@yadsh/dsh-qa-surface 0.6.1 → 0.7.1

package/lib/admin/conversation-log.js

@@ -0,0 +1,256 @@
+function record(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function string(value) {
+    return typeof value === "string" && value !== "" ? value : undefined;
+}
+function number(value) {
+    return typeof value === "number" && Number.isFinite(value)
+        ? value
+        : undefined;
+}
+/**
+ * Flatten one message's content blocks into review text. Non-text blocks are
+ * named rather than dropped: a reviewer judging "the answer ignored my
+ * screenshot" needs to see that an image was attached.
+ */
+function contentText(content) {
+    if (!Array.isArray(content))
+        return "";
+    const parts = [];
+    for (const block of content) {
+        const entry = record(block);
+        if (entry === undefined)
+            continue;
+        const text = string(entry.text);
+        switch (entry.type) {
+            case "text":
+                if (text !== undefined)
+                    parts.push(text);
+                break;
+            case "reasoning":
+                break;
+            case "image":
+                parts.push("[изображение]");
+                break;
+            case "file":
+                parts.push("[файл]");
+                break;
+            case "tool-call":
+                break;
+            case "tool-result":
+                parts.push(contentText(entry.content));
+                break;
+            default:
+                if (text !== undefined)
+                    parts.push(text);
+                break;
+        }
+    }
+    return parts.filter((part) => part !== "").join("\n");
+}
+function usageOf(value) {
+    const entry = record(value);
+    if (entry === undefined)
+        return undefined;
+    const inputTokens = number(entry.inputTokens);
+    const outputTokens = number(entry.outputTokens);
+    if (inputTokens === undefined || outputTokens === undefined)
+        return undefined;
+    const totalTokens = number(entry.totalTokens);
+    return Object.freeze({
+        inputTokens,
+        outputTokens,
+        ...(totalTokens === undefined ? {} : { totalTokens }),
+    });
+}
+/** The skill tool's argument shape, read defensively across schema revisions. */
+function loadedSkillOf(name, args) {
+    if (name !== "skill")
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(args === "" ? "null" : args);
+    }
+    catch {
+        return undefined;
+    }
+    const entry = record(parsed);
+    if (entry === undefined)
+        return undefined;
+    for (const key of ["name", "skill", "skillName", "id"]) {
+        const value = string(entry[key]);
+        if (value !== undefined)
+            return value;
+    }
+    return undefined;
+}
+/**
+ * Project one log into the review transcript. Unknown event types are skipped,
+ * not refused: a deployment may carry plugin events this package has never
+ * heard of, and a review console must still show the conversation.
+ */
+export function projectTranscript(events, redactor) {
+    const messages = [];
+    /** Which message each call was attached to, so its result lands in place. */
+    const callOwner = new Map();
+    const loaded = [];
+    let title;
+    let model;
+    let provider;
+    let lastActivity;
+    let lastAssistant = -1;
+    const attachCalls = (index, update) => {
+        const owner = messages[index];
+        if (owner === undefined)
+            return;
+        messages[index] = Object.freeze({
+            ...owner,
+            toolCalls: Object.freeze(update(owner.toolCalls ?? [])),
+        });
+    };
+    const ordered = [...events].sort((left, right) => left.seq - right.seq);
+    for (const event of ordered) {
+        if (event.time !== undefined && event.time !== lastActivity) {
+            lastActivity = event.time;
+        }
+        const data = record(event.data);
+        if (data === undefined)
+            continue;
+        switch (event.type) {
+            case "session/title": {
+                const value = string(data.title);
+                if (value !== undefined)
+                    title = value;
+                break;
+            }
+            case "request/header": {
+                const header = record(data.header);
+                const config = record(header?.config);
+                provider = string(config?.provider) ?? provider;
+                model = string(config?.model) ?? model;
+                break;
+            }
+            case "user/message": {
+                const source = record(data.source);
+                // Synthetic context (injected skills, file notices) is model input, not
+                // something the user said; the reviewer reads human prompts here.
+                if (source?.kind !== "user")
+                    break;
+                lastAssistant = -1;
+                messages.push(Object.freeze({
+                    id: String(event.seq),
+                    seq: event.seq,
+                    role: "user",
+                    text: redactor.redactMessage(contentText(data.content)),
+                    time: event.time ?? 0,
+                }));
+                break;
+            }
+            case "assistant/message": {
+                const message = record(data.message);
+                const source = record(message?.source);
+                const usage = usageOf(data.usage);
+                const messageModel = string(source?.model);
+                const messageProvider = string(source?.provider);
+                lastAssistant = messages.length;
+                messages.push(Object.freeze({
+                    id: String(event.seq),
+                    seq: event.seq,
+                    role: "assistant",
+                    text: redactor.redactMessage(contentText(message?.content)),
+                    time: event.time ?? 0,
+                    ...(messageModel === undefined ? {} : { model: messageModel }),
+                    ...(messageProvider === undefined
+                        ? {}
+                        : { provider: messageProvider }),
+                    ...(usage === undefined ? {} : { usage }),
+                    ...(data.interrupted === true ? { interrupted: true } : {}),
+                    toolCalls: Object.freeze([]),
+                }));
+                break;
+            }
+            case "tool/call": {
+                const callId = string(data.callId);
+                const name = string(data.name);
+                if (callId === undefined || name === undefined)
+                    break;
+                const args = string(data.arguments) ?? "";
+                const skill = loadedSkillOf(name, args);
+                if (skill !== undefined && !loaded.includes(skill))
+                    loaded.push(skill);
+                const call = {
+                    callId,
+                    name,
+                    arguments: redactor.redactToolArguments(args),
+                    ...(event.time === undefined ? {} : { time: event.time }),
+                };
+                let index = lastAssistant;
+                if (index === -1) {
+                    // A call whose requesting message never reached the log (an aborted
+                    // turn) still belongs in the transcript: the reviewer is often
+                    // looking for exactly that.
+                    index = messages.length;
+                    messages.push(Object.freeze({
+                        id: String(event.seq),
+                        seq: event.seq,
+                        role: "assistant",
+                        text: "",
+                        time: event.time ?? 0,
+                        toolCalls: Object.freeze([]),
+                    }));
+                    lastAssistant = index;
+                }
+                callOwner.set(callId, {
+                    message: index,
+                    call: (messages[index]?.toolCalls ?? []).length,
+                });
+                attachCalls(index, (calls) => [...calls, call]);
+                break;
+            }
+            case "tool/result": {
+                const message = record(data.message);
+                const first = Array.isArray(message?.content)
+                    ? record(message?.content[0])
+                    : undefined;
+                const callId = string(data.callId) ?? string(first?.toolCallId);
+                if (callId === undefined)
+                    break;
+                const owner = callOwner.get(callId);
+                if (owner === undefined)
+                    break;
+                const result = redactor.redactToolResult(contentText(first?.content));
+                const error = record(data.error);
+                const errorName = string(error?.name);
+                const current = messages[owner.message]?.toolCalls?.[owner.call];
+                const duration = event.time === undefined || current?.time === undefined
+                    ? undefined
+                    : Math.max(0, event.time - current.time);
+                attachCalls(owner.message, (calls) => calls.map((call, index) => index !== owner.call
+                    ? call
+                    : Object.freeze({
+                        ...call,
+                        ...(result === "" ? {} : { result }),
+                        ...(first?.isError === true || errorName !== undefined
+                            ? { error: errorName ?? "tool-error" }
+                            : {}),
+                        ...(duration === undefined ? {} : { durationMs: duration }),
+                    })));
+                break;
+            }
+            default:
+                break;
+        }
+    }
+    return Object.freeze({
+        ...(title === undefined ? {} : { title }),
+        messages: Object.freeze(messages),
+        ...(model === undefined ? {} : { model }),
+        ...(provider === undefined ? {} : { provider }),
+        loadedSkills: Object.freeze(loaded),
+        ...(lastActivity === undefined ? {} : { lastActivity }),
+    });
+}
+//# sourceMappingURL=conversation-log.js.map

package/lib/admin/conversation-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-log.js","sourceRoot":"","sources":["../../src/admin/conversation-log.ts"],"names":[],"mappings":"AAwCA,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,MAAM;gBACT,IAAI,IAAI,KAAK,SAAS;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM;YACR,KAAK,WAAW;gBACd,MAAM;YACR,KAAK,OAAO;gBACV,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,MAAM;gBACT,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrB,MAAM;YACR,KAAK,WAAW;gBACd,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvC,MAAM;YACR;gBACE,IAAI,IAAI,KAAK,SAAS;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9E,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW;QACX,YAAY;QACZ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAqC,EACrC,QAAyB;IAEzB,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,6EAA6E;IAC7E,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6C,CAAC;IACvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAyB,CAAC;IAC9B,IAAI,KAAyB,CAAC;IAC9B,IAAI,QAA4B,CAAC;IACjC,IAAI,YAAgC,CAAC;IACrC,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;IAEvB,MAAM,WAAW,GAAG,CAClB,KAAa,EACb,MAEsC,EAChC,EAAE;QACR,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,QAAQ,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,GAAG,KAAK;YACR,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;SACxD,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAExE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC5D,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,eAAe,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,KAAK,KAAK,SAAS;oBAAE,KAAK,GAAG,KAAK,CAAC;gBACvC,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACtC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC;gBAChD,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC;gBACvC,MAAM;YACR,CAAC;YACD,KAAK,cAAc,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnC,wEAAwE;gBACxE,kEAAkE;gBAClE,IAAI,MAAM,EAAE,IAAI,KAAK,MAAM;oBAAE,MAAM;gBACnC,aAAa,GAAG,CAAC,CAAC,CAAC;gBACnB,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;oBACZ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;oBACrB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACvD,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;iBACtB,CAAC,CACH,CAAC;gBACF,MAAM;YACR,CAAC;YACD,KAAK,mBAAmB,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACvC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC3C,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACjD,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAChC,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;oBACZ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;oBACrB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,IAAI,EAAE,WAAoB;oBAC1B,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC3D,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;oBACrB,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;oBAC9D,GAAG,CAAC,eAAe,KAAK,SAAS;wBAC/B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;oBAClC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;oBACzC,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;iBAC7B,CAAC,CACH,CAAC;gBACF,MAAM;YACR,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM;gBACtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACxC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,IAAI,GAA2B;oBACnC,MAAM;oBACN,IAAI;oBACJ,SAAS,EAAE,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC;oBAC7C,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;iBAC1D,CAAC;gBACF,IAAI,KAAK,GAAG,aAAa,CAAC;gBAC1B,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,oEAAoE;oBACpE,+DAA+D;oBAC/D,4BAA4B;oBAC5B,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;oBACxB,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;wBACZ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;wBACrB,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,IAAI,EAAE,WAAoB;wBAC1B,IAAI,EAAE,EAAE;wBACR,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;wBACrB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;qBAC7B,CAAC,CACH,CAAC;oBACF,aAAa,GAAG,KAAK,CAAC;gBACxB,CAAC;gBACD,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE;oBACpB,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;iBAChD,CAAC,CAAC;gBACH,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;gBAChD,MAAM;YACR,CAAC;YACD,KAAK,aAAa,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;oBAC3C,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC7B,CAAC,CAAC,SAAS,CAAC;gBACd,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBAChE,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM;gBAChC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM;gBAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;gBACtE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjE,MAAM,QAAQ,GACZ,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS;oBACrD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC7C,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACnC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACxB,KAAK,KAAK,KAAK,CAAC,IAAI;oBAClB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;wBACZ,GAAG,IAAI;wBACP,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;wBACpC,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS;4BACpD,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,YAAY,EAAE;4BACtC,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;qBAC5D,CAAC,CACP,CACF,CAAC;gBACF,MAAM;YACR,CAAC;YACD;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACnC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;KACxD,CAAC,CAAC;AACL,CAAC"}

package/lib/admin/index.js

@@ -0,0 +1,17 @@
+/**
+ * The administrative console's server side: authorization, conversation
+ * queries over stored session logs, the quality records (feedback, reviews,
+ * the derived queue, the audit trail) and their aggregations.
+ */
+export { QaAdminService } from "./service.js";
+export { QA_ADMIN_PAGE_DEFAULT, QA_ADMIN_PAGE_MAX, QA_ADMIN_SCAN_LIMIT, } from "./service.js";
+export { allows, permissionsOf, readsEveryConversation, } from "./permissions.js";
+export { QaQualityStore, defaultQualityFilePath } from "./quality-store.js";
+export { QA_FEEDBACK_REASONS, QA_FEEDBACK_RATINGS, QA_QUALITY_ISSUES, QA_QUALITY_SEVERITIES, QA_REMEDIATION_TARGETS, } from "./quality-store.js";
+export { aggregateQuality } from "./metrics.js";
+export { deriveQueue } from "./queue.js";
+export { paginate } from "./paging.js";
+export { projectTranscript } from "./conversation-log.js";
+export { createSessionLogReader, staticSessionLogReader, } from "./session-log.js";
+export { defaultAdminRedactor, maskSecrets } from "./redaction.js";
+//# sourceMappingURL=index.js.map

package/lib/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,MAAM,EACN,aAAa,EACb,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5E,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAK1D,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAM1B,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC"}

package/lib/admin/metrics.js

@@ -0,0 +1,103 @@
+/** Share of `total`, or null when there is nothing to take a share of. */
+function rate(part, total) {
+    return total === 0 ? null : part / total;
+}
+function dayOf(iso) {
+    return iso.slice(0, 10);
+}
+/** Does any review of this conversation cover one message (or the chat)? */
+function reviewedTarget(reviews, conversationId, messageId) {
+    return reviews.find((row) => row.conversationId === conversationId &&
+        (row.messageId === undefined || row.messageId === messageId));
+}
+export function aggregateQuality({ conversations, feedback, reviews, trendDays = 30, }) {
+    const positives = feedback.filter(({ rating }) => rating === "positive");
+    const negatives = feedback.filter(({ rating }) => rating === "negative");
+    const issueCounts = new Map();
+    for (const review of reviews) {
+        for (const issue of review.issues) {
+            issueCounts.set(issue, (issueCounts.get(issue) ?? 0) + 1);
+        }
+    }
+    const subroleOf = new Map(conversations.map((row) => [row.conversationId, row.subroleId]));
+    const breakdown = new Map();
+    for (const row of feedback) {
+        const subrole = subroleOf.get(row.conversationId);
+        if (subrole === undefined)
+            continue;
+        const bucket = breakdown.get(subrole) ?? {
+            rated: 0,
+            positive: 0,
+            negative: 0,
+        };
+        bucket.rated += 1;
+        if (row.rating === "positive")
+            bucket.positive += 1;
+        else
+            bucket.negative += 1;
+        breakdown.set(subrole, bucket);
+    }
+    const trend = new Map();
+    for (const row of feedback) {
+        const date = dayOf(row.createdAt);
+        const bucket = trend.get(date) ?? { rated: 0, positive: 0, negative: 0 };
+        bucket.rated += 1;
+        if (row.rating === "positive")
+            bucket.positive += 1;
+        else
+            bucket.negative += 1;
+        trend.set(date, bucket);
+    }
+    const trendPoints = [...trend]
+        .sort((left, right) => left[0].localeCompare(right[0]))
+        .slice(-trendDays)
+        .map(([date, bucket]) => Object.freeze({
+        date,
+        rated: bucket.rated,
+        positive: bucket.positive,
+        negative: bucket.negative,
+    }));
+    const unreviewedNegatives = negatives.filter((row) => reviewedTarget(reviews, row.conversationId, row.messageId) === undefined).length;
+    const issues = [...issueCounts]
+        .map(([issue, count]) => Object.freeze({ issue, count }))
+        .sort((left, right) => right.count === left.count
+        ? left.issue.localeCompare(right.issue)
+        : right.count - left.count);
+    const bySubrole = [...breakdown]
+        .map(([key, bucket]) => Object.freeze({
+        key,
+        label: key,
+        rated: bucket.rated,
+        positive: bucket.positive,
+        negative: bucket.negative,
+        positiveRate: rate(bucket.positive, bucket.rated),
+    }))
+        .sort((left, right) => left.key.localeCompare(right.key, undefined, { numeric: true }));
+    const assistantMessages = conversations.reduce((total, row) => total + row.assistantMessages, 0);
+    return Object.freeze({
+        conversations: conversations.length,
+        activeUsers: new Set(conversations.map(({ userId }) => userId)).size,
+        assistantMessages,
+        ratedMessages: feedback.length,
+        positiveRatings: positives.length,
+        negativeRatings: negatives.length,
+        ratingRate: rate(feedback.length, assistantMessages),
+        positiveRate: rate(positives.length, feedback.length),
+        unreviewedNegatives,
+        reviewedItems: reviews.length,
+        issues: Object.freeze(issues),
+        bySubrole: Object.freeze(bySubrole),
+        trend: Object.freeze(trendPoints),
+    });
+}
+/** One rating's contribution to a conversation row, without re-reading logs. */
+export function countRatings(feedback) {
+    const result = {
+        positive: 0,
+        negative: 0,
+    };
+    for (const row of feedback)
+        result[row.rating] += 1;
+    return result;
+}
+//# sourceMappingURL=metrics.js.map

package/lib/admin/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/admin/metrics.ts"],"names":[],"mappings":"AAsCA,0EAA0E;AAC1E,SAAS,IAAI,CAAC,IAAY,EAAE,KAAa;IACvC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;AAC3C,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,4EAA4E;AAC5E,SAAS,cAAc,CACrB,OAAwC,EACxC,cAAsB,EACtB,SAAiB;IAEjB,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,cAAc,KAAK,cAAc;QACrC,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAC/B,aAAa,EACb,QAAQ,EACR,OAAO,EACP,SAAS,GAAG,EAAE,GACK;IACnB,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IAEzE,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC1D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAChE,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,EAGtB,CAAC;IACJ,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI;YACvC,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,CAAC;SACZ,CAAC;QACF,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;YAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;;YAC/C,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC1B,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAGlB,CAAC;IACJ,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;YAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;;YAC/C,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC1B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,WAAW,GAA0B,CAAC,GAAG,KAAK,CAAC;SAClD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SACtD,KAAK,CAAC,CAAC,SAAS,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CACtB,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI;QACJ,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CACH,CAAC;IAEJ,MAAM,mBAAmB,GAAG,SAAS,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,EAAE,CACN,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS,CAC3E,CAAC,MAAM,CAAC;IAET,MAAM,MAAM,GAA0B,CAAC,GAAG,WAAW,CAAC;SACnD,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;SACxD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpB,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;QACvC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAC7B,CAAC;IAEJ,MAAM,SAAS,GAA+B,CAAC,GAAG,SAAS,CAAC;SACzD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CACrB,MAAM,CAAC,MAAM,CAAC;QACZ,GAAG;QACH,KAAK,EAAE,GAAG;QACV,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC;KAClD,CAAC,CACH;SACA,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpB,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAChE,CAAC;IAEJ,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAC5C,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,iBAAiB,EAC7C,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,aAAa,CAAC,MAAM;QACnC,WAAW,EAAE,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACpE,iBAAiB;QACjB,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,eAAe,EAAE,SAAS,CAAC,MAAM;QACjC,eAAe,EAAE,SAAS,CAAC,MAAM;QACjC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;QACpD,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;QACrD,mBAAmB;QACnB,aAAa,EAAE,OAAO,CAAC,MAAM;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAC1B,QAAsC;IAEtC,MAAM,MAAM,GAAqC;QAC/C,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/lib/admin/paging.js

@@ -0,0 +1,23 @@
+function cursorOf(row, keyOf, idOf) {
+    return `${keyOf(row)}\u0000${idOf(row)}`;
+}
+/**
+ * Slice one page out of an already-sorted list. An unknown cursor is treated as
+ * the start of the list: it can only mean the row was trimmed away since the
+ * caller last paged, in which case restarting is the honest answer.
+ */
+export function paginate({ rows, keyOf, idOf, cursor, limit, }) {
+    const total = rows.length;
+    let start = 0;
+    if (cursor !== undefined && cursor !== "") {
+        const index = rows.findIndex((row) => cursorOf(row, keyOf, idOf) === cursor);
+        start = index === -1 ? 0 : index + 1;
+    }
+    const items = rows.slice(start, start + limit);
+    const last = items[items.length - 1];
+    const nextCursor = last !== undefined && start + items.length < total
+        ? cursorOf(last, keyOf, idOf)
+        : null;
+    return { items, nextCursor, total };
+}
+//# sourceMappingURL=paging.js.map

package/lib/admin/paging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paging.js","sourceRoot":"","sources":["../../src/admin/paging.ts"],"names":[],"mappings":"AA4BA,SAAS,QAAQ,CACf,GAAM,EACN,KAAyB,EACzB,IAAwB;IAExB,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAI,EAC1B,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,MAAM,EACN,KAAK,GACY;IACjB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAC1B,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,MAAM,CAC/C,CAAC;QACF,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,UAAU,GACd,IAAI,KAAK,SAAS,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK;QAChD,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;QAC7B,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC"}

package/lib/admin/permissions.js

@@ -0,0 +1,50 @@
+/**
+ * The permission each authorization role grants. Roles are compositions, not
+ * flags: adding a future "Team Lead" is a new entry here, never a rewrite of
+ * the checks at the call sites.
+ *
+ * These tables are module-private; callers ask {@link permissionsOf} or
+ * {@link allows} so no call site can drift from the mapping.
+ */
+const PERMISSIONS = {
+    admin: [
+        "users.read",
+        "users.manage",
+        "roles.read",
+        "roles.manage",
+        "conversations.read.all",
+        "conversations.read.own",
+        "reviews.read",
+        "reviews.write",
+        "analytics.read",
+        "audit.read",
+        "settings.manage",
+    ],
+    // A reviewer reads every conversation and answers them; accounts, role
+    // configuration and deployment settings stay out of reach.
+    reviewer: [
+        "conversations.read.all",
+        "conversations.read.own",
+        "reviews.read",
+        "reviews.write",
+        "analytics.read",
+    ],
+    user: ["conversations.read.own"],
+};
+/** Every permission this package knows; the Remote surface validates against it. */
+export const QA_PERMISSIONS = Object.freeze([
+    ...new Set(Object.values(PERMISSIONS).flat()),
+]);
+/** The permissions one authorization role grants, deduplicated. */
+export function permissionsOf(role) {
+    return PERMISSIONS[role];
+}
+/** Whether one role grants one permission. */
+export function allows(role, permission) {
+    return PERMISSIONS[role].includes(permission);
+}
+/** Whether this role may read conversations it does not own. */
+export function readsEveryConversation(role) {
+    return allows(role, "conversations.read.all");
+}
+//# sourceMappingURL=permissions.js.map

package/lib/admin/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/admin/permissions.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,WAAW,GAA6D;IAC5E,KAAK,EAAE;QACL,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,cAAc;QACd,wBAAwB;QACxB,wBAAwB;QACxB,cAAc;QACd,eAAe;QACf,gBAAgB;QAChB,YAAY;QACZ,iBAAiB;KAClB;IACD,uEAAuE;IACvE,2DAA2D;IAC3D,QAAQ,EAAE;QACR,wBAAwB;QACxB,wBAAwB;QACxB,cAAc;QACd,eAAe;QACf,gBAAgB;KACjB;IACD,IAAI,EAAE,CAAC,wBAAwB,CAAC;CACjC,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAA4B,MAAM,CAAC,MAAM,CAAC;IACnE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;CAC9C,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,MAAM,CAAC,IAAmB,EAAE,UAAwB;IAClE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAChD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,sBAAsB,CAAC,IAAmB;IACxD,OAAO,MAAM,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;AAChD,CAAC"}