nexus-agents 2.137.0 → 2.138.0

package/dist/{chunk-NRJLOBGA.js → chunk-52JN2RFG.js}

@@ -8,7 +8,7 @@ import {
   checkSqlite,
   defaultConfig,
   initDataDirectories
-} from "./chunk-DPHEFR5X.js";
+} from "./chunk-7KFI6R2M.js";
 import {
   BUILT_IN_EXPERTS
 } from "./chunk-ZM4O442V.js";
@@ -2000,4 +2000,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=chunk-NRJLOBGA.js.map
+//# sourceMappingURL=chunk-52JN2RFG.js.map

package/dist/{chunk-DPHEFR5X.js → chunk-7KFI6R2M.js}

@@ -42,7 +42,7 @@ import {
 } from "./chunk-DHVMSIT5.js";
 
 // src/version.ts
-var VERSION = true ? "2.137.0" : "dev";
+var VERSION = true ? "2.138.0" : "dev";
 
 // src/config/schemas-core.ts
 import { z } from "zod";
@@ -2132,7 +2132,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { runSetup } = await import("./setup-command-TIGCMJRZ.js");
+    const { runSetup } = await import("./setup-command-OHM6K4FM.js");
     const setupResult = runSetup({
       skipMcp: true,
       skipRules: true,
@@ -2245,4 +2245,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-DPHEFR5X.js.map
+//# sourceMappingURL=chunk-7KFI6R2M.js.map

package/dist/{chunk-HC5CUX6C.js → chunk-NWW7HLRL.js}

@@ -219,6 +219,21 @@ But your default posture is skeptical \u2014 look for what others might miss.
 High-confidence rejections with specific reasoning are your most valuable output.
 ${prReviewModeAddendum()}`;
 }
+var REUSE_LADDER_CHECK = `6. **Reuse ladder (implementation altitude).** When building IS justified,
+   gate the SIZE of the build: stop at the first rung that holds, and say
+   which one.
+     1. Does this need to exist at all? \u2192 no: skip it (YAGNI).
+     2. Standard library / language built-in? \u2192 use it.
+     3. Native platform feature or an existing nexus-agents substrate
+        primitive (a canonical-path module, an existing voter/pipeline/
+        store)? \u2192 use it.
+     4. An already-installed dependency? \u2192 use it.
+     5. One line? \u2192 one line.
+     6. Only then: the minimum that works.
+   Lazy, NOT negligent \u2014 trust-boundary validation, error handling, security,
+   and accessibility are NEVER the thing cut. The code is small because it is
+   necessary, not golfed. Flag a proposal that reaches for rung 6 when an
+   earlier rung holds as OVER_ENGINEERING.`;
 function scopeStewardPrompt(project) {
   return `You are a Scope Steward voting on proposals for the ${project} project.
 
@@ -253,6 +268,8 @@ Your evaluation criteria \u2014 work through these mandatory checks in your reas
    anti-sprawl policy in CLAUDE.md is specifically the rule this role
    enforces.
 
+${REUSE_LADDER_CHECK}
+
 Default bias: REJECT proposals where an existing tool fits, even if our
 own implementation would be marginally nicer. Only approve when the
 existing-tool check fails AND the kill-the-feature option is worse AND
@@ -4177,6 +4194,18 @@ var ConsensusVoteInputSchema = z6.object({
    */
   idempotencyKey: z6.string().min(1).max(256).optional().describe(
     "Replay-safe key for async-mode dispatch (#3042 Stage 1c). Same (key, inputs) returns existing jobId."
+  ),
+  /**
+   * Authority-tier ratification subject (#4004). Set ONLY when this vote
+   * ratifies an authority-ladder promotion: the loop/strategy id (the
+   * tier-transition `subject`) this vote authorizes. It is bound into the
+   * persisted record's self-hash as `ratifies`, so the promotion gate
+   * (`check-authority-tier-drift.ts`) can resolve a `ratificationVoteRef` to this
+   * record and require `ratifies === transition.subject` (with decision=approved,
+   * strategy=higher_order). Omit on an ordinary vote.
+   */
+  ratifies: z6.string().min(1).max(256).optional().describe(
+    "Authority-tier ratification subject (#4004) \u2014 the loop/strategy id this vote ratifies for an authority-ladder promotion. Bound into the authentic vote record so the promotion gate can verify it. Omit for ordinary votes."
   )
 });
 function toAgentVoteSummary(result) {
@@ -4324,8 +4353,14 @@ var VoteRecordCountsSchema = z7.object({
   total: z7.number().int().nonnegative()
 }).strict();
 var VoteRecordSchema = z7.object({
-  /** Schema version. '1.1' marks the chain→record-set+sequence model (#3927). */
-  version: z7.literal("1.1"),
+  /**
+   * Schema version. '1.1' marked the chain→record-set+sequence model (#3927);
+   * '1.2' adds the optional `ratifies` subject-binding field (#3927 item 1).
+   * Both are accepted — a 1.1 record (no `ratifies`) verifies unchanged because
+   * `ratifies` is folded into the self-hash ONLY when present (see
+   * {@link computeVoteRecordHash}).
+   */
+  version: z7.enum(["1.1", "1.2"]),
   /** Unique record id (also usable as a `ratificationVoteRef`). */
   id: z7.string().min(1),
   /**
@@ -4365,6 +4400,16 @@ var VoteRecordSchema = z7.object({
   voters: z7.array(VoterSummarySchema),
   /** Optional correlation/decision id linking to the cost rollup / trace. */
   correlationId: z7.string().min(1).optional(),
+  /**
+   * The loop/strategy subject this vote RATIFIES (#3927 item 1). Present only on
+   * a ratification vote; set at vote time and bound into the self-hash (so it is
+   * tamper-evident). The authority-tier promotion gate
+   * (`scripts/check-authority-tier-drift.ts`) resolves a transition's
+   * `ratificationVoteRef` to a record and requires `ratifies === transition.subject`
+   * (with `decision === 'approved'` and `strategy === 'higher_order'`). Absent on
+   * an ordinary (non-ratification) vote; a 1.1 record never carries it.
+   */
+  ratifies: z7.string().min(1).optional(),
   /**
    * ADVISORY hash of the tip record at write time (absent for the first).
    * Retained for audit texture but NOT covered by `hash` and NOT verified —
@@ -4375,7 +4420,7 @@ var VoteRecordSchema = z7.object({
   hash: z7.string().length(64)
 }).strict();
 function computeVoteRecordHash(payload) {
-  const canonical = JSON.stringify({
+  const base = {
     version: payload.version,
     id: payload.id,
     sequence: payload.sequence,
@@ -4399,7 +4444,10 @@ function computeVoteRecordHash(payload) {
       confidence: v.confidence
     })),
     correlationId: payload.correlationId ?? null
-  });
+  };
+  const canonical = JSON.stringify(
+    payload.ratifies !== void 0 ? { ...base, ratifies: payload.ratifies } : base
+  );
   return crypto.createHash("sha256").update(canonical).digest("hex");
 }
 function hashProposal(proposal) {
@@ -4431,7 +4479,7 @@ function toVoterSummaries(votes) {
 function buildVoteRecord(input) {
   const proposalTruncated = input.proposal.length > MAX_PROPOSAL_RECORD_CHARS ? input.proposal.slice(0, MAX_PROPOSAL_RECORD_CHARS) + "..." : input.proposal;
   const payload = {
-    version: "1.1",
+    version: "1.2",
     id: input.id,
     sequence: input.sequence ?? 0,
     recordedAt: input.recordedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
@@ -4448,6 +4496,7 @@ function buildVoteRecord(input) {
     },
     voters: toVoterSummaries(input.votes),
     ...input.correlationId !== void 0 ? { correlationId: input.correlationId } : {},
+    ...input.ratifies !== void 0 ? { ratifies: input.ratifies } : {},
     ...input.previousHash !== void 0 ? { previousHash: input.previousHash } : {}
   };
   return { ...payload, hash: computeVoteRecordHash(payload) };
@@ -4487,7 +4536,9 @@ function resolveVoteRecordsPath() {
   const resolved = nexusDataPath(VOTE_RECORDS_DATA_CATEGORY, VOTE_RECORDS_FILENAME);
   const expectedSuffix = `${VOTE_RECORDS_DATA_CATEGORY}${sep}${VOTE_RECORDS_FILENAME}`;
   const underHomedirRoot = isWithin(getNexusDataDir(), resolved);
-  const underRepoDataDir = resolved.includes(`.nexus-agents${sep}${VOTE_RECORDS_DATA_CATEGORY}${sep}`);
+  const underRepoDataDir = resolved.includes(
+    `.nexus-agents${sep}${VOTE_RECORDS_DATA_CATEGORY}${sep}`
+  );
   if (!isAbsolute(resolved) || !resolved.endsWith(expectedSuffix) || !(underHomedirRoot || underRepoDataDir)) {
     return void 0;
   }
@@ -4524,10 +4575,13 @@ function persistVoteRecord(opts) {
   }
 }
 function readVoteRecords(filePath) {
+  if (!existsSync2(filePath)) return { records: [], invalidLines: [] };
+  return parseVoteRecordsText(readFileSync2(filePath, "utf-8"));
+}
+function parseVoteRecordsText(text) {
   const records = [];
   const invalidLines = [];
-  if (!existsSync2(filePath)) return { records, invalidLines };
-  const lines = readFileSync2(filePath, "utf-8").split("\n").filter((l) => l.trim() !== "");
+  const lines = text.split("\n").filter((l) => l.trim() !== "");
   for (const [i, line] of lines.entries()) {
     try {
       const parsed = VoteRecordSchema.safeParse(JSON.parse(line));
@@ -4729,6 +4783,7 @@ function recordAuthenticVote(args) {
     result: args.result,
     votes: args.votes,
     ...args.correlationId !== void 0 ? { correlationId: args.correlationId } : {},
+    ...args.ratifies !== void 0 ? { ratifies: args.ratifies } : {},
     logger: logger6
   });
   if (record === void 0) {
@@ -5700,14 +5755,15 @@ function finalizeVotingResult(args) {
   if (args.higherOrderResult !== void 0) result.higherOrderResult = args.higherOrderResult;
   return result;
 }
-function recordVoteSideEffects(proposal, strategy, result, logger10) {
+function recordVoteSideEffects(proposal, strategy, result, logger10, ratifies) {
   const decisionId = `consensus-${String(getTimeProvider().now())}-${randomUUID2().slice(0, 8)}`;
   const voteRecord = recordAuthenticVote({
     proposal,
     strategy,
     result: result.result,
     votes: result.votes,
-    correlationId: decisionId
+    correlationId: decisionId,
+    ...ratifies !== void 0 ? { ratifies } : {}
   });
   let costSummary;
   try {
@@ -5747,7 +5803,8 @@ async function handleConsensusVote(deps, args) {
       args.proposal,
       strategy,
       result,
-      logger10
+      logger10,
+      args.ratifies
     );
     emitVoteRejectedSignal(result.result, getPipelineEventBus(), logger10);
     return { ok: true, value: buildResponse(args, result, costSummary, voteRecord) };
@@ -5887,20 +5944,23 @@ var CONSENSUS_VOTE_OUTPUT_SCHEMA = {
   voteRecordPersisted: z10.boolean(),
   voteRecordNote: z10.string().max(500).optional()
 };
+var CONSENSUS_VOTE_TOOL_SCHEMA = {
+  proposal: z10.string().min(1).max(MAX_PROPOSAL_LENGTH).describe("Proposal text to vote on"),
+  threshold: z10.enum(["majority", "supermajority", "unanimous"]).optional().describe("Voting threshold (legacy). Use strategy instead."),
+  strategy: VotingStrategySchema.optional().describe(
+    "Voting strategy: simple_majority (default), supermajority, unanimous, proof_of_learning, or higher_order"
+  ),
+  quickMode: z10.boolean().optional().default(false).describe("Use 3 agents instead of 7"),
+  simulateVotes: z10.boolean().optional().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)"),
+  ratifies: z10.string().min(1).max(256).optional().describe(
+    "Authority-tier ratification subject (#4004) \u2014 the loop/strategy id this vote ratifies for an authority-ladder promotion. Bound into the authentic vote record so the promotion gate can verify it. Omit for ordinary votes."
+  )
+};
+var CONSENSUS_VOTE_DESCRIPTION = "Execute multi-model consensus voting on a proposal. Uses 7 roles by default (architect, security, devex, ai_ml, pm, catfish, scope_steward) or 3 with quickMode (architect, security, scope_steward), voting with configurable strategies. Supports higher_order strategy for Bayesian-optimal aggregation with correlation awareness (Issue #514). Supports async mode (mode: 'async') \u2014 returns a jobId to poll via get_job_result. Pass ratifies=<subject> to bind an authority-ladder ratification vote into its authentic record.";
 function registerConsensusVoteTool(server, deps) {
   const logger10 = deps.logger ?? createLogger({ tool: "consensus_vote" });
   const notifier = deps.notifier ?? createMcpNotifier(server);
   const depsWithNotifier = { ...deps, notifier };
-  const toolSchema = {
-    proposal: z10.string().min(1).max(MAX_PROPOSAL_LENGTH).describe("Proposal text to vote on"),
-    threshold: z10.enum(["majority", "supermajority", "unanimous"]).optional().describe("Voting threshold (legacy). Use strategy instead."),
-    strategy: VotingStrategySchema.optional().describe(
-      "Voting strategy: simple_majority (default), supermajority, unanimous, proof_of_learning, or higher_order"
-    ),
-    quickMode: z10.boolean().optional().default(false).describe("Use 3 agents instead of 7"),
-    simulateVotes: z10.boolean().optional().default(false).describe("TESTS ONLY \u2014 random output, must not be used for real decisions (#2319)")
-  };
-  const description = "Execute multi-model consensus voting on a proposal. Uses 7 roles by default (architect, security, devex, ai_ml, pm, catfish, scope_steward) or 3 with quickMode (architect, security, scope_steward), voting with configurable strategies. Supports higher_order strategy for Bayesian-optimal aggregation with correlation awareness (Issue #514). Supports async mode (mode: 'async') \u2014 returns a jobId to poll via get_job_result.";
   const secureHandler = createSecureHandler(createConsensusVoteHandler(depsWithNotifier), {
     toolName: "consensus_vote",
     rateLimiter: deps.rateLimiter,
@@ -5914,8 +5974,8 @@ function registerConsensusVoteTool(server, deps) {
   server.registerTool(
     "consensus_vote",
     {
-      description,
-      inputSchema: toolSchema,
+      description: CONSENSUS_VOTE_DESCRIPTION,
+      inputSchema: CONSENSUS_VOTE_TOOL_SCHEMA,
       outputSchema: CONSENSUS_VOTE_OUTPUT_SCHEMA,
       annotations: getToolAnnotations("consensus_vote")
     },
@@ -5998,4 +6058,4 @@ export {
   CONSENSUS_VOTE_OUTPUT_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-HC5CUX6C.js.map
+//# sourceMappingURL=chunk-NWW7HLRL.js.map