nexus-agents 8.47.12 → 8.48.0

package/dist/{chunk-YX6KWBK5.js → chunk-2SINF73A.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-PZNFQXGE.js";
+} from "./chunk-LO36HW55.js";
 import {
   emitClawGuardViolation
 } from "./chunk-JOVBHYWW.js";
@@ -756,9 +756,13 @@ function sanitizeString(value) {
   const MAX_PASSES = 5;
   let cleaned = value;
   let commentsRemoved = 0;
+  let tagsRemoved = 0;
   for (let pass = 0; pass < MAX_PASSES; pass++) {
     XML_INJECTION_PATTERN.lastIndex = 0;
-    const afterTags = cleaned.replace(XML_INJECTION_PATTERN, "");
+    const afterTags = cleaned.replace(XML_INJECTION_PATTERN, () => {
+      tagsRemoved += 1;
+      return "";
+    });
     const { cleaned: afterComments, removed } = stripHtmlComments(afterTags);
     commentsRemoved += removed;
     if (afterComments === cleaned) break;
@@ -770,7 +774,8 @@ function sanitizeString(value) {
     cleaned,
     modified: cleaned !== value,
     incomplete: probe !== cleaned,
-    commentsRemoved
+    commentsRemoved,
+    tagsRemoved
   };
 }
 function detectPatterns(value) {
@@ -787,10 +792,11 @@ function sanitizeValue(value, stats) {
     if (patterns.length > 0) {
       stats.patterns.push(...patterns);
     }
-    const { cleaned, modified, incomplete, commentsRemoved } = sanitizeString(value);
+    const { cleaned, modified, incomplete, commentsRemoved, tagsRemoved } = sanitizeString(value);
     if (modified) stats.count++;
     if (incomplete) stats.incomplete = true;
     stats.commentsRemoved += commentsRemoved;
+    stats.tagsRemoved += tagsRemoved;
     return cleaned;
   }
   if (Array.isArray(value)) {
@@ -813,12 +819,19 @@ function sanitizeToolInput(args) {
       sanitized: args,
       wasModified: false,
       modifiedCount: 0,
+      tagsRemoved: 0,
       detectedPatterns: [],
       sanitizationIncomplete: false,
       commentsRemoved: 0
     };
   }
-  const stats = { count: 0, patterns: [], commentsRemoved: 0, incomplete: false };
+  const stats = {
+    count: 0,
+    patterns: [],
+    commentsRemoved: 0,
+    tagsRemoved: 0,
+    incomplete: false
+  };
   const sanitized = sanitizeValue(args, stats);
   const uniquePatterns = [...new Set(stats.patterns)];
   return {
@@ -827,7 +840,8 @@ function sanitizeToolInput(args) {
     modifiedCount: stats.count,
     detectedPatterns: uniquePatterns,
     sanitizationIncomplete: stats.incomplete,
-    commentsRemoved: stats.commentsRemoved
+    commentsRemoved: stats.commentsRemoved,
+    tagsRemoved: stats.tagsRemoved
   };
 }
 function logSanitizationResult(result, logger, toolName) {
@@ -843,6 +857,12 @@ function logSanitizationResult(result, logger, toolName) {
       commentsRemoved: result.commentsRemoved
     });
   }
+  if (result.tagsRemoved > 0) {
+    logger.warn("Tool input sanitized \u2014 conversation-structure tags stripped", {
+      tool: toolName,
+      tagsRemoved: result.tagsRemoved
+    });
+  }
   if (result.detectedPatterns.length > 0) {
     logger.warn("Injection patterns detected in tool input", {
       tool: toolName,
@@ -1080,15 +1100,34 @@ function emitToolAudit({
     ...nearMiss ? { policyDecision: "would_deny" } : {}
   });
 }
+function hashRawFields(fields, args) {
+  if (fields === void 0) return {};
+  if (typeof args !== "object" || args === null) return {};
+  const source = args;
+  const out = {};
+  for (const [field, hash] of Object.entries(fields)) {
+    const value = source[field];
+    if (typeof value === "string") out[field] = hash(value);
+  }
+  return out;
+}
+function unsanitizedContext(config, args) {
+  return {
+    wasModified: false,
+    commentsRemoved: 0,
+    fieldsModified: 0,
+    tagsRemoved: 0,
+    rawFieldHashes: hashRawFields(config.rawHashFields, args)
+  };
+}
 function runPreChecks(config, args, mode, requestContext, logger) {
-  const noSanitization = { wasModified: false, commentsRemoved: 0 };
   const sizeResult = checkInputSize(args, logger, requestContext.requestId);
   if (sizeResult) {
     return {
       error: sizeResult,
       sanitizedArgs: args,
       nearMiss: false,
-      sanitization: noSanitization
+      sanitization: unsanitizedContext(config, args)
     };
   }
   const sanitizeResult = sanitizeToolInput(args);
@@ -1096,7 +1135,11 @@ function runPreChecks(config, args, mode, requestContext, logger) {
   const sanitizedArgs = sanitizeResult.wasModified ? sanitizeResult.sanitized : args;
   const sanitization = {
     wasModified: sanitizeResult.wasModified,
-    commentsRemoved: sanitizeResult.commentsRemoved
+    commentsRemoved: sanitizeResult.commentsRemoved,
+    fieldsModified: sanitizeResult.modifiedCount,
+    tagsRemoved: sanitizeResult.tagsRemoved,
+    // #5385: hashed from `args`, the RAW input, before sanitization touched it.
+    rawFieldHashes: hashRawFields(config.rawHashFields, args)
   };
   const refusal = checkSecurityTier(config.securityTier ?? "standard", sanitizeResult, logger);
   if (refusal !== null) {
@@ -2317,4 +2360,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-YX6KWBK5.js.map
+//# sourceMappingURL=chunk-2SINF73A.js.map