feat(pair-corpus-honesty): add vibe-py, vfc-js and agent-vfc slices with mechanism vocabulary

Tasks 1.1, 5.1, 5.2, 5.4 and the data half of 5.3. - mechanisms.toml: closed vocabulary v1 (20 ids) every expected row cites. - vibe-py: 35 Real-Vuln-Benchmark pairs (Apache-2.0), human provenance only because the LLM-generated repositories carry no license (escalated). - vfc-js: 17 Node fix-commit pairs harvested upstream (MIT/Apache-2.0), SecBench.js itself is not vendored (no license); sinks derived on 13/17. - agent-vfc: 29 agent-trailer fixes as catalog-candidates.toml plus REVIEW.md; the loaded catalog stays empty until a human reviews them. - datasets.toml and README document every slice and its review status. Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG
2026-10-22 14:39:28 +00:00 · 2026-09-05 10:45:42 +02:00
parent c3e841003c
commit 8ab4207618
182 changed files with 31299 additions and 0 deletions
@@ -0,0 +1,69 @@
+// Provenance: bigfivefoods/supplieradvisor-mvp  (fixed).
+// repo: bigfivefoods/supplieradvisor-mvp
+// commit: 387bcf40e984a2ee1832ab7beabf0284c5b627d8
+// parent: a7a9bc260d649ea2e582c07435bfd7d93100647b
+// commit_url: https://github.com/bigfivefoods/supplieradvisor-mvp/commit/387bcf40e984a2ee1832ab7beabf0284c5b627d8
+// cve: 
+// license: MIT
+// function: PATCH
+// relpath: app/api/customers/claims/route.ts
+// provenance: agent
+// mechanism: identity_from_request_body
+
+export async function PATCH(request: NextRequest) {
+  try {
+    const body = await request.json();
+    const claimId = Number(body.id);
+    const companyId = Number(body.companyId);
+    if (!Number.isFinite(claimId) || claimId <= 0) {
+      return NextResponse.json({ error: 'id required' }, { status: 400 });
+    }
+    if (!Number.isFinite(companyId) || companyId <= 0) {
+      return NextResponse.json({ error: 'companyId required' }, { status: 400 });
+    }
+
+    const _gate = await requireCompanyAccess(request, companyId, { legacyPrivyUserId: legacyPrivyFrom(request) });
+    if (!_gate.ok) return _gate.response;
+
+    const supabase = getSupabaseServer();
+    const { data: existing, error: fetchError } = await supabase
+      .from('customer_claims')
+      .select('*')
+      .eq('id', claimId)
+      .eq('profile_id', companyId)
+      .single();
+    if (fetchError || !existing) {
+      return NextResponse.json({ error: 'Claim not found' }, { status: 404 });
+    }
+
+    const fields = [
+      'status',
+      'priority',
+      'title',
+      'description',
+      'amount_claimed',
+      'amount_approved',
+      'resolution_notes',
+      'owner_name',
+      'claim_type',
+    ] as const;
+    const updates: Record<string, unknown> = { updated_at: new Date().toISOString() };
+    for (const f of fields) {
+      if (body[f] !== undefined) updates[f] = body[f];
+    }
+    if (['resolved', 'closed', 'approved', 'rejected'].includes(String(body.status))) {
+      updates.resolved_at = new Date().toISOString();
+    }
+    const { data, error } = await supabase
+      .from('customer_claims')
+      .update(updates)
+      .eq('id', claimId)
+      .eq('profile_id', companyId)
+      .select('*')
+      .single();
+    if (error) return NextResponse.json({ error: error.message }, { status: 500 });
+    return NextResponse.json({ success: true, claim: data });
+  } catch (e: unknown) {
+    return NextResponse.json({ error: e instanceof Error ? e.message : 'Error' }, { status: 500 });
+  }
+}