Merge the permissions inspector fix from split/3

Brings upd/split/3-permissions at 88a7482 into split/4-client-resolve. That
carries the one commit which makes `tools/permissions-inspector/wasm` pass the
request evidence and the signal providers to `assemble_permissions`, and which
formats the crate. This branch carries the same inspector and the same
`Permissions Inspector` workflow, so it failed the same way.

The merge had no conflicts and touches only the four files under
`tools/permissions-inspector/wasm`.

Tests. `./scripts/build-inspector-wasm.sh` builds clean for
wasm32-unknown-unknown on this tree, and `cargo fmt --check` on the crate is
clean.

Author: jwrosewell

tools/permissions-inspector/wasm/Cargo.lock

@@ -9,6 +9,12 @@ crate-type = ["cdylib"]
 
 [dependencies]
 trusted-server-core = { path = "../../../crates/trusted-server-core" }
+# The inspector runs the same permission signal providers an adapter ships,
+# in the same default order, so the page answers as a deployment would.
+trusted-server-permission-signal-gpc = { path = "../../../crates/permission-signal/gpc" }
+trusted-server-permission-signal-gpp = { path = "../../../crates/permission-signal/gpp" }
+trusted-server-permission-signal-tcf = { path = "../../../crates/permission-signal/tcf" }
+trusted-server-permission-signal-us-privacy = { path = "../../../crates/permission-signal/us-privacy" }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 

tools/permissions-inspector/wasm/Cargo.toml

@@ -30,8 +30,17 @@ fn workspace_version() -> String {
 
 fn main() {
     println!("cargo:rustc-env=TS_CORE_VERSION={}", workspace_version());
-    println!("cargo:rustc-env=TS_CORE_COMMIT={}", git(&["rev-parse", "--short=9", "HEAD"]));
-    println!("cargo:rustc-env=TS_CORE_DATE={}", git(&["show", "-s", "--format=%cs", "HEAD"]));
-    println!("cargo:rustc-env=TS_CORE_BRANCH={}", git(&["rev-parse", "--abbrev-ref", "HEAD"]));
+    println!(
+        "cargo:rustc-env=TS_CORE_COMMIT={}",
+        git(&["rev-parse", "--short=9", "HEAD"])
+    );
+    println!(
+        "cargo:rustc-env=TS_CORE_DATE={}",
+        git(&["show", "-s", "--format=%cs", "HEAD"])
+    );
+    println!(
+        "cargo:rustc-env=TS_CORE_BRANCH={}",
+        git(&["rev-parse", "--abbrev-ref", "HEAD"])
+    );
     println!("cargo:rerun-if-changed=../../../Cargo.toml");
 }

tools/permissions-inspector/wasm/build.rs

@@ -3,14 +3,29 @@
 //! functions the server runs: `build_context_from_signals` decodes the raw
 //! consent signals and `assemble_permissions` resolves the policy.
 
+use std::sync::Arc;
+
 use serde::Deserialize;
 use serde_json::json;
 use trusted_server_core::consent::build_context_from_signals;
 use trusted_server_core::consent::types::RawConsentSignals;
 use trusted_server_core::ec::consent::{GeoStatus, assemble_permissions};
+use trusted_server_core::evidence::OwnedRequestInfo;
+use trusted_server_core::permission_signal::PermissionSignalProvider;
 use trusted_server_core::permissions::{Permission, PermissionMaps};
 use trusted_server_core::platform::GeoInfo;
 
+/// The signal providers the inspector asks, in the order every adapter offers
+/// them when `[permission_signal] sources` names none.
+fn providers() -> Vec<Arc<dyn PermissionSignalProvider>> {
+    vec![
+        Arc::new(trusted_server_permission_signal_gpc::GpcProvider::new()),
+        Arc::new(trusted_server_permission_signal_gpp::GppSaleOptOutProvider::new()),
+        Arc::new(trusted_server_permission_signal_us_privacy::UsPrivacyProvider::new()),
+        Arc::new(trusted_server_permission_signal_tcf::TcfProvider::new()),
+    ]
+}
+
 /// The inspector's evaluation request.
 #[derive(Deserialize)]
 struct EvalInput {
@@ -38,14 +53,20 @@ fn eval_json(input: &str) -> String {
         gpc: input.gpc,
     };
     let ctx = build_context_from_signals(&signals);
+    // The page carries no request, only the consent signals above, and each of
+    // the four providers answers from the consent record rather than from
+    // request evidence, so empty evidence changes none of their answers. A
+    // provider that read a header or a cookie would need real evidence here.
+    let evidence = OwnedRequestInfo::default();
+    let providers = providers();
     let maps = PermissionMaps::standard();
     let (state, jurisdiction) = match input.geo.as_str() {
         "failed" => {
-            let state = assemble_permissions(&ctx, GeoStatus::Failed);
+            let state = assemble_permissions(&ctx, &evidence, GeoStatus::Failed, &providers);
             (state, "unknown".to_string())
         }
         "none" => {
-            let state = assemble_permissions(&ctx, GeoStatus::NoLocation);
+            let state = assemble_permissions(&ctx, &evidence, GeoStatus::NoLocation, &providers);
             (state, jurisdiction_name(maps.default_jurisdiction()))
         }
         _ => {
@@ -59,7 +80,8 @@ fn eval_json(input: &str) -> String {
                 region: input.region.clone().filter(|r| !r.is_empty()),
                 asn: None,
             };
-            let state = assemble_permissions(&ctx, GeoStatus::Located(&info));
+            let state =
+                assemble_permissions(&ctx, &evidence, GeoStatus::Located(&info), &providers);
             let jurisdiction = jurisdiction_name(
                 maps.jurisdiction_for(input.country.as_deref(), input.region.as_deref()),
             );
@@ -83,7 +105,8 @@ fn eval_json(input: &str) -> String {
 fn jurisdiction_name(j: trusted_server_core::consent::jurisdiction::Jurisdiction) -> String {
     let name = format!("{j:?}").to_lowercase();
     let name = name.split('(').next().unwrap_or(&name).to_string();
-    name.replace("usstate", "us-state").replace("nonregulated", "non-regulated")
+    name.replace("usstate", "us-state")
+        .replace("nonregulated", "non-regulated")
 }
 
 fn validate_json(yaml: &str) -> String {