@kungfu-tech/buildchain 3.0.9-alpha.1 → 3.0.9-alpha.11

package/scripts/dev-pr-delivery-warrant.mjs

@@ -1,4 +1,5 @@
 import fs from "node:fs";
+import { defaultDevDeliveryStateRef, GitHubDevDeliveryStore } from "./dev-delivery-warrant.mjs";
 
 const ROOT_PATTERN = /^sha256:[0-9a-f]{64}$/;
 const SHA_PATTERN = /^[0-9a-f]{40}$/;
@@ -34,6 +35,11 @@ function exactActiveReadback(result) {
   const warrant = result.observation.activeWarrant;
   const candidate = result.observation.activeCandidate;
   requireMatch(warrant?.schema === "kungfu.buildchain.dev-delivery-warrant/v1", "delivery-warrant-missing");
+  requireMatch((warrant.phase || "qualified") === "qualified", "delivery-warrant-not-qualified");
+  if (warrant.phase === "qualified") {
+    requireMatch(ROOT_PATTERN.test(String(warrant.nativeProofRoot || "")), "delivery-warrant-native-proof-missing");
+    requireMatch(ROOT_PATTERN.test(String(warrant.nativeProofReuseRoot || "")), "delivery-warrant-native-reuse-missing");
+  }
   requireMatch(candidate?.candidateId === warrant.candidateId, "delivery-warrant-candidate-readback-missing");
   requireMatch(!result.warrant || JSON.stringify(result.warrant) === JSON.stringify(warrant), "delivery-warrant-readback-mismatch");
   return { warrant, candidate };
@@ -117,19 +123,18 @@ export function readDeliveryWarrantResult(options, pullRequest) {
 }
 
 export async function readCurrentDeliveryQueueState(client, repository, targetBranch) {
-  if (typeof client.getDevDeliveryQueueState === "function") {
-    return client.getDevDeliveryQueueState(targetBranch);
-  }
-  const stateRef = `buildchain/dev-delivery-warrant/${targetBranch.replaceAll("/", "-")}`;
-  const query = new URLSearchParams({ ref: stateRef });
-  const { data } = await client.request(
-    "GET",
-    `/repos/${repository.owner}/${repository.repo}/contents/queue.json?${query}`,
-  );
-  if (data?.type !== "file" || data?.encoding !== "base64" || !data?.content) {
-    mismatch("delivery-warrant-current-readback-invalid");
-  }
-  return JSON.parse(Buffer.from(String(data.content).replace(/\s+/g, ""), "base64").toString("utf8"));
+  if (typeof client.getDevDeliveryQueueState === "function") return client.getDevDeliveryQueueState(targetBranch);
+  const store = new GitHubDevDeliveryStore({
+    repository: `${repository.owner}/${repository.repo}`,
+    token: client.token,
+    apiUrl: client.apiUrl,
+    fetchImpl: client.fetch,
+  });
+  const { queue } = await store.read({
+    stateRef: defaultDevDeliveryStateRef(targetBranch),
+    protectedBase: targetBranch,
+  });
+  return queue;
 }
 
 export async function verifyCurrentDeliveryWarrant(client, options, pullRequest, warrant) {
@@ -147,7 +152,7 @@ export async function verifyCurrentDeliveryWarrant(client, options, pullRequest,
   requireMatch(Number(active?.generation) === Number(warrant.generation), "delivery-warrant-current-generation-mismatch");
   requireMatch(Number(active?.pullRequestNumber) === Number(pullRequest.number), "delivery-warrant-current-pr-mismatch");
   requireMatch(String(active?.sourceHead || "").toLowerCase() === options.expectedHeadSha, "delivery-warrant-current-head-mismatch");
-  requireMatch(["selected", "proving", "waiting", "blocked"].includes(candidate?.status), "delivery-warrant-current-candidate-not-selected");
+  requireMatch(["selected", "proving", "waiting", "blocked", "qualified"].includes(candidate?.status), "delivery-warrant-current-candidate-not-selected");
   requireMatch(candidate?.sourceHead === active.sourceHead, "delivery-warrant-current-candidate-head-mismatch");
 }
 

package/scripts/generate-buildchain-kfd-witnesses.mjs

@@ -85,7 +85,7 @@ export async function generateBuildchainKfdAdopterRelease({ cwd = process.cwd(),
   const packageArtifactRoot = installedKfdPackageArtifactRoot(), gates = [];
   for (const standard of ["kfd-4", "kfd-5", "kfd-7"]) gates.push(await generateProductGate(root, outDir, standard, sourceSha, checkedAt));
   const sourceRoot = kfdProductGateDigest({ repository: REPOSITORY, sourceSha, files: [...new Set(Object.values(evidenceSources))].sort().map((sourcePath) => ({ path: sourcePath, sha256: fileDigest(path.join(root, sourcePath)) })) });
-  let manifest = initAdopterManifest({ manifestId: "buildchain-v3-full-cut", adopterId: REPOSITORY, artifactKind: "git-commit", artifactCoordinate: `${REPOSITORY}@${sourceSha}`, artifactRoot: sourceRoot, scope: "Buildchain v3 release and protected delivery authority", packageArtifactRoot, verifiedAt: checkedAt, maxAgeSeconds: 86400 });
+  let manifest = initAdopterManifest({ manifestId: "buildchain-v3-full-cut", adopterId: REPOSITORY, artifactKind: "git-commit", artifactCoordinate: `${REPOSITORY}@${sourceSha}`, artifactRoot: sourceRoot, scope: "Buildchain v3 release and protected delivery authority", packageArtifactRoot, verifiedAt: checkedAt, maxAgeSeconds: 86400, packageRoot: kfdRoot });
   const gateById = new Map(gates.map((gate) => [gate.standard.toUpperCase(), gate]));
   for (const id of ["KFD-1", "KFD-2", "KFD-3", "KFD-4", "KFD-5", "KFD-7"]) {
     const row = manifest.decisions.find((entry) => entry.id === id);
@@ -95,7 +95,7 @@ export async function generateBuildchainKfdAdopterRelease({ cwd = process.cwd(),
   }
   const kfd6 = manifest.decisions.find((entry) => entry.id === "KFD-6");
   kfd6.state = "unsupported"; kfd6.usage = "unused"; kfd6.gaps = ["Buildchain does not claim KFD-6 support in this cut."];
-  manifest = addAdopterWitness(manifest, { decisionId: "KFD-10", profileId: "kfd-warrant-evidence", witnessCoordinate: `git+https://github.com/${REPOSITORY}@${sourceSha}#${evidenceSources["KFD-10"]}`, witnessRoot: fileDigest(path.join(root, evidenceSources["KFD-10"])), packageArtifactRoot, verifiedAt: checkedAt, maxAgeSeconds: 86400 });
+  manifest = addAdopterWitness(manifest, { decisionId: "KFD-10", profileId: "kfd-warrant-evidence", witnessCoordinate: `git+https://github.com/${REPOSITORY}@${sourceSha}#${evidenceSources["KFD-10"]}`, witnessRoot: fileDigest(path.join(root, evidenceSources["KFD-10"])), packageArtifactRoot, verifiedAt: checkedAt, maxAgeSeconds: 86400, packageRoot: kfdRoot });
   const manifestPath = writeJson(outDir, "kfd-adopter-manifest.json", manifest).filePath, manifestGate = createKfdAdopterManifestGate({ manifest, packageArtifactRoot, gateResults: gates, authorityPath: "kfd-adopter-manifest.json", expectedSourceSha: sourceSha, checkedAt });
   if (!validateKfdAdopterManifestGate(manifestGate, { expectedSourceSha: sourceSha, checkedAt }).valid) throw new Error(`generated adopter manifest gate failed: ${JSON.stringify(manifestGate.issues)}`);
   const gatePath = writeJson(outDir, "kfd-adopter-manifest-gate.json", manifestGate).filePath, support = createKfdLegacySupportMatrixProjection({ manifest, manifestGate });

package/scripts/generate-channel-build-workflow.mjs

@@ -46,6 +46,10 @@ function routerInputs(inputBlock) {
 
 function routerOutputs(outputBlock) {
   const forwarded = outputBlock
+    .replace(
+      /^        value: \$\{\{ jobs\.[^.]+\.outputs\.([a-z0-9-]+) \|\| jobs\.[^.]+\.outputs\.\1 \}\}$/gm,
+      "        value: ${{ jobs.alpha.outputs.$1 || jobs.stable.outputs.$1 }}",
+    )
     .replace(/^        value: \$\{\{ jobs\.[^.]+\.outputs\.([^ }]+) \}\}$/gm, "        value: ${{ jobs.alpha.outputs.$1 || jobs.stable.outputs.$1 }}")
     .replaceAll("build-lifecycle", "build-channel-router")
     .replace("value: ${{ jobs.alpha.outputs.controller-plan-artifact || jobs.stable.outputs.controller-plan-artifact }}", "value: ${{ jobs.controller-plan.outputs.controller-plan-artifact }}")

package/scripts/generate-next-development-guidance.mjs

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+
+import fs from "node:fs";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+
+import { nextDevelopmentManual } from "../packages/core/next-development-projection.js";
+
+export const NEXT_DEVELOPMENT_MANUAL_PATH =
+  "docs/next-development-transition.md";
+
+export function generateNextDevelopmentGuidance({
+  cwd = process.cwd(),
+  check = false,
+} = {}) {
+  const target = path.resolve(cwd, NEXT_DEVELOPMENT_MANUAL_PATH);
+  const expected = nextDevelopmentManual();
+  const current = fs.existsSync(target) ? fs.readFileSync(target, "utf8") : "";
+  if (check) {
+    if (current !== expected) {
+      throw new Error(
+        `${NEXT_DEVELOPMENT_MANUAL_PATH} drifted from its contract source`,
+      );
+    }
+    return { ok: true, changed: false, path: NEXT_DEVELOPMENT_MANUAL_PATH };
+  }
+  fs.mkdirSync(path.dirname(target), { recursive: true });
+  if (current !== expected) fs.writeFileSync(target, expected);
+  return {
+    ok: true,
+    changed: current !== expected,
+    path: NEXT_DEVELOPMENT_MANUAL_PATH,
+  };
+}
+
+if (
+  process.argv[1] &&
+  import.meta.url === pathToFileURL(process.argv[1]).href
+) {
+  try {
+    const result = generateNextDevelopmentGuidance({
+      check: process.argv.includes("--check"),
+    });
+    process.stdout.write(`${JSON.stringify(result)}\n`);
+  } catch (error) {
+    process.stderr.write(`next-development guidance: ${error.message}\n`);
+    process.exitCode = 1;
+  }
+}

package/scripts/generate-site-bundle.mjs

@@ -368,6 +368,7 @@ const manualMetaById = new Map(Object.entries({
   "release-activation-transaction": { capabilityGroup: "release-passport-trust", audience: ["release-operator", "agent"], maturity: "preview", order: 125 },
   "release-candidate": { capabilityGroup: "reusable-build", audience: ["release-operator", "consumer"], maturity: "stable", order: 130 },
   "release-train": { capabilityGroup: "governance-versioning", audience: ["release-operator", "consumer", "agent"], maturity: "preview", order: 132 },
+  "next-development-transition": { capabilityGroup: "governance-versioning", audience: ["release-operator", "consumer", "agent"], maturity: "preview", order: 133 },
   "stable-candidate-patrol": { capabilityGroup: "governance-versioning", audience: ["release-operator", "consumer"], maturity: "preview", order: 135 },
   "dev-qualification-patrol": { capabilityGroup: "governance-versioning", audience: ["release-operator", "consumer", "agent"], maturity: "preview", order: 136 },
   "dev-alpha-candidate-patrol": { capabilityGroup: "governance-versioning", audience: ["release-operator", "consumer", "agent"], maturity: "preview", order: 137 },
@@ -733,6 +734,7 @@ function buildSiteBundle() {
       "docs/reusable-build-surface.md",
       "docs/release-candidate.md",
       "docs/release-train.md",
+      "docs/next-development-transition.md",
       "docs/stable-candidate-patrol.md",
       "docs/dev-qualification-patrol.md",
       "docs/dev-alpha-candidate-patrol.md",
@@ -929,7 +931,7 @@ function buildSiteBundle() {
       "schemas/release-tail-capabilities-v1.schema.json",
       "schemas/release-tail-provider-bindings-v1.schema.json",
       "schemas/kfd-agent-hub-adoption.schema.json",
-      "schemas/kfd-product-gate-input-v1.schema.json",
+      "schemas/kfd-product-gate-input-v1.schema.json", "schemas/dev-delivery-authority-v2.schema.json",
       "kfd-support.json",
       "artifact-evidence.json",
       "product-mechanism.json",
@@ -966,7 +968,7 @@ function buildSiteBundle() {
       "schemas/release-tail-capabilities-v1.schema.json",
       "schemas/release-tail-provider-bindings-v1.schema.json",
       "schemas/kfd-agent-hub-adoption.schema.json",
-      "schemas/kfd-product-gate-input-v1.schema.json",
+      "schemas/kfd-product-gate-input-v1.schema.json", "schemas/dev-delivery-authority-v2.schema.json",
       "buildchain-contract.json",
       "kfd-claims.json",
       "product-mechanism.json",
@@ -1099,7 +1101,7 @@ function buildSiteBundle() {
       "schemas/release-tail-capabilities-v1.schema.json",
       "schemas/release-tail-provider-bindings-v1.schema.json",
       "schemas/kfd-agent-hub-adoption.schema.json",
-      "schemas/kfd-product-gate-input-v1.schema.json",
+      "schemas/kfd-product-gate-input-v1.schema.json", "schemas/dev-delivery-authority-v2.schema.json",
       "buildchain-contract.json",
       "kfd-upstream-aggregate.json",
       "kfd-claims.json",
@@ -1283,6 +1285,9 @@ function buildSiteBundle() {
     ),
     "schemas/kfd-agent-hub-adoption.schema.json": KFD_AGENT_HUB_ADOPTION_SCHEMA,
     "schemas/kfd-product-gate-input-v1.schema.json": KFD_PRODUCT_GATE_INPUT_SCHEMA,
+    "schemas/dev-delivery-authority-v2.schema.json": readJson(
+      "contracts/dev-delivery-authority-v2.schema.json",
+    ),
     "badge-endpoint-registry.json": badgeEndpointRegistry,
     "publication-registry.json": publicationRegistry,
     "buildchain-contract.json": createBuildchainContractWorld({ root, controllerRegistry }),

package/scripts/init-repo.mjs

@@ -3,21 +3,35 @@ import fs from "node:fs";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 import { BUILDCHAIN_CONFIG_PATH } from "../packages/core/buildchain-layout.js";
-import { detectPackageManager, assertPackageManager } from "../packages/core/package-manager.js";
+import {
+  detectPackageManager,
+  assertPackageManager,
+} from "../packages/core/package-manager.js";
 import {
   PUBLICATION_REHEARSAL_WORKFLOW_PATH,
   appendPublicationRehearsalToml,
   mergePublicationRehearsalAgentInstructions,
   publicationRehearsalWorkflow,
 } from "../packages/core/publication-rehearsal-projection.js";
-
-const BUILDCHAIN_WORKFLOW_REF = "kungfu-systems/buildchain/.github/workflows/.build.yml@v3";
-const DEFAULT_PUBLICATION_LATEX_IMAGE = "ghcr.io/kungfu-systems/build-images/latex-pdf-builder";
-const DEFAULT_PUBLICATION_LATEX_DIGEST = "sha256:c20f3809e96836c1c78e97c76939d12f1de3fed0ea9b7c40c43332ec2ea480f8";
-const DEFAULT_PUBLICATION_LATEX_COMMAND = "latexmk -pdf -outdir=_build paper/main.tex";
+import {
+  appendNextDevelopmentToml,
+  mergeNextDevelopmentAgentInstructions,
+  nextDevelopmentWorkflowHeader,
+} from "../packages/core/next-development-projection.js";
+
+const BUILDCHAIN_WORKFLOW_REF =
+  "kungfu-systems/buildchain/.github/workflows/.build.yml@v3";
+const DEFAULT_PUBLICATION_LATEX_IMAGE =
+  "ghcr.io/kungfu-systems/build-images/latex-pdf-builder";
+const DEFAULT_PUBLICATION_LATEX_DIGEST =
+  "sha256:c20f3809e96836c1c78e97c76939d12f1de3fed0ea9b7c40c43332ec2ea480f8";
+const DEFAULT_PUBLICATION_LATEX_COMMAND =
+  "latexmk -pdf -outdir=_build paper/main.tex";
 
 function posixPath(value) {
-  return String(value || "").split(path.sep).join("/");
+  return String(value || "")
+    .split(path.sep)
+    .join("/");
 }
 
 function repoName(cwd) {
@@ -282,34 +296,42 @@ command = "make check"
 }
 
 function infraContractDesiredJson(cwd) {
-  return `${JSON.stringify({
-    service: repoName(cwd),
-    environment: "staging",
-    resources: [
-      {
-        kind: "static-site",
-        name: repoName(cwd),
-        desiredState: {
-          hostname: "staging.example.com",
-          accessControl: "managed-network",
-          owner: "platform",
+  return `${JSON.stringify(
+    {
+      service: repoName(cwd),
+      environment: "staging",
+      resources: [
+        {
+          kind: "static-site",
+          name: repoName(cwd),
+          desiredState: {
+            hostname: "staging.example.com",
+            accessControl: "managed-network",
+            owner: "platform",
+          },
         },
-      },
-    ],
-  }, null, 2)}\n`;
+      ],
+    },
+    null,
+    2,
+  )}\n`;
 }
 
 function infraContractOutputsJson(cwd) {
-  return `${JSON.stringify({
-    service: repoName(cwd),
-    environment: "staging",
-    observedMode: "manual-observed",
-    outputs: {
-      hostname: "staging.example.com",
-      distributionId: "observed-distribution-id",
-      bucket: "observed-bucket-name",
+  return `${JSON.stringify(
+    {
+      service: repoName(cwd),
+      environment: "staging",
+      observedMode: "manual-observed",
+      outputs: {
+        hostname: "staging.example.com",
+        distributionId: "observed-distribution-id",
+        bucket: "observed-bucket-name",
+      },
     },
-  }, null, 2)}\n`;
+    null,
+    2,
+  )}\n`;
 }
 
 function workflowArtifactPaths(type) {
@@ -333,7 +355,7 @@ function workflowArtifactPaths(type) {
 }
 
 function publicationWorkflowYaml() {
-  return `name: Build
+  return `${nextDevelopmentWorkflowHeader()}name: Build
 
 on:
   workflow_dispatch:
@@ -365,7 +387,7 @@ jobs:
 }
 
 function workflowYaml({ type, runnerPreset, artifactName }) {
-  return `name: Build
+  return `${nextDevelopmentWorkflowHeader()}name: Build
 
 on:
   workflow_dispatch:
@@ -398,9 +420,17 @@ jobs:
 `;
 }
 
+function devDeliveryWorkflowYaml() {
+  return fs.readFileSync(
+    new URL("../templates/native-dev-delivery.yml", import.meta.url),
+    "utf8",
+  );
+}
 function writeIfAllowed(filePath, content, { force }) {
   if (fs.existsSync(filePath) && !force) {
-    throw new Error(`${posixPath(filePath)} already exists; pass --force to overwrite`);
+    throw new Error(
+      `${posixPath(filePath)} already exists; pass --force to overwrite`,
+    );
   }
   fs.mkdirSync(path.dirname(filePath), { recursive: true });
   fs.writeFileSync(filePath, content);
@@ -408,7 +438,9 @@ function writeIfAllowed(filePath, content, { force }) {
 }
 
 function writeManagedAgentEntry(filePath, current) {
-  const content = mergePublicationRehearsalAgentInstructions(current);
+  const content = mergeNextDevelopmentAgentInstructions(
+    mergePublicationRehearsalAgentInstructions(current),
+  );
   fs.mkdirSync(path.dirname(filePath), { recursive: true });
   fs.writeFileSync(filePath, content);
   return filePath;
@@ -424,27 +456,33 @@ export function initBuildchainRepo({
 } = {}) {
   const resolvedCwd = path.resolve(cwd);
   const manager = detectOrDefaultPackageManager(resolvedCwd, packageManager);
-  const toml = appendPublicationRehearsalToml((() => {
-    if (type === "package") {
-      return packageToml(resolvedCwd, manager);
-    }
-    if (type === "native") {
-      return nativeToml(resolvedCwd);
-    }
-    if (type === "web-surface") {
-      return webSurfaceToml(resolvedCwd);
-    }
-    if (type === "infra-contract") {
-      return infraContractToml(resolvedCwd);
-    }
-    if (type === "publication-artifact") {
-      return publicationArtifactToml(resolvedCwd);
-    }
-    if (type === "anchored-package") {
-      return anchoredPackageToml(resolvedCwd, manager);
-    }
-    throw new Error("init --type must be one of package, native, web-surface, infra-contract, publication-artifact, or anchored-package");
-  })());
+  const toml = appendNextDevelopmentToml(
+    appendPublicationRehearsalToml(
+      (() => {
+        if (type === "package") {
+          return packageToml(resolvedCwd, manager);
+        }
+        if (type === "native") {
+          return nativeToml(resolvedCwd);
+        }
+        if (type === "web-surface") {
+          return webSurfaceToml(resolvedCwd);
+        }
+        if (type === "infra-contract") {
+          return infraContractToml(resolvedCwd);
+        }
+        if (type === "publication-artifact") {
+          return publicationArtifactToml(resolvedCwd);
+        }
+        if (type === "anchored-package") {
+          return anchoredPackageToml(resolvedCwd, manager);
+        }
+        throw new Error(
+          "init --type must be one of package, native, web-surface, infra-contract, publication-artifact, or anchored-package",
+        );
+      })(),
+    ),
+  );
 
   const agentsPath = path.join(resolvedCwd, "AGENTS.md");
   const currentAgents = fs.existsSync(agentsPath)
@@ -452,7 +490,9 @@ export function initBuildchainRepo({
     : "";
 
   const written = [
-    writeIfAllowed(path.join(resolvedCwd, BUILDCHAIN_CONFIG_PATH), toml, { force }),
+    writeIfAllowed(path.join(resolvedCwd, BUILDCHAIN_CONFIG_PATH), toml, {
+      force,
+    }),
     writeIfAllowed(
       path.join(resolvedCwd, ".github", "workflows", "build.yml"),
       type === "publication-artifact"
@@ -472,14 +512,41 @@ export function initBuildchainRepo({
     writeManagedAgentEntry(agentsPath, currentAgents),
   ];
 
-  if (type === "anchored-package" && !fs.existsSync(path.join(resolvedCwd, "release.json"))) {
-    written.push(writeIfAllowed(path.join(resolvedCwd, "release.json"), "{\n  \"upstream\": \"\",\n  \"version\": \"0.0.0\"\n}\n", { force }));
+  if (type === "native") {
+    written.push(
+      writeIfAllowed(
+        path.join(resolvedCwd, ".github", "workflows", "dev-delivery.yml"),
+        devDeliveryWorkflowYaml(),
+        { force },
+      ),
+    );
+  }
+
+  if (
+    type === "anchored-package" &&
+    !fs.existsSync(path.join(resolvedCwd, "release.json"))
+  ) {
+    written.push(
+      writeIfAllowed(
+        path.join(resolvedCwd, "release.json"),
+        '{\n  "upstream": "",\n  "version": "0.0.0"\n}\n',
+        { force },
+      ),
+    );
   }
 
   if (type === "infra-contract") {
     written.push(
-      writeIfAllowed(path.join(resolvedCwd, "infra", "desired.json"), infraContractDesiredJson(resolvedCwd), { force }),
-      writeIfAllowed(path.join(resolvedCwd, "infra", "outputs.json"), infraContractOutputsJson(resolvedCwd), { force }),
+      writeIfAllowed(
+        path.join(resolvedCwd, "infra", "desired.json"),
+        infraContractDesiredJson(resolvedCwd),
+        { force },
+      ),
+      writeIfAllowed(
+        path.join(resolvedCwd, "infra", "outputs.json"),
+        infraContractOutputsJson(resolvedCwd),
+        { force },
+      ),
     );
   }
 
@@ -489,7 +556,9 @@ export function initBuildchainRepo({
     cwd: resolvedCwd,
     packageManager: manager,
     workflowRef: BUILDCHAIN_WORKFLOW_REF,
-    written: written.map((filePath) => posixPath(path.relative(resolvedCwd, filePath))),
+    written: written.map((filePath) =>
+      posixPath(path.relative(resolvedCwd, filePath)),
+    ),
   };
 }
 
@@ -501,7 +570,11 @@ function readArg(name, fallback = "") {
   return process.argv[index + 1] || "";
 }
 
-if (!process.env.BUILDCHAIN_EMBEDDED_ENTRYPOINT && process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+if (
+  !process.env.BUILDCHAIN_EMBEDDED_ENTRYPOINT &&
+  process.argv[1] &&
+  import.meta.url === pathToFileURL(process.argv[1]).href
+) {
   try {
     const result = initBuildchainRepo({
       cwd: readArg("cwd", process.cwd()),