@kungfu-tech/buildchain 4.0.1-alpha.3 → 4.0.1-alpha.5

package/architecture/v4-next-development-parity.json

@@ -0,0 +1,192 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-next-development-parity",
+  "sourceAuthority": {
+    "branch": "dev/v3/v3.0",
+    "capturedCommit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "transitionCommit": "d165c2f733859dd2e46a2d1fdb25b242e2fc2567",
+    "controllerCommit": "63f494d4b92c0bd01ffb454c6fce23d0692148fb",
+    "selfDogfoodCommit": "518bb4cb4706db1854e5a5b39bf7198f2aaa1d1d"
+  },
+  "target": {
+    "branch": "dev/v4/v4.0",
+    "implementationBaseline": "36ad1dc03a9d2785aca938a7a369e4b96707fa32",
+    "publicConsumerCaller": ".github/workflows/v4-public-consumer-dogfood.yml",
+    "publicConsumerReusable": "kungfu-systems/buildchain/.github/workflows/v4-stage-capsule-canary.yml@v4-alpha"
+  },
+  "earlierContinuityDelta": {
+    "assignment": "2026-08-11-buildchain-next-development-version-continuity",
+    "disposition": "no-current-reusable-implementation-evidence",
+    "requiredDelta": "implement and re-prove the exact v3 semantics against the live protected v4 head"
+  },
+  "allowedDispositions": [
+    "implemented",
+    "superseded-equivalent",
+    "missing-before-closeout"
+  ],
+  "invariants": [
+    {
+      "id": "ND-01",
+      "claim": "The exact v3 planner, controller, projection and recovery authorities are mapped to current v4 files rather than inferred from the earlier continuity family.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "architecture/decisions/0002-next-development-transition.md",
+        "packages/core/next-development-transition.js",
+        "packages/core/next-development-controller.js",
+        "packages/core/next-development-projection.js"
+      ],
+      "verificationEvidence": ["tests/v4-next-development-parity.test.mjs"]
+    },
+    {
+      "id": "ND-02",
+      "claim": "Semver automatic planning deterministically advances only the Alpha sequence on the same patch and rejects operator-selected targets.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-transition.js",
+        "contracts/next-development-transition-v1.schema.json"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "contracts/fixtures/next-development-transition-v1/semver-auto-planned.json"
+      ]
+    },
+    {
+      "id": "ND-03",
+      "claim": "Anchored manual planning remains waiting until reviewed target and exact read-only manifest digest authority are both supplied.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-transition.js",
+        "scripts/next-development-transition.mjs"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "tests/next-development-controller.test.mjs",
+        "contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json"
+      ]
+    },
+    {
+      "id": "ND-04",
+      "claim": "Atomic create-if-absent and compare-and-swap checkpoints create one child per completed Alpha and recover idempotent materialization after runner loss.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-controller.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-controller.test.mjs",
+        "tests/next-development-self-dogfood.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-05",
+      "claim": "Protected Dev movement supersedes only stale preparation, retries from current readback and preserves completed Alpha identity without rebuilding it.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-controller.js",
+        "actions/promote-buildchain-ref/internal/promote-alpha-channel.js",
+        "actions/promote-buildchain-ref/lib.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-controller.test.mjs",
+        "tests/promote-buildchain-ref-governance.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-06",
+      "claim": "A protected version pull request and exact source, derived, ancestry and target-version readback are mandatory before verified state.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-controller.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-controller.test.mjs",
+        "tests/next-development-self-dogfood.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-07",
+      "claim": "Completed candidates and Alpha publication remain immutable and terminal; next-development exposes no tag, release, package, candidate or ref-update effect.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-transition.js",
+        "packages/core/next-development-controller.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "tests/next-development-self-dogfood.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-08",
+      "claim": "Candidate Patrol ignores pure version preparation and requires current exact blob reservation readback before later product candidate settlement.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-candidate-reservation.js",
+        "packages/core/channel-promotion-baseline.js",
+        "scripts/dev-alpha-candidate-patrol.mjs"
+      ],
+      "verificationEvidence": ["tests/dev-alpha-candidate-patrol.test.mjs"]
+    },
+    {
+      "id": "ND-09",
+      "claim": "The public CLI, Node exports, schemas, init and Paper templates, generated Agent guidance and manual all project one contract source.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "bin/buildchain.mjs",
+        "bin/internal/command-registry.mjs",
+        "scripts/next-development-transition.mjs",
+        "package.json",
+        "contracts/next-development-request-v1.schema.json",
+        "contracts/next-development-transition-v1.schema.json",
+        "scripts/init-repo.mjs",
+        "packages/core/paper.js",
+        "packages/core/paper-agent-entry.js",
+        "packages/core/next-development-projection.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "tests/v4-next-development-parity.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-10",
+      "claim": "V4 recovery proof runs as pure tests through the standard lifecycle.verify reached by the exact thin public consumer caller, while existing hosted dual-channel evidence keeps public v4-alpha and v4 routes.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        ".github/workflows/v4-public-consumer-dogfood.yml",
+        ".github/workflows/buildchain-alpha-self-dogfood.yml",
+        ".buildchain/buildchain.toml",
+        "scripts/next-development-self-dogfood.mjs",
+        "scripts/next-development-self-dogfood-harness.mjs"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-self-dogfood.test.mjs",
+        "tests/v4-public-dogfood-contract.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-11",
+      "claim": "Architecture inventory, capability metadata, generated references and site facts expose the current v4 next-development contract without stale generated output.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "architecture/v3-core-mechanism-inventory.json",
+        "architecture/v4-capability-state-machine-manifest.json",
+        "scripts/check-inventory.mjs",
+        "scripts/site-capability-metadata.mjs",
+        "scripts/generate-site-bundle.mjs"
+      ],
+      "verificationEvidence": [
+        "tests/core-mechanism-inventory.test.mjs",
+        "tests/v4-architecture.test.mjs",
+        "tests/v4-next-development-parity.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-12",
+      "claim": "Independent review, protected merge into dev/v4/v4.0 and exact post-merge containment and readback are required external closeout evidence and cannot be inferred from local green tests.",
+      "disposition": "missing-before-closeout",
+      "implementationEvidence": [],
+      "verificationEvidence": []
+    }
+  ],
+  "matrixRoot": "sha256:0f0d69dd338cad33dc61870675cbedb8664e019e403f73a1ddcf8471d69df405"
+}

package/architecture/v4-release-train-parity.json

@@ -26,6 +26,7 @@
     {
       "path": "tests/dev-alpha-candidate-patrol.test.mjs",
       "count": 37,
+      "targetAdditionalCount": 4,
       "result": "exact"
     },
     {

package/architecture/v4-tail-reseal-parity.json

@@ -0,0 +1,150 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-tail-reseal-parity",
+  "sourceAuthority": {
+    "branch": "dev/v3/v3.0",
+    "capturedCommit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "implementation": "scripts/release-candidate-tail-reseal.mjs",
+    "workflow": ".github/workflows/.build.yml",
+    "tests": "tests/release-candidate-tail-reseal.test.mjs"
+  },
+  "target": {
+    "branch": "dev/v4/v4.0",
+    "publicReusableWorkflow": "kungfu-systems/buildchain/.github/workflows/v4-tail-reseal.yml@v4-alpha",
+    "requestSchema": "contracts/v4-tail-reseal-v1.schema.json",
+    "planner": "packages/core/v4-tail-reseal.js",
+    "admission": "packages/core/v4-tail-reseal-github.js",
+    "receipt": "packages/core/v4-tail-reseal-receipt.js",
+    "cli": "buildchain tail-reseal"
+  },
+  "authority": {
+    "productionAuthority": "v4",
+    "stageCapsuleEffectAuthority": "none",
+    "signingAuthority": "explicit-live-release-tail",
+    "credentialAuthority": "lease-bound-secret-island",
+    "runtimePersistence": "floating-only",
+    "v3BehaviorChange": false
+  },
+  "allowedDispositions": [
+    "implemented",
+    "superseded-equivalent",
+    "missing-before-closeout"
+  ],
+  "invariants": [
+    {
+      "id": "TR-01",
+      "claim": "The exact captured v3 retained-candidate script, workflow and tests are rooted as parity authority.",
+      "disposition": "implemented",
+      "implementationEvidence": ["architecture/v4-tail-reseal-parity.json"],
+      "verificationEvidence": ["tests/v4-tail-reseal-parity.test.mjs"]
+    },
+    {
+      "id": "TR-02",
+      "claim": "One exact failed run binds four byte-addressed platform payloads, manifests, archives and Stage Capsules.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "contracts/v4-tail-reseal-v1.schema.json",
+        "packages/core/v4-tail-reseal-github.js"
+      ],
+      "verificationEvidence": [
+        "contracts/fixtures/v4-tail-reseal-v1/valid.json",
+        "tests/v4-tail-reseal.test.mjs"
+      ]
+    },
+    {
+      "id": "TR-03",
+      "claim": "A fresh runner downloads retained archives and verifies every manifest and payload byte before any tail effect.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "scripts/v4-tail-reseal.mjs",
+        ".github/workflows/v4-tail-reseal.yml"
+      ],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-04",
+      "claim": "Install, build, verify, package and platform-matrix remain explicitly skipped under effect-free Stage Capsule reuse.",
+      "disposition": "implemented",
+      "implementationEvidence": ["packages/core/v4-tail-reseal.js"],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-05",
+      "claim": "Only macOS signing-finalization may change bytes; every other platform stays byte-identical and provider-effect-free.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/v4-tail-reseal-receipt.js",
+        "scripts/v4-tail-reseal.mjs"
+      ],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-06",
+      "claim": "The macOS effect is fenced by exact Warrant lineage, credential authority, release-tail transaction and idempotency key.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/v4-tail-reseal.js",
+        ".github/workflows/v4-tail-reseal.yml"
+      ],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-07",
+      "claim": "Source, platform, archive, manifest, signer, Warrant, credential, retention and prior-failure drift fails closed.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/v4-tail-reseal.js",
+        "packages/core/v4-tail-reseal-github.js"
+      ],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-08",
+      "claim": "Expired retention or credential leases invalidate reuse and require a normal candidate rebuild.",
+      "disposition": "implemented",
+      "implementationEvidence": ["packages/core/v4-tail-reseal.js"],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-09",
+      "claim": "Successful reseal emits the ordinary v4 Release Candidate Passport with its original floating-consumer policy receipt.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/v4-tail-reseal-receipt.js",
+        ".github/workflows/v4-tail-reseal.yml"
+      ],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-10",
+      "claim": "The reusable workflow resolves job.workflow_sha as runtime evidence and exposes no persisted SHA, variable indirection or private self-dogfood path.",
+      "disposition": "implemented",
+      "implementationEvidence": [".github/workflows/v4-tail-reseal.yml"],
+      "verificationEvidence": ["tests/v4-tail-reseal-parity.test.mjs"]
+    },
+    {
+      "id": "TR-11",
+      "claim": "Node API, CLI, schema, deterministic fixture, generated references and macOS bounded qualification project one contract.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "package.json",
+        "bin/buildchain.mjs",
+        "scripts/v4-tail-reseal.mjs",
+        "docs/v4-tail-reseal.md"
+      ],
+      "verificationEvidence": [
+        "tests/command-registry.test.mjs",
+        "tests/v4-tail-reseal.test.mjs",
+        "tests/v4-tail-reseal-parity.test.mjs"
+      ]
+    },
+    {
+      "id": "TR-12",
+      "claim": "Independent review, protected merge and exact post-merge public readback remain external closeout evidence.",
+      "disposition": "missing-before-closeout",
+      "implementationEvidence": [],
+      "verificationEvidence": []
+    }
+  ],
+  "matrixRoot": "sha256:126ec51c12a9dedeb9b9e187202781e3895856af1927b399ba3902f3940750ad"
+}

package/bin/buildchain.mjs

@@ -11,6 +11,7 @@ import { runLifecycle } from "../scripts/run-lifecycle-core.mjs";
 import { runReleasePropagationCli } from "../scripts/release-propagation.mjs";
 import { runReleaseGovernanceCli } from "../scripts/reconcile-release-governance.mjs";
 import { runReleaseTailCli } from "../scripts/release-tail.mjs";
+import { runV4TailResealCli } from "../scripts/v4-tail-reseal.mjs";
 import { runPublicationArtifactCli } from "../scripts/publication-artifact.mjs";
 import { runPublicationPackageCli } from "../scripts/publication-package.mjs";
 import { runPublicationReproducibilityCli } from "../scripts/publication-reproducibility.mjs";
@@ -109,6 +110,7 @@ import {
   dispatchTrustReleaseCommand,
 } from "./internal/trust-release-cli.mjs";
 import { dispatchRegisteredCommand } from "./internal/command-registry.mjs";
+import { runCompatibilityFactsCli } from "./internal/compatibility-facts-cli.mjs";
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const embeddedPackageVersion = process.env.BUILDCHAIN_EMBEDDED_PACKAGE_VERSION || "";
@@ -987,6 +989,9 @@ async function runKfdCli(args = []) {
 async function runBuildFactsCli(args = []) {
   const [subcommand = "", ...factArgs] = args;
   const cwd = path.resolve(readFlag(factArgs, "cwd", process.cwd()));
+  if (subcommand === "compatibility") {
+    return runCompatibilityFactsCli({ args: factArgs, cwd, packageRoot: root });
+  }
   if (subcommand === "module") {
     const fact = collectModuleBuildFacts({
       cwd,
@@ -1060,7 +1065,7 @@ async function runBuildFactsCli(args = []) {
     }
     return;
   }
-  throw new Error("usage: buildchain facts <module|aggregate|verify> ...");
+  throw new Error("usage: buildchain facts <module|aggregate|verify|compatibility> ...");
 }
 
 function appendJsonLine(filePath, value) {
@@ -1673,6 +1678,14 @@ async function handleReleaseTailCommand(args) {
   runReleaseTailCli(args);
 }
 
+async function handleTailResealCommand(args) {
+  await runV4TailResealCli(args);
+}
+
+async function handleNextDevelopmentCommand(args) {
+  runScript("next-development-transition.mjs", args);
+}
+
 async function handleGitHubGovernanceCommand(args) {
     runScript("reconcile-github-governance.mjs", args);
     return;
@@ -1769,6 +1782,8 @@ const BUILDCHAIN_COMMAND_HANDLERS = Object.freeze({
   "release-propagation": handleReleasePropagationCommand,
   "release-governance": handleReleaseGovernanceCommand,
   "release-tail": handleReleaseTailCommand,
+  "tail-reseal": handleTailResealCommand,
+  "next-development": handleNextDevelopmentCommand,
   "github-governance": handleGitHubGovernanceCommand,
   "badges": handleBadgesCommand,
   "homebrew": handleHomebrewCommand,

package/bin/internal/command-registry.mjs

@@ -33,6 +33,8 @@ const BUILDCHAIN_COMMAND_REGISTRY = Object.freeze([
   { id: "release-propagation", aliases: [] },
   { id: "release-governance", aliases: [] },
   { id: "release-tail", aliases: [] },
+  { id: "tail-reseal", aliases: [] },
+  { id: "next-development", aliases: [] },
   { id: "github-governance", aliases: [] },
   { id: "badges", aliases: [] },
   { id: "homebrew", aliases: [] },

package/bin/internal/compatibility-facts-cli.mjs

@@ -0,0 +1,101 @@
+import path from "node:path";
+
+import {
+  createBuildchainCompatibilityFactRegistry,
+  verifyBuildchainCompatibilityFactRegistry,
+} from "../../packages/core/buildchain-compatibility-fact.js";
+import {
+  createBuildchainCompatibilityPathQuery,
+  createBuildchainCompatibilityProofRegistry,
+  verifyBuildchainCompatibilityPath,
+} from "../../packages/core/buildchain-compatibility-authority.js";
+import { createBuildchainContractWorld } from "../../packages/core/buildchain-contract.js";
+import {
+  printJson,
+  readBooleanFlag,
+  readFlag,
+  readJsonInput,
+  writeJsonFile,
+} from "./cli-options.mjs";
+
+export function runCompatibilityFactsCli({ args, cwd, packageRoot }) {
+  const [action = "project", ...factArgs] = args;
+  const registryInput = readFlag(factArgs, "registry", "");
+  const registry = registryInput
+    ? readJsonInput(registryInput, {
+        cwd,
+        label: "compatibility Fact registry",
+      })
+    : createBuildchainCompatibilityFactRegistry();
+  if (action === "project") {
+    const world = createBuildchainContractWorld({ root: packageRoot });
+    const projection = createBuildchainCompatibilityProofRegistry({
+      proofs: registry.legacyProofs,
+      surfaces: world.surfaces,
+      majorLine: world.majorLine,
+    });
+    const result = {
+      schema: "kungfu.buildchain.compatibility-fact-projection/v1",
+      authority: "Fact-registry-only",
+      grantsReleaseAuthority: false,
+      registry,
+      projections: projection.projections,
+    };
+    const output = readFlag(factArgs, "output", "");
+    if (output) writeJsonFile(path.resolve(cwd, output), result);
+    if (readBooleanFlag(factArgs, "json") || !output) printJson(result);
+    else
+      process.stdout.write(
+        `buildchain facts compatibility project: wrote ${output}\n`,
+      );
+    return;
+  }
+  if (action === "verify") {
+    const result = verifyBuildchainCompatibilityFactRegistry(registry);
+    printJson(result);
+    if (!result.ok) process.exitCode = 1;
+    return;
+  }
+  if (action === "query") {
+    const queryInput = readFlag(factArgs, "query", "");
+    if (!queryInput) {
+      throw new Error(
+        "usage: buildchain facts compatibility query --query <json-or-path> [--registry <json-or-path>]",
+      );
+    }
+    const query = readJsonInput(queryInput, {
+      cwd,
+      label: "compatibility Fact query",
+    });
+    const receipt = verifyBuildchainCompatibilityPath({ registry, query });
+    printJson(receipt);
+    if (receipt.record.status !== "accepted") process.exitCode = 1;
+    return;
+  }
+  if (action === "query-template") {
+    const factRoot = readFlag(factArgs, "fact-root", "");
+    const fact = registry.facts.find((entry) => entry.factRoot === factRoot);
+    if (!fact) {
+      throw new Error(
+        "buildchain facts compatibility query-template requires a current --fact-root",
+      );
+    }
+    printJson(
+      createBuildchainCompatibilityPathQuery({
+        registry,
+        queryId: readFlag(
+          factArgs,
+          "query-id",
+          `buildchain:compatibility:${fact.factId}`,
+        ),
+        sourceRoot: fact.sourceRoot,
+        targetRoot: fact.targetRoot,
+        relationPathRoots: [fact.factRoot],
+      }),
+    );
+    return;
+  }
+  throw new Error(
+    "usage: buildchain facts compatibility <project|verify|query|query-template> ...",
+  );
+}

package/contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json

@@ -0,0 +1,47 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-next-development-transition/v1",
+  "idempotencyKey": "sha256:cf805c1933cbc3e571c21af3ae030139bebafb08e2436b3c479c411b2cd2d22c",
+  "repository": "example/widget",
+  "completedAlpha": {
+    "outcome": "succeeded",
+    "version": "1.4.2-alpha.7",
+    "exactTag": "v1.4.2-alpha.7",
+    "releaseSha": "1111111111111111111111111111111111111111",
+    "treeSha": "2222222222222222222222222222222222222222",
+    "publicationRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+    "completedAt": "2026-08-11T01:00:00.000Z"
+  },
+  "completedAlphaRoot": "sha256:18e65c63aba0df789e0b0e68903733825d87e292b82bcb8fd3793ca45dca6266",
+  "alphaOutcome": "preserved-success",
+  "model": {
+    "strategy": "anchored",
+    "next": "manual"
+  },
+  "target": {
+    "version": null,
+    "anchor": null
+  },
+  "declaredPaths": ["package.json", "release.json"],
+  "adapter": {
+    "environmentVariable": "BUILDCHAIN_VERSION",
+    "sourcePaths": ["package.json"],
+    "derivedPaths": [],
+    "allowedChangePaths": ["package.json"],
+    "readOnlyPaths": ["release.json"],
+    "derivationStage": null,
+    "verificationStage": "lifecycle.verify"
+  },
+  "effectBounds": {
+    "allowedPaths": ["package.json"],
+    "refUpdates": [],
+    "forbiddenRefNamespaces": ["refs/heads/alpha/", "refs/tags/"]
+  },
+  "state": {
+    "status": "waiting-anchor",
+    "generation": 1,
+    "stateRoot": "sha256:4bbca86f960a7c1a10d76d01736422e3129f3f16d3e69e0800a0829201122dd4"
+  },
+  "materialization": null,
+  "transitions": []
+}

package/contracts/fixtures/next-development-transition-v1/semver-auto-planned.json

@@ -0,0 +1,47 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-next-development-transition/v1",
+  "idempotencyKey": "sha256:37ee52799584a989b059db060b7ce062feb56fbeff452033245046fdf3b21e78",
+  "repository": "example/widget",
+  "completedAlpha": {
+    "outcome": "succeeded",
+    "version": "1.4.2-alpha.7",
+    "exactTag": "v1.4.2-alpha.7",
+    "releaseSha": "1111111111111111111111111111111111111111",
+    "treeSha": "2222222222222222222222222222222222222222",
+    "publicationRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+    "completedAt": "2026-08-11T01:00:00.000Z"
+  },
+  "completedAlphaRoot": "sha256:18e65c63aba0df789e0b0e68903733825d87e292b82bcb8fd3793ca45dca6266",
+  "alphaOutcome": "preserved-success",
+  "model": {
+    "strategy": "semver",
+    "next": "auto"
+  },
+  "target": {
+    "version": "1.4.2-alpha.8",
+    "anchor": null
+  },
+  "declaredPaths": ["package.json"],
+  "adapter": {
+    "environmentVariable": "BUILDCHAIN_VERSION",
+    "sourcePaths": ["package.json"],
+    "derivedPaths": [],
+    "allowedChangePaths": ["package.json"],
+    "readOnlyPaths": [],
+    "derivationStage": null,
+    "verificationStage": "lifecycle.verify"
+  },
+  "effectBounds": {
+    "allowedPaths": ["package.json"],
+    "refUpdates": [],
+    "forbiddenRefNamespaces": ["refs/heads/alpha/", "refs/tags/"]
+  },
+  "state": {
+    "status": "planned",
+    "generation": 1,
+    "stateRoot": "sha256:4ef8ac1ff07cb14633994625e65a340acb3130ae56bbc88ee81504f09df3fa0f"
+  },
+  "materialization": null,
+  "transitions": []
+}

package/contracts/fixtures/next-development-transition-v1/version-model-cases.json

@@ -0,0 +1,40 @@
+{
+  "contract": "kungfu-buildchain-next-development-version-model-fixtures/v1",
+  "positive": [
+    {
+      "name": "semver-auto",
+      "model": { "strategy": "semver", "next": "auto" }
+    },
+    {
+      "name": "anchored-manual",
+      "model": { "strategy": "anchored", "next": "manual" }
+    }
+  ],
+  "negative": [
+    {
+      "name": "semver-manual",
+      "model": { "strategy": "semver", "next": "manual" },
+      "error": "version model must be semver/auto or anchored/manual"
+    },
+    {
+      "name": "anchored-auto",
+      "model": { "strategy": "anchored", "next": "auto" },
+      "error": "version model must be semver/auto or anchored/manual"
+    },
+    {
+      "name": "semver-auto-with-anchor",
+      "model": { "strategy": "semver", "next": "auto" },
+      "anchor": {
+        "manifestPath": "release.json",
+        "manifestRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
+      },
+      "error": "semver/auto must not declare an anchor"
+    },
+    {
+      "name": "anchored-manual-target-without-anchor",
+      "model": { "strategy": "anchored", "next": "manual" },
+      "targetVersion": "22.1.0",
+      "error": "anchored/manual targetVersion requires an anchor"
+    }
+  ]
+}