@kungfu-tech/buildchain 4.0.1-alpha.3 → 4.0.1-alpha.5

package/contracts/v4-compatibility-facts-v1.schema.json

@@ -0,0 +1,230 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://buildchain.libkungfu.dev/schemas/v4-compatibility-facts-v1.schema.json",
+  "title": "Buildchain v4 compatibility Facts",
+  "description": "Closed public shapes for directional, Cut-bound compatibility Facts, explicit path queries, and rooted receipts.",
+  "oneOf": [
+    { "$ref": "#/$defs/fact" },
+    { "$ref": "#/$defs/registry" },
+    { "$ref": "#/$defs/query" },
+    { "$ref": "#/$defs/receiptEntry" }
+  ],
+  "$defs": {
+    "root": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "entry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["root", "record"],
+      "properties": {
+        "root": { "$ref": "#/$defs/root" },
+        "record": { "type": "object" }
+      }
+    },
+    "proof": {
+      "type": "object",
+      "required": [
+        "schema",
+        "proofId",
+        "predicate",
+        "direction",
+        "operation",
+        "source",
+        "target",
+        "scope",
+        "scopeRoot",
+        "evidence",
+        "evidenceRoot",
+        "authority",
+        "authorityRoot",
+        "cut",
+        "cutRoot",
+        "proofRoot"
+      ],
+      "properties": {
+        "schema": { "const": "kungfu.buildchain.compatibility-proof/v1" },
+        "proofId": { "type": "string", "minLength": 1 },
+        "predicate": { "const": "compatible-breaking-digest" },
+        "direction": { "const": "source-to-target" },
+        "operation": { "const": "accept-contract-lock" },
+        "source": { "type": "object" },
+        "target": { "type": "object" },
+        "scope": { "type": "object" },
+        "scopeRoot": { "$ref": "#/$defs/root" },
+        "evidence": { "type": "object" },
+        "evidenceRoot": { "$ref": "#/$defs/root" },
+        "authority": { "type": "object" },
+        "authorityRoot": { "$ref": "#/$defs/root" },
+        "cut": { "type": "object" },
+        "cutRoot": { "$ref": "#/$defs/root" },
+        "proofRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "fact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema",
+        "factId",
+        "factRoot",
+        "sourceRoot",
+        "targetRoot",
+        "predicate",
+        "relation",
+        "proof"
+      ],
+      "properties": {
+        "schema": { "const": "kungfu.buildchain.compatibility-fact/v1" },
+        "factId": { "type": "string", "minLength": 1 },
+        "factRoot": { "$ref": "#/$defs/root" },
+        "sourceRoot": { "$ref": "#/$defs/root" },
+        "targetRoot": { "$ref": "#/$defs/root" },
+        "predicate": { "$ref": "#/$defs/entry" },
+        "relation": { "$ref": "#/$defs/entry" },
+        "proof": { "$ref": "#/$defs/proof" }
+      }
+    },
+    "registry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema",
+        "rootProtocol",
+        "currentCutRoot",
+        "predicateRoots",
+        "factRoots",
+        "supersessionRoots",
+        "revocationRoots",
+        "legacyProofRoots",
+        "temporalBundleRoot",
+        "facts",
+        "legacyProofs",
+        "currentCut",
+        "temporalBundle",
+        "registryRoot"
+      ],
+      "properties": {
+        "schema": {
+          "const": "kungfu.buildchain.compatibility-fact-registry/v1"
+        },
+        "rootProtocol": { "const": "kungfu.fact-root.canonical/v2" },
+        "currentCutRoot": { "$ref": "#/$defs/root" },
+        "predicateRoots": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/root" },
+          "uniqueItems": true
+        },
+        "factRoots": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/root" },
+          "uniqueItems": true
+        },
+        "supersessionRoots": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/root" },
+          "uniqueItems": true
+        },
+        "revocationRoots": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/root" },
+          "uniqueItems": true
+        },
+        "legacyProofRoots": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/root" },
+          "uniqueItems": true
+        },
+        "temporalBundleRoot": { "$ref": "#/$defs/root" },
+        "facts": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/fact" },
+          "minItems": 1
+        },
+        "legacyProofs": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/proof" }
+        },
+        "currentCut": { "type": "object" },
+        "temporalBundle": { "type": "object" },
+        "registryRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "query": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema",
+        "queryId",
+        "operation",
+        "predicateRoot",
+        "sourceRoot",
+        "targetRoot",
+        "cutRoot",
+        "relationPathRoots",
+        "requiredAuthorityRoot",
+        "maxDepth"
+      ],
+      "properties": {
+        "schema": { "const": "kungfu.fact.temporal-path-query/v1" },
+        "queryId": { "type": "string", "minLength": 1 },
+        "operation": { "const": "accept-contract-lock" },
+        "predicateRoot": { "$ref": "#/$defs/root" },
+        "sourceRoot": { "$ref": "#/$defs/root" },
+        "targetRoot": { "$ref": "#/$defs/root" },
+        "cutRoot": { "$ref": "#/$defs/root" },
+        "relationPathRoots": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/root" },
+          "uniqueItems": true
+        },
+        "requiredAuthorityRoot": { "$ref": "#/$defs/root" },
+        "maxDepth": { "type": "integer", "minimum": 1, "maximum": 32 }
+      }
+    },
+    "receiptEntry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["root", "record"],
+      "properties": {
+        "root": { "$ref": "#/$defs/root" },
+        "record": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "schema",
+            "queryRoot",
+            "status",
+            "failureCode",
+            "cutRoot",
+            "relationPathRoots",
+            "authorityProofRoots",
+            "omissionRoots"
+          ],
+          "properties": {
+            "schema": { "const": "kungfu.fact.temporal-path-receipt/v1" },
+            "queryRoot": { "$ref": "#/$defs/root" },
+            "status": { "enum": ["accepted", "rejected"] },
+            "failureCode": { "type": "string" },
+            "cutRoot": { "$ref": "#/$defs/root" },
+            "relationPathRoots": {
+              "type": "array",
+              "items": { "$ref": "#/$defs/root" }
+            },
+            "authorityProofRoots": {
+              "type": "array",
+              "items": { "$ref": "#/$defs/root" },
+              "uniqueItems": true
+            },
+            "omissionRoots": {
+              "type": "array",
+              "items": { "$ref": "#/$defs/root" },
+              "uniqueItems": true
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/contracts/v4-tail-reseal-v1.schema.json

@@ -0,0 +1,276 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://buildchain.libkungfu.dev/contracts/v4-tail-reseal-v1.schema.json",
+  "title": "Buildchain v4 retained-candidate tail reseal request",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "evaluatedAt",
+    "repository",
+    "source",
+    "target",
+    "runtime",
+    "warrant",
+    "retention",
+    "failure",
+    "stageResume",
+    "signing",
+    "releaseTail",
+    "platforms"
+  ],
+  "properties": {
+    "schema": {
+      "const": "kungfu-buildchain-v4-tail-reseal-request/v1"
+    },
+    "evaluatedAt": { "$ref": "#/$defs/clock" },
+    "repository": { "$ref": "#/$defs/text" },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "runId",
+        "runAttempt",
+        "sha",
+        "treeSha",
+        "sourceRoot",
+        "workflowFile",
+        "workflowName"
+      ],
+      "properties": {
+        "runId": { "$ref": "#/$defs/positiveInteger" },
+        "runAttempt": { "$ref": "#/$defs/positiveInteger" },
+        "sha": { "$ref": "#/$defs/sha" },
+        "treeSha": { "$ref": "#/$defs/sha" },
+        "sourceRoot": { "$ref": "#/$defs/root" },
+        "workflowFile": { "$ref": "#/$defs/text" },
+        "workflowName": { "$ref": "#/$defs/text" }
+      }
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["channel", "ref", "baseSha", "version"],
+      "properties": {
+        "channel": { "const": "alpha" },
+        "ref": { "const": "alpha/v4/v4.0" },
+        "baseSha": { "$ref": "#/$defs/sha" },
+        "version": { "type": "string", "pattern": "^4\\.0\\.0-alpha\\.[0-9]+$" }
+      }
+    },
+    "runtime": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "repository",
+        "ref",
+        "sha",
+        "contractRoot",
+        "consumerPolicyReceiptRoot"
+      ],
+      "properties": {
+        "repository": { "const": "kungfu-systems/buildchain" },
+        "ref": {
+          "type": "string",
+          "pattern": "^(v4-alpha|train/v4/v4\\.0/[A-Za-z0-9._/-]+)$"
+        },
+        "sha": { "$ref": "#/$defs/sha" },
+        "contractRoot": { "$ref": "#/$defs/root" },
+        "consumerPolicyReceiptRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "warrant": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "candidateId",
+        "generation",
+        "fencingToken",
+        "status",
+        "lineageRoot",
+        "qualificationRoot",
+        "stateReadbackRoot"
+      ],
+      "properties": {
+        "candidateId": { "$ref": "#/$defs/token" },
+        "generation": { "$ref": "#/$defs/positiveInteger" },
+        "fencingToken": { "$ref": "#/$defs/token" },
+        "status": { "const": "qualified" },
+        "lineageRoot": { "$ref": "#/$defs/root" },
+        "qualificationRoot": { "$ref": "#/$defs/root" },
+        "stateReadbackRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "retention": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "retainUntil", "policyRoot", "readbackRoot"],
+      "properties": {
+        "status": { "const": "retained" },
+        "retainUntil": { "$ref": "#/$defs/clock" },
+        "policyRoot": { "$ref": "#/$defs/root" },
+        "readbackRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "failure": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "platformId",
+        "stage",
+        "jobId",
+        "jobName",
+        "stepName",
+        "code",
+        "evidenceRoot"
+      ],
+      "properties": {
+        "platformId": { "const": "macos-arm64" },
+        "stage": { "const": "signing-finalization" },
+        "jobId": { "$ref": "#/$defs/positiveInteger" },
+        "jobName": { "const": "build / Finalize signed artifact macOS ARM64" },
+        "stepName": { "const": "Recompute manifest over final signed bytes" },
+        "code": { "$ref": "#/$defs/token" },
+        "evidenceRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "stageResume": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "planRoot",
+        "qualificationRoot",
+        "zeroEffectReuse",
+        "decisions"
+      ],
+      "properties": {
+        "planRoot": { "$ref": "#/$defs/root" },
+        "qualificationRoot": { "$ref": "#/$defs/root" },
+        "zeroEffectReuse": { "const": true },
+        "decisions": {
+          "type": "array",
+          "minItems": 16,
+          "maxItems": 16,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["stageKey", "decision", "capsuleRoot", "evidenceRoot"],
+            "properties": {
+              "stageKey": { "$ref": "#/$defs/token" },
+              "decision": { "const": "reuse" },
+              "capsuleRoot": { "$ref": "#/$defs/root" },
+              "evidenceRoot": { "$ref": "#/$defs/root" }
+            }
+          }
+        }
+      }
+    },
+    "signing": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "authorityRepository",
+        "authorityRunId",
+        "runtimeSha",
+        "requestRoot",
+        "delegationRoot",
+        "resultArtifact",
+        "resultArtifactRoot",
+        "credentialAuthorityId",
+        "credentialScopeRoot",
+        "credentialLeaseRoot",
+        "credentialExpiresAt",
+        "providerReadbackRoot"
+      ],
+      "properties": {
+        "authorityRepository": { "$ref": "#/$defs/text" },
+        "authorityRunId": { "$ref": "#/$defs/positiveInteger" },
+        "runtimeSha": { "$ref": "#/$defs/sha" },
+        "requestRoot": { "$ref": "#/$defs/root" },
+        "delegationRoot": { "$ref": "#/$defs/root" },
+        "resultArtifact": { "$ref": "#/$defs/text" },
+        "resultArtifactRoot": { "$ref": "#/$defs/root" },
+        "credentialAuthorityId": { "$ref": "#/$defs/token" },
+        "credentialScopeRoot": { "$ref": "#/$defs/root" },
+        "credentialLeaseRoot": { "$ref": "#/$defs/root" },
+        "credentialExpiresAt": { "$ref": "#/$defs/clock" },
+        "providerReadbackRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "releaseTail": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "declarationRoot",
+        "transactionRoot",
+        "operationRoot",
+        "idempotencyKey",
+        "providerReadbackRoot"
+      ],
+      "properties": {
+        "declarationRoot": { "$ref": "#/$defs/root" },
+        "transactionRoot": { "$ref": "#/$defs/root" },
+        "operationRoot": { "$ref": "#/$defs/root" },
+        "idempotencyKey": { "$ref": "#/$defs/token" },
+        "providerReadbackRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "platforms": {
+      "type": "array",
+      "minItems": 4,
+      "maxItems": 4,
+      "items": { "$ref": "#/$defs/platform" }
+    }
+  },
+  "$defs": {
+    "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "sha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+    "clock": {
+      "type": "string",
+      "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\\.[0-9]{3}Z$"
+    },
+    "text": { "type": "string", "minLength": 1 },
+    "token": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*$"
+    },
+    "positiveInteger": { "type": "integer", "minimum": 1 },
+    "platform": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "name",
+        "runner",
+        "artifactName",
+        "artifactRoot",
+        "artifactArchiveRoot",
+        "manifestArtifactName",
+        "manifestRoot",
+        "manifestArchiveRoot",
+        "artifactPaths",
+        "capsuleRoot"
+      ],
+      "properties": {
+        "id": {
+          "enum": ["linux-arm64", "linux-x64", "macos-arm64", "windows-x64"]
+        },
+        "name": { "$ref": "#/$defs/text" },
+        "runner": { "$ref": "#/$defs/text" },
+        "artifactName": { "$ref": "#/$defs/text" },
+        "artifactRoot": { "$ref": "#/$defs/root" },
+        "artifactArchiveRoot": { "$ref": "#/$defs/root" },
+        "manifestArtifactName": { "$ref": "#/$defs/text" },
+        "manifestRoot": { "$ref": "#/$defs/root" },
+        "manifestArchiveRoot": { "$ref": "#/$defs/root" },
+        "artifactPaths": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/text" },
+          "uniqueItems": true
+        },
+        "capsuleRoot": { "$ref": "#/$defs/root" }
+      }
+    }
+  }
+}

package/dist/site/agent-index.json

@@ -20,6 +20,7 @@
     "schemas/kfd-agent-hub-adoption.schema.json",
     "schemas/kfd-product-gate-input-v1.schema.json",
     "schemas/dev-delivery-authority-v2.schema.json",
+    "schemas/v4-compatibility-facts-v1.schema.json",
     "buildchain-contract.json",
     "kfd-upstream-aggregate.json",
     "kfd-claims.json",

package/dist/site/artifact-schemas.json

@@ -8,6 +8,7 @@
     "schemas/kfd-agent-hub-adoption.schema.json",
     "schemas/kfd-product-gate-input-v1.schema.json",
     "schemas/dev-delivery-authority-v2.schema.json",
+    "schemas/v4-compatibility-facts-v1.schema.json",
     "kfd-support.json",
     "artifact-evidence.json",
     "product-mechanism.json",
@@ -43,6 +44,7 @@
     "schemas/kfd-agent-hub-adoption.schema.json",
     "schemas/kfd-product-gate-input-v1.schema.json",
     "schemas/dev-delivery-authority-v2.schema.json",
+    "schemas/v4-compatibility-facts-v1.schema.json",
     "buildchain-contract.json",
     "kfd-claims.json",
     "product-mechanism.json",