nexus-agents 8.126.12 → 8.127.0

package/dist/{chunk-2P535CW6.js → chunk-CEYK6YQ4.js}

@@ -5,7 +5,7 @@ import {
   getCurrentRequestContext,
   runWithRequestContext,
   serverCallerInfo
-} from "./chunk-T3I43BSR.js";
+} from "./chunk-EMVCKQUR.js";
 import {
   DEFAULT_EXECUTION_MODE
 } from "./chunk-ECJ52NSK.js";
@@ -2253,4 +2253,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-2P535CW6.js.map
+//# sourceMappingURL=chunk-CEYK6YQ4.js.map

package/dist/{chunk-RGH2772D.js → chunk-CSTOPTU7.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-UVQIYBDK.js";
 import {
   withPrerequisite
-} from "./chunk-P2DX7UGV.js";
+} from "./chunk-Y6PEPMRA.js";
 import {
   generateSecurityPlan
 } from "./chunk-MBQ7YDWZ.js";
@@ -41,7 +41,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-CUXWCIOF.js";
+} from "./chunk-WBEZP36V.js";
 import {
   executeExpert
 } from "./chunk-SRLSTOJL.js";
@@ -96,7 +96,7 @@ import {
   withFileLock,
   withWarnings,
   writeJobCancelled
-} from "./chunk-XNDS43GD.js";
+} from "./chunk-GNT2N32Z.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -122,12 +122,12 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-2P535CW6.js";
+} from "./chunk-CEYK6YQ4.js";
 import {
   VERSION,
   createRequestContext,
   measuredTrustTier
-} from "./chunk-T3I43BSR.js";
+} from "./chunk-EMVCKQUR.js";
 import {
   allOf,
   anyOf
@@ -47060,7 +47060,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-VTVX2HEX.js");
+    const { executeVoting } = await import("./consensus-vote-U5AY5A4F.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -48207,7 +48207,7 @@ function createVoteStage({ config, startStage }) {
     const strategy = config.votingStrategy ?? "higher_order";
     await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
     try {
-      const { executeVoting } = await import("./consensus-vote-VTVX2HEX.js");
+      const { executeVoting } = await import("./consensus-vote-U5AY5A4F.js");
       const proposal = buildVoteProposal(plan, research);
       const votingResult = await executeVoting(
         {
@@ -49272,7 +49272,10 @@ ${task}
 
 ${contextBlock}`;
     await postProgress(config, "Plan", feedback !== void 0 ? "Revising..." : "Planning...");
-    const r = await runExpert(guard, "architecture", prompt, "plan", { signal });
+    const r = await runExpert(guard, "architecture", prompt, "plan", {
+      signal,
+      accessMode: "read-only-analysis"
+    });
     emitStageEvent2("plan", r.success ? "completed" : "failed", {
       durationMs: r.durationMs,
       model: r.model
@@ -49307,7 +49310,7 @@ Return JSON: [{id,title,description,assignedTo}]
 
 ${plan}`,
       "decompose",
-      { signal }
+      { signal, accessMode: "read-only-analysis" }
     );
     const tasks = parseTasksFromResponse(r.text, plan);
     emitStageEvent2("decompose", "completed", { durationMs: r.durationMs });
@@ -49340,7 +49343,10 @@ QA feedback: ${task.feedback}` : "";
 ${task.title}
 ${task.description}${fb}`,
       task.id,
-      { signal, accessMode: IMPLEMENT_ACCESS_MODE }
+      {
+        signal,
+        accessMode: config.dryRun === true ? "read-only-analysis" : IMPLEMENT_ACCESS_MODE
+      }
     );
     emitStageEvent2(`impl-${task.id}`, r.success ? "completed" : "failed", {
       durationMs: r.durationMs,
@@ -49529,7 +49535,10 @@ function createAgentStages(config = {}) {
     implement: createImplementStage(deps),
     // #6792: implement passes no workDir, so its expert edits the MCP
     // server's cwd; the pipeline warns when a quality gate then runs there.
-    implementWorkspace: { accessMode: IMPLEMENT_ACCESS_MODE, directory: process.cwd() },
+    implementWorkspace: {
+      accessMode: config.dryRun === true ? "read-only-analysis" : IMPLEMENT_ACCESS_MODE,
+      directory: process.cwd()
+    },
     qaReview: createQaReviewStage(deps),
     qualityGate: createQualityGateStage(deps),
     securityScan: createSecurityScanStage(deps)
@@ -50669,8 +50678,8 @@ var PrReviewInputSchema = z102.object({
   ),
   simulate: z102.boolean().default(false).describe("Use simulated voters (testing only; never ship live with this true)"),
   /**
-   * Error policy (#4132). `standard` (default) keeps the pre-#4132 aggregation:
-   * an errored voter is simply excluded from the panel. `absolute_quorum` gates
+   * Error policy (#4132). `standard` (default) excludes absent voters but
+   * requires a majority of the requested panel to approve. `absolute_quorum` gates
    * the verified-approve verdict on a COMPLETE, error-free panel with the
    * contrarian (catfish) present and approving — any errored voter (especially
    * catfish) degrades the verdict to a recoverable `{ decision: 'abstain',
@@ -50680,7 +50689,7 @@ var PrReviewInputSchema = z102.object({
    * run first).
    */
   errorPolicy: z102.enum(["standard", "absolute_quorum"]).default("standard").describe(
-    "Error policy (#4132). 'standard' (default): errored voters excluded. 'absolute_quorum': any errored voter \u2014 esp. the contrarian \u2014 degrades a would-be approve to a recoverable abstain (verified:false); never manufactures a verified approve from an induced error."
+    "Error policy (#4132). 'standard' (default): absent voters excluded; approval requires a majority of the requested panel. 'absolute_quorum': any errored voter \u2014 esp. the contrarian \u2014 degrades a would-be approve to a recoverable abstain (verified:false); never manufactures a verified approve from an induced error."
   ),
   // #6123: same field as consensus_vote — the panel judges the caller's project.
   project: VoterProjectInputSchema,
@@ -50994,7 +51003,18 @@ function discloseSeverityFloor(aggregate, valid) {
   };
 }
 function aggregatePanelVerdict(reviews, valid, decision) {
-  const complete = valid.length === reviews.length;
+  if (decision === "approve" && valid.length <= reviews.length / 2) {
+    const quorum = Math.floor(reviews.length / 2) + 1;
+    return discloseSeverityFloor(
+      {
+        decision: "abstain",
+        verified: false,
+        reason: `incomplete panel: ${String(valid.length)} of ${String(reviews.length)} voters responded; no_quorum: needs ${String(quorum)} reviewers`
+      },
+      valid
+    );
+  }
+  const complete = reviews.length > 0 && valid.length === reviews.length;
   return discloseSeverityFloor(
     complete ? { decision, verified: true } : {
       decision,
@@ -53839,6 +53859,7 @@ async function createStages(input, trustTier, inputSanitization) {
   const backend = backendChoice === "json" && input.repo !== void 0 ? await detectBackend() : backendChoice;
   const tracker = input.repo !== void 0 ? createTaskTracker({ backend, repo: input.repo, labels: input.labels }) : void 0;
   return createAgentStages({
+    dryRun: input.dryRun,
     ...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {},
     ...trustTier !== void 0 ? { callerTrustTier: trustTier, trustTier } : {},
     ...inputSanitization,
@@ -54161,6 +54182,15 @@ async function executePipelineBody(task, stages, run) {
   }
   return toolSuccessStructured(output2);
 }
+function createPipelineAgentStages(input, config) {
+  return createAgentStages({
+    dryRun: input.dryRun,
+    simulateVotes: input.simulateVotes,
+    votingStrategy: input.votingStrategy,
+    quickMode: input.quickMode,
+    ...config
+  });
+}
 async function runPipelineHandler(args, logger58, callerTrustTier, sanitization) {
   const parsed = PipelineInputSchema.safeParse(args);
   if (!parsed.success) {
@@ -54178,10 +54208,7 @@ async function runPipelineHandler(args, logger58, callerTrustTier, sanitization)
   }
   try {
     const task = await resolveTask(input.task, input.specFile);
-    const agentStages = createAgentStages({
-      simulateVotes: input.simulateVotes,
-      votingStrategy: input.votingStrategy,
-      quickMode: input.quickMode,
+    const agentStages = createPipelineAgentStages(input, {
       callerTrustTier,
       trustTier: callerTrustTier,
       ...sanitization,
@@ -57891,4 +57918,4 @@ export {
   initializeSandbox,
   getSandboxMode
 };
-//# sourceMappingURL=chunk-RGH2772D.js.map
+//# sourceMappingURL=chunk-CSTOPTU7.js.map