@lanefoundry/source-prod-slice 0.0.0-canary-5535b4e

package/dist/signed-report.js

@@ -0,0 +1,104 @@
+/**
+ * signed-report.ts — Generate signed PromotionReport with trace IDs and candidate SHAs.
+ *
+ * Builds a complete PromotionReport from gate run artifacts and signs it
+ * using HMAC-SHA256 via the engine's signReport().
+ *
+ * @see docs/prd.md §5.1 — The gate
+ */
+import { signReport, canonicalizeReport } from '@lanefoundry/gatelane-engine';
+import { shaOfCandidateRef } from '@lanefoundry/gatelane-sdk';
+/**
+ * Build and sign a PromotionReport from gate run artifacts.
+ *
+ * This assembles all the pieces required by the PromotionReport type,
+ * computes the signature, and returns the complete signed report.
+ */
+export async function buildSignedReport(args) {
+    const { gateRunId, dataset, candidateShas, judgeShas, scorerCodeSha, baselineMetrics, candidateMetrics, judgeMatrix, policy, approver, signingKey, } = args;
+    // Validate required fields
+    if (!signingKey || signingKey.length < 16) {
+        throw new Error('signingKey must be >= 16 characters');
+    }
+    if (!gateRunId) {
+        throw new Error('gateRunId is required');
+    }
+    if (!dataset.content_hash) {
+        throw new Error('dataset must have content_hash');
+    }
+    // Build candidate_metrics in the shape expected by PromotionReport
+    const candidateMetricsForReport = {};
+    for (const [ref, metric] of Object.entries(candidateMetrics)) {
+        candidateMetricsForReport[ref] = {
+            aggregate_delta: metric.aggregate_delta,
+            cost_delta: metric.cost_delta,
+            latency_delta: metric.latency_delta,
+        };
+    }
+    // Build the report (without signature initially)
+    const report = {
+        id: `report-${gateRunId}`,
+        gate_run_id: gateRunId,
+        dataset_content_hash: dataset.content_hash,
+        dataset_version: dataset.version,
+        candidate_shas: candidateShas,
+        judge_shas: judgeShas,
+        scorer_code_sha: scorerCodeSha,
+        baseline_metrics: baselineMetrics,
+        candidate_metrics: candidateMetricsForReport,
+        judge_matrix: judgeMatrix,
+        policy,
+        approver,
+        timestamp: new Date().toISOString(),
+        signature: '', // placeholder; will be filled after signing
+    };
+    // Sign the report
+    const signature = await signReport(report, signingKey);
+    // Return signed report
+    const signedReport = {
+        ...report,
+        signature,
+    };
+    return {
+        report: signedReport,
+        canonicalJson: canonicalizeReport(signedReport),
+        signature,
+    };
+}
+/**
+ * Verify a PromotionReport's signature.
+ * Returns true if the signature matches the canonical JSON.
+ */
+export async function verifySignedReport(report, signingKey) {
+    const { verifyReport } = await import('@lanefoundry/gatelane-engine/sign');
+    return verifyReport(report, signingKey);
+}
+/**
+ * Generate candidate SHAs from source references.
+ * In production, these would come from git commit SHAs or container image digests.
+ */
+export async function generateCandidateShas(candidates) {
+    const shas = {};
+    for (const { ref, sourceRef } of candidates) {
+        shas[ref] = await shaOfCandidateRef(sourceRef);
+    }
+    return shas;
+}
+/**
+ * Generate judge SHAs from judge references.
+ */
+export async function generateJudgeShas(judges) {
+    const shas = {};
+    for (const { ref, model, version } of judges) {
+        const versioned = version ? `${model}@${version}` : model;
+        shas[ref] = await shaOfCandidateRef(versioned);
+    }
+    return shas;
+}
+/**
+ * Export a PromotionReport as canonical JSON for audit logs.
+ */
+export function exportReportForAudit(report) {
+    return canonicalizeReport(report);
+}
+//# sourceMappingURL=signed-report.js.map

package/dist/signed-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-report.js","sourceRoot":"","sources":["../src/signed-report.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AA0C9D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAsB;IAC5D,MAAM,EACJ,SAAS,EACT,OAAO,EACP,aAAa,EACb,SAAS,EACT,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,MAAM,EACN,QAAQ,EACR,UAAU,GACX,GAAG,IAAI,CAAC;IAET,2BAA2B;IAC3B,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,mEAAmE;IACnE,MAAM,yBAAyB,GAAyC,EAAE,CAAC;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7D,yBAAyB,CAAC,GAAG,CAAC,GAAG;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,MAAM,MAAM,GAAoB;QAC9B,EAAE,EAAE,UAAU,SAAS,EAAE;QACzB,WAAW,EAAE,SAAS;QACtB,oBAAoB,EAAE,OAAO,CAAC,YAAY;QAC1C,eAAe,EAAE,OAAO,CAAC,OAAO;QAChC,cAAc,EAAE,aAAa;QAC7B,UAAU,EAAE,SAAS;QACrB,eAAe,EAAE,aAAa;QAC9B,gBAAgB,EAAE,eAAe;QACjC,iBAAiB,EAAE,yBAAyB;QAC5C,YAAY,EAAE,WAAW;QACzB,MAAM;QACN,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,EAAE,EAAE,4CAA4C;KAC5D,CAAC;IAEF,kBAAkB;IAClB,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEvD,uBAAuB;IACvB,MAAM,YAAY,GAAoB;QACpC,GAAG,MAAM;QACT,SAAS;KACV,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,aAAa,EAAE,kBAAkB,CAAC,YAAY,CAAC;QAC/C,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAuB,EAAE,UAAkB;IAClF,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;IAC3E,OAAO,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAA6D;IAE7D,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAuE;IAEvE,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,MAAM,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@lanefoundry/source-prod-slice",
+  "version": "0.0.0-canary-5535b4e",
+  "description": "Production slice tooling — freeze, replay, compare, promote, audit.",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lanefoundry/gatelane.git",
+    "directory": "packages/source-prod-slice"
+  },
+  "homepage": "https://github.com/lanefoundry/gatelane/tree/main/packages/source-prod-slice",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./freeze-slice": {
+      "types": "./dist/freeze-slice.d.ts",
+      "import": "./dist/freeze-slice.js"
+    },
+    "./replay-batch": {
+      "types": "./dist/replay-batch.d.ts",
+      "import": "./dist/replay-batch.js"
+    },
+    "./compare-scores": {
+      "types": "./dist/compare-scores.d.ts",
+      "import": "./dist/compare-scores.js"
+    },
+    "./promotion-decision": {
+      "types": "./dist/promotion-decision.d.ts",
+      "import": "./dist/promotion-decision.js"
+    },
+    "./signed-report": {
+      "types": "./dist/signed-report.d.ts",
+      "import": "./dist/signed-report.js"
+    },
+    "./canary-orchestrator": {
+      "types": "./dist/canary-orchestrator.d.ts",
+      "import": "./dist/canary-orchestrator.js"
+    },
+    "./audit-export": {
+      "types": "./dist/audit-export.d.ts",
+      "import": "./dist/audit-export.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@lanefoundry/gatelane-sdk": "0.0.0-canary-5535b4e",
+    "@lanefoundry/gatelane-engine": "0.0.0-canary-5535b4e"
+  },
+  "devDependencies": {
+    "typescript": "^5.5.4",
+    "vitest": "^2.0.5"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run"
+  }
+}