Spaces:

localgate
/

audit-conversion

Running

abullard1 commited on 5 days ago

Commit

b2ac46e

verified ·

1 Parent(s): 93821c4

Deploy conversion @ 4150fff-space

Files changed (4) hide show

README.md CHANGED Viewed

@@ -11,7 +11,10 @@ hf_oauth: true
 hf_oauth_expiration_minutes: 1440
 hf_oauth_scopes:
   - read-repos
-  - contribute-repos
 hf_oauth_authorized_org: localgate
 ---

 hf_oauth_expiration_minutes: 1440
 hf_oauth_scopes:
   - read-repos
+  # write-repos, not contribute-repos — see audit-verdicts/README.md: each
+  # Space is its own OAuth app, so app-scoped contribute-repos cannot write
+  # the shared results repo created under another Space's app.
+  - write-repos
 hf_oauth_authorized_org: localgate
 ---

app.js CHANGED Viewed

@@ -24,7 +24,7 @@ import { oauthLoginUrl, oauthHandleRedirectIfPresent, uploadFiles, downloadFile,
 // the ?v= stamp — an unversioned nested import could load a stale module.
 import { keyOf, latestByKey, mergeEvents, orderItems, firstUngraded as
          firstUngradedPure, countComplete, stampClass, nextEpoch,
-         standsDownTo } from "./logic.mjs?v=7d6a390-space";
 // Test seam: Playwright installs window.__testHub (an in-memory hub) before
 // any page script runs; production never defines it, so this is one inert
@@ -217,10 +217,18 @@ async function pushGuarded() {
               { label: "Download your log", onClick: downloadLog }]);
       return;
     }
-    banner(/403|401/.test(String(err))
-      ? "Your work is saved in this browser, but publishing was refused (permissions). "
-        + "Nothing is lost — use the save button to retry once it's fixed (s on a keyboard)."
-      : "Your work is saved in this browser, but publishing to the server failed "
         + `(${String(err).slice(0, 80)}). Use the save button to retry (s on a keyboard).`,
       true, [{ label: "Download your log (send it to Samuel if this persists)",
                onClick: downloadLog }]);

 // the ?v= stamp — an unversioned nested import could load a stale module.
 import { keyOf, latestByKey, mergeEvents, orderItems, firstUngraded as
          firstUngradedPure, countComplete, stampClass, nextEpoch,
+         standsDownTo } from "./logic.mjs?v=4150fff-space";
 // Test seam: Playwright installs window.__testHub (an in-memory hub) before
 // any page script runs; production never defines it, so this is one inert
               { label: "Download your log", onClick: downloadLog }]);
       return;
     }
+    if (/403|forbidden/i.test(String(err))) {
+      // A cached token can carry outdated permissions (e.g. after a scope
+      // change). A fresh sign-in reissues it; localStorage keeps every event.
+      banner("Your work is saved in this browser, but publishing was refused "
+             + "(permissions). Sign in again to refresh your access — you will "
+             + "continue exactly where you left off.", true,
+             [{ label: "Sign in again", onClick: () => {
+                 sessionStorage.removeItem("oauth"); signIn(); } },
+              { label: "Download your log", onClick: downloadLog }]);
+      return;
+    }
+    banner("Your work is saved in this browser, but publishing to the server failed "
         + `(${String(err).slice(0, 80)}). Use the save button to retry (s on a keyboard).`,
       true, [{ label: "Download your log (send it to Samuel if this persists)",
                onClick: downloadLog }]);

config.js CHANGED Viewed

@@ -2,7 +2,7 @@ window.CONFIG = {
   task: "conversion",
   title: "Pass 2 · rewrite fidelity — 152 items",
   itemsPath: "conversion_items.json",
-  build: "7d6a390-space",
   landing: "You will judge whether each rewritten exam question still asks the same "
     + "question as the original, and whether it stands on its own without the answer "
     + "options. 152 items plus 3 discussable warm-ups; expect roughly 1.5–2 hours, "

   task: "conversion",
   title: "Pass 2 · rewrite fidelity — 152 items",
   itemsPath: "conversion_items.json",
+  build: "4150fff-space",
   landing: "You will judge whether each rewritten exam question still asks the same "
     + "question as the original, and whether it stands on its own without the answer "
     + "options. 152 items plus 3 discussable warm-ups; expect roughly 1.5–2 hours, "

index.html CHANGED Viewed

@@ -5,8 +5,8 @@
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; style-src 'self'; style-src-attr 'unsafe-inline'; font-src 'self'; connect-src https://huggingface.co https://*.hf.co; img-src 'self' data:; base-uri 'none'; form-action 'none'">
 <title>LocalGate audit</title>
-<link rel="stylesheet" href="style.css?v=7d6a390-space">
-<link rel="stylesheet" href="katex/katex.min.css?v=7d6a390-space">
 </head>
 <body>
 <header>
@@ -22,9 +22,9 @@
 <pre id="rubric-body"></pre></details>
 </div>
 <div id="controls" hidden></div>
-<script src="katex/katex.min.js?v=7d6a390-space"></script>
-<script src="katex/auto-render.min.js?v=7d6a390-space"></script>
-<script src="config.js?v=7d6a390-space"></script>
-<script type="module" src="app.js?v=7d6a390-space"></script>
 </body>
 </html>

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; style-src 'self'; style-src-attr 'unsafe-inline'; font-src 'self'; connect-src https://huggingface.co https://*.hf.co; img-src 'self' data:; base-uri 'none'; form-action 'none'">
 <title>LocalGate audit</title>
+<link rel="stylesheet" href="style.css?v=4150fff-space">
+<link rel="stylesheet" href="katex/katex.min.css?v=4150fff-space">
 </head>
 <body>
 <header>
 <pre id="rubric-body"></pre></details>
 </div>
 <div id="controls" hidden></div>
+<script src="katex/katex.min.js?v=4150fff-space"></script>
+<script src="katex/auto-render.min.js?v=4150fff-space"></script>
+<script src="config.js?v=4150fff-space"></script>
+<script type="module" src="app.js?v=4150fff-space"></script>
 </body>
 </html>