nexus-agents 8.42.7 → 8.42.9

package/dist/{chunk-RXEQG3NK.js → chunk-IVAWIOCS.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-5FTZPRLT.js";
+} from "./chunk-KJDCFQ6X.js";
 import {
   executeExpert
 } from "./chunk-HTSKUXUY.js";
@@ -55,7 +55,7 @@ import {
   toJobSummary,
   updateStage,
   writeJobCancelled
-} from "./chunk-THNKDI4A.js";
+} from "./chunk-QYB34SJZ.js";
 import {
   allOf,
   anyOf
@@ -75,7 +75,7 @@ import {
 } from "./chunk-NQXISQVW.js";
 import {
   withPrerequisite
-} from "./chunk-VXPLA32M.js";
+} from "./chunk-YSWFDYTA.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -100,7 +100,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-E4RL4FT6.js";
+} from "./chunk-JPE77J4Q.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -12144,6 +12144,13 @@ function scoreFor(suppliedScore, coverage, validVulns, calculateScore2) {
   if (coverage === "partial") return calculateScore2(validVulns);
   return typeof suppliedScore === "number" && suppliedScore >= 0 && suppliedScore <= 100 ? suppliedScore : calculateScore2(validVulns);
 }
+function heuristicSecurityOutcome(vulnerabilities, calculateScore2 = calculateSecurityScore) {
+  const findingsCoverage = vulnerabilities.length > 0 ? "partial" : "unmeasured";
+  return {
+    findingsCoverage,
+    securityScore: scoreFor(void 0, findingsCoverage, vulnerabilities, calculateScore2)
+  };
+}
 function buildSecurityCore(p, validVulns, rejectedFindings, calculateScore2) {
   const conf = p["confidence"];
   const findingsCoverage = coverageFor(rejectedFindings, validVulns.length);
@@ -12172,12 +12179,12 @@ function parseSecurityResult(text, calculateScore2, validator) {
     return result;
   } catch {
     const heuristicVulns = detectHeuristicVulnerabilities(text);
-    const findingsCoverage = heuristicVulns.length > 0 ? "partial" : "unmeasured";
+    const outcome = heuristicSecurityOutcome(heuristicVulns, calculateScore2);
     return {
       content: text,
       vulnerabilities: heuristicVulns,
-      securityScore: scoreFor(void 0, findingsCoverage, heuristicVulns, calculateScore2),
-      findingsCoverage,
+      securityScore: outcome.securityScore,
+      findingsCoverage: outcome.findingsCoverage,
       confidence: heuristicVulns.length > 0 ? 0.5 : 0.3
     };
   }
@@ -12230,12 +12237,12 @@ Analyze for security vulnerabilities and provide findings in the specified JSON
       enableCweMapping: this.expertOptions.enableCweMapping,
       minSeverity: this.expertOptions.minSeverity
     });
-    const securityScore = calculateSecurityScore(vulnerabilities);
+    const { findingsCoverage, securityScore } = heuristicSecurityOutcome(vulnerabilities);
     const result = {
       content: "Heuristic security analysis. Model adapter required for comprehensive review.",
       vulnerabilities,
       securityScore,
-      findingsCoverage: "complete",
+      findingsCoverage,
       recommendations: generateHeuristicRecommendations2(vulnerabilities),
       warnings: generateSecurityWarnings(vulnerabilities),
       confidence: vulnerabilities.length > 0 ? 0.6 : 0.4
@@ -45950,7 +45957,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-QWJY7IE4.js");
+    const { executeVoting } = await import("./consensus-vote-XNC7NRAJ.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -46332,6 +46339,9 @@ async function runPlanningPhase(task, stages, prior, options) {
 function buildHarnessResult(planResult, tasks) {
   return {
     completed: false,
+    // Says WHY completion is false: by request, not by fault (#5888) — the
+    // same role `dryRun` plays for the other deliberate stop.
+    harnessMode: true,
     plan: planResult.plan,
     tasks,
     voteIterations: planResult.iterations,
@@ -47742,7 +47752,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-QWJY7IE4.js");
+        const { executeVoting } = await import("./consensus-vote-XNC7NRAJ.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -51743,6 +51753,7 @@ function buildStructuredOutput(result, simulated) {
     // security rejection from a gate that never ran — which is the whole point
     // of the fields. They were added to DevPipelineResult and then not listed
     // here, so they never reached the MCP surface.
+    ...result.harnessMode !== void 0 ? { harnessMode: result.harnessMode } : {},
     ...result.securityRan !== void 0 ? { securityRan: result.securityRan } : {},
     ...result.planStatus !== void 0 ? { planStatus: result.planStatus } : {},
     ...result.planVoteReason !== void 0 ? { planVoteReason: result.planVoteReason } : {},
@@ -51787,7 +51798,27 @@ function buildPipelineOptions(input, trustTier, auditLogger) {
 async function executeDevPipelineBody(taskText, stages, pipelineOptions, simulated) {
   const result = await runDevPipeline(taskText, stages, pipelineOptions);
   flushPipelineMemory();
-  return toolSuccessStructured(buildStructuredOutput(result, simulated));
+  const output2 = buildStructuredOutput(result, simulated);
+  if (!result.completed && result.dryRun !== true && result.harnessMode !== true) {
+    return toolStructuredError({
+      errorCategory: "business",
+      message: describeIncompleteRun(result),
+      detail: output2
+    });
+  }
+  return toolSuccessStructured(output2);
+}
+function describeIncompleteRun(result) {
+  if (result.planStatus !== void 0) {
+    return `Pipeline stopped at the planning gate (planStatus: ${result.planStatus})`;
+  }
+  if (result.securityRan === true && !result.securityPassed) {
+    return "Pipeline did not complete: the security gate rejected the change";
+  }
+  if (result.taskStatus !== void 0 && result.taskStatus !== "all_done") {
+    return `Pipeline did not complete: tasks ${result.taskStatus}`;
+  }
+  return "Pipeline did not complete";
 }
 async function runDevPipelineHandler(args, logger55, trustTier, auditLogger) {
   const parsed = DevPipelineInputSchema.safeParse(args);
@@ -56423,4 +56454,4 @@ export {
   startPipelineEventBridge,
   shutdownPipelineEventBridge
 };
-//# sourceMappingURL=chunk-RXEQG3NK.js.map
+//# sourceMappingURL=chunk-IVAWIOCS.js.map