@kungfu-tech/buildchain 3.0.6-alpha.6 → 3.0.6

package/actions/promote-buildchain-ref/README.md

@@ -460,7 +460,11 @@ it does not have to equal the original `source_sha` or the transaction
 `release_sha`. Reruns accept exact tags that already point at the transaction
 release/material SHA or the finalized channel head, and continue moving any
 missing floating tags or dev/alpha refs before marking the transaction
-`complete`.
+`complete`. An explicit recovery of an already `complete` transaction is also
+accepted when the requested source SHA, version, exact tag, channel, and target
+all match the durable record exactly. It returns the completed transaction
+without republishing package bytes; a source accepted only through later branch
+history is not sufficient for this terminal-state reuse.
 
 Normal reruns accept already-published artifacts only when evidence matches.
 Missing required artifacts can be published on the next run. Conflicting

package/contracts/release-candidate-recovery-v1.schema.json

@@ -49,6 +49,7 @@
         "channel": { "enum": ["alpha", "release", "major"] },
         "ref": { "type": "string" },
         "sha": { "$ref": "#/$defs/gitSha" },
+        "observedRefSha": { "$ref": "#/$defs/gitSha" },
         "tree": { "$ref": "#/$defs/gitSha" },
         "version": { "type": "string", "minLength": 1 }
       }

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "3.0.6-alpha.6",
+    "version": "3.0.6",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v3",
@@ -193,7 +193,7 @@
         "sha256:acd401cfc46450115a3763fd4b679d85f185e8757ebd52510d6262e1533df4cf"
       ],
       "breakingDigest": "sha256:e60642aa298933d2c103284794921a6c340a50aa91ee528b06e58892a2a006bf",
-      "auditDigest": "sha256:952ff4870c1e682ea62141b0c848c33825767212111ef26110617dbdaeacac5b"
+      "auditDigest": "sha256:72f3222d7a603ede6e26caf30dfeee3545b62454d0c99e369ab5717db5468e7d"
     },
     {
       "contractVersion": 1,
@@ -249,7 +249,7 @@
         "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
       ],
       "breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
-      "auditDigest": "sha256:72f7e99799d2c66aa6e766d346df968c73db983f1ae8974694a714055db0e22c"
+      "auditDigest": "sha256:c0b8f67226c571ea3d75416e71890f47f8b43e780ec093173df48cf26052c414"
     },
     {
       "contractVersion": 1,
@@ -790,7 +790,7 @@
         "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
       ],
       "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
-      "auditDigest": "sha256:e0f89bde8d396a58cb94c6f0d278c9182af8067a01bbcf4c1fd453ec39325a57"
+      "auditDigest": "sha256:7d5d9ac8317397aec3593bd446ebc053ab47af448f441216f011ae303e5ba2ee"
     },
     {
       "contractVersion": 1,
@@ -812,7 +812,7 @@
         "agents can discover supported Node APIs without importing internal file paths"
       ],
       "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
-      "auditDigest": "sha256:a998faa0ef3da00e99e88988826dea520fa9be9402ae047ef17b1451ec476bf2"
+      "auditDigest": "sha256:75313c5cc605d977c8f3272a55d43d6adc8c641b61c713ed5b9e3772a5e70572"
     },
     {
       "contractVersion": 1,
@@ -863,7 +863,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:373723a73d188194d389dee04c394d3b79cb0c016a370f2f5d0f60979a02ed48",
-        "registryDigest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7",
+        "registryDigest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c",
         "inputClassifications": {
           "buildchain-ref": {
             "classification": "included",
@@ -1046,7 +1046,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:9c0aacca910cef4619a797898ff5c24027c1583f84431a93a5efc854925326e7",
-        "registryDigest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7",
+        "registryDigest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c",
         "inputClassifications": {
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
             "classification": "redacted",
@@ -1581,7 +1581,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:48545554883888862984cdf1b6b4b56341531cdd6192600782a76b92ad22fd36",
-        "registryDigest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7",
+        "registryDigest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c",
         "inputClassifications": {
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
             "classification": "redacted",
@@ -2054,7 +2054,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
-        "registryDigest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7",
+        "registryDigest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2271,7 +2271,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
-        "registryDigest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7",
+        "registryDigest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c",
         "inputClassifications": {
           "artifact-path": {
             "classification": "digest-only",
@@ -2515,7 +2515,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd",
-        "registryDigest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7",
+        "registryDigest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2697,7 +2697,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
-        "registryDigest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7",
+        "registryDigest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2959,6 +2959,7 @@
         "publication-expected-json",
         "publication-gate-aggregate-json",
         "publication-gate-command",
+        "publication-gate-controller-sha",
         "publication-package-name",
         "publication-product",
         "publication-publisher-workflow-path",
@@ -3024,8 +3025,8 @@
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:bc03b3ac295e33b738fe5168e14ebf4d0fabf2325b4ae4a3d2b3c12afe816068",
-        "registryDigest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7",
+        "digest": "sha256:bb49305be1f2176c47920532d414954e1d058156abf3411ae66cc97ba526d186",
+        "registryDigest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c",
         "inputClassifications": {
           "BUILDCHAIN_ISSUE_APP_ID": {
             "classification": "redacted",
@@ -3243,6 +3244,10 @@
             "classification": "digest-only",
             "source": "workflow-call-input"
           },
+          "publication-gate-controller-sha": {
+            "classification": "included",
+            "source": "workflow-call-input"
+          },
           "publication-package-name": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -3500,7 +3505,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
-      "auditDigest": "sha256:72f7e99799d2c66aa6e766d346df968c73db983f1ae8974694a714055db0e22c"
+      "auditDigest": "sha256:c0b8f67226c571ea3d75416e71890f47f8b43e780ec093173df48cf26052c414"
     },
     {
       "contractVersion": 1,
@@ -3565,7 +3570,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12",
-        "registryDigest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7",
+        "registryDigest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c",
         "inputClassifications": {
           "agent-work-context-json": {
             "classification": "digest-only",
@@ -3700,7 +3705,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
-        "registryDigest": "sha256:cc205cd0abe4ba5023d8afc38dea9d3f17c06f4a3622a6b8ccd3fc90b10e3fb7",
+        "registryDigest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c",
         "inputClassifications": {}
       },
       "guarantees": [
@@ -3714,5 +3719,5 @@
     }
   ],
   "compatibilityDigest": "sha256:80cfdf1786019217c439810f1a80d2866bf8f7ef35a6fa569e1a687fb2bf4cbe",
-  "contractDigest": "sha256:d29e04a3d7cee5095820a581c3732a57c33c80ab9f7707d72a686bc3060d9f6d"
+  "contractDigest": "sha256:900b03120a2ae9b7e7e67fdb854039849339f96bd6285a13c2ced30b9b02f2c0"
 }