nexus-agents 2.140.1 → 2.141.0

package/dist/{consensus-vote-LGFJGBLL.js → consensus-vote-DRGGSXUQ.js}

@@ -7,7 +7,7 @@ import {
   registerConsensusVoteTool,
   resetCorrelationTracker,
   runConsensusForGoal
-} from "./chunk-KUF5JK5A.js";
+} from "./chunk-3Z4SZVBB.js";
 import "./chunk-75M7P45Q.js";
 import "./chunk-PUFP75ZL.js";
 import "./chunk-YI5HSN5U.js";
@@ -36,4 +36,4 @@ export {
   resetCorrelationTracker,
   runConsensusForGoal
 };
-//# sourceMappingURL=consensus-vote-LGFJGBLL.js.map
+//# sourceMappingURL=consensus-vote-DRGGSXUQ.js.map

package/dist/index.d.ts

@@ -26594,6 +26594,51 @@ interface Finding {
     readonly verified: boolean;
 }
 
+/**
+ * nexus-agents/mcp — PR-Review Audit-Record Producer (#4031).
+ *
+ * The pr_review side of the #3831 Option-C arc: turn a completed review into an
+ * authentic, self-hashed governance record bound to {prNumber, baseSha,
+ * reviewedDiffHash, verdict}, so the warn-first governor-review gate can find a
+ * diff-bound record for the PR it is checking. Split out of pr-review-tool.ts to
+ * keep that file's single-purpose review flow lean.
+ *
+ * Best-effort and never-throws: a missing binding or a write failure is surfaced
+ * as a structured {@link PrReviewRecordOutcome}, never an exception into the
+ * review path (an audit sink must not break the operation it observes).
+ *
+ * @module mcp/tools/pr-review-record-producer
+ */
+
+/**
+ * Structured outcome of the best-effort Option-C audit-record persistence
+ * (#4031). Surfaced on the pr_review response so an MCP caller can SEE whether a
+ * record was written and, when not, WHY — mirroring the consensus_vote
+ * `voteRecordPersisted` observability. Reasons:
+ *  - `binding-inputs-absent` — `prNumber` and/or `baseSha` were not supplied, so
+ *    there is nothing to bind the record to (the warn-first skip; not an error).
+ *  - `simulated` — the review used simulated voters; a committed record would
+ *    seed governance from non-live output (mirrors #2319 for votes).
+ *  - `no-live-votes` — every voter errored, so the aggregate verdict was produced
+ *    by NO live opinion. Persisting would write a gate-satisfying record for a
+ *    review that never actually happened (the governor-review analogue of the
+ *    consensus_vote `no_quorum` void, #4053). Skipped so a failed review cannot
+ *    silently flip the #3831 gate from warn to a false pass.
+ *  - `write-failed` — the binding was present but the ledger path was unresolved
+ *    or the append failed (the producer already logged the underlying cause).
+ */
+type PrReviewRecordOutcome = {
+    readonly persisted: true;
+    readonly prNumber: number;
+    readonly baseSha: string;
+    readonly reviewedDiffHash: string;
+    readonly sequence: number;
+} | {
+    readonly persisted: false;
+    readonly reason: 'binding-inputs-absent' | 'simulated' | 'no-live-votes' | 'write-failed';
+    readonly detail: string;
+};
+
 /**
  * nexus-agents/mcp - PR Review Tool (#2233 Child 1)
  *
@@ -26626,6 +26671,8 @@ declare const PrReviewInputSchema: z.ZodObject<{
     repoContext: z.ZodOptional<z.ZodString>;
     baseRef: z.ZodOptional<z.ZodString>;
     headRef: z.ZodOptional<z.ZodString>;
+    prNumber: z.ZodOptional<z.ZodNumber>;
+    baseSha: z.ZodOptional<z.ZodString>;
     simulate: z.ZodDefault<z.ZodBoolean>;
     dispatch: z.ZodDefault<z.ZodEnum<{
         async: "async";
@@ -26680,6 +26727,12 @@ interface PrReviewResponse {
      * adapter reported no usage are counted as unmeasured, not a measured $0).
      */
     readonly costSummary?: DecisionCostSummary;
+    /**
+     * Option-C audit-record persistence outcome (#4031). Present on every
+     * response: `persisted: true` with the record's binding + sequence when an
+     * authentic record was written, otherwise `persisted: false` with the reason.
+     */
+    readonly recordOutcome?: PrReviewRecordOutcome;
 }
 interface PrReviewDeps extends BaseMcpToolDeps {
     /**

package/dist/index.js

@@ -520,7 +520,7 @@ import {
   validateWorkflow,
   validateWorkflowDependencies,
   withLogging
-} from "./chunk-QLFU334E.js";
+} from "./chunk-4VCLI2T3.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
@@ -560,7 +560,7 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-W2X4T4JX.js";
+} from "./chunk-7XOTLM3R.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
@@ -616,7 +616,7 @@ import {
   generateProposalId,
   parseAgentPairKey,
   registerConsensusVoteTool
-} from "./chunk-KUF5JK5A.js";
+} from "./chunk-3Z4SZVBB.js";
 import "./chunk-75M7P45Q.js";
 import "./chunk-JUYELG7E.js";
 import {
@@ -5953,7 +5953,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-LGFJGBLL.js");
+    const { executeVoting } = await import("./consensus-vote-DRGGSXUQ.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);

package/dist/{setup-command-UGNZID2H.js → setup-command-SP3Q6YW6.js}

@@ -8,9 +8,9 @@ import {
   runWizard,
   setupCommand,
   setupCommandAsync
-} from "./chunk-FDWCMNCA.js";
+} from "./chunk-VLODTBPY.js";
 import "./chunk-BU2PN7M2.js";
-import "./chunk-W2X4T4JX.js";
+import "./chunk-7XOTLM3R.js";
 import "./chunk-NUBSJGQZ.js";
 import "./chunk-6T3EPABN.js";
 import "./chunk-ZM4O442V.js";
@@ -35,4 +35,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=setup-command-UGNZID2H.js.map
+//# sourceMappingURL=setup-command-SP3Q6YW6.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-agents",
-  "version": "2.140.1",
+  "version": "2.141.0",
   "description": "Governance substrate for AI coding agents — adversarial PR review, drift-detected rules, tamper-evident audit, and closed-loop outcome routing for Claude, Codex, Gemini, and OpenCode",
   "mcpName": "io.github.nexus-substrate/nexus-agents",
   "license": "MIT",