@kungfu-tech/buildchain 3.0.6-alpha.1 → 3.0.6-alpha.3

package/dist/site/capability-registry.json

@@ -15,7 +15,7 @@
       "maturity": "stable",
       "counts": {
         "manualCount": 4,
-        "pageCount": 14,
+        "pageCount": 15,
         "cliCommandCount": 9,
         "nodeApiCount": 0,
         "workflowCount": 0,
@@ -51,7 +51,7 @@
         "manualCount": 5,
         "pageCount": 5,
         "cliCommandCount": 25,
-        "nodeApiCount": 11,
+        "nodeApiCount": 12,
         "workflowCount": 3,
         "actionCount": 2
       },
@@ -253,8 +253,8 @@
         "manualCount": 8,
         "pageCount": 8,
         "cliCommandCount": 11,
-        "nodeApiCount": 5,
-        "workflowCount": 13,
+        "nodeApiCount": 6,
+        "workflowCount": 16,
         "actionCount": 0
       },
       "manuals": [
@@ -292,7 +292,7 @@
         "pageCount": 10,
         "cliCommandCount": 0,
         "nodeApiCount": 2,
-        "workflowCount": 39,
+        "workflowCount": 40,
         "actionCount": 1
       },
       "manuals": [

package/dist/site/cli-registry.json

@@ -409,29 +409,65 @@
     {
       "id": "dev",
       "source": "bin/buildchain.mjs",
-      "usage": "buildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M>",
+      "usage": "buildchain dev pr-admit --repository <owner/repo> --branch <dev/vN/vN.M>",
       "paths": [
         "dev",
-        "dev merge-queue"
+        "dev merge-queue",
+        "dev pr-admit",
+        "dev proof classify",
+        "dev proof integration",
+        "dev proof replay",
+        "dev proof source",
+        "dev proof verify-integration",
+        "dev proof verify-source",
+        "dev warrant cancel-queued",
+        "dev warrant close",
+        "dev warrant heartbeat",
+        "dev warrant observe",
+        "dev warrant recover",
+        "dev warrant select",
+        "dev warrant submit"
       ],
       "syntaxes": [
         "buildchain dev",
-        "buildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M> [--from-config | --workflow <required-workflow.yml>...] [--cwd <dir>] [--check-response-timeout-minutes <n>] [--max-entries-to-build <n>] [--apply]"
+        "buildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M> [--from-config | --workflow <required-workflow.yml>...] [--cwd <dir>] [--check-response-timeout-minutes <n>] [--max-entries-to-build <n>] [--apply]",
+        "buildchain dev pr-admit --repository <owner/repo> --branch <dev/vN/vN.M> --pull-request <n> --expected-head <sha> [--execute] [--output <file>] [--json]",
+        "buildchain dev proof <source|verify-source|classify|replay|integration|verify-integration> [--output <file>] [--json]",
+        "buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]"
       ],
       "options": [
         "--apply",
         "--branch",
         "--check-response-timeout-minutes",
         "--cwd",
+        "--execute",
+        "--expected-head",
         "--from-config",
+        "--json",
         "--max-entries-to-build",
+        "--output",
+        "--pull-request",
         "--repository",
         "--workflow"
       ],
       "aliases": [],
       "helpCommands": [
         "buildchain dev --help",
-        "buildchain dev merge-queue --help"
+        "buildchain dev merge-queue --help",
+        "buildchain dev pr-admit --help",
+        "buildchain dev proof classify --help",
+        "buildchain dev proof integration --help",
+        "buildchain dev proof replay --help",
+        "buildchain dev proof source --help",
+        "buildchain dev proof verify-integration --help",
+        "buildchain dev proof verify-source --help",
+        "buildchain dev warrant cancel-queued --help",
+        "buildchain dev warrant close --help",
+        "buildchain dev warrant heartbeat --help",
+        "buildchain dev warrant observe --help",
+        "buildchain dev warrant recover --help",
+        "buildchain dev warrant select --help",
+        "buildchain dev warrant submit --help"
       ],
       "purpose": "Inspect protected development-channel governance command families.",
       "capabilityGroup": "governance-versioning",

package/dist/site/controller-registry.json

@@ -458,6 +458,10 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
+        "verify-substage-evidence-path": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "working-directory": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -512,7 +516,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:ba530907e57984abd47974cf3a9bab124f04629563676a4e37cfa302549789d6"
+      "digest": "sha256:9c0aacca910cef4619a797898ff5c24027c1583f84431a93a5efc854925326e7"
     },
     {
       "schemaVersion": 1,
@@ -908,6 +912,10 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
+        "verify-substage-evidence-path": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "working-directory": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -938,7 +946,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:0e0888527d7319a7603620520cdd76eb3e4434f80dbc92fffa0eb0d90f88b3e4"
+      "digest": "sha256:48545554883888862984cdf1b6b4b56341531cdd6192600782a76b92ad22fd36"
     },
     {
       "schemaVersion": 1,
@@ -1887,6 +1895,10 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
+        "publication-gate-command": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "publication-package-name": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1979,6 +1991,10 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "release-candidate-wait-seconds": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "release-candidate-workflow-file": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -2075,6 +2091,42 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "resume-buildchain-runtime-sha": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "resume-candidate-repository": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "resume-candidate-run-id": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "resume-expected-candidate-root": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "resume-expected-candidate-runtime-sha": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "resume-expected-source-tree": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "resume-expected-workflow-file": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "resume-expected-workflow-name": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "resume-transaction-id": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "runner-preset": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -2137,7 +2189,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:220710d81a41b50edb4dc65cea3e1e5d20805406eaaced65bc006718700696b9"
+      "digest": "sha256:bc03b3ac295e33b738fe5168e14ebf4d0fabf2325b4ae4a3d2b3c12afe816068"
     },
     {
       "schemaVersion": 1,
@@ -2330,5 +2382,5 @@
       "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
     }
   ],
-  "digest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1"
+  "digest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7"
 }

package/dist/site/kfd-claims.json

@@ -14,20 +14,20 @@
   },
   "runtimeContract": {
     "contract": "kungfu-buildchain-runtime-contract-world",
-    "compatibilityDigest": "sha256:76c3dd58a02887ecd6af33d63e749fef0a988a820fea99bdf4cb078cc48caa83",
+    "compatibilityDigest": "sha256:80cfdf1786019217c439810f1a80d2866bf8f7ef35a6fa569e1a687fb2bf4cbe",
     "majorLine": "v3"
   },
   "publicSurfaceReverseAudit": {
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "7a8d22353a233dae3e99b727de9fef3f3d8b78741155c4f685214227481fd8f9",
+    "sha256": "0bf7f1ba89493e333e8eaf266373f7fefb11c0c7d3b3e7dd7a98d753695e02d5",
     "summary": {
       "cliCommandCount": 112,
-      "workflowCount": 60,
+      "workflowCount": 64,
       "actionCount": 6,
-      "sitePageCount": 64,
-      "docCommandRefCount": 830,
+      "sitePageCount": 65,
+      "docCommandRefCount": 881,
       "failureCount": 0
     },
     "auditBoundary": {
@@ -246,13 +246,13 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "7a8d22353a233dae3e99b727de9fef3f3d8b78741155c4f685214227481fd8f9",
+      "sha256": "0bf7f1ba89493e333e8eaf266373f7fefb11c0c7d3b3e7dd7a98d753695e02d5",
       "summary": {
         "cliCommandCount": 112,
-        "workflowCount": 60,
+        "workflowCount": 64,
         "actionCount": 6,
-        "sitePageCount": 64,
-        "docCommandRefCount": 830,
+        "sitePageCount": 65,
+        "docCommandRefCount": 881,
         "failureCount": 0
       },
       "auditBoundary": {
@@ -1352,6 +1352,18 @@
           "public": true,
           "packageExport": "./diagnostics"
         },
+        {
+          "id": "export:./dev-delivery-warrant",
+          "name": "@kungfu-tech/buildchain/dev-delivery-warrant",
+          "kind": "package-export",
+          "sourcePath": "packages/core/dev-delivery-warrant.js",
+          "evidencePath": "packages/core/dev-delivery-warrant.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./dev-delivery-warrant"
+        },
         {
           "id": "export:./homebrew",
           "name": "@kungfu-tech/buildchain/homebrew",
@@ -1616,6 +1628,18 @@
           "public": true,
           "packageExport": "./release-candidate"
         },
+        {
+          "id": "export:./release-candidate-recovery",
+          "name": "@kungfu-tech/buildchain/release-candidate-recovery",
+          "kind": "package-export",
+          "sourcePath": "packages/core/release-candidate-recovery.js",
+          "evidencePath": "packages/core/release-candidate-recovery.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./release-candidate-recovery"
+        },
         {
           "id": "export:./stable-candidate-ledger",
           "name": "@kungfu-tech/buildchain/stable-candidate-ledger",
@@ -2046,7 +2070,7 @@
         },
         {
           "id": "cli:dev",
-          "name": "buildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M>",
+          "name": "buildchain dev pr-admit --repository <owner/repo> --branch <dev/vN/vN.M>",
           "kind": "cli-command",
           "sourcePath": "bin/buildchain.mjs",
           "evidencePath": "bin/buildchain.mjs",
@@ -3334,7 +3358,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 85,
+          "inputCount": 86,
           "inputs": [
             "artifact-compression-level",
             "artifact-name",
@@ -3420,6 +3444,7 @@
             "shifu-cache-profile-ref",
             "untrusted-policy",
             "verify-command",
+            "verify-substage-evidence-path",
             "working-directory"
           ],
           "reverseAuditSource": ".github/workflows"
@@ -3448,7 +3473,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 11,
+          "inputCount": 12,
           "inputs": [
             "artifact-retention-days",
             "binary-artifact-digest",
@@ -3457,6 +3482,7 @@
             "materialize",
             "materialize-base-ref",
             "media-profile",
+            "render-failure-advisory",
             "render-media",
             "renderer-image",
             "scenario-path",
@@ -3519,7 +3545,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 33,
+          "inputCount": 34,
           "inputs": [
             "admission-json",
             "authority-workflow-path",
@@ -3528,6 +3554,7 @@
             "auto-no-gate",
             "buildchain-ref",
             "buildchain-repository",
+            "consumer-gate-command",
             "consumer-predicate-digest",
             "consumer-predicate-id",
             "consumer-qualification-required",
@@ -3567,7 +3594,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 95,
+          "inputCount": 106,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -3612,6 +3639,7 @@
             "publication-control-plane-audit-json",
             "publication-expected-json",
             "publication-gate-aggregate-json",
+            "publication-gate-command",
             "publication-package-name",
             "publication-product",
             "publication-publisher-workflow-path",
@@ -3635,6 +3663,7 @@
             "release-candidate-family-evidence-required",
             "release-candidate-family-evidence-root",
             "release-candidate-family-initiative-id",
+            "release-candidate-wait-seconds",
             "release-candidate-workflow-file",
             "release-candidate-workflow-name",
             "release-passport",
@@ -3659,6 +3688,15 @@
             "release-propagation-config-path",
             "required-artifact-count",
             "required-status-check",
+            "resume-buildchain-runtime-sha",
+            "resume-candidate-repository",
+            "resume-candidate-run-id",
+            "resume-expected-candidate-root",
+            "resume-expected-candidate-runtime-sha",
+            "resume-expected-source-tree",
+            "resume-expected-workflow-file",
+            "resume-expected-workflow-name",
+            "resume-transaction-id",
             "runner-preset",
             "standalone-binary-distribution",
             "target-ref",
@@ -4072,7 +4110,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 88,
+          "inputCount": 89,
           "inputs": [
             "artifact-compression-level",
             "artifact-name",
@@ -4161,6 +4199,7 @@
             "shifu-cache-profile-ref",
             "untrusted-policy",
             "verify-command",
+            "verify-substage-evidence-path",
             "working-directory"
           ],
           "reverseAuditSource": ".github/workflows"
@@ -4179,6 +4218,34 @@
           "inputs": [],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:buildchain-candidate-recovery-dogfood-failure",
+          "name": "workflow:buildchain-candidate-recovery-dogfood-failure",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/buildchain-candidate-recovery-dogfood-failure.yml",
+          "evidencePath": ".github/workflows/buildchain-candidate-recovery-dogfood-failure.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 0,
+          "inputs": [],
+          "reverseAuditSource": ".github/workflows"
+        },
+        {
+          "id": "workflow:buildchain-dev-delivery",
+          "name": "workflow:buildchain-dev-delivery",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/buildchain-dev-delivery.yml",
+          "evidencePath": ".github/workflows/buildchain-dev-delivery.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 0,
+          "inputs": [],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:buildchain-patrol-daily",
           "name": "workflow:buildchain-patrol-daily",
@@ -4360,6 +4427,61 @@
           ],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:dev-delivery-warrant-cancel",
+          "name": "workflow:dev-delivery-warrant-cancel",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/dev-delivery-warrant-cancel.yml",
+          "evidencePath": ".github/workflows/dev-delivery-warrant-cancel.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 12,
+          "inputs": [
+            "buildchain-ref",
+            "buildchain-repository",
+            "event-action",
+            "expected-candidate-id",
+            "expected-old-state-root",
+            "expected-pr-number",
+            "expected-source-head-sha",
+            "observed-source-head-sha",
+            "outcome",
+            "reason",
+            "target-branch",
+            "terminal-evidence-root"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
+        {
+          "id": "workflow:dev-delivery-warrant-close",
+          "name": "workflow:dev-delivery-warrant-close",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/dev-delivery-warrant-close.yml",
+          "evidencePath": ".github/workflows/dev-delivery-warrant-close.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 13,
+          "inputs": [
+            "buildchain-ref",
+            "buildchain-repository",
+            "current-base-sha",
+            "expected-head-sha",
+            "expected-pr-number",
+            "merge-group-head-sha",
+            "merge-group-tree-sha",
+            "outcome",
+            "reason",
+            "replay-tree-sha",
+            "required-context-roots-json",
+            "target-branch",
+            "terminal-evidence-root"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:dev-merge-queue-governance",
           "name": "workflow:dev-merge-queue-governance",
@@ -4384,22 +4506,40 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 14,
+          "inputCount": 32,
           "inputs": [
+            "affected-paths-json",
             "allowed-head-prefixes",
+            "assignment-root",
             "block-labels",
             "buildchain-ref",
             "buildchain-repository",
+            "closure-root",
+            "delivery-class",
+            "delivery-priority",
+            "delivery-warrant-mode",
+            "dependency-root",
+            "diagnostic-context",
             "dry-run",
+            "expected-head-sha",
+            "expected-pr-number",
+            "initiative-root",
             "landing-mode",
             "max-merges",
             "merge-method",
+            "plan-root",
+            "project-cut-proof-json",
             "queue-admission-context",
             "ready-label",
             "require-approval",
             "required-status-checks",
             "same-repository-only",
-            "target-branch"
+            "shard-evidence-roots-json",
+            "source-identity-root",
+            "source-patch-root",
+            "target-branch",
+            "toolchain-root",
+            "warrant-lease-seconds"
           ],
           "reverseAuditSource": ".github/workflows"
         },
@@ -4717,7 +4857,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 87,
+          "inputCount": 98,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -4754,6 +4894,7 @@
             "publication-control-plane-audit-json",
             "publication-expected-json",
             "publication-gate-aggregate-json",
+            "publication-gate-command",
             "publication-package-name",
             "publication-product",
             "publication-publisher-workflow-path",
@@ -4777,6 +4918,7 @@
             "release-candidate-family-evidence-required",
             "release-candidate-family-evidence-root",
             "release-candidate-family-initiative-id",
+            "release-candidate-wait-seconds",
             "release-candidate-workflow-file",
             "release-candidate-workflow-name",
             "release-passport",
@@ -4801,6 +4943,15 @@
             "release-propagation-config-path",
             "required-artifact-count",
             "required-status-check",
+            "resume-buildchain-runtime-sha",
+            "resume-candidate-repository",
+            "resume-candidate-run-id",
+            "resume-expected-candidate-root",
+            "resume-expected-candidate-runtime-sha",
+            "resume-expected-source-tree",
+            "resume-expected-workflow-file",
+            "resume-expected-workflow-name",
+            "resume-transaction-id",
             "runner-preset",
             "standalone-binary-distribution",
             "target-ref",
@@ -5200,7 +5351,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 21,
+          "inputCount": 22,
           "inputs": [
             "artifact-name",
             "artifact-paths",
@@ -5221,6 +5372,7 @@
             "required",
             "sample-process-tree",
             "stage",
+            "substage-evidence-path",
             "summary-path",
             "timeout-minutes"
           ],
@@ -5592,6 +5744,18 @@
           "public": true,
           "reverseAuditSource": "dist/site/page-registry.json"
         },
+        {
+          "id": "site-page:manual:dev-delivery-warrant",
+          "name": "site-page:manual:dev-delivery-warrant",
+          "kind": "site-page",
+          "sourcePath": "dist/site/page-registry.json",
+          "evidencePath": "dist/site/page-registry.json",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "dist/site/page-registry.json"
+        },
         {
           "id": "site-page:manual:dev-qualification-patrol",
           "name": "site-page:manual:dev-qualification-patrol",
@@ -6183,6 +6347,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 394
+    "publicSurfaceCount": 401
   }
 }

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.6-alpha.1",
+    "version": "3.0.6-alpha.3",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {