Software Developer Specialist

Illustrative preview: this representative editorial result is not a recorded runtime session.

The OR currently permits every active reservation to every user, and also permits owners to view cancelled reservations. The supplied rule requires both ownership and active state.

Corrected TypeScript file

type Reservation = { ownerId: string; cancelled: boolean };

export function canView(userId: string, r: Reservation): boolean {
  return r.ownerId === userId && !r.cancelled;
}

Proposed behavior checks

The oracle comes from the supplied rule, independently of the operator used in the implementation.

A concrete proposed test file, to adapt to the repository's actual test runner:

import { canView } from './canView';

const cases = [
  { user: 'A', owner: 'A', cancelled: false, expected: true },
  { user: 'B', owner: 'A', cancelled: false, expected: false },
  { user: 'A', owner: 'A', cancelled: true, expected: false },
  { user: 'B', owner: 'A', cancelled: true, expected: false },
];

for (const c of cases) {
  const actual = canView(c.user, { ownerId: c.owner, cancelled: c.cancelled });
  if (actual !== c.expected) {
    throw new Error(`visibility mismatch for ${JSON.stringify(c)}`);
  }
}

No runner, file path or import location was inspected; these are supplied artifacts, not files created in your repository.

ImplementationPack

task_id: software-developer-example-1; artifact_id: ImplementationPack-EX-1; version: 0.1.0. IDs identify this representative artifact, not a runtime execution.

Status: NEEDS_EVIDENCE. Producer: Software Developer; recipient: test/review owner. Objective: enforce active-owner visibility. Scope: the pasted function, preserved signature; callers and server enforcement are uninspected. Inputs: supplied TypeScript and explicit rule. Confirmed decision: ownership AND active state. Local choice: replace OR with AND; no abstraction or dependency is needed.

base_ref: supplied excerpt; no repository reference. spec_ref: the rule in this request. candidate_ref: binding pending; proposed source above. changed_files: proposed canView source; actual location unknown. environment: unavailable. No filesystem edit, command, commit or test run occurred.

AC-1: active owner is allowed; check case 1. AC-2: active non-owner is denied; case 2 exposes the old defect. AC-3: cancelled owner is denied; case 3 exposes the second defect. AC-4: cancelled non-owner is denied; case 4 preserves rejection. All executable checks are PENDING. Static Boolean reasoning supports the proposed correction but is not a test-run result.

Known risks: if this predicate runs only in the client, it does not enforce server authorization; inspect the actual access boundary and callers before claiming end-to-end protection. After installation, capture the full candidate, discover the project's real commands and bind raw results to that candidate. A supplied test plan does not establish independent acceptance.

Recovery: revert this source change if a different confirmed rule is discovered; no data migration is involved in the excerpt. Next action: implementation owner integrates the patch, then test/review owner executes the truth-table cases and inspects enforcement. No release approval is granted.