nexus-agents 6.3.1 → 6.3.3

package/dist/chunk-3FIUZBQC.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "6.3.3" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-3FIUZBQC.js.map

package/dist/{chunk-2QAT5YNF.js → chunk-7LGTPUZB.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-FGP24DLV.js";
+} from "./chunk-3FIUZBQC.js";
 import {
   emitClawGuardViolation
 } from "./chunk-QOF5S5Z5.js";
@@ -2135,4 +2135,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-2QAT5YNF.js.map
+//# sourceMappingURL=chunk-7LGTPUZB.js.map

package/dist/{chunk-E2TILOO3.js → chunk-C7ZOYMT2.js}

@@ -1,7 +1,7 @@
 import {
   computeCostDetail,
   recordUsageEvent
-} from "./chunk-GVRDLRJM.js";
+} from "./chunk-IFAISNVZ.js";
 import {
   BaseAdapter,
   createStream,
@@ -833,4 +833,4 @@ export {
   discoverModels,
   buildOpenAICompatAdapters
 };
-//# sourceMappingURL=chunk-E2TILOO3.js.map
+//# sourceMappingURL=chunk-C7ZOYMT2.js.map

package/dist/{chunk-LVA5JGLO.js → chunk-CZWJAVFX.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-2QAT5YNF.js";
+} from "./chunk-7LGTPUZB.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2159,4 +2159,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-LVA5JGLO.js.map
+//# sourceMappingURL=chunk-CZWJAVFX.js.map

package/dist/{chunk-RLSTDKLT.js → chunk-GGRKSSAC.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-5KPPJRBY.js";
+} from "./chunk-LH3XZRMY.js";
 import {
   executeExpert
 } from "./chunk-M2TFLYPC.js";
@@ -47,7 +47,7 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-W36GQH4O.js";
+} from "./chunk-YQGLXYMT.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -64,7 +64,7 @@ import {
 } from "./chunk-JYTDEFY6.js";
 import {
   withPrerequisite
-} from "./chunk-LVA5JGLO.js";
+} from "./chunk-CZWJAVFX.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -88,7 +88,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-2QAT5YNF.js";
+} from "./chunk-7LGTPUZB.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -35906,8 +35906,9 @@ async function deriveWithTelemetry(userObjective, opts = {}) {
   const started = Date.now();
   const mode = opts.mode ?? resolveAccessPolicyMode();
   const hash = hashObjective(userObjective);
+  const cacheKey = policyCacheKey(hash, mode, opts.trustTier);
   const cache = getPolicyCache();
-  const cached = cache.get(hash);
+  const cached = cache.get(cacheKey);
   if (cached !== void 0) {
     return {
       policy: cached,
@@ -35918,17 +35919,17 @@ async function deriveWithTelemetry(userObjective, opts = {}) {
       }
     };
   }
-  if (mode === "off") return cacheAndReturnBypass(cache, mode, hash, started);
+  if (mode === "off") return cacheAndReturnBypass(cache, mode, hash, cacheKey, started);
   const gate = gateTrust(opts.trustTier);
-  const ctx = { userObjective, mode, hash, started, cache };
+  const ctx = { userObjective, mode, hash, cacheKey, started, cache };
   if (gate.allow === "llm" && opts.adapter !== void 0) {
     return runLlmPath(ctx, opts);
   }
   return runFallbackPath(ctx, gate);
 }
-function cacheAndReturnBypass(cache, mode, hash, started) {
+function cacheAndReturnBypass(cache, mode, hash, cacheKey, started) {
   const policy = buildBypassPolicy(mode, hash);
-  cache.set(hash, policy);
+  cache.set(cacheKey, policy);
   return {
     policy,
     telemetry: {
@@ -35948,14 +35949,14 @@ async function runLlmPath(ctx, opts) {
     opts.timeoutMs ?? DEFAULT_LLM_TIMEOUT_MS
   );
   if (llmResult.ok) {
-    ctx.cache.set(ctx.hash, llmResult.policy);
+    ctx.cache.set(ctx.cacheKey, llmResult.policy);
     return {
       policy: llmResult.policy,
       telemetry: { latencyMs: Date.now() - ctx.started, source: "llm", trustDecision: "llm" }
     };
   }
   const policy = deriveFallbackPolicy(ctx.userObjective, ctx.mode, ctx.hash);
-  ctx.cache.set(ctx.hash, policy);
+  ctx.cache.set(ctx.cacheKey, policy);
   return {
     policy,
     telemetry: {
@@ -35968,7 +35969,7 @@ async function runLlmPath(ctx, opts) {
 }
 function runFallbackPath(ctx, gate) {
   const policy = deriveFallbackPolicy(ctx.userObjective, ctx.mode, ctx.hash);
-  ctx.cache.set(ctx.hash, policy);
+  ctx.cache.set(ctx.cacheKey, policy);
   return {
     policy,
     telemetry: {
@@ -35990,6 +35991,9 @@ function buildBypassPolicy(mode, hash) {
     mode
   };
 }
+function policyCacheKey(objectiveHash, mode, trustTier) {
+  return `${objectiveHash}:${mode}:${trustTier ?? "unset"}`;
+}
 function hashObjective(userObjective) {
   return createHash2("sha256").update(userObjective, "utf8").digest("hex").slice(0, 16);
 }
@@ -46758,8 +46762,10 @@ var OSV_EMPTY = {
   vulnerabilities: [],
   failedLookups: 0,
   queried: 0,
-  declared: 0
+  declared: 0,
+  checkFailed: false
 };
+var OSV_CHECK_FAILED = { ...OSV_EMPTY, checkFailed: true };
 var OSV_DEPENDENCY_CAP = 20;
 async function runOsvCheck(targetDir, enabled) {
   if (!enabled) return OSV_EMPTY;
@@ -46782,33 +46788,40 @@ async function runOsvCheck(targetDir, enabled) {
       // `vulnerabilities` array with an `error` set, which read as "clean".
       failedLookups: results.filter((r) => r.error !== null).length,
       queried: deps.length,
-      declared
+      declared,
+      // The check ran. Individual lookups may still have errored — that is
+      // `failedLookups`, a different and finer-grained fact.
+      checkFailed: false
     };
   } catch (error) {
-    logger45.debug("OSV check skipped", { error: String(error) });
-    return OSV_EMPTY;
+    logger45.warn("OSV check did not run", { error: String(error) });
+    return OSV_CHECK_FAILED;
   }
 }
 function getBlockingFindings(findings) {
   return findings.filter((f) => BLOCKING_SEVERITIES.has(f.severity));
 }
+function osvCoverageNote(blocking, osvCount, osv) {
+  if (osv?.checkFailed === true) {
+    return "OSV check did not run (error) \u2014 dependency vulnerabilities unknown";
+  }
+  if (osv !== void 0 && osv.failedLookups > 0) {
+    return `OSV not checked for ${String(osv.failedLookups)} of ${String(osv.queried)} dependencies (lookup failed)`;
+  }
+  if (blocking === 0 && osvCount === 0) return "none blocking";
+  return "";
+}
 function buildScanSummary(total, blocking, osvCount, osv) {
   const parts = [`${String(total)} SAST findings`];
   if (blocking > 0) parts.push(`${String(blocking)} blocking`);
   if (osvCount > 0) parts.push(`${String(osvCount)} OSV dependency vulnerabilities`);
-  if (osv !== void 0 && osv.failedLookups > 0) {
-    parts.push(
-      `OSV not checked for ${String(osv.failedLookups)} of ${String(osv.queried)} dependencies (lookup failed)`
-    );
-  } else if (blocking === 0 && osvCount === 0) {
-    parts.push("none blocking");
-  }
+  parts.push(osvCoverageNote(blocking, osvCount, osv));
   if (osv !== void 0 && osv.declared > osv.queried) {
     parts.push(
       `OSV covered ${String(osv.queried)} of ${String(osv.declared)} declared dependencies`
     );
   }
-  return parts.join(", ");
+  return parts.filter((p) => p !== "").join(", ");
 }
 
 // src/security/quality-gate-commands.ts
@@ -47356,7 +47369,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-HUAARVF4.js");
+        const { executeVoting } = await import("./consensus-vote-HH74S3A4.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -55987,4 +56000,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-RLSTDKLT.js.map
+//# sourceMappingURL=chunk-GGRKSSAC.js.map