@kungfu-tech/buildchain 4.0.1-alpha.5 → 4.0.1-alpha.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (79) hide show
  1. package/actions/release-tail/README.md +8 -0
  2. package/architecture/internal-capabilities.json +65 -5
  3. package/architecture/maintainability-policy.json +22 -16
  4. package/architecture/release-tail-contract-inventory.json +5 -2
  5. package/architecture/v4-adopter-delivery-parity.json +32 -5
  6. package/architecture/v4-publication-rehearsal-parity.json +84 -0
  7. package/bin/buildchain.mjs +7 -1
  8. package/bin/internal/adopter-delivery-cli.mjs +70 -0
  9. package/bin/internal/command-registry.mjs +1 -0
  10. package/contracts/fixtures/v4-adopter-delivery-v1/archive-template.json +19 -0
  11. package/contracts/fixtures/v4-adopter-delivery-v1/bootstrap-positive.json +93 -0
  12. package/contracts/fixtures/v4-adopter-delivery-v1/gate-positive.json +29 -0
  13. package/contracts/fixtures/v4-adopter-delivery-v1/gate-unknown-selector.json +26 -0
  14. package/contracts/fixtures/v4-adopter-delivery-v1/offline-vectors.json +50 -0
  15. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/artifacts/product.bin +1 -0
  16. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/config/buildchain.toml +5 -0
  17. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/release-activation.json +1 -0
  18. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/signed-channel.json +1 -0
  19. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/evidence/qualification.json +1 -0
  20. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/candidate.json +5 -0
  21. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/release-passport.json +1 -0
  22. package/contracts/fixtures/v4-publication-rehearsal-v1/capsule.json +707 -0
  23. package/contracts/fixtures/v4-publication-rehearsal-v1/offline-vectors.json +27 -0
  24. package/contracts/v4-adopter-delivery-v1.schema.json +81 -0
  25. package/contracts/v4-publication-rehearsal-capsule-v1.schema.json +233 -0
  26. package/dist/site/agent-index.json +3 -0
  27. package/dist/site/artifact-schemas.json +6 -0
  28. package/dist/site/buildchain-contract.json +14 -14
  29. package/dist/site/buildchain-site.json +219 -22
  30. package/dist/site/capability-registry.json +10 -9
  31. package/dist/site/cli-registry.json +53 -1
  32. package/dist/site/kfd-claims.json +253 -14
  33. package/dist/site/kfd-upstream-aggregate.json +1 -1
  34. package/dist/site/manual-registry.json +20 -5
  35. package/dist/site/node-api-registry.json +11501 -9312
  36. package/dist/site/page-registry.json +202 -13
  37. package/dist/site/public-surface-audit.json +195 -11
  38. package/dist/site/publication-authority-registry.json +17 -4
  39. package/dist/site/publication-registry.json +4 -4
  40. package/dist/site/release-provenance.json +14 -0
  41. package/dist/site/schemas/release-tail-capabilities-v1.schema.json +199 -0
  42. package/dist/site/schemas/v4-adopter-delivery-v1.schema.json +81 -0
  43. package/dist/site/schemas/v4-publication-rehearsal-capsule-v1.schema.json +233 -0
  44. package/dist/site/site-manifest.json +17 -9
  45. package/dist/site/workflow-registry.json +89 -8
  46. package/docs/MAP.md +3 -1
  47. package/docs/cli-reference.md +68 -0
  48. package/docs/cli.md +8 -0
  49. package/docs/node-api-reference.md +198 -51
  50. package/docs/release-tail-provider-plane.md +30 -0
  51. package/docs/v4-adopter-delivery.md +133 -0
  52. package/docs/v4-publication-rehearsal.md +130 -0
  53. package/package.json +17 -3
  54. package/packages/core/adopter-delivery-passport.js +259 -0
  55. package/packages/core/adopter-delivery-vectors.js +158 -0
  56. package/packages/core/adopter-delivery-vectors.json +77 -0
  57. package/packages/core/buildchain-agent-manuals.js +1 -0
  58. package/packages/core/buildchain-config.js +84 -0
  59. package/packages/core/buildchain-delivery-bootstrap.js +240 -0
  60. package/packages/core/buildchain-delivery-infrastructure.js +164 -0
  61. package/packages/core/buildchain-delivery-self-dogfood.js +395 -0
  62. package/packages/core/legacy-kfd-adopter-driver.js +167 -0
  63. package/packages/core/published-delivery-authority.js +266 -0
  64. package/packages/core/release-passport.js +26 -8
  65. package/packages/core/v4-adopter-delivery-parity.js +3 -3
  66. package/packages/core/v4-adopter-delivery.js +359 -0
  67. package/packages/core/v4-publication-rehearsal-capsule.js +468 -0
  68. package/packages/core/v4-publication-rehearsal-provider-bindings.js +212 -0
  69. package/packages/core/v4-publication-rehearsal.js +481 -0
  70. package/scripts/buildchain-cli-help.mjs +10 -0
  71. package/scripts/check-inventory.mjs +3 -3
  72. package/scripts/dev-delivery-source-proof-replay.mjs +153 -0
  73. package/scripts/dev-delivery-source-proof-reuse.mjs +13 -97
  74. package/scripts/generate-release-candidate-passport.mjs +152 -0
  75. package/scripts/generate-site-bundle.mjs +30 -0
  76. package/scripts/release-tail.mjs +51 -3
  77. package/scripts/resume-from-candidate-run.mjs +545 -15
  78. package/scripts/site-capability-metadata.mjs +16 -0
  79. package/scripts/v4-publication-rehearsal-fixture.mjs +144 -0
package/contracts/fixtures/v4-adopter-delivery-v1/bootstrap-positive.json ADDED
@@ -0,0 +1,93 @@
1
+ {
2
+ "input": {
3
+ "authority": {
4
+ "version": "3.0.9-alpha.16",
5
+ "sourceCommit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
6
+ "packageRoot": "sha256:3f425e2c77d11f0bee8eb9aa2448566bca7a9d14672a7e528ced3e505b3f14a3",
7
+ "gateRoot": "sha256:cdcb54ea103fe62a94e2f0755fab5b105802f32e569f47e77d7a1f3ff0636cfc",
8
+ "protocol": {
9
+ "id": "buildchain.adopter/json-assertion",
10
+ "version": "1.0.0",
11
+ "root": "sha256:bcc9fc43402c50e11c68dfec5bba63ecc5b10f2f304921dec2ba95b44c43ad13"
12
+ },
13
+ "profile": {
14
+ "id": "buildchain.adopter/delivery-infrastructure",
15
+ "version": "1.0.0",
16
+ "root": "sha256:94dc2f34f76be8f4627fb84b753ad855492555111b37cbf3edcee68e2f30e126"
17
+ },
18
+ "protected": true,
19
+ "published": true
20
+ },
21
+ "candidate": {
22
+ "version": "4.0.1-alpha.4",
23
+ "sourceCommit": "e0342713c7447960c13bd73377282b2e93f4853d",
24
+ "packageRoot": "sha256:ca25e78191aedb60e999a12100b52caa2b075e29a46f0baa91722f018adb6609",
25
+ "gateRoot": "sha256:cdcb54ea103fe62a94e2f0755fab5b105802f32e569f47e77d7a1f3ff0636cfc",
26
+ "protocol": {
27
+ "id": "buildchain.adopter/json-assertion",
28
+ "version": "1.0.0",
29
+ "root": "sha256:bcc9fc43402c50e11c68dfec5bba63ecc5b10f2f304921dec2ba95b44c43ad13"
30
+ },
31
+ "profile": {
32
+ "id": "buildchain.adopter/delivery-infrastructure",
33
+ "version": "1.0.0",
34
+ "root": "sha256:94dc2f34f76be8f4627fb84b753ad855492555111b37cbf3edcee68e2f30e126"
35
+ },
36
+ "authorityVersion": "3.0.9-alpha.16"
37
+ },
38
+ "gateResult": {
39
+ "schemaVersion": 1,
40
+ "contract": "kungfu-buildchain-adopter-delivery-result",
41
+ "status": "passed",
42
+ "qualifying": false,
43
+ "selfCertified": false,
44
+ "project": {
45
+ "instanceId": "kungfu-systems/buildchain@4.0.1-alpha.4",
46
+ "adopterId": "kungfu-systems/buildchain"
47
+ },
48
+ "artifact": {
49
+ "kind": "package",
50
+ "coordinate": "@kungfu-tech/buildchain@4.0.1-alpha.4",
51
+ "root": "sha256:ca25e78191aedb60e999a12100b52caa2b075e29a46f0baa91722f018adb6609"
52
+ },
53
+ "protocol": {
54
+ "id": "buildchain.adopter/json-assertion",
55
+ "version": "1.0.0",
56
+ "loaded": true,
57
+ "reportRoot": "sha256:01b903f7315a51d0d26d8759194a82d7d45d0d05ad10480dbb6ebf7398445d5c"
58
+ },
59
+ "artifactProfile": {
60
+ "id": "buildchain.artifact/package",
61
+ "version": "1.0.0",
62
+ "loaded": true,
63
+ "valid": true
64
+ },
65
+ "semanticReport": {
66
+ "valid": true,
67
+ "qualifying": false,
68
+ "selfCertified": false,
69
+ "releaseAuthorized": false
70
+ },
71
+ "nonClaims": [
72
+ "A passing delivery gate does not grant runtime permission, release authorization, or independent certification.",
73
+ "Protocol semantics remain owned by the selected protocol driver and its published authority."
74
+ ],
75
+ "issues": [],
76
+ "gateRoot": "sha256:8f74b438d1b581c02704d3ff677b2be4dcb5a6d0dc4d9435ef42a368ff834ceb"
77
+ },
78
+ "warrant": {
79
+ "outcome": "merged",
80
+ "sourceHead": "e0342713c7447960c13bd73377282b2e93f4853d",
81
+ "sourceProofRoot": "sha256:2aeeaacaa4f2d136155ac2c478a7939772a162c284a3bfd0458dfb00cce872aa",
82
+ "nativeProofRoot": "sha256:d66669fff994b931c9f89f3c313f37ad625f5aae29af0f6528054b8782b607a5",
83
+ "integrationProofRoot": "sha256:e5623b4de65781d68a73401857d000fba970bdad62a94b5cd7b2d39fee176613"
84
+ }
85
+ },
86
+ "lineage": {
87
+ "schemaVersion": 1,
88
+ "contract": "kungfu-buildchain-v4-adopter-delivery-bootstrap-lineage/v1",
89
+ "sourceAuthorityCommit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
90
+ "targetBaseCommit": "e0342713c7447960c13bd73377282b2e93f4853d",
91
+ "authorityArchiveRoot": "sha256:3f425e2c77d11f0bee8eb9aa2448566bca7a9d14672a7e528ced3e505b3f14a3"
92
+ }
93
+ }
package/contracts/fixtures/v4-adopter-delivery-v1/gate-positive.json ADDED
@@ -0,0 +1,29 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "contract": "kungfu-buildchain-v4-adopter-delivery/v1",
4
+ "driverSelector": "json-assertion",
5
+ "artifactProfileSelector": "git-commit",
6
+ "request": {
7
+ "schemaVersion": 1,
8
+ "contract": "kungfu-buildchain-adopter-delivery-request",
9
+ "protocol": {
10
+ "id": "buildchain.adopter/json-assertion",
11
+ "version": "1.0.0"
12
+ },
13
+ "artifactProfile": {
14
+ "id": "buildchain.artifact/git-commit",
15
+ "version": "1.0.0"
16
+ },
17
+ "project": {
18
+ "instanceId": "example.org/adopter@1.0.0",
19
+ "adopterId": "example.org/adopter"
20
+ },
21
+ "artifact": {
22
+ "kind": "git-commit",
23
+ "coordinate": "example.org/adopter@1111111111111111111111111111111111111111",
24
+ "root": "sha256:2222222222222222222222222222222222222222222222222222222222222222"
25
+ },
26
+ "declaration": { "valid": true }
27
+ },
28
+ "context": {}
29
+ }
package/contracts/fixtures/v4-adopter-delivery-v1/gate-unknown-selector.json ADDED
@@ -0,0 +1,26 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "contract": "kungfu-buildchain-v4-adopter-delivery/v1",
4
+ "driverSelector": "private-buildchain-driver",
5
+ "artifactProfileSelector": "git-commit",
6
+ "request": {
7
+ "schemaVersion": 1,
8
+ "contract": "kungfu-buildchain-adopter-delivery-request",
9
+ "protocol": { "id": "private.buildchain/driver", "version": "1.0.0" },
10
+ "artifactProfile": {
11
+ "id": "buildchain.artifact/git-commit",
12
+ "version": "1.0.0"
13
+ },
14
+ "project": {
15
+ "instanceId": "example.org/adopter@1.0.0",
16
+ "adopterId": "example.org/adopter"
17
+ },
18
+ "artifact": {
19
+ "kind": "git-commit",
20
+ "coordinate": "example.org/adopter@1111111111111111111111111111111111111111",
21
+ "root": "sha256:2222222222222222222222222222222222222222222222222222222222222222"
22
+ },
23
+ "declaration": { "valid": true }
24
+ },
25
+ "context": {}
26
+ }
package/contracts/fixtures/v4-adopter-delivery-v1/offline-vectors.json ADDED
@@ -0,0 +1,50 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "contract": "kungfu-buildchain-v4-adopter-delivery-offline-vectors/v1",
4
+ "sourceAuthority": {
5
+ "branch": "dev/v3/v3.0",
6
+ "commit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
7
+ "vectorSuiteRoot": "sha256:c978707556406ffda4ef4192032332c01c2da1cebb6ad8c4f0edfc65d5cef0c7"
8
+ },
9
+ "initialTargetBase": "e5611377efc03178f8687d99968cfdfa3ce2825b",
10
+ "targetBase": "e0342713c7447960c13bd73377282b2e93f4853d",
11
+ "cases": [
12
+ {
13
+ "id": "positive-public-driver",
14
+ "class": "positive",
15
+ "expected": "passed"
16
+ },
17
+ {
18
+ "id": "positive-n-minus-one-bootstrap",
19
+ "class": "positive",
20
+ "expected": "passed"
21
+ },
22
+ {
23
+ "id": "positive-published-archive",
24
+ "class": "positive",
25
+ "expected": "loaded"
26
+ },
27
+ {
28
+ "id": "negative-selector",
29
+ "class": "negative",
30
+ "expected": "fail-closed"
31
+ },
32
+ { "id": "negative-driver", "class": "negative", "expected": "fail-closed" },
33
+ {
34
+ "id": "negative-archive-identity",
35
+ "class": "negative",
36
+ "expected": "fail-closed"
37
+ },
38
+ {
39
+ "id": "negative-bootstrap-lineage",
40
+ "class": "negative",
41
+ "expected": "fail-closed"
42
+ },
43
+ {
44
+ "id": "negative-protocol-version",
45
+ "class": "negative",
46
+ "expected": "fail-closed"
47
+ },
48
+ { "id": "tamper-readback", "class": "tamper", "expected": "fail-closed" }
49
+ ]
50
+ }
package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/config/buildchain.toml ADDED
@@ -0,0 +1,5 @@
1
+ schema = 1
2
+
3
+ [publication_rehearsal]
4
+ contract = "buildchain-v4-publication-rehearsal-capsule/v1"
5
+ effect_default = "disabled"
package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/release-activation.json ADDED
@@ -0,0 +1 @@
1
+ {"schema":"fixture.release-activation/v1","status":"candidate"}
package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/signed-channel.json ADDED
@@ -0,0 +1 @@
1
+ {"schema":"fixture.signed-channel/v1","channel":"alpha"}
package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/evidence/qualification.json ADDED
@@ -0,0 +1 @@
1
+ {"schema":"fixture.qualification/v1","qualified":true}
package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/candidate.json ADDED
@@ -0,0 +1,5 @@
1
+ {
2
+ "schema": "buildchain-v4-publication-rehearsal-candidate/v1",
3
+ "sourceRevision": "bc12cd0ff18a7e1d918777ea093c169349952d34",
4
+ "purpose": "offline-publication-rehearsal"
5
+ }
package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/release-passport.json ADDED
@@ -0,0 +1 @@
1
+ {"schema":"fixture.release-passport/v1","productionAuthority":false}