nexus-agents 8.47.12 → 8.48.1

package/dist/{ast-rule-runner-74D2KNCC.js → ast-rule-runner-SUEOULTY.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-KRPSDJOP.js";
-import "./chunk-AZPM542H.js";
+} from "./chunk-NEKNNWPU.js";
+import "./chunk-VKBFV6OD.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -26,4 +26,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-74D2KNCC.js.map
+//# sourceMappingURL=ast-rule-runner-SUEOULTY.js.map

package/dist/{child-mcp-config-KTR6MPNZ.js → child-mcp-config-Y3GST6L4.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-T46RV7Y7.js";
 import {
   createLogger
-} from "./chunk-AZPM542H.js";
+} from "./chunk-VKBFV6OD.js";
 import "./chunk-MTYJPPIG.js";
 import "./chunk-BTYRPZON.js";
 import "./chunk-ZPWHCABL.js";
@@ -60,4 +60,4 @@ export {
   generateMcpConfig,
   getDefaultAllowedTools
 };
-//# sourceMappingURL=child-mcp-config-KTR6MPNZ.js.map
+//# sourceMappingURL=child-mcp-config-Y3GST6L4.js.map

package/dist/{chunk-7XT6WVSB.js → chunk-2CB4RKGK.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-AZPM542H.js";
+} from "./chunk-VKBFV6OD.js";
 
 // src/context/session-memory.ts
 import * as fs from "node:fs";
@@ -370,4 +370,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-7XT6WVSB.js.map
+//# sourceMappingURL=chunk-2CB4RKGK.js.map

package/dist/{chunk-7I3LY4HJ.js → chunk-4Y5TFSYP.js}

@@ -2,7 +2,7 @@ import {
   CACHE_TIMEOUTS,
   createLogger,
   getTimeProvider
-} from "./chunk-AZPM542H.js";
+} from "./chunk-VKBFV6OD.js";
 
 // src/security/trust-types.ts
 import { z } from "zod";
@@ -610,4 +610,4 @@ export {
   resolveReputationGatingMode,
   gateWithReputation
 };
-//# sourceMappingURL=chunk-7I3LY4HJ.js.map
+//# sourceMappingURL=chunk-4Y5TFSYP.js.map

package/dist/{chunk-DVBGHGU3.js → chunk-53EL53NC.js}

@@ -2,7 +2,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-AZPM542H.js";
+} from "./chunk-VKBFV6OD.js";
 
 // src/scm/token-resolver.ts
 import { execFile } from "node:child_process";
@@ -87,4 +87,4 @@ export {
   hasToken,
   getTokenEnvVars
 };
-//# sourceMappingURL=chunk-DVBGHGU3.js.map
+//# sourceMappingURL=chunk-53EL53NC.js.map

package/dist/{chunk-CJ5FEUI2.js → chunk-6AX4544S.js}

@@ -10,13 +10,13 @@ import {
 import {
   assessReputation,
   sanitizeInput
-} from "./chunk-7I3LY4HJ.js";
+} from "./chunk-4Y5TFSYP.js";
 import {
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-AZPM542H.js";
+} from "./chunk-VKBFV6OD.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
 import { randomUUID } from "node:crypto";
@@ -416,4 +416,4 @@ export {
   createFailedReview,
   reviewPostingBlock
 };
-//# sourceMappingURL=chunk-CJ5FEUI2.js.map
+//# sourceMappingURL=chunk-6AX4544S.js.map

package/dist/{chunk-QOKB6MWY.js → chunk-6GKP2RLC.js}

@@ -1,10 +1,10 @@
 import {
   createAutoAdapter
-} from "./chunk-SBCEQWUN.js";
+} from "./chunk-GFW5IMOF.js";
 import {
   getDefaultCliCircuitBreakerRegistry,
   mapModelErrorToCategory
-} from "./chunk-DF6M73XJ.js";
+} from "./chunk-N56KU4KM.js";
 import {
   CLI_NAMES,
   CircularBuffer,
@@ -24,7 +24,7 @@ import {
   recordRateLimitEvent,
   resolveModelIdentitySync,
   toRateLimitError
-} from "./chunk-AZPM542H.js";
+} from "./chunk-VKBFV6OD.js";
 
 // src/config/model-equivalence.ts
 function canonicalModelKey(modelId) {
@@ -909,4 +909,4 @@ export {
   getGlobalRegistry,
   resetGlobalRegistry
 };
-//# sourceMappingURL=chunk-QOKB6MWY.js.map
+//# sourceMappingURL=chunk-6GKP2RLC.js.map

package/dist/{chunk-7YHOHQJR.js → chunk-A4WAADEC.js}

@@ -1,17 +1,17 @@
 import {
   computeCostDetail,
   recordUsageEvent
-} from "./chunk-TE6UUPOA.js";
+} from "./chunk-PJKJF6FQ.js";
 import {
   BaseAdapter,
   createStream,
   planOptionalParams,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-R247RR7W.js";
+} from "./chunk-YLTUPAKL.js";
 import {
   assertCustomApiHostResolvesPublic
-} from "./chunk-YPU4OHBU.js";
+} from "./chunk-VDBBLFZR.js";
 import {
   ConfigError,
   ModelCapability,
@@ -22,7 +22,7 @@ import {
   getTimeProvider,
   getTokenEstimator,
   ok
-} from "./chunk-AZPM542H.js";
+} from "./chunk-VKBFV6OD.js";
 
 // src/adapters/openai-types.ts
 var OPENAI_MODELS = {
@@ -842,4 +842,4 @@ export {
   discoverModels,
   buildOpenAICompatAdapters
 };
-//# sourceMappingURL=chunk-7YHOHQJR.js.map
+//# sourceMappingURL=chunk-A4WAADEC.js.map

package/dist/{chunk-YX6KWBK5.js → chunk-A7GKD65R.js}

@@ -1,9 +1,9 @@
 import {
   VERSION
-} from "./chunk-PZNFQXGE.js";
+} from "./chunk-OUEZ4AMS.js";
 import {
   emitClawGuardViolation
-} from "./chunk-JOVBHYWW.js";
+} from "./chunk-MOVW4ZFU.js";
 import {
   CACHE_TIMEOUTS,
   MCP_TIMEOUTS,
@@ -19,7 +19,7 @@ import {
   getTimeProvider,
   ok,
   resolveToolClassGuardMs
-} from "./chunk-AZPM542H.js";
+} from "./chunk-VKBFV6OD.js";
 import {
   getNexusDataDir
 } from "./chunk-BTYRPZON.js";
@@ -756,9 +756,13 @@ function sanitizeString(value) {
   const MAX_PASSES = 5;
   let cleaned = value;
   let commentsRemoved = 0;
+  let tagsRemoved = 0;
   for (let pass = 0; pass < MAX_PASSES; pass++) {
     XML_INJECTION_PATTERN.lastIndex = 0;
-    const afterTags = cleaned.replace(XML_INJECTION_PATTERN, "");
+    const afterTags = cleaned.replace(XML_INJECTION_PATTERN, () => {
+      tagsRemoved += 1;
+      return "";
+    });
     const { cleaned: afterComments, removed } = stripHtmlComments(afterTags);
     commentsRemoved += removed;
     if (afterComments === cleaned) break;
@@ -770,7 +774,8 @@ function sanitizeString(value) {
     cleaned,
     modified: cleaned !== value,
     incomplete: probe !== cleaned,
-    commentsRemoved
+    commentsRemoved,
+    tagsRemoved
   };
 }
 function detectPatterns(value) {
@@ -787,10 +792,11 @@ function sanitizeValue(value, stats) {
     if (patterns.length > 0) {
       stats.patterns.push(...patterns);
     }
-    const { cleaned, modified, incomplete, commentsRemoved } = sanitizeString(value);
+    const { cleaned, modified, incomplete, commentsRemoved, tagsRemoved } = sanitizeString(value);
     if (modified) stats.count++;
     if (incomplete) stats.incomplete = true;
     stats.commentsRemoved += commentsRemoved;
+    stats.tagsRemoved += tagsRemoved;
     return cleaned;
   }
   if (Array.isArray(value)) {
@@ -813,12 +819,19 @@ function sanitizeToolInput(args) {
       sanitized: args,
       wasModified: false,
       modifiedCount: 0,
+      tagsRemoved: 0,
       detectedPatterns: [],
       sanitizationIncomplete: false,
       commentsRemoved: 0
     };
   }
-  const stats = { count: 0, patterns: [], commentsRemoved: 0, incomplete: false };
+  const stats = {
+    count: 0,
+    patterns: [],
+    commentsRemoved: 0,
+    tagsRemoved: 0,
+    incomplete: false
+  };
   const sanitized = sanitizeValue(args, stats);
   const uniquePatterns = [...new Set(stats.patterns)];
   return {
@@ -827,7 +840,8 @@ function sanitizeToolInput(args) {
     modifiedCount: stats.count,
     detectedPatterns: uniquePatterns,
     sanitizationIncomplete: stats.incomplete,
-    commentsRemoved: stats.commentsRemoved
+    commentsRemoved: stats.commentsRemoved,
+    tagsRemoved: stats.tagsRemoved
   };
 }
 function logSanitizationResult(result, logger, toolName) {
@@ -843,6 +857,12 @@ function logSanitizationResult(result, logger, toolName) {
       commentsRemoved: result.commentsRemoved
     });
   }
+  if (result.tagsRemoved > 0) {
+    logger.warn("Tool input sanitized \u2014 conversation-structure tags stripped", {
+      tool: toolName,
+      tagsRemoved: result.tagsRemoved
+    });
+  }
   if (result.detectedPatterns.length > 0) {
     logger.warn("Injection patterns detected in tool input", {
       tool: toolName,
@@ -1080,15 +1100,34 @@ function emitToolAudit({
     ...nearMiss ? { policyDecision: "would_deny" } : {}
   });
 }
+function hashRawFields(fields, args) {
+  if (fields === void 0) return {};
+  if (typeof args !== "object" || args === null) return {};
+  const source = args;
+  const out = {};
+  for (const [field, hash] of Object.entries(fields)) {
+    const value = source[field];
+    if (typeof value === "string") out[field] = hash(value);
+  }
+  return out;
+}
+function unsanitizedContext(config, args) {
+  return {
+    wasModified: false,
+    commentsRemoved: 0,
+    fieldsModified: 0,
+    tagsRemoved: 0,
+    rawFieldHashes: hashRawFields(config.rawHashFields, args)
+  };
+}
 function runPreChecks(config, args, mode, requestContext, logger) {
-  const noSanitization = { wasModified: false, commentsRemoved: 0 };
   const sizeResult = checkInputSize(args, logger, requestContext.requestId);
   if (sizeResult) {
     return {
       error: sizeResult,
       sanitizedArgs: args,
       nearMiss: false,
-      sanitization: noSanitization
+      sanitization: unsanitizedContext(config, args)
     };
   }
   const sanitizeResult = sanitizeToolInput(args);
@@ -1096,7 +1135,11 @@ function runPreChecks(config, args, mode, requestContext, logger) {
   const sanitizedArgs = sanitizeResult.wasModified ? sanitizeResult.sanitized : args;
   const sanitization = {
     wasModified: sanitizeResult.wasModified,
-    commentsRemoved: sanitizeResult.commentsRemoved
+    commentsRemoved: sanitizeResult.commentsRemoved,
+    fieldsModified: sanitizeResult.modifiedCount,
+    tagsRemoved: sanitizeResult.tagsRemoved,
+    // #5385: hashed from `args`, the RAW input, before sanitization touched it.
+    rawFieldHashes: hashRawFields(config.rawHashFields, args)
   };
   const refusal = checkSecurityTier(config.securityTier ?? "standard", sanitizeResult, logger);
   if (refusal !== null) {
@@ -2317,4 +2360,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-YX6KWBK5.js.map
+//# sourceMappingURL=chunk-A7GKD65R.js.map