Release artifacts and safe observability

function artifactSummary(raw) {
  const fields = ['applicationId', 'version', 'buildId', 'configuration'];
  if (!raw || fields.some(key => typeof raw[key] !== 'string' || raw[key] === '')) {
    throw new Error('INVALID_ARTIFACT');
  }
  return Object.fromEntries(fields.map(key => [key, raw[key]]));
}
console.log(JSON.stringify(artifactSummary({
  applicationId: 'example.learning.lab', version: '1.0', buildId: '42', configuration: 'lab',
})));
try { artifactSummary({version: '1.0'}); }
catch (error) { console.log(error.message); }

{"applicationId":"example.learning.lab","version":"1.0","buildId":"42","configuration":"lab"}
INVALID_ARTIFACT

The model inspects synthetic metadata only and does not read an installed application or produce a native artifact.

function diagnosticEvent(raw) {
  const categories = new Set(['decode', 'unavailable', 'denied']);
  if (!categories.has(raw.category) || !/^op-[0-9]+$/.test(raw.operationId)) {
    throw new Error('INVALID_DIAGNOSTIC');
  }
  return {category: raw.category, operationId: raw.operationId};
}
const event = diagnosticEvent({category: 'denied', operationId: 'op-7', token: 'synthetic-private'});
console.log(JSON.stringify(event));
console.log(Object.hasOwn(event, 'token'));

{"category":"denied","operationId":"op-7"}
false

Only the allowlisted category and lab operation ID appear. No token, payload, network request, or external logging service is used.