nexus-agents 8.58.10 → 8.59.1

package/dist/{chunk-E6MWPEEL.js → chunk-B4UNELI4.js}

@@ -11,7 +11,7 @@ import {
   NODE_ENGINE_RANGE,
   VERSION,
   isNodeVersionSupported
-} from "./chunk-6A4Y2GBP.js";
+} from "./chunk-BYDAXNOG.js";
 import {
   claimGlobalRegistry
 } from "./chunk-KLTLIQOC.js";
@@ -1314,7 +1314,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-7F5AJNBG.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-RVWQ3D32.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1416,4 +1416,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-E6MWPEEL.js.map
+//# sourceMappingURL=chunk-B4UNELI4.js.map

package/dist/{chunk-6A4Y2GBP.js → chunk-BYDAXNOG.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "8.58.10" : "dev";
+var VERSION = true ? "8.59.1" : "dev";
 var NODE_ENGINE_RANGE = ">=22.5.0";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -11,4 +11,4 @@ export {
   NODE_ENGINE_RANGE,
   isNodeVersionSupported
 };
-//# sourceMappingURL=chunk-6A4Y2GBP.js.map
+//# sourceMappingURL=chunk-BYDAXNOG.js.map

package/dist/{chunk-6A4Y2GBP.js.map → chunk-BYDAXNOG.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts"],"sourcesContent":["/**\n * nexus-agents - Version constant\n *\n * Injected at build time via tsup define from package.json.\n * Do NOT edit VERSION manually — it is replaced during build.\n */\n\nimport semver from 'semver';\n\ndeclare const __NEXUS_VERSION__: string;\n\nexport const VERSION: string = typeof __NEXUS_VERSION__ !== 'undefined' ? __NEXUS_VERSION__ : 'dev';\n\n/** Supported Node.js versions. Pinned to package.json by a regression test. */\nexport const NODE_ENGINE_RANGE = '>=22.5.0';\n\n/** Returns whether a Node.js version satisfies the package engine requirement. */\nexport function isNodeVersionSupported(version: string): boolean {\n  return semver.satisfies(version, NODE_ENGINE_RANGE);\n}\n"],"mappings":";AAOA,OAAO,YAAY;AAIZ,IAAM,UAAkB,OAA2C,YAAoB;AAGvF,IAAM,oBAAoB;AAG1B,SAAS,uBAAuB,SAA0B;AAC/D,SAAO,OAAO,UAAU,SAAS,iBAAiB;AACpD;","names":[]}
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["/**\n * nexus-agents - Version constant\n *\n * Injected at build time via tsup define from package.json.\n * Do NOT edit VERSION manually — it is replaced during build.\n */\n\nimport semver from 'semver';\n\ndeclare const __NEXUS_VERSION__: string;\n\nexport const VERSION: string = typeof __NEXUS_VERSION__ !== 'undefined' ? __NEXUS_VERSION__ : 'dev';\n\n/** Supported Node.js versions. Pinned to package.json by a regression test. */\nexport const NODE_ENGINE_RANGE = '>=22.5.0';\n\n/** Returns whether a Node.js version satisfies the package engine requirement. */\nexport function isNodeVersionSupported(version: string): boolean {\n  return semver.satisfies(version, NODE_ENGINE_RANGE);\n}\n"],"mappings":";AAOA,OAAO,YAAY;AAIZ,IAAM,UAAkB,OAA2C,WAAoB;AAGvF,IAAM,oBAAoB;AAG1B,SAAS,uBAAuB,SAA0B;AAC/D,SAAO,OAAO,UAAU,SAAS,iBAAiB;AACpD;","names":[]}

package/dist/{chunk-YAYKF6LF.js → chunk-JJR5HS4N.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-LAJNJNGM.js";
+} from "./chunk-TNRG3PNO.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2282,4 +2282,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-YAYKF6LF.js.map
+//# sourceMappingURL=chunk-JJR5HS4N.js.map

package/dist/{chunk-KX5IRY7D.js → chunk-K3K4TOBA.js}

@@ -25,10 +25,10 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-LAJNJNGM.js";
+} from "./chunk-TNRG3PNO.js";
 import {
   VERSION
-} from "./chunk-6A4Y2GBP.js";
+} from "./chunk-BYDAXNOG.js";
 import {
   UNRESOLVED_MODEL_ID,
   assessPanelIndependence,
@@ -8930,4 +8930,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-KX5IRY7D.js.map
+//# sourceMappingURL=chunk-K3K4TOBA.js.map

package/dist/{chunk-JIPTZ357.js → chunk-KLZUZSON.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-E6MWPEEL.js";
+} from "./chunk-B4UNELI4.js";
 import {
   executeExpert
 } from "./chunk-QHTZS3P7.js";
@@ -71,7 +71,7 @@ import {
   updateStage,
   withWarnings,
   writeJobCancelled
-} from "./chunk-KX5IRY7D.js";
+} from "./chunk-K3K4TOBA.js";
 import {
   allOf,
   anyOf
@@ -84,14 +84,14 @@ import {
   IssueTriage,
   createDurableAuditSink,
   createDurableAuditTrail
-} from "./chunk-K76PTPGD.js";
+} from "./chunk-NRIH6GVC.js";
 import {
   resolveEnvMode,
   sanitizeInput
 } from "./chunk-UX2SOSH3.js";
 import {
   withPrerequisite
-} from "./chunk-YAYKF6LF.js";
+} from "./chunk-JJR5HS4N.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -116,7 +116,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-LAJNJNGM.js";
+} from "./chunk-TNRG3PNO.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -45801,7 +45801,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-6IL7DQ2I.js");
+    const { createIssueTriage } = await import("./issue-triage-7YCOFZXK.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num2 = issueMatch[2] ?? "";
@@ -46203,7 +46203,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-LE33M3GF.js");
+    const { executeVoting } = await import("./consensus-vote-6K54HCI5.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -48001,7 +48001,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-LE33M3GF.js");
+        const { executeVoting } = await import("./consensus-vote-6K54HCI5.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -57195,4 +57195,4 @@ export {
   startPipelineEventBridge,
   shutdownPipelineEventBridge
 };
-//# sourceMappingURL=chunk-JIPTZ357.js.map
+//# sourceMappingURL=chunk-KLZUZSON.js.map

package/dist/{chunk-K76PTPGD.js → chunk-NRIH6GVC.js}

@@ -38,14 +38,14 @@ import { z } from "zod";
 var FirewallPolicyModeSchema = z.enum(["off", "audit", "enforce"]);
 var DEFAULT_FIREWALL_POLICY_MODE = "off";
 var FIREWALL_POLICY_ENV_VAR = "NEXUS_FIREWALL_POLICY";
-function resolveFirewallPolicyMode(env = process.env, logger6) {
+function resolveFirewallPolicyMode(env = process.env, logger7) {
   return resolveEnvMode(
     env[FIREWALL_POLICY_ENV_VAR],
     FirewallPolicyModeSchema,
     DEFAULT_FIREWALL_POLICY_MODE,
     FIREWALL_POLICY_ENV_VAR,
     {
-      ...logger6 !== void 0 ? { logger: logger6 } : {},
+      ...logger7 !== void 0 ? { logger: logger7 } : {},
       // An explicit-but-invalid value lands on `audit`, NOT on the unset
       // default `off`. Unset means "the operator has not opted in" and `off` is
       // right for it; a typo means "the operator opted in and mistyped how",
@@ -729,6 +729,15 @@ function checkSourceTrustTiers(action) {
   }
   return void 0;
 }
+var ACTION_SCOPED_POLICY_RULES = [
+  "REQUIRE_CITATION",
+  "INSUFFICIENT_TRUST",
+  "UNTRUSTED_INFLUENCE",
+  "LABEL_SET_UNAVAILABLE",
+  "INVALID_LABELS",
+  "PRIVILEGED_LABEL",
+  "SOURCE_TRUST_MISMATCH"
+];
 function evaluatePolicy(action, context, auditTrail) {
   const violations = [];
   const checks = [
@@ -772,6 +781,54 @@ function canProceed(actionType, inputTrustTier) {
   return canInfluenceDecisions(inputTrustTier);
 }
 
+// src/security/firewall/firewall-policy-stage.ts
+var logger2 = createLogger({ component: "HostileInputFirewall" });
+function buildActionContext(effectiveTrustTier, context, options) {
+  return {
+    inputTrustTier: effectiveTrustTier,
+    hasWriteAccess: context.hasWriteAccess,
+    hasSecretAccess: context.hasSecretAccess,
+    ...options?.existingLabels !== void 0 ? { existingLabels: options.existingLabels } : {}
+  };
+}
+function evaluateFirewallPolicy(context, action, auditTrail) {
+  if (action === void 0) {
+    const violation = checkRuleOfTwo(context);
+    return {
+      scope: "context",
+      reason: "no-action-supplied",
+      violations: violation !== void 0 ? [violation] : [],
+      unmeasured: ACTION_SCOPED_POLICY_RULES
+    };
+  }
+  const decision = evaluatePolicy(action, context, auditTrail);
+  return {
+    scope: "action",
+    actionType: action.type,
+    allowed: decision.allowed,
+    requiresApproval: decision.requiresApproval,
+    violations: decision.violations,
+    unmeasured: []
+  };
+}
+function blockingViolations(policy) {
+  return policy?.violations.filter((v) => v.severity === "block") ?? [];
+}
+function policyRefusal(policy, policyMode, user, effectiveTrustTier) {
+  const blocking = blockingViolations(policy);
+  if (blocking.length === 0 || policyMode !== "enforce") return void 0;
+  logger2.warn("Firewall REFUSED input under enforce mode", {
+    user,
+    effectiveTrustTier,
+    rules: blocking.map((v) => v.rule)
+  });
+  return {
+    code: "POLICY_REFUSED",
+    message: `Refused by firewall policy: ` + blocking.map((v) => `${v.rule} \u2014 ${v.message}`).join("; "),
+    stage: "policy"
+  };
+}
+
 // src/security/corroboration-validator.ts
 function hasCIPass(sources) {
   return sources.some((s) => s.type === "ciResult" && s.status === "pass");
@@ -911,7 +968,7 @@ function getCorroborationRules(actionType) {
 }
 
 // src/security/firewall/firewall-pipeline.ts
-var logger2 = createLogger({ component: "HostileInputFirewall" });
+var logger3 = createLogger({ component: "HostileInputFirewall" });
 var HostileInputFirewall = class {
   stages;
   /**
@@ -985,8 +1042,8 @@ var HostileInputFirewall = class {
     );
     this.recordTrustDecision(meta, trust, effectiveTrustTier, reputationGate, allowlist);
     const atl = this.buildATL(meta, effectiveTrustTier, sanitized, reputation);
-    const ruleOfTwoViolation = this.runPolicyEnforcement(meta, effectiveTrustTier, context);
-    const refusal = this.refuseIfEnforcing(ruleOfTwoViolation, meta, effectiveTrustTier);
+    const policy = this.runPolicyEnforcement(meta, effectiveTrustTier, context, options);
+    const refusal = policyRefusal(policy, this.policyMode, meta.username, effectiveTrustTier);
     if (refusal !== void 0) return err(refusal);
     return ok(
       this.assembleResult({
@@ -998,32 +1055,34 @@ var HostileInputFirewall = class {
         effectiveTrustTier,
         reputationGate,
         atl,
-        ruleOfTwoViolation,
+        policy,
         start
       })
     );
   }
   /**
-   * Evaluates the Rule of Two against the call's access posture and surfaces
-   * the violation (previously the `policyEnforcement` stage was declared but
-   * never read — #3198). Returns `undefined` when the stage is disabled or the
-   * rule holds.
+   * Runs the policy checks the call's facts allow — see
+   * {@link evaluateFirewallPolicy} (#5380; Rule-of-Two-only since #3198). The
+   * decision reaches the audit trail when the audit stage is on. Returns
+   * `undefined` when the stage is disabled, so absence keeps meaning "not run".
    */
-  runPolicyEnforcement(meta, effectiveTrustTier, context) {
+  runPolicyEnforcement(meta, effectiveTrustTier, context, options) {
     if (!this.stages.policyEnforcement) return void 0;
-    const violation = checkRuleOfTwo({
-      inputTrustTier: effectiveTrustTier,
-      hasWriteAccess: context.hasWriteAccess,
-      hasSecretAccess: context.hasSecretAccess
-    });
-    if (violation !== void 0) {
-      logger2.warn("Firewall surfaced a Rule-of-Two violation", {
+    const evaluation = evaluateFirewallPolicy(
+      buildActionContext(effectiveTrustTier, context, options),
+      options?.action,
+      this.stages.audit ? this.auditTrail : void 0
+    );
+    const blocking = blockingViolations(evaluation);
+    if (blocking.length > 0) {
+      logger3.warn("Firewall surfaced blocking policy violations", {
         user: meta.username,
         effectiveTrustTier,
-        rule: violation.rule
+        scope: evaluation.scope,
+        rules: blocking.map((v) => v.rule)
       });
     }
-    return violation;
+    return evaluation;
   }
   /**
    * Builds the successful result. Optional fields are spread in only when they
@@ -1031,8 +1090,9 @@ var HostileInputFirewall = class {
    * docs on {@link FirewallResult}).
    */
   assembleResult(parts) {
-    const { isAllowlisted, reputation, reputationGate, ruleOfTwoViolation } = parts;
-    const blocking = ruleOfTwoViolation?.severity === "block";
+    const { isAllowlisted, reputation, reputationGate, policy } = parts;
+    const ruleOfTwoViolation = policy?.violations.find((v) => v.rule === "RULE_OF_TWO");
+    const blocking = blockingViolations(policy).length > 0;
     return {
       sanitized: parts.sanitized,
       trust: parts.trust,
@@ -1042,10 +1102,11 @@ var HostileInputFirewall = class {
       ...reputationGate !== void 0 ? { reputationGate } : {},
       atl: parts.atl,
       ...ruleOfTwoViolation !== void 0 ? { ruleOfTwoViolation } : {},
+      ...policy !== void 0 ? { policy } : {},
       policyMode: this.policyMode,
       // Reached only when we did NOT refuse, so this is "audit mode saw
       // something enforce would have stopped". Under `off` it stays false: the
-      // signal is already on `ruleOfTwoViolation`, and reporting a would-be
+      // signal is already on `policy.violations`, and reporting a would-be
       // refusal for a mode that has not opted in would overstate the gate.
       wouldRefuse: blocking && this.policyMode === "audit",
       auditEvents: this.auditTrail.query().map((e) => ({ id: e.id, type: e.type })),
@@ -1053,32 +1114,6 @@ var HostileInputFirewall = class {
       durationMs: Date.now() - parts.start
     };
   }
-  /**
-   * The fail-closed half of the #5382 gate: under `enforce`, a blocking policy
-   * violation refuses the input instead of riding along as a signal on an
-   * `ok()` result that a caller checking only `result.ok` walks straight past.
-   *
-   * This gates the RESPONSE to a violation, never its detection. It cannot
-   * manufacture a refusal where the `policyEnforcement` stage never ran, and it
-   * cannot refuse a non-blocking (`warn`) violation — so `enforce` is not a
-   * kill switch, and an allowlisted maintainer stays served.
-   *
-   * @returns the refusal, or `undefined` when the input passes or the mode has
-   *          not opted in.
-   */
-  refuseIfEnforcing(violation, meta, effectiveTrustTier) {
-    if (violation?.severity !== "block" || this.policyMode !== "enforce") return void 0;
-    logger2.warn("Firewall REFUSED input under enforce mode", {
-      user: meta.username,
-      effectiveTrustTier,
-      rule: violation.rule
-    });
-    return {
-      code: "POLICY_REFUSED",
-      message: `Refused by firewall policy: ${violation.rule} \u2014 ${violation.message}`,
-      stage: "policy"
-    };
-  }
   /**
    * Validates corroboration for a decided action (#5382).
    *
@@ -1110,7 +1145,7 @@ var HostileInputFirewall = class {
     }
     const corroboration = validateCorroboration(action);
     if (!corroboration.satisfied && this.policyMode === "enforce") {
-      logger2.warn("Firewall REFUSED an uncorroborated action under enforce mode", {
+      logger3.warn("Firewall REFUSED an uncorroborated action under enforce mode", {
         actionType: corroboration.actionType,
         missing: corroboration.missing
       });
@@ -1335,7 +1370,7 @@ function createGitHubAdapter() {
 }
 
 // src/dogfooding/untrusted-input-firewall.ts
-var logger3 = createLogger({ component: "UntrustedInputFirewall" });
+var logger4 = createLogger({ component: "UntrustedInputFirewall" });
 var singleton;
 var configuredAuditLogger;
 function configureUntrustedInputFirewall(deps) {
@@ -1354,7 +1389,7 @@ function runUntrustedInputFirewall(input, options) {
   const result = getUntrustedInputFirewall().process(input, options);
   if (!result.ok) {
     const { code, stage, message } = result.error;
-    logger3.warn("Untrusted-input firewall rejected the input", {
+    logger4.warn("Untrusted-input firewall rejected the input", {
       user: input.username,
       sourceType: input.type,
       code,
@@ -1363,11 +1398,14 @@ function runUntrustedInputFirewall(input, options) {
     return err(new Error(`Untrusted-input firewall ${code} at stage ${stage}: ${message}`));
   }
   if (result.value.wouldRefuse) {
-    logger3.warn("Untrusted-input firewall would refuse under enforce (audit mode)", {
+    const policy = result.value.policy;
+    logger4.warn("Untrusted-input firewall would refuse under enforce (audit mode)", {
       user: input.username,
       sourceType: input.type,
       trustTier: result.value.effectiveTrustTier,
-      rule: result.value.ruleOfTwoViolation?.rule
+      scope: policy?.scope,
+      rules: policy?.violations.filter((v) => v.severity === "block").map((v) => v.rule),
+      unmeasured: policy?.unmeasured
     });
   }
   return ok(result.value);
@@ -1414,7 +1452,7 @@ function parseIssueUrl(url) {
 }
 
 // src/scm/github-provider-traits.ts
-var logger4 = createLogger({ component: "GitHubProviderTraits" });
+var logger5 = createLogger({ component: "GitHubProviderTraits" });
 var cachedGhToken = null;
 var ghTokenPromise;
 async function resolveGhToken() {
@@ -1525,7 +1563,7 @@ var GitHubReviewer = class {
   provider;
   async getPullRequestDetail(prNumber) {
     const repo = this.provider.repo;
-    logger4.debug("Getting PR detail", { repo, prNumber });
+    logger5.debug("Getting PR detail", { repo, prNumber });
     const prResult = await execGhApi(`repos/${repo}/pulls/${String(prNumber)}`);
     if (!prResult.ok) return prResult;
     const filesResult = await execGhApiList(
@@ -1562,7 +1600,7 @@ var GitHubReviewer = class {
       request_changes: "REQUEST_CHANGES",
       comment: "COMMENT"
     };
-    logger4.info("Creating review", { repo, prNumber, decision });
+    logger5.info("Creating review", { repo, prNumber, decision });
     const { execFile } = await import("node:child_process");
     const { promisify } = await import("node:util");
     const exec = promisify(execFile);
@@ -1589,7 +1627,7 @@ var GitHubReviewer = class {
   }
   async getIssueDetail(issueNumber) {
     const repo = this.provider.repo;
-    logger4.debug("Getting issue detail", { repo, issueNumber });
+    logger5.debug("Getting issue detail", { repo, issueNumber });
     const result = await execGhApi(`repos/${repo}/issues/${String(issueNumber)}`);
     if (!result.ok) return result;
     try {
@@ -1611,7 +1649,7 @@ var GitHubReviewer = class {
   }
   async listCommentDetails(issueNumber) {
     const repo = this.provider.repo;
-    logger4.debug("Listing comment details", { repo, issueNumber });
+    logger5.debug("Listing comment details", { repo, issueNumber });
     const result = await execGhApiList(
       `repos/${repo}/issues/${String(issueNumber)}/comments`
     );
@@ -1634,7 +1672,7 @@ var GitHubReviewer = class {
 };
 var GitHubUserInfo = class {
   async fetchUserMetadata(username) {
-    logger4.debug("Fetching user metadata", { username });
+    logger5.debug("Fetching user metadata", { username });
     const result = await execGhApi(`users/${username}`);
     if (!result.ok) return result;
     try {
@@ -1772,7 +1810,7 @@ function buildActionDetails(action, policy, corrob) {
 }
 
 // src/dogfooding/issue-triage.ts
-var logger5 = createLogger({ component: "IssueTriage" });
+var logger6 = createLogger({ component: "IssueTriage" });
 function applySafetyActions(actions, gateDecision, reputation, issue) {
   const withRefusal = appendRefusalIfHostile(actions, gateDecision, issue);
   return appendApprovalIfBorderline(withRefusal, gateDecision, reputation, issue);
@@ -1808,7 +1846,7 @@ function appendRefusalIfHostile(actions, gateDecision, issue) {
 }
 function logSuppressedDemotion(issueNumber, author, trustResult, gateDecision) {
   if (!gateDecision.demotionSuppressed) return;
-  logger5.warn("Reputation demotion suppressed by gating mode (would block under enforce)", {
+  logger6.warn("Reputation demotion suppressed by gating mode (would block under enforce)", {
     issueNumber,
     author,
     mode: gateDecision.mode,
@@ -1828,7 +1866,7 @@ var IssueTriage = class {
    */
   async triageIssue(issueUrl) {
     const startTime = getTimeProvider().now();
-    logger5.info("Starting issue triage", { issueUrl });
+    logger6.info("Starting issue triage", { issueUrl });
     const parseResult = parseIssueUrl(issueUrl);
     if (!parseResult.ok) return parseResult;
     const { owner, repo, issueNumber } = parseResult.value;
@@ -1861,7 +1899,7 @@ var IssueTriage = class {
       safeContent: { title: safeTitle, body: safeBody },
       startTime
     });
-    logger5.info("Issue triage completed", {
+    logger6.info("Issue triage completed", {
       issueNumber,
       category: result.category,
       actionCount: result.proposedActions.length,
@@ -1877,7 +1915,7 @@ var IssueTriage = class {
     if (text.length === 0) return text;
     const result = sanitizeInput(text, "unknown", author);
     if (result.wasModified) {
-      logger5.warn("Issue content sanitized", {
+      logger6.warn("Issue content sanitized", {
         author,
         strippedCount: result.strippedElements.length,
         injectionFlags: result.injectionFlags
@@ -2071,7 +2109,7 @@ var IssueTriage = class {
     const issue = { ...detail, owner, repo };
     const commentsResult = await provider.listCommentDetails(issueNumber);
     if (!commentsResult.ok) {
-      logger5.warn("Failed to fetch issue comments; activity reputation is unmeasured", {
+      logger6.warn("Failed to fetch issue comments; activity reputation is unmeasured", {
         issueNumber,
         error: commentsResult.error.message
       });
@@ -2080,7 +2118,7 @@ var IssueTriage = class {
     const commentsAvailable = commentsResult.ok;
     const labelsResult = await provider.listRepositoryLabels();
     if (!labelsResult.ok) {
-      logger5.warn("Failed to fetch repository labels; label validity is unmeasured", {
+      logger6.warn("Failed to fetch repository labels; label validity is unmeasured", {
         issueNumber,
         error: labelsResult.error.message
       });
@@ -2162,4 +2200,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-K76PTPGD.js.map
+//# sourceMappingURL=chunk-NRIH6GVC.js.map