nexus-agents 2.135.0 → 2.136.0

package/dist/{chunk-ME4DQ6BI.js → chunk-N67LHY47.js}

@@ -1,6 +1,6 @@
 import {
   computeCostUSD
-} from "./chunk-DXVQ6VFB.js";
+} from "./chunk-VN3CKPEF.js";
 import {
   DEFAULT_CONSENSUS_CONFIG,
   DEFAULT_INCREMENTAL_QUORUM_CONFIG,
@@ -18,20 +18,20 @@ import {
   toolSuccess,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-MREIJMH7.js";
+} from "./chunk-JVZ7FGWR.js";
 import {
   getToolMemory
-} from "./chunk-ZVIBVJBI.js";
+} from "./chunk-ESP6U3LW.js";
 import {
   createEvent,
   getGlobalRegistry
-} from "./chunk-ILH5TZAX.js";
+} from "./chunk-HMZT2SJK.js";
 import {
   authRemediation,
   delay,
   getAvailableClis,
   withTimeout
-} from "./chunk-K5O7SSOH.js";
+} from "./chunk-GWOXPCIF.js";
 import {
   AgentError,
   CLI_NAMES,
@@ -58,14 +58,16 @@ import {
   registerPersistentOutcomeStoreFactory,
   resolveClassGuardMs,
   resolveVoteTimeout
-} from "./chunk-CBJN5MYW.js";
+} from "./chunk-OCJEYHUQ.js";
 import {
   ensureLearningDir,
-  findRepoRoot,
-  getOutcomesFile,
+  getOutcomesFile
+} from "./chunk-5SXGPX34.js";
+import {
+  getNexusDataDir,
   nexusDataPath,
   nexusDataPathEnsure
-} from "./chunk-GZ4NF4ZW.js";
+} from "./chunk-L4QFWOOQ.js";
 
 // src/mcp/tools/consensus-vote.ts
 import { z as z10 } from "zod";
@@ -4205,7 +4207,7 @@ function panelDegradationWarning(errorCount, total) {
   if (errorCount <= 0 || errorCount >= total) return void 0;
   return `Panel degraded: ${String(errorCount)} of ${String(total)} voters errored; decision rests on ${String(total - errorCount)} voter(s).`;
 }
-function buildResponse(input, result, costSummary) {
+function buildResponse(input, result, costSummary, voteRecord) {
   const proposalTruncated = input.proposal.length > 200 ? input.proposal.slice(0, 200) + "..." : input.proposal;
   const errorCount = result.votes.filter((v) => v.source === "error").length;
   const allErrors = errorCount === result.votes.length && errorCount > 0;
@@ -4223,8 +4225,14 @@ function buildResponse(input, result, costSummary) {
     },
     votes: result.votes.map(toAgentVoteSummary),
     durationMs: result.totalTimeMs,
-    simulateVotes: result.simulateVotes
+    simulateVotes: result.simulateVotes,
+    // #3991: surface the authentic-vote-record persistence outcome so a skipped
+    // or failed persist is visible to the MCP caller (was WARN-only).
+    voteRecordPersisted: voteRecord?.persisted ?? false
   };
+  if (voteRecord !== void 0 && !voteRecord.persisted) {
+    response.voteRecordNote = voteRecord.detail;
+  }
   applyOptionalResponseFields(response, input, result, errorCount, costSummary);
   return response;
 }
@@ -4298,7 +4306,7 @@ function applyErrorPolicy(votes, policy) {
 
 // src/audit/vote-record-store.ts
 import { appendFileSync as appendFileSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2 } from "fs";
-import { dirname, isAbsolute, join, resolve } from "path";
+import { dirname, isAbsolute, relative, resolve, sep } from "path";
 
 // src/audit/vote-record.ts
 import * as crypto from "crypto";
@@ -4399,9 +4407,13 @@ function hashProposal(proposal) {
 }
 
 // src/audit/vote-record-store.ts
-var VOTE_RECORDS_REL_PATH = "governance/vote-records.jsonl";
+var VOTE_RECORDS_DATA_CATEGORY = "governance";
+var VOTE_RECORDS_FILENAME = "vote-records.jsonl";
 var VOTE_RECORDS_PATH_ENV = "NEXUS_VOTE_RECORDS_PATH";
 var MAX_PROPOSAL_RECORD_CHARS = 500;
+function voteRecordWriteFailedMessage(path) {
+  return `Authentic vote record NOT persisted: the resolved data directory is not writable (${path}). Check filesystem permissions on the .nexus-agents data dir, or set ${VOTE_RECORDS_PATH_ENV} to a writable absolute file path. See server logs for the underlying filesystem error.`;
+}
 function outcomeToDecision(result) {
   if (result.outcome === "approved") return "approved";
   if (!result.quorumReached && result.outcome !== "rejected") return "no_quorum";
@@ -4456,23 +4468,36 @@ function readLedgerTip(filePath, logger10) {
     return { maxSequence: -1, lastHash: void 0 };
   }
 }
+function isWithin(root, target) {
+  const resolvedRoot = resolve(root);
+  const resolvedTarget = resolve(target);
+  if (resolvedTarget === resolvedRoot) return true;
+  const rel = relative(resolvedRoot, resolvedTarget);
+  return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel);
+}
 function resolveVoteRecordsPath() {
   const envPath = process.env[VOTE_RECORDS_PATH_ENV];
   if (envPath !== void 0 && envPath.trim() !== "") {
-    return isAbsolute(envPath) ? envPath : resolve(envPath);
+    const resolved2 = isAbsolute(envPath) ? envPath : resolve(envPath);
+    if (!isAbsolute(envPath) && !isWithin(process.cwd(), resolved2)) {
+      return void 0;
+    }
+    return resolved2;
   }
-  const root = findRepoRoot(process.cwd());
-  if (root === null) return void 0;
-  return join(root, VOTE_RECORDS_REL_PATH);
+  const resolved = nexusDataPath(VOTE_RECORDS_DATA_CATEGORY, VOTE_RECORDS_FILENAME);
+  const expectedSuffix = `${VOTE_RECORDS_DATA_CATEGORY}${sep}${VOTE_RECORDS_FILENAME}`;
+  const underHomedirRoot = isWithin(getNexusDataDir(), resolved);
+  const underRepoDataDir = resolved.includes(`.nexus-agents${sep}${VOTE_RECORDS_DATA_CATEGORY}${sep}`);
+  if (!isAbsolute(resolved) || !resolved.endsWith(expectedSuffix) || !(underHomedirRoot || underRepoDataDir)) {
+    return void 0;
+  }
+  return resolved;
 }
 function persistVoteRecord(opts) {
   const logger10 = opts.logger ?? createLogger({ component: "vote-record-store" });
   const filePath = opts.filePath ?? resolveVoteRecordsPath();
   if (filePath === void 0) {
-    logger10.warn(
-      `Authentic vote record NOT persisted: no repo root found from process.cwd() and no override set. Per #3927 the authoritative population path is caller-commits \u2014 commit the returned record bytes into ${VOTE_RECORDS_REL_PATH} in the promotion PR. To force a server-side write, set ${VOTE_RECORDS_PATH_ENV} to an absolute file path.`,
-      { id: opts.id }
-    );
+    logger10.warn(voteRecordWriteFailedMessage("<unresolved>"), { id: opts.id });
     return void 0;
   }
   try {
@@ -4684,10 +4709,20 @@ function recordAuthenticVote(args) {
   const allSimulated = args.votes.length > 0 && args.votes.every((v) => v.source === "simulation");
   if (allSimulated) {
     logger6.debug("Skipping authentic vote record \u2014 all votes simulated");
-    return void 0;
+    return {
+      persisted: false,
+      reason: "all-simulated",
+      detail: "All votes were simulated; a committed vote record would seed governance from random output (#2319), so persistence is skipped by design."
+    };
+  }
+  const resolvedPath = resolveVoteRecordsPath();
+  if (resolvedPath === void 0) {
+    const detail = voteRecordWriteFailedMessage("<unresolved>");
+    logger6.warn(detail);
+    return { persisted: false, reason: "write-failed", detail };
   }
   const id = `vote-${String(getTimeProvider().now())}-${getRandomProvider().random().toString(36).slice(2, 9)}`;
-  return persistVoteRecord({
+  const record = persistVoteRecord({
     id,
     proposal: args.proposal,
     strategy: toRecordStrategy(args.strategy),
@@ -4696,6 +4731,14 @@ function recordAuthenticVote(args) {
     ...args.correlationId !== void 0 ? { correlationId: args.correlationId } : {},
     logger: logger6
   });
+  if (record === void 0) {
+    return {
+      persisted: false,
+      reason: "write-failed",
+      detail: voteRecordWriteFailedMessage(resolvedPath)
+    };
+  }
+  return { persisted: true, record };
 }
 function recordVoteError(proposal, errorMessage) {
   try {
@@ -5501,7 +5544,7 @@ async function processVotesWithCascade(engineVotes, opts) {
 var CONTRARIAN_ESCALATION_THRESHOLD = 0.8;
 async function runContrarianCheck(proposal, log) {
   try {
-    const { executeExpert } = await import("./expert-bridge-4YXDWOMR.js");
+    const { executeExpert } = await import("./expert-bridge-NY6FAFQH.js");
     const prompt = [
       "You are a contrarian analyst. Your job is to find reasons this proposal should be REJECTED.",
       "Look for: YAGNI (not needed), MISALIGNED (wrong tech/architecture), SECURITY_RISK, SCOPE_CREEP.",
@@ -5659,21 +5702,23 @@ function finalizeVotingResult(args) {
 }
 function recordVoteSideEffects(proposal, strategy, result, logger10) {
   const decisionId = `consensus-${String(getTimeProvider().now())}-${randomUUID2().slice(0, 8)}`;
-  recordAuthenticVote({
+  const voteRecord = recordAuthenticVote({
     proposal,
     strategy,
     result: result.result,
     votes: result.votes,
     correlationId: decisionId
   });
+  let costSummary;
   try {
-    return recordDecisionCost({ decisionId, gate: "consensus_vote", votes: result.votes });
+    costSummary = recordDecisionCost({ decisionId, gate: "consensus_vote", votes: result.votes });
   } catch (costError) {
     logger10.warn("Per-decision cost rollup failed (non-fatal)", {
       error: getErrorMessage(costError)
     });
-    return void 0;
+    costSummary = void 0;
   }
+  return { costSummary, voteRecord };
 }
 async function handleConsensusVote(deps, args) {
   const logger10 = deps.logger ?? createLogger({ tool: "consensus_vote" });
@@ -5698,9 +5743,14 @@ async function handleConsensusVote(deps, args) {
       result.totalTimeMs,
       result.votes
     );
-    const costSummary = recordVoteSideEffects(args.proposal, strategy, result, logger10);
+    const { costSummary, voteRecord } = recordVoteSideEffects(
+      args.proposal,
+      strategy,
+      result,
+      logger10
+    );
     emitVoteRejectedSignal(result.result, getPipelineEventBus(), logger10);
-    return { ok: true, value: buildResponse(args, result, costSummary) };
+    return { ok: true, value: buildResponse(args, result, costSummary, voteRecord) };
   } catch (error) {
     const message = getErrorMessage(error);
     const cause = error instanceof Error ? error : new Error(message);
@@ -5828,7 +5878,14 @@ var CONSENSUS_VOTE_OUTPUT_SCHEMA = {
   }).optional(),
   // #3124: explains a `rejected` decision that coexists with a high
   // approvalPercentage (an error-policy short-circuit, e.g. fail_closed).
-  policyReason: z10.string().max(200).optional()
+  policyReason: z10.string().max(200).optional(),
+  // #3991: whether the authentic vote record was persisted at vote time. Post-
+  // #3991 it routes through nexusDataPath under governance/, so true is the
+  // normal case; false means all-simulated (skipped by design) or write-failed
+  // (data dir unwritable) — voteRecordNote carries the actionable reason. Makes
+  // a previously WARN-only skip visible to MCP callers.
+  voteRecordPersisted: z10.boolean(),
+  voteRecordNote: z10.string().max(500).optional()
 };
 function registerConsensusVoteTool(server, deps) {
   const logger10 = deps.logger ?? createLogger({ tool: "consensus_vote" });
@@ -5941,4 +5998,4 @@ export {
   CONSENSUS_VOTE_OUTPUT_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-ME4DQ6BI.js.map
+//# sourceMappingURL=chunk-N67LHY47.js.map