aaronrene / knowtation public
feat minor hub feat/phase-2g-bundle
AI Agent git-import/068377df · 119 days ago · Mar 30, 2026 · Diff

feat(hub): per-evaluator approve authority (hosted + self-hosted)

Store per-user may-approve for evaluators in bridge blob hub_evaluator_may_approve and data/hub_evaluator_may_approve.json locally. Bridge GET /role returns may_approve_proposals; hosted-context includes it for gateway cache.

Gateway enforces POST proposals/:id/approve and discard before canister proxy (actor JWT + bridge role; discard admin-only). Settings hub_evaluator_may_approve reflects the signed-in user via bridge, with HUB_EVALUATOR_MAY_APPROVE=1 as fallback when no explicit map entry.

Self-hosted Hub mirrors the same map, APIs, and requireApproveRole logic.

Team tab: checkbox when assigning evaluator; inline toggle per evaluator row. Docs: TEAMS-AND-COLLABORATION, bridge and gateway READMEs. Tests for actorMayApproveProposals helper.

sha256:e96343604f1c17debff1e9a3fec3a240e18c1df8a6b29f1d8e8b3b2a053454da sha
sha256:7215eef06fd9697ce7e32ab3667ab73abd921da33aa01abb6ef2441b713f7370 parent
sha256:746edae2c3472b73fbbb8b19a31ebec412465f1cf49b6b3e56b4c26483b1b9ec snapshot
← Older Oldest on feat/phase-2g-bundle
All commits
Newer → Latest on feat/phase-2g-bundle

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:e96343604f1c17debff1e9a3fec3a240e18c1df8a6b29f1d8e8b3b2a053454da --body "your comment"