nexus-agents 9.0.2 → 9.1.0

package/dist/{chunk-EF5FB4QM.js → chunk-RJDZOOPA.js}

@@ -5,7 +5,7 @@ import {
   getCurrentRequestContext,
   runWithRequestContext,
   serverCallerInfo
-} from "./chunk-FSM6ZCVF.js";
+} from "./chunk-BQPQIOEB.js";
 import {
   DEFAULT_EXECUTION_MODE
 } from "./chunk-ECJ52NSK.js";
@@ -2343,4 +2343,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-EF5FB4QM.js.map
+//# sourceMappingURL=chunk-RJDZOOPA.js.map

package/dist/{chunk-GZHDEMLN.js → chunk-V5CYHQ7H.js}

@@ -21,7 +21,7 @@ import {
   toolSuccess,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-EF5FB4QM.js";
+} from "./chunk-RJDZOOPA.js";
 import {
   getToolMemory
 } from "./chunk-WNVJQ5SC.js";
@@ -30,7 +30,7 @@ import {
 } from "./chunk-EZNIYU5T.js";
 import {
   VERSION
-} from "./chunk-FSM6ZCVF.js";
+} from "./chunk-BQPQIOEB.js";
 import {
   isGatewayModelAdapter
 } from "./chunk-T5IBXFFY.js";
@@ -95,6 +95,7 @@ import {
   getPipelineEventBus,
   getRandomProvider,
   getTimeProvider,
+  hasGatewaySlotCatalog,
   isAuthFailureText,
   isCallerAbortError,
   isCliName,
@@ -112,6 +113,7 @@ import {
   readVoteRecords,
   recordUsageEvent,
   registerPersistentOutcomeStoreFactory,
+  resolveGatewayDefault,
   resolveInsideRoot,
   resolveModelIdentitySync,
   resolveVoteRecordsPath,
@@ -185,85 +187,6 @@ function getDefaultErrorPolicy(strategy) {
   return "reduce_denominator";
 }
 
-// src/cli/voter-model-overrides.ts
-function voterModelOverrideEnvKey(role) {
-  return `NEXUS_VOTER_MODEL_${role.toUpperCase()}`;
-}
-function resolveVoterModelOverrides(roles, gatewayAdapters, logger12) {
-  const overrides = /* @__PURE__ */ new Map();
-  if (gatewayAdapters.length === 0) return overrides;
-  const byId = /* @__PURE__ */ new Map();
-  for (const adapter of gatewayAdapters) byId.set(adapter.modelId, adapter);
-  for (const role of roles) {
-    const envKey = voterModelOverrideEnvKey(role);
-    const raw = process.env[envKey];
-    if (raw === void 0 || raw.trim() === "") continue;
-    const requested = raw.trim();
-    const adapter = byId.get(requested) ?? gatewayAdapters.find((a) => a.modelId.toLowerCase() === requested.toLowerCase());
-    if (adapter === void 0) {
-      logger12.warn(
-        `Voter model override ${envKey}="${requested}" is not a discovered gateway model \u2014 falling back to round-robin for role "${role}".`,
-        { role, requested, available: [...byId.keys()] }
-      );
-      continue;
-    }
-    overrides.set(role, adapter);
-  }
-  if (overrides.size > 0) {
-    logger12.info("Applied per-role voter model overrides (#4055)", {
-      overrides: Object.fromEntries([...overrides].map(([r, a]) => [r, a.modelId]))
-    });
-  }
-  return overrides;
-}
-
-// src/cli/voter-cli-access.ts
-var VOTER_ACCESS_MODE = "read-only-analysis";
-function clisServingVoterSeats(clis, declarationsFor = (cli) => createCliAdapter({ cli })) {
-  const serving = [];
-  const refused = [];
-  for (const cli of clis) {
-    const enforces = adapterEnforces(declarationsFor(cli), { accessMode: VOTER_ACCESS_MODE });
-    (enforces ? serving : refused).push(cli);
-  }
-  return { serving, refused };
-}
-
-// src/cli/voter-fallback.ts
-function bareCliName(id) {
-  return id.startsWith("cli-") ? id.slice("cli-".length) : id;
-}
-function classifyFallbackReason(message) {
-  if (isDurableCapacityText(message)) return "capacity";
-  if (isRateLimitText(message)) return "rate-limit";
-  if (classifyExtractedError(message, "unknown").code === "NOT_AUTHENTICATED") return "auth";
-  if (UNVERIFIABLE_STDERR_RE.test(message)) return "sandbox";
-  if (isTimeoutText(message)) return "timeout";
-  return "unknown";
-}
-function detectedModel(adapter) {
-  const id = adapter.modelId;
-  return typeof id === "string" && id !== "" && id !== UNRESOLVED_MODEL_ID ? id : void 0;
-}
-function assignedCliOf(key) {
-  return typeof key === "string" && key !== "" ? bareCliName(key) : void 0;
-}
-function crossCliFallback(assigned, assignedKey, error) {
-  const fromModel = detectedModel(assigned);
-  return {
-    fromCli: assignedCliOf(assignedKey) ?? "unknown",
-    ...fromModel !== void 0 ? { fromModel } : {},
-    reason: classifyFallbackReason(error)
-  };
-}
-function inFamilyFallback(cli, fromModel) {
-  return { fromCli: bareCliName(cli), fromModel, reason: "capacity" };
-}
-function withAssignedCli(result, assignedKey) {
-  const assignedCli = assignedCliOf(assignedKey);
-  return assignedCli === void 0 ? result : { ...result, assignedCli };
-}
-
 // src/cli/voter-attempt-events.ts
 import { randomUUID } from "node:crypto";
 function resolveAttemptCollector(context) {
@@ -382,6 +305,134 @@ function preserveVoterAttemptTelemetry(from, onto) {
   return initial === void 0 ? onto : withVoterAttemptTelemetry(onto, () => from.attemptTelemetry ?? initial);
 }
 
+// src/cli/voter-model-overrides.ts
+function voterModelOverrideEnvKey(role) {
+  return `NEXUS_VOTER_MODEL_${role.toUpperCase()}`;
+}
+function resolveVoterModelOverrides(roles, gatewayAdapters, logger12) {
+  const overrides = /* @__PURE__ */ new Map();
+  if (gatewayAdapters.length === 0) return overrides;
+  const byId = /* @__PURE__ */ new Map();
+  for (const adapter of gatewayAdapters) byId.set(adapter.modelId, adapter);
+  for (const role of roles) {
+    const envKey = voterModelOverrideEnvKey(role);
+    const raw = process.env[envKey];
+    if (raw === void 0 || raw.trim() === "") continue;
+    const requested = raw.trim();
+    const adapter = byId.get(requested) ?? gatewayAdapters.find((a) => a.modelId.toLowerCase() === requested.toLowerCase());
+    if (adapter === void 0) {
+      logger12.warn(
+        `Voter model override ${envKey}="${requested}" is not a discovered gateway model \u2014 falling back to round-robin for role "${role}".`,
+        { role, requested, available: [...byId.keys()] }
+      );
+      continue;
+    }
+    overrides.set(role, adapter);
+  }
+  if (overrides.size > 0) {
+    logger12.info("Applied per-role voter model overrides (#4055)", {
+      overrides: Object.fromEntries([...overrides].map(([r, a]) => [r, a.modelId]))
+    });
+  }
+  return overrides;
+}
+function ignoredRolePinReason(requested, options) {
+  const gateway = options.gatewayAdapters ?? [];
+  if (gateway.length === 0) {
+    return hasGatewaySlotCatalog() ? "gateway model dealing is inactive for this panel" : "no gateway active";
+  }
+  if (options.adapter !== void 0) return "an explicit adapter overrides gateway dealing";
+  if (options.roleAdapters !== void 0) return "the roster was assigned before this call";
+  if (gateway.length === 1) return "single-model gateway: role pins have no effect";
+  if (!gateway.some((a) => a.modelId.toLowerCase() === requested.toLowerCase())) {
+    return "not in the gateway catalog; the seat was dealt instead";
+  }
+  return void 0;
+}
+function ignoredCustomPin(gateway) {
+  const requested = process.env["NEXUS_CUSTOM_MODEL"]?.trim();
+  if (requested === void 0 || requested === "") return void 0;
+  if (gateway.length > 0) {
+    if (gateway.some((a) => a.modelId === requested)) return void 0;
+  } else {
+    const resolved = resolveGatewayDefault();
+    if (resolved.kind === "inactive" || resolved.kind === "resolved" && resolved.via === "override") {
+      return void 0;
+    }
+  }
+  return `NEXUS_CUSTOM_MODEL="${requested}" ignored: not in the gateway catalog`;
+}
+function captureModelPinWarnings(options) {
+  const ignored = /* @__PURE__ */ new Map();
+  const custom = ignoredCustomPin(options.gatewayAdapters ?? []);
+  for (const role of options.roles) {
+    const key = voterModelOverrideEnvKey(role);
+    const requested = process.env[key]?.trim();
+    let roleWarning;
+    if (requested !== void 0 && requested !== "") {
+      const reason = ignoredRolePinReason(requested, options);
+      if (reason !== void 0) roleWarning = `${key}="${requested}" ignored: ${reason}`;
+    }
+    const warning = [roleWarning, custom].filter((w) => w !== void 0).join("; ");
+    if (warning !== "") ignored.set(role, warning);
+  }
+  return (vote) => {
+    const warning = ignored.get(vote.role);
+    if (warning === void 0) return vote;
+    return preserveVoterAttemptTelemetry(vote, {
+      ...vote,
+      modelPinWarning: `${warning}; role "${vote.role}" assigned model "${vote.pinnedModel ?? "unresolved"}".`
+    });
+  };
+}
+
+// src/cli/voter-cli-access.ts
+var VOTER_ACCESS_MODE = "read-only-analysis";
+function clisServingVoterSeats(clis, declarationsFor = (cli) => createCliAdapter({ cli })) {
+  const serving = [];
+  const refused = [];
+  for (const cli of clis) {
+    const enforces = adapterEnforces(declarationsFor(cli), { accessMode: VOTER_ACCESS_MODE });
+    (enforces ? serving : refused).push(cli);
+  }
+  return { serving, refused };
+}
+
+// src/cli/voter-fallback.ts
+function bareCliName(id) {
+  return id.startsWith("cli-") ? id.slice("cli-".length) : id;
+}
+function classifyFallbackReason(message) {
+  if (isDurableCapacityText(message)) return "capacity";
+  if (isRateLimitText(message)) return "rate-limit";
+  if (classifyExtractedError(message, "unknown").code === "NOT_AUTHENTICATED") return "auth";
+  if (UNVERIFIABLE_STDERR_RE.test(message)) return "sandbox";
+  if (isTimeoutText(message)) return "timeout";
+  return "unknown";
+}
+function detectedModel(adapter) {
+  const id = adapter.modelId;
+  return typeof id === "string" && id !== "" && id !== UNRESOLVED_MODEL_ID ? id : void 0;
+}
+function assignedCliOf(key) {
+  return typeof key === "string" && key !== "" ? bareCliName(key) : void 0;
+}
+function crossCliFallback(assigned, assignedKey, error) {
+  const fromModel = detectedModel(assigned);
+  return {
+    fromCli: assignedCliOf(assignedKey) ?? "unknown",
+    ...fromModel !== void 0 ? { fromModel } : {},
+    reason: classifyFallbackReason(error)
+  };
+}
+function inFamilyFallback(cli, fromModel) {
+  return { fromCli: bareCliName(cli), fromModel, reason: "capacity" };
+}
+function withAssignedCli(result, assignedKey) {
+  const assignedCli = assignedCliOf(assignedKey);
+  return assignedCli === void 0 ? result : { ...result, assignedCli };
+}
+
 // src/cli/voter-cancel.ts
 var SEAT_CANCELLED_MESSAGE = "cancelled while this voter was in flight";
 function isCancelled(signal) {
@@ -2305,6 +2356,7 @@ async function collectRealVotes(options) {
   if ("simulated" in adapterResult)
     return createSimulatedVotes(roles, proposal, "No adapter available");
   const roleAdapters = await assignPanelSeats(adapterResult.adapter, options, logger12);
+  const discloseModelPins = captureModelPinWarnings(options);
   warnIfCodexConcurrencyExceeded(roleAdapters, logger12);
   const workspace = resolvePanelWorkspace(options.workspace);
   const { nonRetryableRoles, onError } = createVoterRetryState();
@@ -2335,7 +2387,7 @@ async function collectRealVotes(options) {
     options.erroredRoleBackoffMs ?? DEFAULT_ERRORED_ROLE_BACKOFF_MS
   );
   reportVoteIndependence(results, logger12);
-  return results;
+  return results.map(discloseModelPins);
 }
 
 // src/cli/vote-artifact.ts
@@ -5948,6 +6000,15 @@ function panelDiversityOf(votes) {
     fallbacks: seatFallbacks(votes).length
   };
 }
+function assignedPanelDiversityOf(votes) {
+  const models = votes.map((v) => v.pinnedModel).filter((m) => m !== void 0 && m !== "" && m !== UNRESOLVED_MODEL_ID);
+  if (models.length === 0) return {};
+  const families = models.map(vendorFamilyOf).filter((family) => family !== "unknown");
+  return {
+    assignedDistinctModels: countDistinctModels(models),
+    assignedDistinctFamilies: new Set(families).size
+  };
+}
 var MIN_PANEL_FOR_DIVERSITY_WARNING = 3;
 function singleModelPanelWarning(votes) {
   if (votes.length < MIN_PANEL_FOR_DIVERSITY_WARNING) return void 0;
@@ -6170,7 +6231,8 @@ function toAgentVoteSummary(result) {
     // #6246: and for what a recovered seat was retried from.
     ...result.retriedFrom !== void 0 ? { retriedFrom: result.retriedFrom } : {},
     // #6606: the per-seat model was only in `costSummary.perVoter`.
-    ...modelUsedOf(result)
+    ...modelUsedOf(result),
+    ...assignedModelOf(result)
   };
 }
 var MODEL_USED_MAX_CHARS = 100;
@@ -6181,6 +6243,13 @@ function modelUsedOf(result) {
     modelUsed: model.length <= MODEL_USED_MAX_CHARS ? model : `${model.slice(0, MODEL_USED_MAX_CHARS - 1)}\u2026`
   };
 }
+function assignedModelOf(result) {
+  const model = result.pinnedModel;
+  if (model === void 0 || model === "" || model === UNRESOLVED_MODEL_ID) return {};
+  return {
+    assignedModel: model.length <= MODEL_USED_MAX_CHARS ? model : `${model.slice(0, MODEL_USED_MAX_CHARS - 1)}\u2026`
+  };
+}
 function panelDegradationWarning(errorCount, total) {
   if (errorCount <= 0 || errorCount >= total) return void 0;
   return `Panel degraded: ${String(errorCount)} of ${String(total)} voters errored; decision rests on ${String(total - errorCount)} voter(s).`;
@@ -6189,9 +6258,11 @@ function appendPanelWarning(response, text) {
   if (text === void 0) return;
   response.panelWarning = response.panelWarning === void 0 ? text : `${response.panelWarning} ${text}`;
 }
-function unverifiableSeatsWarning(unverifiableCount, total) {
+function unverifiableSeatsWarning(unverifiableCount, total, artifactPath) {
   if (unverifiableCount <= 0) return void 0;
-  return `${String(unverifiableCount)} of ${String(total)} seat(s) could not read the artifact and are recorded as unverifiable (counted as abstain in voteCounts; any decision they returned was discarded).`;
+  const warning = `${String(unverifiableCount)} of ${String(total)} seat(s) could not read the artifact and are recorded as unverifiable (counted as abstain in voteCounts; any decision they returned was discarded).`;
+  if (artifactPath !== void 0) return warning;
+  return `${warning} No artifactPath was supplied: voters only see the proposal text; pass artifactPath (or inline the artifact) so they can inspect it.`;
 }
 var degradedPanelCount = 0;
 function applyAbsoluteQuorumTelemetry(response, input, decision, degradeReason) {
@@ -6246,6 +6317,7 @@ function buildResponse(input, result, costSummary, voteRecord) {
     ...disclosedWorkspace(result),
     // #6115: always present — a panel nobody answered is explicit zeros.
     panelDiversity: panelDiversityOf(result.votes),
+    ...assignedPanelDiversityOf(result.votes),
     // #3991: surface the authentic-vote-record persistence outcome so a skipped
     // or failed persist is visible to the MCP caller (was WARN-only).
     voteRecordPersisted: voteRecord?.persisted ?? false
@@ -6284,9 +6356,14 @@ function applyOptionalResponseFields(response, input, result, errorCount, costSu
   if (panelWarning !== void 0) {
     response.panelWarning = panelWarning;
   }
+  for (const vote of result.votes) appendPanelWarning(response, vote.modelPinWarning);
   appendPanelWarning(
     response,
-    unverifiableSeatsWarning(response.voteCounts.unverifiable, result.votes.length)
+    unverifiableSeatsWarning(
+      response.voteCounts.unverifiable,
+      result.votes.length,
+      input.artifactPath
+    )
   );
   appendPanelWarning(response, singleModelPanelWarning(result.votes));
   appendPanelWarning(response, singleFamilyPanelWarning(result.votes));
@@ -9344,6 +9421,7 @@ var CONSENSUS_VOTE_OUTPUT_SCHEMA = {
         reason: z15.enum(["rate-limit", "capacity", "auth", "timeout", "sandbox", "unknown"])
       }).optional(),
       modelUsed: z15.string().max(100).optional(),
+      assignedModel: z15.string().max(100).optional(),
       rejectionCategories: z15.array(
         z15.enum([
           "YAGNI",
@@ -9412,6 +9490,10 @@ var CONSENSUS_VOTE_OUTPUT_SCHEMA = {
     unresolvedSeats: z15.number().int().nonnegative().optional(),
     fallbacks: z15.number().int().nonnegative()
   }).optional(),
+  // Assigned roster includes errored and abstaining seats. Absent when no
+  // assignment resolved, including a zero-seat roster.
+  assignedDistinctModels: z15.number().int().nonnegative().optional(),
+  assignedDistinctFamilies: z15.number().int().nonnegative().optional(),
   // #3855: per-decision cost rollup. Same omission as panelWarning (#4032) — it
   // is present on the response whenever cost recording succeeds (common in `api`
   // billing mode). Shared schema lives with the type (single source of truth).
@@ -9434,7 +9516,7 @@ var CONSENSUS_VOTE_OUTPUT_SCHEMA = {
   }).optional()
 };
 var CONSENSUS_VOTE_TOOL_SCHEMA = ConsensusVoteInputSchema.shape;
-var CONSENSUS_VOTE_DESCRIPTION = "Execute multi-model consensus voting on a proposal. Uses 7 roles by default (architect, security, devex, ai_ml, pm, catfish, scope_steward) or 3 with quickMode (architect, security, scope_steward), voting with configurable strategies. higher_order does NOT decide the verdict by correlation-aware aggregation (#4701): approve/reject is a simple tally of the panel, so correlated voters each carry full independent weight. The Bayesian correlation analysis is computed and feeds contrarian escalation only. Choose it for the escalation behaviour, not for a weighted verdict. Supports async dispatch (dispatch: 'async') \u2014 returns a jobId to poll via get_job_result. Pass ratifies=<subject> to bind an authority-ladder ratification vote into its authentic record, and ratifiesPr={pr, headSha} to bind a governor-path PR ratification to the head the panel saw (#5130); the result carries voteRecordId for the caller-commits append. If your proposal asks voters to choose among named alternatives, you MUST pass them in `options` (#4472) \u2014 the threshold is then measured over WHICH option won, and the record carries the per-option tally plus selection coverage. WITHOUT `options` the tally is approve/reject/abstain only, so every voter who engages returns `approve` and a 6-1 split on which option persists as 7-0, 100% (#4452).";
+var CONSENSUS_VOTE_DESCRIPTION = "Execute multi-model consensus voting on a proposal. Uses 7 roles by default (architect, security, devex, ai_ml, pm, catfish, scope_steward) or 3 with quickMode (architect, security, scope_steward), voting with configurable strategies. higher_order does NOT decide the verdict by correlation-aware aggregation (#4701): approve/reject is a simple tally of the panel, so correlated voters each carry full independent weight. The Bayesian correlation analysis is computed and feeds contrarian escalation only. Choose it for the escalation behaviour, not for a weighted verdict. Supports async dispatch (dispatch: 'async') \u2014 returns a jobId to poll via get_job_result. Pass ratifies=<subject> to bind an authority-ladder ratification vote into its authentic record, and ratifiesPr={pr, headSha} to bind a governor-path PR ratification to the head the panel saw (#5130); the result carries voteRecordId for the caller-commits append. If your proposal asks voters to choose among named alternatives, you MUST pass them in `options` (#4472) \u2014 the threshold is then measured over WHICH option won, and the record carries the per-option tally plus selection coverage. WITHOUT `options` the tally is approve/reject/abstain only, so every voter who engages returns `approve` and a 6-1 split on which option persists as 7-0, 100% (#4452). The response separates responding panelDiversity from optional assignedDistinctModels and assignedDistinctFamilies, and votes[].assignedModel shows each resolved assignment, including errored or abstaining seats. Assignment counts are omitted when unmeasured. panelWarning names ignored model pins and includes an artifactPath hint when unverifiable seats had no supplied artifact.";
 function registerConsensusVoteTool(server, deps) {
   const logger12 = deps.logger ?? createLogger({ tool: "consensus_vote" });
   const notifier = deps.notifier ?? createMcpNotifier(server);
@@ -9577,4 +9659,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-GZHDEMLN.js.map
+//# sourceMappingURL=chunk-V5CYHQ7H.js.map