nexus-agents 11.5.1 → 11.5.3

package/dist/{chunk-ZXBJ4HVZ.js → chunk-4CBXLH3C.js}

@@ -7,7 +7,7 @@ import {
   toSdkCallback,
   toolStructuredError,
   wrapToolWithTimeout
-} from "./chunk-SFYUQ6VO.js";
+} from "./chunk-KU3PCH33.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2435,4 +2435,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-ZXBJ4HVZ.js.map
+//# sourceMappingURL=chunk-4CBXLH3C.js.map

package/dist/{chunk-D2GLZQWX.js → chunk-4JK65FIK.js}

@@ -7,7 +7,7 @@ import {
   VERSION,
   isNodeVersionSupported,
   recordServerTransport
-} from "./chunk-WVTPJ5EZ.js";
+} from "./chunk-SUEJSLDL.js";
 import {
   checkGatewayHealth,
   cliFailsVerdict,
@@ -2263,7 +2263,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-WP6PMWTU.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-N6GDFLZU.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -2383,4 +2383,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-D2GLZQWX.js.map
+//# sourceMappingURL=chunk-4JK65FIK.js.map

package/dist/{chunk-XOIHFGGN.js → chunk-4NP5DCWF.js}

@@ -58,7 +58,7 @@ import {
   updateStage,
   withFileLock,
   writeJobCancelled
-} from "./chunk-DRB75MT6.js";
+} from "./chunk-MXJGTZGT.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
@@ -77,7 +77,7 @@ import {
 } from "./chunk-773AZVR3.js";
 import {
   withPrerequisite
-} from "./chunk-ZXBJ4HVZ.js";
+} from "./chunk-4CBXLH3C.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -105,7 +105,7 @@ import {
   toolSuccess,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-SFYUQ6VO.js";
+} from "./chunk-KU3PCH33.js";
 import {
   generateSecurityPlan
 } from "./chunk-6ZTMMN2N.js";
@@ -187,7 +187,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-D2GLZQWX.js";
+} from "./chunk-4JK65FIK.js";
 import {
   allOf,
   anyOf
@@ -196,7 +196,7 @@ import {
   VERSION,
   createRequestContext,
   measuredTrustTier
-} from "./chunk-WVTPJ5EZ.js";
+} from "./chunk-SUEJSLDL.js";
 import {
   BWRAP_READ_ONLY_ARGS,
   CliDetectionCache,
@@ -46682,7 +46682,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-ZG45DHGC.js");
+    const { executeVoting } = await import("./consensus-vote-JKZYMHLE.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -48577,7 +48577,7 @@ function createVoteStage({ config, startStage }) {
     const strategy = config.votingStrategy ?? "higher_order";
     await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
     try {
-      const { executeVoting } = await import("./consensus-vote-ZG45DHGC.js");
+      const { executeVoting } = await import("./consensus-vote-JKZYMHLE.js");
       const proposal = buildVoteProposal(plan, research);
       const votingResult = await executeVoting(
         {
@@ -49866,13 +49866,13 @@ function checkSecurityScan(targetDir, rulesets = ["p/default"], config = {}) {
 async function runBaselineGate(target, rulesets, config, signal) {
   const start = Date.now();
   const comparison = await compareSecurityBaseline(target, rulesets, config, signal);
-  const osv = comparison.complete ? await runOsvCheck(config.dependencyTarget ?? target, config, signal) : OSV_EMPTY;
+  const osv = await runOsvCheck(config.dependencyTarget ?? target, config, signal);
   throwIfAborted(signal, "Security baseline scan aborted");
   const osvFailed = blocksDependencyCheck(osv);
-  const details = comparison.complete ? `Base ${String(comparison.baseCount)}, worktree ${String(comparison.worktreeCount)} findings; ${String(comparison.introducedBlockingCount)} introduced blocking; ${buildScanSummary(comparison.worktreeCount ?? 0, comparison.introducedBlockingCount ?? 0, osv.vulnerabilities.length, osv)}` : `Security comparison incomplete: ${comparison.errors.join("; ")}`;
+  const details = comparison.complete ? `Base ${String(comparison.baseCount)}, worktree ${String(comparison.worktreeCount)} findings; ${String(comparison.introducedBlockingCount)} introduced blocking; ${buildScanSummary(comparison.worktreeCount ?? 0, comparison.introducedBlockingCount ?? 0, osv.vulnerabilities.length, osv)}` : `Dependency check: ${buildScanSummary(null, 0, osv.vulnerabilities.length, osv)}; Security comparison incomplete: ${comparison.errors.join("; ")}`;
   return {
     name: "security_scan",
-    verdict: !comparison.complete ? "skip" : comparison.introducedBlockingCount === 0 && !osvFailed ? "pass" : "fail",
+    verdict: osvFailed ? "fail" : !comparison.complete ? "skip" : comparison.introducedBlockingCount === 0 ? "pass" : "fail",
     details: (osv.manifestError === void 0 ? details : `${osv.manifestError}; ${details}`).slice(
       0,
       500
@@ -49938,7 +49938,7 @@ function coverageNoteField(osv) {
   return gaps.length === 0 ? {} : { coverageNote: `Dependency coverage partial: ${gaps.join("; ")}` };
 }
 function buildScanSummary(total, blocking2, osvCount, osv, sarifParseErrors = 0) {
-  const parts = [`${String(total)} SAST findings`];
+  const parts = total === null ? [] : [`${String(total)} SAST findings`];
   if (sarifParseErrors > 0) {
     parts.push(
       `${String(sarifParseErrors)} scanner output line(s) unreadable \u2014 SAST coverage is partial`
@@ -59343,4 +59343,4 @@ export {
   initializeSandbox,
   getSandboxMode
 };
-//# sourceMappingURL=chunk-XOIHFGGN.js.map
+//# sourceMappingURL=chunk-4NP5DCWF.js.map