nexus-agents 2.89.1 → 2.90.0

package/dist/{chunk-MKKQ3CQJ.js → chunk-X5BQF6HM.js}

@@ -1,10 +1,10 @@
 import {
   CliCircuitBreaker,
   DEFAULT_CIRCUIT_BREAKER_CONFIG
-} from "./chunk-AKO5H63G.js";
+} from "./chunk-JYIKPBXW.js";
 import {
   generateHyphenId
-} from "./chunk-WWY6V4NK.js";
+} from "./chunk-PRGNJRID.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
@@ -27,7 +27,7 @@ import {
   getTimeProvider,
   isRateLimitText,
   ok
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 
 // src/cli-adapters/subprocess-adapter.ts
 import { spawn } from "child_process";
@@ -3291,4 +3291,4 @@ export {
   isCliAvailable,
   getAvailableClis
 };
-//# sourceMappingURL=chunk-MKKQ3CQJ.js.map
+//# sourceMappingURL=chunk-X5BQF6HM.js.map

package/dist/{chunk-TSHCHZ7R.js → chunk-Y7E5ZWRQ.js}

@@ -2,7 +2,7 @@ import {
   ConfigError,
   err,
   ok
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 
 // src/adapters/sdk/types.ts
 var PROVIDER_ENV_KEYS = {
@@ -117,4 +117,4 @@ export {
   CUSTOM_API_ALLOW_PRIVATE_ENV,
   validateCustomApiBaseUrl
 };
-//# sourceMappingURL=chunk-TSHCHZ7R.js.map
+//# sourceMappingURL=chunk-Y7E5ZWRQ.js.map

package/dist/{chunk-UISGEXHO.js → chunk-YEQE7WLP.js}

@@ -4,7 +4,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 
 // src/context/session-memory.ts
 import * as fs from "fs";
@@ -351,4 +351,4 @@ export {
   SessionMemory,
   createSessionMemory
 };
-//# sourceMappingURL=chunk-UISGEXHO.js.map
+//# sourceMappingURL=chunk-YEQE7WLP.js.map

package/dist/{cli-circuit-breaker-4EBP4C4R.js → cli-circuit-breaker-4SWB6DEB.js}

@@ -1,13 +1,13 @@
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-LENO7TKE.js";
-import "./chunk-AKO5H63G.js";
-import "./chunk-MVGFF4OY.js";
+} from "./chunk-3LKW4IEW.js";
+import "./chunk-JYIKPBXW.js";
+import "./chunk-W5I6L4UT.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
 };
-//# sourceMappingURL=cli-circuit-breaker-4EBP4C4R.js.map
+//# sourceMappingURL=cli-circuit-breaker-4SWB6DEB.js.map

package/dist/cli.js

@@ -12,18 +12,18 @@ import {
   parseFindings,
   sumFindings
 } from "./chunk-3RZWLQSC.js";
-import "./chunk-LZECDSJY.js";
+import "./chunk-AQTHLUCP.js";
 import {
   buildOpenAICompatAdapters,
   loadUsageEvents,
   readOpenAICompatEnv,
   rollupByModel
-} from "./chunk-GRTSPRIJ.js";
+} from "./chunk-TWAH7VM2.js";
 import {
   setupCommandAsync,
   verifyCommand
-} from "./chunk-DAWLXCLF.js";
-import "./chunk-JHU27PB2.js";
+} from "./chunk-3NNVITJF.js";
+import "./chunk-2SMTCNXP.js";
 import {
   AuthHandler,
   DEFAULT_EXPERTS,
@@ -162,19 +162,19 @@ import {
   validateCommand,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-RAUA6B2M.js";
+} from "./chunk-EUR32RSL.js";
 import {
   resolveToken
-} from "./chunk-QCZEC7H4.js";
+} from "./chunk-EAT4GTMT.js";
 import {
   CATEGORY_DISPLAY_NAMES,
   DEFAULT_PR_REVIEW_CONFIG
 } from "./chunk-X2M7OF27.js";
-import "./chunk-3MYPFPYL.js";
-import "./chunk-LENO7TKE.js";
+import "./chunk-E6W4Z6GN.js";
+import "./chunk-3LKW4IEW.js";
 import {
   shutdownExpertBridge
-} from "./chunk-EUMVRLJL.js";
+} from "./chunk-S6FXRXYE.js";
 import {
   DEFAULT_VOTE_TIMEOUT_MS,
   ErrorPolicySchema,
@@ -192,31 +192,31 @@ import {
   toolSuccessStructured,
   warnIfSimulatedOutsideTests,
   wrapToolWithTimeout
-} from "./chunk-7QTWFRHH.js";
-import "./chunk-O5F6QAIG.js";
-import "./chunk-TSHCHZ7R.js";
+} from "./chunk-4N54BTZU.js";
+import "./chunk-3FVSYMHK.js";
+import "./chunk-Y7E5ZWRQ.js";
 import {
   loadPapersRegistry,
   loadTechniquesRegistry,
   savePapersRegistry,
   synthesizeResearch
-} from "./chunk-KR6UR263.js";
+} from "./chunk-CGSVTROC.js";
 import {
   classifyTrust,
   createFullGitHubProvider,
   evaluatePolicy,
   parsePRUrl,
   sanitizeInput
-} from "./chunk-O5OJNB4C.js";
-import "./chunk-XV7V3B35.js";
-import "./chunk-WF2YOYY7.js";
+} from "./chunk-L3S7HOAS.js";
+import "./chunk-EFHZHCF2.js";
+import "./chunk-57HMLBYN.js";
 import "./chunk-HFOQKCD2.js";
 import "./chunk-3ACDP4E6.js";
-import "./chunk-W7YR5SGV.js";
+import "./chunk-4GOT42ZA.js";
 import {
   MemoryError,
   shutdownToolMemory
-} from "./chunk-SI7ZBCGU.js";
+} from "./chunk-7QXEK3O6.js";
 import {
   CustomExpertDefinitionSchema,
   DATA_SUBDIRECTORIES,
@@ -235,12 +235,12 @@ import {
   loadConfig,
   runDoctor,
   validateNexusEnv
-} from "./chunk-MXHJMSYQ.js";
-import "./chunk-MHPOJAPZ.js";
-import "./chunk-PS7WKRJN.js";
+} from "./chunk-IBRZK662.js";
+import "./chunk-SFZESA5O.js";
+import "./chunk-6Q33PBXC.js";
 import {
   DEFAULTS
-} from "./chunk-SRTQUTCB.js";
+} from "./chunk-3HTUYAKS.js";
 import "./chunk-NUBSJGQZ.js";
 import {
   capitalize,
@@ -252,12 +252,12 @@ import {
   getAvailableClis,
   isRecord,
   probeAllClis
-} from "./chunk-MKKQ3CQJ.js";
-import "./chunk-AKO5H63G.js";
-import "./chunk-WWY6V4NK.js";
+} from "./chunk-X5BQF6HM.js";
+import "./chunk-JYIKPBXW.js";
+import "./chunk-PRGNJRID.js";
 import "./chunk-ZM4O442V.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-UISGEXHO.js";
+import "./chunk-YEQE7WLP.js";
 import {
   API_TIMEOUTS,
   AgentCapability,
@@ -325,7 +325,7 @@ import {
   validateTimeout,
   writeEmptyLine,
   writeLine
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 import {
   applyPortableMode,
   detectSandbox,
@@ -19253,7 +19253,7 @@ function adaptConfigToLibrary(config) {
 }
 function createBeliefPromoter() {
   return async (event) => {
-    const { getToolMemory } = await import("./tool-memory-VJZ233FE.js");
+    const { getToolMemory } = await import("./tool-memory-SDPIAV2S.js");
     const tm = getToolMemory();
     await tm.recordBelief(
       `skill:${event.name}`,
@@ -20116,7 +20116,7 @@ async function handleResearchCommand(args) {
   }
 }
 async function handleRegistryCommand(args) {
-  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-2D4RMNUX.js");
+  const { registryCommand, isValidRegistrySubcommand, formatRegistryUsage } = await import("./registry-command-VNFULRTL.js");
   const subcommand = args.subcommand;
   if (!isValidRegistrySubcommand(subcommand)) {
     process.stdout.write(`${formatRegistryUsage()}
@@ -20164,7 +20164,7 @@ async function handleVerifyCommand(args) {
 async function handleDoctorCommand(args) {
   const exitCode = await doctorCommand({ fix: args.options.fix });
   if (args.options.deep) {
-    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-F24MXACR.js");
+    const { runDeepDiagnostics: runDeepDiagnostics2, formatDeepDiagnostics: formatDeepDiagnostics2 } = await import("./doctor-deep-QSVGAHAO.js");
     const diag = runDeepDiagnostics2();
     process.stdout.write(formatDeepDiagnostics2(diag) + "\n");
   }
@@ -20208,7 +20208,7 @@ async function handleInitCommand(args) {
   process.exit(result.success ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runInitOpencodeFlow(args) {
-  const { runInitOpencode } = await import("./init-opencode-VQFYKCIT.js");
+  const { runInitOpencode } = await import("./init-opencode-WEKHD7YE.js");
   const opencodePath = args.options.opencode;
   if (opencodePath === void 0 || opencodePath === "") {
     process.stderr.write("Error: --opencode requires a path argument.\n");
@@ -20235,7 +20235,7 @@ async function runInitOpencodeFlow(args) {
   process.exit(EXIT_CODES.SUCCESS);
 }
 async function renderOpencodeValidate(opencodePath) {
-  const { runOpencodeValidate } = await import("./init-opencode-VQFYKCIT.js");
+  const { runOpencodeValidate } = await import("./init-opencode-WEKHD7YE.js");
   const result = await runOpencodeValidate(opencodePath);
   if (!result.ok) {
     process.stderr.write(`init --opencode --validate: ${result.reason ?? "failed"}
@@ -20275,7 +20275,7 @@ async function handleSetupCommandAsync(args) {
   process.exit(exitCode === 0 ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED);
 }
 async function runCustomApiSetup(args) {
-  const { configureCustomApi } = await import("./setup-custom-api-W6FWQVAF.js");
+  const { configureCustomApi } = await import("./setup-custom-api-SP2ZAVGC.js");
   const baseUrl = args.options.customApi;
   if (baseUrl === void 0) return EXIT_CODES.SERVER_START_FAILED;
   const input = {

package/dist/{composite-router-INIE4UYA.js → composite-router-NLVKSTA2.js}

@@ -4,7 +4,7 @@ import {
   CompositeRoutingError,
   DEFAULT_COMPOSITE_CONFIG,
   createCompositeRouter
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -14,4 +14,4 @@ export {
   DEFAULT_COMPOSITE_CONFIG,
   createCompositeRouter
 };
-//# sourceMappingURL=composite-router-INIE4UYA.js.map
+//# sourceMappingURL=composite-router-NLVKSTA2.js.map

package/dist/{consensus-vote-5NIBODVH.js → consensus-vote-B6W7YQ6K.js}

@@ -5,19 +5,19 @@ import {
   executeVoting,
   registerConsensusVoteTool,
   resetCorrelationTracker
-} from "./chunk-7QTWFRHH.js";
-import "./chunk-O5F6QAIG.js";
-import "./chunk-TSHCHZ7R.js";
-import "./chunk-SI7ZBCGU.js";
-import "./chunk-PS7WKRJN.js";
-import "./chunk-SRTQUTCB.js";
+} from "./chunk-4N54BTZU.js";
+import "./chunk-3FVSYMHK.js";
+import "./chunk-Y7E5ZWRQ.js";
+import "./chunk-7QXEK3O6.js";
+import "./chunk-6Q33PBXC.js";
+import "./chunk-3HTUYAKS.js";
 import "./chunk-6T3EPABN.js";
-import "./chunk-MKKQ3CQJ.js";
-import "./chunk-AKO5H63G.js";
-import "./chunk-WWY6V4NK.js";
+import "./chunk-X5BQF6HM.js";
+import "./chunk-JYIKPBXW.js";
+import "./chunk-PRGNJRID.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-UISGEXHO.js";
-import "./chunk-MVGFF4OY.js";
+import "./chunk-YEQE7WLP.js";
+import "./chunk-W5I6L4UT.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -28,4 +28,4 @@ export {
   registerConsensusVoteTool,
   resetCorrelationTracker
 };
-//# sourceMappingURL=consensus-vote-5NIBODVH.js.map
+//# sourceMappingURL=consensus-vote-B6W7YQ6K.js.map

package/dist/{context-retriever-OBGV7Y2U.js → context-retriever-C4CNVKR5.js}

@@ -2,13 +2,13 @@ import {
   getContextForTask,
   inferTaskCategory,
   summarizeContextForPrompt
-} from "./chunk-W7YR5SGV.js";
-import "./chunk-SI7ZBCGU.js";
+} from "./chunk-4GOT42ZA.js";
+import "./chunk-7QXEK3O6.js";
 import "./chunk-6T3EPABN.js";
-import "./chunk-WWY6V4NK.js";
+import "./chunk-PRGNJRID.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-UISGEXHO.js";
-import "./chunk-MVGFF4OY.js";
+import "./chunk-YEQE7WLP.js";
+import "./chunk-W5I6L4UT.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -16,4 +16,4 @@ export {
   inferTaskCategory,
   summarizeContextForPrompt
 };
-//# sourceMappingURL=context-retriever-OBGV7Y2U.js.map
+//# sourceMappingURL=context-retriever-C4CNVKR5.js.map

package/dist/{doctor-deep-F24MXACR.js → doctor-deep-QSVGAHAO.js}

@@ -1,12 +1,12 @@
 import {
   formatDeepDiagnostics,
   runDeepDiagnostics
-} from "./chunk-LZECDSJY.js";
-import "./chunk-MVGFF4OY.js";
+} from "./chunk-AQTHLUCP.js";
+import "./chunk-W5I6L4UT.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
   formatDeepDiagnostics,
   runDeepDiagnostics
 };
-//# sourceMappingURL=doctor-deep-F24MXACR.js.map
+//# sourceMappingURL=doctor-deep-QSVGAHAO.js.map

package/dist/{expert-bridge-6KWMO2HT.js → expert-bridge-VIWFPPGZ.js}

@@ -1,13 +1,13 @@
 import {
   executeExpert,
   shutdownExpertBridge
-} from "./chunk-EUMVRLJL.js";
-import "./chunk-MHPOJAPZ.js";
-import "./chunk-MVGFF4OY.js";
+} from "./chunk-S6FXRXYE.js";
+import "./chunk-SFZESA5O.js";
+import "./chunk-W5I6L4UT.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
   executeExpert,
   shutdownExpertBridge
 };
-//# sourceMappingURL=expert-bridge-6KWMO2HT.js.map
+//# sourceMappingURL=expert-bridge-VIWFPPGZ.js.map

package/dist/{factory-4RSAV4FC.js → factory-NNSXCD25.js}

@@ -1,14 +1,14 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-F5GVZBSH.js";
-import "./chunk-QCZEC7H4.js";
-import "./chunk-XV7V3B35.js";
-import "./chunk-MVGFF4OY.js";
+} from "./chunk-52ACUN6T.js";
+import "./chunk-EAT4GTMT.js";
+import "./chunk-EFHZHCF2.js";
+import "./chunk-W5I6L4UT.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
   createGitHubProvider,
   createScmProvider
 };
-//# sourceMappingURL=factory-4RSAV4FC.js.map
+//# sourceMappingURL=factory-NNSXCD25.js.map

package/dist/{factory-TA7GM2O2.js → factory-T3SEZUGW.js}

@@ -3,10 +3,10 @@ import {
   createCliAdapter,
   getAvailableClis,
   isCliAvailable
-} from "./chunk-MKKQ3CQJ.js";
-import "./chunk-AKO5H63G.js";
-import "./chunk-WWY6V4NK.js";
-import "./chunk-MVGFF4OY.js";
+} from "./chunk-X5BQF6HM.js";
+import "./chunk-JYIKPBXW.js";
+import "./chunk-PRGNJRID.js";
+import "./chunk-W5I6L4UT.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 export {
@@ -15,4 +15,4 @@ export {
   getAvailableClis,
   isCliAvailable
 };
-//# sourceMappingURL=factory-TA7GM2O2.js.map
+//# sourceMappingURL=factory-T3SEZUGW.js.map

package/dist/index.d.ts

@@ -28025,10 +28025,17 @@ type SuspiciousSignal = z.infer<typeof SuspiciousSignalSchema>;
  */
 interface GitHubUserMetadata {
     readonly username: string;
-    readonly accountAgeDays: number;
-    readonly priorContributions: number;
-    readonly recentCommentCount: number;
-    readonly recentCommentWindowMinutes: number;
+    /**
+     * Account/activity fields are OPTIONAL (#3106). When a field is absent (the
+     * caller couldn't fetch it — e.g. the firewall before Phase 3 wiring), its
+     * signal is SKIPPED rather than fabricated: an unknown value must never be
+     * treated as benign (the old hardcoded `365`/`0`) nor as hostile. Only the
+     * `authorAssociation` + `injectionFlags` signals fire on absent activity data.
+     */
+    readonly accountAgeDays?: number;
+    readonly priorContributions?: number;
+    readonly recentCommentCount?: number;
+    readonly recentCommentWindowMinutes?: number;
     readonly authorAssociation: string;
     readonly injectionFlags: readonly InjectionFlag[];
 }
@@ -28329,6 +28336,14 @@ interface FirewallResult {
     readonly sanitized: SanitizedInput;
     readonly trust: ClassifyResult;
     readonly reputation?: ReputationAssessment;
+    /**
+     * The tier consumers should ENFORCE on (#3106): the classifier tier
+     * reconciled with the reputation assessment (demotion-only; Tier-1/allowlist
+     * wins; equals `trust.trustTier` when reputation is absent). Previously the
+     * reputation tier was computed but dropped — `trust.trustTier` alone left
+     * reputation unenforced.
+     */
+    readonly effectiveTrustTier: TrustTier;
     readonly atl: string;
     readonly auditEvents: readonly {
         readonly id: string;

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createGitHubProvider,
   createScmProvider
-} from "./chunk-F5GVZBSH.js";
+} from "./chunk-52ACUN6T.js";
 import {
   ALLOWED_COMMANDS,
   ARTIFACT_TYPES,
@@ -519,26 +519,26 @@ import {
   validateWorkflow,
   validateWorkflowDependencies,
   withLogging
-} from "./chunk-RAUA6B2M.js";
+} from "./chunk-EUR32RSL.js";
 import {
   getTokenEnvVars,
   hasToken,
   resolveToken
-} from "./chunk-QCZEC7H4.js";
+} from "./chunk-EAT4GTMT.js";
 import "./chunk-X2M7OF27.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
   OpenAIAdapter,
   createOpenAIAdapter
-} from "./chunk-3MYPFPYL.js";
+} from "./chunk-E6W4Z6GN.js";
 import {
   CliCircuitBreakerIntegration,
   createCliCircuitBreakerIntegration
-} from "./chunk-LENO7TKE.js";
+} from "./chunk-3LKW4IEW.js";
 import {
   executeExpert
-} from "./chunk-EUMVRLJL.js";
+} from "./chunk-S6FXRXYE.js";
 import {
   AgentFindingSchema,
   AgentPerformanceSchema,
@@ -632,7 +632,7 @@ import {
   validateToolInput,
   withModelNotFoundFallback,
   wrapResilientWithFallback
-} from "./chunk-7QTWFRHH.js";
+} from "./chunk-4N54BTZU.js";
 import {
   AdapterModelError,
   BaseAdapter,
@@ -656,11 +656,11 @@ import {
   transformStream,
   validateApiKeyPresence,
   withTimeout
-} from "./chunk-O5F6QAIG.js";
+} from "./chunk-3FVSYMHK.js";
 import {
   PROVIDER_ENV_KEYS
-} from "./chunk-TSHCHZ7R.js";
-import "./chunk-KR6UR263.js";
+} from "./chunk-Y7E5ZWRQ.js";
+import "./chunk-CGSVTROC.js";
 import {
   AgentActionSchema,
   GitHubReviewer,
@@ -688,16 +688,17 @@ import {
   isMutatingAction,
   isReadOnlyAction,
   mapAuthorAssociation,
+  reconcileTrustTier,
   requiresCitation,
   requiresCorroboration,
   sanitizeInput,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-O5OJNB4C.js";
+} from "./chunk-L3S7HOAS.js";
 import {
   GitHubProvider,
   ScmError
-} from "./chunk-XV7V3B35.js";
+} from "./chunk-EFHZHCF2.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -705,7 +706,7 @@ import {
   generateSecurityPlan,
   getRegistryManifest,
   resolveScannerData
-} from "./chunk-WF2YOYY7.js";
+} from "./chunk-57HMLBYN.js";
 import {
   analyzeGitHubRepo,
   analyzeRepo,
@@ -715,10 +716,10 @@ import "./chunk-3ACDP4E6.js";
 import {
   PersistentStrategyDistiller,
   RulesSnapshotSchema
-} from "./chunk-W7YR5SGV.js";
+} from "./chunk-4GOT42ZA.js";
 import {
   MemoryError
-} from "./chunk-SI7ZBCGU.js";
+} from "./chunk-7QXEK3O6.js";
 import {
   AppConfigSchema,
   ExpertConfigSchema,
@@ -737,7 +738,7 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-MXHJMSYQ.js";
+} from "./chunk-IBRZK662.js";
 import {
   AvailabilityCache,
   filterAvailableModels,
@@ -746,15 +747,15 @@ import {
   getFallbackChain,
   resetAvailabilityCache,
   resolveFallback
-} from "./chunk-MHPOJAPZ.js";
+} from "./chunk-SFZESA5O.js";
 import {
   AvailableModelsCache,
   getDefaultAvailableModelsCache,
   setDefaultAvailableModelsCache
-} from "./chunk-PS7WKRJN.js";
+} from "./chunk-6Q33PBXC.js";
 import {
   DEFAULTS
-} from "./chunk-SRTQUTCB.js";
+} from "./chunk-3HTUYAKS.js";
 import "./chunk-NUBSJGQZ.js";
 import "./chunk-6T3EPABN.js";
 import {
@@ -785,9 +786,9 @@ import {
   isCliAvailable,
   isRetryableError,
   sleep
-} from "./chunk-MKKQ3CQJ.js";
-import "./chunk-AKO5H63G.js";
-import "./chunk-WWY6V4NK.js";
+} from "./chunk-X5BQF6HM.js";
+import "./chunk-JYIKPBXW.js";
+import "./chunk-PRGNJRID.js";
 import {
   BUILT_IN_EXPERTS,
   BuiltInExpertTypeSchema,
@@ -798,7 +799,7 @@ import {
   validateExpertConfig
 } from "./chunk-ZM4O442V.js";
 import "./chunk-PQHVC4BD.js";
-import "./chunk-UISGEXHO.js";
+import "./chunk-YEQE7WLP.js";
 import {
   AgentCapability,
   AgentError,
@@ -873,7 +874,7 @@ import {
   toError,
   unwrap,
   unwrapOr
-} from "./chunk-MVGFF4OY.js";
+} from "./chunk-W5I6L4UT.js";
 import "./chunk-CH7QIDHQ.js";
 import "./chunk-PR4QN5HX.js";
 
@@ -4183,12 +4184,14 @@ var HostileInputFirewall = class {
     const sanitized = this.runSanitization(meta);
     const trust = this.runClassification(meta, sanitized);
     const reputation = this.runReputation(meta, sanitized);
-    const atl = this.buildATL(meta, trust, sanitized, reputation);
+    const effectiveTrustTier = reconcileTrustTier(trust.trustTier, reputation);
+    const atl = this.buildATL(meta, effectiveTrustTier, sanitized, reputation);
     const auditEvents = this.auditTrail.query().map((e) => ({ id: e.id, type: e.type }));
     return ok({
       sanitized,
       trust,
       ...reputation !== void 0 ? { reputation } : {},
+      effectiveTrustTier,
       atl,
       auditEvents,
       durationMs: Date.now() - start
@@ -4266,10 +4269,6 @@ var HostileInputFirewall = class {
     if (!this.stages.reputationAssessment) return void 0;
     const metadata = {
       username: meta.username,
-      accountAgeDays: 365,
-      priorContributions: 0,
-      recentCommentCount: 0,
-      recentCommentWindowMinutes: 60,
       authorAssociation: meta.authorAssociation.toUpperCase(),
       injectionFlags: sanitized.injectionFlags
     };
@@ -4285,9 +4284,9 @@ var HostileInputFirewall = class {
     }
     return result;
   }
-  buildATL(meta, trust, sanitized, reputation) {
+  buildATL(meta, effectiveTrustTier, sanitized, reputation) {
     const data = {
-      tier: trust.trustTier,
+      tier: effectiveTrustTier,
       source: meta.sourceType,
       user: meta.username,
       sanitized: sanitized.wasModified,
@@ -5970,7 +5969,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-5NIBODVH.js");
+    const { executeVoting } = await import("./consensus-vote-B6W7YQ6K.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);