nexus-agents 8.8.2 → 8.9.0

package/dist/cli.js

@@ -5,6 +5,7 @@ import {
   formatDetectionMessage
 } from "./chunk-4QHAMZLU.js";
 import {
+  assessPRReputation,
   calculateConsensus,
   countByCategory,
   countBySeverity,
@@ -19,7 +20,7 @@ import {
   parseFindings,
   reviewPostingBlock,
   sumFindings
-} from "./chunk-FBWOWMEB.js";
+} from "./chunk-ISUMI6BV.js";
 import "./chunk-AOS7F4QR.js";
 import {
   runConfigInitSync
@@ -153,7 +154,7 @@ import {
   validateNexusEnv,
   validateWorkflow,
   wrapInMarkdownFence
-} from "./chunk-CQCVEC7P.js";
+} from "./chunk-L4SJAHQF.js";
 import "./chunk-7AU5WLAJ.js";
 import "./chunk-DGWT7DXX.js";
 import "./chunk-64GMIUM5.js";
@@ -161,7 +162,7 @@ import "./chunk-3XQK4MEF.js";
 import {
   CATEGORY_DISPLAY_NAMES,
   DEFAULT_PR_REVIEW_CONFIG
-} from "./chunk-BYUVLVN7.js";
+} from "./chunk-3W4L63ML.js";
 import {
   DATA_SUBDIRECTORIES,
   checkApiKeys,
@@ -173,7 +174,7 @@ import {
   doctorCommand,
   initDataDirectories,
   runDoctor
-} from "./chunk-QY3HOLGD.js";
+} from "./chunk-U4RQ4XPP.js";
 import {
   buildOpenAICompatAdapters,
   readOpenAICompatEnv
@@ -192,7 +193,7 @@ import {
   recordAuthenticVote,
   registerConsensusVoteTool,
   toRecordDecision
-} from "./chunk-SQCFKQUR.js";
+} from "./chunk-YUKNO5ZM.js";
 import {
   loadUsageEvents,
   rollupByModel
@@ -205,16 +206,17 @@ import {
   synthesizeResearch
 } from "./chunk-ZGHJMFQ6.js";
 import {
-  classifyTrust,
+  configureUntrustedInputFirewall,
   createFullGitHubProvider,
   evaluatePolicy,
-  parsePRUrl
-} from "./chunk-MXQG3A5W.js";
+  parsePRUrl,
+  runUntrustedInputFirewall
+} from "./chunk-XTSDR3HE.js";
 import "./chunk-Q5V3KTUL.js";
 import {
   ReputationCache,
   sanitizeInput
-} from "./chunk-N347WXTT.js";
+} from "./chunk-SHE6SSTO.js";
 import {
   ImprovementReviewInputSchema,
   calculateFitnessScore,
@@ -228,16 +230,16 @@ import {
   registerImprovementReviewTool,
   runImprovementReview,
   scanForSecrets
-} from "./chunk-W6SM3MU5.js";
+} from "./chunk-ISE53XGS.js";
 import {
   createDefaultPolicyFirewall,
   setGlobalPolicyFirewall,
   stagePolicyFirewallForRollout
-} from "./chunk-YQUM3UWK.js";
+} from "./chunk-GRBOJFKA.js";
 import {
   VERSION
-} from "./chunk-H5DTHO7O.js";
-import "./chunk-3YKFLM2B.js";
+} from "./chunk-2ONCHXIW.js";
+import "./chunk-LP4W7RTH.js";
 import {
   createUnifiedRegistry,
   getGlobalRegistry
@@ -4175,6 +4177,7 @@ function handleModeCommand(args) {
 
 // src/dogfooding/pr-reviewer.ts
 var logger5 = createLogger({ component: "PRReviewer" });
+var REVIEW_ACCESS_CONTEXT = { hasWriteAccess: true, hasSecretAccess: true };
 var PRReviewer = class {
   config;
   observer;
@@ -4199,21 +4202,26 @@ var PRReviewer = class {
     const fetchResult = await this.fetchPRData(owner, repo, prNumber);
     if (!fetchResult.ok) return fetchResult;
     const { metadata: prMetadata, provider, accountAgeDays } = fetchResult.value;
-    const trustResult = this.classifyPRAuthor(prMetadata);
+    const reputation = assessPRReputation(
+      prMetadata,
+      this.reputationCache,
+      this.config.enableReputation,
+      accountAgeDays
+    );
+    const firewall = this.classifyPRAuthor(prMetadata, reputation);
+    if (!firewall.ok) return firewall;
+    const trustResult = firewall.value.trust;
     logger5.info("PR author trust classified", {
       prNumber,
       author: prMetadata.author,
       trustTier: trustResult.trustTier,
       userRole: trustResult.userRole,
-      isAllowlisted: trustResult.isAllowlisted
+      // Logged only when measured (#4992).
+      ...firewall.value.isAllowlisted !== void 0 ? { isAllowlisted: firewall.value.isAllowlisted } : {}
     });
-    const { gateDecision, trustAssessment } = gatePRAuthor(
-      prMetadata,
-      trustResult,
-      accountAgeDays,
-      this.reputationCache,
-      this.config.enableReputation
-    );
+    const gated = gatePRAuthor(prMetadata, firewall.value, reputation);
+    if (!gated.ok) return gated;
+    const { gateDecision, trustAssessment } = gated.value;
     const expertReviews = await this.runExpertReviews(prMetadata, traceId);
     const result = this.aggregateReviews(prMetadata, expertReviews, startTime, trustAssessment);
     const postOutcome = this.config.dryRun ? { status: "skipped", reason: "dry-run" } : await this.postReviewToGitHub(provider, parseResult.value, result, gateDecision);
@@ -4296,14 +4304,24 @@ var PRReviewer = class {
     };
   }
   /**
-   * Classifies the PR author's trust tier using GitHub author_association.
-   * (Source: Issue #828 — Wire security modules into production pipeline)
+   * Classifies the PR author's trust tier through the shared firewall (#4992;
+   * originally Issue #828 — Wire security modules into production pipeline).
+   *
+   * No maintainer allowlist is passed: there is no source for one today (no
+   * config field, no env var), so none is consulted and `isAllowlisted` stays
+   * absent on the result rather than being recorded as `false`.
    */
-  classifyPRAuthor(pr) {
-    return classifyTrust({
-      username: pr.author,
-      authorAssociation: pr.authorAssociation
-    });
+  classifyPRAuthor(pr, reputation) {
+    return runUntrustedInputFirewall(
+      {
+        type: "pull_request",
+        username: pr.author,
+        authorAssociation: pr.authorAssociation,
+        title: pr.title,
+        body: pr.body
+      },
+      { context: REVIEW_ACCESS_CONTEXT, reputation: { assessment: reputation } }
+    );
   }
   /**
    * Sanitizes untrusted PR content (body/title) before embedding in expert tasks.
@@ -4460,7 +4478,7 @@ ${file.patch}
         violations: policyResult.violations
       });
     }
-    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-4VDGMGV5.js");
+    const { formatReviewComment: formatReviewComment2 } = await import("./pr-reviewer-helpers-IPC6XCRK.js");
     const body = formatReviewComment2(result);
     const postResult = await provider.createReview(pr.prNumber, body, result.decision);
     if (!postResult.ok) {
@@ -4476,8 +4494,7 @@ ${file.patch}
   auditReviewAction(enforcedTier) {
     const context = {
       inputTrustTier: enforcedTier,
-      hasWriteAccess: true,
-      hasSecretAccess: true
+      ...REVIEW_ACCESS_CONTEXT
     };
     const decision = evaluatePolicy(
       {
@@ -19667,7 +19684,7 @@ function startImprovementReviewScheduler(options) {
   let running = false;
   const runOnce = async () => {
     try {
-      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-WTZ4JV5V.js");
+      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-5EYOUAB6.js");
       const input = ImprovementReviewInputSchema2.parse({ fileIssues });
       const result = await runImprovementReview2(input, { logger: logger22 });
       logger22.info("Scheduled improvement_review complete", {
@@ -20310,6 +20327,7 @@ function initV2PipelineSubsystems(logger22, auditLogger) {
   const pipelineEventBus = getPipelineEventBus();
   const bridge = createEventBusBridge({ source: pipelineEventBus });
   startTuneStage(pipelineEventBus, auditLogger !== void 0 ? { auditLogger } : void 0);
+  configureUntrustedInputFirewall(auditLogger !== void 0 ? { auditLogger } : {});
   startSwarmHealthSignals(getSwarmObserver(), pipelineEventBus);
   startFailoverSignals({ pipelineBus: pipelineEventBus });
   startImprovementReviewScheduler();