@kungfu-tech/buildchain 3.0.9-alpha.9 → 4.0.0-alpha.0

package/contracts/v4-stage-capsule-v1.schema.json

@@ -0,0 +1,178 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://buildchain.libkungfu.dev/schema/v4-stage-capsule-v1.schema.json",
+  "title": "Buildchain v4 Stage Capsule contract suite",
+  "description": "The sole closed schema authority for immutable per-platform Stage Capsule identity, retention promise, current availability, and fail-closed reuse decisions.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "identity", "capsule", "availability", "reuse"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "identity": { "$ref": "#/$defs/identity" },
+    "capsule": { "$ref": "#/$defs/capsule" },
+    "availability": { "$ref": "#/$defs/availability" },
+    "reuse": { "$ref": "#/$defs/reuse" }
+  },
+  "$defs": {
+    "root": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "clock": {
+      "type": "string",
+      "pattern": "^(?!0000)\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
+    },
+    "token": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"
+    },
+    "namedRoot": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "root"],
+      "properties": {
+        "name": { "$ref": "#/$defs/token" },
+        "root": { "$ref": "#/$defs/root" }
+      }
+    },
+    "identity": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema",
+        "sourceRoot",
+        "platform",
+        "platformRoot",
+        "stage",
+        "toolchainRoots",
+        "runtimeRoot",
+        "policyRoot",
+        "declaredInputs",
+        "transformationRoot",
+        "outputManifestRoot",
+        "qualificationRoot",
+        "observationRoots"
+      ],
+      "properties": {
+        "schema": { "const": "buildchain-v4-stage-capsule-identity/v1" },
+        "sourceRoot": { "$ref": "#/$defs/root" },
+        "platform": { "$ref": "#/$defs/token" },
+        "platformRoot": { "$ref": "#/$defs/root" },
+        "stage": { "$ref": "#/$defs/token" },
+        "toolchainRoots": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/namedRoot" }
+        },
+        "runtimeRoot": { "$ref": "#/$defs/root" },
+        "policyRoot": { "$ref": "#/$defs/root" },
+        "declaredInputs": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/namedRoot" }
+        },
+        "transformationRoot": { "$ref": "#/$defs/root" },
+        "outputManifestRoot": { "$ref": "#/$defs/root" },
+        "qualificationRoot": { "$ref": "#/$defs/root" },
+        "observationRoots": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/namedRoot" }
+        }
+      }
+    },
+    "retentionPromise": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["class", "retainUntil"],
+      "properties": {
+        "class": { "$ref": "#/$defs/token" },
+        "retainUntil": { "$ref": "#/$defs/clock" }
+      }
+    },
+    "capsule": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema",
+        "writerAuthority",
+        "rustAuthority",
+        "identity",
+        "identityRoot",
+        "retentionPromise",
+        "capsuleRoot"
+      ],
+      "properties": {
+        "schema": { "const": "buildchain-v4-stage-capsule/v1" },
+        "writerAuthority": { "const": "typescript-v3" },
+        "rustAuthority": { "const": "validation-only" },
+        "identity": { "$ref": "#/$defs/identity" },
+        "identityRoot": { "$ref": "#/$defs/root" },
+        "retentionPromise": { "$ref": "#/$defs/retentionPromise" },
+        "capsuleRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "availability": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema",
+        "capsuleRoot",
+        "observedAt",
+        "status",
+        "contentRoot",
+        "qualificationRoot",
+        "transports",
+        "faultCode"
+      ],
+      "properties": {
+        "schema": { "const": "buildchain-v4-stage-capsule-availability/v1" },
+        "capsuleRoot": { "$ref": "#/$defs/root" },
+        "observedAt": { "$ref": "#/$defs/clock" },
+        "status": {
+          "enum": [
+            "available",
+            "missing",
+            "expired",
+            "partial",
+            "corrupt",
+            "quarantined",
+            "root-mismatch"
+          ]
+        },
+        "contentRoot": {
+          "anyOf": [{ "$ref": "#/$defs/root" }, { "type": "null" }]
+        },
+        "qualificationRoot": {
+          "anyOf": [{ "$ref": "#/$defs/root" }, { "type": "null" }]
+        },
+        "transports": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/namedRoot" }
+        },
+        "faultCode": {
+          "anyOf": [{ "$ref": "#/$defs/token" }, { "type": "null" }]
+        }
+      }
+    },
+    "reuse": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema",
+        "capsule",
+        "availability",
+        "evaluatedAt",
+        "expectedCapsuleRoot",
+        "expectedOutputManifestRoot",
+        "expectedQualificationRoot"
+      ],
+      "properties": {
+        "schema": { "const": "buildchain-v4-stage-capsule-reuse/v1" },
+        "capsule": { "$ref": "#/$defs/capsule" },
+        "availability": { "$ref": "#/$defs/availability" },
+        "evaluatedAt": { "$ref": "#/$defs/clock" },
+        "expectedCapsuleRoot": { "$ref": "#/$defs/root" },
+        "expectedOutputManifestRoot": { "$ref": "#/$defs/root" },
+        "expectedQualificationRoot": { "$ref": "#/$defs/root" }
+      }
+    }
+  }
+}

package/crates/buildchain-v4-bridge/Cargo.lock

@@ -0,0 +1,213 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "bitflags"
+version = "2.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
+
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2",
+]
+
+[[package]]
+name = "buildchain-v4-bridge"
+version = "0.1.0"
+dependencies = [
+ "base64",
+ "ctrlc",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f079e83a288787bcd14a6aea84cee5c87a67c5a3e660c30f557a3d24761b3527"
+
+[[package]]
+name = "ctrlc"
+version = "3.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e0b1fab2ae45819af2d0731d60f2afe17227ebb1a1538a236da84c93e9a60162"
+dependencies = [
+ "dispatch2",
+ "nix",
+ "windows-sys",
+]
+
+[[package]]
+name = "dispatch2"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e0e367e4e7da84520dedcac1901e4da967309406d1e51017ae1abfb97adbd38"
+dependencies = [
+ "bitflags",
+ "block2",
+ "libc",
+ "objc2",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "libc"
+version = "0.2.189"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "nix"
+version = "0.31.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d"
+dependencies = [
+ "bitflags",
+ "cfg-if",
+ "cfg_aliases",
+ "libc",
+]
+
+[[package]]
+name = "objc2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a12a8ed07aefc768292f076dc3ac8c48f3781c8f2d5851dd3d98950e8c5a89f"
+dependencies = [
+ "objc2-encode",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.107"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.151"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "syn"
+version = "3.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53e9bae58849f64dfa4f5d5ae372c8341f7305f82a3868709269343628b659a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b"

package/crates/buildchain-v4-bridge/Cargo.toml

@@ -0,0 +1,12 @@
+[package]
+name = "buildchain-v4-bridge"
+version = "0.1.0"
+edition = "2024"
+license = "Apache-2.0"
+publish = false
+
+[dependencies]
+base64 = "0.22.1"
+ctrlc = { version = "3.5.0", features = ["termination"] }
+serde = { version = "1.0.228", features = ["derive"] }
+serde_json = "1.0.149"