VERSION
-} from "./chunk-7IDMD4IN.js";
+} from "./chunk-LZBARHPR.js";
 import {
   AuditTrail,
   MAX_STRIPPED_ELEMENTS_PER_EVENT,
@@ -2589,7 +2589,18 @@ function resolveFirewallPolicyMode(env = process.env, logger12) {
     FirewallPolicyModeSchema,
     DEFAULT_FIREWALL_POLICY_MODE,
     FIREWALL_POLICY_ENV_VAR,
-    ...logger12 !== void 0 ? [logger12] : []
+    {
+      ...logger12 !== void 0 ? { logger: logger12 } : {},
+      // An explicit-but-invalid value lands on `audit`, NOT on the unset
+      // default `off`. Unset means "the operator has not opted in" and `off` is
+      // right for it; a typo means "the operator opted in and mistyped how",
+      // and answering that with the most permissive mode hands them a firewall
+      // that refuses nothing while they believe it is on. `audit` reports
+      // without refusing, so it cannot break an external caller any more than
+      // `off` can, and it emits the `wouldRefuse` telemetry the rollout is
+      // supposed to be collecting — which `off` does not.
+      invalidFallback: "audit"
+    }
   );
 }
 
@@ -4879,7 +4890,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-ZDBL2EA4.js");
+    const { executeVoting } = await import("./consensus-vote-H67IAMI2.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);