loadout-ai 0.1.0

package/dist/src/core/canary.js

@@ -0,0 +1,77 @@
+import { evaluatePackage } from "./evaluate.js";
+/**
+ * Run the policy gate for a candidate without mutating agent configuration.
+ * Promotion is deliberately injected so callers can connect it to their
+ * transaction layer; this function never executes candidate code itself.
+ */
+export async function runCanary(candidate, policy, options = {}, runtime = {}) {
+    const evaluation = await (runtime.evaluate ?? evaluatePackage)(candidate.root);
+    const base = { candidate, evaluation };
+    if (!policy.enabled)
+        return {
+            ...base,
+            status: "blocked",
+            reason: "Canary mode is disabled by policy.",
+        };
+    const applicable = evaluation.categories.filter((category) => category.status !== "not-applicable");
+    if (applicable.length === 0)
+        return {
+            ...base,
+            status: "blocked",
+            reason: "Static evaluation found no supported component to verify.",
+        };
+    if (policy.requireStaticReady !== false &&
+        applicable.some((category) => category.status !== "ready"))
+        return {
+            ...base,
+            status: "blocked",
+            reason: "Static evaluation is not ready for every applicable component category.",
+        };
+    const verification = runtime.verify
+        ? await runtime.verify(candidate)
+        : {
+            ok: true,
+            findings: ["No runtime verifier was supplied; static-only canary."],
+        };
+    if (!verification.ok)
+        return {
+            ...base,
+            status: "blocked",
+            verification,
+            reason: "Canary verification failed; promotion was not attempted.",
+        };
+    if (policy.requireApproval !== false && !options.approve)
+        return {
+            ...base,
+            status: "verified",
+            verification,
+            reason: "Canary verified; explicit approval is required for promotion.",
+        };
+    if (!runtime.promote)
+        return {
+            ...base,
+            status: "verified",
+            verification,
+            reason: "Canary verified; no promotion callback was supplied.",
+        };
+    const promoted = await runtime.promote(candidate);
+    return {
+        ...base,
+        status: "promoted",
+        verification,
+        reason: "Canary verified and promotion completed through the transaction callback.",
+        snapshotId: promoted.snapshotId,
+    };
+}
+export function formatCanaryResult(result) {
+    const revision = result.candidate.commit ? `@${result.candidate.commit}` : "";
+    const lines = [
+        `Canary ${result.status.toUpperCase()}: ${result.candidate.packageId}${revision}`,
+        result.reason,
+    ];
+    if (result.verification?.findings?.length)
+        lines.push(`Verification: ${result.verification.findings.join("; ")}`);
+    if (result.snapshotId)
+        lines.push(`Snapshot: ${result.snapshotId}`);
+    return lines.join("\n");
+}