nexus-agents 3.1.0 → 3.1.1

package/dist/{chunk-IMOLBA2M.js → chunk-DITV4B6I.js}

@@ -21,7 +21,7 @@ import {
   DEFAULT_TASK_TTL_MS,
   DEFAULT_TOOL_RATE_LIMITS,
   clampTaskTtl
-} from "./chunk-PQQP66XZ.js";
+} from "./chunk-NSIPB65X.js";
 import {
   executeExpert
 } from "./chunk-EL62KWUE.js";
@@ -45,7 +45,7 @@ import {
   simulationDeniedResult,
   toJobSummary,
   writeJobCancelled
-} from "./chunk-4UN4M4NI.js";
+} from "./chunk-5UFRDLQT.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
@@ -45787,7 +45787,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-ORVUPPWD.js");
+        const { executeVoting } = await import("./consensus-vote-6GL7NIDU.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -46668,87 +46668,6 @@ function persistPrReviewRecord(opts) {
   }
 }
 
-// src/mcp/tools/pr-review-record-producer.ts
-function buildAndPersist(prNumber, baseSha, args) {
-  const { input, aggregate, counts, reviewCount, logger: logger58, coverage } = args;
-  const coverageSuffix = coverage?.partial === true ? ` [partial coverage: ${String(coverage.reviewedFiles)}/${String(coverage.totalFiles)} files reviewed, dropped: ${coverage.droppedFiles.join(", ")}]` : "";
-  if (reviewedDiffWasTruncated(input.prDiff)) {
-    logger58.warn(
-      "Reviewed diff exceeds the hash byte cap; content past it is unbound in reviewedDiffHash",
-      { prNumber }
-    );
-  }
-  const record = persistPrReviewRecord({
-    prNumber,
-    baseSha,
-    reviewedDiffHash: computeReviewedDiffHash(input.prDiff),
-    verdict: aggregate.decision,
-    verified: aggregate.verified,
-    voteCounts: {
-      approve: counts.approveCount,
-      request_changes: counts.requestChangesCount,
-      abstain: counts.abstainCount,
-      error: counts.errorCount,
-      total: reviewCount
-    },
-    summary: `${aggregate.decision} (${String(counts.approveCount)} approve / ${String(counts.requestChangesCount)} request_changes / ${String(counts.abstainCount)} abstain) \u2014 ${input.prTitle}${coverageSuffix}`,
-    // #4278: lets a caller (e.g. an MCP server whose cwd has no `.git`
-    // ancestor) say where the repo is, so the record isn't silently dropped.
-    ...input.repoPath !== void 0 ? { repoPathOverride: input.repoPath } : {},
-    logger: logger58
-  });
-  if (record === void 0) {
-    return {
-      persisted: false,
-      reason: "write-failed",
-      detail: "Audit record could not be written: the records path was unresolved or the append failed (see server logs for the underlying cause)."
-    };
-  }
-  return {
-    persisted: true,
-    prNumber: record.prNumber,
-    baseSha: record.baseSha,
-    reviewedDiffHash: record.reviewedDiffHash,
-    sequence: record.sequence
-  };
-}
-function persistReviewRecord(args) {
-  const { input } = args;
-  if (input.prNumber === void 0 || input.baseSha === void 0) {
-    return {
-      persisted: false,
-      reason: "binding-inputs-absent",
-      detail: "No audit record written: supply both prNumber and baseSha to persist an Option-C governor-review record bound to {prNumber, baseSha, reviewedDiffHash}."
-    };
-  }
-  if (input.simulate) {
-    return {
-      persisted: false,
-      reason: "simulated",
-      detail: "No audit record written: the review used simulated voters, and a committed governance record must not be seeded from non-live output (mirrors #2319)."
-    };
-  }
-  const { counts } = args;
-  if (counts.approveCount + counts.requestChangesCount + counts.abstainCount === 0) {
-    return {
-      persisted: false,
-      reason: "no-live-votes",
-      detail: "No audit record written: every voter errored, so the aggregate verdict reflects no live review. A committed governor-review record must not be seeded from a failed panel (the pr_review analogue of no_quorum, #4053)."
-    };
-  }
-  try {
-    return buildAndPersist(input.prNumber, input.baseSha, args);
-  } catch (error) {
-    const detail = error instanceof Error ? error.message : String(error);
-    args.logger.warn("Audit-record persistence threw (non-fatal)", { detail });
-    return {
-      persisted: false,
-      reason: "write-failed",
-      detail: `Audit record persistence raised: ${detail}`
-    };
-  }
-}
-
 // src/mcp/tools/pr-review-diff-budget.ts
 var SENSITIVE_PATH_PATTERNS = Object.freeze([
   "auth",
@@ -46811,6 +46730,16 @@ function truncateWithMarker(file, budget) {
   const prefix = Buffer.from(file.text, "utf-8").subarray(0, room).toString("utf-8");
   return prefix + marker;
 }
+var GIT_FILE_HEADER = /^diff --git /m;
+var HUNK_HEADER = /^@@ .* @@/m;
+var OLD_FILE_HEADER = /^--- /m;
+var NEW_FILE_HEADER = /^\+\+\+ /m;
+var BODY_LINE = /^[+-]/m;
+function looksLikeUnifiedDiff(text) {
+  if (GIT_FILE_HEADER.test(text)) return true;
+  if (HUNK_HEADER.test(text) && BODY_LINE.test(text)) return true;
+  return OLD_FILE_HEADER.test(text) && NEW_FILE_HEADER.test(text);
+}
 function securityFirstPack(files, budget) {
   const sensitive = files.filter((f) => isSensitivePath(f.path));
   const rest = files.filter((f) => !isSensitivePath(f.path));
@@ -46876,6 +46805,95 @@ function applyPartialCoverageGate(aggregate, coverage) {
   return aggregate;
 }
 
+// src/mcp/tools/pr-review-record-producer.ts
+function buildAndPersist(prNumber, baseSha, args) {
+  const { input, aggregate, counts, reviewCount, logger: logger58, coverage } = args;
+  const coverageSuffix = coverage?.partial === true ? ` [partial coverage: ${String(coverage.reviewedFiles)}/${String(coverage.totalFiles)} files reviewed, dropped: ${coverage.droppedFiles.join(", ")}]` : "";
+  if (reviewedDiffWasTruncated(input.prDiff)) {
+    logger58.warn(
+      "Reviewed diff exceeds the hash byte cap; content past it is unbound in reviewedDiffHash",
+      { prNumber }
+    );
+  }
+  const record = persistPrReviewRecord({
+    prNumber,
+    baseSha,
+    reviewedDiffHash: computeReviewedDiffHash(input.prDiff),
+    verdict: aggregate.decision,
+    verified: aggregate.verified,
+    voteCounts: {
+      approve: counts.approveCount,
+      request_changes: counts.requestChangesCount,
+      abstain: counts.abstainCount,
+      error: counts.errorCount,
+      total: reviewCount
+    },
+    summary: `${aggregate.decision} (${String(counts.approveCount)} approve / ${String(counts.requestChangesCount)} request_changes / ${String(counts.abstainCount)} abstain) \u2014 ${input.prTitle}${coverageSuffix}`,
+    // #4278: lets a caller (e.g. an MCP server whose cwd has no `.git`
+    // ancestor) say where the repo is, so the record isn't silently dropped.
+    ...input.repoPath !== void 0 ? { repoPathOverride: input.repoPath } : {},
+    logger: logger58
+  });
+  if (record === void 0) {
+    return {
+      persisted: false,
+      reason: "write-failed",
+      detail: "Audit record could not be written: the records path was unresolved or the append failed (see server logs for the underlying cause)."
+    };
+  }
+  return {
+    persisted: true,
+    prNumber: record.prNumber,
+    baseSha: record.baseSha,
+    reviewedDiffHash: record.reviewedDiffHash,
+    sequence: record.sequence
+  };
+}
+function refuseToPersist(args) {
+  const { input, counts } = args;
+  const refuse = (reason, detail) => ({ ok: false, outcome: { persisted: false, reason, detail } });
+  if (input.prNumber === void 0 || input.baseSha === void 0) {
+    return refuse(
+      "binding-inputs-absent",
+      "No audit record written: supply both prNumber and baseSha to persist an Option-C governor-review record bound to {prNumber, baseSha, reviewedDiffHash}."
+    );
+  }
+  if (!looksLikeUnifiedDiff(input.prDiff)) {
+    return refuse(
+      "diff-not-unified",
+      "No audit record written: prDiff is not a unified diff, so the review did not examine code and reviewedDiffHash would hash non-diff text \u2014 a record indistinguishable from a real one (#4451)."
+    );
+  }
+  if (input.simulate) {
+    return refuse(
+      "simulated",
+      "No audit record written: the review used simulated voters, and a committed governance record must not be seeded from non-live output (mirrors #2319)."
+    );
+  }
+  if (counts.approveCount + counts.requestChangesCount + counts.abstainCount === 0) {
+    return refuse(
+      "no-live-votes",
+      "No audit record written: every voter errored, so the aggregate verdict reflects no live review. A committed governor-review record must not be seeded from a failed panel (the pr_review analogue of no_quorum, #4053)."
+    );
+  }
+  return { ok: true, prNumber: input.prNumber, baseSha: input.baseSha };
+}
+function persistReviewRecord(args) {
+  const gate = refuseToPersist(args);
+  if (!gate.ok) return gate.outcome;
+  try {
+    return buildAndPersist(gate.prNumber, gate.baseSha, args);
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    args.logger.warn("Audit-record persistence threw (non-fatal)", { detail });
+    return {
+      persisted: false,
+      reason: "write-failed",
+      detail: `Audit record persistence raised: ${detail}`
+    };
+  }
+}
+
 // src/mcp/tools/pr-review-result-mapping.ts
 function resolveFindings(result) {
   const raw = result.vote.findings;
@@ -46931,8 +46949,10 @@ var PR_REVIEW_ASYNC_HINT = "A pr_review run fans out to 5 live LLM voters and ca
 var PrReviewInputSchema = z93.object({
   prTitle: z93.string().min(1).max(500).describe("PR title"),
   prDescription: z93.string().max(MAX_DESCRIPTION_LENGTH).optional().describe("PR body / description"),
-  prDiff: z93.string().min(1).max(MAX_DIFF_INPUT_LENGTH).describe(
-    `Unified diff text (max ${String(MAX_DIFF_INPUT_LENGTH)} chars). No need to truncate before calling: diffs over ${String(MAX_DIFF_LENGTH)} chars are security-prioritized and PARTIALLY reviewed (lowest-priority whole files dropped; coverage reported on the response, and a partial review can block but never verified-approve).`
+  prDiff: z93.string().min(1).max(MAX_DIFF_INPUT_LENGTH).refine(looksLikeUnifiedDiff, {
+    message: "prDiff must be a unified diff (expected a `diff --git`, `---`/`+++`, or `@@ \u2026 @@` line). Prose descriptions of a change are rejected: a review of a summary is not a review of the code, and would be recorded as though it were (#4451)."
+  }).describe(
+    `Unified diff text (max ${String(MAX_DIFF_INPUT_LENGTH)} chars). REQUIRED SHAPE (#4451): must contain a \`diff --git\` header, an \`@@ \u2026 @@\` hunk header backed by +/- lines, or a \`---\`/\`+++\` header pair \u2014 a prose summary of the change is REJECTED, because reviewing a summary is not reviewing the code and would be recorded as though it were. (Stated here because Zod refinements do not survive JSON-schema generation, so this constraint is otherwise invisible to clients.) No need to truncate before calling: diffs over ${String(MAX_DIFF_LENGTH)} chars are security-prioritized and PARTIALLY reviewed (lowest-priority whole files dropped; coverage reported on the response, and a partial review can block but never verified-approve).`
   ),
   repoContext: z93.string().max(MAX_REPO_CONTEXT_LENGTH).optional().describe(
     `Optional one-paragraph repo context (architecture, conventions; max ${String(MAX_REPO_CONTEXT_LENGTH)} chars; trim before calling)`
@@ -54146,4 +54166,4 @@ export {
   shutdownFeedbackSubscriber,
   createEventBusBridge
 };
-//# sourceMappingURL=chunk-IMOLBA2M.js.map
+//# sourceMappingURL=chunk-DITV4B6I.js.map