@unotest/judge 0.32.0 → 0.35.0

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # @unotest/judge
 
+## [0.35.0] - 2026-09-15
+
+### Patch Changes
+
+- Updated dependencies [79c99ab]
+- Updated dependencies [dee96a1]
+  - @unotest/protocol@0.35.0
+
+## [0.34.0] - 2026-09-07
+
+### Patch Changes
+
+- Updated dependencies [32a495e]
+- Updated dependencies [c6b91bb]
+  - @unotest/protocol@0.34.0
+
+## [0.33.0] - 2026-09-06
+
+### Patch Changes
+
+- b3e1220: Judge: the bearer token on `/judge` is compared in constant time, and the
+  docs say what a verdict sends and what it is not.
+
+  `UNOTEST_JUDGE_TOKEN` was checked with a plain string comparison, which
+  returns as soon as one character differs; both sides are now hashed and
+  compared with `timingSafeEqual`. The judge guide and the package README
+  gain a section on what leaves the machine — the one element's rendered
+  text and the rubric, nothing else; the secret redactor does not act on
+  that body; CI defaults to `fake` — and on why a verdict, being a model's
+  reading of the page's own text, is a check on wording and never a
+  security gate.
+
+- Updated dependencies [2abfd4d]
+- Updated dependencies [b3e1220]
+- Updated dependencies [b3e1220]
+- Updated dependencies [5d1bde3]
+  - @unotest/protocol@0.33.0
+
 ## [0.32.0] - 2026-09-05
 
 ### Patch Changes

package/README.md

@@ -154,6 +154,21 @@ reply.
 > writes it to stdout verbatim. It is opt-in for that reason; do not
 > enable it on a shared runner without deciding that is acceptable.
 
+## What the provider sees
+
+A `/judge` call forwards two strings to the model: the `text` (in
+`@unotest/web`, the rendered `innerText` of the one element the locator
+resolved) and the `rubric`, with the preamble in front when one is
+configured. Nothing else — no DOM, no screenshot, no environment. The
+runner's secret redactor masks artifacts on disk and does not touch this
+request body, so a locator over an element that renders personal data
+sends that data to the provider. CI defaults to the `fake` provider,
+which calls no model.
+
+A verdict is the model's reading of text the application produced: a
+page that instructs the judge can steer it. Use `assertJudge` for
+wording and meaning, never as a security gate.
+
 ## HTTP API
 
 - `POST /judge` — body `{"rubric": "...", "text": "..."}` → a

package/dist/{chunk-ADU4QPCJ.js → chunk-7NJKM46N.js}

@@ -994,6 +994,17 @@ import {
   JUDGE_ENV as JUDGE_ENV3,
   JUDGE_ROUTES
 } from "@unotest/protocol";
+
+// src/bearer.ts
+import { createHash, timingSafeEqual } from "crypto";
+function bearerMatches(authorization, token) {
+  if (authorization === void 0) return false;
+  const a = createHash("sha256").update(authorization, "utf8").digest();
+  const b = createHash("sha256").update(`Bearer ${token}`, "utf8").digest();
+  return timingSafeEqual(a, b);
+}
+
+// src/server.ts
 var MAX_BODY_BYTES = 1024 * 1024;
 var DRAIN_TIMEOUT_MS = 5e3;
 function startJudgeServer(service, env, deps = {}) {
@@ -1031,7 +1042,7 @@ async function route(ctx, req, res) {
     sendError(res, 404, `unknown route ${req.method} ${url}`, "bad-request");
     return;
   }
-  if (ctx.env.token && req.headers.authorization !== `Bearer ${ctx.env.token}`) {
+  if (ctx.env.token && !bearerMatches(req.headers.authorization, ctx.env.token)) {
     sendError(res, 401, `missing or wrong bearer token (${JUDGE_ENV3.token})`, "unauthorized");
     return;
   }
@@ -1154,4 +1165,4 @@ export {
   createJudgeServiceFromEnv,
   startJudgeServer
 };
-//# sourceMappingURL=chunk-ADU4QPCJ.js.map
+//# sourceMappingURL=chunk-7NJKM46N.js.map

package/dist/cli.js

@@ -6,7 +6,7 @@ import {
   resolveJudgeServiceEnv,
   resolveLogLevel,
   startJudgeServer
-} from "./chunk-ADU4QPCJ.js";
+} from "./chunk-7NJKM46N.js";
 
 // src/cli.ts
 import { JUDGE_ENV } from "@unotest/protocol";

package/dist/index.js

@@ -34,7 +34,7 @@ import {
   vertexEndpoint,
   withLogging,
   withTransientRetry
-} from "./chunk-ADU4QPCJ.js";
+} from "./chunk-7NJKM46N.js";
 
 // src/index.ts
 import { JUDGE_ROUTES } from "@unotest/protocol";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unotest/judge",
-  "version": "0.32.0",
+  "version": "0.35.0",
   "description": "LLM-judge service for the @unotest ecosystem: judges free-form text (chat replies, generated content) against a natural-language rubric and returns a structured pass/fail verdict with reasoning. Runs as a small HTTP service (`npx @unotest/judge`) or in-process. Providers: deterministic `fake` (CI-safe), Google Vertex AI via ADC, the local Claude Code CLI (subscription auth, no API key), and Gemini / OpenAI / Anthropic APIs via keys — all raw HTTP or a local process, zero provider SDKs. Backs the `assertJudge` DSL assertion of @unotest/web.",
   "license": "MIT",
   "publishConfig": {
@@ -33,7 +33,7 @@
   ],
   "dependencies": {
     "google-auth-library": "^10.0.0",
-    "@unotest/protocol": "^0.32.0"
+    "@unotest/protocol": "^0.35.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",