@kungfu-tech/buildchain 4.0.0 → 4.0.1-alpha.10

package/contracts/v4-runtime-ref-resume-authority-v1.schema.json

@@ -0,0 +1,235 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://buildchain.libkungfu.dev/schema/v4-runtime-ref-resume-authority-v1.schema.json",
+  "title": "Buildchain v4 transient runtime authorization and resume lineage evidence",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["authorizationRoot", "authorization", "lineageRoot", "lineage"],
+  "properties": {
+    "authorizationRoot": { "$ref": "#/$defs/root" },
+    "authorization": { "$ref": "#/$defs/authorization" },
+    "lineageRoot": { "$ref": "#/$defs/root" },
+    "lineage": { "$ref": "#/$defs/lineage" }
+  },
+  "$defs": {
+    "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "sha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+    "token": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*$" },
+    "authorization": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "contract",
+        "status",
+        "mode",
+        "eventName",
+        "repository",
+        "actor",
+        "reason",
+        "authorizedAt",
+        "source",
+        "request",
+        "runtime",
+        "contractLocks",
+        "consumerPolicyReceiptRoot",
+        "persistenceScanRoot"
+      ],
+      "properties": {
+        "schemaVersion": { "const": 1 },
+        "contract": {
+          "const": "kungfu-buildchain-v4-runtime-authorization/v1"
+        },
+        "status": { "const": "authorized" },
+        "mode": { "enum": ["dispatch", "resume", "rescue"] },
+        "eventName": { "const": "workflow_dispatch" },
+        "repository": { "type": "string", "minLength": 3 },
+        "actor": { "$ref": "#/$defs/actor" },
+        "reason": { "type": "string", "minLength": 1 },
+        "authorizedAt": {
+          "type": "string",
+          "pattern": "^(?!0000)\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$"
+        },
+        "source": { "$ref": "#/$defs/source" },
+        "request": { "$ref": "#/$defs/request" },
+        "runtime": { "$ref": "#/$defs/runtime" },
+        "contractLocks": { "$ref": "#/$defs/contractLocks" },
+        "consumerPolicyReceiptRoot": { "$ref": "#/$defs/root" },
+        "persistenceScanRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "lineage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "contract",
+        "status",
+        "authorizationRoot",
+        "source",
+        "consumerPolicyReceiptRoot",
+        "attempts",
+        "floatingRefMovement",
+        "continuation",
+        "stageCapsules",
+        "finalPublicReadbackRoot"
+      ],
+      "properties": {
+        "schemaVersion": { "const": 1 },
+        "contract": {
+          "const": "kungfu-buildchain-v4-runtime-resume-lineage/v1"
+        },
+        "status": { "const": "qualified" },
+        "authorizationRoot": { "$ref": "#/$defs/root" },
+        "source": { "$ref": "#/$defs/source" },
+        "consumerPolicyReceiptRoot": { "$ref": "#/$defs/root" },
+        "attempts": { "$ref": "#/$defs/attempts" },
+        "floatingRefMovement": { "$ref": "#/$defs/floatingRefMovement" },
+        "continuation": { "$ref": "#/$defs/continuation" },
+        "stageCapsules": { "$ref": "#/$defs/stageCapsules" },
+        "finalPublicReadbackRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "actor": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["login", "permission"],
+      "properties": {
+        "login": { "type": "string", "minLength": 1 },
+        "permission": { "enum": ["write", "maintain", "admin"] }
+      }
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["sha", "treeSha"],
+      "properties": {
+        "sha": { "$ref": "#/$defs/sha" },
+        "treeSha": { "$ref": "#/$defs/sha" }
+      }
+    },
+    "request": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ref", "class"],
+      "properties": {
+        "ref": { "type": "string", "minLength": 1 },
+        "class": { "enum": ["exact-sha", "floating", "train", "authority"] }
+      }
+    },
+    "readback": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ref", "sha", "containsRuntimeSha", "readbackRoot"],
+      "properties": {
+        "ref": { "type": "string", "minLength": 1 },
+        "sha": { "$ref": "#/$defs/sha" },
+        "containsRuntimeSha": { "type": "boolean" },
+        "readbackRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "runtime": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["sha", "reachableFrom"],
+      "properties": {
+        "sha": { "$ref": "#/$defs/sha" },
+        "reachableFrom": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/readback" }
+        }
+      }
+    },
+    "contractLocks": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["stableRoot", "alphaRoot"],
+      "properties": {
+        "stableRoot": { "$ref": "#/$defs/root" },
+        "alphaRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "attempt": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "runtimeSha"],
+      "properties": {
+        "id": { "$ref": "#/$defs/token" },
+        "runtimeSha": { "$ref": "#/$defs/sha" }
+      }
+    },
+    "attempts": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["build", "resume"],
+      "properties": {
+        "build": { "$ref": "#/$defs/attempt" },
+        "resume": { "$ref": "#/$defs/attempt" }
+      }
+    },
+    "refReadback": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ref", "sha"],
+      "properties": {
+        "ref": { "enum": ["v4", "v4-alpha"] },
+        "sha": { "$ref": "#/$defs/sha" }
+      }
+    },
+    "floatingRefMovement": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["before", "after"],
+      "properties": {
+        "before": { "$ref": "#/$defs/refReadback" },
+        "after": { "$ref": "#/$defs/refReadback" }
+      }
+    },
+    "continuation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mechanism", "rerunFailedJobs", "resumePlanRoot"],
+      "properties": {
+        "mechanism": { "const": "new-governed-attempt" },
+        "rerunFailedJobs": { "const": false },
+        "resumePlanRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "capsule": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["platform", "capsuleRoot", "identityRoot", "artifactDigest"],
+      "properties": {
+        "platform": { "$ref": "#/$defs/token" },
+        "capsuleRoot": { "$ref": "#/$defs/root" },
+        "identityRoot": { "$ref": "#/$defs/root" },
+        "artifactDigest": { "$ref": "#/$defs/root" }
+      }
+    },
+    "stageCapsules": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requiredPlatforms", "reused", "rebuildPlatforms"],
+      "properties": {
+        "requiredPlatforms": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/token" }
+        },
+        "reused": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/capsule" }
+        },
+        "rebuildPlatforms": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/token" }
+        }
+      }
+    }
+  }
+}

package/contracts/v4-tail-reseal-v1.schema.json

@@ -0,0 +1,276 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://buildchain.libkungfu.dev/contracts/v4-tail-reseal-v1.schema.json",
+  "title": "Buildchain v4 retained-candidate tail reseal request",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "evaluatedAt",
+    "repository",
+    "source",
+    "target",
+    "runtime",
+    "warrant",
+    "retention",
+    "failure",
+    "stageResume",
+    "signing",
+    "releaseTail",
+    "platforms"
+  ],
+  "properties": {
+    "schema": {
+      "const": "kungfu-buildchain-v4-tail-reseal-request/v1"
+    },
+    "evaluatedAt": { "$ref": "#/$defs/clock" },
+    "repository": { "$ref": "#/$defs/text" },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "runId",
+        "runAttempt",
+        "sha",
+        "treeSha",
+        "sourceRoot",
+        "workflowFile",
+        "workflowName"
+      ],
+      "properties": {
+        "runId": { "$ref": "#/$defs/positiveInteger" },
+        "runAttempt": { "$ref": "#/$defs/positiveInteger" },
+        "sha": { "$ref": "#/$defs/sha" },
+        "treeSha": { "$ref": "#/$defs/sha" },
+        "sourceRoot": { "$ref": "#/$defs/root" },
+        "workflowFile": { "$ref": "#/$defs/text" },
+        "workflowName": { "$ref": "#/$defs/text" }
+      }
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["channel", "ref", "baseSha", "version"],
+      "properties": {
+        "channel": { "const": "alpha" },
+        "ref": { "const": "alpha/v4/v4.0" },
+        "baseSha": { "$ref": "#/$defs/sha" },
+        "version": { "type": "string", "pattern": "^4\\.0\\.0-alpha\\.[0-9]+$" }
+      }
+    },
+    "runtime": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "repository",
+        "ref",
+        "sha",
+        "contractRoot",
+        "consumerPolicyReceiptRoot"
+      ],
+      "properties": {
+        "repository": { "const": "kungfu-systems/buildchain" },
+        "ref": {
+          "type": "string",
+          "pattern": "^(v4-alpha|train/v4/v4\\.0/[A-Za-z0-9._/-]+)$"
+        },
+        "sha": { "$ref": "#/$defs/sha" },
+        "contractRoot": { "$ref": "#/$defs/root" },
+        "consumerPolicyReceiptRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "warrant": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "candidateId",
+        "generation",
+        "fencingToken",
+        "status",
+        "lineageRoot",
+        "qualificationRoot",
+        "stateReadbackRoot"
+      ],
+      "properties": {
+        "candidateId": { "$ref": "#/$defs/token" },
+        "generation": { "$ref": "#/$defs/positiveInteger" },
+        "fencingToken": { "$ref": "#/$defs/token" },
+        "status": { "const": "qualified" },
+        "lineageRoot": { "$ref": "#/$defs/root" },
+        "qualificationRoot": { "$ref": "#/$defs/root" },
+        "stateReadbackRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "retention": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "retainUntil", "policyRoot", "readbackRoot"],
+      "properties": {
+        "status": { "const": "retained" },
+        "retainUntil": { "$ref": "#/$defs/clock" },
+        "policyRoot": { "$ref": "#/$defs/root" },
+        "readbackRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "failure": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "platformId",
+        "stage",
+        "jobId",
+        "jobName",
+        "stepName",
+        "code",
+        "evidenceRoot"
+      ],
+      "properties": {
+        "platformId": { "const": "macos-arm64" },
+        "stage": { "const": "signing-finalization" },
+        "jobId": { "$ref": "#/$defs/positiveInteger" },
+        "jobName": { "const": "build / Finalize signed artifact macOS ARM64" },
+        "stepName": { "const": "Recompute manifest over final signed bytes" },
+        "code": { "$ref": "#/$defs/token" },
+        "evidenceRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "stageResume": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "planRoot",
+        "qualificationRoot",
+        "zeroEffectReuse",
+        "decisions"
+      ],
+      "properties": {
+        "planRoot": { "$ref": "#/$defs/root" },
+        "qualificationRoot": { "$ref": "#/$defs/root" },
+        "zeroEffectReuse": { "const": true },
+        "decisions": {
+          "type": "array",
+          "minItems": 16,
+          "maxItems": 16,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["stageKey", "decision", "capsuleRoot", "evidenceRoot"],
+            "properties": {
+              "stageKey": { "$ref": "#/$defs/token" },
+              "decision": { "const": "reuse" },
+              "capsuleRoot": { "$ref": "#/$defs/root" },
+              "evidenceRoot": { "$ref": "#/$defs/root" }
+            }
+          }
+        }
+      }
+    },
+    "signing": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "authorityRepository",
+        "authorityRunId",
+        "runtimeSha",
+        "requestRoot",
+        "delegationRoot",
+        "resultArtifact",
+        "resultArtifactRoot",
+        "credentialAuthorityId",
+        "credentialScopeRoot",
+        "credentialLeaseRoot",
+        "credentialExpiresAt",
+        "providerReadbackRoot"
+      ],
+      "properties": {
+        "authorityRepository": { "$ref": "#/$defs/text" },
+        "authorityRunId": { "$ref": "#/$defs/positiveInteger" },
+        "runtimeSha": { "$ref": "#/$defs/sha" },
+        "requestRoot": { "$ref": "#/$defs/root" },
+        "delegationRoot": { "$ref": "#/$defs/root" },
+        "resultArtifact": { "$ref": "#/$defs/text" },
+        "resultArtifactRoot": { "$ref": "#/$defs/root" },
+        "credentialAuthorityId": { "$ref": "#/$defs/token" },
+        "credentialScopeRoot": { "$ref": "#/$defs/root" },
+        "credentialLeaseRoot": { "$ref": "#/$defs/root" },
+        "credentialExpiresAt": { "$ref": "#/$defs/clock" },
+        "providerReadbackRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "releaseTail": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "declarationRoot",
+        "transactionRoot",
+        "operationRoot",
+        "idempotencyKey",
+        "providerReadbackRoot"
+      ],
+      "properties": {
+        "declarationRoot": { "$ref": "#/$defs/root" },
+        "transactionRoot": { "$ref": "#/$defs/root" },
+        "operationRoot": { "$ref": "#/$defs/root" },
+        "idempotencyKey": { "$ref": "#/$defs/token" },
+        "providerReadbackRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "platforms": {
+      "type": "array",
+      "minItems": 4,
+      "maxItems": 4,
+      "items": { "$ref": "#/$defs/platform" }
+    }
+  },
+  "$defs": {
+    "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "sha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+    "clock": {
+      "type": "string",
+      "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\\.[0-9]{3}Z$"
+    },
+    "text": { "type": "string", "minLength": 1 },
+    "token": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*$"
+    },
+    "positiveInteger": { "type": "integer", "minimum": 1 },
+    "platform": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "name",
+        "runner",
+        "artifactName",
+        "artifactRoot",
+        "artifactArchiveRoot",
+        "manifestArtifactName",
+        "manifestRoot",
+        "manifestArchiveRoot",
+        "artifactPaths",
+        "capsuleRoot"
+      ],
+      "properties": {
+        "id": {
+          "enum": ["linux-arm64", "linux-x64", "macos-arm64", "windows-x64"]
+        },
+        "name": { "$ref": "#/$defs/text" },
+        "runner": { "$ref": "#/$defs/text" },
+        "artifactName": { "$ref": "#/$defs/text" },
+        "artifactRoot": { "$ref": "#/$defs/root" },
+        "artifactArchiveRoot": { "$ref": "#/$defs/root" },
+        "manifestArtifactName": { "$ref": "#/$defs/text" },
+        "manifestRoot": { "$ref": "#/$defs/root" },
+        "manifestArchiveRoot": { "$ref": "#/$defs/root" },
+        "artifactPaths": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/text" },
+          "uniqueItems": true
+        },
+        "capsuleRoot": { "$ref": "#/$defs/root" }
+      }
+    }
+  }
+}

package/dist/site/agent-index.json

@@ -19,6 +19,11 @@
     "schemas/release-passport-v1.schema.json",
     "schemas/kfd-agent-hub-adoption.schema.json",
     "schemas/kfd-product-gate-input-v1.schema.json",
+    "schemas/dev-delivery-authority-v2.schema.json",
+    "schemas/v4-compatibility-facts-v1.schema.json",
+    "schemas/v4-publication-rehearsal-capsule-v1.schema.json",
+    "schemas/v4-adopter-delivery-v1.schema.json",
+    "schemas/release-tail-capabilities-v1.schema.json",
     "buildchain-contract.json",
     "kfd-upstream-aggregate.json",
     "kfd-claims.json",

package/dist/site/artifact-schemas.json

@@ -7,6 +7,11 @@
     "schemas/release-passport-v1.schema.json",
     "schemas/kfd-agent-hub-adoption.schema.json",
     "schemas/kfd-product-gate-input-v1.schema.json",
+    "schemas/dev-delivery-authority-v2.schema.json",
+    "schemas/v4-compatibility-facts-v1.schema.json",
+    "schemas/v4-publication-rehearsal-capsule-v1.schema.json",
+    "schemas/v4-adopter-delivery-v1.schema.json",
+    "schemas/release-tail-capabilities-v1.schema.json",
     "kfd-support.json",
     "artifact-evidence.json",
     "product-mechanism.json",
@@ -41,6 +46,11 @@
     "schemas/release-passport-v1.schema.json",
     "schemas/kfd-agent-hub-adoption.schema.json",
     "schemas/kfd-product-gate-input-v1.schema.json",
+    "schemas/dev-delivery-authority-v2.schema.json",
+    "schemas/v4-compatibility-facts-v1.schema.json",
+    "schemas/v4-publication-rehearsal-capsule-v1.schema.json",
+    "schemas/v4-adopter-delivery-v1.schema.json",
+    "schemas/release-tail-capabilities-v1.schema.json",
     "buildchain-contract.json",
     "kfd-claims.json",
     "product-mechanism.json",