Choose a minimum supplied placement asset cover — Escaped client review HTML

{
  "label": "Supplied agency job and review metadata"
}

{
  "label": "Choose a minimum supplied placement asset cover",
  "code": "return (function(context){\n\nfunction fail(reason){throw new Error('input: '+reason);}\nfunction check(schema,value,where){\n if(value===null){if(schema.type==='null'||Array.isArray(schema.type)&&schema.type.includes('null'))return;fail(where+' wrong_type');}\n const type=Array.isArray(schema.type)?schema.type[0]:schema.type;\n if(type==='object'){\n  if(!value||typeof value!=='object'||Array.isArray(value))fail(where+' wrong_type');\n  for(const name of Object.keys(value))if(!Object.hasOwn(schema.properties,name))fail(where+' unknown_field');\n  for(const name of schema.required)if(!Object.hasOwn(value,name))fail(where+' missing_field');\n  for(const [name,shape]of Object.entries(schema.properties))check(shape,value[name],where+'.'+name);\n }else if(type==='array'){\n  if(!Array.isArray(value)||value.length>schema.maxItems)fail(where+' array_bound');\n  for(const item of value)check(schema.items,item,where+'[]');\n }else if(type==='string'){if(typeof value!=='string'||value.length>schema.maxLength)fail(where+' string_bound');}\n else if(type==='integer'){if(!Number.isSafeInteger(value)||value<schema.minimum||value>schema.maximum)fail(where+' integer_bound');}\n else if(type==='boolean'){if(typeof value!=='boolean')fail(where+' wrong_type');}\n else fail(where+' unsupported_type');\n}\nfunction id(value){if(typeof value!=='string'||!value||value.trim()!==value)fail('noncanonical_identity');return value;}\nfunction unique(values,reason){if(new Set(values).size!==values.length)fail(reason);}\nfunction safeAdd(a,b){if(a>Number.MAX_SAFE_INTEGER-b)fail('unsafe_sum');return a+b;}\nfunction day(value){if(!/^\\d{4}-\\d{2}-\\d{2}$/.test(value))fail('invalid_calendar_day');const ms=Date.parse(value+'T00:00:00Z');if(!Number.isFinite(ms)||new Date(ms).toISOString().slice(0,10)!==value)fail('invalid_calendar_day');return ms;}\nfunction refKey(ref){id(ref.assetId);if(ref.version<1)fail('positive_version_required');return JSON.stringify([ref.assetId,ref.version]);}\nfunction refValue(key){const pair=JSON.parse(key);return {assetId:pair[0],version:pair[1]};}\nfunction sortedRefs(keys){return [...keys].sort().map(refValue);}\n\nfunction lexIds(a,b){for(let i=0;i<Math.min(a.length,b.length);i++){if(a[i]<b[i])return -1;if(a[i]>b[i])return 1;}return a.length-b.length;}\nfunction maxSubset(rows,idField,feasible){let best=-1,ids=[],ties=0;for(let mask=0;mask<2**rows.length;mask++){const chosen=rows.filter((_,i)=>mask&(1<<i));if(!feasible(chosen))continue;const value=chosen.reduce((n,r)=>n+r.valuePoints,0),current=chosen.map(r=>r[idField]).sort();if(value>best){best=value;ids=current;ties=1;}else if(value===best){ties++;if(lexIds(current,ids)<0)ids=current;}}return {ids,value:best,ties};}\nfunction rat(n,d){if(d===0n)fail('zero_denominator');if(d<0n){n=-n;d=-d;}let a=n<0n?-n:n,b=d;while(b){const next=a%b;a=b;b=next;}return [n/a,d/a];}\nfunction ratAdd(a,b){return rat(a[0]*b[1]+b[0]*a[1],a[1]*b[1]);}\nfunction ratSub(a,b){return rat(a[0]*b[1]-b[0]*a[1],a[1]*b[1]);}\nfunction ratMul(a,b){return rat(a[0]*b[0],a[1]*b[1]);}\nfunction ratText(a){return a[0].toString()+'/'+a[1].toString();}\n\n\ncheck({\"type\":\"object\",\"properties\":{\"scopeId\":{\"type\":\"string\",\"maxLength\":128},\"selectionComplete\":{\"type\":[\"boolean\",\"null\"]},\"requiredPlacementIds\":{\"type\":\"array\",\"items\":{\"type\":\"string\",\"maxLength\":128},\"maxItems\":20},\"assets\":{\"type\":\"array\",\"items\":{\"type\":\"object\",\"properties\":{\"assetId\":{\"type\":\"string\",\"maxLength\":128},\"placementIds\":{\"type\":\"array\",\"items\":{\"type\":\"string\",\"maxLength\":128},\"maxItems\":20},\"eligible\":{\"type\":[\"boolean\",\"null\"]}},\"required\":[\"assetId\",\"placementIds\",\"eligible\"],\"additionalProperties\":false},\"maxItems\":12}},\"required\":[\"scopeId\",\"selectionComplete\",\"requiredPlacementIds\",\"assets\"],\"additionalProperties\":false},context.input,\"input\");\nconst result=(function cover(x){\n id(x.scopeId);unique(x.requiredPlacementIds.map(id),'duplicate_placement_id');unique(x.assets.map(a=>id(a.assetId)),'duplicate_asset_id');for(const a of x.assets){unique(a.placementIds.map(id),'duplicate_asset_placement');for(const p of a.placementIds)if(!x.requiredPlacementIds.includes(p))fail('placement_not_declared');}\n const unknown=x.assets.filter(a=>a.eligible===null).map(a=>a.assetId).sort(),base={selectedAssetIds:[],minimumAssetCount:null,optimalTieCount:null,uncoveredPlacementIds:[],unknownAssetIds:unknown};\n if(x.selectionComplete!==true)return {status:'unknown',...base};\n if(!x.requiredPlacementIds.length)return {status:'minimum_cover_within_supplied_assets',...base,minimumAssetCount:0,optimalTieCount:1};\n if(unknown.length)return {status:'unknown',...base};\n const eligible=x.assets.filter(a=>a.eligible),uncovered=x.requiredPlacementIds.filter(p=>!eligible.some(a=>a.placementIds.includes(p))).sort();if(uncovered.length)return {status:'uncovered',...base,optimalTieCount:0,uncoveredPlacementIds:uncovered};\n let best=null,count=Infinity,ties=0;\n for(let mask=0;mask<2**eligible.length;mask++){const rows=eligible.filter((_,i)=>mask&(1<<i));if(rows.length>count||!x.requiredPlacementIds.every(p=>rows.some(a=>a.placementIds.includes(p))))continue;const ids=rows.map(a=>a.assetId).sort();if(rows.length<count){best=ids;count=rows.length;ties=1;}else {ties++;if(lexIds(ids,best)<0)best=ids;}}\n return {status:'minimum_cover_within_supplied_assets',...base,selectedAssetIds:best,minimumAssetCount:count,optimalTieCount:ties};\n})(context.input);\ncheck({\"type\":\"object\",\"properties\":{\"status\":{\"type\":\"string\",\"maxLength\":128},\"selectedAssetIds\":{\"type\":\"array\",\"items\":{\"type\":\"string\",\"maxLength\":128},\"maxItems\":100},\"minimumAssetCount\":{\"type\":[\"integer\",\"null\"],\"minimum\":0,\"maximum\":12},\"optimalTieCount\":{\"type\":[\"integer\",\"null\"],\"minimum\":0,\"maximum\":4096},\"uncoveredPlacementIds\":{\"type\":\"array\",\"items\":{\"type\":\"string\",\"maxLength\":128},\"maxItems\":100},\"unknownAssetIds\":{\"type\":\"array\",\"items\":{\"type\":\"string\",\"maxLength\":128},\"maxItems\":100}},\"required\":[\"status\",\"selectedAssetIds\",\"minimumAssetCount\",\"optimalTieCount\",\"uncoveredPlacementIds\",\"unknownAssetIds\"],\"additionalProperties\":false},result,\"output\");\nreturn result;\n})({input:context.input.jobInput});\n",
  "outputVar": "jobResult",
  "timeout": 3000,
  "memoryLimit": 64
}

{
  "label": "Escaped client review HTML",
  "code": "const jobResult=context.jobResult;\nconst delivery=(function(context){\nreturn ((function(originalResult,metadata,destination){\nfunction stableResult(value,depth=0){\n  if(depth>64)throw new Error('Result nesting exceeds 64');\n  if(value===null||typeof value==='string'||typeof value==='boolean')return JSON.stringify(value);\n  if(typeof value==='number'&&Number.isFinite(value))return JSON.stringify(value);\n  if(Array.isArray(value)){\n    if(Object.keys(value).length!==value.length||Array.from({length:value.length},(_,i)=>i).some(i=>!Object.hasOwn(value,i)))throw new Error('Result contains sparse data');\n    return '['+value.map(item=>stableResult(item,depth+1)).join(',')+']';\n  }\n  if(value&&typeof value==='object')return '{'+Object.keys(value).sort().map(key=>JSON.stringify(key)+':'+stableResult(value[key],depth+1)).join(',')+'}';\n  throw new Error('Result is not JSON data');\n}\nfunction utf8Length(text){\n  let bytes=0;\n  for(let i=0;i<text.length;i++){\n    const code=text.charCodeAt(i);\n    if(code<128)bytes++;else if(code<2048)bytes+=2;\n    else if(code>=55296&&code<=56319&&i+1<text.length&&text.charCodeAt(i+1)>=56320&&text.charCodeAt(i+1)<=57343){bytes+=4;i++;}\n    else bytes+=3;\n  }\n  return bytes;\n}\nfunction chunkText(text,maximum){\n  const chunks=[];\n  for(let start=0;start<text.length;){let end=Math.min(start+maximum,text.length);const last=text.charCodeAt(end-1),next=text.charCodeAt(end);if(end<text.length&&last>=55296&&last<=56319&&next>=56320&&next<=57343)end--;chunks.push(text.slice(start,end));start=end;}\n  return chunks;\n}\nfunction deliveryState(rendererId,originalResult,metadata,destination,destinationKeys){\n  const output={rendererId,status:'HELD',originalResult,drafts:[],holds:[],escapeReport:[]};\n  const hold=(code,message)=>{output.holds.push({code,message});return {output,json:''};};\n  const object=value=>value&&typeof value==='object'&&!Array.isArray(value);\n  const exact=(value,keys)=>object(value)&&Object.keys(value).length===keys.length&&keys.every(key=>Object.hasOwn(value,key));\n  const keys=['workflowId','canonicalIntentId','title','reviewUrl'],maxima=[128,200,200,1000];\n  if(!exact(metadata,keys)||keys.some((key,i)=>typeof metadata[key]!=='string'||!metadata[key].length||metadata[key].length>maxima[i]||/[\\u0000-\\u001f\\u007f]/.test(metadata[key]))||!/^https?:\\/\\/[^\\s<>\"']+$/.test(metadata.reviewUrl))return hold('INVALID_METADATA','Metadata must provide bounded workflowId, canonicalIntentId, title and an HTTP(S) reviewUrl.');\n  if(!exact(destination,destinationKeys)||destinationKeys.some(key=>typeof destination[key]!=='string'||!destination[key].length||destination[key].length>200||destination[key]!==destination[key].trim()||/[\\u0000-\\u001f\\u007f]/.test(destination[key])))return hold('INVALID_DESTINATION','Destination fields must be exactly: '+destinationKeys.join(', ')+'.');\n  let json;\n  try{if(!object(originalResult))throw new Error('Primary result must be a JSON object');json=stableResult(originalResult);}catch(error){return hold('INVALID_RESULT',error.message);}\n  if(json.length>32768||utf8Length(json)>65536)return hold('RESULT_BOUND_EXCEEDED','Original result exceeds this renderer profile; full original result is retained.');\n  return {output,json};\n}\nfunction escapeHtml(text){return text.replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/\"/g,'&quot;').replace(/'/g,'&#39;');}\nfunction escapeMarkdown(text){return text.replace(/&/g,'&amp;').replace(/[\\\\`*{}\\[\\]()#+\\-.!_|>~<]/g,'\\\\$&');}\nfunction markdownReviewText(metadata,json){\n  const runs=json.match(/`+/g)||[],fence='`'.repeat(Math.max(3,...runs.map(run=>run.length+1)));\n  return '# '+escapeMarkdown(metadata.title)+'\\n\\nWorkflow: '+escapeMarkdown(metadata.workflowId)+'\\nCanonical job: '+escapeMarkdown(metadata.canonicalIntentId)+'\\nReview: <'+metadata.reviewUrl.replace(/&/g,'&amp;')+'>\\n\\n'+fence+'json\\n'+json+'\\n'+fence+'\\n';\n}\nfunction plainReviewText(metadata,json){return metadata.title+'\\nWorkflow: '+metadata.workflowId+'\\nCanonical job: '+metadata.canonicalIntentId+'\\nReview: '+metadata.reviewUrl+'\\n\\n'+json;}\nfunction finishDraft(state,draft,texts=[],textMaximum=32768,byteMaximum=131072){\n  if(texts.some(text=>text.length>textMaximum)||utf8Length(JSON.stringify(draft))>byteMaximum){state.output.holds.push({code:'TARGET_BOUND_EXCEEDED',message:'Draft exceeds the target or Vora profile bound; no draft is emitted and the full original result is retained.'});return state.output;}\n  state.output.status='PREPARED';state.output.drafts=[draft];return state.output;\n}\nreturn (function clientHtml(originalResult,metadata,destination){\n  const state=deliveryState('client-html',originalResult,metadata,destination,[]);if(state.output.holds.length)return state.output;\n  const title=escapeHtml(metadata.title),text='<!doctype html><html lang=\"en\"><head><meta charset=\"utf-8\"><title>'+title+'</title></head><body><article><h1>'+title+'</h1><dl><dt>Workflow</dt><dd>'+escapeHtml(metadata.workflowId)+'</dd><dt>Canonical job</dt><dd>'+escapeHtml(metadata.canonicalIntentId)+'</dd></dl><p><a href=\"'+escapeHtml(metadata.reviewUrl)+'\">Review workflow</a></p><pre>'+escapeHtml(state.json)+'</pre></article></body></html>';\n  return finishDraft(state,{mediaType:'text/html; charset=utf-8',text},[text]);\n})(originalResult,metadata,destination);\n}))(context.input.jobResult,context.input.deliveryMetadata.metadata,context.input.deliveryMetadata.destination);\n\n})({input:{jobResult,deliveryMetadata:context.input.deliveryMetadata}});\nreturn {jobResult,delivery};\n",
  "outputVar": "result",
  "timeout": 3000,
  "memoryLimit": 64
}