nexus-agents 3.5.1 → 3.5.3

package/dist/{chunk-6ZOZYECZ.js → chunk-454KEMNV.js}

@@ -49,7 +49,7 @@ import {
 } from "./chunk-OQLFRJCW.js";
 
 // src/version.ts
-var VERSION = true ? "3.5.1" : "dev";
+var VERSION = true ? "3.5.3" : "dev";
 
 // src/config/schemas-core.ts
 import { z } from "zod";
@@ -2287,7 +2287,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { runSetup } = await import("./setup-command-VWOUSXWP.js");
+    const { runSetup } = await import("./setup-command-5YJMFY3W.js");
     const setupResult = runSetup({
       skipMcp: true,
       skipRules: true,
@@ -2400,4 +2400,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-6ZOZYECZ.js.map
+//# sourceMappingURL=chunk-454KEMNV.js.map

package/dist/{chunk-CQ4Y7ULT.js → chunk-C4GSCDCI.js}

@@ -8,7 +8,7 @@ import {
   checkSqlite,
   defaultConfig,
   initDataDirectories
-} from "./chunk-6ZOZYECZ.js";
+} from "./chunk-454KEMNV.js";
 import {
   BUILT_IN_EXPERTS
 } from "./chunk-YPNQPT2F.js";
@@ -2001,4 +2001,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=chunk-CQ4Y7ULT.js.map
+//# sourceMappingURL=chunk-C4GSCDCI.js.map

package/dist/{chunk-6H5AM5SG.js → chunk-VJU2NER7.js}

@@ -22,7 +22,7 @@ import {
   DEFAULT_TASK_TTL_MS,
   DEFAULT_TOOL_RATE_LIMITS,
   clampTaskTtl
-} from "./chunk-6ZOZYECZ.js";
+} from "./chunk-454KEMNV.js";
 import {
   executeExpert
 } from "./chunk-GVLDWGSK.js";
@@ -45344,6 +45344,68 @@ function buildScanSummary(total, confirmed, falsePositives, osvCount) {
   return parts.join(", ");
 }
 
+// src/security/quality-gate-commands.ts
+import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
+import { join as join9 } from "path";
+var LOCKFILES = [
+  { file: "pnpm-lock.yaml", manager: "pnpm" },
+  { file: "yarn.lock", manager: "yarn" },
+  { file: "bun.lockb", manager: "bun" },
+  { file: "package-lock.json", manager: "npm" }
+];
+var SCRIPT_CANDIDATES = {
+  lint: ["lint"],
+  typecheck: ["typecheck", "type-check", "types"],
+  tests: ["test", "tests"],
+  build: ["build"]
+};
+function detectPackageManager(projectDir) {
+  for (const { file, manager } of LOCKFILES) {
+    if (existsSync9(join9(projectDir, file))) return manager;
+  }
+  return "npm";
+}
+function readScripts(projectDir) {
+  const manifest = join9(projectDir, "package.json");
+  if (!existsSync9(manifest)) return void 0;
+  try {
+    const parsed = JSON.parse(readFileSync7(manifest, "utf-8"));
+    if (typeof parsed !== "object" || parsed === null) return void 0;
+    const scripts = parsed.scripts;
+    if (typeof scripts !== "object" || scripts === null) return void 0;
+    const out = {};
+    for (const [name, body] of Object.entries(scripts)) {
+      if (typeof body === "string") out[name] = body;
+    }
+    return out;
+  } catch {
+    return void 0;
+  }
+}
+function resolveCheckCommand(projectDir, check) {
+  const scripts = readScripts(projectDir);
+  if (scripts === void 0) {
+    return {
+      kind: "unconfigured",
+      reason: `no readable package.json in ${projectDir}, so the "${check}" script could not be resolved`
+    };
+  }
+  const candidates = SCRIPT_CANDIDATES[check];
+  const found = candidates.find((name) => (scripts[name] ?? "").trim() !== "");
+  if (found === void 0) {
+    return {
+      kind: "unconfigured",
+      reason: `no "${check}" script declared (looked for: ${candidates.join(", ")})`
+    };
+  }
+  return {
+    kind: "command",
+    command: detectPackageManager(projectDir),
+    args: ["run", "--silent", found],
+    script: found
+  };
+}
+
 // src/security/quality-gate.ts
 async function runCommandCheck(name, command, args, cwd) {
   const start = Date.now();
@@ -45368,17 +45430,31 @@ async function runCommandCheck(name, command, args, cwd) {
     };
   }
 }
+function scriptedCheck(name, check, projectDir) {
+  return async () => {
+    const resolved = resolveCheckCommand(projectDir, check);
+    if (resolved.kind === "unconfigured") {
+      return {
+        name,
+        verdict: "skip",
+        details: `Not run: ${resolved.reason}. Declare the script to enable this check.`,
+        durationMs: 0
+      };
+    }
+    return runCommandCheck(name, resolved.command, resolved.args, projectDir);
+  };
+}
 function checkTypeCheck(projectDir) {
-  return () => runCommandCheck("type_check", "npx", ["tsc", "--noEmit", "--project", projectDir], projectDir);
+  return scriptedCheck("type_check", "typecheck", projectDir);
 }
 function checkLint(projectDir) {
-  return () => runCommandCheck("lint", "npx", ["eslint", "--max-warnings", "0", projectDir], projectDir);
+  return scriptedCheck("lint", "lint", projectDir);
 }
 function checkTests(projectDir) {
-  return () => runCommandCheck("tests", "npx", ["vitest", "run", "--dir", projectDir], projectDir);
+  return scriptedCheck("tests", "tests", projectDir);
 }
 function checkBuild(projectDir) {
-  return () => runCommandCheck("build", "pnpm", ["build"], projectDir);
+  return scriptedCheck("build", "build", projectDir);
 }
 function aggregateResults2(checks) {
   let pass = 0;
@@ -45389,14 +45465,23 @@ function aggregateResults2(checks) {
     else if (c.verdict === "fail") fail++;
     else skip2++;
   }
-  return { verdict: fail > 0 ? "fail" : "pass", summary: { pass, fail, skip: skip2 } };
+  const verdict = fail > 0 ? "fail" : pass === 0 && skip2 > 0 ? "skip" : "pass";
+  return { verdict, summary: { pass, fail, skip: skip2 } };
 }
 function generateFeedback2(checks) {
   const failures = checks.filter((c) => c.verdict === "fail");
-  if (failures.length === 0) return "All checks passed.";
+  const skipped = checks.filter((c) => c.verdict === "skip");
+  const skipNote = skipped.length > 0 ? `
+${String(skipped.length)} check(s) did not run:
+${skipped.map((s) => `- ${s.name}: ${s.details}`).join("\n")}` : "";
+  if (failures.length === 0) {
+    const ran = checks.length - skipped.length;
+    const headline = ran === 0 ? "No checks ran." : `All ${String(ran)} check(s) that ran passed.`;
+    return `${headline}${skipNote}`;
+  }
   const lines = failures.map((f) => `- ${f.name}: ${f.details}`);
   return `${String(failures.length)} check(s) failed:
-${lines.join("\n")}`;
+${lines.join("\n")}${skipNote}`;
 }
 async function runQualityGate(stage, checks, iteration = 1) {
   const results = [];
@@ -45952,7 +46037,7 @@ Verdict: PASS/NEEDS_WORK/REJECT`,
         checkLint(target),
         checkTests(target)
       ]);
-      const passed = result.verdict !== "fail";
+      const passed = result.verdict === "pass";
       const ms = getTimeProvider().now() - start;
       emitStageEvent2("quality-gate", passed ? "completed" : "failed", { durationMs: ms });
       recordOutcome({
@@ -45962,11 +46047,8 @@ Verdict: PASS/NEEDS_WORK/REJECT`,
         success: passed,
         durationMs: ms
       });
-      await postProgress(
-        config,
-        "QualityGate",
-        passed ? "Passed" : `Gate failed: ${result.feedback}`
-      );
+      const verdictNote = result.verdict === "skip" ? `Gate unmeasured: ${result.feedback}` : `Gate failed: ${result.feedback}`;
+      await postProgress(config, "QualityGate", passed ? "Passed" : verdictNote);
       return { passed, feedback: result.feedback };
     },
     securityScan: async () => {
@@ -45976,7 +46058,7 @@ Verdict: PASS/NEEDS_WORK/REJECT`,
       await postProgress(config, "Security", `Scanning ${target}...`);
       const check = checkSecurityScan(target);
       const result = await check();
-      const passed = result.verdict !== "fail";
+      const passed = result.verdict === "pass";
       const ms = getTimeProvider().now() - start;
       emitStageEvent2("security", passed ? "completed" : "failed", { durationMs: ms });
       recordOutcome({
@@ -46456,8 +46538,8 @@ function reviewedDiffWasTruncated(diff) {
 }
 
 // src/audit/pr-review-record-store.ts
-import { appendFileSync as appendFileSync4, existsSync as existsSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync7 } from "fs";
-import { dirname as dirname4, isAbsolute, join as join9, resolve as resolve13 } from "path";
+import { appendFileSync as appendFileSync4, existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync8 } from "fs";
+import { dirname as dirname4, isAbsolute, join as join10, resolve as resolve13 } from "path";
 
 // src/audit/pr-review-record.ts
 import * as crypto3 from "crypto";
@@ -46588,7 +46670,7 @@ function assertNotSourceCheckoutWrite(filePath) {
   if (!isUnderTestRunner()) return;
   const here = findRepoRoot(process.cwd());
   if (here === null) return;
-  if (resolve13(filePath) !== resolve13(join9(here, PR_REVIEW_RECORDS_REL_PATH))) return;
+  if (resolve13(filePath) !== resolve13(join10(here, PR_REVIEW_RECORDS_REL_PATH))) return;
   throw new Error(
     `Refusing to write ${filePath} from a test run (#4415): this is the source checkout's tracked, hash-chained audit file, and a fabricated record that chains cleanly is indistinguishable from a real verdict. Pass repoPath to a throwaway repo, or set NEXUS_PR_REVIEW_RECORDS_PATH.`
   );
@@ -46600,17 +46682,17 @@ function resolvePrReviewRecordsPath(repoPathOverride) {
   }
   if (repoPathOverride !== void 0 && repoPathOverride.trim() !== "") {
     const overrideRoot = findRepoRoot(repoPathOverride);
-    if (overrideRoot !== null) return join9(overrideRoot, PR_REVIEW_RECORDS_REL_PATH);
+    if (overrideRoot !== null) return join10(overrideRoot, PR_REVIEW_RECORDS_REL_PATH);
   }
   const root = findRepoRoot(process.cwd());
   if (root === null) return void 0;
-  return join9(root, PR_REVIEW_RECORDS_REL_PATH);
+  return join10(root, PR_REVIEW_RECORDS_REL_PATH);
 }
 function readPrReviewRecords(filePath) {
   const records = [];
   const invalidLines = [];
-  if (!existsSync9(filePath)) return { records, invalidLines };
-  const lines = readFileSync7(filePath, "utf-8").split("\n").filter((l) => l.trim() !== "");
+  if (!existsSync10(filePath)) return { records, invalidLines };
+  const lines = readFileSync8(filePath, "utf-8").split("\n").filter((l) => l.trim() !== "");
   for (const [i, line] of lines.entries()) {
     try {
       const parsed = PrReviewRecordSchema.safeParse(JSON.parse(line));
@@ -46623,7 +46705,7 @@ function readPrReviewRecords(filePath) {
   return { records, invalidLines };
 }
 function readPrReviewLedgerTip(filePath, logger58) {
-  if (!existsSync9(filePath)) return { maxSequence: -1, lastHash: void 0 };
+  if (!existsSync10(filePath)) return { maxSequence: -1, lastHash: void 0 };
   try {
     const { records } = readPrReviewRecords(filePath);
     if (records.length === 0) return { maxSequence: -1, lastHash: void 0 };
@@ -47856,7 +47938,7 @@ function registerQueryTaskStateTool(server, deps) {
 import { z as z100 } from "zod";
 
 // src/mcp/tools/ci-health-log.ts
-import { appendFileSync as appendFileSync5, existsSync as existsSync11, readFileSync as readFileSync9, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
+import { appendFileSync as appendFileSync5, existsSync as existsSync12, readFileSync as readFileSync10, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
 import { z as z99 } from "zod";
 
 // src/mcp/tools/ci-health-types.ts
@@ -47898,7 +47980,7 @@ function capLogSize(path12) {
   }
   if (size <= max) return;
   try {
-    const lines = readFileSync9(path12, "utf-8").split("\n").filter((l) => l !== "");
+    const lines = readFileSync10(path12, "utf-8").split("\n").filter((l) => l !== "");
     const kept = [];
     let bytes = 0;
     for (let i = lines.length - 1; i >= 0; i--) {
@@ -48701,7 +48783,7 @@ function createMetaOrchestrator(options) {
 }
 
 // src/orchestration/meta-shadow-selector.ts
-import { appendFileSync as appendFileSync6, existsSync as existsSync12, readFileSync as readFileSync10 } from "fs";
+import { appendFileSync as appendFileSync6, existsSync as existsSync13, readFileSync as readFileSync11 } from "fs";
 import { z as z104 } from "zod";
 var SHADOW_STRATEGY_ARMS = [
   "single-shot",
@@ -48820,11 +48902,11 @@ function hydrateShadowSelector(selector) {
   const hydratable = selector;
   if (typeof hydratable.recordFromContext !== "function") return 0;
   const file = getMetaOutcomesFile();
-  if (!existsSync12(file)) return 0;
+  if (!existsSync13(file)) return 0;
   let replayed = 0;
   try {
     const cutoff = Date.now() - HYDRATE_LOOKBACK_MS;
-    const lines = readFileSync10(file, "utf-8").split("\n").filter((l) => l.trim().length > 0);
+    const lines = readFileSync11(file, "utf-8").split("\n").filter((l) => l.trim().length > 0);
     for (const line of lines) {
       let parsed;
       try {
@@ -54172,4 +54254,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-6H5AM5SG.js.map
+//# sourceMappingURL=chunk-VJU2NER7.js.map