nexus-agents 8.2.0 → 8.3.0

package/dist/index.js

@@ -553,7 +553,7 @@ import {
   withLogging,
   withRetry,
   withRetryWrapper
-} from "./chunk-7WDNGR7M.js";
+} from "./chunk-S7UZUGS7.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,
@@ -574,7 +574,7 @@ import {
   connectTransport,
   createServer,
   startStdioServer
-} from "./chunk-T26NTTAX.js";
+} from "./chunk-K5GYF2LP.js";
 import {
   OPENAI_MODELS,
   OPENAI_MODEL_ALIASES,
@@ -632,7 +632,7 @@ import {
   generateProposalId,
   parseAgentPairKey,
   registerConsensusVoteTool
-} from "./chunk-BH6TCBVV.js";
+} from "./chunk-LY2FJKYX.js";
 import "./chunk-6LDUEA4I.js";
 import {
   allOf
@@ -660,7 +660,7 @@ import {
   requiresHumanApproval,
   validateAgentAction,
   validateCorroboration
-} from "./chunk-FBVOBOHS.js";
+} from "./chunk-PDROJ5FZ.js";
 import {
   GitHubProvider,
   ScmError
@@ -677,14 +677,15 @@ import {
   TRUST_TIER_NUMERIC,
   TrustTierSchema,
   assessReputation,
-  reconcileTrustTier,
+  gateWithReputation,
   resolveEnvMode,
+  resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-HS43MFL4.js";
+} from "./chunk-ULQFMQE7.js";
 import {
   ImprovementReviewInputSchema,
   registerImprovementReviewTool
-} from "./chunk-FR37BYKI.js";
+} from "./chunk-R5F7Y5UY.js";
 import {
   AgentPerformanceSchema,
   ConsensusAlgorithmSchema,
@@ -720,10 +721,10 @@ import {
   toolSuccess,
   toolSuccessStructured,
   validateToolInput
-} from "./chunk-RFK7OJGI.js";
+} from "./chunk-L2BM3TGM.js";
 import {
   VERSION
-} from "./chunk-325ZUIUK.js";
+} from "./chunk-7IDMD4IN.js";
 import {
   AuditTrail,
   MAX_STRIPPED_ELEMENTS_PER_EVENT,
@@ -2702,6 +2703,10 @@ var HostileInputFirewall = class {
   context;
   /** #5382 rollout gate; resolved once at construction, not per call. */
   policyMode;
+  /** #5381 reputation-demotion gate; a DIFFERENT knob from `policyMode`. */
+  reputationGatingMode;
+  /** #5405 seam: how a reputation assessment is obtained. */
+  assessReputationFn;
   constructor(config) {
     const validated = FirewallConfigSchema.parse({
       stages: config.stages,
@@ -2719,6 +2724,8 @@ var HostileInputFirewall = class {
     );
     this.context = validated.context;
     this.policyMode = config.policyMode ?? resolveFirewallPolicyMode(config.env ?? process.env);
+    this.reputationGatingMode = config.reputationGatingMode ?? resolveReputationGatingMode(config.env ?? process.env);
+    this.assessReputationFn = config.reputationAssessor ?? ((metadata) => assessReputation(metadata, this.reputationCache));
   }
   /**
    * Processes untrusted input through the firewall pipeline.
@@ -2733,7 +2740,10 @@ var HostileInputFirewall = class {
     const sanitized = this.runSanitization(meta);
     const trust = this.runClassification(meta, sanitized);
     const reputation = this.runReputation(meta, sanitized);
-    const effectiveTrustTier = reconcileTrustTier(trust.trustTier, reputation);
+    const { tier: effectiveTrustTier, gate: reputationGate } = this.runReputationGate(
+      trust.trustTier,
+      reputation
+    );
     const atl = this.buildATL(meta, effectiveTrustTier, sanitized, reputation);
     const ruleOfTwoViolation = this.stages.policyEnforcement ? checkRuleOfTwo({
       inputTrustTier: effectiveTrustTier,
@@ -2756,6 +2766,7 @@ var HostileInputFirewall = class {
       trust,
       ...reputation !== void 0 ? { reputation } : {},
       effectiveTrustTier,
+      ...reputationGate !== void 0 ? { reputationGate } : {},
       atl,
       ...ruleOfTwoViolation !== void 0 ? { ruleOfTwoViolation } : {},
       policyMode: this.policyMode,
@@ -2912,6 +2923,26 @@ var HostileInputFirewall = class {
     }
     return result;
   }
+  /**
+   * Reconcile the classifier tier with reputation, under the rollout mode
+   * production honours (#3106 reconciliation, #5381 gating).
+   *
+   * #3106's reconciliation is demotion-only; Tier-1/allowlist wins; it equals
+   * the classifier tier when reputation is absent. #5381 puts it behind
+   * `NEXUS_REPUTATION_GATING`, so `audit` is audit-only here too — previously
+   * the firewall enforced unconditionally while production suppressed, on
+   * identical configuration.
+   *
+   * Returns no gate at all when the stage is off, so absence in the result
+   * means "not evaluated" rather than "evaluated, nothing suppressed" —
+   * `demotionSuppressed` is a required boolean and would otherwise report
+   * `false` for a check that never ran.
+   */
+  runReputationGate(classifierTier, reputation) {
+    if (!this.stages.reputationAssessment) return { tier: classifierTier };
+    const gate = gateWithReputation(classifierTier, reputation, this.reputationGatingMode);
+    return { tier: gate.enforcedTier, gate };
+  }
   runReputation(meta, sanitized) {
     if (!this.stages.reputationAssessment) return void 0;
     const metadata = {
@@ -2919,7 +2950,7 @@ var HostileInputFirewall = class {
       authorAssociation: meta.authorAssociation.toUpperCase(),
       injectionFlags: sanitized.injectionFlags
     };
-    const result = assessReputation(metadata, this.reputationCache);
+    const result = this.assessReputationFn(metadata);
     if (this.stages.audit) {
       emitReputationEvent(this.auditTrail, {
         username: meta.username,
@@ -4848,7 +4879,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-ZOGBRT5Z.js");
+    const { executeVoting } = await import("./consensus-vote-ZDBL2EA4.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -5767,6 +5798,7 @@ export {
   resolveFirewallPolicyMode,
   resolveInput,
   resolvePipelineDeps,
+  resolveReputationGatingMode,
   resolveScannerData,
   resolveStringExpressions,
   resolveToken,