@kindgi/api 0.1.4-rc.1 → 0.1.4-rc.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (217) hide show
  1. package/dist/agent-binding.d.ts +12 -2
  2. package/dist/agent-binding.d.ts.map +1 -1
  3. package/dist/agent-pins.d.ts.map +1 -1
  4. package/dist/agent-pins.js +4 -1
  5. package/dist/agent-pins.js.map +1 -1
  6. package/dist/app.d.ts +8 -0
  7. package/dist/app.d.ts.map +1 -1
  8. package/dist/app.js +23 -4
  9. package/dist/app.js.map +1 -1
  10. package/dist/deploy-versions.d.ts +8 -5
  11. package/dist/deploy-versions.d.ts.map +1 -1
  12. package/dist/deploy-versions.js +3 -9
  13. package/dist/deploy-versions.js.map +1 -1
  14. package/dist/errors.d.ts.map +1 -1
  15. package/dist/errors.js +25 -0
  16. package/dist/errors.js.map +1 -1
  17. package/dist/eval-case-binding.d.ts +10 -0
  18. package/dist/eval-case-binding.d.ts.map +1 -1
  19. package/dist/eval-run-binding.d.ts +14 -3
  20. package/dist/eval-run-binding.d.ts.map +1 -1
  21. package/dist/eval-run-binding.js.map +1 -1
  22. package/dist/flow-pins.d.ts +20 -7
  23. package/dist/flow-pins.d.ts.map +1 -1
  24. package/dist/flow-pins.js +36 -11
  25. package/dist/flow-pins.js.map +1 -1
  26. package/dist/gate-policy-binding.d.ts +164 -0
  27. package/dist/gate-policy-binding.d.ts.map +1 -0
  28. package/dist/gate-policy-binding.js +12 -0
  29. package/dist/gate-policy-binding.js.map +1 -0
  30. package/dist/gate.d.ts +56 -0
  31. package/dist/gate.d.ts.map +1 -0
  32. package/dist/gate.js +359 -0
  33. package/dist/gate.js.map +1 -0
  34. package/dist/handler-binding.d.ts +14 -2
  35. package/dist/handler-binding.d.ts.map +1 -1
  36. package/dist/index.d.ts +10 -4
  37. package/dist/index.d.ts.map +1 -1
  38. package/dist/index.js +3 -1
  39. package/dist/index.js.map +1 -1
  40. package/dist/judged-dispatcher.d.ts +16 -1
  41. package/dist/judged-dispatcher.d.ts.map +1 -1
  42. package/dist/judged-dispatcher.js +45 -6
  43. package/dist/judged-dispatcher.js.map +1 -1
  44. package/dist/judgment-binding.d.ts +38 -0
  45. package/dist/judgment-binding.d.ts.map +1 -1
  46. package/dist/judgment-binding.js +19 -0
  47. package/dist/judgment-binding.js.map +1 -1
  48. package/dist/live-version-binding.d.ts +206 -0
  49. package/dist/live-version-binding.d.ts.map +1 -0
  50. package/dist/live-version-binding.js +4 -0
  51. package/dist/live-version-binding.js.map +1 -0
  52. package/dist/middleware/authorize.d.ts.map +1 -1
  53. package/dist/middleware/authorize.js +13 -2
  54. package/dist/middleware/authorize.js.map +1 -1
  55. package/dist/middleware/project-ref.d.ts +25 -0
  56. package/dist/middleware/project-ref.d.ts.map +1 -0
  57. package/dist/middleware/project-ref.js +72 -0
  58. package/dist/middleware/project-ref.js.map +1 -0
  59. package/dist/openapi/generate.d.ts.map +1 -1
  60. package/dist/openapi/generate.js +4 -0
  61. package/dist/openapi/generate.js.map +1 -1
  62. package/dist/openapi/operations.d.ts +6 -0
  63. package/dist/openapi/operations.d.ts.map +1 -1
  64. package/dist/openapi/operations.js +504 -22
  65. package/dist/openapi/operations.js.map +1 -1
  66. package/dist/openapi/schemas.d.ts +37 -0
  67. package/dist/openapi/schemas.d.ts.map +1 -1
  68. package/dist/openapi/schemas.js +709 -5
  69. package/dist/openapi/schemas.js.map +1 -1
  70. package/dist/publish-refused.d.ts +18 -0
  71. package/dist/publish-refused.d.ts.map +1 -0
  72. package/dist/publish-refused.js +22 -0
  73. package/dist/publish-refused.js.map +1 -0
  74. package/dist/retention-binding.d.ts +29 -0
  75. package/dist/retention-binding.d.ts.map +1 -1
  76. package/dist/routes/agent-releases.d.ts +40 -0
  77. package/dist/routes/agent-releases.d.ts.map +1 -0
  78. package/dist/routes/agent-releases.js +462 -0
  79. package/dist/routes/agent-releases.js.map +1 -0
  80. package/dist/routes/agents.d.ts +7 -1
  81. package/dist/routes/agents.d.ts.map +1 -1
  82. package/dist/routes/agents.js +31 -3
  83. package/dist/routes/agents.js.map +1 -1
  84. package/dist/routes/approvals.d.ts.map +1 -1
  85. package/dist/routes/approvals.js +27 -9
  86. package/dist/routes/approvals.js.map +1 -1
  87. package/dist/routes/audit.d.ts.map +1 -1
  88. package/dist/routes/audit.js +7 -0
  89. package/dist/routes/audit.js.map +1 -1
  90. package/dist/routes/auth.js +1 -1
  91. package/dist/routes/auth.js.map +1 -1
  92. package/dist/routes/conversations.d.ts +0 -7
  93. package/dist/routes/conversations.d.ts.map +1 -1
  94. package/dist/routes/conversations.js +19 -3
  95. package/dist/routes/conversations.js.map +1 -1
  96. package/dist/routes/deployments.d.ts +6 -0
  97. package/dist/routes/deployments.d.ts.map +1 -1
  98. package/dist/routes/deployments.js +33 -5
  99. package/dist/routes/deployments.js.map +1 -1
  100. package/dist/routes/env.d.ts.map +1 -1
  101. package/dist/routes/env.js +1 -0
  102. package/dist/routes/env.js.map +1 -1
  103. package/dist/routes/eval-comparison.d.ts +2 -1
  104. package/dist/routes/eval-comparison.d.ts.map +1 -1
  105. package/dist/routes/eval-comparison.js +22 -9
  106. package/dist/routes/eval-comparison.js.map +1 -1
  107. package/dist/routes/flows.d.ts +14 -7
  108. package/dist/routes/flows.d.ts.map +1 -1
  109. package/dist/routes/flows.js +10 -8
  110. package/dist/routes/flows.js.map +1 -1
  111. package/dist/routes/gate-policies.d.ts +19 -0
  112. package/dist/routes/gate-policies.d.ts.map +1 -0
  113. package/dist/routes/gate-policies.js +191 -0
  114. package/dist/routes/gate-policies.js.map +1 -0
  115. package/dist/routes/gate-policy-spec.d.ts +17 -0
  116. package/dist/routes/gate-policy-spec.d.ts.map +1 -0
  117. package/dist/routes/gate-policy-spec.js +192 -0
  118. package/dist/routes/gate-policy-spec.js.map +1 -0
  119. package/dist/routes/gate-policy-wire.d.ts +3 -0
  120. package/dist/routes/gate-policy-wire.d.ts.map +1 -0
  121. package/dist/routes/gate-policy-wire.js +18 -0
  122. package/dist/routes/gate-policy-wire.js.map +1 -0
  123. package/dist/routes/hierarchy-errors.d.ts +11 -0
  124. package/dist/routes/hierarchy-errors.d.ts.map +1 -1
  125. package/dist/routes/hierarchy-errors.js +13 -0
  126. package/dist/routes/hierarchy-errors.js.map +1 -1
  127. package/dist/routes/judged-suites.js +7 -0
  128. package/dist/routes/judged-suites.js.map +1 -1
  129. package/dist/routes/judgments.d.ts +4 -1
  130. package/dist/routes/judgments.d.ts.map +1 -1
  131. package/dist/routes/judgments.js +92 -19
  132. package/dist/routes/judgments.js.map +1 -1
  133. package/dist/routes/live-scope-wire.d.ts +32 -0
  134. package/dist/routes/live-scope-wire.d.ts.map +1 -0
  135. package/dist/routes/live-scope-wire.js +71 -0
  136. package/dist/routes/live-scope-wire.js.map +1 -0
  137. package/dist/routes/policies.d.ts +6 -3
  138. package/dist/routes/policies.d.ts.map +1 -1
  139. package/dist/routes/policies.js +55 -3
  140. package/dist/routes/policies.js.map +1 -1
  141. package/dist/routes/projects.d.ts.map +1 -1
  142. package/dist/routes/projects.js +47 -3
  143. package/dist/routes/projects.js.map +1 -1
  144. package/dist/routes/retention.d.ts.map +1 -1
  145. package/dist/routes/retention.js +18 -2
  146. package/dist/routes/retention.js.map +1 -1
  147. package/dist/routes/reviewers.d.ts +8 -1
  148. package/dist/routes/reviewers.d.ts.map +1 -1
  149. package/dist/routes/reviewers.js +20 -3
  150. package/dist/routes/reviewers.js.map +1 -1
  151. package/dist/routes/runs.d.ts.map +1 -1
  152. package/dist/routes/runs.js +22 -13
  153. package/dist/routes/runs.js.map +1 -1
  154. package/dist/routes/secrets.d.ts.map +1 -1
  155. package/dist/routes/secrets.js +2 -0
  156. package/dist/routes/secrets.js.map +1 -1
  157. package/dist/routes/segments.d.ts +17 -0
  158. package/dist/routes/segments.d.ts.map +1 -0
  159. package/dist/routes/segments.js +68 -0
  160. package/dist/routes/segments.js.map +1 -0
  161. package/dist/routes/teams.d.ts.map +1 -1
  162. package/dist/routes/teams.js +42 -3
  163. package/dist/routes/teams.js.map +1 -1
  164. package/dist/routes/uuid-param.d.ts +11 -0
  165. package/dist/routes/uuid-param.d.ts.map +1 -0
  166. package/dist/routes/uuid-param.js +19 -0
  167. package/dist/routes/uuid-param.js.map +1 -0
  168. package/openapi.json +6995 -3625
  169. package/package.json +21 -21
  170. package/src/agent-binding.ts +12 -2
  171. package/src/agent-pins.ts +3 -1
  172. package/src/app.ts +37 -3
  173. package/src/deploy-versions.ts +11 -14
  174. package/src/errors.ts +25 -0
  175. package/src/eval-case-binding.ts +7 -0
  176. package/src/eval-run-binding.ts +24 -3
  177. package/src/flow-pins.ts +49 -9
  178. package/src/gate-policy-binding.ts +171 -0
  179. package/src/gate.ts +467 -0
  180. package/src/handler-binding.ts +14 -2
  181. package/src/index.ts +46 -1
  182. package/src/judged-dispatcher.ts +74 -6
  183. package/src/judgment-binding.ts +62 -0
  184. package/src/live-version-binding.ts +237 -0
  185. package/src/middleware/authorize.ts +18 -2
  186. package/src/middleware/project-ref.ts +88 -0
  187. package/src/openapi/generate.ts +5 -0
  188. package/src/openapi/operations.ts +609 -22
  189. package/src/openapi/schemas.ts +788 -5
  190. package/src/publish-refused.ts +31 -0
  191. package/src/retention-binding.ts +30 -0
  192. package/src/routes/agent-releases.ts +581 -0
  193. package/src/routes/agents.ts +43 -2
  194. package/src/routes/approvals.ts +36 -8
  195. package/src/routes/audit.ts +10 -0
  196. package/src/routes/auth.ts +1 -1
  197. package/src/routes/conversations.ts +31 -3
  198. package/src/routes/deployments.ts +50 -5
  199. package/src/routes/env.ts +1 -0
  200. package/src/routes/eval-comparison.ts +24 -10
  201. package/src/routes/flows.ts +27 -11
  202. package/src/routes/gate-policies.ts +226 -0
  203. package/src/routes/gate-policy-spec.ts +229 -0
  204. package/src/routes/gate-policy-wire.ts +20 -0
  205. package/src/routes/hierarchy-errors.ts +14 -0
  206. package/src/routes/judged-suites.ts +5 -0
  207. package/src/routes/judgments.ts +107 -23
  208. package/src/routes/live-scope-wire.ts +90 -0
  209. package/src/routes/policies.ts +61 -3
  210. package/src/routes/projects.ts +54 -2
  211. package/src/routes/retention.ts +21 -2
  212. package/src/routes/reviewers.ts +23 -4
  213. package/src/routes/runs.ts +33 -20
  214. package/src/routes/secrets.ts +2 -0
  215. package/src/routes/segments.ts +75 -0
  216. package/src/routes/teams.ts +53 -3
  217. package/src/routes/uuid-param.ts +28 -0
@@ -0,0 +1,192 @@
1
+ // SPDX-License-Identifier: Apache-2.0
2
+ // Copyright (C) 2026 Kindgi Inc.
3
+ import { REVIEWER_ROLE_RANK } from '@kindgi/authz';
4
+ import { GATE_METRICS } from '../gate-policy-binding.js';
5
+ const REVIEWER_ROLES = Object.keys(REVIEWER_ROLE_RANK);
6
+ const isObject = (v) => v !== null && typeof v === 'object' && !Array.isArray(v);
7
+ /** Keys the policy may not use yet, with why. */
8
+ const LATER = {
9
+ '/spec/approvals/count': 'one reviewer decides a promotion today; leave `count` out',
10
+ '/spec/approvals/forRollback': "rollbacks aren't gated yet; leave `forRollback` out",
11
+ };
12
+ function unknownKeys(raw, allowed, at, issues) {
13
+ for (const key of Object.keys(raw)) {
14
+ if (allowed.includes(key))
15
+ continue;
16
+ const path = `${at}/${key}`;
17
+ issues.push({
18
+ path,
19
+ message: LATER[path] ??
20
+ `\`${key}\` isn't a gate policy setting here (expected: ${allowed.join(', ')})`,
21
+ });
22
+ }
23
+ }
24
+ /** A number in [min, max], when present. */
25
+ function num(raw, key, at, issues, opts) {
26
+ const v = raw[key];
27
+ if (v === undefined)
28
+ return undefined;
29
+ const ok = typeof v === 'number' &&
30
+ Number.isFinite(v) &&
31
+ v >= opts.min &&
32
+ (opts.max === undefined || v <= opts.max) &&
33
+ (opts.integer !== true || Number.isInteger(v)) &&
34
+ (opts.positive !== true || v > 0);
35
+ if (!ok) {
36
+ const range = opts.max === undefined ? `at least ${opts.min}` : `${opts.min} to ${opts.max}`;
37
+ issues.push({
38
+ path: `${at}/${key}`,
39
+ message: `\`${key}\` must be ${opts.integer === true ? 'a whole number' : 'a number'}, ${opts.positive === true ? 'above 0' : range}`,
40
+ });
41
+ return undefined;
42
+ }
43
+ return v;
44
+ }
45
+ function bool(raw, key, at, issues) {
46
+ const v = raw[key];
47
+ if (v === undefined)
48
+ return undefined;
49
+ if (typeof v !== 'boolean') {
50
+ issues.push({ path: `${at}/${key}`, message: `\`${key}\` must be true or false` });
51
+ return undefined;
52
+ }
53
+ return v;
54
+ }
55
+ function block(raw, key, issues) {
56
+ const v = raw[key];
57
+ if (v === undefined)
58
+ return undefined;
59
+ if (!isObject(v)) {
60
+ issues.push({ path: `/spec/${key}`, message: `\`${key}\` must be an object` });
61
+ return undefined;
62
+ }
63
+ return v;
64
+ }
65
+ export function parseGatePolicySpec(raw) {
66
+ if (!isObject(raw)) {
67
+ return { kind: 'err', issues: [{ path: '/spec', message: '`spec` must be an object' }] };
68
+ }
69
+ const issues = [];
70
+ unknownKeys(raw, ['comparison', 'evidence', 'metrics', 'replay', 'approvals', 'onlyRestrictedClasses'], '/spec', issues);
71
+ const spec = {};
72
+ const comparison = block(raw, 'comparison', issues);
73
+ if (comparison !== undefined) {
74
+ const at = '/spec/comparison';
75
+ unknownKeys(comparison, ['maxAgeHours', 'suite'], at, issues);
76
+ const maxAgeHours = num(comparison, 'maxAgeHours', at, issues, { min: 0, positive: true });
77
+ let suite;
78
+ if (comparison.suite !== undefined) {
79
+ const s = comparison.suite;
80
+ if (!isObject(s) || typeof s.id !== 'string' || s.id === '') {
81
+ issues.push({ path: `${at}/suite`, message: '`suite` must be `{ id, version? }`' });
82
+ }
83
+ else {
84
+ unknownKeys(s, ['id', 'version'], `${at}/suite`, issues);
85
+ if (s.version !== undefined && (typeof s.version !== 'string' || s.version === '')) {
86
+ issues.push({ path: `${at}/suite/version`, message: '`version` must be a version' });
87
+ }
88
+ suite = { id: s.id, ...(typeof s.version === 'string' && { version: s.version }) };
89
+ }
90
+ }
91
+ spec.comparison = {
92
+ ...(maxAgeHours !== undefined && { maxAgeHours }),
93
+ ...(suite !== undefined && { suite }),
94
+ };
95
+ }
96
+ const evidence = block(raw, 'evidence', issues);
97
+ if (evidence !== undefined) {
98
+ const at = '/spec/evidence';
99
+ unknownKeys(evidence, ['minCases', 'minWeight'], at, issues);
100
+ const minCases = num(evidence, 'minCases', at, issues, { min: 0, integer: true });
101
+ const minWeight = num(evidence, 'minWeight', at, issues, { min: 0 });
102
+ spec.evidence = {
103
+ ...(minCases !== undefined && { minCases }),
104
+ ...(minWeight !== undefined && { minWeight }),
105
+ };
106
+ }
107
+ if (raw.metrics !== undefined) {
108
+ if (!Array.isArray(raw.metrics)) {
109
+ issues.push({ path: '/spec/metrics', message: '`metrics` must be a list' });
110
+ }
111
+ else {
112
+ const metrics = [];
113
+ const seen = new Set();
114
+ raw.metrics.forEach((m, i) => {
115
+ const at = `/spec/metrics/${i}`;
116
+ const before = issues.length;
117
+ if (!isObject(m)) {
118
+ issues.push({ path: at, message: 'each metric must be an object' });
119
+ return;
120
+ }
121
+ unknownKeys(m, ['name', 'k', 'minCandidate', 'maxDrop'], at, issues);
122
+ const name = m.name;
123
+ if (typeof name !== 'string' || !GATE_METRICS.includes(name)) {
124
+ issues.push({
125
+ path: `${at}/name`,
126
+ message: `\`name\` must be one of: ${GATE_METRICS.join(', ')}`,
127
+ });
128
+ return;
129
+ }
130
+ if (seen.has(name)) {
131
+ issues.push({ path: `${at}/name`, message: `\`${name}\` is gated twice` });
132
+ return;
133
+ }
134
+ seen.add(name);
135
+ if (m.k !== undefined && name !== 'weightedPrecisionAtK') {
136
+ issues.push({ path: `${at}/k`, message: '`k` applies to `weightedPrecisionAtK` only' });
137
+ }
138
+ const k = num(m, 'k', at, issues, { min: 1, max: 100, integer: true });
139
+ const minCandidate = num(m, 'minCandidate', at, issues, { min: 0, max: 1 });
140
+ const maxDrop = num(m, 'maxDrop', at, issues, { min: 0, max: 1 });
141
+ if (minCandidate === undefined && maxDrop === undefined && issues.length === before) {
142
+ issues.push({
143
+ path: at,
144
+ message: `\`${name}\` needs \`minCandidate\`, \`maxDrop\` or both: what it must reach`,
145
+ });
146
+ }
147
+ metrics.push({
148
+ name: name,
149
+ ...(k !== undefined && { k }),
150
+ ...(minCandidate !== undefined && { minCandidate }),
151
+ ...(maxDrop !== undefined && { maxDrop }),
152
+ });
153
+ });
154
+ spec.metrics = metrics;
155
+ }
156
+ }
157
+ const replay = block(raw, 'replay', issues);
158
+ if (replay !== undefined) {
159
+ const at = '/spec/replay';
160
+ const knobs = ['maxDiverged', 'maxErrors', 'maxRefusedWrites', 'maxStopped'];
161
+ unknownKeys(replay, knobs, at, issues);
162
+ const out = {};
163
+ for (const knob of knobs) {
164
+ const v = num(replay, knob, at, issues, { min: 0, integer: true });
165
+ if (v !== undefined)
166
+ out[knob] = v;
167
+ }
168
+ spec.replay = out;
169
+ }
170
+ const approvals = block(raw, 'approvals', issues);
171
+ if (approvals !== undefined) {
172
+ const at = '/spec/approvals';
173
+ unknownKeys(approvals, ['role', 'separateApprover'], at, issues);
174
+ const role = approvals.role;
175
+ if (role !== undefined && !REVIEWER_ROLES.includes(role)) {
176
+ issues.push({
177
+ path: `${at}/role`,
178
+ message: `\`role\` must be one of: ${REVIEWER_ROLES.join(', ')}`,
179
+ });
180
+ }
181
+ const separateApprover = bool(approvals, 'separateApprover', at, issues);
182
+ spec.approvals = {
183
+ ...(typeof role === 'string' && { role: role }),
184
+ ...(separateApprover !== undefined && { separateApprover }),
185
+ };
186
+ }
187
+ const onlyRestricted = bool(raw, 'onlyRestrictedClasses', '/spec', issues);
188
+ if (onlyRestricted !== undefined)
189
+ spec.onlyRestrictedClasses = onlyRestricted;
190
+ return issues.length > 0 ? { kind: 'err', issues } : { kind: 'ok', spec };
191
+ }
192
+ //# sourceMappingURL=gate-policy-spec.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"gate-policy-spec.js","sourceRoot":"","sources":["../../src/routes/gate-policy-spec.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,kBAAkB,EAAqB,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,YAAY,EAA4C,MAAM,2BAA2B,CAAC;AAcnG,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAA4B,CAAC;AAElF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAY,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEpG,iDAAiD;AACjD,MAAM,KAAK,GAAqC;IAC9C,uBAAuB,EAAE,2DAA2D;IACpF,6BAA6B,EAAE,qDAAqD;CACrF,CAAC;AAEF,SAAS,WAAW,CAAC,GAAQ,EAAE,OAA0B,EAAE,EAAU,EAAE,MAAmB;IACxF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,OAAO,EACL,KAAK,CAAC,IAAI,CAAC;gBACX,KAAK,GAAG,kDAAkD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SAClF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,SAAS,GAAG,CACV,GAAQ,EACR,GAAW,EACX,EAAU,EACV,MAAmB,EACnB,IAA0E;IAE1E,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,EAAE,GACN,OAAO,CAAC,KAAK,QAAQ;QACrB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClB,CAAC,IAAI,IAAI,CAAC,GAAG;QACb,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC;QACzC,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7F,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE;YACpB,OAAO,EAAE,KAAK,GAAG,cAAc,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE;SACtI,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CAAW,CAAC;AACrB,CAAC;AAED,SAAS,IAAI,CAAC,GAAQ,EAAE,GAAW,EAAE,EAAU,EAAE,MAAmB;IAClE,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,GAAG,0BAA0B,EAAE,CAAC,CAAC;QACnF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,GAAQ,EAAE,GAAW,EAAE,MAAmB;IACvD,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,GAAG,sBAAsB,EAAE,CAAC,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAY;IAEZ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,WAAW,CACT,GAAG,EACH,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,CAAC,EACrF,OAAO,EACP,MAAM,CACP,CAAC;IACF,MAAM,IAAI,GAEN,EAAE,CAAC;IAEP,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,kBAAkB,CAAC;QAC9B,WAAW,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,IAAI,KAAmD,CAAC;QACxD,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACzD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,EAAE,CAAC;oBACnF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACrF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,GAAG;YAChB,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,gBAAgB,CAAC;QAC5B,WAAW,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,GAAG;YACd,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC3C,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAqB,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE;gBAC5C,MAAM,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;gBACD,WAAW,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;gBACrE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAE,YAAkC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpF,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,GAAG,EAAE,OAAO;wBAClB,OAAO,EAAE,4BAA4B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBAC/D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,mBAAmB,EAAE,CAAC,CAAC;oBAC3E,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACf,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBACzD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;gBAC1F,CAAC;gBACD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvE,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC5E,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAClE,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACpF,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,EAAE;wBACR,OAAO,EAAE,KAAK,IAAI,oEAAoE;qBACvF,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAA8B;oBACpC,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC7B,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,CAAC;oBACnD,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,cAAc,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,YAAY,CAAU,CAAC;QACtF,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAyD,EAAE,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,iBAAiB,CAAC;QAC7B,WAAW,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAE,cAAqC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,EAAE,OAAO;gBAClB,OAAO,EAAE,4BAA4B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,SAAS,GAAG;YACf,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,EAAE,IAAI,EAAE,IAAoB,EAAE,CAAC;YAC/D,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,qBAAqB,GAAG,cAAc,CAAC;IAE9E,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC"}
@@ -0,0 +1,3 @@
1
+ import type { GatePolicy } from '../gate-policy-binding.js';
2
+ export declare function serializeGatePolicy(p: GatePolicy): Record<string, unknown>;
3
+ //# sourceMappingURL=gate-policy-wire.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"gate-policy-wire.d.ts","sourceRoot":"","sources":["../../src/routes/gate-policy-wire.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAG5D,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa1E"}
@@ -0,0 +1,18 @@
1
+ // SPDX-License-Identifier: Apache-2.0
2
+ // Copyright (C) 2026 Kindgi Inc.
3
+ import { liveScopeToWire } from './live-scope-wire.js';
4
+ export function serializeGatePolicy(p) {
5
+ return {
6
+ id: p.id,
7
+ version: p.version,
8
+ agentId: p.agentId,
9
+ scope: liveScopeToWire(p.scope),
10
+ spec: p.spec,
11
+ ...(p.description !== undefined && { description: p.description }),
12
+ createdAt: p.createdAt,
13
+ ...(p.unregisteredAt !== undefined && {
14
+ unregisteredAt: p.unregisteredAt,
15
+ }),
16
+ };
17
+ }
18
+ //# sourceMappingURL=gate-policy-wire.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"gate-policy-wire.js","sourceRoot":"","sources":["../../src/routes/gate-policy-wire.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAGjC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,UAAU,mBAAmB,CAAC,CAAa;IAC/C,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI;YACpC,cAAc,EAAE,CAAC,CAAC,cAAmC;SACtD,CAAC;KACH,CAAC;AACJ,CAAC"}
@@ -42,4 +42,15 @@ export declare function projectDefaultAlreadyExistsError(): {
42
42
  readonly code: "project-default-already-exists";
43
43
  readonly message: "The tenant already has a Default project";
44
44
  };
45
+ /**
46
+ * `501 authz-membership-unsupported`: authorization is enforced, but the
47
+ * tenant-hierarchy binding can't change a membership together with its
48
+ * authorization tuple (it has no `method`). Nothing is changed: removing
49
+ * the row alone would leave the user's permission in place.
50
+ */
51
+ export declare function membershipNotKeptInStepError(method: string): {
52
+ readonly code: "authz-membership-unsupported";
53
+ readonly message: `This runtime can't keep permissions in step with a membership change (its tenant-hierarchy binding has no ${string}), so nothing was changed.`;
54
+ readonly method: string;
55
+ };
45
56
  //# sourceMappingURL=hierarchy-errors.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"hierarchy-errors.d.ts","sourceRoot":"","sources":["../../src/routes/hierarchy-errors.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAE3D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM;;;;;EAU1E;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE;;;;;EAQlE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM;;;;EAE7C;AAED,8EAA8E;AAC9E,wBAAgB,gCAAgC;;;EAK/C"}
1
+ {"version":3,"file":"hierarchy-errors.d.ts","sourceRoot":"","sources":["../../src/routes/hierarchy-errors.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAE3D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM;;;;;EAU1E;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE;;;;;EAQlE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM;;;;EAE7C;AAED,8EAA8E;AAC9E,wBAAgB,gCAAgC;;;EAK/C;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM;;;;EAM1D"}
@@ -44,4 +44,17 @@ export function projectDefaultAlreadyExistsError() {
44
44
  message: 'The tenant already has a Default project',
45
45
  };
46
46
  }
47
+ /**
48
+ * `501 authz-membership-unsupported`: authorization is enforced, but the
49
+ * tenant-hierarchy binding can't change a membership together with its
50
+ * authorization tuple (it has no `method`). Nothing is changed: removing
51
+ * the row alone would leave the user's permission in place.
52
+ */
53
+ export function membershipNotKeptInStepError(method) {
54
+ return {
55
+ code: 'authz-membership-unsupported',
56
+ message: `This runtime can't keep permissions in step with a membership change (its tenant-hierarchy binding has no ${method}), so nothing was changed.`,
57
+ method,
58
+ };
59
+ }
47
60
  //# sourceMappingURL=hierarchy-errors.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"hierarchy-errors.js","sourceRoot":"","sources":["../../src/routes/hierarchy-errors.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAWjC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2B,EAAE,IAAY;IACzE,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EACL,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,4CAA4C,IAAI,+DAA+D;YACjH,CAAC,CAAC,WAAW,QAAQ,gCAAgC,IAAI,GAAG;QAChE,QAAQ;QACR,IAAI;KACI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAwB;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,6CAA6C,KAAK,4FAA4F;QACvJ,QAAQ,EAAE,SAAS;QACnB,KAAK;KACG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,KAAK,GAAG,EAAE,KAAK,EAAW,CAAC;AACzF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,0CAA0C;KAC3C,CAAC;AACb,CAAC"}
1
+ {"version":3,"file":"hierarchy-errors.js","sourceRoot":"","sources":["../../src/routes/hierarchy-errors.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAWjC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2B,EAAE,IAAY;IACzE,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EACL,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,4CAA4C,IAAI,+DAA+D;YACjH,CAAC,CAAC,WAAW,QAAQ,gCAAgC,IAAI,GAAG;QAChE,QAAQ;QACR,IAAI;KACI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAwB;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,6CAA6C,KAAK,4FAA4F;QACvJ,QAAQ,EAAE,SAAS;QACnB,KAAK;KACG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,KAAK,GAAG,EAAE,KAAK,EAAW,CAAC;AACzF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,0CAA0C;KAC3C,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAc;IACzD,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,6GAA6G,MAAM,4BAA4B;QACxJ,MAAM;KACE,CAAC;AACb,CAAC"}
@@ -170,12 +170,18 @@ async function summarize(key, judgments, weightOf) {
170
170
  let no = 0;
171
171
  let yesWeight = 0;
172
172
  let totalWeight = 0;
173
+ // What judges a class was restricted to asserted, as it was when each judgment was recorded.
174
+ const restricted = { yesWeight: 0, totalWeight: 0 };
173
175
  for (const j of judgments) {
174
176
  const w = await weightOf(j.judgeClassId);
175
177
  totalWeight += w;
178
+ if (j.restricted === true)
179
+ restricted.totalWeight += w;
176
180
  if (j.verdict === 'yes') {
177
181
  yes += 1;
178
182
  yesWeight += w;
183
+ if (j.restricted === true)
184
+ restricted.yesWeight += w;
179
185
  }
180
186
  else {
181
187
  no += 1;
@@ -190,6 +196,7 @@ async function summarize(key, judgments, weightOf) {
190
196
  no,
191
197
  yesWeight,
192
198
  totalWeight,
199
+ restricted,
193
200
  reasons: judgments.flatMap((j) => j.reason !== undefined ? [{ verdict: j.verdict, reason: j.reason }] : []),
194
201
  };
195
202
  }
@@ -1 +1 @@
1
- {"version":3,"file":"judged-suites.js","sourceRoot":"","sources":["../../src/routes/judged-suites.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAkB,GAAG,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAetD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,IAAI,GAAG,GAAG,CAAC;AACjB,MAAM,SAAS,GAAG,mCAAmC,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAgC,EAChC,SAAkC,EAClC,KAA2B,EAC3B,UAAuB;IAEvB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAU,CAAC;IAE7B,CAAC,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IACE,UAAU,KAAK,SAAS;YACxB,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EACnE,CAAC;YACD,OAAO,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,iDAAiD,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,IAAI,CACT,CAAC,EACD,yBAAyB,EACzB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAA0B,CAAC;QAC9D,MAAM,aAAa,GACjB,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAE,SAAS,CAAC,KAAK,CAAC,EAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE;gBACL,EAAE,EAAE,OAAO;gBACX,QAAQ;gBACR,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,QAAQ;gBACd,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxE,IAAI,EAAE;oBACJ,MAAM,EAAE,WAAW;oBACnB,kEAAkE;oBAClE,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;oBAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAClC;aACF;YACD,aAAa,EAAE,CAAC,EAAE,EAAE,EAAE,CACpB,eAAe,CACb,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAC/D,aAAa,CACd;SACJ,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC1C,OAAO,IAAI,CACT,CAAC,EACD,+BAA+B,EAC/B,eAAe,OAAO,cAAc,IAAI,CAAC,OAAO,0BAA0B,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,IAAI,CAAC,SAAS,0BAA0B,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,CAAC,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IACE,UAAU,KAAK,SAAS;YACxB,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,EAC9D,CAAC;YACD,OAAO,IAAI,CAAC,CAAC,EAAE,sBAAsB,EAAE,kBAAkB,OAAO,IAAI,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC;YACjC,QAAQ;YACR,OAAO;YACP,OAAO;YACP,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC;YAChD,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAgB,EAAE,CAAC;SAC/E,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,IAAI,CAAC,CAAkB,EAAE,IAAY,EAAE,OAAe;IAC7D,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAU,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAoBD,+FAA+F;AAC/F,SAAS,YAAY,CACnB,SAAkC,EAClC,QAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,EAAE;QAC5B,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,QAAkB,EAClB,IAAe;IAEf,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IAC7E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,EAAE,CAAC;AAC/D,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,UAAU,CACvB,SAAkC,EAClC,QAAkB,EAClB,IAAe;IAEf,MAAM,IAAI,GAAG,SAAS,CAAC,cAAwE,CAAC;IAChG,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACzD,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,MAAM,IAAI,gBAAgB;gBAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACvF,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,MAA8B,EAC9B,CAAqB,EACrB,QAA+D;IAE/D,MAAM,IAAI,GACR,CAAC,CAAC,aAAa,KAAK,SAAS;QAC3B,CAAC,CAAC,MAAM,CAAC,SAAS;QAClB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CACrB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CACjF,CAAC;IACR,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,KAAK;QACjB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,SAA8B,EAC9B,QAA+D;IAE/D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACzC,WAAW,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACxB,GAAG,IAAI,CAAC,CAAC;YACT,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChE,GAAG;QACH,EAAE;QACF,SAAS;QACT,WAAW;QACX,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACzE;KACF,CAAC;AACJ,CAAC;AAQD,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AAExF,+FAA+F;AAC/F,SAAS,kBAAkB,CAAC,CAA0B;IACpD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,KAAK,8BAA8B,CAAC;QAC3F,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,OAAO,GAAG,KAAK,4BAA4B,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpE,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,SAAS,oBAAoB,CAC3B,CAA0B;IAE1B,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;IAC5B,IACE,GAAG,KAAK,SAAS;QACjB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EACjF,CAAC;QACD,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAK,GAAc,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,0CAA0C,CAAC;IACpD,CAAC;IACD,OAAO;QACL,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,GAAe,EAAE,CAAC;QAC5D,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,GAAa,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,CAA0B;IAC5C,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,MAAM,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAqB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/E,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO;QACL,IAAI,EAAE,IAAI;QACV,IAAI,EAAE;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAsB;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACxE,KAAK;SACN;KACF,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"judged-suites.js","sourceRoot":"","sources":["../../src/routes/judged-suites.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAkB,GAAG,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAetD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,IAAI,GAAG,GAAG,CAAC;AACjB,MAAM,SAAS,GAAG,mCAAmC,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAgC,EAChC,SAAkC,EAClC,KAA2B,EAC3B,UAAuB;IAEvB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAU,CAAC;IAE7B,CAAC,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IACE,UAAU,KAAK,SAAS;YACxB,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EACnE,CAAC;YACD,OAAO,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,iDAAiD,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,IAAI,CACT,CAAC,EACD,yBAAyB,EACzB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAA0B,CAAC;QAC9D,MAAM,aAAa,GACjB,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAE,SAAS,CAAC,KAAK,CAAC,EAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE;gBACL,EAAE,EAAE,OAAO;gBACX,QAAQ;gBACR,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,QAAQ;gBACd,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxE,IAAI,EAAE;oBACJ,MAAM,EAAE,WAAW;oBACnB,kEAAkE;oBAClE,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;oBAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAClC;aACF;YACD,aAAa,EAAE,CAAC,EAAE,EAAE,EAAE,CACpB,eAAe,CACb,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAC/D,aAAa,CACd;SACJ,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC1C,OAAO,IAAI,CACT,CAAC,EACD,+BAA+B,EAC/B,eAAe,OAAO,cAAc,IAAI,CAAC,OAAO,0BAA0B,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,IAAI,CAAC,SAAS,0BAA0B,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,CAAC,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IACE,UAAU,KAAK,SAAS;YACxB,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,EAC9D,CAAC;YACD,OAAO,IAAI,CAAC,CAAC,EAAE,sBAAsB,EAAE,kBAAkB,OAAO,IAAI,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC;YACjC,QAAQ;YACR,OAAO;YACP,OAAO;YACP,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC;YAChD,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAgB,EAAE,CAAC;SAC/E,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,IAAI,CAAC,CAAkB,EAAE,IAAY,EAAE,OAAe;IAC7D,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAU,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAoBD,+FAA+F;AAC/F,SAAS,YAAY,CACnB,SAAkC,EAClC,QAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,EAAE;QAC5B,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,QAAkB,EAClB,IAAe;IAEf,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IAC7E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,EAAE,CAAC;AAC/D,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,UAAU,CACvB,SAAkC,EAClC,QAAkB,EAClB,IAAe;IAEf,MAAM,IAAI,GAAG,SAAS,CAAC,cAAwE,CAAC;IAChG,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACzD,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,MAAM,IAAI,gBAAgB;gBAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACvF,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,MAA8B,EAC9B,CAAqB,EACrB,QAA+D;IAE/D,MAAM,IAAI,GACR,CAAC,CAAC,aAAa,KAAK,SAAS;QAC3B,CAAC,CAAC,MAAM,CAAC,SAAS;QAClB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CACrB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CACjF,CAAC;IACR,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,KAAK;QACjB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,SAA8B,EAC9B,QAA+D;IAE/D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,6FAA6F;IAC7F,MAAM,UAAU,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACzC,WAAW,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;YAAE,UAAU,CAAC,WAAW,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACxB,GAAG,IAAI,CAAC,CAAC;YACT,SAAS,IAAI,CAAC,CAAC;YACf,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;gBAAE,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChE,GAAG;QACH,EAAE;QACF,SAAS;QACT,WAAW;QACX,UAAU;QACV,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACzE;KACF,CAAC;AACJ,CAAC;AAQD,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AAExF,+FAA+F;AAC/F,SAAS,kBAAkB,CAAC,CAA0B;IACpD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,KAAK,8BAA8B,CAAC;QAC3F,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,OAAO,GAAG,KAAK,4BAA4B,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpE,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,SAAS,oBAAoB,CAC3B,CAA0B;IAE1B,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;IAC5B,IACE,GAAG,KAAK,SAAS;QACjB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EACjF,CAAC;QACD,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAK,GAAc,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,0CAA0C,CAAC;IACpD,CAAC;IACD,OAAO;QACL,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,GAAe,EAAE,CAAC;QAC5D,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,GAAa,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,CAA0B;IAC5C,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,MAAM,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAqB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/E,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO;QACL,IAAI,EAAE,IAAI;QACV,IAAI,EAAE;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAsB;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACxE,KAAK;SACN;KACF,CAAC;AACJ,CAAC"}
@@ -4,6 +4,7 @@ import type { RunBinding } from '@kindgi/runtime';
4
4
  import type { FlowRegistryBinding } from '../flow-binding.js';
5
5
  import { type JudgmentRegistryBinding } from '../judgment-binding.js';
6
6
  import type { Authorizer } from '../middleware/authorize.js';
7
+ import type { ReviewerBinding } from '../reviewer-binding.js';
7
8
  import type { AppEnv } from '../types.js';
8
9
  /**
9
10
  * Judgments: yes or no, with an optional reason, about one item of a
@@ -20,7 +21,9 @@ import type { AppEnv } from '../types.js';
20
21
  * the judgment's project (`read` / `write`), since a judgment outlives
21
22
  * its run.
22
23
  */
23
- export declare function judgmentsRouter(binding: JudgmentRegistryBinding, runBinding: RunBinding, authorizer?: Authorizer, conversations?: ConversationBinding, flows?: FlowRegistryBinding): Hono<AppEnv>;
24
+ export declare function judgmentsRouter(binding: JudgmentRegistryBinding, runBinding: RunBinding, authorizer?: Authorizer, conversations?: ConversationBinding, flows?: FlowRegistryBinding,
25
+ /** Whose reviewer role a restricted judge class checks (T200). */
26
+ reviewers?: ReviewerBinding): Hono<AppEnv>;
24
27
  /**
25
28
  * Judge classes: the deployment's named classes of judges ("expert",
26
29
  * "user", …), each with a weight, scoped to the tenant, a project, or an
@@ -1 +1 @@
1
- {"version":3,"file":"judgments.d.ts","sourceRoot":"","sources":["../../src/routes/judgments.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAQL,KAAK,uBAAuB,EAK7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAM1C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,UAAU,EACtB,UAAU,CAAC,EAAE,UAAU,EACvB,aAAa,CAAC,EAAE,mBAAmB,EACnC,KAAK,CAAC,EAAE,mBAAmB,GAC1B,IAAI,CAAC,MAAM,CAAC,CA8Jd;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,uBAAuB,EAChC,UAAU,CAAC,EAAE,UAAU,GACtB,IAAI,CAAC,MAAM,CAAC,CAoJd;AAkTD,2EAA2E;AAC3E,wBAAgB,cAAc,CAC5B,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,GACd;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAe/E"}
1
+ {"version":3,"file":"judgments.d.ts","sourceRoot":"","sources":["../../src/routes/judgments.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EASL,KAAK,uBAAuB,EAM7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAM1C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,UAAU,EACtB,UAAU,CAAC,EAAE,UAAU,EACvB,aAAa,CAAC,EAAE,mBAAmB,EACnC,KAAK,CAAC,EAAE,mBAAmB;AAC3B,kEAAkE;AAClE,SAAS,CAAC,EAAE,eAAe,GAC1B,IAAI,CAAC,MAAM,CAAC,CAkKd;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,uBAAuB,EAChC,UAAU,CAAC,EAAE,UAAU,GACtB,IAAI,CAAC,MAAM,CAAC,CA4Jd;AAkXD,2EAA2E;AAC3E,wBAAgB,cAAc,CAC5B,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,GACd;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAe/E"}
@@ -1,9 +1,10 @@
1
1
  // SPDX-License-Identifier: Apache-2.0
2
2
  // Copyright (C) 2026 Kindgi Inc.
3
3
  import { Hono } from 'hono';
4
- import { ref } from '@kindgi/authz';
4
+ import { REVIEWER_ROLE_RANK, ref } from '@kindgi/authz';
5
5
  import { statusFor, toWireError } from '../errors.js';
6
- import { VERDICTS, judgeClassApplies, } from '../judgment-binding.js';
6
+ import { VERDICTS, judgeClassApplies, whyNotAssertable, } from '../judgment-binding.js';
7
+ import { callerReviewerRole } from '../reviewer-role.js';
7
8
  import { captureTurnContext } from './judgment-context.js';
8
9
  import { captureFlowContext } from './judgment-flow-context.js';
9
10
  import { clampLimit } from './pagination.js';
@@ -23,7 +24,9 @@ import { parseListScope } from './scope-params.js';
23
24
  * the judgment's project (`read` / `write`), since a judgment outlives
24
25
  * its run.
25
26
  */
26
- export function judgmentsRouter(binding, runBinding, authorizer, conversations, flows) {
27
+ export function judgmentsRouter(binding, runBinding, authorizer, conversations, flows,
28
+ /** Whose reviewer role a restricted judge class checks (T200). */
29
+ reviewers) {
27
30
  const r = new Hono();
28
31
  r.post('/', async (c) => {
29
32
  const requestId = c.get('requestId');
@@ -40,10 +43,13 @@ export function judgmentsRouter(binding, runBinding, authorizer, conversations,
40
43
  if (asserted === undefined) {
41
44
  return fail('permission-denied', 'Judging needs a user or a service token.');
42
45
  }
43
- const prepared = await prepareJudgment(c, body, runBinding, binding, authorizer);
46
+ const prepared = await prepareJudgment(c, body, runBinding, binding, authorizer, {
47
+ asserted,
48
+ reviewers,
49
+ });
44
50
  if (prepared.kind === 'err')
45
51
  return fail(prepared.code, prepared.message);
46
- const { run, subject, projectId, itemValue, conversationId } = prepared;
52
+ const { run, subject, projectId, itemValue, conversationId, restricted } = prepared;
47
53
  const context = (await isFirstJudgment(binding, tenantId, body.runId))
48
54
  ? await captureContext({
49
55
  tenantId,
@@ -71,6 +77,7 @@ export function judgmentsRouter(binding, runBinding, authorizer, conversations,
71
77
  verdict: body.verdict,
72
78
  ...(body.reason !== undefined && { reason: body.reason }),
73
79
  ...(body.judgeClassId !== undefined && { judgeClassId: body.judgeClassId }),
80
+ ...(restricted === true && { restricted }),
74
81
  assertedBy: asserted,
75
82
  ...(body.participantId !== undefined && { participantId: body.participantId }),
76
83
  });
@@ -178,7 +185,7 @@ export function judgeClassesRouter(binding, authorizer) {
178
185
  const parsed = parseClassBody(await c.req.json().catch(() => null));
179
186
  if (parsed.kind === 'err')
180
187
  return fail('bad-input', parsed.message);
181
- const { scope, name, weight, description } = parsed.body;
188
+ const { scope, name, weight, description, assertableBy } = parsed.body;
182
189
  if (authorizer !== undefined &&
183
190
  !(await authorizer.can(c, 'admin', scopeRef(tenantId, scope)))) {
184
191
  return fail('permission-denied', 'Not allowed to manage judge classes in this scope.');
@@ -189,6 +196,7 @@ export function judgeClassesRouter(binding, authorizer) {
189
196
  name,
190
197
  weight,
191
198
  ...(description !== undefined && { description }),
199
+ ...(assertableBy !== undefined && { assertableBy }),
192
200
  });
193
201
  if (outcome.kind === 'name-taken') {
194
202
  return fail('judge-class-name-taken', `A judge class named "${name}" already exists here.`);
@@ -255,15 +263,19 @@ export function judgeClassesRouter(binding, authorizer) {
255
263
  const raw = (await c.req.json().catch(() => null));
256
264
  const weight = raw?.weight;
257
265
  const description = raw?.description;
266
+ const assertableBy = raw?.assertableBy === undefined ? undefined : parseAssertableBy(raw.assertableBy);
258
267
  if (raw === null ||
259
268
  typeof raw !== 'object' ||
260
- (weight === undefined && description === undefined) ||
269
+ (weight === undefined && description === undefined && assertableBy === undefined) ||
261
270
  (weight !== undefined && !isWeight(weight)) ||
262
- (description !== undefined && typeof description !== 'string')) {
271
+ (description !== undefined && typeof description !== 'string') ||
272
+ typeof assertableBy === 'string') {
263
273
  c.status(statusFor('bad-input'));
264
274
  return c.json(toWireError({
265
275
  code: 'bad-input',
266
- message: 'Send weight (a number ≥ 0) and/or description (a string).',
276
+ message: typeof assertableBy === 'string'
277
+ ? assertableBy
278
+ : 'Send weight (a number ≥ 0), description (a string) and/or assertableBy (who may assert the class, or null for anyone).',
267
279
  }, requestId));
268
280
  }
269
281
  const found = await loadClass(c, 'admin');
@@ -276,6 +288,7 @@ export function judgeClassesRouter(binding, authorizer) {
276
288
  judgeClassId: found.id,
277
289
  ...(weight !== undefined && { weight: weight }),
278
290
  ...(description !== undefined && { description: description }),
291
+ ...(assertableBy !== undefined && { assertableBy }),
279
292
  });
280
293
  return updated === null ? classNotFound(c, found.id) : c.json(serializeJudgeClass(updated));
281
294
  });
@@ -296,7 +309,7 @@ export function judgeClassesRouter(binding, authorizer) {
296
309
  * the run exists, the caller may judge it, it has finished with an output,
297
310
  * the class (if any) applies to it, and the pointer (if any) resolves.
298
311
  */
299
- async function prepareJudgment(c, body, runBinding, binding, authorizer) {
312
+ async function prepareJudgment(c, body, runBinding, binding, authorizer, who) {
300
313
  const err = (code, message) => ({ kind: 'err', code, message });
301
314
  const tenantId = c.get('tenantId');
302
315
  const run = await runBinding.getRun(tenantId, body.runId);
@@ -313,19 +326,39 @@ async function prepareJudgment(c, body, runBinding, binding, authorizer) {
313
326
  }
314
327
  const subject = subjectOf(run);
315
328
  const projectId = run.projectId;
316
- if (body.judgeClassId !== undefined &&
317
- !(await classApplies(binding, tenantId, body.judgeClassId, { projectId, subject }))) {
318
- return err('judge-class-not-applicable', `Judge class "${body.judgeClassId}" doesn't exist or doesn't apply to this run's project or agent.`);
329
+ let restricted = false;
330
+ if (body.judgeClassId !== undefined) {
331
+ const judgeClass = await applicableClass(binding, tenantId, body.judgeClassId, {
332
+ projectId,
333
+ subject,
334
+ });
335
+ if (judgeClass === null) {
336
+ return err('judge-class-not-applicable', `Judge class "${body.judgeClassId}" doesn't exist or doesn't apply to this run's project or agent.`);
337
+ }
338
+ if (judgeClass.assertableBy !== undefined) {
339
+ const reviewerRole = await callerReviewerRole(c, who.reviewers);
340
+ const why = whyNotAssertable(judgeClass.assertableBy, {
341
+ ...who.asserted,
342
+ ...(reviewerRole !== undefined && { reviewerRole }),
343
+ });
344
+ if (why !== undefined) {
345
+ return err('judge-class-not-allowed', `You can't judge as "${judgeClass.name}": ${why}.`);
346
+ }
347
+ restricted = true;
348
+ }
319
349
  }
320
350
  const copy = { input: run.input, output: run.output };
321
- const turn = run.agent !== undefined ? { conversationId: run.agent.conversationId } : {};
351
+ const extra = {
352
+ ...(run.agent !== undefined && { conversationId: run.agent.conversationId }),
353
+ ...(restricted && { restricted: true }),
354
+ };
322
355
  if (body.item.pointer === undefined)
323
- return { kind: 'ok', run: copy, subject, projectId, ...turn };
356
+ return { kind: 'ok', run: copy, subject, projectId, ...extra };
324
357
  const found = resolvePointer(run.output, body.item.pointer);
325
358
  if (!found.found) {
326
359
  return err('item-not-found', `Nothing at "${body.item.pointer}" in run "${body.runId}"'s output.`);
327
360
  }
328
- return { kind: 'ok', run: copy, subject, projectId, itemValue: found.value, ...turn };
361
+ return { kind: 'ok', run: copy, subject, projectId, itemValue: found.value, ...extra };
329
362
  }
330
363
  /** Whether the run has no live judgment yet (its copy is stored with the first). */
331
364
  /**
@@ -355,10 +388,10 @@ async function isFirstJudgment(binding, tenantId, runId) {
355
388
  const page = await binding.list({ tenantId, runId, limit: 1 });
356
389
  return page.data.length === 0;
357
390
  }
358
- /** Whether a live class exists and its scope covers the run. */
359
- async function classApplies(binding, tenantId, judgeClassId, run) {
391
+ /** The live class, when it exists and its scope covers the run; else `null`. */
392
+ async function applicableClass(binding, tenantId, judgeClassId, run) {
360
393
  const judgeClass = await binding.getClass({ tenantId, judgeClassId });
361
- return judgeClass !== null && judgeClassApplies(judgeClass.scope, run);
394
+ return judgeClass !== null && judgeClassApplies(judgeClass.scope, run) ? judgeClass : null;
362
395
  }
363
396
  const MAX_REASON = 4000;
364
397
  function parseJudgmentBody(raw) {
@@ -420,6 +453,40 @@ function parseItem(raw) {
420
453
  ...(typeof i.rank === 'number' && { rank: i.rank }),
421
454
  };
422
455
  }
456
+ const ASSERTABLE_BY_USAGE = 'assertableBy says who may assert the class: { minReviewerRole?: "standard" | "senior" | "admin", principalKinds?: ["user" | "service", …], principalIds?: [id, …] }, with at least one of them.';
457
+ /** `assertableBy`: a restriction, `null` (on an update: lift it), or what's wrong. */
458
+ function parseAssertableBy(raw) {
459
+ if (raw === null)
460
+ return null;
461
+ if (typeof raw !== 'object' || Array.isArray(raw))
462
+ return ASSERTABLE_BY_USAGE;
463
+ const b = raw;
464
+ const keys = Object.keys(b);
465
+ const known = ['minReviewerRole', 'principalKinds', 'principalIds'];
466
+ if (keys.length === 0 || keys.some((k) => !known.includes(k)))
467
+ return ASSERTABLE_BY_USAGE;
468
+ const role = b.minReviewerRole;
469
+ if (role !== undefined && !(typeof role === 'string' && role in REVIEWER_ROLE_RANK)) {
470
+ return ASSERTABLE_BY_USAGE;
471
+ }
472
+ const kinds = b.principalKinds;
473
+ if (kinds !== undefined &&
474
+ !(Array.isArray(kinds) &&
475
+ kinds.length > 0 &&
476
+ kinds.every((k) => k === 'user' || k === 'service'))) {
477
+ return ASSERTABLE_BY_USAGE;
478
+ }
479
+ const ids = b.principalIds;
480
+ if (ids !== undefined &&
481
+ !(Array.isArray(ids) && ids.length > 0 && ids.length <= 100 && ids.every(nonEmpty))) {
482
+ return ASSERTABLE_BY_USAGE;
483
+ }
484
+ return {
485
+ ...(role !== undefined && { minReviewerRole: role }),
486
+ ...(kinds !== undefined && { principalKinds: kinds }),
487
+ ...(ids !== undefined && { principalIds: ids }),
488
+ };
489
+ }
423
490
  function parseClassBody(raw) {
424
491
  const err = (message) => ({ kind: 'err', message });
425
492
  if (raw === null || typeof raw !== 'object')
@@ -435,6 +502,9 @@ function parseClassBody(raw) {
435
502
  const scope = parseClassScope(b.scope);
436
503
  if (typeof scope === 'string')
437
504
  return err(scope);
505
+ const assertableBy = b.assertableBy === undefined ? undefined : parseAssertableBy(b.assertableBy);
506
+ if (typeof assertableBy === 'string')
507
+ return err(assertableBy);
438
508
  return {
439
509
  kind: 'ok',
440
510
  body: {
@@ -442,6 +512,7 @@ function parseClassBody(raw) {
442
512
  name: b.name,
443
513
  weight: b.weight,
444
514
  ...(typeof b.description === 'string' && { description: b.description }),
515
+ ...(assertableBy !== undefined && assertableBy !== null && { assertableBy }),
445
516
  },
446
517
  };
447
518
  }
@@ -536,6 +607,7 @@ function serializeJudgment(j) {
536
607
  verdict: j.verdict,
537
608
  ...(j.reason !== undefined && { reason: j.reason }),
538
609
  ...(j.judgeClassId !== undefined && { judgeClassId: j.judgeClassId }),
610
+ ...(j.restricted === true && { restricted: true }),
539
611
  assertedBy: j.assertedBy,
540
612
  ...(j.participantId !== undefined && { participantId: j.participantId }),
541
613
  createdAt: j.createdAt,
@@ -558,6 +630,7 @@ function serializeJudgeClass(k) {
558
630
  name: k.name,
559
631
  weight: k.weight,
560
632
  ...(k.description !== undefined && { description: k.description }),
633
+ ...(k.assertableBy !== undefined && { assertableBy: k.assertableBy }),
561
634
  createdAt: k.createdAt,
562
635
  updatedAt: k.updatedAt,
563
636
  ...(k.unregisteredAt !== undefined && { unregisteredAt: k.unregisteredAt }),