nexus-agents 2.89.2 → 2.90.0

package/dist/index.d.ts

@@ -28025,10 +28025,17 @@ type SuspiciousSignal = z.infer<typeof SuspiciousSignalSchema>;
  */
 interface GitHubUserMetadata {
     readonly username: string;
-    readonly accountAgeDays: number;
-    readonly priorContributions: number;
-    readonly recentCommentCount: number;
-    readonly recentCommentWindowMinutes: number;
+    /**
+     * Account/activity fields are OPTIONAL (#3106). When a field is absent (the
+     * caller couldn't fetch it — e.g. the firewall before Phase 3 wiring), its
+     * signal is SKIPPED rather than fabricated: an unknown value must never be
+     * treated as benign (the old hardcoded `365`/`0`) nor as hostile. Only the
+     * `authorAssociation` + `injectionFlags` signals fire on absent activity data.
+     */
+    readonly accountAgeDays?: number;
+    readonly priorContributions?: number;
+    readonly recentCommentCount?: number;
+    readonly recentCommentWindowMinutes?: number;
     readonly authorAssociation: string;
     readonly injectionFlags: readonly InjectionFlag[];
 }
@@ -28329,6 +28336,14 @@ interface FirewallResult {
     readonly sanitized: SanitizedInput;
     readonly trust: ClassifyResult;
     readonly reputation?: ReputationAssessment;
+    /**
+     * The tier consumers should ENFORCE on (#3106): the classifier tier
+     * reconciled with the reputation assessment (demotion-only; Tier-1/allowlist
+     * wins; equals `trust.trustTier` when reputation is absent). Previously the
+     * reputation tier was computed but dropped — `trust.trustTier` alone left
+     * reputation unenforced.
+     */
+    readonly effectiveTrustTier: TrustTier;
     readonly atl: string;
     readonly auditEvents: readonly {
         readonly id: string;

package/dist/index.js

@@ -519,7 +519,7 @@ import {
   validateWorkflow,
   validateWorkflowDependencies,
   withLogging
-} from "./chunk-44XYCZCU.js";
+} from "./chunk-EUR32RSL.js";
 import {
   getTokenEnvVars,
   hasToken,
@@ -688,12 +688,13 @@ import {
   isMutatingAction,
   isReadOnlyAction,
   mapAuthorAssociation,
+  reconcileTrustTier,
   requiresCitation,
   requiresCorroboration,
   sanitizeInput,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-IOXR6W24.js";
+} from "./chunk-L3S7HOAS.js";
 import {
   GitHubProvider,
   ScmError
@@ -737,7 +738,7 @@ import {
   getKnownNexusVarNames,
   startStdioServer,
   validateNexusEnv
-} from "./chunk-5X7GAOVZ.js";
+} from "./chunk-IBRZK662.js";
 import {
   AvailabilityCache,
   filterAvailableModels,
@@ -4183,12 +4184,14 @@ var HostileInputFirewall = class {
     const sanitized = this.runSanitization(meta);
     const trust = this.runClassification(meta, sanitized);
     const reputation = this.runReputation(meta, sanitized);
-    const atl = this.buildATL(meta, trust, sanitized, reputation);
+    const effectiveTrustTier = reconcileTrustTier(trust.trustTier, reputation);
+    const atl = this.buildATL(meta, effectiveTrustTier, sanitized, reputation);
     const auditEvents = this.auditTrail.query().map((e) => ({ id: e.id, type: e.type }));
     return ok({
       sanitized,
       trust,
       ...reputation !== void 0 ? { reputation } : {},
+      effectiveTrustTier,
       atl,
       auditEvents,
       durationMs: Date.now() - start
@@ -4266,10 +4269,6 @@ var HostileInputFirewall = class {
     if (!this.stages.reputationAssessment) return void 0;
     const metadata = {
       username: meta.username,
-      accountAgeDays: 365,
-      priorContributions: 0,
-      recentCommentCount: 0,
-      recentCommentWindowMinutes: 60,
       authorAssociation: meta.authorAssociation.toUpperCase(),
       injectionFlags: sanitized.injectionFlags
     };
@@ -4285,9 +4284,9 @@ var HostileInputFirewall = class {
     }
     return result;
   }
-  buildATL(meta, trust, sanitized, reputation) {
+  buildATL(meta, effectiveTrustTier, sanitized, reputation) {
     const data = {
-      tier: trust.trustTier,
+      tier: effectiveTrustTier,
       source: meta.sourceType,
       user: meta.username,
       sanitized: sanitized.wasModified,