@lanefoundry/source-prod-slice 0.0.0-canary-5535b4e → 0.0.0-stage

package/dist/signed-report.js

@@ -1,104 +0,0 @@
-/**
- * signed-report.ts — Generate signed PromotionReport with trace IDs and candidate SHAs.
- *
- * Builds a complete PromotionReport from gate run artifacts and signs it
- * using HMAC-SHA256 via the engine's signReport().
- *
- * @see docs/prd.md §5.1 — The gate
- */
-import { signReport, canonicalizeReport } from '@lanefoundry/gatelane-engine';
-import { shaOfCandidateRef } from '@lanefoundry/gatelane-sdk';
-/**
- * Build and sign a PromotionReport from gate run artifacts.
- *
- * This assembles all the pieces required by the PromotionReport type,
- * computes the signature, and returns the complete signed report.
- */
-export async function buildSignedReport(args) {
-    const { gateRunId, dataset, candidateShas, judgeShas, scorerCodeSha, baselineMetrics, candidateMetrics, judgeMatrix, policy, approver, signingKey, } = args;
-    // Validate required fields
-    if (!signingKey || signingKey.length < 16) {
-        throw new Error('signingKey must be >= 16 characters');
-    }
-    if (!gateRunId) {
-        throw new Error('gateRunId is required');
-    }
-    if (!dataset.content_hash) {
-        throw new Error('dataset must have content_hash');
-    }
-    // Build candidate_metrics in the shape expected by PromotionReport
-    const candidateMetricsForReport = {};
-    for (const [ref, metric] of Object.entries(candidateMetrics)) {
-        candidateMetricsForReport[ref] = {
-            aggregate_delta: metric.aggregate_delta,
-            cost_delta: metric.cost_delta,
-            latency_delta: metric.latency_delta,
-        };
-    }
-    // Build the report (without signature initially)
-    const report = {
-        id: `report-${gateRunId}`,
-        gate_run_id: gateRunId,
-        dataset_content_hash: dataset.content_hash,
-        dataset_version: dataset.version,
-        candidate_shas: candidateShas,
-        judge_shas: judgeShas,
-        scorer_code_sha: scorerCodeSha,
-        baseline_metrics: baselineMetrics,
-        candidate_metrics: candidateMetricsForReport,
-        judge_matrix: judgeMatrix,
-        policy,
-        approver,
-        timestamp: new Date().toISOString(),
-        signature: '', // placeholder; will be filled after signing
-    };
-    // Sign the report
-    const signature = await signReport(report, signingKey);
-    // Return signed report
-    const signedReport = {
-        ...report,
-        signature,
-    };
-    return {
-        report: signedReport,
-        canonicalJson: canonicalizeReport(signedReport),
-        signature,
-    };
-}
-/**
- * Verify a PromotionReport's signature.
- * Returns true if the signature matches the canonical JSON.
- */
-export async function verifySignedReport(report, signingKey) {
-    const { verifyReport } = await import('@lanefoundry/gatelane-engine/sign');
-    return verifyReport(report, signingKey);
-}
-/**
- * Generate candidate SHAs from source references.
- * In production, these would come from git commit SHAs or container image digests.
- */
-export async function generateCandidateShas(candidates) {
-    const shas = {};
-    for (const { ref, sourceRef } of candidates) {
-        shas[ref] = await shaOfCandidateRef(sourceRef);
-    }
-    return shas;
-}
-/**
- * Generate judge SHAs from judge references.
- */
-export async function generateJudgeShas(judges) {
-    const shas = {};
-    for (const { ref, model, version } of judges) {
-        const versioned = version ? `${model}@${version}` : model;
-        shas[ref] = await shaOfCandidateRef(versioned);
-    }
-    return shas;
-}
-/**
- * Export a PromotionReport as canonical JSON for audit logs.
- */
-export function exportReportForAudit(report) {
-    return canonicalizeReport(report);
-}
-//# sourceMappingURL=signed-report.js.map

package/dist/signed-report.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signed-report.js","sourceRoot":"","sources":["../src/signed-report.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AA0C9D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAsB;IAC5D,MAAM,EACJ,SAAS,EACT,OAAO,EACP,aAAa,EACb,SAAS,EACT,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,MAAM,EACN,QAAQ,EACR,UAAU,GACX,GAAG,IAAI,CAAC;IAET,2BAA2B;IAC3B,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,mEAAmE;IACnE,MAAM,yBAAyB,GAAyC,EAAE,CAAC;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7D,yBAAyB,CAAC,GAAG,CAAC,GAAG;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,MAAM,MAAM,GAAoB;QAC9B,EAAE,EAAE,UAAU,SAAS,EAAE;QACzB,WAAW,EAAE,SAAS;QACtB,oBAAoB,EAAE,OAAO,CAAC,YAAY;QAC1C,eAAe,EAAE,OAAO,CAAC,OAAO;QAChC,cAAc,EAAE,aAAa;QAC7B,UAAU,EAAE,SAAS;QACrB,eAAe,EAAE,aAAa;QAC9B,gBAAgB,EAAE,eAAe;QACjC,iBAAiB,EAAE,yBAAyB;QAC5C,YAAY,EAAE,WAAW;QACzB,MAAM;QACN,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,EAAE,EAAE,4CAA4C;KAC5D,CAAC;IAEF,kBAAkB;IAClB,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEvD,uBAAuB;IACvB,MAAM,YAAY,GAAoB;QACpC,GAAG,MAAM;QACT,SAAS;KACV,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,aAAa,EAAE,kBAAkB,CAAC,YAAY,CAAC;QAC/C,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAuB,EAAE,UAAkB;IAClF,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;IAC3E,OAAO,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAA6D;IAE7D,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAuE;IAEvE,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,MAAM,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}