Deploy AIOS web (React glide grid + FastAPI slice)

RELEASES.json

@@ -1,5 +1,5 @@
 {
- "current": "2c4bcb5",
+ "current": "76fb302",
  "releases": [
   {
    "version": "v53",

VERSION

@@ -1 +1 @@
-2c4bcb5
+76fb302

api/routes_publish.py

@@ -302,8 +302,8 @@ def _may_administer_view(session: Session, table_key: str, view_id: str):
                   "no rows at all. Publish a copy without the cohort lock.")
     if _needs_a_reader(cfg.get("filters")):
         raise err(400, "reader_scoped",
-                  "this view filters on a cohort, a measure rule or a top-N slice, and each of "
-                  "those is resolved for the person reading it — a public link has no reader, so "
+                  "this view filters on a cohort or a measure rule, and each is resolved for the "
+                  "person reading it — a public link has no reader, so "
                   "the page would show no rows at all. Publish a copy filtered on columns.")
     return view, mode
 
@@ -319,14 +319,18 @@ PUBLIC_ROW_CAP = 5000
 def _needs_a_reader(tree) -> bool:
     """Does this filter tree contain a leaf that only a SIGNED-IN reader could resolve?
 
-    ⛔ COHORTS, MEASURE RULES AND RANK SLICES ARE NOT PROPERTIES OF THE VIEW. Each is a SET the
-    host computes for the person asking — `filter_eval.EvalCtx`'s own docstring: *"each is an
-    answer a single ROW cannot compute … absent, the condition matches NOTHING rather than
-    everything"*. That default is right (it fails closed) and it is unusable here: an anonymous
-    page whose every row was silently filtered out is indistinguishable from a broken link, and
-    the reader has nobody to ask. Worse, `rank_sets` has NO server-side resolver anywhere in this
-    repo — `routes_alerts._evaluate` passes cohort/measure/today and nothing else — so a `topN`
-    view would serve zero rows on the server while showing twenty in the browser.
+    ⛔ COHORTS AND MEASURE RULES ARE NOT PROPERTIES OF THE VIEW. Each is a SET the host computes
+    for the person asking — `filter_eval.EvalCtx`'s own docstring: *"each is an answer a single
+    ROW cannot compute … absent, the condition matches NOTHING rather than everything"*. That
+    default is right (it fails closed) and it is unusable here: an anonymous page whose every row
+    was silently filtered out is indistinguishable from a broken link, and the reader has nobody
+    to ask.
+
+    ⭐ Rank slices are deliberately NOT included. `filter_eval.visible_pids` resolves their
+    membership from the server row payload before evaluating it, so a public `topN`/`bottomN`
+    link has one deterministic answer independent of its reader. `evaluate` remains fail-closed
+    for a bare row context; this route takes the whole-payload entry point precisely so it can
+    answer the set question rather than silently publish an empty page.
 
     ⭐ So such a view is refused AT THE MINT, where a person is standing in front of the answer.
     That is R6's second sentence: a limit that genuinely cannot be removed is REPORTED with its
@@ -346,9 +350,7 @@ def _needs_a_reader(tree) -> bool:
             return False
         if node.get("kind") == "group" or isinstance(node.get("children"), list):
             return any(walk(n) for n in (node.get("children") or []))
-        if filter_eval._is_cohort(node) or filter_eval._is_measure(node):
-            return True
-        return node.get("op") in filter_eval.RANK_OPS
+        return filter_eval._is_cohort(node) or filter_eval._is_measure(node)
 
     return walk(tree)
 
@@ -561,12 +563,13 @@ def _public_view(rt, table_key: str, view: dict) -> dict:
         rows_src.append(r)
     rows_src.sort(key=lambda r: r["pid"])
 
-    # The view's own row selection, through the SHARED evaluator. `_needs_a_reader` has already
-    # refused anything this context could not answer, so an empty result here means the filter
-    # genuinely matches nothing — not that we failed to resolve it.
+    # The view's own row selection, through the SHARED whole-payload evaluator. It resolves rank
+    # sets from `rows_src` before evaluating, while `_needs_a_reader` has already refused the
+    # cohort/measure leaves this anonymous context cannot answer.
     ctx = filter_eval.EvalCtx(today=time.strftime("%Y-%m-%d"))
     keep = set(filter_eval.visible_pids(cfg.get("filters"), rows_src, fields, ctx,
-                                        member_pids=cfg.get("memberPids")))
+                                        member_pids=cfg.get("memberPids"),
+                                        group_by=cfg.get("groupBy")))
     chosen = [r for r in rows_src if r.get("pid") in keep]
 
     # ⛔⛔ COORDINATES RIDE A MAP WHEN THEY ARE COORDINATES — NOT WHEN THEY ARE VISIBLE, AND NOT