nexus-agents 3.5.3 → 3.5.5

package/dist/{chunk-HKX7HKDV.js → chunk-UAXEANMF.js}

@@ -1,6 +1,6 @@
 import {
   emitClawGuardViolation
-} from "./chunk-L4J7AXP3.js";
+} from "./chunk-J5TKJM7U.js";
 import {
   CACHE_TIMEOUTS,
   MCP_TIMEOUTS,
@@ -16,7 +16,7 @@ import {
   getTimeProvider,
   ok,
   resolveToolClassGuardMs
-} from "./chunk-YFY64CCU.js";
+} from "./chunk-OO7JQJTG.js";
 import {
   getNexusDataDir
 } from "./chunk-OQLFRJCW.js";
@@ -2028,4 +2028,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-HKX7HKDV.js.map
+//# sourceMappingURL=chunk-UAXEANMF.js.map

package/dist/{chunk-C4GSCDCI.js → chunk-URTX43PS.js}

@@ -1,6 +1,6 @@
 import {
   runConfigInitSync
-} from "./chunk-QDUZSOOU.js";
+} from "./chunk-KJY3WZJY.js";
 import {
   VERSION,
   checkApiKeys,
@@ -8,13 +8,13 @@ import {
   checkSqlite,
   defaultConfig,
   initDataDirectories
-} from "./chunk-454KEMNV.js";
+} from "./chunk-SRCFMAN5.js";
 import {
   BUILT_IN_EXPERTS
 } from "./chunk-YPNQPT2F.js";
 import {
   probeAllClis
-} from "./chunk-45IB3F6G.js";
+} from "./chunk-TXQUWORP.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   colors,
@@ -25,7 +25,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   symbols
-} from "./chunk-YFY64CCU.js";
+} from "./chunk-OO7JQJTG.js";
 import {
   ensureGitignored,
   findRepoRoot
@@ -2001,4 +2001,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=chunk-C4GSCDCI.js.map
+//# sourceMappingURL=chunk-URTX43PS.js.map

package/dist/{chunk-U76AVHIW.js → chunk-VIVICQZY.js}

@@ -4,7 +4,7 @@ import {
   err,
   getErrorMessage,
   ok
-} from "./chunk-YFY64CCU.js";
+} from "./chunk-OO7JQJTG.js";
 
 // src/scm/types.ts
 var ScmError = class extends Error {
@@ -263,4 +263,4 @@ export {
   ScmError,
   GitHubProvider
 };
-//# sourceMappingURL=chunk-U76AVHIW.js.map
+//# sourceMappingURL=chunk-VIVICQZY.js.map

package/dist/{chunk-VJU2NER7.js → chunk-W6BGGXFL.js}

@@ -1,6 +1,6 @@
 import {
   generateSecurityPlan
-} from "./chunk-XKAUANYB.js";
+} from "./chunk-WSFTWS2A.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-HFOQKCD2.js";
@@ -22,10 +22,10 @@ import {
   DEFAULT_TASK_TTL_MS,
   DEFAULT_TOOL_RATE_LIMITS,
   clampTaskTtl
-} from "./chunk-454KEMNV.js";
+} from "./chunk-SRCFMAN5.js";
 import {
   executeExpert
-} from "./chunk-GVLDWGSK.js";
+} from "./chunk-56GTITUT.js";
 import {
   JobStatusSchema,
   abortJob,
@@ -46,21 +46,21 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-6DIGIJIY.js";
+} from "./chunk-Z4NDPKGT.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-XKGEKKKQ.js";
+} from "./chunk-EJQRYAKB.js";
 import {
   IssueTriage
-} from "./chunk-IK45M7J3.js";
+} from "./chunk-RNERS4BC.js";
 import {
   resolveEnvMode,
   sanitizeInput
-} from "./chunk-KBVU2GGV.js";
+} from "./chunk-ALDOPPP4.js";
 import {
   withPrerequisite
-} from "./chunk-UKIFG26L.js";
+} from "./chunk-JOWSYOT4.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -83,18 +83,18 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-HKX7HKDV.js";
+} from "./chunk-UAXEANMF.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
   emitPipelinePolicyEvent
-} from "./chunk-L4J7AXP3.js";
+} from "./chunk-J5TKJM7U.js";
 import {
   EventTopics,
   createEvent,
   getGlobalEventBus,
   getGlobalRegistry
-} from "./chunk-UFJDYK22.js";
+} from "./chunk-4Q6SSODG.js";
 import {
   IDENTIFIER_RE,
   LANG_VALUES,
@@ -127,15 +127,15 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-EKASN4MV.js";
+} from "./chunk-XZ7XRJY5.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-TPKK4ANS.js";
+} from "./chunk-R4W2GOYG.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry
-} from "./chunk-QDH2SQKE.js";
+} from "./chunk-CWOXQK7J.js";
 import {
   resolveInsideRoot
 } from "./chunk-NUBSJGQZ.js";
@@ -144,14 +144,14 @@ import {
   MemoryImportance,
   calculateTextJaccardSimilarity,
   getToolMemory
-} from "./chunk-ROIGF7ZF.js";
+} from "./chunk-DJ7YCUOL.js";
 import {
   STOPWORDS,
   truncateWithInfo
 } from "./chunk-6T3EPABN.js";
 import {
   createSessionMemory
-} from "./chunk-Z5HKO4TN.js";
+} from "./chunk-LFIDNLBP.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -169,25 +169,25 @@ import {
   getAvailableClis,
   sleep,
   withTimeout
-} from "./chunk-45IB3F6G.js";
+} from "./chunk-TXQUWORP.js";
 import {
   BaseAdapter,
   createStream,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-7GFMCMLF.js";
+} from "./chunk-OVYEVJIS.js";
 import {
   DEFAULTS
-} from "./chunk-3FSBTAEC.js";
+} from "./chunk-XLACRVKG.js";
 import {
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-LMGXSMC6.js";
+} from "./chunk-EOVXDAYT.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-5MRYWJVK.js";
+} from "./chunk-XZYPUK4O.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -286,7 +286,7 @@ import {
   selectStrategyByManifest,
   toExpertTaskAnalysisResult,
   withStep
-} from "./chunk-YFY64CCU.js";
+} from "./chunk-OO7JQJTG.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
@@ -28356,7 +28356,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-4BWVW6Z3.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-SHMAFK3K.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -43895,7 +43895,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-R543HBHK.js");
+    const { createIssueTriage } = await import("./issue-triage-EMQSTTXS.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num = issueMatch[2] ?? "";
@@ -43923,7 +43923,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-KXXOPEZF.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-WJ54PXNM.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -45465,7 +45465,7 @@ function aggregateResults2(checks) {
     else if (c.verdict === "fail") fail++;
     else skip2++;
   }
-  const verdict = fail > 0 ? "fail" : pass === 0 && skip2 > 0 ? "skip" : "pass";
+  const verdict = fail > 0 ? "fail" : pass > 0 ? "pass" : "skip";
   return { verdict, summary: { pass, fail, skip: skip2 } };
 }
 function generateFeedback2(checks) {
@@ -45649,7 +45649,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-UX5SU2ZG.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-LXWIFK34.js");
     const { getLearningDir } = await import("./learning-persistence-EGY4VKKO.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -45711,7 +45711,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-X5KJULU7.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-RZ5RV35U.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -45745,7 +45745,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-PBVXX2HU.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-BDYHHFYX.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -45763,7 +45763,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-UX5SU2ZG.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-LXWIFK34.js");
     const { getLearningDir } = await import("./learning-persistence-EGY4VKKO.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -45878,7 +45878,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-JAQXK6NR.js");
+        const { executeVoting } = await import("./consensus-vote-FOXNWPYK.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -46068,7 +46068,8 @@ Verdict: PASS/NEEDS_WORK/REJECT`,
         success: passed,
         durationMs: ms
       });
-      await postProgress(config, "Security", passed ? "Passed" : `BLOCKED: ${result.details}`);
+      const securityNote = result.verdict === "skip" ? `Security scan did not run: ${result.details}. Install the scanner, or use qualityGate 'advisory' to proceed without security evidence.` : `BLOCKED: ${result.details}`;
+      await postProgress(config, "Security", passed ? "Passed" : securityNote);
       flushPipelineMemory();
       return { passed, feedback: result.details };
     }
@@ -46316,7 +46317,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-FPBPUTJJ.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-PNNPNBWS.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -46387,7 +46388,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-RVKAJD7N.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-PYRBPSWW.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -48288,7 +48289,7 @@ async function runQualityGateHandler(args, logger58) {
     });
   }
 }
-var DESCRIPTION2 = "Run the QA quality gate (#1684 engine) against a project directory. Allowlisted checks: typecheck | lint | tests | build | security (default ['typecheck','lint','tests']). Returns the structured { stage, verdict, checks[], summary, feedback } verdict. projectDir must stay inside the repository root; per-check output is capped at 500 chars.";
+var DESCRIPTION2 = "Run the QA quality gate (#1684 engine) against a project directory. Allowlisted checks: typecheck | lint | tests | build | security (default ['typecheck','lint','tests']). Each check runs the REPOSITORY'S own declared package script through the lockfile-selected package manager (#4355) \u2014 never a downloaded tool \u2014 and reports skip when no such script is declared, rather than substituting one. A run in which nothing executed reports verdict 'skip', never 'pass': no evidence is not a pass. Returns the structured { stage, verdict, checks[], summary, feedback } verdict. projectDir must stay inside the repository root; per-check output is capped at 500 chars.";
 function registerRunQualityGateTool(server, deps) {
   const logger58 = deps.logger ?? createLogger({ tool: "run_quality_gate" });
   const toolSchema = {
@@ -49392,7 +49393,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-DFOM4HM5.js");
+    const { createScmProvider } = await import("./factory-JWGO2QJJ.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -50234,7 +50235,7 @@ async function probeSource(source, includeModelIds) {
   }
 }
 async function defaultSources(includeOpenRouter) {
-  const { createAllAdapters: createAllAdapters2 } = await import("./factory-L74ZN3ZO.js");
+  const { createAllAdapters: createAllAdapters2 } = await import("./factory-WFICVFVH.js");
   const adapters = createAllAdapters2();
   return buildDefaultModelSources(adapters, { includeOpenRouter });
 }
@@ -54254,4 +54255,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-VJU2NER7.js.map
+//# sourceMappingURL=chunk-W6BGGXFL.js.map