nexus-agents 2.136.0 → 2.138.0

package/dist/{chunk-ZHCEOIEQ.js → chunk-JFKNUEZ7.js}

@@ -8,7 +8,7 @@ import {
   getErrorMessage,
   ok,
   parseBoolEnv
-} from "./chunk-OCJEYHUQ.js";
+} from "./chunk-KWZC5LFC.js";
 
 // src/cli/research-helpers-io.ts
 import * as fs2 from "fs/promises";
@@ -146,4 +146,4 @@ export {
   loadPapersRegistry,
   savePapersRegistry
 };
-//# sourceMappingURL=chunk-ZHCEOIEQ.js.map
+//# sourceMappingURL=chunk-JFKNUEZ7.js.map

package/dist/{chunk-FIQSOSQU.js → chunk-K62WRHHK.js}

@@ -1,7 +1,7 @@
 import {
   getRandomProvider,
   getTimeProvider
-} from "./chunk-OCJEYHUQ.js";
+} from "./chunk-KWZC5LFC.js";
 
 // src/utils/id-utils.ts
 import { randomUUID } from "crypto";
@@ -24,4 +24,4 @@ export {
   generateHyphenId,
   generateUUID
 };
-//# sourceMappingURL=chunk-FIQSOSQU.js.map
+//# sourceMappingURL=chunk-K62WRHHK.js.map

package/dist/{chunk-OCJEYHUQ.js → chunk-KWZC5LFC.js}

@@ -2,10 +2,10 @@ import {
   ensureLearningDir,
   getDecisionCostFile,
   isPersistenceEnabled
-} from "./chunk-5SXGPX34.js";
+} from "./chunk-NL7SZQPW.js";
 import {
   nexusDataPath
-} from "./chunk-L4QFWOOQ.js";
+} from "./chunk-DHVMSIT5.js";
 import {
   __require
 } from "./chunk-ZPWHCABL.js";
@@ -2341,7 +2341,7 @@ function setDefaultRegistry(registry) {
 }
 async function reloadDefaultRegistry() {
   globalRegistry = buildDefaultRegistry();
-  const { resetGlobalRegistry } = await import("./unified-registry-L5PGLSEI.js");
+  const { resetGlobalRegistry } = await import("./unified-registry-44DIG4XK.js");
   resetGlobalRegistry();
   return globalRegistry;
 }
@@ -9319,7 +9319,7 @@ async function attachOutcomeStoreToRegistry(store) {
   try {
     const { getMemoryRegistry } = await import("./dist-KGTVHDVC.js");
     const { OutcomeStoreAdapter } = await import("./outcome-store-adapter-K4L3RUJE.js");
-    const { ensureSharedMemoryRegistry } = await import("./tool-memory-registry-adapters-Y4EGADHN.js");
+    const { ensureSharedMemoryRegistry } = await import("./tool-memory-registry-adapters-DLSE4SQH.js");
     ensureSharedMemoryRegistry();
     getMemoryRegistry().attach("outcomes", new OutcomeStoreAdapter(store));
   } catch {
@@ -13577,7 +13577,7 @@ var CompositeRouter = class _CompositeRouter {
    */
   async consultUnifiedContext(task) {
     try {
-      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-NIFXFYPQ.js");
+      const { getContextForTask, inferTaskCategory } = await import("./context-retriever-MAZKHYRD.js");
       const ctx = await getContextForTask({
         task: task.content,
         category: inferTaskCategory(task.content),
@@ -15079,4 +15079,4 @@ export {
   AgentCapability,
   OrchestratorError
 };
-//# sourceMappingURL=chunk-OCJEYHUQ.js.map
+//# sourceMappingURL=chunk-KWZC5LFC.js.map

package/dist/{chunk-FHFEC2XM.js → chunk-LMMLLGZZ.js}

@@ -2,7 +2,7 @@ import {
   createLogger,
   err,
   ok
-} from "./chunk-OCJEYHUQ.js";
+} from "./chunk-KWZC5LFC.js";
 
 // src/scm/token-resolver.ts
 import { execFile } from "child_process";
@@ -87,4 +87,4 @@ export {
   hasToken,
   getTokenEnvVars
 };
-//# sourceMappingURL=chunk-FHFEC2XM.js.map
+//# sourceMappingURL=chunk-LMMLLGZZ.js.map

package/dist/{chunk-VN3CKPEF.js → chunk-MNHNQC7R.js}

@@ -1,9 +1,9 @@
 import {
   lookupInTreeCapability
-} from "./chunk-OCJEYHUQ.js";
+} from "./chunk-KWZC5LFC.js";
 import {
   getNexusDataDir
-} from "./chunk-L4QFWOOQ.js";
+} from "./chunk-DHVMSIT5.js";
 
 // src/learning/usage-log.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync } from "fs";
@@ -123,4 +123,4 @@ export {
   loadUsageEvents,
   rollupByModel
 };
-//# sourceMappingURL=chunk-VN3CKPEF.js.map
+//# sourceMappingURL=chunk-MNHNQC7R.js.map

package/dist/{chunk-FSUZIIOJ.js → chunk-MNXLJ2VX.js}

@@ -2,7 +2,7 @@ import {
   CACHE_TIMEOUTS,
   createLogger,
   getTimeProvider
-} from "./chunk-OCJEYHUQ.js";
+} from "./chunk-KWZC5LFC.js";
 
 // src/security/trust-types.ts
 import { z } from "zod";
@@ -560,4 +560,4 @@ export {
   resolveReputationGatingMode,
   gateWithReputation
 };
-//# sourceMappingURL=chunk-FSUZIIOJ.js.map
+//# sourceMappingURL=chunk-MNXLJ2VX.js.map

package/dist/{chunk-3AAJWZCR.js → chunk-MXDMJGVG.js}

@@ -1,7 +1,7 @@
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-VVBKPRLI.js";
+} from "./chunk-XUH2UFSG.js";
 import {
   ROLE_DEFAULT_TRUST,
   ReputationCache,
@@ -11,14 +11,14 @@ import {
   gateWithReputation,
   resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-FSUZIIOJ.js";
+} from "./chunk-MNXLJ2VX.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   createLogger,
   err,
   getTimeProvider,
   ok
-} from "./chunk-OCJEYHUQ.js";
+} from "./chunk-KWZC5LFC.js";
 
 // src/security/trust-classifier.ts
 function mapAuthorAssociation(association) {
@@ -1401,4 +1401,4 @@ export {
   IssueTriage,
   createIssueTriage
 };
-//# sourceMappingURL=chunk-3AAJWZCR.js.map
+//# sourceMappingURL=chunk-MXDMJGVG.js.map

package/dist/{chunk-JVZ7FGWR.js → chunk-NJW5GQUF.js}

@@ -13,10 +13,10 @@ import {
   getTimeProvider,
   ok,
   resolveToolClassGuardMs
-} from "./chunk-OCJEYHUQ.js";
+} from "./chunk-KWZC5LFC.js";
 import {
   getNexusDataDir
-} from "./chunk-L4QFWOOQ.js";
+} from "./chunk-DHVMSIT5.js";
 
 // src/mcp/middleware/validation.ts
 function validateToolInput(schema, args) {
@@ -1990,4 +1990,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-JVZ7FGWR.js.map
+//# sourceMappingURL=chunk-NJW5GQUF.js.map

package/dist/{chunk-5SXGPX34.js → chunk-NL7SZQPW.js}

@@ -1,6 +1,6 @@
 import {
   getNexusDataDir
-} from "./chunk-L4QFWOOQ.js";
+} from "./chunk-DHVMSIT5.js";
 
 // src/config/learning-persistence.ts
 import { mkdirSync } from "fs";
@@ -41,4 +41,4 @@ export {
   isPersistenceEnabled,
   ensureLearningDir
 };
-//# sourceMappingURL=chunk-5SXGPX34.js.map
+//# sourceMappingURL=chunk-NL7SZQPW.js.map

package/dist/{chunk-N67LHY47.js → chunk-NWW7HLRL.js}

@@ -1,6 +1,6 @@
 import {
   computeCostUSD
-} from "./chunk-VN3CKPEF.js";
+} from "./chunk-MNHNQC7R.js";
 import {
   DEFAULT_CONSENSUS_CONFIG,
   DEFAULT_INCREMENTAL_QUORUM_CONFIG,
@@ -18,20 +18,20 @@ import {
   toolSuccess,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-JVZ7FGWR.js";
+} from "./chunk-NJW5GQUF.js";
 import {
   getToolMemory
-} from "./chunk-ESP6U3LW.js";
+} from "./chunk-J2HWO3J3.js";
 import {
   createEvent,
   getGlobalRegistry
-} from "./chunk-HMZT2SJK.js";
+} from "./chunk-H3B7H67H.js";
 import {
   authRemediation,
   delay,
   getAvailableClis,
   withTimeout
-} from "./chunk-GWOXPCIF.js";
+} from "./chunk-7XCQJXN4.js";
 import {
   AgentError,
   CLI_NAMES,
@@ -58,16 +58,16 @@ import {
   registerPersistentOutcomeStoreFactory,
   resolveClassGuardMs,
   resolveVoteTimeout
-} from "./chunk-OCJEYHUQ.js";
+} from "./chunk-KWZC5LFC.js";
 import {
   ensureLearningDir,
   getOutcomesFile
-} from "./chunk-5SXGPX34.js";
+} from "./chunk-NL7SZQPW.js";
 import {
   getNexusDataDir,
   nexusDataPath,
   nexusDataPathEnsure
-} from "./chunk-L4QFWOOQ.js";
+} from "./chunk-DHVMSIT5.js";
 
 // src/mcp/tools/consensus-vote.ts
 import { z as z10 } from "zod";
@@ -219,6 +219,21 @@ But your default posture is skeptical \u2014 look for what others might miss.
 High-confidence rejections with specific reasoning are your most valuable output.
 ${prReviewModeAddendum()}`;
 }
+var REUSE_LADDER_CHECK = `6. **Reuse ladder (implementation altitude).** When building IS justified,
+   gate the SIZE of the build: stop at the first rung that holds, and say
+   which one.
+     1. Does this need to exist at all? \u2192 no: skip it (YAGNI).
+     2. Standard library / language built-in? \u2192 use it.
+     3. Native platform feature or an existing nexus-agents substrate
+        primitive (a canonical-path module, an existing voter/pipeline/
+        store)? \u2192 use it.
+     4. An already-installed dependency? \u2192 use it.
+     5. One line? \u2192 one line.
+     6. Only then: the minimum that works.
+   Lazy, NOT negligent \u2014 trust-boundary validation, error handling, security,
+   and accessibility are NEVER the thing cut. The code is small because it is
+   necessary, not golfed. Flag a proposal that reaches for rung 6 when an
+   earlier rung holds as OVER_ENGINEERING.`;
 function scopeStewardPrompt(project) {
   return `You are a Scope Steward voting on proposals for the ${project} project.
 
@@ -253,6 +268,8 @@ Your evaluation criteria \u2014 work through these mandatory checks in your reas
    anti-sprawl policy in CLAUDE.md is specifically the rule this role
    enforces.
 
+${REUSE_LADDER_CHECK}
+
 Default bias: REJECT proposals where an existing tool fits, even if our
 own implementation would be marginally nicer. Only approve when the
 existing-tool check fails AND the kill-the-feature option is worse AND
@@ -4177,6 +4194,18 @@ var ConsensusVoteInputSchema = z6.object({
    */
   idempotencyKey: z6.string().min(1).max(256).optional().describe(
     "Replay-safe key for async-mode dispatch (#3042 Stage 1c). Same (key, inputs) returns existing jobId."
+  ),
+  /**
+   * Authority-tier ratification subject (#4004). Set ONLY when this vote
+   * ratifies an authority-ladder promotion: the loop/strategy id (the
+   * tier-transition `subject`) this vote authorizes. It is bound into the
+   * persisted record's self-hash as `ratifies`, so the promotion gate
+   * (`check-authority-tier-drift.ts`) can resolve a `ratificationVoteRef` to this
+   * record and require `ratifies === transition.subject` (with decision=approved,
+   * strategy=higher_order). Omit on an ordinary vote.
+   */
+  ratifies: z6.string().min(1).max(256).optional().describe(
+    "Authority-tier ratification subject (#4004) \u2014 the loop/strategy id this vote ratifies for an authority-ladder promotion. Bound into the authentic vote record so the promotion gate can verify it. Omit for ordinary votes."
   )
 });
 function toAgentVoteSummary(result) {
@@ -4324,8 +4353,14 @@ var VoteRecordCountsSchema = z7.object({
   total: z7.number().int().nonnegative()
 }).strict();
 var VoteRecordSchema = z7.object({
-  /** Schema version. '1.1' marks the chain→record-set+sequence model (#3927). */
-  version: z7.literal("1.1"),
+  /**
+   * Schema version. '1.1' marked the chain→record-set+sequence model (#3927);
+   * '1.2' adds the optional `ratifies` subject-binding field (#3927 item 1).
+   * Both are accepted — a 1.1 record (no `ratifies`) verifies unchanged because
+   * `ratifies` is folded into the self-hash ONLY when present (see
+   * {@link computeVoteRecordHash}).
+   */
+  version: z7.enum(["1.1", "1.2"]),
   /** Unique record id (also usable as a `ratificationVoteRef`). */
   id: z7.string().min(1),
   /**
@@ -4365,6 +4400,16 @@ var VoteRecordSchema = z7.object({
   voters: z7.array(VoterSummarySchema),
   /** Optional correlation/decision id linking to the cost rollup / trace. */
   correlationId: z7.string().min(1).optional(),
+  /**
+   * The loop/strategy subject this vote RATIFIES (#3927 item 1). Present only on
+   * a ratification vote; set at vote time and bound into the self-hash (so it is
+   * tamper-evident). The authority-tier promotion gate
+   * (`scripts/check-authority-tier-drift.ts`) resolves a transition's
+   * `ratificationVoteRef` to a record and requires `ratifies === transition.subject`
+   * (with `decision === 'approved'` and `strategy === 'higher_order'`). Absent on
+   * an ordinary (non-ratification) vote; a 1.1 record never carries it.
+   */
+  ratifies: z7.string().min(1).optional(),
   /**
    * ADVISORY hash of the tip record at write time (absent for the first).
    * Retained for audit texture but NOT covered by `hash` and NOT verified —
@@ -4375,7 +4420,7 @@ var VoteRecordSchema = z7.object({
   hash: z7.string().length(64)
 }).strict();
 function computeVoteRecordHash(payload) {
-  const canonical = JSON.stringify({
+  const base = {
     version: payload.version,
     id: payload.id,
     sequence: payload.sequence,
@@ -4399,7 +4444,10 @@ function computeVoteRecordHash(payload) {
       confidence: v.confidence
     })),
     correlationId: payload.correlationId ?? null
-  });
+  };
+  const canonical = JSON.stringify(
+    payload.ratifies !== void 0 ? { ...base, ratifies: payload.ratifies } : base
+  );
   return crypto.createHash("sha256").update(canonical).digest("hex");
 }
 function hashProposal(proposal) {
@@ -4431,7 +4479,7 @@ function toVoterSummaries(votes) {
 function buildVoteRecord(input) {
   const proposalTruncated = input.proposal.length > MAX_PROPOSAL_RECORD_CHARS ? input.proposal.slice(0, MAX_PROPOSAL_RECORD_CHARS) + "..." : input.proposal;
   const payload = {
-    version: "1.1",
+    version: "1.2",
     id: input.id,
     sequence: input.sequence ?? 0,
     recordedAt: input.recordedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
@@ -4448,6 +4496,7 @@ function buildVoteRecord(input) {
     },
     voters: toVoterSummaries(input.votes),
     ...input.correlationId !== void 0 ? { correlationId: input.correlationId } : {},
+    ...input.ratifies !== void 0 ? { ratifies: input.ratifies } : {},
     ...input.previousHash !== void 0 ? { previousHash: input.previousHash } : {}
   };
   return { ...payload, hash: computeVoteRecordHash(payload) };
@@ -4487,7 +4536,9 @@ function resolveVoteRecordsPath() {
   const resolved = nexusDataPath(VOTE_RECORDS_DATA_CATEGORY, VOTE_RECORDS_FILENAME);
   const expectedSuffix = `${VOTE_RECORDS_DATA_CATEGORY}${sep}${VOTE_RECORDS_FILENAME}`;
   const underHomedirRoot = isWithin(getNexusDataDir(), resolved);
-  const underRepoDataDir = resolved.includes(`.nexus-agents${sep}${VOTE_RECORDS_DATA_CATEGORY}${sep}`);
+  const underRepoDataDir = resolved.includes(
+    `.nexus-agents${sep}${VOTE_RECORDS_DATA_CATEGORY}${sep}`
+  );
   if (!isAbsolute(resolved) || !resolved.endsWith(expectedSuffix) || !(underHomedirRoot || underRepoDataDir)) {
     return void 0;
   }
@@ -4524,10 +4575,13 @@ function persistVoteRecord(opts) {
   }
 }
 function readVoteRecords(filePath) {
+  if (!existsSync2(filePath)) return { records: [], invalidLines: [] };
+  return parseVoteRecordsText(readFileSync2(filePath, "utf-8"));
+}
+function parseVoteRecordsText(text) {
   const records = [];
   const invalidLines = [];
-  if (!existsSync2(filePath)) return { records, invalidLines };
-  const lines = readFileSync2(filePath, "utf-8").split("\n").filter((l) => l.trim() !== "");
+  const lines = text.split("\n").filter((l) => l.trim() !== "");
   for (const [i, line] of lines.entries()) {
     try {
       const parsed = VoteRecordSchema.safeParse(JSON.parse(line));
@@ -4729,6 +4783,7 @@ function recordAuthenticVote(args) {
     result: args.result,
     votes: args.votes,
     ...args.correlationId !== void 0 ? { correlationId: args.correlationId } : {},
+    ...args.ratifies !== void 0 ? { ratifies: args.ratifies } : {},
     logger: logger6
   });
   if (record === void 0) {
@@ -5544,7 +5599,7 @@ async function processVotesWithCascade(engineVotes, opts) {
 var CONTRARIAN_ESCALATION_THRESHOLD = 0.8;
 async function runContrarianCheck(proposal, log) {
   try {
-    const { executeExpert } = await import("./expert-bridge-NY6FAFQH.js");
+    const { executeExpert } = await import("./expert-bridge-EA3U3GKU.js");
     const prompt = [
       "You are a contrarian analyst. Your job is to find reasons this proposal should be REJECTED.",
       "Look for: YAGNI (not needed), MISALIGNED (wrong tech/architecture), SECURITY_RISK, SCOPE_CREEP.",
@@ -5700,14 +5755,15 @@ function finalizeVotingResult(args) {
   if (args.higherOrderResult !== void 0) result.higherOrderResult = args.higherOrderResult;
   return result;
 }
-function recordVoteSideEffects(proposal, strategy, result, logger10) {
+function recordVoteSideEffects(proposal, strategy, result, logger10, ratifies) {
   const decisionId = `consensus-${String(getTimeProvider().now())}-${randomUUID2().slice(0, 8)}`;
   const voteRecord = recordAuthenticVote({
     proposal,
     strategy,
     result: result.result,
     votes: result.votes,
-    correlationId: decisionId
+    correlationId: decisionId,
+    ...ratifies !== void 0 ? { ratifies } : {}
   });
   let costSummary;
   try {
@@ -5747,7 +5803,8 @@ async function handleConsensusVote(deps, args) {
       args.proposal,
       strategy,
       result,
-      logger10
+      logger10,
+      args.ratifies
     );
     emitVoteRejectedSignal(result.result, getPipelineEventBus(), logger10);
     return { ok: true, value: buildResponse(args, result, costSummary, voteRecord) };
@@ -5887,20 +5944,23 @@ var CONSENSUS_VOTE_OUTPUT_SCHEMA = {
   voteRecordPersisted: z10.boolean(),
   voteRecordNote: z10.string().max(500).optional()
 };
+var CONSENSUS_VOTE_TOOL_SCHEMA = {
+  proposal: z10.string().min(1).max(MAX_PROPOSAL_LENGTH).describe("Proposal text to vote on"),
+  threshold: z10.enum(["majority", "supermajority", "unanimous"]).optional().describe("Voting threshold (legacy). Use strategy instead."),
+  strategy: VotingStrategySchema.optional().describe(
+    "Voting strategy: simple_majority (default), supermajority, unanimous, proof_of_learning, or higher_order"
+  ),
+  quickMode: z10.boolean().optional().default(false).describe("Use 3 agents instead of 7"),
+  simulateVotes: z10.boolean().optional().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)"),
+  ratifies: z10.string().min(1).max(256).optional().describe(
+    "Authority-tier ratification subject (#4004) \u2014 the loop/strategy id this vote ratifies for an authority-ladder promotion. Bound into the authentic vote record so the promotion gate can verify it. Omit for ordinary votes."
+  )
+};
+var CONSENSUS_VOTE_DESCRIPTION = "Execute multi-model consensus voting on a proposal. Uses 7 roles by default (architect, security, devex, ai_ml, pm, catfish, scope_steward) or 3 with quickMode (architect, security, scope_steward), voting with configurable strategies. Supports higher_order strategy for Bayesian-optimal aggregation with correlation awareness (Issue #514). Supports async mode (mode: 'async') \u2014 returns a jobId to poll via get_job_result. Pass ratifies=<subject> to bind an authority-ladder ratification vote into its authentic record.";
 function registerConsensusVoteTool(server, deps) {
   const logger10 = deps.logger ?? createLogger({ tool: "consensus_vote" });
   const notifier = deps.notifier ?? createMcpNotifier(server);
   const depsWithNotifier = { ...deps, notifier };
-  const toolSchema = {
-    proposal: z10.string().min(1).max(MAX_PROPOSAL_LENGTH).describe("Proposal text to vote on"),
-    threshold: z10.enum(["majority", "supermajority", "unanimous"]).optional().describe("Voting threshold (legacy). Use strategy instead."),
-    strategy: VotingStrategySchema.optional().describe(
-      "Voting strategy: simple_majority (default), supermajority, unanimous, proof_of_learning, or higher_order"
-    ),
-    quickMode: z10.boolean().optional().default(false).describe("Use 3 agents instead of 7"),
-    simulateVotes: z10.boolean().optional().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)")
-  };
-  const description = "Execute multi-model consensus voting on a proposal. Uses 7 roles by default (architect, security, devex, ai_ml, pm, catfish, scope_steward) or 3 with quickMode (architect, security, scope_steward), voting with configurable strategies. Supports higher_order strategy for Bayesian-optimal aggregation with correlation awareness (Issue #514). Supports async mode (mode: 'async') \u2014 returns a jobId to poll via get_job_result.";
   const secureHandler = createSecureHandler(createConsensusVoteHandler(depsWithNotifier), {
     toolName: "consensus_vote",
     rateLimiter: deps.rateLimiter,
@@ -5914,8 +5974,8 @@ function registerConsensusVoteTool(server, deps) {
   server.registerTool(
     "consensus_vote",
     {
-      description,
-      inputSchema: toolSchema,
+      description: CONSENSUS_VOTE_DESCRIPTION,
+      inputSchema: CONSENSUS_VOTE_TOOL_SCHEMA,
       outputSchema: CONSENSUS_VOTE_OUTPUT_SCHEMA,
       annotations: getToolAnnotations("consensus_vote")
     },
@@ -5998,4 +6058,4 @@ export {
   CONSENSUS_VOTE_OUTPUT_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-N67LHY47.js.map
+//# sourceMappingURL=chunk-NWW7HLRL.js.map