nexus-agents 8.3.1 → 8.3.2

package/dist/{chunk-TSZWXRF7.js → chunk-VULYVX6X.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-2OS7HTUM.js";
+} from "./chunk-LZBARHPR.js";
 import {
   emitClawGuardViolation
 } from "./chunk-U5YJKJK2.js";
@@ -1029,24 +1029,37 @@ function checkSecurityTier(config, sanitizeResult, logger) {
   });
 }
 function runPreChecks(config, args, mode, requestContext, logger) {
+  const noSanitization = { wasModified: false, commentsRemoved: 0 };
   const sizeResult = checkInputSize(args, logger, requestContext.requestId);
-  if (sizeResult) return { error: sizeResult, sanitizedArgs: args, nearMiss: false };
+  if (sizeResult) {
+    return {
+      error: sizeResult,
+      sanitizedArgs: args,
+      nearMiss: false,
+      sanitization: noSanitization
+    };
+  }
   const sanitizeResult = sanitizeToolInput(args);
   logSanitizationResult(sanitizeResult, logger, config.toolName);
   const sanitizedArgs = sanitizeResult.wasModified ? sanitizeResult.sanitized : args;
+  const sanitization = {
+    wasModified: sanitizeResult.wasModified,
+    commentsRemoved: sanitizeResult.commentsRemoved
+  };
   const tierError = checkSecurityTier(config, sanitizeResult, logger);
-  if (tierError !== null) return { error: tierError, sanitizedArgs, nearMiss: false };
+  if (tierError !== null) return { error: tierError, sanitizedArgs, nearMiss: false, sanitization };
   if (config.rateLimiter) {
     const rlResult = checkRateLimit(config.rateLimiter, logger);
     if (rlResult) {
       if (config.auditLogger)
         emitRateLimitAudit(config.auditLogger, config.toolName, requestContext);
-      return { error: rlResult, sanitizedArgs, nearMiss: false };
+      return { error: rlResult, sanitizedArgs, nearMiss: false, sanitization };
     }
   }
   const policy = runPolicyCheck(config, sanitizedArgs, mode, logger, requestContext);
-  if (policy.error) return { error: policy.error, sanitizedArgs, nearMiss: policy.nearMiss };
-  return { error: null, sanitizedArgs, nearMiss: policy.nearMiss };
+  if (policy.error)
+    return { error: policy.error, sanitizedArgs, nearMiss: policy.nearMiss, sanitization };
+  return { error: null, sanitizedArgs, nearMiss: policy.nearMiss, sanitization };
 }
 function createSecureHandler(handler, config) {
   const logger = config.logger ?? createLogger({ tool: config.toolName });
@@ -1066,13 +1079,15 @@ function createSecureHandler(handler, config) {
     const {
       error: preCheckError,
       sanitizedArgs,
-      nearMiss
+      nearMiss,
+      sanitization
     } = runPreChecks(config, args, mode, requestContext, requestLogger);
     if (preCheckError) return preCheckError;
     return executeAndAudit(handler, sanitizedArgs, config, {
       requestContext,
       requestLogger,
       nearMiss,
+      sanitization,
       logLifecycle: inherited === void 0
     });
   };
@@ -1084,7 +1099,7 @@ async function executeAndAudit(handler, sanitizedArgs, config, invocation) {
     const result = await executeHandler(
       handler,
       sanitizedArgs,
-      { requestContext, logger: requestLogger },
+      { requestContext, logger: requestLogger, sanitization: invocation.sanitization },
       requestLogger,
       invocation.logLifecycle
     );
@@ -2231,4 +2246,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-TSZWXRF7.js.map
+//# sourceMappingURL=chunk-VULYVX6X.js.map