nexus-agents 4.0.0 → 4.1.1

package/dist/{chunk-6XQYOWU3.js → chunk-ZBLX5SPO.js}

@@ -8,7 +8,7 @@ import {
   checkSqlite,
   defaultConfig,
   initDataDirectories
-} from "./chunk-THTBIBCW.js";
+} from "./chunk-RCSHGEIL.js";
 import {
   BUILT_IN_EXPERTS
 } from "./chunk-YPNQPT2F.js";
@@ -2001,4 +2001,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=chunk-6XQYOWU3.js.map
+//# sourceMappingURL=chunk-ZBLX5SPO.js.map

package/dist/cli.js

@@ -18,7 +18,7 @@ import "./chunk-EXX6WINJ.js";
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-6XQYOWU3.js";
+} from "./chunk-ZBLX5SPO.js";
 import "./chunk-6SBSQDCX.js";
 import {
   AuthHandler,
@@ -139,7 +139,7 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-7LCLCIGM.js";
+} from "./chunk-UFWTULMJ.js";
 import "./chunk-FD3I5B4X.js";
 import "./chunk-HFOQKCD2.js";
 import "./chunk-RSMG2DPB.js";
@@ -166,7 +166,7 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-THTBIBCW.js";
+} from "./chunk-RCSHGEIL.js";
 import {
   buildOpenAICompatAdapters,
   readOpenAICompatEnv

package/dist/index.d.ts

@@ -24935,7 +24935,31 @@ interface DevPipelineResult {
     readonly tasks: readonly PipelineTask[];
     readonly voteIterations: number;
     readonly qaIterations: number;
+    /**
+     * Whether the security gate passed.
+     *
+     * Read together with {@link DevPipelineResult.securityRan} (#4772): `false`
+     * with `securityRan: false` means the gate never executed — a dry run stops
+     * after plan+vote — and is NOT a failed security review.
+     */
     readonly securityPassed: boolean;
+    /**
+     * Whether the security gate actually ran (#4772).
+     *
+     * Absent on results from before the distinction existed. `false` means the
+     * run stopped before security, so `securityPassed: false` reports absence,
+     * not a verdict.
+     */
+    readonly securityRan?: boolean;
+    /**
+     * Why planning produced no usable plan, when it did not (#4772).
+     *
+     * Absent means the plan is a real plan. `'empty'` means the planner returned
+     * nothing — previously the stage substituted the PROMPT for the plan, so a
+     * failed run was indistinguishable from a successful one and downstream
+     * stages voted on the input text.
+     */
+    readonly planStatus?: 'empty';
 }
 /** Pluggable stage implementations — inject real or mock agents. */
 interface DevPipelineStages {

package/dist/index.js

@@ -541,7 +541,7 @@ import {
   withLogging,
   withRetry,
   withRetryWrapper
-} from "./chunk-7LCLCIGM.js";
+} from "./chunk-UFWTULMJ.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -575,7 +575,7 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-THTBIBCW.js";
+} from "./chunk-RCSHGEIL.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,

package/dist/{setup-command-MKCEHLU7.js → setup-command-S2VR7PE7.js}

@@ -8,9 +8,9 @@ import {
   runWizard,
   setupCommand,
   setupCommandAsync
-} from "./chunk-6XQYOWU3.js";
+} from "./chunk-ZBLX5SPO.js";
 import "./chunk-6SBSQDCX.js";
-import "./chunk-THTBIBCW.js";
+import "./chunk-RCSHGEIL.js";
 import "./chunk-NZHI7FHX.js";
 import "./chunk-BYDUN7A5.js";
 import "./chunk-OQB3XC5O.js";
@@ -41,4 +41,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=setup-command-MKCEHLU7.js.map
+//# sourceMappingURL=setup-command-S2VR7PE7.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-agents",
-  "version": "4.0.0",
+  "version": "4.1.1",
   "description": "Governance substrate for AI coding agents — adversarial PR review, drift-detected rules, tamper-evident audit, and closed-loop outcome routing for Claude, Codex, Gemini, and OpenCode",
   "mcpName": "io.github.nexus-substrate/nexus-agents",
   "license": "MIT",