@kindgi/api 0.1.4-rc.1 → 0.1.4-rc.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent-binding.d.ts +12 -2
- package/dist/agent-binding.d.ts.map +1 -1
- package/dist/agent-pins.d.ts.map +1 -1
- package/dist/agent-pins.js +4 -1
- package/dist/agent-pins.js.map +1 -1
- package/dist/app.d.ts +8 -0
- package/dist/app.d.ts.map +1 -1
- package/dist/app.js +23 -4
- package/dist/app.js.map +1 -1
- package/dist/deploy-versions.d.ts +8 -5
- package/dist/deploy-versions.d.ts.map +1 -1
- package/dist/deploy-versions.js +3 -9
- package/dist/deploy-versions.js.map +1 -1
- package/dist/errors.d.ts.map +1 -1
- package/dist/errors.js +25 -0
- package/dist/errors.js.map +1 -1
- package/dist/eval-case-binding.d.ts +10 -0
- package/dist/eval-case-binding.d.ts.map +1 -1
- package/dist/eval-run-binding.d.ts +14 -3
- package/dist/eval-run-binding.d.ts.map +1 -1
- package/dist/eval-run-binding.js.map +1 -1
- package/dist/flow-pins.d.ts +20 -7
- package/dist/flow-pins.d.ts.map +1 -1
- package/dist/flow-pins.js +36 -11
- package/dist/flow-pins.js.map +1 -1
- package/dist/gate-policy-binding.d.ts +164 -0
- package/dist/gate-policy-binding.d.ts.map +1 -0
- package/dist/gate-policy-binding.js +12 -0
- package/dist/gate-policy-binding.js.map +1 -0
- package/dist/gate.d.ts +56 -0
- package/dist/gate.d.ts.map +1 -0
- package/dist/gate.js +359 -0
- package/dist/gate.js.map +1 -0
- package/dist/handler-binding.d.ts +14 -2
- package/dist/handler-binding.d.ts.map +1 -1
- package/dist/hitl-binding.d.ts +5 -0
- package/dist/hitl-binding.d.ts.map +1 -1
- package/dist/index.d.ts +10 -4
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +3 -1
- package/dist/index.js.map +1 -1
- package/dist/judged-dispatcher.d.ts +16 -1
- package/dist/judged-dispatcher.d.ts.map +1 -1
- package/dist/judged-dispatcher.js +45 -6
- package/dist/judged-dispatcher.js.map +1 -1
- package/dist/judgment-binding.d.ts +38 -0
- package/dist/judgment-binding.d.ts.map +1 -1
- package/dist/judgment-binding.js +19 -0
- package/dist/judgment-binding.js.map +1 -1
- package/dist/live-version-binding.d.ts +206 -0
- package/dist/live-version-binding.d.ts.map +1 -0
- package/dist/live-version-binding.js +4 -0
- package/dist/live-version-binding.js.map +1 -0
- package/dist/middleware/authorize.d.ts.map +1 -1
- package/dist/middleware/authorize.js +13 -2
- package/dist/middleware/authorize.js.map +1 -1
- package/dist/middleware/project-ref.d.ts +25 -0
- package/dist/middleware/project-ref.d.ts.map +1 -0
- package/dist/middleware/project-ref.js +72 -0
- package/dist/middleware/project-ref.js.map +1 -0
- package/dist/openapi/generate.d.ts.map +1 -1
- package/dist/openapi/generate.js +4 -0
- package/dist/openapi/generate.js.map +1 -1
- package/dist/openapi/operations.d.ts +6 -0
- package/dist/openapi/operations.d.ts.map +1 -1
- package/dist/openapi/operations.js +512 -22
- package/dist/openapi/operations.js.map +1 -1
- package/dist/openapi/schemas.d.ts +37 -0
- package/dist/openapi/schemas.d.ts.map +1 -1
- package/dist/openapi/schemas.js +709 -5
- package/dist/openapi/schemas.js.map +1 -1
- package/dist/publish-refused.d.ts +18 -0
- package/dist/publish-refused.d.ts.map +1 -0
- package/dist/publish-refused.js +22 -0
- package/dist/publish-refused.js.map +1 -0
- package/dist/retention-binding.d.ts +29 -0
- package/dist/retention-binding.d.ts.map +1 -1
- package/dist/routes/agent-releases.d.ts +40 -0
- package/dist/routes/agent-releases.d.ts.map +1 -0
- package/dist/routes/agent-releases.js +462 -0
- package/dist/routes/agent-releases.js.map +1 -0
- package/dist/routes/agents.d.ts +7 -1
- package/dist/routes/agents.d.ts.map +1 -1
- package/dist/routes/agents.js +31 -3
- package/dist/routes/agents.js.map +1 -1
- package/dist/routes/approvals.d.ts.map +1 -1
- package/dist/routes/approvals.js +40 -9
- package/dist/routes/approvals.js.map +1 -1
- package/dist/routes/audit.d.ts.map +1 -1
- package/dist/routes/audit.js +7 -0
- package/dist/routes/audit.js.map +1 -1
- package/dist/routes/auth.js +1 -1
- package/dist/routes/auth.js.map +1 -1
- package/dist/routes/conversations.d.ts +0 -7
- package/dist/routes/conversations.d.ts.map +1 -1
- package/dist/routes/conversations.js +19 -3
- package/dist/routes/conversations.js.map +1 -1
- package/dist/routes/deployments.d.ts +6 -0
- package/dist/routes/deployments.d.ts.map +1 -1
- package/dist/routes/deployments.js +33 -5
- package/dist/routes/deployments.js.map +1 -1
- package/dist/routes/env.d.ts.map +1 -1
- package/dist/routes/env.js +1 -0
- package/dist/routes/env.js.map +1 -1
- package/dist/routes/eval-comparison.d.ts +2 -1
- package/dist/routes/eval-comparison.d.ts.map +1 -1
- package/dist/routes/eval-comparison.js +22 -9
- package/dist/routes/eval-comparison.js.map +1 -1
- package/dist/routes/flows.d.ts +14 -7
- package/dist/routes/flows.d.ts.map +1 -1
- package/dist/routes/flows.js +10 -8
- package/dist/routes/flows.js.map +1 -1
- package/dist/routes/gate-policies.d.ts +19 -0
- package/dist/routes/gate-policies.d.ts.map +1 -0
- package/dist/routes/gate-policies.js +191 -0
- package/dist/routes/gate-policies.js.map +1 -0
- package/dist/routes/gate-policy-spec.d.ts +17 -0
- package/dist/routes/gate-policy-spec.d.ts.map +1 -0
- package/dist/routes/gate-policy-spec.js +192 -0
- package/dist/routes/gate-policy-spec.js.map +1 -0
- package/dist/routes/gate-policy-wire.d.ts +3 -0
- package/dist/routes/gate-policy-wire.d.ts.map +1 -0
- package/dist/routes/gate-policy-wire.js +18 -0
- package/dist/routes/gate-policy-wire.js.map +1 -0
- package/dist/routes/hierarchy-errors.d.ts +11 -0
- package/dist/routes/hierarchy-errors.d.ts.map +1 -1
- package/dist/routes/hierarchy-errors.js +13 -0
- package/dist/routes/hierarchy-errors.js.map +1 -1
- package/dist/routes/judged-suites.js +7 -0
- package/dist/routes/judged-suites.js.map +1 -1
- package/dist/routes/judgments.d.ts +4 -1
- package/dist/routes/judgments.d.ts.map +1 -1
- package/dist/routes/judgments.js +92 -19
- package/dist/routes/judgments.js.map +1 -1
- package/dist/routes/live-scope-wire.d.ts +32 -0
- package/dist/routes/live-scope-wire.d.ts.map +1 -0
- package/dist/routes/live-scope-wire.js +71 -0
- package/dist/routes/live-scope-wire.js.map +1 -0
- package/dist/routes/policies.d.ts +6 -3
- package/dist/routes/policies.d.ts.map +1 -1
- package/dist/routes/policies.js +55 -3
- package/dist/routes/policies.js.map +1 -1
- package/dist/routes/projects.d.ts.map +1 -1
- package/dist/routes/projects.js +47 -3
- package/dist/routes/projects.js.map +1 -1
- package/dist/routes/retention.d.ts.map +1 -1
- package/dist/routes/retention.js +18 -2
- package/dist/routes/retention.js.map +1 -1
- package/dist/routes/reviewers.d.ts +8 -1
- package/dist/routes/reviewers.d.ts.map +1 -1
- package/dist/routes/reviewers.js +20 -3
- package/dist/routes/reviewers.js.map +1 -1
- package/dist/routes/runs.d.ts.map +1 -1
- package/dist/routes/runs.js +22 -13
- package/dist/routes/runs.js.map +1 -1
- package/dist/routes/secrets.d.ts.map +1 -1
- package/dist/routes/secrets.js +2 -0
- package/dist/routes/secrets.js.map +1 -1
- package/dist/routes/segments.d.ts +17 -0
- package/dist/routes/segments.d.ts.map +1 -0
- package/dist/routes/segments.js +68 -0
- package/dist/routes/segments.js.map +1 -0
- package/dist/routes/teams.d.ts.map +1 -1
- package/dist/routes/teams.js +42 -3
- package/dist/routes/teams.js.map +1 -1
- package/dist/routes/uuid-param.d.ts +11 -0
- package/dist/routes/uuid-param.d.ts.map +1 -0
- package/dist/routes/uuid-param.js +19 -0
- package/dist/routes/uuid-param.js.map +1 -0
- package/openapi.json +7008 -3624
- package/package.json +21 -21
- package/src/agent-binding.ts +12 -2
- package/src/agent-pins.ts +3 -1
- package/src/app.ts +37 -3
- package/src/deploy-versions.ts +11 -14
- package/src/errors.ts +25 -0
- package/src/eval-case-binding.ts +7 -0
- package/src/eval-run-binding.ts +24 -3
- package/src/flow-pins.ts +49 -9
- package/src/gate-policy-binding.ts +171 -0
- package/src/gate.ts +467 -0
- package/src/handler-binding.ts +14 -2
- package/src/hitl-binding.ts +5 -0
- package/src/index.ts +46 -1
- package/src/judged-dispatcher.ts +74 -6
- package/src/judgment-binding.ts +62 -0
- package/src/live-version-binding.ts +237 -0
- package/src/middleware/authorize.ts +18 -2
- package/src/middleware/project-ref.ts +88 -0
- package/src/openapi/generate.ts +5 -0
- package/src/openapi/operations.ts +619 -22
- package/src/openapi/schemas.ts +788 -5
- package/src/publish-refused.ts +31 -0
- package/src/retention-binding.ts +30 -0
- package/src/routes/agent-releases.ts +581 -0
- package/src/routes/agents.ts +43 -2
- package/src/routes/approvals.ts +58 -8
- package/src/routes/audit.ts +10 -0
- package/src/routes/auth.ts +1 -1
- package/src/routes/conversations.ts +31 -3
- package/src/routes/deployments.ts +50 -5
- package/src/routes/env.ts +1 -0
- package/src/routes/eval-comparison.ts +24 -10
- package/src/routes/flows.ts +27 -11
- package/src/routes/gate-policies.ts +226 -0
- package/src/routes/gate-policy-spec.ts +229 -0
- package/src/routes/gate-policy-wire.ts +20 -0
- package/src/routes/hierarchy-errors.ts +14 -0
- package/src/routes/judged-suites.ts +5 -0
- package/src/routes/judgments.ts +107 -23
- package/src/routes/live-scope-wire.ts +90 -0
- package/src/routes/policies.ts +61 -3
- package/src/routes/projects.ts +54 -2
- package/src/routes/retention.ts +21 -2
- package/src/routes/reviewers.ts +23 -4
- package/src/routes/runs.ts +33 -20
- package/src/routes/secrets.ts +2 -0
- package/src/routes/segments.ts +75 -0
- package/src/routes/teams.ts +53 -3
- package/src/routes/uuid-param.ts +28 -0
|
@@ -0,0 +1,192 @@
|
|
|
1
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
2
|
+
// Copyright (C) 2026 Kindgi Inc.
|
|
3
|
+
import { REVIEWER_ROLE_RANK } from '@kindgi/authz';
|
|
4
|
+
import { GATE_METRICS } from '../gate-policy-binding.js';
|
|
5
|
+
const REVIEWER_ROLES = Object.keys(REVIEWER_ROLE_RANK);
|
|
6
|
+
const isObject = (v) => v !== null && typeof v === 'object' && !Array.isArray(v);
|
|
7
|
+
/** Keys the policy may not use yet, with why. */
|
|
8
|
+
const LATER = {
|
|
9
|
+
'/spec/approvals/count': 'one reviewer decides a promotion today; leave `count` out',
|
|
10
|
+
'/spec/approvals/forRollback': "rollbacks aren't gated yet; leave `forRollback` out",
|
|
11
|
+
};
|
|
12
|
+
function unknownKeys(raw, allowed, at, issues) {
|
|
13
|
+
for (const key of Object.keys(raw)) {
|
|
14
|
+
if (allowed.includes(key))
|
|
15
|
+
continue;
|
|
16
|
+
const path = `${at}/${key}`;
|
|
17
|
+
issues.push({
|
|
18
|
+
path,
|
|
19
|
+
message: LATER[path] ??
|
|
20
|
+
`\`${key}\` isn't a gate policy setting here (expected: ${allowed.join(', ')})`,
|
|
21
|
+
});
|
|
22
|
+
}
|
|
23
|
+
}
|
|
24
|
+
/** A number in [min, max], when present. */
|
|
25
|
+
function num(raw, key, at, issues, opts) {
|
|
26
|
+
const v = raw[key];
|
|
27
|
+
if (v === undefined)
|
|
28
|
+
return undefined;
|
|
29
|
+
const ok = typeof v === 'number' &&
|
|
30
|
+
Number.isFinite(v) &&
|
|
31
|
+
v >= opts.min &&
|
|
32
|
+
(opts.max === undefined || v <= opts.max) &&
|
|
33
|
+
(opts.integer !== true || Number.isInteger(v)) &&
|
|
34
|
+
(opts.positive !== true || v > 0);
|
|
35
|
+
if (!ok) {
|
|
36
|
+
const range = opts.max === undefined ? `at least ${opts.min}` : `${opts.min} to ${opts.max}`;
|
|
37
|
+
issues.push({
|
|
38
|
+
path: `${at}/${key}`,
|
|
39
|
+
message: `\`${key}\` must be ${opts.integer === true ? 'a whole number' : 'a number'}, ${opts.positive === true ? 'above 0' : range}`,
|
|
40
|
+
});
|
|
41
|
+
return undefined;
|
|
42
|
+
}
|
|
43
|
+
return v;
|
|
44
|
+
}
|
|
45
|
+
function bool(raw, key, at, issues) {
|
|
46
|
+
const v = raw[key];
|
|
47
|
+
if (v === undefined)
|
|
48
|
+
return undefined;
|
|
49
|
+
if (typeof v !== 'boolean') {
|
|
50
|
+
issues.push({ path: `${at}/${key}`, message: `\`${key}\` must be true or false` });
|
|
51
|
+
return undefined;
|
|
52
|
+
}
|
|
53
|
+
return v;
|
|
54
|
+
}
|
|
55
|
+
function block(raw, key, issues) {
|
|
56
|
+
const v = raw[key];
|
|
57
|
+
if (v === undefined)
|
|
58
|
+
return undefined;
|
|
59
|
+
if (!isObject(v)) {
|
|
60
|
+
issues.push({ path: `/spec/${key}`, message: `\`${key}\` must be an object` });
|
|
61
|
+
return undefined;
|
|
62
|
+
}
|
|
63
|
+
return v;
|
|
64
|
+
}
|
|
65
|
+
export function parseGatePolicySpec(raw) {
|
|
66
|
+
if (!isObject(raw)) {
|
|
67
|
+
return { kind: 'err', issues: [{ path: '/spec', message: '`spec` must be an object' }] };
|
|
68
|
+
}
|
|
69
|
+
const issues = [];
|
|
70
|
+
unknownKeys(raw, ['comparison', 'evidence', 'metrics', 'replay', 'approvals', 'onlyRestrictedClasses'], '/spec', issues);
|
|
71
|
+
const spec = {};
|
|
72
|
+
const comparison = block(raw, 'comparison', issues);
|
|
73
|
+
if (comparison !== undefined) {
|
|
74
|
+
const at = '/spec/comparison';
|
|
75
|
+
unknownKeys(comparison, ['maxAgeHours', 'suite'], at, issues);
|
|
76
|
+
const maxAgeHours = num(comparison, 'maxAgeHours', at, issues, { min: 0, positive: true });
|
|
77
|
+
let suite;
|
|
78
|
+
if (comparison.suite !== undefined) {
|
|
79
|
+
const s = comparison.suite;
|
|
80
|
+
if (!isObject(s) || typeof s.id !== 'string' || s.id === '') {
|
|
81
|
+
issues.push({ path: `${at}/suite`, message: '`suite` must be `{ id, version? }`' });
|
|
82
|
+
}
|
|
83
|
+
else {
|
|
84
|
+
unknownKeys(s, ['id', 'version'], `${at}/suite`, issues);
|
|
85
|
+
if (s.version !== undefined && (typeof s.version !== 'string' || s.version === '')) {
|
|
86
|
+
issues.push({ path: `${at}/suite/version`, message: '`version` must be a version' });
|
|
87
|
+
}
|
|
88
|
+
suite = { id: s.id, ...(typeof s.version === 'string' && { version: s.version }) };
|
|
89
|
+
}
|
|
90
|
+
}
|
|
91
|
+
spec.comparison = {
|
|
92
|
+
...(maxAgeHours !== undefined && { maxAgeHours }),
|
|
93
|
+
...(suite !== undefined && { suite }),
|
|
94
|
+
};
|
|
95
|
+
}
|
|
96
|
+
const evidence = block(raw, 'evidence', issues);
|
|
97
|
+
if (evidence !== undefined) {
|
|
98
|
+
const at = '/spec/evidence';
|
|
99
|
+
unknownKeys(evidence, ['minCases', 'minWeight'], at, issues);
|
|
100
|
+
const minCases = num(evidence, 'minCases', at, issues, { min: 0, integer: true });
|
|
101
|
+
const minWeight = num(evidence, 'minWeight', at, issues, { min: 0 });
|
|
102
|
+
spec.evidence = {
|
|
103
|
+
...(minCases !== undefined && { minCases }),
|
|
104
|
+
...(minWeight !== undefined && { minWeight }),
|
|
105
|
+
};
|
|
106
|
+
}
|
|
107
|
+
if (raw.metrics !== undefined) {
|
|
108
|
+
if (!Array.isArray(raw.metrics)) {
|
|
109
|
+
issues.push({ path: '/spec/metrics', message: '`metrics` must be a list' });
|
|
110
|
+
}
|
|
111
|
+
else {
|
|
112
|
+
const metrics = [];
|
|
113
|
+
const seen = new Set();
|
|
114
|
+
raw.metrics.forEach((m, i) => {
|
|
115
|
+
const at = `/spec/metrics/${i}`;
|
|
116
|
+
const before = issues.length;
|
|
117
|
+
if (!isObject(m)) {
|
|
118
|
+
issues.push({ path: at, message: 'each metric must be an object' });
|
|
119
|
+
return;
|
|
120
|
+
}
|
|
121
|
+
unknownKeys(m, ['name', 'k', 'minCandidate', 'maxDrop'], at, issues);
|
|
122
|
+
const name = m.name;
|
|
123
|
+
if (typeof name !== 'string' || !GATE_METRICS.includes(name)) {
|
|
124
|
+
issues.push({
|
|
125
|
+
path: `${at}/name`,
|
|
126
|
+
message: `\`name\` must be one of: ${GATE_METRICS.join(', ')}`,
|
|
127
|
+
});
|
|
128
|
+
return;
|
|
129
|
+
}
|
|
130
|
+
if (seen.has(name)) {
|
|
131
|
+
issues.push({ path: `${at}/name`, message: `\`${name}\` is gated twice` });
|
|
132
|
+
return;
|
|
133
|
+
}
|
|
134
|
+
seen.add(name);
|
|
135
|
+
if (m.k !== undefined && name !== 'weightedPrecisionAtK') {
|
|
136
|
+
issues.push({ path: `${at}/k`, message: '`k` applies to `weightedPrecisionAtK` only' });
|
|
137
|
+
}
|
|
138
|
+
const k = num(m, 'k', at, issues, { min: 1, max: 100, integer: true });
|
|
139
|
+
const minCandidate = num(m, 'minCandidate', at, issues, { min: 0, max: 1 });
|
|
140
|
+
const maxDrop = num(m, 'maxDrop', at, issues, { min: 0, max: 1 });
|
|
141
|
+
if (minCandidate === undefined && maxDrop === undefined && issues.length === before) {
|
|
142
|
+
issues.push({
|
|
143
|
+
path: at,
|
|
144
|
+
message: `\`${name}\` needs \`minCandidate\`, \`maxDrop\` or both: what it must reach`,
|
|
145
|
+
});
|
|
146
|
+
}
|
|
147
|
+
metrics.push({
|
|
148
|
+
name: name,
|
|
149
|
+
...(k !== undefined && { k }),
|
|
150
|
+
...(minCandidate !== undefined && { minCandidate }),
|
|
151
|
+
...(maxDrop !== undefined && { maxDrop }),
|
|
152
|
+
});
|
|
153
|
+
});
|
|
154
|
+
spec.metrics = metrics;
|
|
155
|
+
}
|
|
156
|
+
}
|
|
157
|
+
const replay = block(raw, 'replay', issues);
|
|
158
|
+
if (replay !== undefined) {
|
|
159
|
+
const at = '/spec/replay';
|
|
160
|
+
const knobs = ['maxDiverged', 'maxErrors', 'maxRefusedWrites', 'maxStopped'];
|
|
161
|
+
unknownKeys(replay, knobs, at, issues);
|
|
162
|
+
const out = {};
|
|
163
|
+
for (const knob of knobs) {
|
|
164
|
+
const v = num(replay, knob, at, issues, { min: 0, integer: true });
|
|
165
|
+
if (v !== undefined)
|
|
166
|
+
out[knob] = v;
|
|
167
|
+
}
|
|
168
|
+
spec.replay = out;
|
|
169
|
+
}
|
|
170
|
+
const approvals = block(raw, 'approvals', issues);
|
|
171
|
+
if (approvals !== undefined) {
|
|
172
|
+
const at = '/spec/approvals';
|
|
173
|
+
unknownKeys(approvals, ['role', 'separateApprover'], at, issues);
|
|
174
|
+
const role = approvals.role;
|
|
175
|
+
if (role !== undefined && !REVIEWER_ROLES.includes(role)) {
|
|
176
|
+
issues.push({
|
|
177
|
+
path: `${at}/role`,
|
|
178
|
+
message: `\`role\` must be one of: ${REVIEWER_ROLES.join(', ')}`,
|
|
179
|
+
});
|
|
180
|
+
}
|
|
181
|
+
const separateApprover = bool(approvals, 'separateApprover', at, issues);
|
|
182
|
+
spec.approvals = {
|
|
183
|
+
...(typeof role === 'string' && { role: role }),
|
|
184
|
+
...(separateApprover !== undefined && { separateApprover }),
|
|
185
|
+
};
|
|
186
|
+
}
|
|
187
|
+
const onlyRestricted = bool(raw, 'onlyRestrictedClasses', '/spec', issues);
|
|
188
|
+
if (onlyRestricted !== undefined)
|
|
189
|
+
spec.onlyRestrictedClasses = onlyRestricted;
|
|
190
|
+
return issues.length > 0 ? { kind: 'err', issues } : { kind: 'ok', spec };
|
|
191
|
+
}
|
|
192
|
+
//# sourceMappingURL=gate-policy-spec.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"gate-policy-spec.js","sourceRoot":"","sources":["../../src/routes/gate-policy-spec.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,kBAAkB,EAAqB,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,YAAY,EAA4C,MAAM,2BAA2B,CAAC;AAcnG,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAA4B,CAAC;AAElF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAY,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEpG,iDAAiD;AACjD,MAAM,KAAK,GAAqC;IAC9C,uBAAuB,EAAE,2DAA2D;IACpF,6BAA6B,EAAE,qDAAqD;CACrF,CAAC;AAEF,SAAS,WAAW,CAAC,GAAQ,EAAE,OAA0B,EAAE,EAAU,EAAE,MAAmB;IACxF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,OAAO,EACL,KAAK,CAAC,IAAI,CAAC;gBACX,KAAK,GAAG,kDAAkD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SAClF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,SAAS,GAAG,CACV,GAAQ,EACR,GAAW,EACX,EAAU,EACV,MAAmB,EACnB,IAA0E;IAE1E,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,EAAE,GACN,OAAO,CAAC,KAAK,QAAQ;QACrB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClB,CAAC,IAAI,IAAI,CAAC,GAAG;QACb,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC;QACzC,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7F,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE;YACpB,OAAO,EAAE,KAAK,GAAG,cAAc,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE;SACtI,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CAAW,CAAC;AACrB,CAAC;AAED,SAAS,IAAI,CAAC,GAAQ,EAAE,GAAW,EAAE,EAAU,EAAE,MAAmB;IAClE,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,GAAG,0BAA0B,EAAE,CAAC,CAAC;QACnF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,GAAQ,EAAE,GAAW,EAAE,MAAmB;IACvD,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,GAAG,sBAAsB,EAAE,CAAC,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAY;IAEZ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,WAAW,CACT,GAAG,EACH,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,CAAC,EACrF,OAAO,EACP,MAAM,CACP,CAAC;IACF,MAAM,IAAI,GAEN,EAAE,CAAC;IAEP,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,kBAAkB,CAAC;QAC9B,WAAW,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,IAAI,KAAmD,CAAC;QACxD,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACzD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,EAAE,CAAC;oBACnF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACrF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,GAAG;YAChB,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,gBAAgB,CAAC;QAC5B,WAAW,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,GAAG;YACd,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC3C,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAqB,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE;gBAC5C,MAAM,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;gBACD,WAAW,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;gBACrE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAE,YAAkC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpF,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,GAAG,EAAE,OAAO;wBAClB,OAAO,EAAE,4BAA4B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBAC/D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,mBAAmB,EAAE,CAAC,CAAC;oBAC3E,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACf,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBACzD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;gBAC1F,CAAC;gBACD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvE,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC5E,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAClE,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACpF,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,EAAE;wBACR,OAAO,EAAE,KAAK,IAAI,oEAAoE;qBACvF,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAA8B;oBACpC,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC7B,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,CAAC;oBACnD,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,cAAc,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,YAAY,CAAU,CAAC;QACtF,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAyD,EAAE,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,iBAAiB,CAAC;QAC7B,WAAW,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAE,cAAqC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,EAAE,OAAO;gBAClB,OAAO,EAAE,4BAA4B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,SAAS,GAAG;YACf,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,EAAE,IAAI,EAAE,IAAoB,EAAE,CAAC;YAC/D,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,qBAAqB,GAAG,cAAc,CAAC;IAE9E,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"gate-policy-wire.d.ts","sourceRoot":"","sources":["../../src/routes/gate-policy-wire.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAG5D,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa1E"}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
2
|
+
// Copyright (C) 2026 Kindgi Inc.
|
|
3
|
+
import { liveScopeToWire } from './live-scope-wire.js';
|
|
4
|
+
export function serializeGatePolicy(p) {
|
|
5
|
+
return {
|
|
6
|
+
id: p.id,
|
|
7
|
+
version: p.version,
|
|
8
|
+
agentId: p.agentId,
|
|
9
|
+
scope: liveScopeToWire(p.scope),
|
|
10
|
+
spec: p.spec,
|
|
11
|
+
...(p.description !== undefined && { description: p.description }),
|
|
12
|
+
createdAt: p.createdAt,
|
|
13
|
+
...(p.unregisteredAt !== undefined && {
|
|
14
|
+
unregisteredAt: p.unregisteredAt,
|
|
15
|
+
}),
|
|
16
|
+
};
|
|
17
|
+
}
|
|
18
|
+
//# sourceMappingURL=gate-policy-wire.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"gate-policy-wire.js","sourceRoot":"","sources":["../../src/routes/gate-policy-wire.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAGjC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,UAAU,mBAAmB,CAAC,CAAa;IAC/C,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI;YACpC,cAAc,EAAE,CAAC,CAAC,cAAmC;SACtD,CAAC;KACH,CAAC;AACJ,CAAC"}
|
|
@@ -42,4 +42,15 @@ export declare function projectDefaultAlreadyExistsError(): {
|
|
|
42
42
|
readonly code: "project-default-already-exists";
|
|
43
43
|
readonly message: "The tenant already has a Default project";
|
|
44
44
|
};
|
|
45
|
+
/**
|
|
46
|
+
* `501 authz-membership-unsupported`: authorization is enforced, but the
|
|
47
|
+
* tenant-hierarchy binding can't change a membership together with its
|
|
48
|
+
* authorization tuple (it has no `method`). Nothing is changed: removing
|
|
49
|
+
* the row alone would leave the user's permission in place.
|
|
50
|
+
*/
|
|
51
|
+
export declare function membershipNotKeptInStepError(method: string): {
|
|
52
|
+
readonly code: "authz-membership-unsupported";
|
|
53
|
+
readonly message: `This runtime can't keep permissions in step with a membership change (its tenant-hierarchy binding has no ${string}), so nothing was changed.`;
|
|
54
|
+
readonly method: string;
|
|
55
|
+
};
|
|
45
56
|
//# sourceMappingURL=hierarchy-errors.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hierarchy-errors.d.ts","sourceRoot":"","sources":["../../src/routes/hierarchy-errors.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAE3D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM;;;;;EAU1E;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE;;;;;EAQlE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM;;;;EAE7C;AAED,8EAA8E;AAC9E,wBAAgB,gCAAgC;;;EAK/C"}
|
|
1
|
+
{"version":3,"file":"hierarchy-errors.d.ts","sourceRoot":"","sources":["../../src/routes/hierarchy-errors.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAE3D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM;;;;;EAU1E;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE;;;;;EAQlE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM;;;;EAE7C;AAED,8EAA8E;AAC9E,wBAAgB,gCAAgC;;;EAK/C;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM;;;;EAM1D"}
|
|
@@ -44,4 +44,17 @@ export function projectDefaultAlreadyExistsError() {
|
|
|
44
44
|
message: 'The tenant already has a Default project',
|
|
45
45
|
};
|
|
46
46
|
}
|
|
47
|
+
/**
|
|
48
|
+
* `501 authz-membership-unsupported`: authorization is enforced, but the
|
|
49
|
+
* tenant-hierarchy binding can't change a membership together with its
|
|
50
|
+
* authorization tuple (it has no `method`). Nothing is changed: removing
|
|
51
|
+
* the row alone would leave the user's permission in place.
|
|
52
|
+
*/
|
|
53
|
+
export function membershipNotKeptInStepError(method) {
|
|
54
|
+
return {
|
|
55
|
+
code: 'authz-membership-unsupported',
|
|
56
|
+
message: `This runtime can't keep permissions in step with a membership change (its tenant-hierarchy binding has no ${method}), so nothing was changed.`,
|
|
57
|
+
method,
|
|
58
|
+
};
|
|
59
|
+
}
|
|
47
60
|
//# sourceMappingURL=hierarchy-errors.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hierarchy-errors.js","sourceRoot":"","sources":["../../src/routes/hierarchy-errors.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAWjC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2B,EAAE,IAAY;IACzE,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EACL,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,4CAA4C,IAAI,+DAA+D;YACjH,CAAC,CAAC,WAAW,QAAQ,gCAAgC,IAAI,GAAG;QAChE,QAAQ;QACR,IAAI;KACI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAwB;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,6CAA6C,KAAK,4FAA4F;QACvJ,QAAQ,EAAE,SAAS;QACnB,KAAK;KACG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,KAAK,GAAG,EAAE,KAAK,EAAW,CAAC;AACzF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,0CAA0C;KAC3C,CAAC;AACb,CAAC"}
|
|
1
|
+
{"version":3,"file":"hierarchy-errors.js","sourceRoot":"","sources":["../../src/routes/hierarchy-errors.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAWjC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2B,EAAE,IAAY;IACzE,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EACL,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,4CAA4C,IAAI,+DAA+D;YACjH,CAAC,CAAC,WAAW,QAAQ,gCAAgC,IAAI,GAAG;QAChE,QAAQ;QACR,IAAI;KACI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAwB;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,6CAA6C,KAAK,4FAA4F;QACvJ,QAAQ,EAAE,SAAS;QACnB,KAAK;KACG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,KAAK,GAAG,EAAE,KAAK,EAAW,CAAC;AACzF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,0CAA0C;KAC3C,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAc;IACzD,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,6GAA6G,MAAM,4BAA4B;QACxJ,MAAM;KACE,CAAC;AACb,CAAC"}
|
|
@@ -170,12 +170,18 @@ async function summarize(key, judgments, weightOf) {
|
|
|
170
170
|
let no = 0;
|
|
171
171
|
let yesWeight = 0;
|
|
172
172
|
let totalWeight = 0;
|
|
173
|
+
// What judges a class was restricted to asserted, as it was when each judgment was recorded.
|
|
174
|
+
const restricted = { yesWeight: 0, totalWeight: 0 };
|
|
173
175
|
for (const j of judgments) {
|
|
174
176
|
const w = await weightOf(j.judgeClassId);
|
|
175
177
|
totalWeight += w;
|
|
178
|
+
if (j.restricted === true)
|
|
179
|
+
restricted.totalWeight += w;
|
|
176
180
|
if (j.verdict === 'yes') {
|
|
177
181
|
yes += 1;
|
|
178
182
|
yesWeight += w;
|
|
183
|
+
if (j.restricted === true)
|
|
184
|
+
restricted.yesWeight += w;
|
|
179
185
|
}
|
|
180
186
|
else {
|
|
181
187
|
no += 1;
|
|
@@ -190,6 +196,7 @@ async function summarize(key, judgments, weightOf) {
|
|
|
190
196
|
no,
|
|
191
197
|
yesWeight,
|
|
192
198
|
totalWeight,
|
|
199
|
+
restricted,
|
|
193
200
|
reasons: judgments.flatMap((j) => j.reason !== undefined ? [{ verdict: j.verdict, reason: j.reason }] : []),
|
|
194
201
|
};
|
|
195
202
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"judged-suites.js","sourceRoot":"","sources":["../../src/routes/judged-suites.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAkB,GAAG,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAetD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,IAAI,GAAG,GAAG,CAAC;AACjB,MAAM,SAAS,GAAG,mCAAmC,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAgC,EAChC,SAAkC,EAClC,KAA2B,EAC3B,UAAuB;IAEvB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAU,CAAC;IAE7B,CAAC,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IACE,UAAU,KAAK,SAAS;YACxB,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EACnE,CAAC;YACD,OAAO,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,iDAAiD,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,IAAI,CACT,CAAC,EACD,yBAAyB,EACzB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAA0B,CAAC;QAC9D,MAAM,aAAa,GACjB,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAE,SAAS,CAAC,KAAK,CAAC,EAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE;gBACL,EAAE,EAAE,OAAO;gBACX,QAAQ;gBACR,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,QAAQ;gBACd,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxE,IAAI,EAAE;oBACJ,MAAM,EAAE,WAAW;oBACnB,kEAAkE;oBAClE,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;oBAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAClC;aACF;YACD,aAAa,EAAE,CAAC,EAAE,EAAE,EAAE,CACpB,eAAe,CACb,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAC/D,aAAa,CACd;SACJ,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC1C,OAAO,IAAI,CACT,CAAC,EACD,+BAA+B,EAC/B,eAAe,OAAO,cAAc,IAAI,CAAC,OAAO,0BAA0B,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,IAAI,CAAC,SAAS,0BAA0B,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,CAAC,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IACE,UAAU,KAAK,SAAS;YACxB,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,EAC9D,CAAC;YACD,OAAO,IAAI,CAAC,CAAC,EAAE,sBAAsB,EAAE,kBAAkB,OAAO,IAAI,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC;YACjC,QAAQ;YACR,OAAO;YACP,OAAO;YACP,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC;YAChD,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAgB,EAAE,CAAC;SAC/E,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,IAAI,CAAC,CAAkB,EAAE,IAAY,EAAE,OAAe;IAC7D,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAU,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAoBD,+FAA+F;AAC/F,SAAS,YAAY,CACnB,SAAkC,EAClC,QAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,EAAE;QAC5B,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,QAAkB,EAClB,IAAe;IAEf,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IAC7E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,EAAE,CAAC;AAC/D,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,UAAU,CACvB,SAAkC,EAClC,QAAkB,EAClB,IAAe;IAEf,MAAM,IAAI,GAAG,SAAS,CAAC,cAAwE,CAAC;IAChG,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACzD,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,MAAM,IAAI,gBAAgB;gBAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACvF,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,MAA8B,EAC9B,CAAqB,EACrB,QAA+D;IAE/D,MAAM,IAAI,GACR,CAAC,CAAC,aAAa,KAAK,SAAS;QAC3B,CAAC,CAAC,MAAM,CAAC,SAAS;QAClB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CACrB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CACjF,CAAC;IACR,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,KAAK;QACjB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,SAA8B,EAC9B,QAA+D;IAE/D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACzC,WAAW,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACxB,GAAG,IAAI,CAAC,CAAC;YACT,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChE,GAAG;QACH,EAAE;QACF,SAAS;QACT,WAAW;QACX,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACzE;KACF,CAAC;AACJ,CAAC;AAQD,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AAExF,+FAA+F;AAC/F,SAAS,kBAAkB,CAAC,CAA0B;IACpD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,KAAK,8BAA8B,CAAC;QAC3F,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,OAAO,GAAG,KAAK,4BAA4B,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpE,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,SAAS,oBAAoB,CAC3B,CAA0B;IAE1B,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;IAC5B,IACE,GAAG,KAAK,SAAS;QACjB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EACjF,CAAC;QACD,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAK,GAAc,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,0CAA0C,CAAC;IACpD,CAAC;IACD,OAAO;QACL,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,GAAe,EAAE,CAAC;QAC5D,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,GAAa,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,CAA0B;IAC5C,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,MAAM,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAqB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/E,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO;QACL,IAAI,EAAE,IAAI;QACV,IAAI,EAAE;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAsB;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACxE,KAAK;SACN;KACF,CAAC;AACJ,CAAC"}
|
|
1
|
+
{"version":3,"file":"judged-suites.js","sourceRoot":"","sources":["../../src/routes/judged-suites.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAkB,GAAG,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAetD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,IAAI,GAAG,GAAG,CAAC;AACjB,MAAM,SAAS,GAAG,mCAAmC,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAgC,EAChC,SAAkC,EAClC,KAA2B,EAC3B,UAAuB;IAEvB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAU,CAAC;IAE7B,CAAC,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IACE,UAAU,KAAK,SAAS;YACxB,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EACnE,CAAC;YACD,OAAO,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,iDAAiD,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,IAAI,CACT,CAAC,EACD,yBAAyB,EACzB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAA0B,CAAC;QAC9D,MAAM,aAAa,GACjB,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAE,SAAS,CAAC,KAAK,CAAC,EAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE;gBACL,EAAE,EAAE,OAAO;gBACX,QAAQ;gBACR,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,QAAQ;gBACd,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxE,IAAI,EAAE;oBACJ,MAAM,EAAE,WAAW;oBACnB,kEAAkE;oBAClE,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;oBAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAClC;aACF;YACD,aAAa,EAAE,CAAC,EAAE,EAAE,EAAE,CACpB,eAAe,CACb,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAC/D,aAAa,CACd;SACJ,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC1C,OAAO,IAAI,CACT,CAAC,EACD,+BAA+B,EAC/B,eAAe,OAAO,cAAc,IAAI,CAAC,OAAO,0BAA0B,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,IAAI,CAAC,SAAS,0BAA0B,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,CAAC,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IACE,UAAU,KAAK,SAAS;YACxB,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,EAC9D,CAAC;YACD,OAAO,IAAI,CAAC,CAAC,EAAE,sBAAsB,EAAE,kBAAkB,OAAO,IAAI,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC;YACjC,QAAQ;YACR,OAAO;YACP,OAAO;YACP,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC;YAChD,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAgB,EAAE,CAAC;SAC/E,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,IAAI,CAAC,CAAkB,EAAE,IAAY,EAAE,OAAe;IAC7D,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAU,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAoBD,+FAA+F;AAC/F,SAAS,YAAY,CACnB,SAAkC,EAClC,QAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,EAAE;QAC5B,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,QAAkB,EAClB,IAAe;IAEf,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IAC7E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,EAAE,CAAC;AAC/D,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,UAAU,CACvB,SAAkC,EAClC,QAAkB,EAClB,IAAe;IAEf,MAAM,IAAI,GAAG,SAAS,CAAC,cAAwE,CAAC;IAChG,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACzD,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,MAAM,IAAI,gBAAgB;gBAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACvF,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,MAA8B,EAC9B,CAAqB,EACrB,QAA+D;IAE/D,MAAM,IAAI,GACR,CAAC,CAAC,aAAa,KAAK,SAAS;QAC3B,CAAC,CAAC,MAAM,CAAC,SAAS;QAClB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CACrB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CACjF,CAAC;IACR,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,KAAK;QACjB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,SAA8B,EAC9B,QAA+D;IAE/D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,6FAA6F;IAC7F,MAAM,UAAU,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACzC,WAAW,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;YAAE,UAAU,CAAC,WAAW,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACxB,GAAG,IAAI,CAAC,CAAC;YACT,SAAS,IAAI,CAAC,CAAC;YACf,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;gBAAE,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChE,GAAG;QACH,EAAE;QACF,SAAS;QACT,WAAW;QACX,UAAU;QACV,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACzE;KACF,CAAC;AACJ,CAAC;AAQD,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AAExF,+FAA+F;AAC/F,SAAS,kBAAkB,CAAC,CAA0B;IACpD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,KAAK,8BAA8B,CAAC;QAC3F,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,OAAO,GAAG,KAAK,4BAA4B,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpE,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,SAAS,oBAAoB,CAC3B,CAA0B;IAE1B,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;IAC5B,IACE,GAAG,KAAK,SAAS;QACjB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EACjF,CAAC;QACD,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAK,GAAc,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,0CAA0C,CAAC;IACpD,CAAC;IACD,OAAO;QACL,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,GAAe,EAAE,CAAC;QAC5D,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,GAAa,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,CAA0B;IAC5C,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,MAAM,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAqB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/E,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO;QACL,IAAI,EAAE,IAAI;QACV,IAAI,EAAE;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAsB;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACxE,KAAK;SACN;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -4,6 +4,7 @@ import type { RunBinding } from '@kindgi/runtime';
|
|
|
4
4
|
import type { FlowRegistryBinding } from '../flow-binding.js';
|
|
5
5
|
import { type JudgmentRegistryBinding } from '../judgment-binding.js';
|
|
6
6
|
import type { Authorizer } from '../middleware/authorize.js';
|
|
7
|
+
import type { ReviewerBinding } from '../reviewer-binding.js';
|
|
7
8
|
import type { AppEnv } from '../types.js';
|
|
8
9
|
/**
|
|
9
10
|
* Judgments: yes or no, with an optional reason, about one item of a
|
|
@@ -20,7 +21,9 @@ import type { AppEnv } from '../types.js';
|
|
|
20
21
|
* the judgment's project (`read` / `write`), since a judgment outlives
|
|
21
22
|
* its run.
|
|
22
23
|
*/
|
|
23
|
-
export declare function judgmentsRouter(binding: JudgmentRegistryBinding, runBinding: RunBinding, authorizer?: Authorizer, conversations?: ConversationBinding, flows?: FlowRegistryBinding
|
|
24
|
+
export declare function judgmentsRouter(binding: JudgmentRegistryBinding, runBinding: RunBinding, authorizer?: Authorizer, conversations?: ConversationBinding, flows?: FlowRegistryBinding,
|
|
25
|
+
/** Whose reviewer role a restricted judge class checks (T200). */
|
|
26
|
+
reviewers?: ReviewerBinding): Hono<AppEnv>;
|
|
24
27
|
/**
|
|
25
28
|
* Judge classes: the deployment's named classes of judges ("expert",
|
|
26
29
|
* "user", …), each with a weight, scoped to the tenant, a project, or an
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"judgments.d.ts","sourceRoot":"","sources":["../../src/routes/judgments.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,
|
|
1
|
+
{"version":3,"file":"judgments.d.ts","sourceRoot":"","sources":["../../src/routes/judgments.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EASL,KAAK,uBAAuB,EAM7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAM1C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,UAAU,EACtB,UAAU,CAAC,EAAE,UAAU,EACvB,aAAa,CAAC,EAAE,mBAAmB,EACnC,KAAK,CAAC,EAAE,mBAAmB;AAC3B,kEAAkE;AAClE,SAAS,CAAC,EAAE,eAAe,GAC1B,IAAI,CAAC,MAAM,CAAC,CAkKd;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,uBAAuB,EAChC,UAAU,CAAC,EAAE,UAAU,GACtB,IAAI,CAAC,MAAM,CAAC,CA4Jd;AAkXD,2EAA2E;AAC3E,wBAAgB,cAAc,CAC5B,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,GACd;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAe/E"}
|
package/dist/routes/judgments.js
CHANGED
|
@@ -1,9 +1,10 @@
|
|
|
1
1
|
// SPDX-License-Identifier: Apache-2.0
|
|
2
2
|
// Copyright (C) 2026 Kindgi Inc.
|
|
3
3
|
import { Hono } from 'hono';
|
|
4
|
-
import { ref } from '@kindgi/authz';
|
|
4
|
+
import { REVIEWER_ROLE_RANK, ref } from '@kindgi/authz';
|
|
5
5
|
import { statusFor, toWireError } from '../errors.js';
|
|
6
|
-
import { VERDICTS, judgeClassApplies, } from '../judgment-binding.js';
|
|
6
|
+
import { VERDICTS, judgeClassApplies, whyNotAssertable, } from '../judgment-binding.js';
|
|
7
|
+
import { callerReviewerRole } from '../reviewer-role.js';
|
|
7
8
|
import { captureTurnContext } from './judgment-context.js';
|
|
8
9
|
import { captureFlowContext } from './judgment-flow-context.js';
|
|
9
10
|
import { clampLimit } from './pagination.js';
|
|
@@ -23,7 +24,9 @@ import { parseListScope } from './scope-params.js';
|
|
|
23
24
|
* the judgment's project (`read` / `write`), since a judgment outlives
|
|
24
25
|
* its run.
|
|
25
26
|
*/
|
|
26
|
-
export function judgmentsRouter(binding, runBinding, authorizer, conversations, flows
|
|
27
|
+
export function judgmentsRouter(binding, runBinding, authorizer, conversations, flows,
|
|
28
|
+
/** Whose reviewer role a restricted judge class checks (T200). */
|
|
29
|
+
reviewers) {
|
|
27
30
|
const r = new Hono();
|
|
28
31
|
r.post('/', async (c) => {
|
|
29
32
|
const requestId = c.get('requestId');
|
|
@@ -40,10 +43,13 @@ export function judgmentsRouter(binding, runBinding, authorizer, conversations,
|
|
|
40
43
|
if (asserted === undefined) {
|
|
41
44
|
return fail('permission-denied', 'Judging needs a user or a service token.');
|
|
42
45
|
}
|
|
43
|
-
const prepared = await prepareJudgment(c, body, runBinding, binding, authorizer
|
|
46
|
+
const prepared = await prepareJudgment(c, body, runBinding, binding, authorizer, {
|
|
47
|
+
asserted,
|
|
48
|
+
reviewers,
|
|
49
|
+
});
|
|
44
50
|
if (prepared.kind === 'err')
|
|
45
51
|
return fail(prepared.code, prepared.message);
|
|
46
|
-
const { run, subject, projectId, itemValue, conversationId } = prepared;
|
|
52
|
+
const { run, subject, projectId, itemValue, conversationId, restricted } = prepared;
|
|
47
53
|
const context = (await isFirstJudgment(binding, tenantId, body.runId))
|
|
48
54
|
? await captureContext({
|
|
49
55
|
tenantId,
|
|
@@ -71,6 +77,7 @@ export function judgmentsRouter(binding, runBinding, authorizer, conversations,
|
|
|
71
77
|
verdict: body.verdict,
|
|
72
78
|
...(body.reason !== undefined && { reason: body.reason }),
|
|
73
79
|
...(body.judgeClassId !== undefined && { judgeClassId: body.judgeClassId }),
|
|
80
|
+
...(restricted === true && { restricted }),
|
|
74
81
|
assertedBy: asserted,
|
|
75
82
|
...(body.participantId !== undefined && { participantId: body.participantId }),
|
|
76
83
|
});
|
|
@@ -178,7 +185,7 @@ export function judgeClassesRouter(binding, authorizer) {
|
|
|
178
185
|
const parsed = parseClassBody(await c.req.json().catch(() => null));
|
|
179
186
|
if (parsed.kind === 'err')
|
|
180
187
|
return fail('bad-input', parsed.message);
|
|
181
|
-
const { scope, name, weight, description } = parsed.body;
|
|
188
|
+
const { scope, name, weight, description, assertableBy } = parsed.body;
|
|
182
189
|
if (authorizer !== undefined &&
|
|
183
190
|
!(await authorizer.can(c, 'admin', scopeRef(tenantId, scope)))) {
|
|
184
191
|
return fail('permission-denied', 'Not allowed to manage judge classes in this scope.');
|
|
@@ -189,6 +196,7 @@ export function judgeClassesRouter(binding, authorizer) {
|
|
|
189
196
|
name,
|
|
190
197
|
weight,
|
|
191
198
|
...(description !== undefined && { description }),
|
|
199
|
+
...(assertableBy !== undefined && { assertableBy }),
|
|
192
200
|
});
|
|
193
201
|
if (outcome.kind === 'name-taken') {
|
|
194
202
|
return fail('judge-class-name-taken', `A judge class named "${name}" already exists here.`);
|
|
@@ -255,15 +263,19 @@ export function judgeClassesRouter(binding, authorizer) {
|
|
|
255
263
|
const raw = (await c.req.json().catch(() => null));
|
|
256
264
|
const weight = raw?.weight;
|
|
257
265
|
const description = raw?.description;
|
|
266
|
+
const assertableBy = raw?.assertableBy === undefined ? undefined : parseAssertableBy(raw.assertableBy);
|
|
258
267
|
if (raw === null ||
|
|
259
268
|
typeof raw !== 'object' ||
|
|
260
|
-
(weight === undefined && description === undefined) ||
|
|
269
|
+
(weight === undefined && description === undefined && assertableBy === undefined) ||
|
|
261
270
|
(weight !== undefined && !isWeight(weight)) ||
|
|
262
|
-
(description !== undefined && typeof description !== 'string')
|
|
271
|
+
(description !== undefined && typeof description !== 'string') ||
|
|
272
|
+
typeof assertableBy === 'string') {
|
|
263
273
|
c.status(statusFor('bad-input'));
|
|
264
274
|
return c.json(toWireError({
|
|
265
275
|
code: 'bad-input',
|
|
266
|
-
message:
|
|
276
|
+
message: typeof assertableBy === 'string'
|
|
277
|
+
? assertableBy
|
|
278
|
+
: 'Send weight (a number ≥ 0), description (a string) and/or assertableBy (who may assert the class, or null for anyone).',
|
|
267
279
|
}, requestId));
|
|
268
280
|
}
|
|
269
281
|
const found = await loadClass(c, 'admin');
|
|
@@ -276,6 +288,7 @@ export function judgeClassesRouter(binding, authorizer) {
|
|
|
276
288
|
judgeClassId: found.id,
|
|
277
289
|
...(weight !== undefined && { weight: weight }),
|
|
278
290
|
...(description !== undefined && { description: description }),
|
|
291
|
+
...(assertableBy !== undefined && { assertableBy }),
|
|
279
292
|
});
|
|
280
293
|
return updated === null ? classNotFound(c, found.id) : c.json(serializeJudgeClass(updated));
|
|
281
294
|
});
|
|
@@ -296,7 +309,7 @@ export function judgeClassesRouter(binding, authorizer) {
|
|
|
296
309
|
* the run exists, the caller may judge it, it has finished with an output,
|
|
297
310
|
* the class (if any) applies to it, and the pointer (if any) resolves.
|
|
298
311
|
*/
|
|
299
|
-
async function prepareJudgment(c, body, runBinding, binding, authorizer) {
|
|
312
|
+
async function prepareJudgment(c, body, runBinding, binding, authorizer, who) {
|
|
300
313
|
const err = (code, message) => ({ kind: 'err', code, message });
|
|
301
314
|
const tenantId = c.get('tenantId');
|
|
302
315
|
const run = await runBinding.getRun(tenantId, body.runId);
|
|
@@ -313,19 +326,39 @@ async function prepareJudgment(c, body, runBinding, binding, authorizer) {
|
|
|
313
326
|
}
|
|
314
327
|
const subject = subjectOf(run);
|
|
315
328
|
const projectId = run.projectId;
|
|
316
|
-
|
|
317
|
-
|
|
318
|
-
|
|
329
|
+
let restricted = false;
|
|
330
|
+
if (body.judgeClassId !== undefined) {
|
|
331
|
+
const judgeClass = await applicableClass(binding, tenantId, body.judgeClassId, {
|
|
332
|
+
projectId,
|
|
333
|
+
subject,
|
|
334
|
+
});
|
|
335
|
+
if (judgeClass === null) {
|
|
336
|
+
return err('judge-class-not-applicable', `Judge class "${body.judgeClassId}" doesn't exist or doesn't apply to this run's project or agent.`);
|
|
337
|
+
}
|
|
338
|
+
if (judgeClass.assertableBy !== undefined) {
|
|
339
|
+
const reviewerRole = await callerReviewerRole(c, who.reviewers);
|
|
340
|
+
const why = whyNotAssertable(judgeClass.assertableBy, {
|
|
341
|
+
...who.asserted,
|
|
342
|
+
...(reviewerRole !== undefined && { reviewerRole }),
|
|
343
|
+
});
|
|
344
|
+
if (why !== undefined) {
|
|
345
|
+
return err('judge-class-not-allowed', `You can't judge as "${judgeClass.name}": ${why}.`);
|
|
346
|
+
}
|
|
347
|
+
restricted = true;
|
|
348
|
+
}
|
|
319
349
|
}
|
|
320
350
|
const copy = { input: run.input, output: run.output };
|
|
321
|
-
const
|
|
351
|
+
const extra = {
|
|
352
|
+
...(run.agent !== undefined && { conversationId: run.agent.conversationId }),
|
|
353
|
+
...(restricted && { restricted: true }),
|
|
354
|
+
};
|
|
322
355
|
if (body.item.pointer === undefined)
|
|
323
|
-
return { kind: 'ok', run: copy, subject, projectId, ...
|
|
356
|
+
return { kind: 'ok', run: copy, subject, projectId, ...extra };
|
|
324
357
|
const found = resolvePointer(run.output, body.item.pointer);
|
|
325
358
|
if (!found.found) {
|
|
326
359
|
return err('item-not-found', `Nothing at "${body.item.pointer}" in run "${body.runId}"'s output.`);
|
|
327
360
|
}
|
|
328
|
-
return { kind: 'ok', run: copy, subject, projectId, itemValue: found.value, ...
|
|
361
|
+
return { kind: 'ok', run: copy, subject, projectId, itemValue: found.value, ...extra };
|
|
329
362
|
}
|
|
330
363
|
/** Whether the run has no live judgment yet (its copy is stored with the first). */
|
|
331
364
|
/**
|
|
@@ -355,10 +388,10 @@ async function isFirstJudgment(binding, tenantId, runId) {
|
|
|
355
388
|
const page = await binding.list({ tenantId, runId, limit: 1 });
|
|
356
389
|
return page.data.length === 0;
|
|
357
390
|
}
|
|
358
|
-
/**
|
|
359
|
-
async function
|
|
391
|
+
/** The live class, when it exists and its scope covers the run; else `null`. */
|
|
392
|
+
async function applicableClass(binding, tenantId, judgeClassId, run) {
|
|
360
393
|
const judgeClass = await binding.getClass({ tenantId, judgeClassId });
|
|
361
|
-
return judgeClass !== null && judgeClassApplies(judgeClass.scope, run);
|
|
394
|
+
return judgeClass !== null && judgeClassApplies(judgeClass.scope, run) ? judgeClass : null;
|
|
362
395
|
}
|
|
363
396
|
const MAX_REASON = 4000;
|
|
364
397
|
function parseJudgmentBody(raw) {
|
|
@@ -420,6 +453,40 @@ function parseItem(raw) {
|
|
|
420
453
|
...(typeof i.rank === 'number' && { rank: i.rank }),
|
|
421
454
|
};
|
|
422
455
|
}
|
|
456
|
+
const ASSERTABLE_BY_USAGE = 'assertableBy says who may assert the class: { minReviewerRole?: "standard" | "senior" | "admin", principalKinds?: ["user" | "service", …], principalIds?: [id, …] }, with at least one of them.';
|
|
457
|
+
/** `assertableBy`: a restriction, `null` (on an update: lift it), or what's wrong. */
|
|
458
|
+
function parseAssertableBy(raw) {
|
|
459
|
+
if (raw === null)
|
|
460
|
+
return null;
|
|
461
|
+
if (typeof raw !== 'object' || Array.isArray(raw))
|
|
462
|
+
return ASSERTABLE_BY_USAGE;
|
|
463
|
+
const b = raw;
|
|
464
|
+
const keys = Object.keys(b);
|
|
465
|
+
const known = ['minReviewerRole', 'principalKinds', 'principalIds'];
|
|
466
|
+
if (keys.length === 0 || keys.some((k) => !known.includes(k)))
|
|
467
|
+
return ASSERTABLE_BY_USAGE;
|
|
468
|
+
const role = b.minReviewerRole;
|
|
469
|
+
if (role !== undefined && !(typeof role === 'string' && role in REVIEWER_ROLE_RANK)) {
|
|
470
|
+
return ASSERTABLE_BY_USAGE;
|
|
471
|
+
}
|
|
472
|
+
const kinds = b.principalKinds;
|
|
473
|
+
if (kinds !== undefined &&
|
|
474
|
+
!(Array.isArray(kinds) &&
|
|
475
|
+
kinds.length > 0 &&
|
|
476
|
+
kinds.every((k) => k === 'user' || k === 'service'))) {
|
|
477
|
+
return ASSERTABLE_BY_USAGE;
|
|
478
|
+
}
|
|
479
|
+
const ids = b.principalIds;
|
|
480
|
+
if (ids !== undefined &&
|
|
481
|
+
!(Array.isArray(ids) && ids.length > 0 && ids.length <= 100 && ids.every(nonEmpty))) {
|
|
482
|
+
return ASSERTABLE_BY_USAGE;
|
|
483
|
+
}
|
|
484
|
+
return {
|
|
485
|
+
...(role !== undefined && { minReviewerRole: role }),
|
|
486
|
+
...(kinds !== undefined && { principalKinds: kinds }),
|
|
487
|
+
...(ids !== undefined && { principalIds: ids }),
|
|
488
|
+
};
|
|
489
|
+
}
|
|
423
490
|
function parseClassBody(raw) {
|
|
424
491
|
const err = (message) => ({ kind: 'err', message });
|
|
425
492
|
if (raw === null || typeof raw !== 'object')
|
|
@@ -435,6 +502,9 @@ function parseClassBody(raw) {
|
|
|
435
502
|
const scope = parseClassScope(b.scope);
|
|
436
503
|
if (typeof scope === 'string')
|
|
437
504
|
return err(scope);
|
|
505
|
+
const assertableBy = b.assertableBy === undefined ? undefined : parseAssertableBy(b.assertableBy);
|
|
506
|
+
if (typeof assertableBy === 'string')
|
|
507
|
+
return err(assertableBy);
|
|
438
508
|
return {
|
|
439
509
|
kind: 'ok',
|
|
440
510
|
body: {
|
|
@@ -442,6 +512,7 @@ function parseClassBody(raw) {
|
|
|
442
512
|
name: b.name,
|
|
443
513
|
weight: b.weight,
|
|
444
514
|
...(typeof b.description === 'string' && { description: b.description }),
|
|
515
|
+
...(assertableBy !== undefined && assertableBy !== null && { assertableBy }),
|
|
445
516
|
},
|
|
446
517
|
};
|
|
447
518
|
}
|
|
@@ -536,6 +607,7 @@ function serializeJudgment(j) {
|
|
|
536
607
|
verdict: j.verdict,
|
|
537
608
|
...(j.reason !== undefined && { reason: j.reason }),
|
|
538
609
|
...(j.judgeClassId !== undefined && { judgeClassId: j.judgeClassId }),
|
|
610
|
+
...(j.restricted === true && { restricted: true }),
|
|
539
611
|
assertedBy: j.assertedBy,
|
|
540
612
|
...(j.participantId !== undefined && { participantId: j.participantId }),
|
|
541
613
|
createdAt: j.createdAt,
|
|
@@ -558,6 +630,7 @@ function serializeJudgeClass(k) {
|
|
|
558
630
|
name: k.name,
|
|
559
631
|
weight: k.weight,
|
|
560
632
|
...(k.description !== undefined && { description: k.description }),
|
|
633
|
+
...(k.assertableBy !== undefined && { assertableBy: k.assertableBy }),
|
|
561
634
|
createdAt: k.createdAt,
|
|
562
635
|
updatedAt: k.updatedAt,
|
|
563
636
|
...(k.unregisteredAt !== undefined && { unregisteredAt: k.unregisteredAt }),
|