nexus-agents 4.1.0 → 4.1.3

package/dist/cli.js

@@ -18,7 +18,7 @@ import "./chunk-EXX6WINJ.js";
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-DQ3GEMM4.js";
+} from "./chunk-HKHOJHQO.js";
 import "./chunk-6SBSQDCX.js";
 import {
   AuthHandler,
@@ -139,7 +139,7 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-4XRV4MIQ.js";
+} from "./chunk-ZZLKJ3OB.js";
 import "./chunk-FD3I5B4X.js";
 import "./chunk-HFOQKCD2.js";
 import "./chunk-RSMG2DPB.js";
@@ -166,7 +166,7 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-6Q2RAJYX.js";
+} from "./chunk-MBVEKLJO.js";
 import {
   buildOpenAICompatAdapters,
   readOpenAICompatEnv

package/dist/index.d.ts

@@ -24939,16 +24939,21 @@ interface DevPipelineResult {
      * Whether the security gate passed.
      *
      * Read together with {@link DevPipelineResult.securityRan} (#4772): `false`
-     * with `securityRan: false` means the gate never executed — a dry run stops
-     * after plan+vote — and is NOT a failed security review.
+     * with `securityRan: false` means the gate never executed and is NOT a failed
+     * security review.
      */
     readonly securityPassed: boolean;
     /**
      * Whether the security gate actually ran (#4772).
      *
-     * Absent on results from before the distinction existed. `false` means the
-     * run stopped before security, so `securityPassed: false` reports absence,
-     * not a verdict.
+     * Set on every path `runDevPipeline` can return through, so
+     * `securityPassed: false` is always readable as verdict-vs-absence. Three
+     * paths stop before the scan: a dry run (plan+vote only), harness mode (tasks
+     * are handed back for external implementation), and a red quality gate in
+     * `blocking` mode. Only the post-scan return reports `true`.
+     *
+     * Absent means the producer predates the distinction (#4782), not that the
+     * scan's status is unknown — treat an absent value as unmeasured, not `false`.
      */
     readonly securityRan?: boolean;
     /**

package/dist/index.js

@@ -541,7 +541,7 @@ import {
   withLogging,
   withRetry,
   withRetryWrapper
-} from "./chunk-4XRV4MIQ.js";
+} from "./chunk-ZZLKJ3OB.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -575,7 +575,7 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-6Q2RAJYX.js";
+} from "./chunk-MBVEKLJO.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,

package/dist/{setup-command-VWTOGR2N.js → setup-command-HEDE6RSE.js}

@@ -8,9 +8,9 @@ import {
   runWizard,
   setupCommand,
   setupCommandAsync
-} from "./chunk-DQ3GEMM4.js";
+} from "./chunk-HKHOJHQO.js";
 import "./chunk-6SBSQDCX.js";
-import "./chunk-6Q2RAJYX.js";
+import "./chunk-MBVEKLJO.js";
 import "./chunk-NZHI7FHX.js";
 import "./chunk-BYDUN7A5.js";
 import "./chunk-OQB3XC5O.js";
@@ -41,4 +41,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=setup-command-VWTOGR2N.js.map
+//# sourceMappingURL=setup-command-HEDE6RSE.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-agents",
-  "version": "4.1.0",
+  "version": "4.1.3",
   "description": "Governance substrate for AI coding agents — adversarial PR review, drift-detected rules, tamper-evident audit, and closed-loop outcome routing for Claude, Codex, Gemini, and OpenCode",
   "mcpName": "io.github.nexus-substrate/nexus-agents",
   "license": "MIT",