nexus-agents 8.83.0 → 8.85.0

package/dist/{ast-rule-runner-O2UYBG74.js → ast-rule-runner-LXMZIGCY.js}

@@ -9,8 +9,8 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-BTFOWREE.js";
-import "./chunk-IPZC5BXM.js";
+} from "./chunk-R5ASFO5P.js";
+import "./chunk-HXOEF3YP.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -26,4 +26,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-O2UYBG74.js.map
+//# sourceMappingURL=ast-rule-runner-LXMZIGCY.js.map

package/dist/{child-mcp-config-W2EPNDEU.js → child-mcp-config-OBHZQG2Q.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-HERI7LXN.js";
 import {
   createLogger
-} from "./chunk-IPZC5BXM.js";
+} from "./chunk-HXOEF3YP.js";
 import "./chunk-4UHDDCRB.js";
 import "./chunk-RNDHNRSX.js";
 import "./chunk-PX6F3LHL.js";
@@ -56,4 +56,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-W2EPNDEU.js.map
+//# sourceMappingURL=child-mcp-config-OBHZQG2Q.js.map

package/dist/{chunk-APF7COQN.js → chunk-2EBCZOVZ.js}

@@ -2,7 +2,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-IPZC5BXM.js";
+} from "./chunk-HXOEF3YP.js";
 
 // src/scm/token-resolver.ts
 import { execFile } from "node:child_process";
@@ -87,4 +87,4 @@ export {
   hasToken,
   getTokenEnvVars
 };
-//# sourceMappingURL=chunk-APF7COQN.js.map
+//# sourceMappingURL=chunk-2EBCZOVZ.js.map

package/dist/{chunk-NYF2WZAK.js → chunk-45EJ4PBT.js}

@@ -3,7 +3,7 @@ import {
   MODEL_IDS,
   getTimeProvider,
   resolveModelIdentitySync
-} from "./chunk-IPZC5BXM.js";
+} from "./chunk-HXOEF3YP.js";
 
 // src/config/model-availability.ts
 var DEFAULT_TTL_MS = 6e4;
@@ -150,4 +150,4 @@ export {
   resetAvailabilityCache,
   filterAvailableModels
 };
-//# sourceMappingURL=chunk-NYF2WZAK.js.map
+//# sourceMappingURL=chunk-45EJ4PBT.js.map

package/dist/{chunk-TURGEY3I.js → chunk-6FXHSNXA.js}

@@ -1,6 +1,6 @@
 import {
   getErrorMessage
-} from "./chunk-IPZC5BXM.js";
+} from "./chunk-HXOEF3YP.js";
 
 // src/cli/setup-config.ts
 import { copyFileSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
@@ -77,4 +77,4 @@ function ensureBackup(outputPath) {
 export {
   runConfigInitSync
 };
-//# sourceMappingURL=chunk-TURGEY3I.js.map
+//# sourceMappingURL=chunk-6FXHSNXA.js.map

package/dist/{chunk-YRTHZDTO.js → chunk-6Q7EYNH2.js}

@@ -4,7 +4,7 @@ import {
 import {
   createLogger,
   getTimeProvider
-} from "./chunk-IPZC5BXM.js";
+} from "./chunk-HXOEF3YP.js";
 
 // src/mcp/tools/scanner-registry-fetcher.ts
 import { z } from "zod";
@@ -740,4 +740,4 @@ export {
   generateSecurityPlan,
   buildPlanFromAnalysis
 };
-//# sourceMappingURL=chunk-YRTHZDTO.js.map
+//# sourceMappingURL=chunk-6Q7EYNH2.js.map

package/dist/{chunk-PW4DLY5W.js → chunk-7LGBEEKB.js}

@@ -8,7 +8,7 @@ import {
   MCP_TIMEOUTS,
   TEST_TIMEOUTS,
   WORKFLOW_TIMEOUTS
-} from "./chunk-IPZC5BXM.js";
+} from "./chunk-HXOEF3YP.js";
 import {
   createGetToolRateLimit
 } from "./chunk-RNDHNRSX.js";
@@ -223,4 +223,4 @@ export {
   CUSTOM_API_DEFAULT_MODEL,
   DEFAULTS
 };
-//# sourceMappingURL=chunk-PW4DLY5W.js.map
+//# sourceMappingURL=chunk-7LGBEEKB.js.map

package/dist/{chunk-3EFOVHKF.js → chunk-AKM6ILIM.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-FMN3QH3O.js";
+} from "./chunk-WUUZ5KH2.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -12,10 +12,10 @@ import {
   resolveEnvMode,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-U53CKPED.js";
+} from "./chunk-ZA627SSQ.js";
 import {
   hasToken
-} from "./chunk-APF7COQN.js";
+} from "./chunk-2EBCZOVZ.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   createLogger,
@@ -23,7 +23,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-IPZC5BXM.js";
+} from "./chunk-HXOEF3YP.js";
 
 // src/security/firewall/firewall-policy-mode.ts
 import { z } from "zod";
@@ -1012,6 +1012,55 @@ function policyRefusal(policy, policyMode, user, effectiveTrustTier) {
     violations: blocking
   };
 }
+function executeActionPolicy(action, options, config) {
+  const context = options.context ?? config.defaultContext;
+  const actionContext = buildActionContext(options.effectiveTrustTier, context, options);
+  const evaluation = evaluateFirewallPolicy(
+    actionContext,
+    action,
+    config.auditStage ? config.auditTrail : void 0
+  );
+  const blocking = blockingViolations(evaluation);
+  if (blocking.length > 0) {
+    logger2.warn("Firewall surfaced blocking policy violations", {
+      user: options.user,
+      effectiveTrustTier: options.effectiveTrustTier,
+      scope: evaluation.scope,
+      rules: blocking.map((v) => v.rule)
+    });
+  }
+  const refusal = policyRefusal(
+    evaluation,
+    config.policyMode,
+    options.user,
+    options.effectiveTrustTier
+  );
+  if (refusal !== void 0) return err(refusal);
+  return ok({
+    evaluated: true,
+    policy: evaluation,
+    effectiveTrustTier: options.effectiveTrustTier,
+    policyMode: config.policyMode,
+    wouldRefuse: blocking.length > 0 && config.policyMode === "audit"
+  });
+}
+function evaluateActionPolicy(action, options, config) {
+  if (options.user.trim() === "") {
+    return err({
+      code: "EXTRACTION_FAILED",
+      message: "Author username is required",
+      stage: "extraction"
+    });
+  }
+  if (!config.policyEnforcementStage) {
+    return ok({
+      evaluated: false,
+      reason: "policy-stage-disabled",
+      policyMode: config.policyMode
+    });
+  }
+  return executeActionPolicy(action, options, config);
+}
 
 // src/security/corroboration-validator.ts
 function hasCIPass(sources) {
@@ -1244,10 +1293,31 @@ var HostileInputFirewall = class {
         reputationGate,
         atl,
         policy,
-        start
+        start,
+        user: meta.username,
+        context
       })
     );
   }
+  /**
+   * Action-shaped re-entry that evaluates policy for one action against an
+   * already-enforced trust tier (#6310).
+   *
+   * Unlike {@link process}, this does NOT re-run input extraction, sanitization,
+   * trust classification, or reputation gating, and does NOT re-emit the
+   * input-level audit events (`sanitization`, `reputation`, `trust_classification`).
+   * It evaluates the policy stage against the provided tier and context,
+   * recording only the `policy_gate` event to the audit trail.
+   */
+  evaluateAction(action, options) {
+    return evaluateActionPolicy(action, options, {
+      defaultContext: this.context,
+      policyMode: this.policyMode,
+      policyEnforcementStage: this.stages.policyEnforcement,
+      auditTrail: this.auditTrail,
+      auditStage: this.stages.audit
+    });
+  }
   /**
    * Runs the policy checks the call's facts allow — see
    * {@link evaluateFirewallPolicy} (#5380; Rule-of-Two-only since #3198). The
@@ -1299,7 +1369,13 @@ var HostileInputFirewall = class {
       wouldRefuse: blocking && this.policyMode === "audit",
       auditEvents: this.auditTrail.query().map((e) => ({ id: e.id, type: e.type })),
       auditSink: this.auditSink,
-      durationMs: Date.now() - parts.start
+      durationMs: Date.now() - parts.start,
+      evaluateAction: (action, evalOptions) => this.evaluateAction(action, {
+        user: parts.user,
+        effectiveTrustTier: parts.effectiveTrustTier,
+        context: evalOptions?.context ?? parts.context,
+        existingLabels: evalOptions?.existingLabels
+      })
     };
   }
   /**
@@ -1581,7 +1657,60 @@ function runUntrustedInputFirewall(input, options) {
   if (!result.ok) return err(asError(result.error));
   return ok(result.value);
 }
-function evaluateActionThroughFirewall(input, options) {
+function isActionHandleInput(input) {
+  return "evaluateAction" in input && typeof input.evaluateAction === "function";
+}
+function logAuditRefusal(actionType, result) {
+  const { policy, effectiveTrustTier } = result;
+  logger4.warn("Untrusted-input firewall would refuse under enforce (audit mode)", {
+    actionType,
+    trustTier: effectiveTrustTier,
+    scope: policy.scope,
+    rules: policy.violations.filter((v) => v.severity === "block").map((v) => v.rule),
+    unmeasured: policy.unmeasured
+  });
+}
+function evaluateActionViaHandle(input, options) {
+  const actionResult = input.evaluateAction(options.action, {
+    context: options.context,
+    existingLabels: options.existingLabels
+  });
+  if (!actionResult.ok) {
+    const { code, stage, violations } = actionResult.error;
+    if (code !== "POLICY_REFUSED" || stage !== "policy") return err(asError(actionResult.error));
+    if (violations === void 0 || violations.length === 0)
+      return err(asError(actionResult.error));
+    return ok({ refused: true, allowed: false, violations, policyMode: "enforce" });
+  }
+  if (!actionResult.value.evaluated) {
+    return err(
+      new Error(
+        `Untrusted-input firewall did not evaluate policy for action ${options.action.type} (the policy stage is disabled)`
+      )
+    );
+  }
+  const { policy, policyMode, wouldRefuse, effectiveTrustTier } = actionResult.value;
+  if (effectiveTrustTier !== options.enforcedTier) {
+    return err(
+      new Error(
+        `Untrusted-input firewall enforced tier ${effectiveTrustTier} for action ${options.action.type} but tier ${options.enforcedTier} for the classification`
+      )
+    );
+  }
+  if (wouldRefuse) {
+    logAuditRefusal(options.action.type, actionResult.value);
+  }
+  return ok({
+    refused: false,
+    allowed: policy.allowed,
+    requiresApproval: policy.requiresApproval,
+    violations: policy.violations,
+    effectiveTrustTier,
+    policyMode,
+    wouldRefuse
+  });
+}
+function evaluateActionViaProcess(input, options) {
   const { enforcedTier, ...processOptions } = options;
   const result = processAndLog(input, processOptions);
   if (!result.ok) {
@@ -1616,6 +1745,12 @@ function evaluateActionThroughFirewall(input, options) {
     wouldRefuse
   });
 }
+function evaluateActionThroughFirewall(input, options) {
+  if (isActionHandleInput(input)) {
+    return evaluateActionViaHandle(input, options);
+  }
+  return evaluateActionViaProcess(input, options);
+}
 function validateActionCorroboration(action) {
   const result = getUntrustedInputFirewall().validateAction(action);
   if (!result.ok) {
@@ -2207,7 +2342,7 @@ var IssueTriage = class {
     const actions = this.generateActions(safeTitle, safeBody, issueResult, enforced);
     const withEscalation = applySafetyActions(actions, gateDecision, reputation, issueResult);
     const validatedActions = validateActionsThroughFirewall(
-      firewallInputFor("issue", issueResult),
+      firewall.value,
       { ...this.firewallOptions(reputation), enforcedTier: gateDecision.enforcedTier },
       withEscalation,
       existingLabels
@@ -2515,4 +2650,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-3EFOVHKF.js.map
+//# sourceMappingURL=chunk-AKM6ILIM.js.map