nexus-agents 2.128.0 → 2.128.2

package/dist/{chunk-IVJPTSGH.js → chunk-KRBE2EVT.js}

@@ -8,7 +8,7 @@ import {
   checkSqlite,
   defaultConfig,
   initDataDirectories
-} from "./chunk-2H33GLR2.js";
+} from "./chunk-LYE2ZVJT.js";
 import {
   BUILT_IN_EXPERTS
 } from "./chunk-ZM4O442V.js";
@@ -2000,4 +2000,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=chunk-IVJPTSGH.js.map
+//# sourceMappingURL=chunk-KRBE2EVT.js.map

package/dist/{chunk-2H33GLR2.js → chunk-LYE2ZVJT.js}

@@ -40,7 +40,7 @@ import {
 } from "./chunk-ZGLIHPGJ.js";
 
 // src/version.ts
-var VERSION = true ? "2.128.0" : "dev";
+var VERSION = true ? "2.128.2" : "dev";
 
 // src/config/schemas-core.ts
 import { z } from "zod";
@@ -2122,7 +2122,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { runSetup } = await import("./setup-command-DM6BWZ3M.js");
+    const { runSetup } = await import("./setup-command-N6OSFYCT.js");
     const setupResult = runSetup({
       skipMcp: true,
       skipRules: true,
@@ -2234,4 +2234,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-2H33GLR2.js.map
+//# sourceMappingURL=chunk-LYE2ZVJT.js.map

package/dist/{chunk-M5QEWTVL.js → chunk-UI6BFGML.js}

@@ -875,12 +875,17 @@ var SECRET_PATTERNS = [
   { name: "slack-token", re: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/ },
   { name: "google-api-key", re: /\bAIza[0-9A-Za-z_-]{35}\b/ },
   { name: "openai-key", re: /\bsk-[A-Za-z0-9]{32,}\b/ },
+  // Newer OpenAI key families: project/service-account/admin keys carry a
+  // `sk-proj-`/`sk-svcacct-`/`sk-admin-` prefix and base64url bodies (with - and
+  // _), so the classic class above breaks at the first hyphen (#3752).
+  { name: "openai-key", re: /\bsk-(?:proj|svcacct|admin)-[A-Za-z0-9_-]{20,}\b/ },
   { name: "anthropic-key", re: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/ },
   { name: "jwt", re: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/ },
-  // Generic `secret/token/password/api_key = "long-value"` assignments.
+  // Generic `secret/token/password/api_key = "long-value"` assignments. The value
+  // class includes `=` so base64 values with padding (…==) still match (#3752).
   {
     name: "generic-credential-assignment",
-    re: /(?:api[_-]?key|secret|token|password|passwd|credential)\s*[:=]\s*["'][A-Za-z0-9/+_-]{16,}["']/i
+    re: /(?:api[_-]?key|secret|token|password|passwd|credential)\s*[:=]\s*["'][A-Za-z0-9/+_=-]{16,}["']/i
   }
 ];
 function scanForSecrets(text) {
@@ -1634,4 +1639,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-M5QEWTVL.js.map
+//# sourceMappingURL=chunk-UI6BFGML.js.map