@kungfu-tech/buildchain 3.0.9-alpha.7 → 3.0.9-alpha.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (43) hide show
  1. package/bin/buildchain.mjs +5 -1
  2. package/contracts/dev-delivery-authority-v2.schema.json +253 -0
  3. package/dist/site/agent-index.json +1 -0
  4. package/dist/site/artifact-schemas.json +2 -0
  5. package/dist/site/buildchain-contract.json +7 -7
  6. package/dist/site/buildchain-site.json +135 -19
  7. package/dist/site/capability-registry.json +2 -2
  8. package/dist/site/cli-registry.json +23 -0
  9. package/dist/site/kfd-claims.json +33 -8
  10. package/dist/site/kfd-upstream-aggregate.json +1 -1
  11. package/dist/site/manual-registry.json +4 -4
  12. package/dist/site/node-api-registry.json +907 -143
  13. package/dist/site/page-registry.json +127 -11
  14. package/dist/site/public-surface-audit.json +228 -7
  15. package/dist/site/publication-registry.json +4 -4
  16. package/dist/site/release-provenance.json +2 -0
  17. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +442 -0
  18. package/dist/site/site-manifest.json +8 -8
  19. package/dist/site/workflow-registry.json +8 -6
  20. package/docs/MAP.md +1 -0
  21. package/docs/cli-reference.md +121 -0
  22. package/docs/dev-delivery-qualification-landing-adr.md +137 -0
  23. package/docs/dev-delivery-warrant.md +106 -13
  24. package/docs/node-api-reference.md +51 -20
  25. package/docs/versioning.md +2 -0
  26. package/package.json +4 -2
  27. package/packages/core/buildchain-channel-identity.js +2 -3
  28. package/packages/core/dev-delivery-authority.js +996 -0
  29. package/packages/core/dev-delivery-native-proof.js +89 -4
  30. package/packages/core/dev-delivery-warrant-settlement.js +65 -22
  31. package/packages/core/dev-delivery-warrant.js +92 -44
  32. package/scripts/buildchain-cli-help.mjs +3 -0
  33. package/scripts/check-inventory.mjs +1 -1
  34. package/scripts/dev-delivery-authority.mjs +368 -0
  35. package/scripts/dev-delivery-native-run.mjs +52 -4
  36. package/scripts/dev-delivery-proof.mjs +10 -0
  37. package/scripts/dev-delivery-two-phase-resume.mjs +90 -0
  38. package/scripts/dev-delivery-two-phase.mjs +31 -52
  39. package/scripts/dev-delivery-warrant.mjs +9 -2
  40. package/scripts/generate-site-bundle.mjs +6 -3
  41. package/scripts/site-capability-metadata.mjs +13 -1
  42. package/scripts/workflow-call-contract.mjs +1 -1
  43. package/templates/native-dev-delivery.yml +17 -13
@@ -0,0 +1,442 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://buildchain.libkungfu.dev/schemas/dev-delivery-authority-v2.schema.json",
4
+ "title": "Buildchain Dev Delivery Authority State v2",
5
+ "description": "Opt-in durable state separating bounded qualification-only leases from one exclusive merge_group Landing Warrant.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": [
9
+ "schemaVersion",
10
+ "contract",
11
+ "authorityMode",
12
+ "repository",
13
+ "protectedBase",
14
+ "generation",
15
+ "qualificationCounter",
16
+ "landingCounter",
17
+ "policy",
18
+ "qualificationLeases",
19
+ "landingWarrant",
20
+ "candidates",
21
+ "migration",
22
+ "updatedAt",
23
+ "stateRoot"
24
+ ],
25
+ "properties": {
26
+ "schemaVersion": {
27
+ "const": 2
28
+ },
29
+ "contract": {
30
+ "const": "kungfu-buildchain-dev-delivery-authority"
31
+ },
32
+ "authorityMode": {
33
+ "const": "bounded-qualification-landing"
34
+ },
35
+ "repository": {
36
+ "type": "string",
37
+ "pattern": "^[^/\\s]+/[^/\\s]+$"
38
+ },
39
+ "protectedBase": {
40
+ "type": "string",
41
+ "pattern": "^dev/v[0-9]+/v[0-9]+\\.[0-9]+$"
42
+ },
43
+ "generation": {
44
+ "type": "integer",
45
+ "minimum": 0
46
+ },
47
+ "qualificationCounter": {
48
+ "type": "integer",
49
+ "minimum": 0
50
+ },
51
+ "landingCounter": {
52
+ "type": "integer",
53
+ "minimum": 0
54
+ },
55
+ "policy": {
56
+ "type": "object",
57
+ "additionalProperties": false,
58
+ "required": [
59
+ "maxQualificationLeases",
60
+ "qualificationLeaseSeconds",
61
+ "landingLeaseSeconds"
62
+ ],
63
+ "properties": {
64
+ "maxQualificationLeases": {
65
+ "type": "integer",
66
+ "minimum": 1
67
+ },
68
+ "qualificationLeaseSeconds": {
69
+ "type": "integer",
70
+ "minimum": 1
71
+ },
72
+ "landingLeaseSeconds": {
73
+ "type": "integer",
74
+ "minimum": 1
75
+ },
76
+ "maxLandingOvertakes": {
77
+ "type": "integer",
78
+ "minimum": 0
79
+ },
80
+ "maxQualificationAttempts": {
81
+ "type": "integer",
82
+ "minimum": 1
83
+ }
84
+ }
85
+ },
86
+ "qualificationLeases": {
87
+ "type": "array",
88
+ "items": {
89
+ "$ref": "#/$defs/qualificationLease"
90
+ }
91
+ },
92
+ "landingWarrant": {
93
+ "oneOf": [
94
+ {
95
+ "type": "null"
96
+ },
97
+ {
98
+ "$ref": "#/$defs/landingWarrant"
99
+ }
100
+ ]
101
+ },
102
+ "candidates": {
103
+ "type": "array",
104
+ "items": {
105
+ "$ref": "#/$defs/candidate"
106
+ }
107
+ },
108
+ "migration": {
109
+ "oneOf": [
110
+ {
111
+ "type": "null"
112
+ },
113
+ {
114
+ "$ref": "#/$defs/migration"
115
+ }
116
+ ]
117
+ },
118
+ "updatedAt": {
119
+ "type": "string",
120
+ "format": "date-time"
121
+ },
122
+ "stateRoot": {
123
+ "$ref": "#/$defs/root"
124
+ }
125
+ },
126
+ "$defs": {
127
+ "root": {
128
+ "type": "string",
129
+ "pattern": "^sha256:[0-9a-f]{64}$"
130
+ },
131
+ "sha": {
132
+ "type": "string",
133
+ "pattern": "^[0-9a-f]{40}$"
134
+ },
135
+ "qualificationLease": {
136
+ "type": "object",
137
+ "additionalProperties": false,
138
+ "required": [
139
+ "schema",
140
+ "authority",
141
+ "mergeGroupAdmission",
142
+ "candidateId",
143
+ "token",
144
+ "generation",
145
+ "issuedAt",
146
+ "expiresAt"
147
+ ],
148
+ "properties": {
149
+ "schema": {
150
+ "const": "kungfu.buildchain.dev-delivery-qualification-lease/v1"
151
+ },
152
+ "authority": {
153
+ "const": "qualification-only"
154
+ },
155
+ "mergeGroupAdmission": {
156
+ "const": false
157
+ },
158
+ "candidateId": {
159
+ "$ref": "#/$defs/root"
160
+ },
161
+ "token": {
162
+ "$ref": "#/$defs/root"
163
+ },
164
+ "generation": {
165
+ "type": "integer",
166
+ "minimum": 1
167
+ },
168
+ "issuedAt": {
169
+ "type": "string",
170
+ "format": "date-time"
171
+ },
172
+ "heartbeatAt": {
173
+ "type": "string",
174
+ "format": "date-time"
175
+ },
176
+ "expiresAt": {
177
+ "type": "string",
178
+ "format": "date-time"
179
+ }
180
+ }
181
+ },
182
+ "landingWarrant": {
183
+ "type": "object",
184
+ "additionalProperties": false,
185
+ "required": [
186
+ "schema",
187
+ "authority",
188
+ "mergeGroupAdmission",
189
+ "candidateId",
190
+ "token",
191
+ "generation",
192
+ "issuedAt",
193
+ "expiresAt"
194
+ ],
195
+ "properties": {
196
+ "schema": {
197
+ "const": "kungfu.buildchain.dev-delivery-landing-warrant/v1"
198
+ },
199
+ "authority": {
200
+ "const": "merge-group-admission"
201
+ },
202
+ "mergeGroupAdmission": {
203
+ "const": true
204
+ },
205
+ "candidateId": {
206
+ "$ref": "#/$defs/root"
207
+ },
208
+ "token": {
209
+ "$ref": "#/$defs/root"
210
+ },
211
+ "generation": {
212
+ "type": "integer",
213
+ "minimum": 1
214
+ },
215
+ "issuedAt": {
216
+ "type": "string",
217
+ "format": "date-time"
218
+ },
219
+ "heartbeatAt": {
220
+ "type": "string",
221
+ "format": "date-time"
222
+ },
223
+ "expiresAt": {
224
+ "type": "string",
225
+ "format": "date-time"
226
+ }
227
+ }
228
+ },
229
+ "qualification": {
230
+ "type": "object",
231
+ "additionalProperties": false,
232
+ "required": [
233
+ "evidenceRoot",
234
+ "qualifiedAt"
235
+ ],
236
+ "properties": {
237
+ "evidenceRoot": {
238
+ "$ref": "#/$defs/root"
239
+ },
240
+ "qualifiedAt": {
241
+ "type": "string",
242
+ "format": "date-time"
243
+ }
244
+ }
245
+ },
246
+ "terminal": {
247
+ "type": "object",
248
+ "additionalProperties": false,
249
+ "required": [
250
+ "outcome",
251
+ "evidenceRoot",
252
+ "reason",
253
+ "settledAt"
254
+ ],
255
+ "properties": {
256
+ "outcome": {
257
+ "enum": [
258
+ "merged",
259
+ "terminal-failure",
260
+ "dequeued",
261
+ "cancelled"
262
+ ]
263
+ },
264
+ "evidenceRoot": {
265
+ "$ref": "#/$defs/root"
266
+ },
267
+ "reason": {
268
+ "type": "string"
269
+ },
270
+ "settledAt": {
271
+ "type": "string",
272
+ "format": "date-time"
273
+ }
274
+ }
275
+ },
276
+ "migration": {
277
+ "type": "object",
278
+ "additionalProperties": false,
279
+ "required": [
280
+ "schema",
281
+ "legacyContract",
282
+ "legacyStateRoot",
283
+ "migratedAt"
284
+ ],
285
+ "properties": {
286
+ "schema": {
287
+ "const": "kungfu.buildchain.dev-delivery-authority-migration/v1"
288
+ },
289
+ "legacyContract": {
290
+ "const": "kungfu-buildchain-dev-delivery-warrant-queue"
291
+ },
292
+ "legacyStateRoot": {
293
+ "$ref": "#/$defs/root"
294
+ },
295
+ "migratedAt": {
296
+ "type": "string",
297
+ "format": "date-time"
298
+ }
299
+ }
300
+ },
301
+ "candidate": {
302
+ "type": "object",
303
+ "additionalProperties": false,
304
+ "required": [
305
+ "repository",
306
+ "protectedBase",
307
+ "pullRequestNumber",
308
+ "assignmentRoot",
309
+ "initiativeRoot",
310
+ "sourceIdentityRoot",
311
+ "deliveryClass",
312
+ "candidateId",
313
+ "sourceHead",
314
+ "sourcePatchRoot",
315
+ "sourceProofRoot",
316
+ "planRoot",
317
+ "closureRoot",
318
+ "dependencyRoot",
319
+ "toolchainRoot",
320
+ "enqueuedAt",
321
+ "updatedAt",
322
+ "status",
323
+ "qualification",
324
+ "terminal"
325
+ ],
326
+ "properties": {
327
+ "repository": {
328
+ "type": "string"
329
+ },
330
+ "protectedBase": {
331
+ "type": "string"
332
+ },
333
+ "pullRequestNumber": {
334
+ "type": "integer",
335
+ "minimum": 1
336
+ },
337
+ "assignmentRoot": {
338
+ "$ref": "#/$defs/root"
339
+ },
340
+ "initiativeRoot": {
341
+ "$ref": "#/$defs/root"
342
+ },
343
+ "sourceIdentityRoot": {
344
+ "$ref": "#/$defs/root"
345
+ },
346
+ "deliveryClass": {
347
+ "enum": [
348
+ "non-native-fast",
349
+ "native-proof-required",
350
+ "cross-platform",
351
+ "release"
352
+ ]
353
+ },
354
+ "identitySemantics": {
355
+ "const": "chained-attempt-v2"
356
+ },
357
+ "predecessorCandidateId": {
358
+ "$ref": "#/$defs/root"
359
+ },
360
+ "candidateId": {
361
+ "$ref": "#/$defs/root"
362
+ },
363
+ "sourceHead": {
364
+ "$ref": "#/$defs/sha"
365
+ },
366
+ "sourcePatchRoot": {
367
+ "$ref": "#/$defs/root"
368
+ },
369
+ "sourceProofRoot": {
370
+ "$ref": "#/$defs/root"
371
+ },
372
+ "planRoot": {
373
+ "$ref": "#/$defs/root"
374
+ },
375
+ "closureRoot": {
376
+ "$ref": "#/$defs/root"
377
+ },
378
+ "dependencyRoot": {
379
+ "$ref": "#/$defs/root"
380
+ },
381
+ "toolchainRoot": {
382
+ "$ref": "#/$defs/root"
383
+ },
384
+ "qualificationDomains": {
385
+ "type": "array",
386
+ "uniqueItems": true,
387
+ "items": {
388
+ "$ref": "#/$defs/root"
389
+ }
390
+ },
391
+ "qualificationAttempts": {
392
+ "type": "integer",
393
+ "minimum": 0
394
+ },
395
+ "landingOvertakes": {
396
+ "type": "integer",
397
+ "minimum": 0
398
+ },
399
+ "enqueuedAt": {
400
+ "type": "string",
401
+ "format": "date-time"
402
+ },
403
+ "updatedAt": {
404
+ "type": "string",
405
+ "format": "date-time"
406
+ },
407
+ "status": {
408
+ "enum": [
409
+ "queued",
410
+ "qualifying",
411
+ "qualified",
412
+ "landing",
413
+ "merged",
414
+ "terminal-failure",
415
+ "dequeued",
416
+ "cancelled"
417
+ ]
418
+ },
419
+ "qualification": {
420
+ "oneOf": [
421
+ {
422
+ "type": "null"
423
+ },
424
+ {
425
+ "$ref": "#/$defs/qualification"
426
+ }
427
+ ]
428
+ },
429
+ "terminal": {
430
+ "oneOf": [
431
+ {
432
+ "type": "null"
433
+ },
434
+ {
435
+ "$ref": "#/$defs/terminal"
436
+ }
437
+ ]
438
+ }
439
+ }
440
+ }
441
+ }
442
+ }
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-manifest",
4
- "generatedAt": "2026-08-12T01:33:49.000Z",
5
- "publishedAt": "2026-08-12T01:33:49.000Z",
4
+ "generatedAt": "2026-08-12T16:18:50.000Z",
5
+ "publishedAt": "2026-08-12T16:18:50.000Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "1080aeadc49281f991bde9a0b53dc399242702ff",
22
+ "sourceRevision": "5e0811cdf6385c0441b5ea41d57cdafc7ba11310",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "3.0.9-alpha.7",
40
+ "version": "3.0.9-alpha.9",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "entrypoint": "buildchain-site.json",
@@ -53,7 +53,7 @@
53
53
  "path": "docs/MAP.md",
54
54
  "plane": "use",
55
55
  "exists": true,
56
- "digest": "sha256:a1c408b13658f225113ede0ee4f4309cbae466178e8f248f4290a616ce39194c"
56
+ "digest": "sha256:8db720e4ee53e816aa6c0bb3b36dbe9382649dfb8fcd723d708ce12bcaf5015d"
57
57
  },
58
58
  {
59
59
  "id": "getting-started",
@@ -245,7 +245,7 @@
245
245
  "path": "docs/cli-reference.md",
246
246
  "plane": "use",
247
247
  "exists": true,
248
- "digest": "sha256:f77310bb6cbfca2aefbf25c02c5ee01a6c093548e5cc4d1db6b44e742e5d30d8"
248
+ "digest": "sha256:d6fd9d704376e47a281ce337f6c5d6346e117effe8851d43a9b370955ac07204"
249
249
  },
250
250
  {
251
251
  "id": "node-api-reference",
@@ -253,7 +253,7 @@
253
253
  "path": "docs/node-api-reference.md",
254
254
  "plane": "use",
255
255
  "exists": true,
256
- "digest": "sha256:37102c168f1eb23f2e9d5a86a4e2df366a755ef102626088232c8599d9cdf91e"
256
+ "digest": "sha256:a99695c87ba95ef44ef4c761399e26558659b879f23211adb729d265e6e24758"
257
257
  },
258
258
  {
259
259
  "id": "build-facts",
@@ -357,7 +357,7 @@
357
357
  "path": "docs/versioning.md",
358
358
  "plane": "why",
359
359
  "exists": true,
360
- "digest": "sha256:0b1485e9e87a5f185041746e6ce8068373b3a6483fa7d1123f60702de471849b"
360
+ "digest": "sha256:af1be0d4b9f110807534f1111e5003b2454908993183215badcf7a33b9f48461"
361
361
  },
362
362
  {
363
363
  "id": "web-surface-deployments",
@@ -428,9 +428,10 @@
428
428
  ],
429
429
  "inputCount": 37,
430
430
  "secrets": [
431
+ "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
431
432
  "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
432
433
  ],
433
- "secretCount": 1,
434
+ "secretCount": 2,
434
435
  "outputs": [
435
436
  "capability-artifact",
436
437
  "capability-digest",
@@ -1849,6 +1850,7 @@
1849
1850
  "dependency-root",
1850
1851
  "diagnostic-context",
1851
1852
  "dry-run",
1853
+ "environment-root",
1852
1854
  "expected-head-sha",
1853
1855
  "expected-pr-number",
1854
1856
  "handoff-workflow-id",
@@ -1875,7 +1877,7 @@
1875
1877
  "toolchain-root",
1876
1878
  "warrant-lease-seconds"
1877
1879
  ],
1878
- "inputCount": 39,
1880
+ "inputCount": 40,
1879
1881
  "secrets": [
1880
1882
  "github-token"
1881
1883
  ],
@@ -1967,7 +1969,7 @@
1967
1969
  "status": "preview",
1968
1970
  "owner": "buildchain-workflows",
1969
1971
  "maturity": "preview",
1970
- "introducedVersion": "3.0.9-alpha.7",
1972
+ "introducedVersion": "3.0.9-alpha.9",
1971
1973
  "compatibilityPromise": "preserved-through-the-v3-major-line",
1972
1974
  "deprecationReplacement": "",
1973
1975
  "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1988,7 +1990,7 @@
1988
1990
  "status": "preview",
1989
1991
  "owner": "buildchain-workflows",
1990
1992
  "maturity": "preview",
1991
- "introducedVersion": "3.0.9-alpha.7",
1993
+ "introducedVersion": "3.0.9-alpha.9",
1992
1994
  "compatibilityPromise": "preserved-through-the-v3-major-line",
1993
1995
  "deprecationReplacement": "",
1994
1996
  "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2009,7 +2011,7 @@
2009
2011
  "status": "preview",
2010
2012
  "owner": "buildchain-workflows",
2011
2013
  "maturity": "preview",
2012
- "introducedVersion": "3.0.9-alpha.7",
2014
+ "introducedVersion": "3.0.9-alpha.9",
2013
2015
  "compatibilityPromise": "preserved-through-the-v3-major-line",
2014
2016
  "deprecationReplacement": "",
2015
2017
  "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2059,7 +2061,7 @@
2059
2061
  "status": "preview",
2060
2062
  "owner": "buildchain-workflows",
2061
2063
  "maturity": "preview",
2062
- "introducedVersion": "3.0.9-alpha.7",
2064
+ "introducedVersion": "3.0.9-alpha.9",
2063
2065
  "compatibilityPromise": "preserved-through-the-v3-major-line",
2064
2066
  "deprecationReplacement": "",
2065
2067
  "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
package/docs/MAP.md CHANGED
@@ -107,6 +107,7 @@ replace them.
107
107
  | How do I install a standalone binary or npm package? | [`install.md`](install.md) | use | stable |
108
108
  | How do I run or look up the `buildchain` CLI? | [`cli-reference.md`](cli-reference.md) + [`cli.md`](cli.md) | use | stable |
109
109
  | How do I import Buildchain toolkit APIs from JavaScript build code? | [`node-api-reference.md`](node-api-reference.md) + [`../packages/core/README.md`](../packages/core/README.md) | use | stable |
110
+ | How are bounded Qualification Leases separated from exclusive merge-group Landing authority? | [`dev-delivery-qualification-landing-adr.md`](dev-delivery-qualification-landing-adr.md) + [`dev-delivery-warrant.md`](dev-delivery-warrant.md) | govern | accepted |
110
111
  | How do I initialize a new repository? | [`getting-started.md`](getting-started.md) + [`lifecycle-protocol.md`](lifecycle-protocol.md) | use | stable |
111
112
  | Why does Buildchain use branch-driven release governance? | [`release-governance.md`](release-governance.md) | why | stable |
112
113
  | What freezes the v4 dependency direction, writer authority, complexity budgets, exceptions, and N-1 qualification? | [`../architecture/v4-architecture-constitution.md`](../architecture/v4-architecture-constitution.md) | why/verify | preview |