nexus-agents 6.3.0 → 6.3.2

package/dist/{chunk-LMAIZ3FD.js → chunk-5M3ZAK2V.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-IRRAGZFM.js";
+} from "./chunk-5STSWEDG.js";
 import {
   emitClawGuardViolation
 } from "./chunk-QOF5S5Z5.js";
@@ -2135,4 +2135,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-LMAIZ3FD.js.map
+//# sourceMappingURL=chunk-5M3ZAK2V.js.map

package/dist/chunk-5STSWEDG.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "6.3.2" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-5STSWEDG.js.map

package/dist/{chunk-IOGNN2JB.js → chunk-6THNSXDV.js}

@@ -23,7 +23,7 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-LMAIZ3FD.js";
+} from "./chunk-5M3ZAK2V.js";
 import {
   assessPanelIndependence,
   countDistinctModels,
@@ -6878,4 +6878,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-IOGNN2JB.js.map
+//# sourceMappingURL=chunk-6THNSXDV.js.map

package/dist/{chunk-D3EQF2BM.js → chunk-BT534KOS.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-OQB3XC5O.js";
 import {
   VERSION
-} from "./chunk-IRRAGZFM.js";
+} from "./chunk-5STSWEDG.js";
 import {
   capitalize
 } from "./chunk-6T3EPABN.js";
@@ -1201,7 +1201,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-GRIO6YXJ.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-NNBWZ2BK.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1303,4 +1303,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-D3EQF2BM.js.map
+//# sourceMappingURL=chunk-BT534KOS.js.map

package/dist/{chunk-VJ3YAU2K.js → chunk-XHKHC44U.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-D3EQF2BM.js";
+} from "./chunk-BT534KOS.js";
 import {
   executeExpert
 } from "./chunk-M2TFLYPC.js";
@@ -47,7 +47,7 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-IOGNN2JB.js";
+} from "./chunk-6THNSXDV.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -64,7 +64,7 @@ import {
 } from "./chunk-JYTDEFY6.js";
 import {
   withPrerequisite
-} from "./chunk-PLBMOZKM.js";
+} from "./chunk-ZTH7YD3J.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -88,7 +88,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-LMAIZ3FD.js";
+} from "./chunk-5M3ZAK2V.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -46708,7 +46708,6 @@ async function queryOsvBatch(packages, config = DEFAULT_OSV_CONFIG) {
 
 // src/pipeline/security-gate.ts
 var logger45 = createLogger({ component: "security-gate" });
-var lastOsvVulnerabilities = [];
 var BLOCKING_SEVERITIES = /* @__PURE__ */ new Set(["critical", "high"]);
 function checkSecurityScan(targetDir, rulesets = ["p/default"], config = {}) {
   return async () => {
@@ -46734,7 +46733,6 @@ function checkSecurityScan(targetDir, rulesets = ["p/default"], config = {}) {
 async function runSecurityPipeline(sarifResult, targetDir, config, start) {
   const osv = await runOsvCheck(targetDir, config.enableOsv ?? true);
   const osvVulns = osv.vulnerabilities;
-  lastOsvVulnerabilities = osvVulns;
   const blocking = getBlockingFindings(sarifResult.findings);
   const details = buildScanSummary(
     sarifResult.totalFindings,
@@ -46760,8 +46758,10 @@ var OSV_EMPTY = {
   vulnerabilities: [],
   failedLookups: 0,
   queried: 0,
-  declared: 0
+  declared: 0,
+  checkFailed: false
 };
+var OSV_CHECK_FAILED = { ...OSV_EMPTY, checkFailed: true };
 var OSV_DEPENDENCY_CAP = 20;
 async function runOsvCheck(targetDir, enabled) {
   if (!enabled) return OSV_EMPTY;
@@ -46784,33 +46784,40 @@ async function runOsvCheck(targetDir, enabled) {
       // `vulnerabilities` array with an `error` set, which read as "clean".
       failedLookups: results.filter((r) => r.error !== null).length,
       queried: deps.length,
-      declared
+      declared,
+      // The check ran. Individual lookups may still have errored — that is
+      // `failedLookups`, a different and finer-grained fact.
+      checkFailed: false
     };
   } catch (error) {
-    logger45.debug("OSV check skipped", { error: String(error) });
-    return OSV_EMPTY;
+    logger45.warn("OSV check did not run", { error: String(error) });
+    return OSV_CHECK_FAILED;
   }
 }
 function getBlockingFindings(findings) {
   return findings.filter((f) => BLOCKING_SEVERITIES.has(f.severity));
 }
+function osvCoverageNote(blocking, osvCount, osv) {
+  if (osv?.checkFailed === true) {
+    return "OSV check did not run (error) \u2014 dependency vulnerabilities unknown";
+  }
+  if (osv !== void 0 && osv.failedLookups > 0) {
+    return `OSV not checked for ${String(osv.failedLookups)} of ${String(osv.queried)} dependencies (lookup failed)`;
+  }
+  if (blocking === 0 && osvCount === 0) return "none blocking";
+  return "";
+}
 function buildScanSummary(total, blocking, osvCount, osv) {
   const parts = [`${String(total)} SAST findings`];
   if (blocking > 0) parts.push(`${String(blocking)} blocking`);
   if (osvCount > 0) parts.push(`${String(osvCount)} OSV dependency vulnerabilities`);
-  if (osv !== void 0 && osv.failedLookups > 0) {
-    parts.push(
-      `OSV not checked for ${String(osv.failedLookups)} of ${String(osv.queried)} dependencies (lookup failed)`
-    );
-  } else if (blocking === 0 && osvCount === 0) {
-    parts.push("none blocking");
-  }
+  parts.push(osvCoverageNote(blocking, osvCount, osv));
   if (osv !== void 0 && osv.declared > osv.queried) {
     parts.push(
       `OSV covered ${String(osv.queried)} of ${String(osv.declared)} declared dependencies`
     );
   }
-  return parts.join(", ");
+  return parts.filter((p) => p !== "").join(", ");
 }
 
 // src/security/quality-gate-commands.ts
@@ -47358,7 +47365,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-N35DUGJH.js");
+        const { executeVoting } = await import("./consensus-vote-YUVGQZL7.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -55989,4 +55996,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-VJ3YAU2K.js.map
+//# sourceMappingURL=chunk-XHKHC44U.js.map