nexus-agents 2.140.2 → 2.141.0

package/dist/{chunk-FLDT5YWH.js → chunk-7XOTLM3R.js}

@@ -42,7 +42,7 @@ import {
 } from "./chunk-DHVMSIT5.js";
 
 // src/version.ts
-var VERSION = true ? "2.140.2" : "dev";
+var VERSION = true ? "2.141.0" : "dev";
 
 // src/config/schemas-core.ts
 import { z } from "zod";
@@ -2132,7 +2132,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { runSetup } = await import("./setup-command-SR7SNTMD.js");
+    const { runSetup } = await import("./setup-command-SP3Q6YW6.js");
     const setupResult = runSetup({
       skipMcp: true,
       skipRules: true,
@@ -2245,4 +2245,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-FLDT5YWH.js.map
+//# sourceMappingURL=chunk-7XOTLM3R.js.map

package/dist/{chunk-JO2EX53W.js → chunk-VLODTBPY.js}

@@ -8,7 +8,7 @@ import {
   checkSqlite,
   defaultConfig,
   initDataDirectories
-} from "./chunk-FLDT5YWH.js";
+} from "./chunk-7XOTLM3R.js";
 import {
   BUILT_IN_EXPERTS
 } from "./chunk-ZM4O442V.js";
@@ -2000,4 +2000,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=chunk-JO2EX53W.js.map
+//# sourceMappingURL=chunk-VLODTBPY.js.map

package/dist/cli.js

@@ -22,7 +22,7 @@ import "./chunk-JYH6CMLW.js";
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-JO2EX53W.js";
+} from "./chunk-VLODTBPY.js";
 import "./chunk-BU2PN7M2.js";
 import {
   AuthHandler,
@@ -142,7 +142,7 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-66LTZALB.js";
+} from "./chunk-4VCLI2T3.js";
 import "./chunk-5RJHWUHT.js";
 import "./chunk-3B3ER6KT.js";
 import "./chunk-HFOQKCD2.js";
@@ -170,7 +170,7 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-FLDT5YWH.js";
+} from "./chunk-7XOTLM3R.js";
 import "./chunk-HO4C3E6W.js";
 import {
   shutdownExpertBridge

package/dist/index.d.ts

@@ -26594,6 +26594,51 @@ interface Finding {
     readonly verified: boolean;
 }
 
+/**
+ * nexus-agents/mcp — PR-Review Audit-Record Producer (#4031).
+ *
+ * The pr_review side of the #3831 Option-C arc: turn a completed review into an
+ * authentic, self-hashed governance record bound to {prNumber, baseSha,
+ * reviewedDiffHash, verdict}, so the warn-first governor-review gate can find a
+ * diff-bound record for the PR it is checking. Split out of pr-review-tool.ts to
+ * keep that file's single-purpose review flow lean.
+ *
+ * Best-effort and never-throws: a missing binding or a write failure is surfaced
+ * as a structured {@link PrReviewRecordOutcome}, never an exception into the
+ * review path (an audit sink must not break the operation it observes).
+ *
+ * @module mcp/tools/pr-review-record-producer
+ */
+
+/**
+ * Structured outcome of the best-effort Option-C audit-record persistence
+ * (#4031). Surfaced on the pr_review response so an MCP caller can SEE whether a
+ * record was written and, when not, WHY — mirroring the consensus_vote
+ * `voteRecordPersisted` observability. Reasons:
+ *  - `binding-inputs-absent` — `prNumber` and/or `baseSha` were not supplied, so
+ *    there is nothing to bind the record to (the warn-first skip; not an error).
+ *  - `simulated` — the review used simulated voters; a committed record would
+ *    seed governance from non-live output (mirrors #2319 for votes).
+ *  - `no-live-votes` — every voter errored, so the aggregate verdict was produced
+ *    by NO live opinion. Persisting would write a gate-satisfying record for a
+ *    review that never actually happened (the governor-review analogue of the
+ *    consensus_vote `no_quorum` void, #4053). Skipped so a failed review cannot
+ *    silently flip the #3831 gate from warn to a false pass.
+ *  - `write-failed` — the binding was present but the ledger path was unresolved
+ *    or the append failed (the producer already logged the underlying cause).
+ */
+type PrReviewRecordOutcome = {
+    readonly persisted: true;
+    readonly prNumber: number;
+    readonly baseSha: string;
+    readonly reviewedDiffHash: string;
+    readonly sequence: number;
+} | {
+    readonly persisted: false;
+    readonly reason: 'binding-inputs-absent' | 'simulated' | 'no-live-votes' | 'write-failed';
+    readonly detail: string;
+};
+
 /**
  * nexus-agents/mcp - PR Review Tool (#2233 Child 1)
  *
@@ -26626,6 +26671,8 @@ declare const PrReviewInputSchema: z.ZodObject<{
     repoContext: z.ZodOptional<z.ZodString>;
     baseRef: z.ZodOptional<z.ZodString>;
     headRef: z.ZodOptional<z.ZodString>;
+    prNumber: z.ZodOptional<z.ZodNumber>;
+    baseSha: z.ZodOptional<z.ZodString>;
     simulate: z.ZodDefault<z.ZodBoolean>;
     dispatch: z.ZodDefault<z.ZodEnum<{
         async: "async";
@@ -26680,6 +26727,12 @@ interface PrReviewResponse {
      * adapter reported no usage are counted as unmeasured, not a measured $0).
      */
     readonly costSummary?: DecisionCostSummary;
+    /**
+     * Option-C audit-record persistence outcome (#4031). Present on every
+     * response: `persisted: true` with the record's binding + sequence when an
+     * authentic record was written, otherwise `persisted: false` with the reason.
+     */
+    readonly recordOutcome?: PrReviewRecordOutcome;
 }
 interface PrReviewDeps extends BaseMcpToolDeps {
     /**

package/dist/index.js

@@ -520,7 +520,7 @@ import {
   validateWorkflow,
   validateWorkflowDependencies,
   withLogging
-} from "./chunk-66LTZALB.js";
+} from "./chunk-4VCLI2T3.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
@@ -560,7 +560,7 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-FLDT5YWH.js";
+} from "./chunk-7XOTLM3R.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration

package/dist/{setup-command-SR7SNTMD.js → setup-command-SP3Q6YW6.js}

@@ -8,9 +8,9 @@ import {
   runWizard,
   setupCommand,
   setupCommandAsync
-} from "./chunk-JO2EX53W.js";
+} from "./chunk-VLODTBPY.js";
 import "./chunk-BU2PN7M2.js";
-import "./chunk-FLDT5YWH.js";
+import "./chunk-7XOTLM3R.js";
 import "./chunk-NUBSJGQZ.js";
 import "./chunk-6T3EPABN.js";
 import "./chunk-ZM4O442V.js";
@@ -35,4 +35,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=setup-command-SR7SNTMD.js.map
+//# sourceMappingURL=setup-command-SP3Q6YW6.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-agents",
-  "version": "2.140.2",
+  "version": "2.141.0",
   "description": "Governance substrate for AI coding agents — adversarial PR review, drift-detected rules, tamper-evident audit, and closed-loop outcome routing for Claude, Codex, Gemini, and OpenCode",
   "mcpName": "io.github.nexus-substrate/nexus-agents",
   "license": "MIT",