nexus-agents 8.56.0 → 8.57.0

package/dist/{chunk-5W55WXLY.js → chunk-3KOCMFOK.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-BWP3RTR2.js";
+} from "./chunk-VCLNGU3S.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2278,4 +2278,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-5W55WXLY.js.map
+//# sourceMappingURL=chunk-3KOCMFOK.js.map

package/dist/{chunk-UURJGJTW.js → chunk-H3PRTTXF.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "8.56.0" : "dev";
+var VERSION = true ? "8.57.0" : "dev";
 var NODE_ENGINE_RANGE = ">=22.5.0";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -11,4 +11,4 @@ export {
   NODE_ENGINE_RANGE,
   isNodeVersionSupported
 };
-//# sourceMappingURL=chunk-UURJGJTW.js.map
+//# sourceMappingURL=chunk-H3PRTTXF.js.map

package/dist/{chunk-M2ZQXDSO.js → chunk-IJMAA7MV.js}

@@ -11,7 +11,7 @@ import {
   NODE_ENGINE_RANGE,
   VERSION,
   isNodeVersionSupported
-} from "./chunk-UURJGJTW.js";
+} from "./chunk-H3PRTTXF.js";
 import {
   claimGlobalRegistry
 } from "./chunk-BXP5K5TU.js";
@@ -1314,7 +1314,7 @@ async function runDoctorFix(result) {
   writeLine2("\u2500".repeat(40));
   let fixCount = 0;
   if (!result.dataDirectory.rootExists || result.dataDirectory.subdirectories.some((d) => !d.exists || !d.writable)) {
-    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-RXY2PWDX.js");
+    const { initDataDirectories: initDataDirectories2, describeDataDirFix: describeDataDirFix2 } = await import("./setup-data-dir-3JC2SSZ4.js");
     const outcome = describeDataDirFix2(initDataDirectories2());
     writeLine2(outcome.line);
     if (outcome.counted) fixCount++;
@@ -1416,4 +1416,4 @@ export {
   startStdioServer,
   closeServer
 };
-//# sourceMappingURL=chunk-M2ZQXDSO.js.map
+//# sourceMappingURL=chunk-IJMAA7MV.js.map

package/dist/{chunk-BWP3RTR2.js → chunk-VCLNGU3S.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-UURJGJTW.js";
+} from "./chunk-H3PRTTXF.js";
 import {
   emitClawGuardViolation
 } from "./chunk-VZSMNIRN.js";
@@ -2378,4 +2378,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-BWP3RTR2.js.map
+//# sourceMappingURL=chunk-VCLNGU3S.js.map

package/dist/{chunk-HXITPFTR.js → chunk-W6VHVDZM.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-M2ZQXDSO.js";
+} from "./chunk-IJMAA7MV.js";
 import {
   executeExpert
 } from "./chunk-QMGMD6JB.js";
@@ -62,7 +62,7 @@ import {
   toJobSummary,
   updateStage,
   writeJobCancelled
-} from "./chunk-MO6FSEFJ.js";
+} from "./chunk-XU72ZQ5Z.js";
 import {
   allOf,
   anyOf
@@ -82,7 +82,7 @@ import {
 } from "./chunk-RNWUIQTZ.js";
 import {
   withPrerequisite
-} from "./chunk-5W55WXLY.js";
+} from "./chunk-3KOCMFOK.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -107,7 +107,7 @@ import {
   withAuditTrail,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-BWP3RTR2.js";
+} from "./chunk-VCLNGU3S.js";
 import {
   createAuditTrail,
   createGraphAuditBridge,
@@ -46182,7 +46182,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-JHCRRDH5.js");
+    const { executeVoting } = await import("./consensus-vote-ITVEKN2M.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -47980,7 +47980,7 @@ ${contextBlock}`;
       const strategy = config.votingStrategy ?? "higher_order";
       await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
       try {
-        const { executeVoting } = await import("./consensus-vote-JHCRRDH5.js");
+        const { executeVoting } = await import("./consensus-vote-ITVEKN2M.js");
         const votingResult = await executeVoting(
           {
             proposal: buildVoteProposal(plan, research),
@@ -57179,4 +57179,4 @@ export {
   startPipelineEventBridge,
   shutdownPipelineEventBridge
 };
-//# sourceMappingURL=chunk-HXITPFTR.js.map
+//# sourceMappingURL=chunk-W6VHVDZM.js.map

package/dist/{chunk-MO6FSEFJ.js → chunk-XU72ZQ5Z.js}

@@ -25,10 +25,10 @@ import {
   toolSuccessStructured,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-BWP3RTR2.js";
+} from "./chunk-VCLNGU3S.js";
 import {
   VERSION
-} from "./chunk-UURJGJTW.js";
+} from "./chunk-H3PRTTXF.js";
 import {
   UNRESOLVED_MODEL_ID,
   assessPanelIndependence,
@@ -8726,6 +8726,7 @@ export {
   createCorrelationTracker,
   seatFallbacks,
   panelDiversityOf,
+  VoteRecordPrBindingSchema,
   VotingStrategySchema,
   ErrorPolicySchema,
   VoteThresholdSchema,
@@ -8747,4 +8748,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-MO6FSEFJ.js.map
+//# sourceMappingURL=chunk-XU72ZQ5Z.js.map

package/dist/cli.d.ts

@@ -1,6 +1,76 @@
 #!/usr/bin/env node
-import { C as CliNameLiteral, L as VoteThreshold, E as ErrorPolicy, N as NoQuorumPolicy } from './consensus-vote-types-cDFfyFTQ.js';
-import 'zod';
+import { C as CliNameLiteral, L as VoteThreshold, o as VotingStrategy, E as ErrorPolicy, N as NoQuorumPolicy } from './consensus-vote-types-cDFfyFTQ.js';
+import { z } from 'zod';
+
+/**
+ * nexus-agents/audit - Authentic Vote Record (#3897, model revised #3927)
+ *
+ * A committed, append-only, tamper-EVIDENT record of a completed
+ * `consensus_vote`, persisted at vote time so the authority-ladder promotion
+ * gate (`scripts/check-authority-tier-drift.ts`, #3895) can rest authenticity
+ * on a tamper-evident record set instead of on hand-transcribed YAML.
+ *
+ * MODEL: TAMPER-EVIDENT RECORD SET + MONOTONIC SEQUENCE (NOT a linear hash
+ * chain). #3927 (design vote 7-0, Option B). The original #3897 design was a
+ * LINEAR HASH CHAIN: each record's `hash` folded in the prior record's hash, so
+ * the order of file lines was load-bearing. That model cannot survive a
+ * concurrent-branch git merge — two branches that each append a record from the
+ * same tip produce two records claiming the same `previousHash`, and any
+ * merge-concatenation breaks the back-link check. The revised model treats the
+ * ledger as an UNORDERED SET of self-hashed records plus a monotonic `sequence`
+ * number: each record's hash is POSITION-INDEPENDENT (covers `sequence` but NOT
+ * `previousHash`), so it is stable across merges and reorders. `previousHash`
+ * is retained ADVISORILY for audit texture but does NOT participate in
+ * verification. Omission is detected via SEQUENCE GAPS; concurrent forks (two
+ * records sharing a sequence) are a BENIGN signal, not a failure.
+ *
+ * KNOWN GAP IN OMISSION DETECTION (#4011): sequence-gap detection only catches an
+ * omission that leaves a HOLE in the `0..maxSeq` run. It does NOT catch the
+ * deletion of a FORK PARTNER — when a sequence is shared by ≥2 records and one is
+ * removed, the surviving partner still occupies that sequence, so no gap appears
+ * and verification still returns `ok`. So a concurrent fork that resolved
+ * `approved` + `rejected` can have its `rejected` partner silently dropped. This
+ * is consistent with the residual-trust boundary (records are author-typed and
+ * NOT yet cryptographically signed — signing is #3927 item 4): a commit-access
+ * actor could equally have just never written the rejecting record, so this grants
+ * no new capability. Closing it (cross-checking `forks`/`recordCount`, or
+ * requiring fork partners to be co-present) is only meaningful once signing raises
+ * the overall bar, and folds into #3927 item 4. See the audit-hash-chain threat
+ * model for the disclosed boundary.
+ *
+ * WHY A DEDICATED PAYLOAD-COVERING HASH (and not the audit-event head hash).
+ * The audit-event chain (`computeEventHash` in audit-logger.ts) hashes only the
+ * stable HEAD fields (id/timestamp/category/action/outcome/actor/previousHash)
+ * and intentionally NOT `metadata` — so riding a tier-transition-style metadata
+ * payload would leave the vote `decision`/`approvalPercentage` OUTSIDE the
+ * hash: an attacker could flip `rejected`→`approved` in the metadata without
+ * breaking any hash. That defeats the whole point of #3897. This record instead
+ * folds EVERY authenticity-bearing field — the proposal content hash, the
+ * decision, the approval percentage, the vote counts, the per-voter summary,
+ * and the `sequence` — into the self-hash, so editing any of them is detected
+ * as a `hash_mismatch`. This is the tamper-evidence MVP; cryptographic
+ * signing/provenance (binding the record to a key) is DEFERRED (#3897 follow-up).
+ *
+ * NOTE: the separate audit-event/tier-transition chain (`audit-logger.ts`) IS
+ * still a real linear hash chain — it has a single-writer runtime and never
+ * merges concurrent branches, so the chain model holds there. Only THIS ledger
+ * (a multi-branch committable artifact) was converted to a record set.
+ *
+ * @module audit/vote-record
+ */
+
+/**
+ * The `{pr, headSha}` binding of a PR-ratification vote (#5130 step 1, schema
+ * 1.10). `pr` is the PR number the panel ratified; `headSha` is the full head
+ * commit the panel saw. Exported for the `consensus_vote` input schema and the
+ * caller-commits append script, so producer, record and script validate the
+ * same shape.
+ */
+declare const VoteRecordPrBindingSchema: z.ZodObject<{
+    pr: z.ZodNumber;
+    headSha: z.ZodString;
+}, z.core.$strict>;
+type VoteRecordPrBinding = z.infer<typeof VoteRecordPrBindingSchema>;
 
 /**
  * nexus-agents/cli - Mode Detector
@@ -74,7 +144,12 @@ interface ParsedCliArgs {
         createIssue: boolean;
         fix: boolean;
         proposal?: string;
+        /** Legacy spelling of the bar; `strategy` wins when both are given (#6227). */
         threshold?: VoteThreshold;
+        /** #6227 — `--strategy`, the tool's own enum, passed to the engine as the MCP tool passes it. */
+        strategy?: VotingStrategy;
+        /** #6227 — `--ratifies-pr <n>@<sha>`, already parsed into the record's binding shape. */
+        ratifiesPr?: VoteRecordPrBinding;
         quick: boolean;
         timeoutMs?: number;
         /** #2630 — see `applyErrorPolicy`. */

package/dist/cli.js

@@ -157,7 +157,7 @@ import {
   validateNexusEnv,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-HXITPFTR.js";
+} from "./chunk-W6VHVDZM.js";
 import "./chunk-MHXSHTHG.js";
 import "./chunk-4GDMHCKX.js";
 import "./chunk-M7DUOIAK.js";
@@ -177,7 +177,7 @@ import {
   doctorCommand,
   initDataDirectories,
   runDoctor
-} from "./chunk-M2ZQXDSO.js";
+} from "./chunk-IJMAA7MV.js";
 import "./chunk-PMWQSCYE.js";
 import {
   buildOpenAICompatAdapters,
@@ -192,7 +192,9 @@ import {
   ErrorPolicySchema,
   JOB_RECORD_RETENTION_MS,
   VOTER_ROLES,
+  VoteRecordPrBindingSchema,
   VoteThresholdSchema,
+  VotingStrategySchema,
   executeVoting,
   mapOutcomeToDecision,
   panelDiversityOf,
@@ -201,7 +203,7 @@ import {
   registerConsensusVoteTool,
   seatFallbacks,
   toRecordDecision
-} from "./chunk-MO6FSEFJ.js";
+} from "./chunk-XU72ZQ5Z.js";
 import {
   loadUsageEvents,
   rollupByModel
@@ -241,18 +243,18 @@ import {
   registerImprovementReviewTool,
   runImprovementReview,
   scanForSecrets
-} from "./chunk-5W55WXLY.js";
+} from "./chunk-3KOCMFOK.js";
 import {
   createDefaultPolicyFirewall,
   setGlobalPolicyFirewall,
   setSecureHandlerAuditLogger,
   stagePolicyFirewallForRollout
-} from "./chunk-BWP3RTR2.js";
+} from "./chunk-VCLNGU3S.js";
 import {
   NODE_ENGINE_RANGE,
   VERSION,
   isNodeVersionSupported
-} from "./chunk-UURJGJTW.js";
+} from "./chunk-H3PRTTXF.js";
 import "./chunk-VZSMNIRN.js";
 import {
   claimGlobalRegistry,
@@ -3910,6 +3912,16 @@ var PARSE_ARGS_CONFIG = {
     threshold: {
       type: "string"
     },
+    // #6227 — the bar as the tool spells it. `threshold` is the legacy spelling;
+    // the engine's `resolveStrategy` lets `strategy` win when both are given.
+    strategy: {
+      type: "string"
+    },
+    // #6227 — `<pr>@<40-hex sha>`: binds the record to a governor-path PR for
+    // `scripts/append-ratification-record.ts`. Validated in `buildVoteOptions`.
+    "ratifies-pr": {
+      type: "string"
+    },
     quick: {
       type: "boolean",
       short: "q",
@@ -7476,6 +7488,32 @@ function auditLineFor(outcome) {
   return `${colors.yellow}Vote NOT recorded to the audit chain: ${outcome.detail}${colors.reset}
 `;
 }
+function prBindingLine(outcome, binding) {
+  const target = `PR ${String(binding.pr)} @ ${binding.headSha}`;
+  if (outcome.persisted) {
+    return `${colors.dim}record ${outcome.record.id} bound to ${target}${colors.reset}
+`;
+  }
+  return `${colors.yellow}Binding to ${target} NOT recorded \u2014 no record was written, so there is nothing for append-ratification-record.ts to copy${colors.reset}
+`;
+}
+var GOVERNOR_BAR = { strategy: "supermajority", errorPolicy: "absolute_quorum" };
+function governorBarNotice(ran) {
+  if (ran.strategy === GOVERNOR_BAR.strategy && ran.errorPolicy === GOVERNOR_BAR.errorPolicy) {
+    return void 0;
+  }
+  return `${colors.yellow}Notice: the governor bar is --strategy ${GOVERNOR_BAR.strategy} --error-policy ${GOVERNOR_BAR.errorPolicy}; this vote ran at ${ran.strategy} / ${ran.errorPolicy ?? "unrecorded"} and was recorded as run \u2014 the ledger gate judges it, not the CLI${colors.reset}
+`;
+}
+function persistLines(outcome, binding, ran) {
+  if (binding === void 0) return [auditLineFor(outcome)];
+  const notice = governorBarNotice(ran);
+  return [
+    auditLineFor(outcome),
+    prBindingLine(outcome, binding),
+    ...notice === void 0 ? [] : [notice]
+  ];
+}
 
 // src/cli/vote-command.ts
 function generateVoteHash(role, vote) {
@@ -7655,6 +7693,8 @@ function toVoteInput(options, quickMode) {
     quickMode,
     simulateVotes: options.dryRun === true,
     ...options.threshold !== void 0 && { threshold: options.threshold },
+    // #6227: both bar spellings go through; `resolveStrategy` lets `strategy` win.
+    ...options.strategy !== void 0 && { strategy: options.strategy },
     ...options.errorPolicy !== void 0 && { errorPolicy: options.errorPolicy }
   };
 }
@@ -7752,26 +7792,24 @@ function exitCodeForDecision(decision, policy) {
 }
 function persistToAuditChain(options, result) {
   if (options.dryRun === true) return;
-  writeLine(
-    auditLineFor(
-      recordAuthenticVote({
-        proposal: result.proposal,
-        strategy: result.strategy,
-        result: result.result,
-        votes: result.votes,
-        // #6049: the CLI path had the declared options all along and did not
-        // pass them, so its records lost the option fields whenever no
-        // selection was parseable -- the same defect as the MCP path.
-        declaredOptions: options.options,
-        // A vote an error policy voided is not a rejection. Without this the
-        // chain records `rejected` while the CLI exits `no_quorum` (#4953).
-        errorVoided: result.policyReason !== void 0,
-        resolvedDecision: toRecordDecision(result.decision),
-        // #6211: the policy the panel ran under, as `executeVoting` resolved it.
-        errorPolicy: result.errorPolicy
-      })
-    )
-  );
+  const outcome = recordAuthenticVote({
+    proposal: result.proposal,
+    strategy: result.strategy,
+    result: result.result,
+    votes: result.votes,
+    // #6049: the CLI path had the declared options all along and did not
+    // pass them, so its records lost the option fields whenever no
+    // selection was parseable -- the same defect as the MCP path.
+    declaredOptions: options.options,
+    // A vote an error policy voided is not a rejection. Without this the
+    // chain records `rejected` while the CLI exits `no_quorum` (#4953).
+    errorVoided: result.policyReason !== void 0,
+    resolvedDecision: toRecordDecision(result.decision),
+    // #6211: the policy the panel ran under, as `executeVoting` resolved it.
+    errorPolicy: result.errorPolicy,
+    ratifiesPr: options.ratifiesPr
+  });
+  for (const line of persistLines(outcome, options.ratifiesPr, result)) writeLine(line);
 }
 async function voteCommand(options) {
   writeLine(`
@@ -19509,7 +19547,7 @@ function startImprovementReviewScheduler(options) {
   let running = false;
   const runOnce = async () => {
     try {
-      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-MTQWL4BT.js");
+      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-TTJVCUXN.js");
       const input = ImprovementReviewInputSchema2.parse({ fileIssues });
       const result = await runImprovementReview2(input, { logger: logger22 });
       logger22.info("Scheduled improvement_review complete", {
@@ -22211,11 +22249,23 @@ var VOTE_HELP = {
     'nexus-agents vote -p "Migrate to PostgreSQL" --threshold supermajority',
     'nexus-agents vote -p "Pick a cache" --option "Redis" --option "in-process LRU"',
     'nexus-agents vote -p "Quick decision" --quick',
-    'nexus-agents vote -p "Test idea" --dry-run'
+    'nexus-agents vote -p "Test idea" --dry-run',
+    'nexus-agents vote -p "Ratify PR #6227 at <sha>" --strategy supermajority --error-policy absolute_quorum --ratifies-pr 6227@<sha>'
   ],
   flags: [
     { flag: "-p, --proposal <text>", description: "Proposal text to vote on (required)" },
-    { flag: "--threshold <t>", description: "Threshold: majority, supermajority, unanimous" },
+    {
+      flag: "--strategy <s>",
+      description: "The bar, as the consensus_vote tool spells it: simple_majority (default) | supermajority | unanimous | proof_of_learning | higher_order | opinion_wise. Wins over --threshold when both are given (#6227)"
+    },
+    {
+      flag: "--threshold <t>",
+      description: "Legacy spelling of the bar: majority | supermajority | unanimous. --strategy wins when both are given"
+    },
+    {
+      flag: "--ratifies-pr <n>@<sha>",
+      description: "Bind the audit record to a governor-path PR at its full 40-hex lowercase head sha (#6227, #5130), e.g. 6227@0123\u2026; prints `record <id> bound to PR n @ sha` for scripts/append-ratification-record.ts --record-id. The governor bar is --strategy supermajority --error-policy absolute_quorum; a vote below it is still recorded, with a notice"
+    },
     {
       flag: "--option <text>",
       description: "Named alternative (repeatable, 2-10). Records WHICH option won, not just approval"
@@ -22797,6 +22847,10 @@ function buildVoteCommandOptions(args) {
     proposal: args.options.proposal ?? "",
     ...args.options.options !== void 0 && { options: args.options.options },
     ...validThreshold !== void 0 && { threshold: validThreshold },
+    // #6227: both already validated by the parser (`parseStrategy`,
+    // `parseRatifiesPr` refuse rather than drop), so they are carried as-is.
+    ...args.options.strategy !== void 0 && { strategy: args.options.strategy },
+    ...args.options.ratifiesPr !== void 0 && { ratifiesPr: args.options.ratifiesPr },
     ...validErrorPolicy !== void 0 && { errorPolicy: validErrorPolicy },
     ...args.options.onNoQuorum !== void 0 && { onNoQuorum: args.options.onNoQuorum },
     ...args.options.timeoutMs !== void 0 && { timeoutMs: args.options.timeoutMs },
@@ -28174,6 +28228,51 @@ function isDirectRun(argv1) {
   return DIRECT_RUN_SUFFIXES.some((suffix) => argv1.endsWith(suffix));
 }
 
+// src/cli/vote-bar-flags.ts
+function parseThreshold(value) {
+  if (value === void 0) return void 0;
+  const parsed = VoteThresholdSchema.safeParse(value);
+  return parsed.success ? parsed.data : void 0;
+}
+function parseStrategy(value) {
+  if (value === void 0) return void 0;
+  const parsed = VotingStrategySchema.safeParse(value);
+  if (!parsed.success) {
+    throw new Error(
+      `--strategy must be one of ${VotingStrategySchema.options.join(", ")}; got '${value}'`
+    );
+  }
+  return parsed.data;
+}
+var RATIFIES_PR_FORM = "<number>@<40-hex-lowercase-sha>";
+function parseRatifiesPr(value) {
+  if (value === void 0) return void 0;
+  const expected = `--ratifies-pr expects ${RATIFIES_PR_FORM}; got '${value}'`;
+  const at = value.indexOf("@");
+  if (at === -1) throw new Error(`${expected} (no '@')`);
+  const prText = value.slice(0, at);
+  const headSha = value.slice(at + 1);
+  if (!/^\d+$/.test(prText)) {
+    throw new Error(`${expected} (the PR number must be a positive integer)`);
+  }
+  const parsed = VoteRecordPrBindingSchema.safeParse({ pr: Number(prText), headSha });
+  if (!parsed.success) {
+    const detail = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+    throw new Error(`${expected} (${detail})`);
+  }
+  return parsed.data;
+}
+function parseVoteBarFlags(values) {
+  const threshold = parseThreshold(values.threshold);
+  const strategy = parseStrategy(values.strategy);
+  const ratifiesPr = parseRatifiesPr(values["ratifies-pr"]);
+  return {
+    ...threshold !== void 0 && { threshold },
+    ...strategy !== void 0 && { strategy },
+    ...ratifiesPr !== void 0 && { ratifiesPr }
+  };
+}
+
 // src/cli.ts
 function determineCommand(options, positionals) {
   const firstArg = positionals[0];
@@ -28217,11 +28316,6 @@ function buildOrchestrateOptions(values) {
     ...maxSteps !== void 0 && { maxSteps }
   };
 }
-function parseThreshold(value) {
-  if (value === void 0) return void 0;
-  const parsed = VoteThresholdSchema.safeParse(value);
-  return parsed.success ? parsed.data : void 0;
-}
 function parseErrorPolicy(value) {
   if (value === void 0) return void 0;
   const parsed = ErrorPolicySchema.safeParse(value);
@@ -28231,7 +28325,6 @@ function parseNoQuorumPolicy(value) {
   return value === "fail" || value === "exit2" || value === "retry" ? value : void 0;
 }
 function buildVoteOptions(values) {
-  const threshold = parseThreshold(values.threshold);
   const timeoutSec = parseNumericOption(values.timeout);
   const timeoutMs = timeoutSec !== void 0 ? timeoutSec * 1e3 : void 0;
   const errorPolicy = parseErrorPolicy(values["error-policy"]);
@@ -28240,7 +28333,9 @@ function buildVoteOptions(values) {
   return {
     ...values.proposal !== void 0 && { proposal: values.proposal },
     ...options !== void 0 && options.length > 0 && { options },
-    ...threshold !== void 0 && { threshold },
+    // #6227: `--threshold` (legacy), `--strategy` and `--ratifies-pr`; the
+    // latter two REFUSE an invalid value (see `vote-bar-flags.ts`).
+    ...parseVoteBarFlags(values),
     ...timeoutMs !== void 0 && { timeoutMs },
     ...errorPolicy !== void 0 && { errorPolicy },
     ...onNoQuorum !== void 0 && { onNoQuorum },