@kungfu-tech/buildchain 3.0.8 → 3.0.9-alpha.1

package/actions/promote-buildchain-ref/README.md

@@ -403,13 +403,14 @@ product-owned `release-passport-kfd-3-artifact-verify-command` such as
 `kungfu agent verify --json`. Buildchain compares declared shipped public
 surfaces with artifact-exposed public surfaces and writes the result under the
 KFD-provided `kfd-3` passport section.
-Set `release-passport-kfd-support-matrix-json` to the product-owned KFD-1..13
-support matrix and `release-passport-kfd-product-gate-jsons` to the
-newline-separated KFD-4, KFD-5, and KFD-7 gate results. Buildchain verifies
-their exact source, freshness, KFD package revision, matrix barriers, and
-gate/matrix agreement, then writes the immutable `kfd-support.json` sibling and
-embeds the same projection in `buildchain.release.json`. This projection cannot
-self-qualify or widen candidate, unsupported, draft, or non-shipped states.
+Set `release-passport-kfd-adopter-manifest-json` to the standard full-cut
+adopter manifest and `release-passport-kfd-product-gate-jsons` to the
+newline-separated KFD-4, KFD-5, and KFD-7 gate results. Buildchain binds the
+exact published KFD package, registry, verifier set, source, decision witness,
+and product-gate roots into both Passport and artifact evidence. The optional
+`release-passport-kfd-support-matrix-json` is comparison-only; it must exactly
+match the derived `kfd-support.json` compatibility projection and cannot widen
+candidate, unsupported, draft, or non-shipped states.
 Set `release-passport-invariant-passport-jsons` to one or more product-owned
 invariant Passport paths, or set `release-passport-invariant-passport-command`
 to a command that emits one canonical Passport JSON document. Buildchain does

package/bin/buildchain.mjs

@@ -80,11 +80,14 @@ import {
   registerKfd3Surfaces,
 } from "../packages/core/kfd3-surface-register.js";
 import {
-  createKfdSupportProjection,
   evaluateKfdProductGate,
   validateKfdProductGateResult,
-  validateKfdSupportProjection,
 } from "../packages/core/kfd-product-gates.js";
+import {
+  createKfdLegacySupportMatrixProjection,
+  validateKfdAdopterManifestGate,
+  validateKfdLegacySupportMatrixProjection,
+} from "../packages/core/kfd-adopter-manifest.js";
 import { createBuildchainLayoutDiscovery } from "../packages/core/buildchain-layout.js";
 import { createPortableDevCachePlan, createPortableDevCacheReceipt } from "../packages/core/portable-dev-cache.js";
 import {
@@ -727,56 +730,54 @@ function runKfdSupportCli(args = []) {
   const [action = "", ...rest] = args;
   const cwd = path.resolve(readFlag(rest, "cwd", process.cwd()));
   const json = readBooleanFlag(rest, "json");
-  const checkedAt = readFlag(rest, "checked-at", "") || new Date().toISOString();
+  const requestedCheckedAt = readFlag(rest, "checked-at", "");
   const expectedSourceSha = readFlag(rest, "expected-source-sha", "");
   if (action === "project") {
-    const matrixInput = readFlag(rest, "matrix-json", "");
-    if (!matrixInput) {
-      throw new Error("buildchain kfd support project requires --matrix-json <file-or-json>");
-    }
-    const matrix = readJsonInput(matrixInput, { cwd, label: "KFD support matrix" });
-    const matrixPath = path.resolve(cwd, matrixInput);
-    const matrixRoot = fs.existsSync(matrixPath)
-      ? `sha256:${crypto.createHash("sha256").update(fs.readFileSync(matrixPath)).digest("hex")}`
-      : "";
-    const gateResults = readRepeatedJsonInputs(rest, "gate-json", {
-      cwd,
-      label: "KFD product gate result",
-    });
-    const result = createKfdSupportProjection({
-      matrix,
-      matrixRoot,
-      gateResults,
+    const manifestInput = readFlag(rest, "manifest-json", "");
+    const gateInput = readFlag(rest, "manifest-gate-json", "");
+    if (!manifestInput || !gateInput) {
+      throw new Error("buildchain kfd support project requires --manifest-json and --manifest-gate-json");
+    }
+    const manifest = readJsonInput(manifestInput, { cwd, label: "KFD adopter manifest" });
+    const manifestGate = readJsonInput(gateInput, { cwd, label: "KFD adopter manifest gate" });
+    const gateValidation = validateKfdAdopterManifestGate(manifestGate, {
       expectedSourceSha,
-      checkedAt,
+      checkedAt: requestedCheckedAt || manifestGate.checkedAt,
     });
+    if (!gateValidation.valid) throw new Error(`KFD adopter manifest gate is invalid: ${JSON.stringify(gateValidation.issues)}`);
+    const result = createKfdLegacySupportMatrixProjection({ manifest, manifestGate });
     const output = readFlag(rest, "output", "");
     if (output) writeJsonFile(path.resolve(cwd, output), result);
     if (json || !output) {
       printJson(result);
     } else {
-      process.stdout.write(`KFD support projection: ${result.status} -> ${output}\n`);
-      for (const entry of result.issues) {
-        process.stdout.write(`- ${entry.code}: ${entry.path}: ${entry.message}\n`);
-      }
+      process.stdout.write(`KFD support projection: passed -> ${output}\n`);
     }
-    if (result.status !== "passed") process.exitCode = 1;
     return;
   }
   if (action === "verify") {
     const projectionInput = readFlag(rest, "projection-json", "");
-    if (!projectionInput) {
-      throw new Error("buildchain kfd support verify requires --projection-json <file-or-json>");
-    }
-    const result = validateKfdSupportProjection(
+    const manifestInput = readFlag(rest, "manifest-json", "");
+    const gateInput = readFlag(rest, "manifest-gate-json", "");
+    if (!projectionInput || !manifestInput || !gateInput) {
+      throw new Error("buildchain kfd support verify requires --projection-json, --manifest-json, and --manifest-gate-json");
+    }
+    const manifest = readJsonInput(manifestInput, { cwd, label: "KFD adopter manifest" });
+    const manifestGate = readJsonInput(gateInput, { cwd, label: "KFD adopter manifest gate" });
+    const gateValidation = validateKfdAdopterManifestGate(manifestGate, {
+      expectedSourceSha,
+      checkedAt: requestedCheckedAt || manifestGate.checkedAt,
+    });
+    const result = validateKfdLegacySupportMatrixProjection(
       readJsonInput(projectionInput, { cwd, label: "KFD support projection" }),
-      { expectedSourceSha, checkedAt },
+      { manifest, manifestGate },
     );
+    const issues = [...gateValidation.issues, ...result.issues];
     const report = {
       schemaVersion: 1,
       contract: "kungfu-buildchain-kfd-support-projection-verification",
-      ok: result.valid,
-      issues: result.issues,
+      ok: issues.length === 0,
+      issues,
     };
     if (json) printJson(report);
     else process.stdout.write(`KFD support projection verify: ${report.ok ? "passed" : "failed"}\n`);

package/bin/internal/trust-release-release-handlers.mjs

@@ -242,6 +242,11 @@ async function handleCollectCommand({ args, runScript, packageVersion }) {
       "kfd-3-artifact-verify-cmd",
       "",
     ),
+    kfdAdopterManifestJson: readFlag(
+      collectArgs,
+      "kfd-adopter-manifest-json",
+      "",
+    ),
     kfdSupportMatrixJson: readFlag(collectArgs, "kfd-support-matrix-json", ""),
     kfdProductGateJsons: readRepeatedFlag(collectArgs, "kfd-product-gate-json"),
     invariantPassportJsons: readRepeatedFlag(

package/contracts/fixtures/kfd-adopter-release-v1/kfd-4-perspective.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": 1,
+  "contract": "kfd-4-observer-perspective",
+  "standard": "kfd-4",
+  "id": "buildchain-release-maintainer-view",
+  "observer": { "id": "buildchain-release-maintainer", "kind": "human" },
+  "acceptedFacts": [
+    { "sourceId": "kungfu-systems/buildchain@{{SOURCE_SHA}}", "sourceKind": "repository" }
+  ],
+  "projectionPolicy": {
+    "policyVersion": "1",
+    "causalDominance": true,
+    "tieBreaker": "source-coordinate"
+  },
+  "verification": { "result": "pass" }
+}

package/contracts/fixtures/kfd-adopter-release-v1/kfd-4-replay.json

@@ -0,0 +1,57 @@
+{
+  "schemaVersion": 1,
+  "contract": "kfd-4-perspective-replay",
+  "standard": "kfd-4",
+  "replayId": "buildchain-release-product-contrast",
+  "mode": "contrastive",
+  "sourceViews": [
+    {
+      "id": "maintainer",
+      "kind": "observer-view",
+      "coordinate": "git://kungfu-systems/buildchain@{{SOURCE_SHA}}",
+      "observer": "buildchain-release-maintainer",
+      "perspective": "release-integrity",
+      "acceptedFactCut": "git://kungfu-systems/buildchain@{{SOURCE_SHA}}",
+      "naturalObjects": ["release"],
+      "consequences": ["published artifact"],
+      "knownGaps": []
+    },
+    {
+      "id": "consumer",
+      "kind": "observer-view",
+      "coordinate": "npm://@kungfu-tech/buildchain@{{SOURCE_SHA}}",
+      "observer": "buildchain-release-consumer",
+      "perspective": "artifact-consumption",
+      "acceptedFactCut": "artifact://published-package",
+      "naturalObjects": ["installed package"],
+      "consequences": ["local build execution"],
+      "knownGaps": ["consumer runtime state"]
+    }
+  ],
+  "replayObserver": {
+    "id": "buildchain",
+    "kind": "service",
+    "purpose": "retain source and artifact fact boundaries"
+  },
+  "reconstruction": {
+    "policyVersion": "1",
+    "sharedContext": "same source-bound release",
+    "preservedElements": ["observer", "accepted-fact-cut", "evidence-boundary"],
+    "declaredLoss": ["consumer runtime state"],
+    "degradedState": "none"
+  },
+  "contrast": {
+    "dimensions": ["evidence-boundary"],
+    "mismatches": [
+      {
+        "sourceViewIds": ["maintainer", "consumer"],
+        "observation": "source and installed artifact evidence have different custody",
+        "primitiveSignal": "inconclusive"
+      }
+    ]
+  },
+  "verification": {
+    "result": "pass",
+    "evidence": ["evidence/projection-fsck.json"]
+  }
+}

package/contracts/release-cut-v1.schema.json

@@ -49,6 +49,7 @@
           "properties": {
             "cause": {
               "enum": [
+                "release-blocker-repair",
                 "incompatible-semantics",
                 "alpha-base-incompatibility",
                 "invalid-authority",

package/contracts/release-train-transition-v1.schema.json

@@ -75,6 +75,7 @@
     },
     "supersessionCause": {
       "enum": [
+        "release-blocker-repair",
         "incompatible-semantics",
         "alpha-base-incompatibility",
         "invalid-authority",

package/dist/site/agent-index.json

@@ -22,7 +22,6 @@
     "schemas/release-tail-provider-bindings-v1.schema.json",
     "schemas/kfd-agent-hub-adoption.schema.json",
     "schemas/kfd-product-gate-input-v1.schema.json",
-    "schemas/kfd-support-projection-v1.schema.json",
     "buildchain-contract.json",
     "kfd-upstream-aggregate.json",
     "kfd-claims.json",

package/dist/site/artifact-schemas.json

@@ -10,7 +10,6 @@
     "schemas/release-tail-provider-bindings-v1.schema.json",
     "schemas/kfd-agent-hub-adoption.schema.json",
     "schemas/kfd-product-gate-input-v1.schema.json",
-    "schemas/kfd-support-projection-v1.schema.json",
     "kfd-support.json",
     "artifact-evidence.json",
     "product-mechanism.json",
@@ -48,7 +47,6 @@
     "schemas/release-tail-provider-bindings-v1.schema.json",
     "schemas/kfd-agent-hub-adoption.schema.json",
     "schemas/kfd-product-gate-input-v1.schema.json",
-    "schemas/kfd-support-projection-v1.schema.json",
     "buildchain-contract.json",
     "kfd-claims.json",
     "product-mechanism.json",

package/dist/site/badge-endpoint-registry.json

@@ -1138,7 +1138,7 @@
     {
       "id": "kfd-8",
       "label": "KFD-8",
-      "messageTemplate": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss {state}",
+      "messageTemplate": "KFD-8 {state}",
       "linkRole": "repository-release-passport",
       "states": [
         {
@@ -1148,7 +1148,7 @@
           "payload": {
             "schemaVersion": 1,
             "label": "KFD-8",
-            "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss passed",
+            "message": "KFD-8 passed",
             "color": "2ea44f",
             "logoPolicy": {
               "contract": "kungfu-buildchain-badge-logo-policy",
@@ -1167,7 +1167,7 @@
           "payload": {
             "schemaVersion": 1,
             "label": "KFD-8",
-            "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss aligned",
+            "message": "KFD-8 aligned",
             "color": "0969da",
             "logoPolicy": {
               "contract": "kungfu-buildchain-badge-logo-policy",
@@ -1186,7 +1186,7 @@
           "payload": {
             "schemaVersion": 1,
             "label": "KFD-8",
-            "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss declared",
+            "message": "KFD-8 declared",
             "color": "6e7781",
             "logoPolicy": {
               "contract": "kungfu-buildchain-badge-logo-policy",
@@ -1205,7 +1205,7 @@
           "payload": {
             "schemaVersion": 1,
             "label": "KFD-8",
-            "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss planned",
+            "message": "KFD-8 planned",
             "color": "bf8700",
             "logoPolicy": {
               "contract": "kungfu-buildchain-badge-logo-policy",
@@ -1224,7 +1224,7 @@
           "payload": {
             "schemaVersion": 1,
             "label": "KFD-8",
-            "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss draft",
+            "message": "KFD-8 draft",
             "color": "8250df",
             "logoPolicy": {
               "contract": "kungfu-buildchain-badge-logo-policy",
@@ -1243,7 +1243,7 @@
           "payload": {
             "schemaVersion": 1,
             "label": "KFD-8",
-            "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss downgraded",
+            "message": "KFD-8 downgraded",
             "color": "bf8700",
             "logoPolicy": {
               "contract": "kungfu-buildchain-badge-logo-policy",
@@ -1262,7 +1262,7 @@
           "payload": {
             "schemaVersion": 1,
             "label": "KFD-8",
-            "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss failed",
+            "message": "KFD-8 failed",
             "color": "cf222e",
             "logoPolicy": {
               "contract": "kungfu-buildchain-badge-logo-policy",
@@ -1281,7 +1281,7 @@
           "payload": {
             "schemaVersion": 1,
             "label": "KFD-8",
-            "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss missing",
+            "message": "KFD-8 missing",
             "color": "6e7781",
             "logoPolicy": {
               "contract": "kungfu-buildchain-badge-logo-policy",

package/dist/site/badges/v1/kfd-8/aligned.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "label": "KFD-8",
-  "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss aligned",
+  "message": "KFD-8 aligned",
   "color": "0969da",
   "logoPolicy": {
     "contract": "kungfu-buildchain-badge-logo-policy",

package/dist/site/badges/v1/kfd-8/declared.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "label": "KFD-8",
-  "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss declared",
+  "message": "KFD-8 declared",
   "color": "6e7781",
   "logoPolicy": {
     "contract": "kungfu-buildchain-badge-logo-policy",

package/dist/site/badges/v1/kfd-8/downgraded.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "label": "KFD-8",
-  "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss downgraded",
+  "message": "KFD-8 downgraded",
   "color": "bf8700",
   "logoPolicy": {
     "contract": "kungfu-buildchain-badge-logo-policy",

package/dist/site/badges/v1/kfd-8/draft.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "label": "KFD-8",
-  "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss draft",
+  "message": "KFD-8 draft",
   "color": "8250df",
   "logoPolicy": {
     "contract": "kungfu-buildchain-badge-logo-policy",

package/dist/site/badges/v1/kfd-8/failed.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "label": "KFD-8",
-  "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss failed",
+  "message": "KFD-8 failed",
   "color": "cf222e",
   "logoPolicy": {
     "contract": "kungfu-buildchain-badge-logo-policy",

package/dist/site/badges/v1/kfd-8/missing.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "label": "KFD-8",
-  "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss missing",
+  "message": "KFD-8 missing",
   "color": "6e7781",
   "logoPolicy": {
     "contract": "kungfu-buildchain-badge-logo-policy",

package/dist/site/badges/v1/kfd-8/passed.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "label": "KFD-8",
-  "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss passed",
+  "message": "KFD-8 passed",
   "color": "2ea44f",
   "logoPolicy": {
     "contract": "kungfu-buildchain-badge-logo-policy",

package/dist/site/badges/v1/kfd-8/planned.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "label": "KFD-8",
-  "message": "independently addressable perspective coordinate bound to a perspective holder, declared vantage or decision purpose, admitted Fact cut, typed source authority, freshness conditions, omissions, conflicts, unknowns, and declared transformation loss planned",
+  "message": "KFD-8 planned",
   "color": "bf8700",
   "logoPolicy": {
     "contract": "kungfu-buildchain-badge-logo-policy",