nexus-agents 8.77.0 → 8.78.0

package/dist/cli.js

@@ -156,7 +156,7 @@ import {
   validateNexusEnv,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-5XAJU5ZV.js";
+} from "./chunk-3K7OHJLM.js";
 import "./chunk-AVEDKF3J.js";
 import "./chunk-4GDMHCKX.js";
 import "./chunk-7ETWTSTB.js";
@@ -176,7 +176,7 @@ import {
   doctorCommand,
   initDataDirectories,
   runDoctor
-} from "./chunk-GS5OJHJJ.js";
+} from "./chunk-7ZMNE7U2.js";
 import "./chunk-DWQ7TG5L.js";
 import {
   shutdownExpertBridge
@@ -198,7 +198,7 @@ import {
   registerConsensusVoteTool,
   seatFallbacks,
   toRecordDecision
-} from "./chunk-I2MSRFXZ.js";
+} from "./chunk-ER76ZRBU.js";
 import {
   buildOpenAICompatAdapters,
   readOpenAICompatEndpoint,
@@ -219,9 +219,9 @@ import {
   firewallInputFor,
   parsePRUrl,
   runUntrustedInputFirewall,
-  validateAgentAction,
-  validateCorroboration
-} from "./chunk-VIVM7X76.js";
+  validateActionCorroboration,
+  validateAgentAction
+} from "./chunk-OZFXXGGZ.js";
 import "./chunk-VFFG3HIY.js";
 import {
   ReputationCache,
@@ -240,18 +240,18 @@ import {
   registerImprovementReviewTool,
   runImprovementReview,
   scanForSecrets
-} from "./chunk-6IUAMO5M.js";
+} from "./chunk-NW5MCYOE.js";
 import {
   createDefaultPolicyFirewall,
   setGlobalPolicyFirewall,
   setSecureHandlerAuditLogger,
   stagePolicyFirewallForRollout
-} from "./chunk-LZGSWYDX.js";
+} from "./chunk-5EXZHBAQ.js";
 import {
   NODE_ENGINE_RANGE,
   VERSION,
   isNodeVersionSupported
-} from "./chunk-QBZ6DBJL.js";
+} from "./chunk-MYF73MI3.js";
 import {
   claimGlobalRegistry,
   createUnifiedRegistry,
@@ -4286,6 +4286,16 @@ function reportUnverifiedCorroboration(corroboration, log) {
 function notEvaluated(rule, message) {
   return { allowed: false, hasRuleOfTwoViolation: false, violations: [{ rule, message }] };
 }
+function corroborationViolation(decision) {
+  if (decision.satisfied) return [];
+  const missing = decision.missing.join("; ");
+  return [
+    {
+      rule: "INSUFFICIENT_CORROBORATION",
+      message: decision.refused ? `refused at stage ${decision.stage} under enforce: ${missing}` : missing
+    }
+  ];
+}
 function auditReviewAction(draft, input, gate, log) {
   const validated2 = validateAgentAction({
     type: "DraftReply",
@@ -4296,13 +4306,13 @@ function auditReviewAction(draft, input, gate, log) {
   if (!validated2.ok) return notEvaluated("INVALID_ACTION", validated2.error);
   const decision = evaluateActionThroughFirewall(input, { ...gate, action: validated2.value });
   if (!decision.ok) return notEvaluated("FIREWALL_ERROR", decision.error.message);
-  const corroboration = validateCorroboration(validated2.value);
-  reportUnverifiedCorroboration(corroboration, log);
-  const corroborationViolation = corroboration.satisfied ? [] : [{ rule: "INSUFFICIENT_CORROBORATION", message: corroboration.missing.join("; ") }];
+  const corroboration = validateActionCorroboration(validated2.value);
+  if (!corroboration.ok) return notEvaluated("FIREWALL_ERROR", corroboration.error.message);
+  if (!corroboration.value.refused) reportUnverifiedCorroboration(corroboration.value, log);
   return {
-    allowed: decision.value.allowed && corroboration.satisfied,
+    allowed: decision.value.allowed && corroboration.value.satisfied,
     hasRuleOfTwoViolation: decision.value.violations.some((v) => v.rule === "RULE_OF_TWO"),
-    violations: [...decision.value.violations, ...corroborationViolation]
+    violations: [...decision.value.violations, ...corroborationViolation(corroboration.value)]
   };
 }
 
@@ -19713,7 +19723,7 @@ function startImprovementReviewScheduler(options) {
   let running = false;
   const runOnce = async () => {
     try {
-      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-JVI3RM7I.js");
+      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-VC46AY77.js");
       const input = ImprovementReviewInputSchema2.parse({ fileIssues });
       const result = await runImprovementReview2(input, { logger: logger22 });
       logger22.info("Scheduled improvement_review complete", {