@kungfu-tech/buildchain 3.0.9-alpha.9 → 4.0.0-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (262) hide show
  1. package/AGENTS.md +39 -0
  2. package/README.md +17 -13
  3. package/actions/promote-buildchain-ref/README.md +0 -10
  4. package/actions/release-tail/README.md +6 -10
  5. package/architecture/internal-capabilities.json +502 -0
  6. package/architecture/maintainability-baseline.json +59 -0
  7. package/architecture/maintainability-policy.json +1384 -0
  8. package/architecture/release-tail-contract-inventory.json +587 -0
  9. package/architecture/v3-core-mechanism-inventory.json +1043 -0
  10. package/architecture/v3-core-mechanism-inventory.md +67 -0
  11. package/architecture/v4-adopter-delivery-parity.json +47 -0
  12. package/architecture/v4-architecture-constitution.md +210 -0
  13. package/architecture/v4-bootstrap-authority.json +56 -0
  14. package/architecture/v4-canonical-contract-fixtures.json +105 -0
  15. package/architecture/v4-capability-state-machine-manifest.json +480 -0
  16. package/architecture/v4-capability-state-machine-manifest.schema.json +202 -0
  17. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.json +830 -0
  18. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.md +223 -0
  19. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.schema.json +318 -0
  20. package/architecture/v4-delivery-warrant-shadow-fixtures.json +227 -0
  21. package/architecture/v4-delivery-warrant-shadow-fixtures.schema.json +67 -0
  22. package/architecture/v4-exception-ledger.json +5 -0
  23. package/architecture/v4-exception-ledger.schema.json +56 -0
  24. package/architecture/v4-partial-mutation-recovery-qualification.json +65 -0
  25. package/architecture/v4-platform-stage-checkpoints.json +97 -0
  26. package/architecture/v4-provider-operation-journal-contract.json +113 -0
  27. package/architecture/v4-release-activation-shadow-domain.json +61 -0
  28. package/architecture/v4-release-train-parity.json +68 -0
  29. package/architecture/v4-rust-libnode-bridge-evaluation.json +107 -0
  30. package/architecture/v4-rust-libnode-bridge-spike.md +85 -0
  31. package/architecture/v4-stable-publication-fence.json +66 -0
  32. package/architecture/v4-stage-capsule-contract.json +90 -0
  33. package/architecture/v4-stage-capsule-qualification.json +99 -0
  34. package/architecture/v4-stage-capsule-resume-planner.json +52 -0
  35. package/architecture/v4-stage-capsule-store-contract.json +72 -0
  36. package/bin/buildchain.mjs +15 -10
  37. package/contracts/auditable-demo-scenario-v1.schema.json +1 -1
  38. package/contracts/buildchain-v2-residuals-v1.json +2 -2
  39. package/contracts/fixtures/v4-delivery-warrant-trace-v1/golden.json +158 -0
  40. package/contracts/fixtures/v4-delivery-warrant-trace-v1/property.json +380 -0
  41. package/contracts/fixtures/v4-delivery-warrant-trace-v1/replay.json +163 -0
  42. package/contracts/fixtures/v4-partial-mutation-recovery-v1/shared.json +155 -0
  43. package/contracts/fixtures/v4-provider-operation-journal-v1/shared.json +457 -0
  44. package/contracts/fixtures/v4-provider-readback-idempotency-v1/shared.json +682 -0
  45. package/contracts/fixtures/v4-release-activation-shadow-v1/shared.json +53 -0
  46. package/contracts/fixtures/v4-stable-publication-fence-v1/shared.json +56 -0
  47. package/contracts/fixtures/v4-stage-capsule-resume-v1/late-platform-failure.json +176 -0
  48. package/contracts/fixtures/v4-stage-capsule-store-v1/shared.json +132 -0
  49. package/contracts/fixtures/v4-stage-capsule-v1/shared.json +111 -0
  50. package/contracts/v4-canonical-contracts-v1.schema.json +182 -0
  51. package/contracts/v4-delivery-warrant-semantic-diff-report-v1.schema.json +284 -0
  52. package/contracts/v4-delivery-warrant-trace-v1.schema.json +215 -0
  53. package/contracts/v4-host-contract-v1.schema.json +135 -0
  54. package/contracts/v4-partial-mutation-recovery-v1.schema.json +168 -0
  55. package/contracts/v4-provider-operation-journal-v1.schema.json +381 -0
  56. package/contracts/v4-release-activation-shadow-v1.schema.json +186 -0
  57. package/contracts/v4-stable-publication-fence-v1.schema.json +125 -0
  58. package/contracts/v4-stage-capsule-resume-v1.schema.json +225 -0
  59. package/contracts/v4-stage-capsule-store-v1.schema.json +154 -0
  60. package/contracts/v4-stage-capsule-v1.schema.json +178 -0
  61. package/crates/buildchain-v4-bridge/Cargo.lock +213 -0
  62. package/crates/buildchain-v4-bridge/Cargo.toml +12 -0
  63. package/crates/buildchain-v4-bridge/src/main.rs +495 -0
  64. package/dist/site/agent-index.json +0 -4
  65. package/dist/site/artifact-schemas.json +0 -8
  66. package/dist/site/buildchain-contract.json +103 -397
  67. package/dist/site/buildchain-site.json +302 -386
  68. package/dist/site/capability-registry.json +9 -11
  69. package/dist/site/cli-registry.json +8 -53
  70. package/dist/site/controller-registry.json +48 -8
  71. package/dist/site/kfd-claims.json +129 -167
  72. package/dist/site/kfd-upstream-aggregate.json +9 -9
  73. package/dist/site/manual-registry.json +18 -49
  74. package/dist/site/node-api-registry.json +4345 -7345
  75. package/dist/site/page-registry.json +278 -346
  76. package/dist/site/public-surface-audit.json +85 -404
  77. package/dist/site/publication-authority-registry.json +11 -1
  78. package/dist/site/publication-registry.json +4 -4
  79. package/dist/site/release-provenance.json +3 -9
  80. package/dist/site/schemas/kfd-support-projection-v1.schema.json +106 -0
  81. package/dist/site/site-manifest.json +22 -38
  82. package/dist/site/workflow-registry.json +78 -35
  83. package/docs/MAP.md +8 -5
  84. package/docs/auditable-demo.md +2 -2
  85. package/docs/aws-us-elastic-runner-burst-plane.md +7 -59
  86. package/docs/cli-reference.md +15 -213
  87. package/docs/cli.md +14 -14
  88. package/docs/dev-alpha-candidate-patrol.md +3 -11
  89. package/docs/dev-delivery-warrant.md +29 -194
  90. package/docs/engineering-housekeeper.md +12 -4
  91. package/docs/getting-started.md +1 -1
  92. package/docs/install.md +5 -5
  93. package/docs/kfd-support.md +2 -7
  94. package/docs/lifecycle-protocol.md +2 -4
  95. package/docs/node-api-reference.md +414 -554
  96. package/docs/release-flow.md +31 -31
  97. package/docs/release-governance.md +16 -28
  98. package/docs/release-passport.md +2 -15
  99. package/docs/release-tail-contract.md +13 -6
  100. package/docs/release-tail-provider-plane.md +13 -19
  101. package/docs/release-train.md +4 -4
  102. package/docs/reusable-build-surface.md +14 -27
  103. package/docs/site-bundle-contract.md +1 -5
  104. package/docs/stable-candidate-patrol.md +7 -7
  105. package/docs/v4-canonical-contracts.md +92 -0
  106. package/docs/v4-delivery-warrant-read-candidate.md +73 -0
  107. package/docs/v4-delivery-warrant-semantic-diff.md +75 -0
  108. package/docs/v4-production-release.md +63 -0
  109. package/docs/v4-stage-capsule.md +193 -0
  110. package/docs/versioning.md +3 -5
  111. package/package.json +19 -19
  112. package/packages/core/adopter-delivery-gate.js +576 -0
  113. package/packages/core/adopter-delivery-json.js +66 -0
  114. package/packages/core/artifact-signing.js +0 -61
  115. package/packages/core/artifact-verification-envelope.js +5 -5
  116. package/packages/core/build-facts.js +12 -4
  117. package/packages/core/buildchain-agent-manuals.js +0 -2
  118. package/packages/core/buildchain-channel-identity.js +3 -2
  119. package/packages/core/buildchain-config.js +4 -69
  120. package/packages/core/buildchain-contract.js +232 -46
  121. package/packages/core/buildchain-kfd-claims.js +1 -1
  122. package/packages/core/channel-candidate.js +0 -8
  123. package/packages/core/channel-promotion-baseline.js +0 -52
  124. package/packages/core/controller-evidence.js +3 -4
  125. package/packages/core/dev-alpha-candidate-selection.js +2 -10
  126. package/packages/core/dev-delivery-warrant-cancellation.js +0 -1
  127. package/packages/core/dev-delivery-warrant-settlement.js +20 -67
  128. package/packages/core/dev-delivery-warrant.js +50 -138
  129. package/packages/core/diagnostics.js +3 -8
  130. package/packages/core/github-governance-authority.js +3 -1
  131. package/packages/core/kfd-adopter-category-driver.js +167 -0
  132. package/packages/core/kfd-adopter-manifest.js +47 -46
  133. package/packages/core/kfd-gate.js +15 -45
  134. package/packages/core/paper-agent-entry.js +7 -16
  135. package/packages/core/paper-fleet.js +2 -2
  136. package/packages/core/paper-repository.js +2 -3
  137. package/packages/core/paper-scaffold-content.js +2 -23
  138. package/packages/core/paper.js +11 -43
  139. package/packages/core/publication-reproducibility.js +4 -4
  140. package/packages/core/release-line-bootstrap.js +21 -8
  141. package/packages/core/release-passport-contract.js +5 -5
  142. package/packages/core/release-passport.js +20 -131
  143. package/packages/core/self-dogfood-version.js +48 -35
  144. package/packages/core/spawn-command.js +232 -8
  145. package/packages/core/v4-adopter-delivery-parity.js +219 -0
  146. package/packages/core/v4-canonical-contracts.js +284 -0
  147. package/packages/core/v4-delivery-warrant-fixture-runner.js +371 -0
  148. package/packages/core/v4-delivery-warrant-read-candidate.js +279 -0
  149. package/packages/core/v4-delivery-warrant-semantic-diff-gate.js +352 -0
  150. package/packages/core/v4-delivery-warrant-shadow-adapter.js +447 -0
  151. package/packages/core/v4-partial-mutation-recovery-qualification.js +395 -0
  152. package/packages/core/v4-platform-stage-checkpoints.js +471 -0
  153. package/packages/core/v4-provider-operation-journal.js +531 -0
  154. package/packages/core/v4-provider-readback-idempotency.js +394 -0
  155. package/packages/core/v4-release-activation-shadow.js +519 -0
  156. package/packages/core/v4-stable-publication-fence.js +357 -0
  157. package/packages/core/v4-stage-capsule-local-store.js +426 -0
  158. package/packages/core/v4-stage-capsule-qualification-campaign.js +512 -0
  159. package/packages/core/v4-stage-capsule-qualification.js +456 -0
  160. package/packages/core/v4-stage-capsule-resume-planner.js +397 -0
  161. package/packages/core/v4-stage-capsule-store.js +401 -0
  162. package/packages/core/v4-stage-capsule.js +319 -0
  163. package/scripts/assemble-self-publication-admission.mjs +1 -1
  164. package/scripts/audit-publication-control-plane.mjs +5 -5
  165. package/scripts/auditable-demo-bundle-verification.mjs +3 -2
  166. package/scripts/auditable-demo-platform.mjs +2 -2
  167. package/scripts/auditable-demo-renditions.mjs +1 -1
  168. package/scripts/auditable-demo.mjs +2 -2
  169. package/scripts/aws-macos-jit-controller-core.mjs +13 -346
  170. package/scripts/aws-macos-jit-controller-runtime.mjs +2 -210
  171. package/scripts/aws-macos-jit-controller.mjs +37 -275
  172. package/scripts/aws-macos-jit-core.mjs +3 -41
  173. package/scripts/aws-macos-jit.mjs +0 -12
  174. package/scripts/aws-windows-jit-campaign.mjs +2 -2
  175. package/scripts/aws-windows-jit-controller-core.mjs +1 -1
  176. package/scripts/aws-windows-jit-controller.mjs +3 -3
  177. package/scripts/build-contract-core.mjs +3 -8
  178. package/scripts/build-standalone-binary.mjs +3 -14
  179. package/scripts/buildchain-channel-router.mjs +4 -0
  180. package/scripts/buildchain-cli-help.mjs +7 -16
  181. package/scripts/buildchain-contract-lock.mjs +0 -6
  182. package/scripts/check-action-bundles.mjs +3 -4
  183. package/scripts/check-internal-architecture.mjs +7 -6
  184. package/scripts/check-inventory.mjs +30 -25
  185. package/scripts/check-v4-public-dogfood-contract.mjs +270 -0
  186. package/scripts/create-release-bundle.mjs +8 -4
  187. package/scripts/dev-alpha-candidate-patrol.mjs +1 -22
  188. package/scripts/dev-delivery-proof.mjs +2 -64
  189. package/scripts/dev-delivery-warrant.mjs +61 -86
  190. package/scripts/dev-pr-auto-merge.mjs +4 -30
  191. package/scripts/dev-pr-delivery-warrant.mjs +0 -55
  192. package/scripts/dispatch-artifact-signing-authority.mjs +7 -4
  193. package/scripts/generate-buildchain-kfd-witnesses.mjs +94 -88
  194. package/scripts/generate-channel-build-workflow.mjs +54 -24
  195. package/scripts/generate-channel-promotion-workflow.mjs +15 -6
  196. package/scripts/generate-site-bundle.mjs +8 -27
  197. package/scripts/git-fetch-process-tree.mjs +34 -1
  198. package/scripts/init-repo.mjs +64 -159
  199. package/scripts/inspect-artifact-signing-requests.mjs +0 -6
  200. package/scripts/locked-source-checkout.mjs +3 -4
  201. package/scripts/maintainability-metrics.mjs +8 -2
  202. package/scripts/npm-publish-dry-run.mjs +2 -2
  203. package/scripts/npm-publish-transaction.mjs +2 -2
  204. package/scripts/publication-commit-evidence.mjs +23 -69
  205. package/scripts/release-candidate-resolver.mjs +11 -17
  206. package/scripts/release-tail.mjs +3 -49
  207. package/scripts/resume-from-candidate-run.mjs +9 -123
  208. package/scripts/run-lifecycle-core.mjs +12 -13
  209. package/scripts/seal-artifact-signing-requests.mjs +17 -21
  210. package/scripts/site-capability-metadata.mjs +3 -20
  211. package/scripts/stable-candidate-qualification.mjs +10 -10
  212. package/scripts/v4-architecture.mjs +12 -2
  213. package/scripts/v4-bridge-bootstrap.mjs +141 -0
  214. package/scripts/v4-bridge-evidence.mjs +141 -0
  215. package/scripts/v4-host-adapter.mjs +182 -0
  216. package/scripts/v4-platform-stage-checkpoint-rehearsal.mjs +207 -0
  217. package/scripts/v4-stage-capsule-qualification.mjs +528 -0
  218. package/scripts/v4-stage-capsule-resume-rehearsal.mjs +57 -0
  219. package/scripts/v4-warrant-shadow-plan.mjs +601 -0
  220. package/scripts/verify-golden-path.mjs +5 -5
  221. package/scripts/web-surface-cloudfront-rewrite.mjs +15 -15
  222. package/scripts/web-surface-core.mjs +2 -8
  223. package/scripts/workflow-call-contract.mjs +5 -184
  224. package/contracts/dev-delivery-authority-v2.schema.json +0 -253
  225. package/contracts/fixtures/kfd-adopter-release-v1/kfd-4-perspective.json +0 -16
  226. package/contracts/fixtures/kfd-adopter-release-v1/kfd-4-replay.json +0 -57
  227. package/contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json +0 -47
  228. package/contracts/fixtures/next-development-transition-v1/semver-auto-planned.json +0 -47
  229. package/contracts/fixtures/next-development-transition-v1/version-model-cases.json +0 -40
  230. package/contracts/next-development-request-v1.schema.json +0 -66
  231. package/contracts/next-development-transition-v1.schema.json +0 -292
  232. package/contracts/publication-rehearsal-capsule-v1.schema.json +0 -173
  233. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +0 -442
  234. package/dist/site/schemas/publication-rehearsal-capsule-v1.schema.json +0 -269
  235. package/dist/site/schemas/release-tail-capabilities-v1.schema.json +0 -353
  236. package/dist/site/schemas/release-tail-provider-bindings-v1.schema.json +0 -94
  237. package/docs/dev-delivery-qualification-landing-adr.md +0 -137
  238. package/docs/next-development-transition.md +0 -119
  239. package/docs/publication-rehearsal.md +0 -94
  240. package/packages/core/buildchain-compatibility-proof.js +0 -631
  241. package/packages/core/dev-delivery-authority.js +0 -996
  242. package/packages/core/dev-delivery-native-proof.js +0 -418
  243. package/packages/core/dev-delivery-warrant-shadow.js +0 -502
  244. package/packages/core/next-development-candidate-reservation.js +0 -186
  245. package/packages/core/next-development-controller.js +0 -726
  246. package/packages/core/next-development-projection.js +0 -288
  247. package/packages/core/next-development-transition.js +0 -738
  248. package/packages/core/publication-rehearsal-projection.js +0 -173
  249. package/packages/core/publication-rehearsal-runtime.js +0 -921
  250. package/scripts/aws-macos-jit-instance-rehydrate.mjs +0 -260
  251. package/scripts/aws-macos-jit-source-rebind.mjs +0 -724
  252. package/scripts/dev-delivery-authority.mjs +0 -368
  253. package/scripts/dev-delivery-native-run.mjs +0 -235
  254. package/scripts/dev-delivery-two-phase-resume.mjs +0 -90
  255. package/scripts/dev-delivery-two-phase.mjs +0 -577
  256. package/scripts/generate-next-development-guidance.mjs +0 -49
  257. package/scripts/materialize-self-release-candidate-version.mjs +0 -137
  258. package/scripts/next-development-self-dogfood-harness.mjs +0 -409
  259. package/scripts/next-development-self-dogfood.mjs +0 -532
  260. package/scripts/next-development-transition.mjs +0 -47
  261. package/scripts/release-candidate-tail-reseal.mjs +0 -426
  262. package/templates/native-dev-delivery.yml +0 -86
@@ -0,0 +1,186 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://buildchain.libkungfu.dev/schema/v4-release-activation-shadow-v1.schema.json",
4
+ "title": "Buildchain v4 release activation shadow request",
5
+ "description": "The sole closed schema authority for qualified release activation planning and deterministic resume projection. It grants no provider or production write authority.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": [
9
+ "schema",
10
+ "declaredAt",
11
+ "transactionRoot",
12
+ "qualificationRoot",
13
+ "authorityRoot",
14
+ "policyRoot",
15
+ "steps",
16
+ "events"
17
+ ],
18
+ "properties": {
19
+ "schema": { "const": "buildchain-v4-release-activation-request/v1" },
20
+ "declaredAt": { "$ref": "#/$defs/clock" },
21
+ "transactionRoot": { "$ref": "#/$defs/root" },
22
+ "qualificationRoot": {
23
+ "oneOf": [{ "$ref": "#/$defs/root" }, { "type": "null" }]
24
+ },
25
+ "authorityRoot": { "$ref": "#/$defs/root" },
26
+ "policyRoot": { "$ref": "#/$defs/root" },
27
+ "steps": {
28
+ "type": "array",
29
+ "minItems": 1,
30
+ "items": { "$ref": "#/$defs/step" }
31
+ },
32
+ "events": {
33
+ "type": "array",
34
+ "items": { "$ref": "#/$defs/event" }
35
+ }
36
+ },
37
+ "$defs": {
38
+ "root": {
39
+ "type": "string",
40
+ "pattern": "^sha256:[0-9a-f]{64}$"
41
+ },
42
+ "clock": {
43
+ "type": "string",
44
+ "pattern": "^(?!0000)\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
45
+ },
46
+ "token": {
47
+ "type": "string",
48
+ "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"
49
+ },
50
+ "ordinal": {
51
+ "type": "integer",
52
+ "minimum": 1,
53
+ "maximum": 9007199254740991
54
+ },
55
+ "operation": {
56
+ "type": "object",
57
+ "additionalProperties": false,
58
+ "required": [
59
+ "schema",
60
+ "transactionRoot",
61
+ "capabilityId",
62
+ "subjectRoot",
63
+ "targetRoot",
64
+ "authorityRoot",
65
+ "policyRoot"
66
+ ],
67
+ "properties": {
68
+ "schema": { "const": "buildchain-v4-provider-operation-identity/v1" },
69
+ "transactionRoot": { "$ref": "#/$defs/root" },
70
+ "capabilityId": {
71
+ "type": "string",
72
+ "pattern": "^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$"
73
+ },
74
+ "subjectRoot": { "$ref": "#/$defs/root" },
75
+ "targetRoot": { "$ref": "#/$defs/root" },
76
+ "authorityRoot": { "$ref": "#/$defs/root" },
77
+ "policyRoot": { "$ref": "#/$defs/root" }
78
+ }
79
+ },
80
+ "step": {
81
+ "type": "object",
82
+ "additionalProperties": false,
83
+ "required": [
84
+ "id",
85
+ "dependencies",
86
+ "operation",
87
+ "compensationBoundaryRoot"
88
+ ],
89
+ "properties": {
90
+ "id": { "$ref": "#/$defs/token" },
91
+ "dependencies": {
92
+ "type": "array",
93
+ "uniqueItems": true,
94
+ "items": { "$ref": "#/$defs/token" }
95
+ },
96
+ "operation": { "$ref": "#/$defs/operation" },
97
+ "compensationBoundaryRoot": { "$ref": "#/$defs/root" }
98
+ }
99
+ },
100
+ "event": {
101
+ "oneOf": [
102
+ { "$ref": "#/$defs/attempt" },
103
+ { "$ref": "#/$defs/observation" },
104
+ { "$ref": "#/$defs/reconciliation" },
105
+ { "$ref": "#/$defs/confirmation" }
106
+ ]
107
+ },
108
+ "attempt": {
109
+ "type": "object",
110
+ "additionalProperties": false,
111
+ "required": ["kind", "stepId", "ordinal", "attemptedAt", "effectRoot"],
112
+ "properties": {
113
+ "kind": { "const": "attempt" },
114
+ "stepId": { "$ref": "#/$defs/token" },
115
+ "ordinal": { "$ref": "#/$defs/ordinal" },
116
+ "attemptedAt": { "$ref": "#/$defs/clock" },
117
+ "effectRoot": { "$ref": "#/$defs/root" }
118
+ }
119
+ },
120
+ "observation": {
121
+ "type": "object",
122
+ "additionalProperties": false,
123
+ "required": [
124
+ "kind",
125
+ "stepId",
126
+ "ordinal",
127
+ "observedAt",
128
+ "status",
129
+ "evidenceRoots"
130
+ ],
131
+ "properties": {
132
+ "kind": { "const": "observation" },
133
+ "stepId": { "$ref": "#/$defs/token" },
134
+ "ordinal": { "$ref": "#/$defs/ordinal" },
135
+ "observedAt": { "$ref": "#/$defs/clock" },
136
+ "status": { "enum": ["succeeded", "failed", "unknown"] },
137
+ "evidenceRoots": {
138
+ "type": "array",
139
+ "minItems": 1,
140
+ "uniqueItems": true,
141
+ "items": { "$ref": "#/$defs/root" }
142
+ }
143
+ }
144
+ },
145
+ "reconciliation": {
146
+ "type": "object",
147
+ "additionalProperties": false,
148
+ "required": [
149
+ "kind",
150
+ "stepId",
151
+ "ordinal",
152
+ "reconciledAt",
153
+ "disposition",
154
+ "authorityRoot"
155
+ ],
156
+ "properties": {
157
+ "kind": { "const": "reconciliation" },
158
+ "stepId": { "$ref": "#/$defs/token" },
159
+ "ordinal": { "$ref": "#/$defs/ordinal" },
160
+ "reconciledAt": { "$ref": "#/$defs/clock" },
161
+ "disposition": { "enum": ["retry", "confirm", "terminal"] },
162
+ "authorityRoot": { "$ref": "#/$defs/root" }
163
+ }
164
+ },
165
+ "confirmation": {
166
+ "type": "object",
167
+ "additionalProperties": false,
168
+ "required": [
169
+ "kind",
170
+ "stepId",
171
+ "ordinal",
172
+ "confirmedAt",
173
+ "outcome",
174
+ "authorityRoot"
175
+ ],
176
+ "properties": {
177
+ "kind": { "const": "confirmation" },
178
+ "stepId": { "$ref": "#/$defs/token" },
179
+ "ordinal": { "$ref": "#/$defs/ordinal" },
180
+ "confirmedAt": { "$ref": "#/$defs/clock" },
181
+ "outcome": { "enum": ["confirmed", "rejected"] },
182
+ "authorityRoot": { "$ref": "#/$defs/root" }
183
+ }
184
+ }
185
+ }
186
+ }
@@ -0,0 +1,125 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://buildchain.libkungfu.dev/schema/v4-stable-publication-fence-v1.schema.json",
4
+ "title": "Buildchain v4 stable publication shadow fence request",
5
+ "description": "The sole closed schema authority for independently qualified stable-candidate publication planning. It grants no provider, ref, package, image, release, or production write authority.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": [
9
+ "schema",
10
+ "declaredAt",
11
+ "candidate",
12
+ "qualification",
13
+ "publisherAuthorityRoot",
14
+ "targets"
15
+ ],
16
+ "properties": {
17
+ "schema": { "const": "buildchain-v4-stable-publication-request/v1" },
18
+ "declaredAt": { "$ref": "#/$defs/clock" },
19
+ "candidate": { "$ref": "#/$defs/candidate" },
20
+ "qualification": { "$ref": "#/$defs/qualification" },
21
+ "publisherAuthorityRoot": { "$ref": "#/$defs/root" },
22
+ "targets": {
23
+ "type": "array",
24
+ "minItems": 1,
25
+ "items": { "$ref": "#/$defs/target" }
26
+ }
27
+ },
28
+ "$defs": {
29
+ "root": {
30
+ "type": "string",
31
+ "pattern": "^sha256:[0-9a-f]{64}$"
32
+ },
33
+ "clock": {
34
+ "type": "string",
35
+ "pattern": "^(?!0000)\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
36
+ },
37
+ "token": {
38
+ "type": "string",
39
+ "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"
40
+ },
41
+ "rootSet": {
42
+ "type": "array",
43
+ "minItems": 1,
44
+ "uniqueItems": true,
45
+ "items": { "$ref": "#/$defs/root" }
46
+ },
47
+ "candidate": {
48
+ "type": "object",
49
+ "additionalProperties": false,
50
+ "required": [
51
+ "generation",
52
+ "commit",
53
+ "sourceRoot",
54
+ "metadataRoot",
55
+ "journalRoot",
56
+ "protectedAncestryRoot"
57
+ ],
58
+ "properties": {
59
+ "generation": {
60
+ "type": "integer",
61
+ "minimum": 1,
62
+ "maximum": 9007199254740991
63
+ },
64
+ "commit": {
65
+ "type": "string",
66
+ "pattern": "^[0-9a-f]{40}$"
67
+ },
68
+ "sourceRoot": { "$ref": "#/$defs/root" },
69
+ "metadataRoot": { "$ref": "#/$defs/root" },
70
+ "journalRoot": { "$ref": "#/$defs/root" },
71
+ "protectedAncestryRoot": { "$ref": "#/$defs/root" }
72
+ }
73
+ },
74
+ "qualification": {
75
+ "type": "object",
76
+ "additionalProperties": false,
77
+ "required": [
78
+ "mode",
79
+ "authorityGeneration",
80
+ "qualifiedCandidateRoot",
81
+ "qualifierAuthorityRoot",
82
+ "sealRoot",
83
+ "sourceRoot",
84
+ "metadataRoot",
85
+ "journalRoot",
86
+ "protectedAncestryRoot",
87
+ "providerConfirmationRoots"
88
+ ],
89
+ "properties": {
90
+ "mode": { "enum": ["n-minus-one", "independent-seal"] },
91
+ "authorityGeneration": {
92
+ "type": "integer",
93
+ "minimum": 1,
94
+ "maximum": 9007199254740991
95
+ },
96
+ "qualifiedCandidateRoot": { "$ref": "#/$defs/root" },
97
+ "qualifierAuthorityRoot": { "$ref": "#/$defs/root" },
98
+ "sealRoot": { "$ref": "#/$defs/root" },
99
+ "sourceRoot": { "$ref": "#/$defs/root" },
100
+ "metadataRoot": { "$ref": "#/$defs/root" },
101
+ "journalRoot": { "$ref": "#/$defs/root" },
102
+ "protectedAncestryRoot": { "$ref": "#/$defs/root" },
103
+ "providerConfirmationRoots": { "$ref": "#/$defs/rootSet" }
104
+ }
105
+ },
106
+ "target": {
107
+ "type": "object",
108
+ "additionalProperties": false,
109
+ "required": ["id", "kind", "desired", "providerConfirmationRoot"],
110
+ "properties": {
111
+ "id": { "$ref": "#/$defs/token" },
112
+ "kind": {
113
+ "enum": ["stable-ref", "npm-tag", "oci-tag", "github-release"]
114
+ },
115
+ "desired": {
116
+ "type": "string",
117
+ "minLength": 1,
118
+ "maxLength": 200,
119
+ "pattern": "^[!-~]+$"
120
+ },
121
+ "providerConfirmationRoot": { "$ref": "#/$defs/root" }
122
+ }
123
+ }
124
+ }
125
+ }
@@ -0,0 +1,225 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://buildchain.libkungfu.dev/schema/v4-stage-capsule-resume-v1.schema.json",
4
+ "title": "Buildchain v4 Stage Capsule resume planner contract suite",
5
+ "description": "Closed pure request and plan contracts for deterministic Stage Capsule resume decisions.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": ["schemaVersion", "request", "plan"],
9
+ "properties": {
10
+ "schemaVersion": { "const": 1 },
11
+ "request": { "$ref": "#/$defs/request" },
12
+ "plan": { "$ref": "#/$defs/plan" }
13
+ },
14
+ "$defs": {
15
+ "root": {
16
+ "type": "string",
17
+ "pattern": "^sha256:[0-9a-f]{64}$"
18
+ },
19
+ "clock": {
20
+ "type": "string",
21
+ "pattern": "^(?!0000)\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
22
+ },
23
+ "token": {
24
+ "type": "string",
25
+ "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"
26
+ },
27
+ "retentionPromise": {
28
+ "type": "object",
29
+ "additionalProperties": false,
30
+ "required": ["class", "retainUntil"],
31
+ "properties": {
32
+ "class": { "$ref": "#/$defs/token" },
33
+ "retainUntil": { "$ref": "#/$defs/clock" }
34
+ }
35
+ },
36
+ "candidate": {
37
+ "type": ["object", "null"],
38
+ "additionalProperties": false,
39
+ "required": ["capsule", "availability"],
40
+ "properties": {
41
+ "capsule": {
42
+ "$ref": "v4-stage-capsule-v1.schema.json#/$defs/capsule"
43
+ },
44
+ "availability": {
45
+ "$ref": "v4-stage-capsule-v1.schema.json#/$defs/availability"
46
+ }
47
+ }
48
+ },
49
+ "node": {
50
+ "type": "object",
51
+ "additionalProperties": false,
52
+ "required": [
53
+ "key",
54
+ "dependencies",
55
+ "expectedIdentity",
56
+ "expectedRetentionPromise",
57
+ "candidate"
58
+ ],
59
+ "properties": {
60
+ "key": { "$ref": "#/$defs/token" },
61
+ "dependencies": {
62
+ "type": "array",
63
+ "uniqueItems": true,
64
+ "items": { "$ref": "#/$defs/token" }
65
+ },
66
+ "expectedIdentity": {
67
+ "$ref": "v4-stage-capsule-v1.schema.json#/$defs/identity"
68
+ },
69
+ "expectedRetentionPromise": {
70
+ "$ref": "#/$defs/retentionPromise"
71
+ },
72
+ "candidate": { "$ref": "#/$defs/candidate" }
73
+ }
74
+ },
75
+ "effect": {
76
+ "type": "object",
77
+ "additionalProperties": false,
78
+ "required": [
79
+ "id",
80
+ "kind",
81
+ "provider",
82
+ "afterStages",
83
+ "providerReadback",
84
+ "mutation"
85
+ ],
86
+ "properties": {
87
+ "id": { "$ref": "#/$defs/token" },
88
+ "kind": { "$ref": "#/$defs/token" },
89
+ "provider": { "$ref": "#/$defs/token" },
90
+ "afterStages": {
91
+ "type": "array",
92
+ "uniqueItems": true,
93
+ "items": { "$ref": "#/$defs/token" }
94
+ },
95
+ "providerReadback": { "const": true },
96
+ "mutation": { "const": false }
97
+ }
98
+ },
99
+ "request": {
100
+ "type": "object",
101
+ "additionalProperties": false,
102
+ "required": ["schema", "evaluatedAt", "nodes", "targets", "effects"],
103
+ "properties": {
104
+ "schema": {
105
+ "const": "buildchain-v4-stage-capsule-resume-request/v1"
106
+ },
107
+ "evaluatedAt": { "$ref": "#/$defs/clock" },
108
+ "nodes": {
109
+ "type": "array",
110
+ "minItems": 1,
111
+ "items": { "$ref": "#/$defs/node" }
112
+ },
113
+ "targets": {
114
+ "type": "array",
115
+ "minItems": 1,
116
+ "uniqueItems": true,
117
+ "items": { "$ref": "#/$defs/token" }
118
+ },
119
+ "effects": {
120
+ "type": "array",
121
+ "items": { "$ref": "#/$defs/effect" }
122
+ }
123
+ }
124
+ },
125
+ "cause": {
126
+ "type": "object",
127
+ "additionalProperties": false,
128
+ "required": ["field", "expectedRoot", "observedRoot"],
129
+ "properties": {
130
+ "field": { "$ref": "#/$defs/token" },
131
+ "expectedRoot": { "$ref": "#/$defs/root" },
132
+ "observedRoot": { "$ref": "#/$defs/root" }
133
+ }
134
+ },
135
+ "read": {
136
+ "type": "object",
137
+ "additionalProperties": false,
138
+ "required": ["kind", "name", "root"],
139
+ "properties": {
140
+ "kind": { "$ref": "#/$defs/token" },
141
+ "name": { "$ref": "#/$defs/token" },
142
+ "root": { "$ref": "#/$defs/root" }
143
+ }
144
+ },
145
+ "decision": {
146
+ "type": "object",
147
+ "additionalProperties": false,
148
+ "required": [
149
+ "stageKey",
150
+ "platform",
151
+ "stage",
152
+ "decision",
153
+ "execution",
154
+ "reasonCode",
155
+ "capsuleRoot",
156
+ "availabilityRoot",
157
+ "invalidationCauses",
158
+ "requiredReads"
159
+ ],
160
+ "properties": {
161
+ "stageKey": { "$ref": "#/$defs/token" },
162
+ "platform": { "$ref": "#/$defs/token" },
163
+ "stage": { "$ref": "#/$defs/token" },
164
+ "decision": { "enum": ["reuse", "rebuild", "reject"] },
165
+ "execution": { "enum": ["reuse", "rebuild"] },
166
+ "reasonCode": { "$ref": "#/$defs/token" },
167
+ "capsuleRoot": {
168
+ "anyOf": [{ "$ref": "#/$defs/root" }, { "type": "null" }]
169
+ },
170
+ "availabilityRoot": {
171
+ "anyOf": [{ "$ref": "#/$defs/root" }, { "type": "null" }]
172
+ },
173
+ "invalidationCauses": {
174
+ "type": "array",
175
+ "items": { "$ref": "#/$defs/cause" }
176
+ },
177
+ "requiredReads": {
178
+ "type": "array",
179
+ "items": { "$ref": "#/$defs/read" }
180
+ }
181
+ }
182
+ },
183
+ "plan": {
184
+ "type": "object",
185
+ "additionalProperties": false,
186
+ "required": [
187
+ "schema",
188
+ "mode",
189
+ "productionAuthority",
190
+ "evaluatedAt",
191
+ "decisions",
192
+ "requiredRestores",
193
+ "requiredStages",
194
+ "requiredEffects",
195
+ "planRoot"
196
+ ],
197
+ "properties": {
198
+ "schema": { "const": "buildchain-v4-stage-capsule-resume-plan/v1" },
199
+ "mode": { "const": "shadow-only" },
200
+ "productionAuthority": { "const": "v3" },
201
+ "evaluatedAt": { "$ref": "#/$defs/clock" },
202
+ "decisions": {
203
+ "type": "array",
204
+ "minItems": 1,
205
+ "items": { "$ref": "#/$defs/decision" }
206
+ },
207
+ "requiredRestores": {
208
+ "type": "array",
209
+ "uniqueItems": true,
210
+ "items": { "$ref": "#/$defs/token" }
211
+ },
212
+ "requiredStages": {
213
+ "type": "array",
214
+ "uniqueItems": true,
215
+ "items": { "$ref": "#/$defs/token" }
216
+ },
217
+ "requiredEffects": {
218
+ "type": "array",
219
+ "items": { "$ref": "#/$defs/effect" }
220
+ },
221
+ "planRoot": { "$ref": "#/$defs/root" }
222
+ }
223
+ }
224
+ }
225
+ }
@@ -0,0 +1,154 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://buildchain.libkungfu.dev/schema/v4-stage-capsule-store-v1.schema.json",
4
+ "title": "Buildchain v4 Stage Capsule store contract suite",
5
+ "description": "Closed provider-neutral contracts for exact content manifests, retention observations, rooted transport facts, and immutable store receipts.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": [
9
+ "schemaVersion",
10
+ "manifest",
11
+ "retentionState",
12
+ "transport",
13
+ "receipt"
14
+ ],
15
+ "properties": {
16
+ "schemaVersion": { "const": 1 },
17
+ "manifest": { "$ref": "#/$defs/manifest" },
18
+ "retentionState": { "$ref": "#/$defs/retentionState" },
19
+ "transport": { "$ref": "#/$defs/transport" },
20
+ "receipt": { "$ref": "#/$defs/receipt" }
21
+ },
22
+ "$defs": {
23
+ "root": {
24
+ "type": "string",
25
+ "pattern": "^sha256:[0-9a-f]{64}$"
26
+ },
27
+ "clock": {
28
+ "type": "string",
29
+ "pattern": "^(?!0000)\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
30
+ },
31
+ "token": {
32
+ "type": "string",
33
+ "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"
34
+ },
35
+ "contentEntry": {
36
+ "type": "object",
37
+ "additionalProperties": false,
38
+ "required": ["name", "root", "size"],
39
+ "properties": {
40
+ "name": { "$ref": "#/$defs/token" },
41
+ "root": { "$ref": "#/$defs/root" },
42
+ "size": {
43
+ "type": "integer",
44
+ "minimum": 0,
45
+ "maximum": 9007199254740991
46
+ }
47
+ }
48
+ },
49
+ "manifest": {
50
+ "type": "object",
51
+ "additionalProperties": false,
52
+ "required": ["schema", "entries", "manifestRoot"],
53
+ "properties": {
54
+ "schema": {
55
+ "const": "buildchain-v4-stage-capsule-output-manifest/v1"
56
+ },
57
+ "entries": {
58
+ "type": "array",
59
+ "minItems": 1,
60
+ "items": { "$ref": "#/$defs/contentEntry" }
61
+ },
62
+ "manifestRoot": { "$ref": "#/$defs/root" }
63
+ }
64
+ },
65
+ "retentionState": {
66
+ "type": "object",
67
+ "additionalProperties": false,
68
+ "required": [
69
+ "schema",
70
+ "capsuleRoot",
71
+ "promiseRoot",
72
+ "evaluatedAt",
73
+ "status",
74
+ "stateRoot"
75
+ ],
76
+ "properties": {
77
+ "schema": {
78
+ "const": "buildchain-v4-stage-capsule-retention-state/v1"
79
+ },
80
+ "capsuleRoot": { "$ref": "#/$defs/root" },
81
+ "promiseRoot": { "$ref": "#/$defs/root" },
82
+ "evaluatedAt": { "$ref": "#/$defs/clock" },
83
+ "status": { "enum": ["retained", "expired"] },
84
+ "stateRoot": { "$ref": "#/$defs/root" }
85
+ }
86
+ },
87
+ "transport": {
88
+ "type": "object",
89
+ "additionalProperties": false,
90
+ "required": [
91
+ "schema",
92
+ "provider",
93
+ "mode",
94
+ "locatorRoot",
95
+ "observedAt",
96
+ "transportRoot"
97
+ ],
98
+ "properties": {
99
+ "schema": { "const": "buildchain-v4-stage-capsule-transport/v1" },
100
+ "provider": {
101
+ "enum": ["local-filesystem", "github-artifacts", "s3-compatible"]
102
+ },
103
+ "mode": {
104
+ "enum": ["local-reference", "effect-disabled", "fixture-backed"]
105
+ },
106
+ "locatorRoot": { "$ref": "#/$defs/root" },
107
+ "observedAt": { "$ref": "#/$defs/clock" },
108
+ "transportRoot": { "$ref": "#/$defs/root" }
109
+ }
110
+ },
111
+ "receipt": {
112
+ "type": "object",
113
+ "additionalProperties": false,
114
+ "required": [
115
+ "schema",
116
+ "operation",
117
+ "recordedAt",
118
+ "capsuleRoot",
119
+ "manifestRoot",
120
+ "retentionStateRoot",
121
+ "availabilityRoot",
122
+ "transportRoot",
123
+ "qualificationRoot",
124
+ "outcome",
125
+ "faultCode",
126
+ "receiptRoot"
127
+ ],
128
+ "properties": {
129
+ "schema": {
130
+ "const": "buildchain-v4-stage-capsule-store-receipt/v1"
131
+ },
132
+ "operation": { "enum": ["put", "locate", "restore", "quarantine"] },
133
+ "recordedAt": { "$ref": "#/$defs/clock" },
134
+ "capsuleRoot": { "$ref": "#/$defs/root" },
135
+ "manifestRoot": { "$ref": "#/$defs/root" },
136
+ "retentionStateRoot": { "$ref": "#/$defs/root" },
137
+ "availabilityRoot": { "$ref": "#/$defs/root" },
138
+ "transportRoot": { "$ref": "#/$defs/root" },
139
+ "qualificationRoot": { "$ref": "#/$defs/root" },
140
+ "outcome": {
141
+ "enum": [
142
+ "stored",
143
+ "already-stored",
144
+ "located",
145
+ "restored",
146
+ "quarantined"
147
+ ]
148
+ },
149
+ "faultCode": { "type": "null" },
150
+ "receiptRoot": { "$ref": "#/$defs/root" }
151
+ }
152
+ }
153
+ }
154
+ }