@kungfu-tech/buildchain 3.0.6 → 3.0.7-alpha.0

package/dist/site/capability-registry.json

@@ -48,19 +48,22 @@
       ],
       "maturity": "stable",
       "counts": {
-        "manualCount": 5,
-        "pageCount": 5,
-        "cliCommandCount": 25,
-        "nodeApiCount": 12,
-        "workflowCount": 3,
-        "actionCount": 2
+        "manualCount": 8,
+        "pageCount": 8,
+        "cliCommandCount": 26,
+        "nodeApiCount": 17,
+        "workflowCount": 4,
+        "actionCount": 3
       },
       "manuals": [
         "docs/release-passport.md",
         "docs/github-artifact-attestation.md",
         "docs/publication-authority.md",
         "docs/binary-distribution.md",
-        "docs/publish-transaction.md"
+        "docs/publish-transaction.md",
+        "docs/release-tail-contract.md",
+        "docs/release-tail-provider-plane.md",
+        "docs/publication-rehearsal.md"
       ],
       "factSources": [
         "page-registry.json",
@@ -252,7 +255,7 @@
       "counts": {
         "manualCount": 8,
         "pageCount": 8,
-        "cliCommandCount": 11,
+        "cliCommandCount": 12,
         "nodeApiCount": 6,
         "workflowCount": 16,
         "actionCount": 0
@@ -289,7 +292,7 @@
       "maturity": "stable",
       "counts": {
         "manualCount": 3,
-        "pageCount": 10,
+        "pageCount": 11,
         "cliCommandCount": 0,
         "nodeApiCount": 2,
         "workflowCount": 40,

package/dist/site/cli-registry.json

@@ -5,6 +5,52 @@
   "npmPackage": "@kungfu-tech/buildchain",
   "commandSource": "bin/internal/command-registry.mjs plus bin/buildchain.mjs help enumeration",
   "commands": [
+    {
+      "id": "architecture",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain architecture validate [--cwd <dir>] [--json]",
+      "paths": [
+        "architecture",
+        "architecture list",
+        "architecture qualify",
+        "architecture show",
+        "architecture validate"
+      ],
+      "syntaxes": [
+        "buildchain architecture",
+        "buildchain architecture list [--cwd <dir>] [--json]",
+        "buildchain architecture qualify --authority-revision <git-revision> [--candidate-revision <git-revision>] [--cwd <dir>] [--json]",
+        "buildchain architecture show <capability-id> [--cwd <dir>] [--json]",
+        "buildchain architecture validate [--cwd <dir>] [--json]"
+      ],
+      "options": [
+        "--authority-revision",
+        "--candidate-revision",
+        "--cwd",
+        "--json"
+      ],
+      "aliases": [],
+      "helpCommands": [
+        "buildchain architecture --help",
+        "buildchain architecture list --help",
+        "buildchain architecture qualify --help",
+        "buildchain architecture show --help",
+        "buildchain architecture validate --help"
+      ],
+      "purpose": "Inspect and qualify the Buildchain v4 capability and state-machine architecture contract.",
+      "capabilityGroup": "governance-versioning",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "owner": "buildchain-cli",
+      "maturity": "stable",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing command identity retained for CLI compatibility and discoverability."
+    },
     {
       "id": "audit",
       "source": "bin/buildchain.mjs",
@@ -3388,6 +3434,62 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing command identity retained for CLI compatibility and discoverability."
     },
+    {
+      "id": "release-tail",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain release-tail plan --declaration <json-or-path> [--output <path>]",
+      "paths": [
+        "release-tail",
+        "release-tail compat",
+        "release-tail init",
+        "release-tail plan",
+        "release-tail rehearse",
+        "release-tail status",
+        "release-tail verify"
+      ],
+      "syntaxes": [
+        "buildchain release-tail",
+        "buildchain release-tail <status|verify> [--state <path>] [--output <path>]",
+        "buildchain release-tail compat --hooks-json <json-or-path> [--output <path>]",
+        "buildchain release-tail init --declaration <json-or-path> [--state <path>]",
+        "buildchain release-tail plan --declaration <json-or-path> [--output <path>]",
+        "buildchain release-tail rehearse --capsule <path> --capsule-root <absolute-path> --mode <simulate|replay> --state <path> --evidence <path> [--environment-json <json-or-path>]"
+      ],
+      "options": [
+        "--capsule",
+        "--capsule-root",
+        "--declaration",
+        "--environment-json",
+        "--evidence",
+        "--hooks-json",
+        "--mode",
+        "--output",
+        "--state"
+      ],
+      "aliases": [],
+      "helpCommands": [
+        "buildchain release-tail --help",
+        "buildchain release-tail compat --help",
+        "buildchain release-tail init --help",
+        "buildchain release-tail plan --help",
+        "buildchain release-tail rehearse --help",
+        "buildchain release-tail status --help",
+        "buildchain release-tail verify --help"
+      ],
+      "purpose": "Plan, initialize, rehearse, resume, and verify one declarative provider-owned release-tail transaction.",
+      "capabilityGroup": "release-passport-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "owner": "buildchain-cli",
+      "maturity": "stable",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing command identity retained for CLI compatibility and discoverability."
+    },
     {
       "id": "release-transaction",
       "source": "bin/buildchain.mjs",

package/dist/site/controller-registry.json

@@ -1771,6 +1771,10 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "declarative-release-tail": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "dry-run": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1859,6 +1863,10 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
+        "publication-authority-workflow-path": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "publication-auto-admission": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1883,6 +1891,10 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
+        "publication-consumer-qualification-controller-sha": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "publication-control-plane-audit-json": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -2193,7 +2205,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:bb49305be1f2176c47920532d414954e1d058156abf3411ae66cc97ba526d186"
+      "digest": "sha256:83bc2f7d57ad3500e0b2983314aa5fdaa0dff1f78ef011af94cde760b86a010f"
     },
     {
       "schemaVersion": 1,
@@ -2386,5 +2398,5 @@
       "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
     }
   ],
-  "digest": "sha256:6c9eab44f162f2c142827c63bcd7c14cb92ba92e6021ffdc0bdf7baee7ffad8c"
+  "digest": "sha256:4610d5ecdd42984fef782af010ed6978f4a40438134b3d962698854978fd0095"
 }

package/dist/site/kfd-claims.json

@@ -21,13 +21,13 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "e37f94305762bde4ecad076297dedd212f015f12ffc5c0a524f1350969ad00d1",
+    "sha256": "5f7c953b2c903e24f69de55e50f33e431654c2e693acb30079be63880e6ebee2",
     "summary": {
-      "cliCommandCount": 112,
-      "workflowCount": 64,
-      "actionCount": 6,
-      "sitePageCount": 65,
-      "docCommandRefCount": 881,
+      "cliCommandCount": 114,
+      "workflowCount": 65,
+      "actionCount": 7,
+      "sitePageCount": 69,
+      "docCommandRefCount": 922,
       "failureCount": 0
     },
     "auditBoundary": {
@@ -246,13 +246,13 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "e37f94305762bde4ecad076297dedd212f015f12ffc5c0a524f1350969ad00d1",
+      "sha256": "5f7c953b2c903e24f69de55e50f33e431654c2e693acb30079be63880e6ebee2",
       "summary": {
-        "cliCommandCount": 112,
-        "workflowCount": 64,
-        "actionCount": 6,
-        "sitePageCount": 65,
-        "docCommandRefCount": 881,
+        "cliCommandCount": 114,
+        "workflowCount": 65,
+        "actionCount": 7,
+        "sitePageCount": 69,
+        "docCommandRefCount": 922,
         "failureCount": 0
       },
       "auditBoundary": {
@@ -332,6 +332,18 @@
           "public": true,
           "plane": "action"
         },
+        {
+          "id": "doc:actions/release-tail/README.md",
+          "name": "actions/release-tail/README.md",
+          "kind": "documentation",
+          "sourcePath": "actions/release-tail/README.md",
+          "evidencePath": "actions/release-tail/README.md",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "plane": "action"
+        },
         {
           "id": "doc:actions/report-buildchain-issue/README.md",
           "name": "actions/report-buildchain-issue/README.md",
@@ -632,6 +644,18 @@
           "public": true,
           "plane": "verify"
         },
+        {
+          "id": "doc:docs/publication-rehearsal.md",
+          "name": "Publication rehearsal",
+          "kind": "documentation",
+          "sourcePath": "docs/publication-rehearsal.md",
+          "evidencePath": "docs/publication-rehearsal.md",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "plane": "use"
+        },
         {
           "id": "doc:docs/publish-transaction.md",
           "name": "Publish transaction",
@@ -716,6 +740,30 @@
           "public": true,
           "plane": "use"
         },
+        {
+          "id": "doc:docs/release-tail-contract.md",
+          "name": "Declarative release-tail contract",
+          "kind": "documentation",
+          "sourcePath": "docs/release-tail-contract.md",
+          "evidencePath": "docs/release-tail-contract.md",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "plane": "verify"
+        },
+        {
+          "id": "doc:docs/release-tail-provider-plane.md",
+          "name": "Declarative release-tail provider plane",
+          "kind": "documentation",
+          "sourcePath": "docs/release-tail-provider-plane.md",
+          "evidencePath": "docs/release-tail-provider-plane.md",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "plane": "use"
+        },
         {
           "id": "doc:docs/reusable-build-surface.md",
           "name": "Reusable build surface",
@@ -1700,6 +1748,66 @@
           "public": true,
           "packageExport": "./release-activation-transaction"
         },
+        {
+          "id": "export:./release-tail-provider-plane",
+          "name": "@kungfu-tech/buildchain/release-tail-provider-plane",
+          "kind": "package-export",
+          "sourcePath": "packages/core/release-tail-provider-plane.js",
+          "evidencePath": "packages/core/release-tail-provider-plane.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./release-tail-provider-plane"
+        },
+        {
+          "id": "export:./release-tail-provider-adapters",
+          "name": "@kungfu-tech/buildchain/release-tail-provider-adapters",
+          "kind": "package-export",
+          "sourcePath": "packages/core/release-tail-provider-adapters.js",
+          "evidencePath": "packages/core/release-tail-provider-adapters.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./release-tail-provider-adapters"
+        },
+        {
+          "id": "export:./release-tail-compatibility",
+          "name": "@kungfu-tech/buildchain/release-tail-compatibility",
+          "kind": "package-export",
+          "sourcePath": "packages/core/release-tail-compatibility.js",
+          "evidencePath": "packages/core/release-tail-compatibility.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./release-tail-compatibility"
+        },
+        {
+          "id": "export:./publication-rehearsal-runtime",
+          "name": "@kungfu-tech/buildchain/publication-rehearsal-runtime",
+          "kind": "package-export",
+          "sourcePath": "packages/core/publication-rehearsal-runtime.js",
+          "evidencePath": "packages/core/publication-rehearsal-runtime.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./publication-rehearsal-runtime"
+        },
+        {
+          "id": "export:./publication-rehearsal-projection",
+          "name": "@kungfu-tech/buildchain/publication-rehearsal-projection",
+          "kind": "package-export",
+          "sourcePath": "packages/core/publication-rehearsal-projection.js",
+          "evidencePath": "packages/core/publication-rehearsal-projection.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./publication-rehearsal-projection"
+        },
         {
           "id": "export:./surface-manifest",
           "name": "@kungfu-tech/buildchain/surface-manifest",
@@ -1948,6 +2056,18 @@
         }
       ],
       "reverseEnumeratedSurfaces": [
+        {
+          "id": "cli:architecture",
+          "name": "buildchain architecture validate [--cwd <dir>] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
         {
           "id": "cli:audit",
           "name": "buildchain audit publication-control-plane --repository <owner/repo> --branch <protected-branch>",
@@ -3100,6 +3220,18 @@
           "public": true,
           "reverseAuditSource": "bin/buildchain.mjs"
         },
+        {
+          "id": "cli:release-tail",
+          "name": "buildchain release-tail plan --declaration <json-or-path> [--output <path>]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
         {
           "id": "cli:release-transaction",
           "name": "buildchain release <inspect|recover|finalize|abort> ...",
@@ -3597,7 +3729,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 107,
+          "inputCount": 110,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -3611,6 +3743,7 @@
             "buildchain-ref",
             "buildchain-repository",
             "channel",
+            "declarative-release-tail",
             "dry-run",
             "github-artifact-attestation-environment",
             "github-artifact-attestation-policy-json",
@@ -3633,12 +3766,14 @@
             "promotion-shell-sha",
             "promotion-target-ref",
             "publication-admission-json",
+            "publication-authority-workflow-path",
             "publication-auto-admission",
             "publication-auto-no-gate",
             "publication-commit-command",
             "publication-commit-evidence-path",
             "publication-consumer-predicate-id",
             "publication-consumer-qualification-command",
+            "publication-consumer-qualification-controller-sha",
             "publication-control-plane-audit-json",
             "publication-expected-json",
             "publication-gate-aggregate-json",
@@ -4861,7 +4996,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 99,
+          "inputCount": 101,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -4878,6 +5013,7 @@
             "buildchain-repository",
             "buildchain-stable-contract-lock-path",
             "channel",
+            "declarative-release-tail",
             "dry-run",
             "github-artifact-attestation-environment",
             "github-artifact-attestation-policy-json",
@@ -4895,6 +5031,7 @@
             "publication-commit-evidence-path",
             "publication-consumer-predicate-id",
             "publication-consumer-qualification-command",
+            "publication-consumer-qualification-controller-sha",
             "publication-control-plane-audit-json",
             "publication-expected-json",
             "publication-gate-aggregate-json",
@@ -5046,6 +5183,27 @@
           ],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:release-tail",
+          "name": "workflow:release-tail",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/release-tail.yml",
+          "evidencePath": ".github/workflows/release-tail.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 6,
+          "inputs": [
+            "buildchain-ref",
+            "capsule-contract",
+            "capsule-path",
+            "capsule-root",
+            "evidence-path",
+            "state-path"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:release-verify",
           "name": "workflow:release-verify",
@@ -5207,12 +5365,13 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 76,
+          "inputCount": 79,
           "inputs": [
             "allow-repository",
             "branch-protection-bypass-apps",
             "branch-protection-bypass-teams",
             "branch-protection-bypass-users",
+            "declarative-release-tail",
             "dry-run",
             "expected-publication-version",
             "generated-pull-request-token",
@@ -5222,6 +5381,7 @@
             "github-release-artifact-paths",
             "github-release-notes",
             "github-release-title",
+            "plan-before-target-advance",
             "promote-only-release-candidate",
             "publication-capability-json",
             "publication-gate-aggregate-json",
@@ -5274,6 +5434,7 @@
             "release-passport-platform-manifest-paths",
             "release-passport-product-name",
             "release-passport-promotion-routing-json",
+            "release-tail-state-path",
             "require-governance",
             "require-publication-qualification",
             "require-publish-source-lock",
@@ -5288,6 +5449,28 @@
           ],
           "reverseAuditSource": "actions/*/action.yml"
         },
+        {
+          "id": "action:release-tail",
+          "name": "action:release-tail",
+          "kind": "action",
+          "sourcePath": "actions/release-tail/action.yml",
+          "evidencePath": "actions/release-tail/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 7,
+          "inputs": [
+            "capsule",
+            "capsule-contract",
+            "capsule-root",
+            "evidence-path",
+            "github-token",
+            "http-token",
+            "state-path"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
         {
           "id": "action:report-buildchain-issue",
           "name": "action:report-buildchain-issue",
@@ -5437,6 +5620,18 @@
           "public": true,
           "reverseAuditSource": "dist/site/page-registry.json"
         },
+        {
+          "id": "site-page:action:release-tail",
+          "name": "site-page:action:release-tail",
+          "kind": "site-page",
+          "sourcePath": "dist/site/page-registry.json",
+          "evidencePath": "dist/site/page-registry.json",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "dist/site/page-registry.json"
+        },
         {
           "id": "site-page:action:report-buildchain-issue",
           "name": "site-page:action:report-buildchain-issue",
@@ -5977,6 +6172,18 @@
           "public": true,
           "reverseAuditSource": "dist/site/page-registry.json"
         },
+        {
+          "id": "site-page:manual:publication-rehearsal",
+          "name": "site-page:manual:publication-rehearsal",
+          "kind": "site-page",
+          "sourcePath": "dist/site/page-registry.json",
+          "evidencePath": "dist/site/page-registry.json",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "dist/site/page-registry.json"
+        },
         {
           "id": "site-page:manual:publish-transaction",
           "name": "site-page:manual:publish-transaction",
@@ -6073,6 +6280,30 @@
           "public": true,
           "reverseAuditSource": "dist/site/page-registry.json"
         },
+        {
+          "id": "site-page:manual:release-tail-contract",
+          "name": "site-page:manual:release-tail-contract",
+          "kind": "site-page",
+          "sourcePath": "dist/site/page-registry.json",
+          "evidencePath": "dist/site/page-registry.json",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "dist/site/page-registry.json"
+        },
+        {
+          "id": "site-page:manual:release-tail-provider-plane",
+          "name": "site-page:manual:release-tail-provider-plane",
+          "kind": "site-page",
+          "sourcePath": "dist/site/page-registry.json",
+          "evidencePath": "dist/site/page-registry.json",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "dist/site/page-registry.json"
+        },
         {
           "id": "site-page:manual:reusable-build-surface",
           "name": "site-page:manual:reusable-build-surface",
@@ -6352,6 +6583,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 401
+    "publicSurfaceCount": 418
   }
 }

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.6",
+    "version": "3.0.7-alpha.0",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {