Upload 6 files

README.md

@@ -332,3 +332,8 @@ The worker writes `runs/<run_id>/artifact_manifest.json` as the source of truth
 ## v171 notes
 
 Run deletion now supports an explicit opt-in option to delete the associated generated Space for build runs. Validation run deletion remains run-artifact-only by default. The Run Storage card also summarizes bucket setup errors so fresh installs remain visually clean.
+
+
+## v187 note
+
+Signed-out users can see the public eval archive status for this ASF instance, while management actions remain restricted to the instance owner/admins.

app.py

@@ -282,8 +282,16 @@ def register_custom_routes(fastapi_app: FastAPI) -> None:
 
     @fastapi_app.get("/api/eval-archive/status")
     async def api_eval_archive_status(request: Request):  # type: ignore[no-untyped-def]
-        ctx = _oauth_context_from_request(request)
-        return JSONResponse(public_eval_config(ctx["username"]))
+        # Public instance-level status: signed-out users should still see whether
+        # the operator eval archive is enabled. Management permissions remain
+        # computed only when an OAuth user is present.
+        username = None
+        try:
+            ctx = _oauth_context_from_request(request)
+            username = ctx.get("username")
+        except HTTPException:
+            username = None
+        return JSONResponse(public_eval_config(username))
 
     @fastapi_app.post("/api/eval-archive/activate")
     async def api_eval_archive_activate(request: Request):  # type: ignore[no-untyped-def]