Skip to content

fix(#2286): add nexus.security to tier-neutral layer in import-linter#2455

Open
windoliver wants to merge 1 commit intodevelopfrom
violationfix/security-imports-in-workflows
Open

fix(#2286): add nexus.security to tier-neutral layer in import-linter#2455
windoliver wants to merge 1 commit intodevelopfrom
violationfix/security-imports-in-workflows

Conversation

@windoliver
Copy link
Collaborator

Summary

  • Add nexus.security to the tier-neutral layer in import-linter config (alongside nexus.contracts and nexus.lib)
  • nexus.security contains only pure utility functions (prompt sanitizer, URL validator, output validator) with zero Nexus-internal dependencies
  • Its own __init__.py declares it "Tier-neutral security package — usable from any Nexus layer"
  • This formalizes the existing tier-neutral status so bricks (e.g. nexus.bricks.workflows.actions) can legitimately import security utilities

Stream: #14

Test plan

  • All 104 security unit tests pass
  • All 155 workflow unit tests pass
  • ruff clean
  • Pre-commit hooks pass

nexus.security contains pure utility functions (prompt sanitizer, URL
validator, output validator) with zero Nexus-internal dependencies.
Its own __init__.py declares it "Tier-neutral security package".
Formally register it in the import-linter layers config alongside
nexus.contracts and nexus.lib so bricks can legitimately import from it.
@github-actions
Copy link
Contributor

Type Safety Progress 📉

Current: 418 type: ignore comments
Baseline: 531 (Phase 3 start)
Change: -113

✅ Progress! Keep eliminating type suppressions!

Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.30.

Benchmark suite Current: a6c2465 Previous: 47412c2 Ratio
tests/benchmarks/test_core_operations.py::TestBlake3HashingBenchmarks::test_hash_1mb_content 3977.9258794501798 iter/sec (stddev: 0.000006327511344586937) 6603.145917940173 iter/sec (stddev: 0.000007410072053980514) 1.66
tests/benchmarks/test_core_operations.py::TestBlake3HashingBenchmarks::test_hash_smart_1mb_content 21226.849244194877 iter/sec (stddev: 0.0000023756089385929686) 34099.54872660558 iter/sec (stddev: 0.0000010957338875135603) 1.61
tests/benchmarks/test_service_delegation.py::TestAsyncDelegationOverhead::test_version_get_delegation 5680.028404337809 iter/sec (stddev: 0.0022656673562020785) 7957.539783610038 iter/sec (stddev: 0.001739169458356453) 1.40
tests/benchmarks/test_service_delegation.py::TestAsyncDelegationOverhead::test_rebac_check_delegation 6636.015543130753 iter/sec (stddev: 0.000021097221920817543) 9133.753611567156 iter/sec (stddev: 0.000019756552545522996) 1.38
tests/benchmarks/test_service_delegation.py::TestAsyncDelegationOverhead::test_mcp_list_mounts_delegation 6702.67856530243 iter/sec (stddev: 0.000024381953804451476) 9260.93481431103 iter/sec (stddev: 0.000025379325687133745) 1.38
tests/benchmarks/test_service_delegation.py::TestAsyncDelegationOverhead::test_oauth_list_providers_delegation 5635.968880271102 iter/sec (stddev: 0.002600093917940425) 7634.806028436233 iter/sec (stddev: 0.0021415115937043604) 1.35
tests/benchmarks/test_service_delegation.py::TestGatewayDelegationOverhead::test_gateway_rebac_check 39257.964013712124 iter/sec (stddev: 0.0017957829008455374) 55641.571970588935 iter/sec (stddev: 0.001539687675707864) 1.42

This comment was automatically generated by workflow using github-action-benchmark.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant