nexus-agents 8.83.0 → 8.84.0

package/dist/{chunk-CEPKZE3M.js → chunk-3VZCDTK5.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-VRTZSUMG.js";
+} from "./chunk-6YQTQYKD.js";
 import {
   executeExpert
 } from "./chunk-3NPRFOSH.js";
@@ -72,7 +72,7 @@ import {
   updateStage,
   withWarnings,
   writeJobCancelled
-} from "./chunk-ZUWF76BV.js";
+} from "./chunk-JM7Z4XKP.js";
 import {
   allOf,
   anyOf
@@ -89,13 +89,13 @@ import {
   createGraphAuditBridge,
   emitPipelinePolicyEvent,
   readActionRefusal
-} from "./chunk-3EFOVHKF.js";
+} from "./chunk-H4X7QDTB.js";
 import {
   sanitizeInput
 } from "./chunk-U53CKPED.js";
 import {
   withPrerequisite
-} from "./chunk-HA2U5XJ2.js";
+} from "./chunk-QOJS3KCM.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -120,7 +120,7 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-CPJWPHUX.js";
+} from "./chunk-OY27GVJ4.js";
 import {
   EventTopics,
   UNRESOLVED_MODEL_ID,
@@ -45461,7 +45461,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-TS4WXIQ2.js");
+    const { createIssueTriage } = await import("./issue-triage-XG2AISLY.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num2 = issueMatch[2] ?? "";
@@ -45863,7 +45863,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-4VBUZ5NH.js");
+    const { executeVoting } = await import("./consensus-vote-TV7NW6HD.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -46830,7 +46830,7 @@ function createVoteStage({ config, startStage }) {
     const strategy = config.votingStrategy ?? "higher_order";
     await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
     try {
-      const { executeVoting } = await import("./consensus-vote-4VBUZ5NH.js");
+      const { executeVoting } = await import("./consensus-vote-TV7NW6HD.js");
       const votingResult = await executeVoting(
         {
           proposal: buildVoteProposal(plan, research),
@@ -56292,4 +56292,4 @@ export {
   startPipelineEventBridge,
   shutdownPipelineEventBridge
 };
-//# sourceMappingURL=chunk-CEPKZE3M.js.map
+//# sourceMappingURL=chunk-3VZCDTK5.js.map

package/dist/{chunk-VRTZSUMG.js → chunk-6YQTQYKD.js}

@@ -12,7 +12,7 @@ import {
   NODE_ENGINE_RANGE,
   VERSION,
   isNodeVersionSupported
-} from "./chunk-NXMETLX7.js";
+} from "./chunk-7WJIC7H6.js";
 import {
   claimGlobalRegistry
 } from "./chunk-YWEZ7W4K.js";
@@ -1372,7 +1372,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-OFOKYKTI.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-Y6FMGFGP.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1474,4 +1474,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-VRTZSUMG.js.map
+//# sourceMappingURL=chunk-6YQTQYKD.js.map

package/dist/{chunk-NXMETLX7.js → chunk-7WJIC7H6.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "8.83.0" : "dev";
+var VERSION = true ? "8.84.0" : "dev";
 var NODE_ENGINE_RANGE = ">=22.5.0";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -11,4 +11,4 @@ export {
   NODE_ENGINE_RANGE,
   isNodeVersionSupported
 };
-//# sourceMappingURL=chunk-NXMETLX7.js.map
+//# sourceMappingURL=chunk-7WJIC7H6.js.map

package/dist/{chunk-3EFOVHKF.js → chunk-H4X7QDTB.js}

@@ -1012,6 +1012,55 @@ function policyRefusal(policy, policyMode, user, effectiveTrustTier) {
     violations: blocking
   };
 }
+function executeActionPolicy(action, options, config) {
+  const context = options.context ?? config.defaultContext;
+  const actionContext = buildActionContext(options.effectiveTrustTier, context, options);
+  const evaluation = evaluateFirewallPolicy(
+    actionContext,
+    action,
+    config.auditStage ? config.auditTrail : void 0
+  );
+  const blocking = blockingViolations(evaluation);
+  if (blocking.length > 0) {
+    logger2.warn("Firewall surfaced blocking policy violations", {
+      user: options.user,
+      effectiveTrustTier: options.effectiveTrustTier,
+      scope: evaluation.scope,
+      rules: blocking.map((v) => v.rule)
+    });
+  }
+  const refusal = policyRefusal(
+    evaluation,
+    config.policyMode,
+    options.user,
+    options.effectiveTrustTier
+  );
+  if (refusal !== void 0) return err(refusal);
+  return ok({
+    evaluated: true,
+    policy: evaluation,
+    effectiveTrustTier: options.effectiveTrustTier,
+    policyMode: config.policyMode,
+    wouldRefuse: blocking.length > 0 && config.policyMode === "audit"
+  });
+}
+function evaluateActionPolicy(action, options, config) {
+  if (options.user.trim() === "") {
+    return err({
+      code: "EXTRACTION_FAILED",
+      message: "Author username is required",
+      stage: "extraction"
+    });
+  }
+  if (!config.policyEnforcementStage) {
+    return ok({
+      evaluated: false,
+      reason: "policy-stage-disabled",
+      policyMode: config.policyMode
+    });
+  }
+  return executeActionPolicy(action, options, config);
+}
 
 // src/security/corroboration-validator.ts
 function hasCIPass(sources) {
@@ -1244,10 +1293,31 @@ var HostileInputFirewall = class {
         reputationGate,
         atl,
         policy,
-        start
+        start,
+        user: meta.username,
+        context
       })
     );
   }
+  /**
+   * Action-shaped re-entry that evaluates policy for one action against an
+   * already-enforced trust tier (#6310).
+   *
+   * Unlike {@link process}, this does NOT re-run input extraction, sanitization,
+   * trust classification, or reputation gating, and does NOT re-emit the
+   * input-level audit events (`sanitization`, `reputation`, `trust_classification`).
+   * It evaluates the policy stage against the provided tier and context,
+   * recording only the `policy_gate` event to the audit trail.
+   */
+  evaluateAction(action, options) {
+    return evaluateActionPolicy(action, options, {
+      defaultContext: this.context,
+      policyMode: this.policyMode,
+      policyEnforcementStage: this.stages.policyEnforcement,
+      auditTrail: this.auditTrail,
+      auditStage: this.stages.audit
+    });
+  }
   /**
    * Runs the policy checks the call's facts allow — see
    * {@link evaluateFirewallPolicy} (#5380; Rule-of-Two-only since #3198). The
@@ -1299,7 +1369,13 @@ var HostileInputFirewall = class {
       wouldRefuse: blocking && this.policyMode === "audit",
       auditEvents: this.auditTrail.query().map((e) => ({ id: e.id, type: e.type })),
       auditSink: this.auditSink,
-      durationMs: Date.now() - parts.start
+      durationMs: Date.now() - parts.start,
+      evaluateAction: (action, evalOptions) => this.evaluateAction(action, {
+        user: parts.user,
+        effectiveTrustTier: parts.effectiveTrustTier,
+        context: evalOptions?.context ?? parts.context,
+        existingLabels: evalOptions?.existingLabels
+      })
     };
   }
   /**
@@ -1581,7 +1657,60 @@ function runUntrustedInputFirewall(input, options) {
   if (!result.ok) return err(asError(result.error));
   return ok(result.value);
 }
-function evaluateActionThroughFirewall(input, options) {
+function isActionHandleInput(input) {
+  return "evaluateAction" in input && typeof input.evaluateAction === "function";
+}
+function logAuditRefusal(actionType, result) {
+  const { policy, effectiveTrustTier } = result;
+  logger4.warn("Untrusted-input firewall would refuse under enforce (audit mode)", {
+    actionType,
+    trustTier: effectiveTrustTier,
+    scope: policy.scope,
+    rules: policy.violations.filter((v) => v.severity === "block").map((v) => v.rule),
+    unmeasured: policy.unmeasured
+  });
+}
+function evaluateActionViaHandle(input, options) {
+  const actionResult = input.evaluateAction(options.action, {
+    context: options.context,
+    existingLabels: options.existingLabels
+  });
+  if (!actionResult.ok) {
+    const { code, stage, violations } = actionResult.error;
+    if (code !== "POLICY_REFUSED" || stage !== "policy") return err(asError(actionResult.error));
+    if (violations === void 0 || violations.length === 0)
+      return err(asError(actionResult.error));
+    return ok({ refused: true, allowed: false, violations, policyMode: "enforce" });
+  }
+  if (!actionResult.value.evaluated) {
+    return err(
+      new Error(
+        `Untrusted-input firewall did not evaluate policy for action ${options.action.type} (the policy stage is disabled)`
+      )
+    );
+  }
+  const { policy, policyMode, wouldRefuse, effectiveTrustTier } = actionResult.value;
+  if (effectiveTrustTier !== options.enforcedTier) {
+    return err(
+      new Error(
+        `Untrusted-input firewall enforced tier ${effectiveTrustTier} for action ${options.action.type} but tier ${options.enforcedTier} for the classification`
+      )
+    );
+  }
+  if (wouldRefuse) {
+    logAuditRefusal(options.action.type, actionResult.value);
+  }
+  return ok({
+    refused: false,
+    allowed: policy.allowed,
+    requiresApproval: policy.requiresApproval,
+    violations: policy.violations,
+    effectiveTrustTier,
+    policyMode,
+    wouldRefuse
+  });
+}
+function evaluateActionViaProcess(input, options) {
   const { enforcedTier, ...processOptions } = options;
   const result = processAndLog(input, processOptions);
   if (!result.ok) {
@@ -1616,6 +1745,12 @@ function evaluateActionThroughFirewall(input, options) {
     wouldRefuse
   });
 }
+function evaluateActionThroughFirewall(input, options) {
+  if (isActionHandleInput(input)) {
+    return evaluateActionViaHandle(input, options);
+  }
+  return evaluateActionViaProcess(input, options);
+}
 function validateActionCorroboration(action) {
   const result = getUntrustedInputFirewall().validateAction(action);
   if (!result.ok) {
@@ -2207,7 +2342,7 @@ var IssueTriage = class {
     const actions = this.generateActions(safeTitle, safeBody, issueResult, enforced);
     const withEscalation = applySafetyActions(actions, gateDecision, reputation, issueResult);
     const validatedActions = validateActionsThroughFirewall(
-      firewallInputFor("issue", issueResult),
+      firewall.value,
       { ...this.firewallOptions(reputation), enforcedTier: gateDecision.enforcedTier },
       withEscalation,
       existingLabels
@@ -2515,4 +2650,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-3EFOVHKF.js.map
+//# sourceMappingURL=chunk-H4X7QDTB.js.map