nexus-agents 8.55.4 → 8.55.6

package/dist/{chunk-ITQAJLIS.js → chunk-ADYNKL6V.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-2GRXQWHL.js";
+} from "./chunk-WCTONUCK.js";
 import {
   emitClawGuardViolation
 } from "./chunk-VZSMNIRN.js";
@@ -2374,4 +2374,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-ITQAJLIS.js.map
+//# sourceMappingURL=chunk-ADYNKL6V.js.map

package/dist/{chunk-Q5WEGTPU.js → chunk-JAFFZUMA.js}

@@ -25,10 +25,10 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-ITQAJLIS.js";
+} from "./chunk-ADYNKL6V.js";
 import {
   VERSION
-} from "./chunk-2GRXQWHL.js";
+} from "./chunk-WCTONUCK.js";
 import {
   UNRESOLVED_MODEL_ID,
   assessPanelIndependence,
@@ -5427,17 +5427,36 @@ var VoteRecordPrBindingSchema = z7.object({
 function projectPrBinding(b) {
   return { pr: b.pr, headSha: b.headSha };
 }
+var VoteRecordErrorPolicySchema = z7.enum([
+  "reduce_denominator",
+  "count_as_abstain",
+  "fail_closed",
+  "absolute_quorum"
+]);
 var VoteRecordSchema = z7.object({
   /**
    * Schema version. '1.1' marked the chain→record-set+sequence model (#3927);
    * '1.2' adds the optional `ratifies` subject-binding field (#3927 item 1);
-   * '1.10' adds the optional `ratifiesPr` PR-binding (#5130). Every tier is
-   * accepted — a 1.1 record (no `ratifies`) verifies unchanged because each
-   * optional is folded into the self-hash ONLY when present (see
-   * {@link computeVoteRecordHash}). Tiers are labels, not ordered numbers:
-   * '1.10' follows '1.9' by convention only and nothing compares them.
+   * '1.10' adds the optional `ratifiesPr` PR-binding (#5130); '1.11' the
+   * optional `errorPolicy` (#6211). Every tier is accepted — a 1.1 record
+   * (no `ratifies`) verifies unchanged because each optional is folded into
+   * the self-hash ONLY when present (see {@link computeVoteRecordHash}).
+   * Tiers are labels, not ordered numbers: '1.10' follows '1.9' by
+   * convention only and nothing compares them.
    */
-  version: z7.enum(["1.1", "1.2", "1.3", "1.4", "1.5", "1.6", "1.7", "1.8", "1.9", "1.10"]),
+  version: z7.enum([
+    "1.1",
+    "1.2",
+    "1.3",
+    "1.4",
+    "1.5",
+    "1.6",
+    "1.7",
+    "1.8",
+    "1.9",
+    "1.10",
+    "1.11"
+  ]),
   /** Unique record id (also usable as a `ratificationVoteRef`). */
   id: z7.string().min(1),
   /**
@@ -5545,6 +5564,24 @@ var VoteRecordSchema = z7.object({
    * with two equality rules. The two may coexist on one record.
    */
   ratifiesPr: VoteRecordPrBindingSchema.optional(),
+  /**
+   * The error policy the panel actually ran under (#6211, schema 1.11): the
+   * EFFECTIVE policy after `consensus_vote` applied the per-strategy default
+   * (`input.errorPolicy ?? getDefaultErrorPolicy(strategy)`), not the raw
+   * input the caller may have omitted. Hash-covered, present-only.
+   *
+   * Before this tier the policy reached the RESPONSE only, so the governor
+   * ledger gate (`scripts/governor-ledger-evidence.ts`) could not say which
+   * policy a whole-panel ratification was configured with: under
+   * `absolute_quorum` an errored seat voids the vote, so the one
+   * ledger-observable trace of a different policy was an approved record
+   * with `panelCoverage.errored > 0` — and a whole panel under
+   * `reduce_denominator` looked exactly like one under `absolute_quorum`.
+   * The gate's `wrong-error-policy` verdict reads this field; a record
+   * without it (every pre-1.11 record) keeps the panel-coverage inference
+   * and is reported as `errorPolicy: unrecorded`.
+   */
+  errorPolicy: VoteRecordErrorPolicySchema.optional(),
   /**
    * ADVISORY hash of the tip record at write time (absent for the first).
    * Retained for audit texture but NOT covered by `hash` and NOT verified —
@@ -5577,7 +5614,8 @@ function foldOptionalFields(base, payload) {
     }
   } : withCoverage;
   const withRatifies = payload.ratifies !== void 0 ? { ...withPanel, ratifies: payload.ratifies } : withPanel;
-  return payload.ratifiesPr !== void 0 ? { ...withRatifies, ratifiesPr: projectPrBinding(payload.ratifiesPr) } : withRatifies;
+  const withPrBinding = payload.ratifiesPr !== void 0 ? { ...withRatifies, ratifiesPr: projectPrBinding(payload.ratifiesPr) } : withRatifies;
+  return payload.errorPolicy !== void 0 ? { ...withPrBinding, errorPolicy: payload.errorPolicy } : withPrBinding;
 }
 function computeVoteRecordHash(payload) {
   const base = {
@@ -6155,8 +6193,9 @@ function deriveOptionFields(votes, declaredOptions) {
   }
   return { optionTally: tallied ?? [], optionCoverage: coverageOf(votes) };
 }
-function recordVersion(optionTally, optionCoverage, panelCoverage, voters, ratifiesPr) {
-  if (ratifiesPr !== void 0) return "1.10";
+function recordVersion(optionTally, optionCoverage, panelCoverage, voters, recordLevel) {
+  if (recordLevel.errorPolicy !== void 0) return "1.11";
+  if (recordLevel.ratifiesPr !== void 0) return "1.10";
   if (voters.some((v) => v.assignedCli !== void 0 || v.fallback !== void 0)) return "1.9";
   if (voters.some((v) => v.model !== void 0 || v.unverifiable === true)) return "1.8";
   if (voters.some((v) => v.retried === true)) return "1.7";
@@ -6165,9 +6204,9 @@ function recordVersion(optionTally, optionCoverage, panelCoverage, voters, ratif
   if (optionCoverage !== void 0) return "1.4";
   return optionTally !== void 0 ? "1.3" : "1.2";
 }
-function panelCoverageOf(votes) {
+function panelCoverageOf(votes, always) {
   const erroredRoles = votes.filter((v) => v.source === "error").map((v) => v.role);
-  if (erroredRoles.length === 0) return void 0;
+  if (erroredRoles.length === 0 && !always) return void 0;
   return {
     requested: votes.length,
     responded: votes.length - erroredRoles.length,
@@ -6203,10 +6242,10 @@ function ratificationBindings(input) {
 function buildVoteRecord(input) {
   const proposalTruncated = input.proposal.length > MAX_PROPOSAL_RECORD_CHARS ? input.proposal.slice(0, MAX_PROPOSAL_RECORD_CHARS) + "..." : input.proposal;
   const { optionTally, optionCoverage } = deriveOptionFields(input.votes, input.declaredOptions);
-  const panelCoverage = panelCoverageOf(input.votes);
+  const panelCoverage = panelCoverageOf(input.votes, input.ratifiesPr !== void 0);
   const voters = toVoterSummaries(input.votes);
   const payload = {
-    version: recordVersion(optionTally, optionCoverage, panelCoverage, voters, input.ratifiesPr),
+    version: recordVersion(optionTally, optionCoverage, panelCoverage, voters, input),
     id: input.id,
     sequence: input.sequence ?? 0,
     recordedAt: input.recordedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
@@ -6227,6 +6266,8 @@ function buildVoteRecord(input) {
     ...optionTally !== void 0 ? { optionTally } : {},
     ...optionCoverage !== void 0 ? { optionCoverage } : {},
     ...panelCoverage !== void 0 ? { panelCoverage } : {},
+    // #6211: the effective error policy, present-only, on the `ratifiesPr` rule.
+    ...input.errorPolicy !== void 0 ? { errorPolicy: input.errorPolicy } : {},
     ...input.previousHash !== void 0 ? { previousHash: input.previousHash } : {}
   };
   return { ...payload, hash: computeVoteRecordHash(payload) };
@@ -6527,6 +6568,7 @@ function recordAuthenticVote(args) {
     ...args.correlationId !== void 0 ? { correlationId: args.correlationId } : {},
     ...args.ratifies !== void 0 ? { ratifies: args.ratifies } : {},
     ...args.ratifiesPr !== void 0 ? { ratifiesPr: args.ratifiesPr } : {},
+    ...args.errorPolicy !== void 0 ? { errorPolicy: args.errorPolicy } : {},
     logger: logger6
   });
   if (record === void 0) {
@@ -7992,7 +8034,9 @@ function buildPolicyShortCircuitResult(args) {
     contrarianCheck: "skipped",
     // #3124: surface WHY a high-approval result is still 'rejected' so callers
     // don't mistake a fail-closed policy short-circuit for a genuine rejection.
-    policyReason: args.reason
+    policyReason: args.reason,
+    // #6211: the policy that short-circuited is the policy the record states.
+    errorPolicy: args.errorPolicy
   };
 }
 async function executeVoting(input, logger11, opts) {
@@ -8091,6 +8135,7 @@ async function executeVotingInner(input, logger11, opts) {
     votes,
     outcome,
     cascaded,
+    errorPolicy,
     startTime,
     logger: logger11
   });
@@ -8126,7 +8171,10 @@ function finalizeVotingResult(args) {
     strategy: args.strategy,
     // #4132: PANEL_SIZE + contrarian-presence for the absolute_quorum predicate.
     panelSize: args.roles.length,
-    contrarianRequested: args.roles.includes("catfish")
+    contrarianRequested: args.roles.includes("catfish"),
+    // #6211: carried to the persisted record; the response never needed it
+    // because `buildResponse` still holds the input, but the record does not.
+    errorPolicy: args.errorPolicy
   };
   if (args.higherOrderResult !== void 0) result.higherOrderResult = args.higherOrderResult;
   return result;
@@ -8148,6 +8196,10 @@ function recordVoteSideEffects(proposal, strategy, result, logger11, declared) {
     // and never on the result — so the record used to say `approved` for a vote
     // this tool reports as `no_quorum`.
     resolvedDecision: toRecordDecision(result.decision),
+    // #6211: the EFFECTIVE policy `executeVoting` stamped, so a caller that
+    // took the per-strategy default still gets `reduce_denominator` on the
+    // ledger line rather than nothing.
+    errorPolicy: result.errorPolicy,
     correlationId: decisionId,
     ...declared.ratifies !== void 0 ? { ratifies: declared.ratifies } : {},
     // #5130: the PR binding takes the same hop as `ratifies`; the seam test
@@ -8578,4 +8630,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-Q5WEGTPU.js.map
+//# sourceMappingURL=chunk-JAFFZUMA.js.map