nexus-agents 2.153.0 → 2.154.0

package/dist/cli.js

@@ -22,7 +22,7 @@ import "./chunk-M4YN3U3P.js";
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-HTXQVLOI.js";
+} from "./chunk-6VYNHHII.js";
 import "./chunk-CD7FU55Z.js";
 import {
   AuthHandler,
@@ -142,7 +142,7 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-C6S6L5WB.js";
+} from "./chunk-KNVO4P4W.js";
 import "./chunk-CMAQI2SJ.js";
 import "./chunk-T2SGTVB4.js";
 import "./chunk-HFOQKCD2.js";
@@ -170,7 +170,7 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-EJXJNWV6.js";
+} from "./chunk-25F6LRU2.js";
 import "./chunk-GMQH2I4P.js";
 import {
   shutdownExpertBridge

package/dist/index.d.ts

@@ -26252,6 +26252,52 @@ type PrReviewRecordOutcome = {
     readonly detail: string;
 };
 
+/**
+ * nexus-agents/mcp — PR-Review Large-Diff Budget Packer (#4140, epic #4130).
+ *
+ * Option A of the large-diff affordance: when a PR diff exceeds the voter PANEL
+ * budget (`MAX_DIFF_LENGTH`), pack it down to a REAL, security-prioritized subset
+ * of WHOLE files instead of hard-failing at the schema or lossily hand-truncating
+ * mid-hunk. A packed review is honestly labeled PARTIAL and (per the #4140 C1
+ * gate wired in pr-review-tool.ts) is BARRED from a verified-approve — it can
+ * BLOCK on a reviewed file but never verified-APPROVE.
+ *
+ * This module is PURE, deterministic, and I/O-free: no model call, no filesystem,
+ * no clock. It is unit-testable in isolation and reused by `executePrReviewBody`.
+ *
+ * FILE-BOUNDARY SAFETY is the load-bearing invariant. `splitByFile` splits only on
+ * `^diff --git ` file headers, so each unit is a whole file's hunk-set. The packer
+ * includes each file WHOLE or drops it — worst case a single over-budget file is
+ * included TRUNCATED with an explicit marker AND still listed as partially-seen. A
+ * voter never receives a corrupted mid-hunk fragment that reads as complete.
+ *
+ * NOT built here (deferred): the exhaustive multi-pass arm (#4151), file-fetch
+ * (#4152), and any scored/weighted ranker. Ordering is a documented two-tier
+ * partition (sensitive-path files first, stable; then the rest in diff order) —
+ * NOT a score.
+ *
+ * @module mcp/tools/pr-review-diff-budget
+ */
+
+/**
+ * Machine-readable coverage of a large-diff review (#4140). Present ONLY when the
+ * input diff exceeded the panel budget and was packed; ABSENT for a whole-diff
+ * review (a within-budget diff is byte-identical to pre-#4140). `partial: true`
+ * means the verdict was BARRED from a verified-approve (the C1 gate below).
+ */
+interface PrReviewCoverage {
+    /** Number of files whose full diff the panel actually reviewed. */
+    readonly reviewedFiles: number;
+    /** Total number of files in the original diff. */
+    readonly totalFiles: number;
+    /** Paths NOT fully reviewed (dropped, or the one truncated-head file). */
+    readonly droppedFiles: readonly string[];
+    /** True when coverage is incomplete (`droppedFiles.length > 0`). */
+    readonly partial: boolean;
+    /** Day-one strategy is always `'budget'` (exhaustive arm deferred to #4151). */
+    readonly strategy: 'budget';
+}
+
 /**
  * nexus-agents/mcp - PR Review Tool (#2233 Child 1)
  *
@@ -26273,9 +26319,10 @@ type PrReviewRecordOutcome = {
  * roles, not code-level. The 5 here are the ones with concrete claims about
  * code (#2233). */
 declare const PR_REVIEW_ROLES: readonly VoterRole[];
-/** Hard cap on diff size sent to voters. Diffs above this are truncated with
- * an explicit notice — the tool stays useful for typical PRs without blowing
- * the context budget. */
+/** Voter PANEL budget: the max diff bytes packed into the proposal sent to the
+ * 5-voter panel. Diffs above this are NOT rejected — they are security-prioritized
+ * and PARTIALLY reviewed (whole-file packing via `pr-review-diff-budget.ts`, #4140).
+ * Also the byte cap the canonical `reviewedDiffHash` binds to (unchanged, #3831). */
 declare const MAX_DIFF_LENGTH = 50000;
 declare const PrReviewInputSchema: z.ZodObject<{
     prTitle: z.ZodString;
@@ -26358,6 +26405,12 @@ interface PrReviewResponse {
      * authentic record was written, otherwise `persisted: false` with the reason.
      */
     readonly recordOutcome?: PrReviewRecordOutcome;
+    /**
+     * Large-diff review coverage (#4140). Present only when the input diff exceeded
+     * `MAX_DIFF_LENGTH` and was security-prioritized + partially reviewed; absent for
+     * a whole-diff (≤`MAX_DIFF_LENGTH`) review.
+     */
+    readonly coverage?: PrReviewCoverage;
 }
 interface PrReviewDeps extends BaseMcpToolDeps {
     /**

package/dist/index.js

@@ -520,7 +520,7 @@ import {
   validateWorkflow,
   validateWorkflowDependencies,
   withLogging
-} from "./chunk-C6S6L5WB.js";
+} from "./chunk-KNVO4P4W.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
@@ -560,7 +560,7 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-EJXJNWV6.js";
+} from "./chunk-25F6LRU2.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration

package/dist/{setup-command-4WFSYJK2.js → setup-command-OAJCXIMR.js}

@@ -8,9 +8,9 @@ import {
   runWizard,
   setupCommand,
   setupCommandAsync
-} from "./chunk-HTXQVLOI.js";
+} from "./chunk-6VYNHHII.js";
 import "./chunk-CD7FU55Z.js";
-import "./chunk-EJXJNWV6.js";
+import "./chunk-25F6LRU2.js";
 import "./chunk-NUBSJGQZ.js";
 import "./chunk-6T3EPABN.js";
 import "./chunk-ZM4O442V.js";
@@ -35,4 +35,4 @@ export {
   setupCommand,
   setupCommandAsync
 };
-//# sourceMappingURL=setup-command-4WFSYJK2.js.map
+//# sourceMappingURL=setup-command-OAJCXIMR.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-agents",
-  "version": "2.153.0",
+  "version": "2.154.0",
   "description": "Governance substrate for AI coding agents — adversarial PR review, drift-detected rules, tamper-evident audit, and closed-loop outcome routing for Claude, Codex, Gemini, and OpenCode",
   "mcpName": "io.github.nexus-substrate/nexus-agents",
   "license": "MIT",