nexus-agents 6.3.17 → 7.0.0

package/dist/{chunk-OI6XXZOE.js → chunk-46XUGUB4.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-OQB3XC5O.js";
 import {
   VERSION
-} from "./chunk-KASDQSEA.js";
+} from "./chunk-OXJEIMLS.js";
 import {
   capitalize
 } from "./chunk-6T3EPABN.js";
@@ -1201,7 +1201,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-BQVEUXP5.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-3MPQZUHC.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1303,4 +1303,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-OI6XXZOE.js.map
+//# sourceMappingURL=chunk-46XUGUB4.js.map

package/dist/{chunk-V2OHGKB5.js → chunk-6SA3FIBZ.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-N34KB6DR.js";
+} from "./chunk-XF6J4PCH.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2159,4 +2159,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-V2OHGKB5.js.map
+//# sourceMappingURL=chunk-6SA3FIBZ.js.map

package/dist/{chunk-IRHLTW3P.js → chunk-K3ZTZSLW.js}

@@ -23,7 +23,7 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-N34KB6DR.js";
+} from "./chunk-XF6J4PCH.js";
 import {
   assessPanelIndependence,
   countDistinctModels,
@@ -6878,4 +6878,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-IRHLTW3P.js.map
+//# sourceMappingURL=chunk-K3ZTZSLW.js.map

package/dist/chunk-OXJEIMLS.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "7.0.0" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-OXJEIMLS.js.map

package/dist/{chunk-KASDQSEA.js.map → chunk-OXJEIMLS.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts"],"sourcesContent":["/**\n * nexus-agents - Version constant\n *\n * Injected at build time via tsup define from package.json.\n * Do NOT edit this value manually — it is replaced during build.\n */\n\ndeclare const __NEXUS_VERSION__: string;\n\nexport const VERSION: string = typeof __NEXUS_VERSION__ !== 'undefined' ? __NEXUS_VERSION__ : 'dev';\n"],"mappings":";AASO,IAAM,UAAkB,OAA2C,WAAoB;","names":[]}
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["/**\n * nexus-agents - Version constant\n *\n * Injected at build time via tsup define from package.json.\n * Do NOT edit this value manually — it is replaced during build.\n */\n\ndeclare const __NEXUS_VERSION__: string;\n\nexport const VERSION: string = typeof __NEXUS_VERSION__ !== 'undefined' ? __NEXUS_VERSION__ : 'dev';\n"],"mappings":";AASO,IAAM,UAAkB,OAA2C,UAAoB;","names":[]}

package/dist/{chunk-LT2LUIQK.js → chunk-WMXHD6UA.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-OI6XXZOE.js";
+} from "./chunk-46XUGUB4.js";
 import {
   executeExpert
 } from "./chunk-ET67NYCJ.js";
@@ -47,7 +47,7 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-IRHLTW3P.js";
+} from "./chunk-K3ZTZSLW.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
@@ -64,7 +64,7 @@ import {
 } from "./chunk-NVFYMGCC.js";
 import {
   withPrerequisite
-} from "./chunk-V2OHGKB5.js";
+} from "./chunk-6SA3FIBZ.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -88,7 +88,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-N34KB6DR.js";
+} from "./chunk-XF6J4PCH.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -44218,6 +44218,23 @@ var AuditEventSchema = z97.object({
   // Policy and security
   policyName: z97.string().optional(),
   policyDecision: z97.string().optional(),
+  /**
+   * Which occurrence of this `{tool, rule}` near-miss the record represents
+   * (#5228 review). Present only on a sampled `would_deny`.
+   *
+   * TYPED and queryable rather than prose in `description`. The first version
+   * of the sampler wrote the ordinal into the reason string to "avoid a second
+   * schema widening" — two reviewers rejected that, correctly: a machine
+   * consumer counting records would read 14 records as 14 near-misses when
+   * 10,000 occurred, so the record did not structurally represent its own
+   * partial coverage. That is the defect this PR exists to fix, reintroduced
+   * one field over. An additive OPTIONAL field is a minor change, not a second
+   * break, so the stated reason for avoiding it did not hold.
+   *
+   * Absent means "not sampled" — every occurrence was recorded — which is
+   * distinct from `1`.
+   */
+  policyOccurrence: z97.number().int().min(1).optional(),
   violationType: z97.string().optional(),
   // Integrity (for tamper-evidence)
   previousHash: z97.string().optional(),
@@ -44251,6 +44268,8 @@ var AuditEventInputSchema = z97.object({
   metadata: z97.record(z97.string(), z97.unknown()).optional(),
   policyName: z97.string().optional(),
   policyDecision: z97.string().optional(),
+  /** @see AuditEventSchema.policyOccurrence (#5228 review). */
+  policyOccurrence: z97.number().int().min(1).optional(),
   violationType: z97.string().optional()
 });
 var AuditLogConfigSchema = z97.object({
@@ -44712,6 +44731,20 @@ var SYSTEM_ACTOR = {
   id: "nexus-agents",
   name: "Nexus Agents System"
 };
+function policyDecisionFields(decision) {
+  switch (decision) {
+    case "allow":
+      return { severity: "info", outcome: "success" };
+    case "deny":
+      return { severity: "warning", outcome: "denied" };
+    case "would_deny":
+      return { severity: "warning", outcome: "success" };
+    default: {
+      const unreachable = decision;
+      throw new Error(`Unhandled policy decision: ${String(unreachable)}`);
+    }
+  }
+}
 var DROP_WARN_INTERVAL = 1e3;
 var AuditLogger = class {
   storage;
@@ -44868,14 +44901,14 @@ var AuditLogger = class {
       requestId: opts.requestId,
       toolName: opts.toolName,
       durationMs: opts.durationMs,
+      ...opts.policyDecision === void 0 ? {} : { policyDecision: opts.policyDecision },
       metadata: opts.metadata
     });
   }
   logPolicyDecision(opts) {
     this.log({
       category: "authorization",
-      severity: opts.decision === "deny" ? "warning" : "info",
-      outcome: opts.decision === "allow" ? "success" : "denied",
+      ...policyDecisionFields(opts.decision),
       action: "policy.evaluate",
       description: opts.reason,
       actor: opts.actor,
@@ -44883,6 +44916,7 @@ var AuditLogger = class {
       requestId: opts.requestId,
       policyName: opts.policyName,
       policyDecision: opts.decision,
+      ...opts.occurrence === void 0 ? {} : { policyOccurrence: opts.occurrence },
       metadata: opts.metadata
     });
   }
@@ -47490,7 +47524,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-OHOQXNTT.js");
+        const { executeVoting } = await import("./consensus-vote-ZMEESJFP.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -56121,4 +56155,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-LT2LUIQK.js.map
+//# sourceMappingURL=chunk-WMXHD6UA.js.map