@verdict-ai/api 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) 2026 Verdict contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -1,3 +1,22 @@
-# Temporary Holding Version
+# @verdict-ai/api
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Hono REST API for Node and Cloudflare Workers.
+
+```bash
+npm install @verdict-ai/api @verdict-ai/core
+```
+
+```ts
+import { Engine, MemoryStore } from "@verdict-ai/core";
+import { createApp } from "@verdict-ai/api";
+const engine = new Engine({ store: new MemoryStore() });
+const app = createApp({ engine });
+const response = await app.request("/v1/health");
+console.log(response.status);
+console.log(await response.json());
+// Export app.fetch for a compatible HTTP runtime.
+// Configure authentication before exposing a public service.
+export default app;
+```
+
+Requires Node 20 or newer. [Documentation](https://verdict-docs.developerolim.workers.dev/reference/rest). MIT licensed.

package/dist/app.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Assembles authenticated REST routes around an injected engine.
+ * Request bodies are validated at the boundary; Workers imports must remain free of eager Node I/O.
+ */
+import { Engine, type Actor, type Authorize } from "@verdict-ai/core";
+import { Hono } from "hono";
+import { type ClientKey, type HubLimits } from "./rate-limit.js";
+import type { GithubConfig } from "./github.js";
+/** A request's account and who made it. `claims` reach `authorize` as they are (a role, what a key may reach). */
+export interface Identity {
+    tenantId: string;
+    actor: Actor;
+    claims?: Record<string, unknown>;
+}
+export interface Auth {
+    /**
+     * Map an API key to a tenant id — or to a tenant and who is asking — or undefined to reject. Return "" for
+     * single-tenant open mode. A bare tenant id means an unnamed key made the request.
+     *
+     * `request` is the request being authenticated, for servers where the key alone does not settle the tenant: a
+     * person who belongs to several organisations names one (`x-verdict-org`), and a browser sends a session cookie
+     * and no key. Servers that map a key to one tenant ignore it.
+     */
+    resolve(apiKey: string | undefined, request?: Request): Promise<string | Identity | undefined> | string | Identity | undefined;
+}
+/** How this server signs people in from the CLI, when it runs the approval itself. */
+export interface BrowserSignIn {
+    kind: "browser";
+    /** POST → `{ deviceCode, userCode, verificationUri, expiresIn, interval }`. Path on this server. */
+    start: string;
+    /** POST `{ deviceCode }` → `{ apiKey, keyId?, handle? }`, or an error of type `authorization_pending`, `slow_down`, `expired_token` or `access_denied`. */
+    token: string;
+}
+/** Route groups an app can serve (docs/design/control-plane.md §9.2). Admin and discovery routes are always there. */
+export declare const ROUTE_GROUPS: readonly ["evaluations", "rubrics", "hub", "control"];
+export type RouteGroup = (typeof ROUTE_GROUPS)[number];
+/** Reads `VERDICT_ROUTES="hub,control"`; unset serves every group. Throws on a name that is not a group, at startup. */
+export declare function routeGroups(value: string | undefined): readonly RouteGroup[];
+/** `VERDICT_API_KEYS="key1:tenantA,key2:tenantB"`; a bare key maps to tenant "default". Unset = open (single tenant). */
+export declare function envAuth(env?: Record<string, string | undefined>): Auth;
+/** Optional API-key management (backed by @verdict-ai/db's DrizzleAuth). Exposed under /v1/admin with VERDICT_ADMIN_KEY. */
+export interface KeyManager {
+    createKey(tenantId: string, name: string): Promise<{
+        id: string;
+        key: string;
+        prefix: string;
+    }>;
+    revokeKey(id: string, tenantId?: string): Promise<boolean>;
+    listKeys(tenantId: string): Promise<Array<{
+        id: string;
+        name: string;
+        prefix: string;
+        createdAt: string;
+        lastUsedAt: string | null;
+        revokedAt: string | null;
+    }>>;
+}
+export interface AppOptions {
+    engine: Engine;
+    auth?: Auth;
+    keys?: KeyManager;
+    /** Bearer token for /v1/admin/* (default: env VERDICT_ADMIN_KEY). Unset = admin routes disabled. */
+    adminKey?: string;
+    /** Return 202 immediately and finish in the background when the client asks (`"async": true`). */
+    background?: (promise: Promise<unknown>) => void;
+    allowAsync?: boolean;
+    log?: boolean;
+    /** Public handle a tenant publishes under on the hub; undefined refuses publishing. Default: the tenant id. */
+    publisherOf?: (tenantId: string | undefined) => Promise<string | undefined> | string | undefined;
+    /** Clock for stored timestamps (tests). */
+    now?: () => number;
+    /** GitHub OAuth App for hub sign-in (GITHUB_CLIENT_ID / GITHUB_CLIENT_SECRET). Unset: tenants publish under their id. */
+    github?: GithubConfig;
+    /** Limits on sign-in, publishing and public reads. Default: in-memory counters (`DEFAULT_HUB_RULES`); `{}` turns them off. */
+    limits?: HubLimits;
+    /** Who a request comes from, for per-client limits. Default: Cloudflare's `cf-connecting-ip`, else one shared bucket. */
+    clientKey?: ClientKey;
+    /** Which route groups to serve; a group left out answers 404. Default: all of `ROUTE_GROUPS`. */
+    routes?: readonly RouteGroup[];
+    /** Allows or refuses each control-plane request (`/v1/projects…`). Default: a valid key may do everything. */
+    authorize?: Authorize;
+    /** Announced in `/v1/hub/config` so `verdict login` follows it. The routes it names are the embedding server's own. */
+    signIn?: BrowserSignIn;
+}
+export type Env = {
+    Variables: {
+        tenantId: string;
+        actor: Actor;
+        claims?: Record<string, unknown>;
+    };
+};
+/** Builds the REST app around an engine; route failures are translated into HTTP error responses. */
+export declare function createApp(options: AppOptions): Hono<Env, import("hono/types").BlankSchema, "/">;
+export { present } from "./present.js";

package/dist/app.js

@@ -0,0 +1,120 @@
+/**
+ * Assembles authenticated REST routes around an injected engine.
+ * Request bodies are validated at the boundary; Workers imports must remain free of eager Node I/O.
+ */
+import { ConflictError, NotFoundError, ValidationError } from "@verdict-ai/core";
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { HTTPException } from "hono/http-exception";
+import { logger } from "hono/logger";
+import { z } from "zod";
+import { openapiFor } from "./openapi.js";
+import { registerAdmin } from "./routes/admin.js";
+import { registerBatches } from "./routes/batches.js";
+import { registerEvaluations } from "./routes/evaluations.js";
+import { registerPublications } from "./routes/publications.js";
+import { publisherFor, PUBLIC_HUB_PATHS, registerHub } from "./routes/hub.js";
+import { isPublicHubPath, registerPublicHub } from "./routes/public-hub.js";
+import { defaultClientKey, defaultHubLimits, RateLimitedError } from "./rate-limit.js";
+import { registerRubrics } from "./routes/rubrics.js";
+import { registerProjects } from "./routes/projects.js";
+import { registerProjectVersions } from "./routes/project-versions.js";
+import { registerPromotions } from "./routes/promotions.js";
+import { registerReports } from "./routes/reports.js";
+import { ApiError } from "./routes/shared.js";
+/** Route groups an app can serve (docs/design/control-plane.md §9.2). Admin and discovery routes are always there. */
+export const ROUTE_GROUPS = ["evaluations", "rubrics", "hub", "control"];
+/** Reads `VERDICT_ROUTES="hub,control"`; unset serves every group. Throws on a name that is not a group, at startup. */
+export function routeGroups(value) {
+    if (!value?.trim())
+        return ROUTE_GROUPS;
+    const names = value.split(",").map((name) => name.trim()).filter(Boolean);
+    const unknown = names.filter((name) => !ROUTE_GROUPS.includes(name));
+    if (unknown.length)
+        throw new Error(`VERDICT_ROUTES: unknown route group ${unknown.join(", ")}; use ${ROUTE_GROUPS.join(", ")}`);
+    return names;
+}
+/** `VERDICT_API_KEYS="key1:tenantA,key2:tenantB"`; a bare key maps to tenant "default". Unset = open (single tenant). */
+export function envAuth(env = globalThis.process?.env ?? {}) {
+    const raw = env.VERDICT_API_KEYS?.trim();
+    if (!raw)
+        return { resolve: () => "default" };
+    const keys = new Map(raw.split(",").map((pair) => { const [k, t] = pair.trim().split(":"); return [k, t ?? "default"]; }));
+    return { resolve: (k) => (k ? keys.get(k) : undefined) };
+}
+/** Builds the REST app around an engine; route failures are translated into HTTP error responses. */
+export function createApp(options) {
+    const { engine, auth = envAuth(), keys, adminKey = globalThis.process?.env?.VERDICT_ADMIN_KEY, allowAsync = true, background, log = false, now, routes = ROUTE_GROUPS } = options;
+    const app = new Hono();
+    if (log)
+        app.use(logger());
+    app.use("*", cors({ exposeHeaders: ["Idempotency-Replayed", "ETag"] }));
+    app.get("/", (c) => c.json({ name: "verdict", version: "0.1.0", docs: "/v1/openapi.json" }));
+    app.get("/v1/health", (c) => c.json({ ok: true }));
+    const openapi = openapiFor(routes);
+    app.get("/v1/openapi.json", (c) => c.json(openapi));
+    // why: admin routes use their own credential and must be registered before tenant authentication.
+    registerAdmin(app, { engine, keys, adminKey, allowAsync, background, now });
+    app.use("/v1/*", async (c, next) => {
+        if (c.req.path === "/v1/health" || c.req.path === "/v1/openapi.json" || c.req.path.startsWith("/v1/admin/") || PUBLIC_HUB_PATHS.has(c.req.path) || isPublicHubPath(c.req.path))
+            return next();
+        const header = c.req.header("authorization");
+        const key = header?.replace(/^Bearer\s+/i, "") ?? c.req.header("x-api-key");
+        const who = await auth.resolve(key, c.req.raw);
+        if (who === undefined)
+            throw new HTTPException(401, { message: "invalid or missing API key" });
+        const identity = typeof who === "string" ? { tenantId: who, actor: { kind: "key" } } : who;
+        c.set("tenantId", identity.tenantId);
+        c.set("actor", identity.actor);
+        if (identity.claims)
+            c.set("claims", identity.claims);
+        await next();
+    });
+    app.onError((err, c) => {
+        if (err instanceof RateLimitedError) {
+            c.header("retry-after", "60");
+            return c.json({ error: { type: "rate_limited", message: err.message } }, 429);
+        }
+        if (err instanceof ApiError)
+            return c.json({ error: { type: err.type, message: err.message, ...err.extra } }, err.status);
+        if (err instanceof HTTPException)
+            return c.json({ error: { type: "http", message: err.message } }, err.status);
+        if (err instanceof z.ZodError)
+            return c.json({ error: { type: "validation", message: "invalid request", issues: err.issues } }, 400);
+        if (err instanceof NotFoundError)
+            return c.json({ error: { type: "not_found", message: err.message } }, 404);
+        if (err instanceof ConflictError)
+            return c.json({ error: { type: "idempotency_conflict", message: err.message } }, 409);
+        if (err instanceof ValidationError)
+            return c.json({ error: { type: "validation", message: err.message } }, 400);
+        const message = err.message ?? "internal error";
+        // why: legacy rubric validators still throw plain errors; preserve their established 400 responses.
+        const status = /duplicate|unknown|requires|must/i.test(message) ? 400 : 500;
+        return c.json({ error: { type: status === 400 ? "validation" : "internal", message } }, status);
+    });
+    registerGroups(app, { ...options, engine, keys, adminKey, allowAsync, background, routes });
+    return app;
+}
+function registerGroups(app, options) {
+    const { engine, keys, adminKey, allowAsync, background, github, now, limits = defaultHubLimits(now), clientKey = defaultClientKey, publisherOf } = options;
+    const on = (group) => options.routes.includes(group);
+    if (on("rubrics"))
+        registerRubrics(app, { engine, keys, adminKey, allowAsync, background });
+    if (on("evaluations")) {
+        registerEvaluations(app, { engine, keys, adminKey, allowAsync, background });
+        registerBatches(app, { engine, keys, adminKey, allowAsync, background });
+    }
+    if (on("hub")) {
+        registerHub(app, { engine, keys, github, now, limits, clientKey, signIn: options.signIn });
+        registerPublications(app, { engine, publisherOf: publisherOf ?? publisherFor({ engine, github }), now, limits });
+        registerPublicHub(app, { engine, limits, clientKey });
+    }
+    if (on("control")) {
+        registerProjects(app, options);
+        registerProjectVersions(app, options);
+        registerPromotions(app, options);
+        registerReports(app, options);
+    }
+}
+export { present } from "./present.js";
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,aAAa,EAAU,aAAa,EAAE,eAAe,EAA8B,MAAM,kBAAkB,CAAC;AACrH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAkC,MAAM,iBAAiB,CAAC;AAEvH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AA0B9C,sHAAsH;AACtH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAU,CAAC;AAGlF,wHAAwH;AACxH,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,OAAO,YAAY,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAE,YAAkC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5F,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjI,OAAO,KAAqB,CAAC;AAC/B,CAAC;AAED,yHAAyH;AACzH,MAAM,UAAU,OAAO,CAAC,MAA2C,UAAyE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE;IAC7J,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAE,EAAE,CAAC,IAAI,SAAS,CAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrI,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3D,CAAC;AAuCD,qGAAqG;AACrG,MAAM,UAAU,SAAS,CAAC,OAAmB;IAC3C,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,GAAI,UAA6D,CAAC,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,UAAU,GAAG,IAAI,EAAE,UAAU,EAAE,GAAG,GAAG,KAAK,EAAE,GAAG,EAAE,MAAM,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IACtO,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO,CAAC;IAC5B,IAAI,GAAG;QAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAExE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAC7F,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEpD,kGAAkG;IAClG,aAAa,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAE5E,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAC9L,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAa,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACrG,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM;YAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACrB,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;YAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;QACtJ,IAAI,GAAG,YAAY,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1H,IAAI,GAAG,YAAY,aAAa;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/G,IAAI,GAAG,YAAY,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACrI,IAAI,GAAG,YAAY,aAAa;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7G,IAAI,GAAG,YAAY,aAAa;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACxH,IAAI,GAAG,YAAY,eAAe;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAChH,MAAM,OAAO,GAAI,GAAa,CAAC,OAAO,IAAI,gBAAgB,CAAC;QAC3D,oGAAoG;QACpG,MAAM,MAAM,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,cAAc,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAE5F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,GAAc,EAAE,OAAuD;IAC7F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,GAAG,gBAAgB,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAC3J,MAAM,EAAE,GAAG,CAAC,KAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,EAAE,CAAC,SAAS,CAAC;QAAE,eAAe,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5F,IAAI,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QACtB,mBAAmB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7E,eAAe,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACd,WAAW,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,oBAAoB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACjH,iBAAiB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAClB,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/B,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACtC,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}

package/dist/github.d.ts

@@ -0,0 +1,15 @@
+export interface GithubConfig {
+    /** OAuth App client id; public — the CLI reads it from GET /v1/hub/config to start the device flow. */
+    clientId: string;
+    /** OAuth App client secret; when set, tokens are checked against this app. */
+    clientSecret?: string;
+    /** Default https://api.github.com (GitHub Enterprise Server: https://HOST/api/v3). */
+    apiUrl?: string;
+    fetch?: typeof fetch;
+}
+export interface GithubAccount {
+    id: number;
+    login: string;
+}
+/** Resolves the account a token belongs to; 401 for a token GitHub rejects, 502 when GitHub cannot be asked. */
+export declare function verifyGithubToken(token: string, cfg: GithubConfig): Promise<GithubAccount>;

package/dist/github.js

@@ -0,0 +1,40 @@
+/**
+ * Verifies who a GitHub token belongs to, for hub sign-in (docs/design/hub.md H2). The CLI runs GitHub's device flow
+ * itself and hands the hub a token; the hub only asks GitHub whose it is, then forgets it.
+ *   - With the OAuth App's client secret, the hub asks GitHub to check the token *for this app*
+ *     (POST /applications/{client_id}/token): a token minted for another app is refused.
+ *   - Without it, the hub reads GET /user: any valid token of the account is accepted. Fine for trying things out;
+ *     production should set the secret.
+ * Only `fetch` is used, so this runs on Workers.
+ */
+import { HTTPException } from "hono/http-exception";
+const HEADERS = { accept: "application/vnd.github+json", "x-github-api-version": "2022-11-28", "user-agent": "verdict-hub" };
+/** Resolves the account a token belongs to; 401 for a token GitHub rejects, 502 when GitHub cannot be asked. */
+export async function verifyGithubToken(token, cfg) {
+    const api = (cfg.apiUrl ?? "https://api.github.com").replace(/\/$/, "");
+    const doFetch = cfg.fetch ?? fetch;
+    let res;
+    try {
+        res = cfg.clientSecret
+            ? await doFetch(`${api}/applications/${encodeURIComponent(cfg.clientId)}/token`, {
+                method: "POST",
+                headers: { ...HEADERS, authorization: `Basic ${btoa(`${cfg.clientId}:${cfg.clientSecret}`)}`, "content-type": "application/json" },
+                body: JSON.stringify({ access_token: token }),
+            })
+            : await doFetch(`${api}/user`, { headers: { ...HEADERS, authorization: `Bearer ${token}` } });
+    }
+    catch (cause) {
+        throw new HTTPException(502, { message: `could not reach GitHub to verify the sign-in (${cause instanceof Error ? cause.message : String(cause)})` });
+    }
+    // 401 (bad token), 404 (token not of this app), 422 (malformed) all mean "not a valid sign-in for this hub".
+    if (res.status === 401 || res.status === 404 || res.status === 422)
+        throw new HTTPException(401, { message: "GitHub did not accept this token for this hub; run `verdict hub login` again" });
+    if (!res.ok)
+        throw new HTTPException(502, { message: `GitHub answered ${res.status} while verifying the sign-in` });
+    const body = (await res.json());
+    const user = cfg.clientSecret ? body.user : body;
+    if (typeof user?.id !== "number" || typeof user.login !== "string")
+        throw new HTTPException(502, { message: "GitHub's answer did not name an account" });
+    return { id: user.id, login: user.login };
+}
+//# sourceMappingURL=github.js.map

package/dist/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../src/github.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAcpD,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AAE7H,gHAAgH;AAChH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,GAAiB;IACtE,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC;IACnC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,GAAG,CAAC,YAAY;YACpB,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,GAAG,iBAAiB,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE;gBAC/E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,SAAS,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAClI,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;aAC9C,CAAC;YACF,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,GAAG,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iDAAiD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACxJ,CAAC;IACD,6GAA6G;IAC7G,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,8EAA8E,EAAE,CAAC,CAAC;IAC9L,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,mBAAmB,GAAG,CAAC,MAAM,8BAA8B,EAAE,CAAC,CAAC;IACpH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgF,CAAC;IAC/G,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,IAAI,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IACzJ,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AAC5C,CAAC"}

package/dist/hub-pages.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Server-rendered hub pages (docs/design/hub.md §16.3). Plain HTML and inline CSS, no scripts: every string shown was
+ * written by an author and is escaped. Pages offer copyable `verdict pull` / `verdict fork` commands instead of links
+ * that open a local server (H4).
+ */
+import { type Publication, type PublicListing, type PublicPublication, type PublicVersionEntry } from "@verdict-ai/core";
+export interface SearchView {
+    query: {
+        q?: string;
+        domain?: string;
+        locale?: string;
+        type?: string;
+    };
+    results: PublicListing[];
+}
+export declare function searchPage({ query, results }: SearchView): string;
+export interface CardView {
+    origin: string;
+    publication: PublicPublication;
+    versions: PublicVersionEntry[];
+}
+export declare function cardPage({ origin, publication: p, versions }: CardView): string;
+export declare function goneCardPage(p: Publication, message: string): string;
+export declare function missingPage(message: string): string;

package/dist/hub-pages.js

@@ -0,0 +1,119 @@
+/**
+ * Server-rendered hub pages (docs/design/hub.md §16.3). Plain HTML and inline CSS, no scripts: every string shown was
+ * written by an author and is escaped. Pages offer copyable `verdict pull` / `verdict fork` commands instead of links
+ * that open a local server (H4).
+ */
+import { questionAgreement, rubricToYaml } from "@verdict-ai/core";
+const STYLE = `
+:root{color-scheme:light dark;--fg:#1d1d1f;--muted:#6e6e73;--line:#d2d2d7;--bg:#fff;--card:#f5f5f7;--accent:#0b5cad}
+@media (prefers-color-scheme:dark){:root{--fg:#f5f5f7;--muted:#a1a1a6;--line:#3a3a3c;--bg:#111;--card:#1c1c1e;--accent:#6cb4ff}}
+*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--fg);font:15px/1.5 system-ui,-apple-system,"Segoe UI",sans-serif}
+main{max-width:920px;margin:0 auto;padding:24px 16px 64px}a{color:var(--accent)}h1{font-size:26px;margin:8px 0}h2{font-size:18px;margin:28px 0 8px}
+.muted{color:var(--muted)}.meta span{margin-right:12px}.box{background:var(--card);border:1px solid var(--line);border-radius:10px;padding:12px 16px;margin:8px 0}
+pre,code{font:13px/1.45 ui-monospace,SFMono-Regular,Menlo,monospace}pre{white-space:pre-wrap;word-break:break-word;margin:0}pre.text{font:inherit}
+code.cmd{display:block;user-select:all;background:var(--bg);border:1px solid var(--line);border-radius:6px;padding:8px;margin:4px 0;overflow-x:auto}
+table{border-collapse:collapse;width:100%}td,th{border-bottom:1px solid var(--line);padding:6px 8px;text-align:left;vertical-align:top}
+form{display:flex;flex-wrap:wrap;gap:8px}input,select,button{font:inherit;padding:6px 8px;border:1px solid var(--line);border-radius:6px;background:var(--bg);color:var(--fg)}
+input[name=q]{flex:1 1 240px}.tag{display:inline-block;border:1px solid var(--line);border-radius:999px;padding:0 8px;font-size:12px;margin-right:4px}
+`;
+const esc = (value) => String(value ?? "").replace(/[&<>"']/g, (ch) => `&#${ch.charCodeAt(0)};`);
+const day = (iso) => esc(iso.slice(0, 10));
+const cardUrl = (ref, versionId) => `/hub/${ref.split("/").map(encodeURIComponent).join("/")}${versionId ? `?version=${encodeURIComponent(versionId)}` : ""}`;
+const pct = (agreed, n) => (n ? `${Math.round((agreed / n) * 100)}%` : "–");
+function layout(title, body) {
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>${esc(title)} · Verdict hub</title><style>${STYLE}</style></head><body><main>
+<p class="muted"><a href="/hub">Verdict hub</a> — single-question judgment cards with their test cases</p>
+${body}</main></body></html>`;
+}
+export function searchPage({ query, results }) {
+    const type = (value, label) => `<option value="${value}"${query.type === value ? " selected" : ""}>${label}</option>`;
+    const form = `<form method="get" action="/hub">
+<input name="q" placeholder="Search titles, authors, slugs, domains" value="${esc(query.q)}">
+<input name="domain" placeholder="domain" value="${esc(query.domain)}" size="14"><input name="locale" placeholder="locale" value="${esc(query.locale)}" size="8">
+<select name="type">${type("", "any answer")}${type("noul", "yes / no")}${type("score", "score")}${type("choice", "choice")}</select><button>Search</button></form>`;
+    const list = results.length ? results.map(resultItem).join("") : `<p class="muted">No published cards match.</p>`;
+    return layout("Search", `<h1>Judgment cards</h1>${form}${list}`);
+}
+function resultItem(r) {
+    const tags = [r.judgmentType, r.domain, r.locale, r.license].filter(Boolean).map((t) => `<span class="tag">${esc(t)}</span>`).join("");
+    const fork = r.parent?.public ? ` · fork of <a href="${cardUrl(r.parent.ref, r.parent.versionId)}">${esc(r.parent.ref)}</a>` : r.parent ? " · fork of an unpublished version" : "";
+    return `<div class="box"><a href="${cardUrl(r.ref)}"><strong>${esc(r.title)}</strong></a> <span class="muted">${esc(r.ref)}</span><br>
+${r.description ? `<span>${esc(r.description)}</span><br>` : ""}${tags} <span class="muted">${r.cases} public case(s) · ${r.runs} reported run(s) · ${day(r.latest.createdAt)}${fork}</span></div>`;
+}
+export function cardPage({ origin, publication: p, versions }) {
+    const header = `<h1>${esc(p.title)}</h1>
+<p class="meta muted"><span>${esc(p.ref)}</span><span><code>${esc(p.version.id)}</code></span><span>${esc(p.judgmentType)}</span><span>${esc(p.license)}</span>${p.domain ? `<span>${esc(p.domain)}</span>` : ""}${p.locale ? `<span>${esc(p.locale)}</span>` : ""}<span>published ${day(p.createdAt)}</span></p>
+${p.description ? `<p>${esc(p.description)}</p>` : ""}`;
+    return layout(p.title, [header, lineage(p), useIt(origin, p), question(p), runs(p), cases(p), provenance(p), history(p.ref, p.version.id, versions), rubricSource(p)].join(""));
+}
+function lineage(p) {
+    if (!p.parent)
+        return "";
+    const from = p.parent.public ? `Forked from <a href="${cardUrl(p.parent.ref, p.parent.versionId)}">${esc(p.parent.ref)}</a> at <code>${esc(p.parent.versionId)}</code>.` : "Derived from a version that is not public.";
+    const kinds = p.version.changeKinds?.length ? ` Changed: ${p.version.changeKinds.map((k) => `<span class="tag">${esc(k)}</span>`).join("")}` : "";
+    return `<div class="box">${from}${kinds}${p.version.forkNote ? `<br><span class="muted">Fork note:</span> ${esc(p.version.forkNote)}` : ""}
+<br><span class="muted">Results of the parent are not results of this version; each version shows only its own runs.</span></div>`;
+}
+function useIt(origin, p) {
+    const ref = `hub:${p.ref}@${p.version.id}`, hub = `--hub ${origin}`;
+    return `<h2>Use it</h2><div class="box">Copy this version exactly (same id when you freeze it), with its public cases:
+<code class="cmd">verdict pull ${esc(ref)} ${esc(hub)}</code>Or start your own version from it; the parent is recorded in verdict.lock:
+<code class="cmd">verdict fork ${esc(ref)} --to ${esc(p.slug)}.yaml ${esc(hub)}</code></div>`;
+}
+function question(p) {
+    const c = p.version.rubric.criteria[0];
+    const answers = c.choices ? Object.entries(c.choices) : c.levels ? c.levels.map((l) => [l.label ?? String(l.value), l.description]) : Object.entries(c.anchors ?? {});
+    const list = answers.length ? `<table>${answers.map(([k, v]) => `<tr><th>${esc(k)}</th><td>${esc(v)}</td></tr>`).join("")}</table>` : "";
+    const threshold = c.threshold !== undefined ? `<p class="muted">Answers yes when the model's probability of yes is at least ${esc(c.threshold)}.</p>` : "";
+    return `<h2>The question</h2><div class="box"><strong>${esc(c.name)}</strong>${c.description ? `<pre class="text">${esc(c.description)}</pre>` : ""}${list}${threshold}</div>`;
+}
+function runs(p) {
+    const list = p.runs;
+    if (!list.length)
+        return `<h2>Reported runs</h2><p class="muted">The author attached no runs.</p>`;
+    return `<h2>Reported runs</h2>${list.map((r) => runBox(p, r)).join("")}`;
+}
+function runBox(p, r) {
+    const q = questionAgreement(p, r);
+    const models = r.fingerprint.models.map((m) => `${m.provider}${m.resolved ? ` ${m.resolved}` : m.requested ? ` ${m.requested} (requested)` : ""}${m.verified ? "" : " (unverified)"}`).join(", ");
+    const sources = r.labelSources ? Object.entries(r.labelSources).map(([k, n]) => `${esc(k)} ${n}`).join(" · ") : "unknown";
+    const criteria = Object.entries(r.agreement.criteria).map(([id, t]) => `<tr><td>${esc(id)}</td><td>${t.agreed}/${t.n} (${pct(t.agreed, t.n)})</td><td>${t.askedHuman}</td></tr>`).join("");
+    return `<div class="box"><strong>${pct(q.agreed, q.n)}</strong> agreement with the labels (${q.agreed} of ${q.n} labelled case(s)${q.askedHuman ? `; ${q.askedHuman} handed to a person` : ""}) over ${r.counts.cases} case(s) · ${esc(r.status)} · ${day(r.startedAt)}
+<br><span class="muted">Reported by the author, not re-run by the hub. ${r.casesPublic ? "Every case of this run is public: anyone can repeat it." : "This run includes private cases: only its numbers are shown."}</span>
+<br><span class="muted">Models:</span> ${esc(models || "–")} · <span class="muted">labels:</span> ${sources}
+<table><tr><th>criterion</th><th>agreed</th><th>asked a person</th></tr>${criteria}</table></div>`;
+}
+function cases(p) {
+    if (!p.cases.length)
+        return `<h2>Public cases</h2><p class="muted">No public cases.</p>`;
+    const rows = p.cases.map((c) => `<tr><td>${esc(c.id)}</td><td><pre class="text">${esc(c.inputs.map(inputText).join("\n"))}</pre></td><td>${esc(Object.values(c.expected).join(", "))}</td><td>${esc(c.labelSource ?? "unknown")}${c.split ? ` · ${esc(c.split)}` : ""}</td></tr>`).join("");
+    return `<h2>Public cases (${p.cases.length})</h2><table><tr><th>case</th><th>input</th><th>expected</th><th>label</th></tr>${rows}</table>`;
+}
+function inputText(input) {
+    const raw = input;
+    const text = raw.type === "text" ? raw.text ?? "" : raw.type === "url" ? raw.url ?? "" : JSON.stringify(raw.data ?? raw);
+    return text.length > 600 ? `${text.slice(0, 600)}…` : text;
+}
+function provenance(p) {
+    if (!p.sources.length && !p.note)
+        return "";
+    return `<h2>Sources</h2><div class="box">${p.sources.map((s) => `<div>${esc(s)}</div>`).join("")}${p.note ? `<p>${esc(p.note)}</p>` : ""}</div>`;
+}
+function history(ref, current, versions) {
+    const rows = versions.map((v) => {
+        const label = v.versionId === current ? `<strong>${esc(v.versionId)}</strong>` : v.withdrawnAt ? esc(v.versionId) : `<a href="${cardUrl(ref, v.versionId)}">${esc(v.versionId)}</a>`;
+        return `<tr><td><code>${label}</code></td><td>${day(v.createdAt)}</td><td>${v.withdrawnAt ? `withdrawn ${day(v.withdrawnAt)}` : esc(v.changeKinds?.join(", ") ?? "")}</td></tr>`;
+    }).join("");
+    return `<h2>Versions</h2><table>${rows}</table>`;
+}
+function rubricSource(p) {
+    return `<h2>Rubric</h2><details class="box"><summary>YAML of ${esc(p.version.id)}</summary><pre>${esc(rubricToYaml(p.version.rubric))}</pre></details>`;
+}
+export function goneCardPage(p, message) {
+    return layout(p.title, `<h1>${esc(p.title)}</h1><p class="muted">${esc(p.ref)} · <code>${esc(p.version.id)}</code></p><div class="box">${esc(message)}.</div><p><a href="${cardUrl(p.ref)}">See this card's other versions</a></p>`);
+}
+export function missingPage(message) {
+    return layout("Not found", `<h1>Not found</h1><p>${esc(message)}.</p>`);
+}
+//# sourceMappingURL=hub-pages.js.map

package/dist/hub-pages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-pages.js","sourceRoot":"","sources":["../src/hub-pages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAgH,MAAM,kBAAkB,CAAC;AAEjL,MAAM,KAAK,GAAG;;;;;;;;;;;CAWb,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC1G,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACnD,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,SAAkB,EAAE,EAAE,CAAC,QAAQ,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/K,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAE5F,SAAS,MAAM,CAAC,KAAa,EAAE,IAAY;IACzC,OAAO;SACA,GAAG,CAAC,KAAK,CAAC,gCAAgC,KAAK;;EAEtD,IAAI,uBAAuB,CAAC;AAC9B,CAAC;AAID,MAAM,UAAU,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,EAAc;IACvD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CAAC,kBAAkB,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,WAAW,CAAC;IACtI,MAAM,IAAI,GAAG;8EAC+D,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;mDACvC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gEAAgE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;sBAC/H,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,yCAAyC,CAAC;IACnK,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,gDAAgD,CAAC;IAClH,OAAO,MAAM,CAAC,QAAQ,EAAE,0BAA0B,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,CAAgB;IAClC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvI,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAuB,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnL,OAAO,6BAA6B,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,qCAAqC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;EAC1H,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC,KAAK,qBAAqB,CAAC,CAAC,IAAI,sBAAsB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,eAAe,CAAC;AACpM,CAAC;AAID,MAAM,UAAU,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAY;IACrE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;8BACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,uBAAuB,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;EACnS,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACtD,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAClL,CAAC;AAED,SAAS,OAAO,CAAC,CAAoB;IACnC,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,4CAA4C,CAAC;IACxN,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClJ,OAAO,oBAAoB,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,6CAA6C,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;kIACV,CAAC;AACnI,CAAC;AAED,SAAS,KAAK,CAAC,MAAc,EAAE,CAAoB;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,SAAS,MAAM,EAAE,CAAC;IACpE,OAAO;iCACwB,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;iCACpB,GAAG,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC;AAC9F,CAAC;AAED,SAAS,QAAQ,CAAC,CAAoB;IACpC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;IACxC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,WAAW,CAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC/K,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACzI,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,gFAAgF,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3J,OAAO,iDAAiD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,GAAG,SAAS,QAAQ,CAAC;AACjL,CAAC;AAED,SAAS,IAAI,CAAC,CAAoB;IAChC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,yEAAyE,CAAC;IACnG,OAAO,yBAAyB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,MAAM,CAAC,CAAoB,EAAE,CAAmB;IACvD,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClM,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1H,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3L,OAAO,4BAA4B,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,qBAAqB,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,cAAc,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;yEAC/L,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,8DAA8D;yCAC1K,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,yCAAyC,OAAO;0EACjC,QAAQ,gBAAgB,CAAC;AACnG,CAAC;AAED,SAAS,KAAK,CAAC,CAAoB;IACjC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,4DAA4D,CAAC;IACzF,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,8BAA8B,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,kBAAkB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5R,OAAO,qBAAqB,CAAC,CAAC,KAAK,CAAC,MAAM,mFAAmF,IAAI,UAAU,CAAC;AAC9I,CAAC;AAED,SAAS,SAAS,CAAC,KAA2D;IAC5E,MAAM,GAAG,GAAG,KAAsE,CAAC;IACnF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IACzH,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,SAAS,UAAU,CAAC,CAAoB;IACtC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5C,OAAO,oCAAoC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;AACnJ,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,OAAe,EAAE,QAA8B;IAC3E,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;QACrL,OAAO,iBAAiB,KAAK,mBAAmB,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC;IACnL,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,2BAA2B,IAAI,UAAU,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,CAAoB;IACxC,OAAO,wDAAwD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,kBAAkB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC;AAC1J,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAc,EAAE,OAAe;IAC1D,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,+BAA+B,GAAG,CAAC,OAAO,CAAC,sBAAsB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;AACvO,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,MAAM,CAAC,WAAW,EAAE,wBAAwB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Exports the package entry points without starting services.
+ * Consumers choose their runtime adapters explicitly; importing types must not open network or database connections.
+ */
+export { createApp, envAuth, present, ROUTE_GROUPS, routeGroups, type Auth, type AppOptions, type BrowserSignIn, type Identity, type RouteGroup } from "./app.js";
+export { cloudflareLimiter, DEFAULT_HUB_RULES, defaultHubLimits, memoryLimiter, type ClientKey, type CloudflareRateLimit, type HubLimits, type RateLimiter, type Rule } from "./rate-limit.js";

package/dist/index.js

@@ -0,0 +1,7 @@
+/**
+ * Exports the package entry points without starting services.
+ * Consumers choose their runtime adapters explicitly; importing types must not open network or database connections.
+ */
+export { createApp, envAuth, present, ROUTE_GROUPS, routeGroups } from "./app.js";
+export { cloudflareLimiter, DEFAULT_HUB_RULES, defaultHubLimits, memoryLimiter } from "./rate-limit.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAkF,MAAM,UAAU,CAAC;AAClK,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAyF,MAAM,iBAAiB,CAAC"}