nexus-agents 8.126.7 → 8.126.8

package/dist/{chunk-LJVK72YZ.js → chunk-4GBV353B.js}

@@ -19,10 +19,10 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-E5MQ3T2S.js";
+} from "./chunk-VIUYADVF.js";
 import {
   VERSION
-} from "./chunk-6DGRFX3Z.js";
+} from "./chunk-HLH2ZX2H.js";
 import {
   allOf
 } from "./chunk-EZNIYU5T.js";
@@ -9359,4 +9359,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-LJVK72YZ.js.map
+//# sourceMappingURL=chunk-4GBV353B.js.map

package/dist/{chunk-LOVFYJRO.js → chunk-EAHEHACP.js}

@@ -16,7 +16,7 @@ import {
   VERSION,
   isNodeVersionSupported,
   recordServerTransport
-} from "./chunk-6DGRFX3Z.js";
+} from "./chunk-HLH2ZX2H.js";
 import {
   allOf,
   anyOf
@@ -1525,7 +1525,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-IPQWYMYN.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-A2SL5GPT.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1627,4 +1627,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-LOVFYJRO.js.map
+//# sourceMappingURL=chunk-EAHEHACP.js.map

package/dist/{chunk-6DGRFX3Z.js → chunk-HLH2ZX2H.js}

@@ -4,7 +4,7 @@ import {
 
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "8.126.7" : "dev";
+var VERSION = true ? "8.126.8" : "dev";
 var NODE_ENGINE_RANGE = ">=22.5.0";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -106,4 +106,4 @@ export {
   contextForLogging,
   measuredTrustTier
 };
-//# sourceMappingURL=chunk-6DGRFX3Z.js.map
+//# sourceMappingURL=chunk-HLH2ZX2H.js.map

package/dist/{chunk-X5UZRBR5.js → chunk-PV4UOIWR.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-GKVLVN3L.js";
 import {
   withPrerequisite
-} from "./chunk-2MLSLRGF.js";
+} from "./chunk-V3XRPKI4.js";
 import {
   generateSecurityPlan
 } from "./chunk-JRKVQTG6.js";
@@ -41,7 +41,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-LOVFYJRO.js";
+} from "./chunk-EAHEHACP.js";
 import {
   executeExpert
 } from "./chunk-7PS44443.js";
@@ -96,7 +96,7 @@ import {
   withFileLock,
   withWarnings,
   writeJobCancelled
-} from "./chunk-LJVK72YZ.js";
+} from "./chunk-4GBV353B.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -122,12 +122,12 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-E5MQ3T2S.js";
+} from "./chunk-VIUYADVF.js";
 import {
   VERSION,
   createRequestContext,
   measuredTrustTier
-} from "./chunk-6DGRFX3Z.js";
+} from "./chunk-HLH2ZX2H.js";
 import {
   allOf,
   anyOf
@@ -45855,6 +45855,8 @@ var PrReviewRecordSchema = z98.object({
   voteCounts: PrReviewVoteCountsSchema,
   /** Truncated human-readable review summary for the reviewer record. */
   summary: z98.string(),
+  /** Aggregate explanation; absent on older records. Hash-covered when present. */
+  reason: z98.string().optional(),
   /** Optional correlation/decision id linking to the cost rollup / trace. */
   correlationId: z98.string().min(1).optional(),
   /**
@@ -45930,6 +45932,7 @@ function computePrReviewRecordHash(payload) {
       total: payload.voteCounts.total
     },
     summary: payload.summary,
+    ...payload.reason !== void 0 ? { reason: payload.reason } : {},
     correlationId: payload.correlationId ?? null,
     // #4459 provenance, INSIDE the hash. This projection is an explicit
     // allowlist, so a schema field omitted here would sit OUTSIDE
@@ -45978,8 +45981,10 @@ import { dirname as dirname3, isAbsolute as isAbsolute2, join as join10, resolve
 var PR_REVIEW_RECORDS_REL_PATH = "governance/pr-review-records.jsonl";
 var PR_REVIEW_RECORDS_PATH_ENV = "NEXUS_PR_REVIEW_RECORDS_PATH";
 var MAX_SUMMARY_RECORD_CHARS = 500;
+function truncatePrReviewSummary(summary) {
+  return summary.length > MAX_SUMMARY_RECORD_CHARS ? summary.slice(0, MAX_SUMMARY_RECORD_CHARS) + "..." : summary;
+}
 function buildPrReviewRecord(input) {
-  const summaryTruncated = input.summary.length > MAX_SUMMARY_RECORD_CHARS ? input.summary.slice(0, MAX_SUMMARY_RECORD_CHARS) + "..." : input.summary;
   const payload = {
     version: "1.4",
     sequence: input.sequence ?? 0,
@@ -45996,7 +46001,8 @@ function buildPrReviewRecord(input) {
       error: input.voteCounts.error,
       total: input.voteCounts.total
     },
-    summary: summaryTruncated,
+    summary: truncatePrReviewSummary(input.summary),
+    ...input.reason !== void 0 ? { reason: input.reason } : {},
     ...input.diffProvenance !== void 0 ? { diffProvenance: input.diffProvenance } : {},
     ...input.sanitization !== void 0 ? { sanitization: input.sanitization } : {},
     ...input.coverage !== void 0 ? { coverage: input.coverage } : {},
@@ -47054,7 +47060,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-VPIKEDTH.js");
+    const { executeVoting } = await import("./consensus-vote-BIY6PV6F.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -48201,7 +48207,7 @@ function createVoteStage({ config, startStage }) {
     const strategy = config.votingStrategy ?? "higher_order";
     await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
     try {
-      const { executeVoting } = await import("./consensus-vote-VPIKEDTH.js");
+      const { executeVoting } = await import("./consensus-vote-BIY6PV6F.js");
       const proposal = buildVoteProposal(plan, research);
       const votingResult = await executeVoting(
         {
@@ -49859,7 +49865,37 @@ function createAuditStageRegistry() {
 }
 
 // src/mcp/tools/pr-review-findings.ts
+import { posix } from "node:path";
 import { parse as parseYaml3 } from "yaml";
+function findingsAgree(left, right, leftRole, rightRole, repoPath) {
+  if (leftRole === rightRole || !left.verified || !right.verified) return false;
+  const a = normalizeFindingLocation(left.location, repoPath);
+  const b = normalizeFindingLocation(right.location, repoPath);
+  return a !== void 0 && a.file === b?.file && a.start <= b.end + 3 && b.start <= a.end + 3;
+}
+function normalizeFindingLocation(location, repoPath) {
+  const citation = location.trim().replace(/^`(.*)`$/, "$1").replaceAll("\\", "/");
+  const match = /^(.+?):L?(\d+)(?:-L?(\d+))?(?::\d+)?$/.exec(citation);
+  if (match === null) return void 0;
+  const file = normalizeFindingPath(match[1]?.trim() ?? "", repoPath);
+  const lines = parseFindingLines(match[2], match[3]);
+  if (file === void 0 || lines === void 0) return void 0;
+  return { file, ...lines };
+}
+function parseFindingLines(startText, endText) {
+  const start = Number(startText);
+  const end = Number(endText ?? startText);
+  if (!Number.isSafeInteger(start) || start < 1 || !Number.isSafeInteger(end) || end < start)
+    return void 0;
+  return { start, end };
+}
+function normalizeFindingPath(path9, repoPath) {
+  if (path9 === "") return void 0;
+  const root = repoPath ?? findRepoRoot(process.cwd()) ?? process.cwd();
+  const file = posix.isAbsolute(path9) ? posix.relative(root.replaceAll("\\", "/"), path9) : posix.normalize(path9).replace(/^[ab]\//, "");
+  if (file === "" || file === "." || file.endsWith("/")) return void 0;
+  return file;
+}
 function isFindingVerified(gate) {
   if (gate.reread_cited_line !== "passed") return false;
   if (gate.traced_call_path !== "passed") return false;
@@ -50357,6 +50393,7 @@ function buildAndPersist(prNumber, baseSha, args) {
     ...disclosure !== void 0 ? { sanitization: disclosure } : {},
     ...coverageFields ?? {},
     verdict: aggregate.decision,
+    ...aggregate.reason !== void 0 ? { reason: aggregate.reason } : {},
     verified: aggregate.verified,
     voteCounts: {
       approve: counts.approveCount,
@@ -50562,45 +50599,6 @@ async function preparePanelForReview(input, roles, opts, logger58) {
   return { ...packed, seats };
 }
 
-// src/mcp/tools/pr-review-result-mapping.ts
-function resolveFindings(result) {
-  const raw = result.vote.findings;
-  if (raw !== void 0 && raw.length > 0) {
-    return raw.map((f) => ({
-      summary: f.summary,
-      location: f.location,
-      severity: f.severity,
-      gate: f.gate,
-      claim: f.claim,
-      verified: isFindingVerified(f.gate)
-    }));
-  }
-  return parseFindings(result.vote.reasoning);
-}
-function toPrReviewVote(result) {
-  return {
-    role: result.role,
-    decision: mapVoteDecisionToPrDecision(result.vote.decision),
-    confidence: result.vote.confidence,
-    reasoning: result.vote.reasoning,
-    findings: resolveFindings(result),
-    source: result.source,
-    cli: result.cli,
-    processingTimeMs: result.processingTimeMs,
-    ...result.error !== void 0 && { errorMessage: result.error }
-  };
-}
-function summarizeReviews(reviews) {
-  const judged = reviews.filter((r) => !isAbsentSeat(r));
-  return {
-    approveCount: judged.filter((r) => r.decision === "approve").length,
-    requestChangesCount: judged.filter((r) => r.decision === "request_changes").length,
-    abstainCount: judged.filter((r) => r.decision === "abstain").length,
-    errorCount: reviews.filter((r) => r.source === "error").length,
-    unverifiableCount: reviews.filter((r) => r.source === "unverifiable").length
-  };
-}
-
 // src/mcp/tools/pr-review-tool.ts
 var PR_REVIEW_ROLES = [
   "architect",
@@ -50681,16 +50679,14 @@ function mapVoteDecisionToPrDecision(voteDecision) {
   return voteDecision;
 }
 var SOFT_BLOCK_REQUEST_CHANGES_THRESHOLD = 3;
-function aggregatePrDecisions(reviews, errorPolicy = "standard") {
+function aggregatePrDecisions(reviews, errorPolicy = "standard", repoPath) {
   const valid = reviews.filter((r) => !isAbsentSeat(r));
   const complete = () => valid.length === reviews.length;
   const incompleteReason = `incomplete panel: ${String(valid.length)} of ${String(reviews.length)} voters responded`;
   const panelVerdict = (decision) => complete() ? { decision, verified: true } : { decision, verified: false, reason: incompleteReason };
   if (valid.length === 0) return panelVerdict("abstain");
-  const hasVerifiedBlocker = valid.some(
-    (r) => r.decision === "request_changes" && r.findings.some((f) => f.verified)
-  );
-  if (hasVerifiedBlocker) return { decision: "request_changes", verified: true };
+  const findingBlocker = aggregateBlockingFindings(valid, repoPath);
+  if (findingBlocker !== void 0) return findingBlocker;
   const requestChangesVoters = valid.filter((r) => r.decision === "request_changes").length;
   if (requestChangesVoters >= SOFT_BLOCK_REQUEST_CHANGES_THRESHOLD) {
     return { decision: "request_changes", verified: false };
@@ -50699,32 +50695,20 @@ function aggregatePrDecisions(reviews, errorPolicy = "standard") {
     if (errorPolicy === "absolute_quorum") {
       return absoluteQuorumApprove(reviews, valid);
     }
+    if (valid.length < 2)
+      return {
+        decision: "abstain",
+        verified: false,
+        reason: "insufficient reviewers: 1 reviewer; needs second reviewer"
+      };
     return panelVerdict("approve");
   }
   return panelVerdict("abstain");
 }
-function absoluteQuorumApprove(reviews, valid) {
-  const errorCount = reviews.length - valid.length;
-  const erroredRoles = reviews.filter(isAbsentSeat).map((r) => r.role);
-  const catfish = valid.find((r) => r.role === "catfish");
-  const catfishApproved = catfish?.decision === "approve";
-  const panelComplete = valid.length === PR_REVIEW_ROLES.length;
-  if (errorCount > 0 || !catfishApproved || !panelComplete) {
-    const missing = catfishApproved ? [] : ["catfish"];
-    const named = [...erroredRoles, ...missing];
-    const list = named.length > 0 ? named.join(", ") : "incomplete panel";
-    return {
-      decision: "abstain",
-      verified: false,
-      reason: `no_quorum: re-run \u2014 voter(s) [${list}] errored/missing (absolute_quorum)`
-    };
-  }
-  return { decision: "approve", verified: true };
-}
 function resolveAggregate(reviews, input, absent, coverage, logger58) {
-  const preGate = aggregatePrDecisions(reviews, input.errorPolicy);
+  const preGate = aggregatePrDecisions(reviews, input.errorPolicy, input.repoPath);
   if (preGate.reason !== void 0) {
-    logger58.warn("pr_review degraded to no_quorum under absolute_quorum (#4132)", {
+    logger58.warn("pr_review aggregate is unverified", {
       reason: preGate.reason,
       absentCount: absent.errorCount + absent.unverifiableCount,
       errorCount: absent.errorCount,
@@ -50785,6 +50769,7 @@ async function executePrReviewBody(input, logger58, opts = {}) {
   });
   const response = {
     summary: aggregate.decision,
+    ...aggregate.reason !== void 0 ? { reason: aggregate.reason } : {},
     verified: aggregate.verified,
     ...counts,
     reviews,
@@ -50895,6 +50880,103 @@ function registerPrReviewTool(server, deps) {
   logger58.info("Registered pr_review tool");
 }
 
+// src/mcp/tools/pr-review-result-mapping.ts
+function resolveFindings(result) {
+  const raw = result.vote.findings;
+  if (raw !== void 0 && raw.length > 0) {
+    return raw.map((f) => ({
+      summary: f.summary,
+      location: f.location,
+      severity: f.severity,
+      gate: f.gate,
+      claim: f.claim,
+      verified: isFindingVerified(f.gate)
+    }));
+  }
+  return parseFindings(result.vote.reasoning);
+}
+function toPrReviewVote(result) {
+  return {
+    role: result.role,
+    decision: mapVoteDecisionToPrDecision(result.vote.decision),
+    confidence: result.vote.confidence,
+    reasoning: result.vote.reasoning,
+    findings: resolveFindings(result),
+    source: result.source,
+    cli: result.cli,
+    processingTimeMs: result.processingTimeMs,
+    ...result.error !== void 0 && { errorMessage: result.error }
+  };
+}
+function summarizeReviews(reviews) {
+  const judged = reviews.filter((r) => !isAbsentSeat(r));
+  return {
+    approveCount: judged.filter((r) => r.decision === "approve").length,
+    requestChangesCount: judged.filter((r) => r.decision === "request_changes").length,
+    abstainCount: judged.filter((r) => r.decision === "abstain").length,
+    errorCount: reviews.filter((r) => r.source === "error").length,
+    unverifiableCount: reviews.filter((r) => r.source === "unverifiable").length
+  };
+}
+function formatFindingLocation(location, maxChars) {
+  const sanitized = location.replace(/[\p{Cc}\u2028\u2029]+/gu, " ").replace(/`/g, "'").slice(0, maxChars);
+  return `\`${sanitized}\``;
+}
+function describeUnconfirmedFindings(reviewers) {
+  const first = reviewers[0];
+  if (first === void 0) return "";
+  const lone = reviewers.length === 1;
+  const prefix = lone ? `unconfirmed: 1 reviewer (${first.role}) at ` : `unconfirmed: ${String(reviewers.length)} reviewers (`;
+  const suffix = lone ? "; needs second reviewer" : ") found non-overlapping issues; needs agreement";
+  const locations = (maxChars) => reviewers.map(
+    ({ role, finding }) => lone ? formatFindingLocation(finding.location, maxChars) : `${role} at ${formatFindingLocation(finding.location, maxChars)}`
+  ).join(", ");
+  const available = MAX_SUMMARY_RECORD_CHARS - prefix.length - suffix.length - locations(0).length;
+  const locationLimit = Math.min(120, Math.floor(available / reviewers.length));
+  return `${prefix}${locations(locationLimit)}${suffix}`;
+}
+function aggregateBlockingFindings(valid, repoPath) {
+  const blockers = valid.filter((r) => r.decision === "request_changes").flatMap(
+    (r) => r.findings.filter((f) => f.verified).map((finding) => ({ role: r.role, finding }))
+  );
+  const first = blockers[0];
+  if (first === void 0) return void 0;
+  for (const [index, left] of blockers.entries()) {
+    for (const right of blockers.slice(index + 1)) {
+      if (findingsAgree(left.finding, right.finding, left.role, right.role, repoPath)) {
+        return { decision: "request_changes", verified: true };
+      }
+    }
+  }
+  const reviewers = /* @__PURE__ */ new Map();
+  for (const blocker of blockers) {
+    if (!reviewers.has(blocker.role)) reviewers.set(blocker.role, blocker);
+  }
+  return {
+    decision: "request_changes",
+    verified: false,
+    reason: describeUnconfirmedFindings([...reviewers.values()])
+  };
+}
+function absoluteQuorumApprove(reviews, valid) {
+  const errorCount = reviews.length - valid.length;
+  const erroredRoles = reviews.filter(isAbsentSeat).map((r) => r.role);
+  const catfish = valid.find((r) => r.role === "catfish");
+  const catfishApproved = catfish?.decision === "approve";
+  const panelComplete = valid.length === PR_REVIEW_ROLES.length;
+  if (errorCount > 0 || !catfishApproved || !panelComplete) {
+    const missing = catfishApproved ? [] : ["catfish"];
+    const named = [...erroredRoles, ...missing];
+    const list = named.length > 0 ? named.join(", ") : "incomplete panel";
+    return {
+      decision: "abstain",
+      verified: false,
+      reason: `no_quorum: re-run \u2014 voter(s) [${list}] errored/missing (absolute_quorum)`
+    };
+  }
+  return { decision: "approve", verified: true };
+}
+
 // src/mcp/tools/survey-oss-landscape.ts
 import { z as z103 } from "zod";
 var SurveyOssLandscapeInputSchema = z103.object({
@@ -57736,6 +57818,7 @@ export {
   registerRunTool,
   registerListAvailableModelsTool,
   buildPrReviewProposal,
+  toPrReviewVote,
   PR_REVIEW_ROLES,
   MAX_DIFF_LENGTH,
   PrReviewInputSchema,
@@ -57762,4 +57845,4 @@ export {
   initializeSandbox,
   getSandboxMode
 };
-//# sourceMappingURL=chunk-X5UZRBR5.js.map
+//# sourceMappingURL=chunk-PV4UOIWR.js.map