@kungfu-tech/buildchain 3.0.6-alpha.0 → 3.0.6-alpha.10

package/README.md

@@ -3,7 +3,7 @@
 <!-- buildchain-auditable-demo:start -->
 ## Buildchain beginner bootstrap
 
-[![Buildchain beginner bootstrap](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/demo.gif)](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/public-evidence.json)
+[![Buildchain beginner bootstrap](docs/evidence/auditable-demo/aa5cc40f4a62ed516e163e7e2c9dae0bcf32b3c77143a17105dfc4e5eaf9f01a/beginner-bootstrap/demo.gif)](docs/evidence/auditable-demo/aa5cc40f4a62ed516e163e7e2c9dae0bcf32b3c77143a17105dfc4e5eaf9f01a/beginner-bootstrap/public-evidence.json)
 
 Animation scenario:
 
@@ -13,16 +13,16 @@ $ buildchain layout --cwd ./starter --json
 $ buildchain version
 ```
 
-Native renditions: [1080p MP4](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/demo.mp4) · [1080p WebM](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/demo.webm) · [720p MP4](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/demo-720p.mp4) · [720p WebM](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/demo-720p.webm)
+Native renditions: [1080p MP4](docs/evidence/auditable-demo/aa5cc40f4a62ed516e163e7e2c9dae0bcf32b3c77143a17105dfc4e5eaf9f01a/beginner-bootstrap/demo.mp4) · [1080p WebM](docs/evidence/auditable-demo/aa5cc40f4a62ed516e163e7e2c9dae0bcf32b3c77143a17105dfc4e5eaf9f01a/beginner-bootstrap/demo.webm) · [720p MP4](docs/evidence/auditable-demo/aa5cc40f4a62ed516e163e7e2c9dae0bcf32b3c77143a17105dfc4e5eaf9f01a/beginner-bootstrap/demo-720p.mp4) · [720p WebM](docs/evidence/auditable-demo/aa5cc40f4a62ed516e163e7e2c9dae0bcf32b3c77143a17105dfc4e5eaf9f01a/beginner-bootstrap/demo-720p.webm)
 
-[Static poster / reduced-motion fallback](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/poster.png)
+[Static poster / reduced-motion fallback](docs/evidence/auditable-demo/aa5cc40f4a62ed516e163e7e2c9dae0bcf32b3c77143a17105dfc4e5eaf9f01a/beginner-bootstrap/poster.png)
 
 <details>
 <summary>Evidence and claim boundary</summary>
 
 This exact standalone-binary scenario proves deterministic local bootstrap behavior only; it does not grant release, repository, network, or production authority.
 
-[Release Passport](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/release-passport.json) · [auditable evidence](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/public-evidence.json)
+[Release Passport](docs/evidence/auditable-demo/aa5cc40f4a62ed516e163e7e2c9dae0bcf32b3c77143a17105dfc4e5eaf9f01a/beginner-bootstrap/release-passport.json) · [auditable evidence](docs/evidence/auditable-demo/aa5cc40f4a62ed516e163e7e2c9dae0bcf32b3c77143a17105dfc4e5eaf9f01a/beginner-bootstrap/public-evidence.json)
 
 </details>
 <!-- buildchain-auditable-demo:end -->

package/actions/promote-buildchain-ref/README.md

@@ -80,6 +80,14 @@ publish npm packages. The GitHub action dry-run still calls GitHub APIs to
 resolve the current target SHA and concrete pending ref updates, but every
 write is reported as a dry-run update.
 
+When the requested version already matches every declared version-state file,
+dry-run planning still runs `lifecycle.version-state` and any explicit
+`verification-command` so it can discover declared derived material. It does
+not fall back to the repository-wide `lifecycle.verify` in that no-op case;
+full product verification can require candidate artifacts that are deliberately
+not present until the later admission phase. Non-dry-run version-state writes
+continue to require the configured verification lifecycle before any ref moves.
+
 Repositories whose package version is anchored to an explicitly selected
 upstream release can opt into manual next-anchor behavior:
 
@@ -452,7 +460,11 @@ it does not have to equal the original `source_sha` or the transaction
 `release_sha`. Reruns accept exact tags that already point at the transaction
 release/material SHA or the finalized channel head, and continue moving any
 missing floating tags or dev/alpha refs before marking the transaction
-`complete`.
+`complete`. An explicit recovery of an already `complete` transaction is also
+accepted when the requested source SHA, version, exact tag, channel, and target
+all match the durable record exactly. It returns the completed transaction
+without republishing package bytes; a source accepted only through later branch
+history is not sufficient for this terminal-state reuse.
 
 Normal reruns accept already-published artifacts only when evidence matches.
 Missing required artifacts can be published on the next run. Conflicting

package/bin/buildchain.mjs

@@ -1368,8 +1368,20 @@ async function handleDoctorCommand(args) {
 
 async function handleDevCommand(args) {
     const [subcommand = "", ...devArgs] = args;
+    if (subcommand === "pr-admit") {
+      runScript("dev-pr-auto-merge.mjs", devArgs);
+      return;
+    }
+    if (subcommand === "warrant") {
+      runScript("dev-delivery-warrant.mjs", devArgs);
+      return;
+    }
+    if (subcommand === "proof") {
+      runScript("dev-delivery-proof.mjs", devArgs);
+      return;
+    }
     if (subcommand !== "merge-queue") {
-      throw new Error("usage: buildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M> [--from-config | --workflow <path>...]");
+      throw new Error("usage: buildchain dev <pr-admit|merge-queue|warrant|proof> [options]");
     }
     runScript("dev-merge-queue.mjs", devArgs);
     return;

package/contracts/auditable-demo-scenario-v1.schema.json

@@ -7,6 +7,22 @@
   "required": ["schema", "product", "artifact", "execution", "renditions", "demos", "publication", "authority"],
   "properties": {
     "schema": {"const": "buildchain.declarative-binary-demo/v1"},
+    "compositionMode": {
+      "type": "string",
+      "enum": ["presentation-framed", "terminal-fill"],
+      "default": "presentation-framed"
+    },
+    "playback": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema", "mode", "activeDurationMs", "finalHoldMs"],
+      "properties": {
+        "schema": {"const": "buildchain.declarative-demo-playback/v1"},
+        "mode": {"const": "deterministic-readable"},
+        "activeDurationMs": {"type": "integer", "minimum": 1000, "maximum": 179750},
+        "finalHoldMs": {"type": "integer", "minimum": 250, "maximum": 5000}
+      }
+    },
     "product": {
       "type": "object",
       "additionalProperties": false,
@@ -57,6 +73,42 @@
         "stdoutIncludes": {"type": "array", "maxItems": 32, "items": {"type": "string", "minLength": 1, "maxLength": 256}}
       }
     },
+    "presentation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema", "proofs", "materialization"],
+      "properties": {
+        "schema": {"const": "buildchain.declarative-demo-presentation/v1"},
+        "proofs": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 8,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["demoId", "label", "question", "summary"],
+            "properties": {
+              "demoId": {"type": "string", "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$"},
+              "label": {"type": "string", "minLength": 1, "maxLength": 80},
+              "question": {"type": "string", "minLength": 1, "maxLength": 120},
+              "summary": {"type": "string", "minLength": 1, "maxLength": 500},
+              "transitionAfter": {"type": "string", "minLength": 1, "maxLength": 500}
+            }
+          }
+        },
+        "materialization": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["readmeMode", "technicalSpecPath", "technicalSpecTitle", "technicalMarker"],
+          "properties": {
+            "readmeMode": {"type": "string", "enum": ["full", "media-only"]},
+            "technicalSpecPath": {"type": "string", "minLength": 1},
+            "technicalSpecTitle": {"type": "string", "minLength": 1, "maxLength": 120},
+            "technicalMarker": {"type": "string", "pattern": "^[a-z0-9][a-z0-9._:-]{0,79}$"}
+          }
+        }
+      }
+    },
     "renditions": {
       "const": [
         {"id": "1080p", "role": "primary", "columns": 150, "rows": 36, "width": 1920, "height": 1080},

package/contracts/release-candidate-recovery-v1.schema.json

@@ -0,0 +1,104 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://buildchain.libkungfu.dev/schemas/release-candidate-recovery-v1.schema.json",
+  "title": "Buildchain Release Candidate Recovery Receipt v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "contract",
+    "action",
+    "createdAt",
+    "repository",
+    "recoveryRunId",
+    "originalCandidate",
+    "target",
+    "recovered",
+    "skippedBuildStages",
+    "payloadBytes",
+    "buildchainToolingSha",
+    "transaction",
+    "root"
+  ],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "contract": { "const": "kungfu-buildchain-release-candidate-recovery/v1" },
+    "action": { "const": "reused" },
+    "createdAt": { "type": "string", "format": "date-time" },
+    "repository": { "type": "string", "pattern": "^[^/\\s]+/[^/\\s]+$" },
+    "recoveryRunId": { "type": "string" },
+    "originalCandidate": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["runId", "workflowFile", "workflowName", "pullRequest", "sourceSha", "mergeSha", "tree"],
+      "properties": {
+        "runId": { "type": "string", "pattern": "^[0-9]+$" },
+        "workflowFile": { "type": "string" },
+        "workflowName": { "type": "string" },
+        "pullRequest": { "type": "integer", "minimum": 1 },
+        "sourceSha": { "$ref": "#/$defs/gitSha" },
+        "mergeSha": { "type": "string", "pattern": "^(?:[0-9a-f]{40})?$" },
+        "tree": { "$ref": "#/$defs/gitSha" }
+      }
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["channel", "ref", "sha", "tree", "version"],
+      "properties": {
+        "channel": { "enum": ["alpha", "release", "major"] },
+        "ref": { "type": "string" },
+        "sha": { "$ref": "#/$defs/gitSha" },
+        "observedRefSha": { "$ref": "#/$defs/gitSha" },
+        "tree": { "$ref": "#/$defs/gitSha" },
+        "version": { "type": "string", "minLength": 1 }
+      }
+    },
+    "recovered": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["candidateRoot", "buildSummaryRoot", "artifactRoot", "artifactArchiveRoot", "artifactCount", "artifacts"],
+      "properties": {
+        "candidateRoot": { "$ref": "#/$defs/sha256" },
+        "buildSummaryRoot": { "$ref": "#/$defs/sha256" },
+        "artifactRoot": { "$ref": "#/$defs/sha256" },
+        "artifactArchiveRoot": { "$ref": "#/$defs/sha256" },
+        "artifactCount": { "type": "integer", "minimum": 1 },
+        "artifacts": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["name", "size", "digest"],
+            "properties": {
+              "name": { "type": "string", "minLength": 1 },
+              "size": { "type": "integer", "minimum": 0 },
+              "digest": { "$ref": "#/$defs/sha256" }
+            }
+          }
+        }
+      }
+    },
+    "skippedBuildStages": {
+      "const": ["install", "build", "verify", "platform-matrix"]
+    },
+    "payloadBytes": { "const": "unchanged" },
+    "buildchainToolingSha": { "$ref": "#/$defs/gitSha" },
+    "transaction": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["identity", "state", "publicationState"],
+      "properties": {
+        "identity": { "type": "string" },
+        "state": { "enum": ["absent", "prepared", "sealed", "publishing", "publish_failed", "published", "finalizing", "complete", "repair_required", "abandoned", "failed_permanently"] },
+        "publicationState": { "type": "string", "minLength": 1 }
+      }
+    },
+    "root": { "$ref": "#/$defs/sha256" }
+  },
+  "$defs": {
+    "gitSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+    "sha256": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
+  }
+}