feat(pair-corpus-honesty): add vibe-py, vfc-js and agent-vfc slices with mechanism vocabulary

Tasks 1.1, 5.1, 5.2, 5.4 and the data half of 5.3. - mechanisms.toml: closed vocabulary v1 (20 ids) every expected row cites. - vibe-py: 35 Real-Vuln-Benchmark pairs (Apache-2.0), human provenance only because the LLM-generated repositories carry no license (escalated). - vfc-js: 17 Node fix-commit pairs harvested upstream (MIT/Apache-2.0), SecBench.js itself is not vendored (no license); sinks derived on 13/17. - agent-vfc: 29 agent-trailer fixes as catalog-candidates.toml plus REVIEW.md; the loaded catalog stays empty until a human reviews them. - datasets.toml and README document every slice and its review status. Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG
2026-10-21 22:19:29 +00:00 · 2026-09-05 10:45:42 +02:00
parent c3e841003c
commit 8ab4207618
182 changed files with 31299 additions and 0 deletions
@@ -0,0 +1,82 @@
+// Provenance: ZUENS2020/overleaf-with-claude  (fixed).
+// repo: ZUENS2020/overleaf-with-claude
+// commit: 3980b9e5806defb63e45ae2696e6c1899f3a8431
+// parent: 5a886aa9fb9fe4e2203f3cb1d62c91f4be0525ed
+// commit_url: https://github.com/ZUENS2020/overleaf-with-claude/commit/3980b9e5806defb63e45ae2696e6c1899f3a8431
+// cve: 
+// license: AGPL-3.0
+// function: exportProject
+// relpath: services/web/app/src/Features/Exports/ExportsController.mjs
+// provenance: agent
+// mechanism: identity_from_request_body
+
+import { expressify } from '@overleaf/promise-utils'
+import SessionManager from '../Authentication/SessionManager.mjs'
+import logger from '@overleaf/logger'
+import OError from '@overleaf/o-error'
+import settings from '@overleaf/settings'
+
+async function exportProject(req, res, next) {
+  const { project_id: projectId, brand_variation_id: brandVariationId } =
+    req.params
+  const userId = SessionManager.getLoggedInUserId(req.session)
+  const exportParams = {
+    project_id: projectId,
+    brand_variation_id: brandVariationId,
+    user_id: userId,
+  }
+
+  if (req.body) {
+    if (req.body.firstName) {
+      exportParams.first_name = req.body.firstName.trim()
+    }
+    if (req.body.lastName) {
+      exportParams.last_name = req.body.lastName.trim()
+    }
+    // additional parameters for gallery exports
+    if (req.body.title) {
+      exportParams.title = req.body.title.trim()
+    }
+    if (req.body.description) {
+      exportParams.description = req.body.description.trim()
+    }
+    if (req.body.author) {
+      exportParams.author = req.body.author.trim()
+    }
+    if (req.body.license) {
+      exportParams.license = req.body.license.trim()
+    }
+    if (req.body.showSource != null) {
+      exportParams.show_source = req.body.showSource
+    }
+  }
+
+  try {
+    const exportData = await ExportsHandler.exportProject(exportParams)
+    logger.debug(
+      {
+        userId,
+        projectId,
+        brandVariationId,
+        exportV1Id: exportData.v1_id,
+      },
+      'exported project'
+    )
+    return res.json({
+      export_v1_id: exportData.v1_id,
+      token: exportData.token,
+      message: exportData.message,
+    })
+  } catch (err) {
+    const info = OError.getFullInfo(err)
+    if (info?.forwardResponse) {
+      logger.debug(
+        { responseError: info.forwardResponse },
+        'forwarding response'
+      )
+      const statusCode = info.forwardResponse.status || 500
+      return res.status(statusCode).json(info.forwardResponse)
+    }
+    throw err
+  }
+}