nexus-agents 8.58.7 → 8.58.8

package/dist/{chunk-5ETG3XUQ.js → chunk-356LQ4RP.js}

@@ -25,10 +25,10 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-XHPGWGM6.js";
+} from "./chunk-KLEFYGJB.js";
 import {
   VERSION
-} from "./chunk-Q7G3H6JD.js";
+} from "./chunk-KJQICHIA.js";
 import {
   UNRESOLVED_MODEL_ID,
   assessPanelIndependence,
@@ -8930,4 +8930,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-5ETG3XUQ.js.map
+//# sourceMappingURL=chunk-356LQ4RP.js.map

package/dist/{chunk-2SCNH5MK.js → chunk-BQWNANI5.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-2KJSKU7Z.js";
+} from "./chunk-OTWKXT5Z.js";
 import {
   executeExpert
 } from "./chunk-SXZUHL4V.js";
@@ -71,7 +71,7 @@ import {
   updateStage,
   withWarnings,
   writeJobCancelled
-} from "./chunk-5ETG3XUQ.js";
+} from "./chunk-356LQ4RP.js";
 import {
   allOf,
   anyOf
@@ -84,14 +84,14 @@ import {
   IssueTriage,
   createDurableAuditSink,
   createDurableAuditTrail
-} from "./chunk-NX66BW4L.js";
+} from "./chunk-CQNZ2WO6.js";
 import {
   resolveEnvMode,
   sanitizeInput
 } from "./chunk-SYLHKBJQ.js";
 import {
   withPrerequisite
-} from "./chunk-DHO5PB4W.js";
+} from "./chunk-UKEJKQHL.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -116,7 +116,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-XHPGWGM6.js";
+} from "./chunk-KLEFYGJB.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -45801,7 +45801,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-2FN4V3Z6.js");
+    const { createIssueTriage } = await import("./issue-triage-XLSQQYUC.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num2 = issueMatch[2] ?? "";
@@ -46203,7 +46203,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-EDMTKTBQ.js");
+    const { executeVoting } = await import("./consensus-vote-XGNLZKKY.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -48001,7 +48001,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-EDMTKTBQ.js");
+        const { executeVoting } = await import("./consensus-vote-XGNLZKKY.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -57195,4 +57195,4 @@ export {
   startPipelineEventBridge,
   shutdownPipelineEventBridge
 };
-//# sourceMappingURL=chunk-2SCNH5MK.js.map
+//# sourceMappingURL=chunk-BQWNANI5.js.map

package/dist/{chunk-NX66BW4L.js → chunk-CQNZ2WO6.js}

@@ -669,7 +669,7 @@ function checkRuleOfTwo(context) {
   if (isUntrusted && context.hasWriteAccess && context.hasSecretAccess) {
     return {
       rule: "RULE_OF_TWO",
-      message: "Rule of Two violation: agent simultaneously processes untrusted input, has write access, and accesses secrets",
+      message: `RULE_OF_TWO: agent simultaneously (a) processes untrusted input (Tier ${context.inputTrustTier}), (b) has write access, and (c) has secret/token access. Refused; there is no approval path \u2014 drop a leg: dry-run, run without the token, or split the agent (#4735).`,
       severity: "block"
     };
   }
@@ -2162,4 +2162,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-NX66BW4L.js.map
+//# sourceMappingURL=chunk-CQNZ2WO6.js.map