nexus-agents 8.3.1 → 8.3.3

package/dist/{chunk-ZYPEHPRM.js → chunk-PJAMCYKJ.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-3MBGQAO2.js";
+} from "./chunk-DC2OJAIB.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -721,4 +721,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-ZYPEHPRM.js.map
+//# sourceMappingURL=chunk-PJAMCYKJ.js.map

package/dist/{chunk-AQF22T74.js → chunk-Q5EBPILX.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-TSZWXRF7.js";
+} from "./chunk-T5SLVJCK.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -20,7 +20,7 @@ import {
   getTimeProvider,
   isDeclaredNeverDeprecate,
   isRegisteredToolName
-} from "./chunk-3MBGQAO2.js";
+} from "./chunk-DC2OJAIB.js";
 import {
   getNexusDataDir,
   nexusDataPath
@@ -2159,4 +2159,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-AQF22T74.js.map
+//# sourceMappingURL=chunk-Q5EBPILX.js.map

package/dist/{chunk-5YC3SC34.js → chunk-QETXUEHY.js}

@@ -2,7 +2,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-3MBGQAO2.js";
+} from "./chunk-DC2OJAIB.js";
 
 // src/scm/token-resolver.ts
 import { execFile } from "node:child_process";
@@ -87,4 +87,4 @@ export {
   hasToken,
   getTokenEnvVars
 };
-//# sourceMappingURL=chunk-5YC3SC34.js.map
+//# sourceMappingURL=chunk-QETXUEHY.js.map

package/dist/{chunk-PSAXQXL5.js → chunk-RHZ7OTUR.js}

@@ -12,11 +12,11 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-PGUZPMT4.js";
+} from "./chunk-44TOYOLL.js";
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-3MBGQAO2.js";
+} from "./chunk-DC2OJAIB.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
 import { randomUUID } from "node:crypto";
@@ -303,4 +303,4 @@ export {
   createFailedReview,
   reviewPostingBlock
 };
-//# sourceMappingURL=chunk-PSAXQXL5.js.map
+//# sourceMappingURL=chunk-RHZ7OTUR.js.map

package/dist/{chunk-QP423I4T.js → chunk-RLP56UYX.js}

@@ -4,7 +4,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-3MBGQAO2.js";
+} from "./chunk-DC2OJAIB.js";
 
 // src/scm/types.ts
 var ScmError = class extends Error {
@@ -263,4 +263,4 @@ export {
   ScmError,
   GitHubProvider
 };
-//# sourceMappingURL=chunk-QP423I4T.js.map
+//# sourceMappingURL=chunk-RLP56UYX.js.map

package/dist/{chunk-F4AT3BCP.js → chunk-RO6W6DUN.js}

@@ -1,10 +1,10 @@
 import {
   createAutoAdapter
-} from "./chunk-UZULX2DZ.js";
+} from "./chunk-K7WPK63Q.js";
 import {
   getDefaultCliCircuitBreakerRegistry,
   mapModelErrorToCategory
-} from "./chunk-W2R6UVZJ.js";
+} from "./chunk-LWLQZEG7.js";
 import {
   CLI_NAMES,
   CircularBuffer,
@@ -24,7 +24,7 @@ import {
   recordRateLimitEvent,
   resolveModelIdentitySync,
   toRateLimitError
-} from "./chunk-3MBGQAO2.js";
+} from "./chunk-DC2OJAIB.js";
 
 // src/config/model-equivalence.ts
 function canonicalModelKey(modelId) {
@@ -904,4 +904,4 @@ export {
   getGlobalRegistry,
   resetGlobalRegistry
 };
-//# sourceMappingURL=chunk-F4AT3BCP.js.map
+//# sourceMappingURL=chunk-RO6W6DUN.js.map

package/dist/{chunk-FFZNRJ5Q.js → chunk-RQFYOMCK.js}

@@ -13,7 +13,7 @@ import {
   lookupInTreeCapability,
   ok,
   resolveRetryAfterMs
-} from "./chunk-3MBGQAO2.js";
+} from "./chunk-DC2OJAIB.js";
 
 // src/config/model-parameter-support.ts
 function parseClaudeMajorMinor(bareId) {
@@ -834,4 +834,4 @@ export {
   DEFAULT_COLLECT_STREAM_MAX_CHUNKS,
   collectStream
 };
-//# sourceMappingURL=chunk-FFZNRJ5Q.js.map
+//# sourceMappingURL=chunk-RQFYOMCK.js.map

package/dist/{chunk-TSZWXRF7.js → chunk-T5SLVJCK.js}

@@ -1,9 +1,9 @@
 import {
   VERSION
-} from "./chunk-2OS7HTUM.js";
+} from "./chunk-LV3LWVWI.js";
 import {
   emitClawGuardViolation
-} from "./chunk-U5YJKJK2.js";
+} from "./chunk-B6HNAXBM.js";
 import {
   CACHE_TIMEOUTS,
   MCP_TIMEOUTS,
@@ -19,7 +19,7 @@ import {
   getTimeProvider,
   ok,
   resolveToolClassGuardMs
-} from "./chunk-3MBGQAO2.js";
+} from "./chunk-DC2OJAIB.js";
 import {
   getNexusDataDir
 } from "./chunk-MM223CVS.js";
@@ -1029,24 +1029,37 @@ function checkSecurityTier(config, sanitizeResult, logger) {
   });
 }
 function runPreChecks(config, args, mode, requestContext, logger) {
+  const noSanitization = { wasModified: false, commentsRemoved: 0 };
   const sizeResult = checkInputSize(args, logger, requestContext.requestId);
-  if (sizeResult) return { error: sizeResult, sanitizedArgs: args, nearMiss: false };
+  if (sizeResult) {
+    return {
+      error: sizeResult,
+      sanitizedArgs: args,
+      nearMiss: false,
+      sanitization: noSanitization
+    };
+  }
   const sanitizeResult = sanitizeToolInput(args);
   logSanitizationResult(sanitizeResult, logger, config.toolName);
   const sanitizedArgs = sanitizeResult.wasModified ? sanitizeResult.sanitized : args;
+  const sanitization = {
+    wasModified: sanitizeResult.wasModified,
+    commentsRemoved: sanitizeResult.commentsRemoved
+  };
   const tierError = checkSecurityTier(config, sanitizeResult, logger);
-  if (tierError !== null) return { error: tierError, sanitizedArgs, nearMiss: false };
+  if (tierError !== null) return { error: tierError, sanitizedArgs, nearMiss: false, sanitization };
   if (config.rateLimiter) {
     const rlResult = checkRateLimit(config.rateLimiter, logger);
     if (rlResult) {
       if (config.auditLogger)
         emitRateLimitAudit(config.auditLogger, config.toolName, requestContext);
-      return { error: rlResult, sanitizedArgs, nearMiss: false };
+      return { error: rlResult, sanitizedArgs, nearMiss: false, sanitization };
     }
   }
   const policy = runPolicyCheck(config, sanitizedArgs, mode, logger, requestContext);
-  if (policy.error) return { error: policy.error, sanitizedArgs, nearMiss: policy.nearMiss };
-  return { error: null, sanitizedArgs, nearMiss: policy.nearMiss };
+  if (policy.error)
+    return { error: policy.error, sanitizedArgs, nearMiss: policy.nearMiss, sanitization };
+  return { error: null, sanitizedArgs, nearMiss: policy.nearMiss, sanitization };
 }
 function createSecureHandler(handler, config) {
   const logger = config.logger ?? createLogger({ tool: config.toolName });
@@ -1066,13 +1079,15 @@ function createSecureHandler(handler, config) {
     const {
       error: preCheckError,
       sanitizedArgs,
-      nearMiss
+      nearMiss,
+      sanitization
     } = runPreChecks(config, args, mode, requestContext, requestLogger);
     if (preCheckError) return preCheckError;
     return executeAndAudit(handler, sanitizedArgs, config, {
       requestContext,
       requestLogger,
       nearMiss,
+      sanitization,
       logLifecycle: inherited === void 0
     });
   };
@@ -1084,7 +1099,7 @@ async function executeAndAudit(handler, sanitizedArgs, config, invocation) {
     const result = await executeHandler(
       handler,
       sanitizedArgs,
-      { requestContext, logger: requestLogger },
+      { requestContext, logger: requestLogger, sanitization: invocation.sanitization },
       requestLogger,
       invocation.logLifecycle
     );
@@ -2231,4 +2246,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-TSZWXRF7.js.map
+//# sourceMappingURL=chunk-T5SLVJCK.js.map