nexus-agents 8.33.0 → 8.33.1

package/dist/{chunk-5DW7CTDJ.js → chunk-BWYCK74C.js}

@@ -23,10 +23,10 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-LPY73UIV.js";
+} from "./chunk-KIDVXKGL.js";
 import {
   VERSION
-} from "./chunk-GEUOGSCS.js";
+} from "./chunk-HMQO7NAF.js";
 import {
   assessPanelIndependence,
   countDistinctModels,
@@ -7806,4 +7806,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-5DW7CTDJ.js.map
+//# sourceMappingURL=chunk-BWYCK74C.js.map

package/dist/{chunk-GEUOGSCS.js → chunk-HMQO7NAF.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "8.33.0" : "dev";
+var VERSION = true ? "8.33.1" : "dev";
 var NODE_ENGINE_RANGE = ">=22.5.0";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -11,4 +11,4 @@ export {
   NODE_ENGINE_RANGE,
   isNodeVersionSupported
 };
-//# sourceMappingURL=chunk-GEUOGSCS.js.map
+//# sourceMappingURL=chunk-HMQO7NAF.js.map

package/dist/{chunk-LPY73UIV.js → chunk-KIDVXKGL.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-GEUOGSCS.js";
+} from "./chunk-HMQO7NAF.js";
 import {
   emitClawGuardViolation
 } from "./chunk-W5UCRZN4.js";
@@ -682,6 +682,53 @@ function emitRateLimitAudit(auditLogger, toolName, ctx, state) {
   });
 }
 
+// src/mcp/middleware/secure-handler-tier.ts
+function checkSecurityTier(tier, sanitizeResult, logger) {
+  if (sanitizeResult.sanitizationIncomplete) {
+    logger.warn("Input rejected: sanitizer did not reach a fixed point", { tier });
+    return {
+      error: toolStructuredError({
+        errorCategory: "permission",
+        message: "Input validation failed: the input could not be fully sanitized within the pass budget, so it still contains markup the sanitizer removes. Simplify the input and retry."
+      }),
+      eventType: "sanitization_incomplete",
+      patterns: [],
+      tier
+    };
+  }
+  if (tier === "standard" || sanitizeResult.detectedPatterns.length === 0) {
+    return null;
+  }
+  logger.warn("Input rejected by security tier validation", {
+    tier,
+    patterns: sanitizeResult.detectedPatterns
+  });
+  return {
+    // Security-tier rejection of suspected injection patterns — an
+    // access-control denial, categorized `permission` (#2649).
+    error: toolStructuredError({
+      errorCategory: "permission",
+      message: `Input validation failed: detected patterns [${sanitizeResult.detectedPatterns.join(", ")}]. Remove prompt injection patterns and retry.`
+    }),
+    eventType: "injection_pattern_blocked",
+    patterns: sanitizeResult.detectedPatterns,
+    tier
+  };
+}
+function emitSecurityTierAudit(auditLogger, toolName, ctx, refusal) {
+  auditLogger.logSecurityEvent({
+    eventType: refusal.eventType,
+    // `critical` is this enum's security-violation level ('info' / 'warning' /
+    // 'critical'); a refused injection attempt is not routine noise, and the
+    // level is what a downstream consumer filters on.
+    severity: "critical",
+    actor: actorFromContext(ctx),
+    description: refusal.eventType === "sanitization_incomplete" ? `Tool '${toolName}' refused input the sanitizer could not reduce to a fixed point.` : `Tool '${toolName}' refused input carrying injection patterns [${refusal.patterns.join(", ")}].`,
+    requestId: ctx.requestId,
+    metadata: { toolName, tier: refusal.tier, patterns: [...refusal.patterns] }
+  });
+}
+
 // src/mcp/middleware/tool-input-sanitizer.ts
 var XML_INJECTION_PATTERN = /<\/?(system|human|assistant|instructions|user|prompt|context|tool_use|tool_result)\b[^>]*>/gi;
 var INJECTION_DETECTORS = [
@@ -1033,27 +1080,6 @@ function emitToolAudit({
     ...nearMiss ? { policyDecision: "would_deny" } : {}
   });
 }
-function checkSecurityTier(config, sanitizeResult, logger) {
-  const tier = config.securityTier ?? "standard";
-  if (sanitizeResult.sanitizationIncomplete) {
-    logger.warn("Input rejected: sanitizer did not reach a fixed point", { tier });
-    return toolStructuredError({
-      errorCategory: "permission",
-      message: "Input validation failed: the input could not be fully sanitized within the pass budget, so it still contains markup the sanitizer removes. Simplify the input and retry."
-    });
-  }
-  if (tier === "standard" || sanitizeResult.detectedPatterns.length === 0) {
-    return null;
-  }
-  logger.warn("Input rejected by security tier validation", {
-    tier,
-    patterns: sanitizeResult.detectedPatterns
-  });
-  return toolStructuredError({
-    errorCategory: "permission",
-    message: `Input validation failed: detected patterns [${sanitizeResult.detectedPatterns.join(", ")}]. Remove prompt injection patterns and retry.`
-  });
-}
 function runPreChecks(config, args, mode, requestContext, logger) {
   const noSanitization = { wasModified: false, commentsRemoved: 0 };
   const sizeResult = checkInputSize(args, logger, requestContext.requestId);
@@ -1072,8 +1098,12 @@ function runPreChecks(config, args, mode, requestContext, logger) {
     wasModified: sanitizeResult.wasModified,
     commentsRemoved: sanitizeResult.commentsRemoved
   };
-  const tierError = checkSecurityTier(config, sanitizeResult, logger);
-  if (tierError !== null) return { error: tierError, sanitizedArgs, nearMiss: false, sanitization };
+  const refusal = checkSecurityTier(config.securityTier ?? "standard", sanitizeResult, logger);
+  if (refusal !== null) {
+    if (config.auditLogger)
+      emitSecurityTierAudit(config.auditLogger, config.toolName, requestContext, refusal);
+    return { error: refusal.error, sanitizedArgs, nearMiss: false, sanitization };
+  }
   if (config.rateLimiter) {
     const denial = checkRateLimit(config.rateLimiter, logger);
     if (denial) {
@@ -2276,4 +2306,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-LPY73UIV.js.map
+//# sourceMappingURL=chunk-KIDVXKGL.js.map