@kungfu-tech/buildchain 4.0.1-alpha.5 → 4.0.1-alpha.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/actions/release-tail/README.md +8 -0
- package/architecture/ci-lane-change-budget.json +187 -0
- package/architecture/internal-capabilities.json +65 -5
- package/architecture/maintainability-policy.json +27 -21
- package/architecture/release-tail-contract-inventory.json +5 -2
- package/architecture/v4-adopter-delivery-parity.json +32 -5
- package/architecture/v4-floating-consumer-policy.json +6 -0
- package/architecture/v4-publication-rehearsal-parity.json +84 -0
- package/bin/buildchain.mjs +7 -1
- package/bin/internal/adopter-delivery-cli.mjs +70 -0
- package/bin/internal/command-registry.mjs +1 -0
- package/contracts/fixtures/v4-adopter-delivery-v1/archive-template.json +19 -0
- package/contracts/fixtures/v4-adopter-delivery-v1/bootstrap-positive.json +93 -0
- package/contracts/fixtures/v4-adopter-delivery-v1/gate-positive.json +29 -0
- package/contracts/fixtures/v4-adopter-delivery-v1/gate-unknown-selector.json +26 -0
- package/contracts/fixtures/v4-adopter-delivery-v1/offline-vectors.json +50 -0
- package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/artifacts/product.bin +1 -0
- package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/config/buildchain.toml +5 -0
- package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/release-activation.json +1 -0
- package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/signed-channel.json +1 -0
- package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/evidence/qualification.json +1 -0
- package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/candidate.json +5 -0
- package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/release-passport.json +1 -0
- package/contracts/fixtures/v4-publication-rehearsal-v1/capsule.json +707 -0
- package/contracts/fixtures/v4-publication-rehearsal-v1/offline-vectors.json +27 -0
- package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
- package/contracts/v4-adopter-delivery-v1.schema.json +81 -0
- package/contracts/v4-floating-consumer-policy-receipt-v1.schema.json +4 -2
- package/contracts/v4-publication-rehearsal-capsule-v1.schema.json +233 -0
- package/dist/site/agent-index.json +3 -0
- package/dist/site/artifact-schemas.json +6 -0
- package/dist/site/buildchain-contract.json +14 -14
- package/dist/site/buildchain-site.json +231 -24
- package/dist/site/capability-registry.json +11 -10
- package/dist/site/cli-registry.json +53 -1
- package/dist/site/kfd-claims.json +279 -14
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +20 -5
- package/dist/site/node-api-registry.json +11569 -9299
- package/dist/site/page-registry.json +214 -15
- package/dist/site/public-surface-audit.json +206 -11
- package/dist/site/publication-authority-registry.json +39 -8
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/release-provenance.json +15 -0
- package/dist/site/schemas/release-tail-capabilities-v1.schema.json +199 -0
- package/dist/site/schemas/v4-adopter-delivery-v1.schema.json +81 -0
- package/dist/site/schemas/v4-publication-rehearsal-capsule-v1.schema.json +233 -0
- package/dist/site/site-manifest.json +17 -9
- package/dist/site/workflow-registry.json +110 -8
- package/docs/MAP.md +3 -1
- package/docs/cli-reference.md +68 -0
- package/docs/cli.md +8 -0
- package/docs/dev-delivery-warrant.md +22 -1
- package/docs/node-api-reference.md +332 -172
- package/docs/release-tail-provider-plane.md +30 -0
- package/docs/v4-adopter-delivery.md +133 -0
- package/docs/v4-publication-rehearsal.md +130 -0
- package/package.json +18 -3
- package/packages/core/adopter-delivery-passport.js +259 -0
- package/packages/core/adopter-delivery-vectors.js +158 -0
- package/packages/core/adopter-delivery-vectors.json +77 -0
- package/packages/core/buildchain-agent-manuals.js +1 -0
- package/packages/core/buildchain-config.js +84 -0
- package/packages/core/buildchain-delivery-bootstrap.js +240 -0
- package/packages/core/buildchain-delivery-infrastructure.js +164 -0
- package/packages/core/buildchain-delivery-self-dogfood.js +395 -0
- package/packages/core/buildchain-publication-authority.js +1 -0
- package/packages/core/ci-lane-change-budget.js +247 -0
- package/packages/core/dev-delivery-native-proof.js +43 -27
- package/packages/core/dev-delivery-warrant-state.js +31 -8
- package/packages/core/dev-delivery-warrant.js +8 -3
- package/packages/core/github-governance-authority.js +1 -0
- package/packages/core/index.js +5 -0
- package/packages/core/legacy-kfd-adopter-driver.js +167 -0
- package/packages/core/published-delivery-authority.js +266 -0
- package/packages/core/release-candidate-recovery.js +66 -11
- package/packages/core/release-candidate.js +2 -2
- package/packages/core/release-passport.js +36 -9
- package/packages/core/v4-adopter-delivery-parity.js +3 -3
- package/packages/core/v4-adopter-delivery.js +359 -0
- package/packages/core/v4-delivery-warrant-read-candidate.js +10 -3
- package/packages/core/v4-floating-consumer-evidence.js +18 -4
- package/packages/core/v4-floating-consumer-policy.js +138 -35
- package/packages/core/v4-floating-consumer-release-passport.js +30 -3
- package/packages/core/v4-publication-rehearsal-capsule.js +468 -0
- package/packages/core/v4-publication-rehearsal-provider-bindings.js +212 -0
- package/packages/core/v4-publication-rehearsal.js +481 -0
- package/packages/core/workflow-yaml-contract.js +24 -2
- package/scripts/buildchain-cli-help.mjs +10 -0
- package/scripts/check-ci-lane-change-budget.mjs +100 -0
- package/scripts/check-inventory.mjs +3 -3
- package/scripts/check-v4-floating-consumer-policy-contract.mjs +23 -4
- package/scripts/dev-delivery-source-proof-replay.mjs +153 -0
- package/scripts/dev-delivery-source-proof-reuse.mjs +13 -97
- package/scripts/dev-delivery-warrant-store.mjs +10 -6
- package/scripts/dev-delivery-warrant.mjs +5 -1
- package/scripts/dev-pr-delivery-warrant.mjs +1 -0
- package/scripts/dev-qualification-patrol.mjs +9 -9
- package/scripts/generate-channel-promotion-workflow.mjs +2 -2
- package/scripts/generate-release-candidate-passport.mjs +152 -0
- package/scripts/generate-site-bundle.mjs +30 -0
- package/scripts/promotion-channel-router.mjs +4 -4
- package/scripts/release-candidate-anchor-provenance.mjs +99 -0
- package/scripts/release-tail.mjs +51 -3
- package/scripts/resume-from-candidate-run.mjs +556 -29
- package/scripts/site-capability-metadata.mjs +17 -0
- package/scripts/v4-consumer-policy.mjs +4 -0
- package/scripts/v4-publication-rehearsal-fixture.mjs +144 -0
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
{
|
|
2
|
+
"schema": "buildchain-v4-publication-rehearsal-offline-vectors/v1",
|
|
3
|
+
"vectors": [
|
|
4
|
+
{
|
|
5
|
+
"platform": "linux",
|
|
6
|
+
"capsuleRoot": "sha256:29a870ce850c7d6bde848fd77d7f382acf1f743d627c6265a913be51a8c05edf",
|
|
7
|
+
"transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
|
|
8
|
+
"stateRoot": "sha256:8e138381ff578bce96ea3934c74b927287a9d53c8b29b4a2e7b2d92cf5ab272d",
|
|
9
|
+
"evidenceRoot": "sha256:0c20fcb7aac8c420e98e63d1968ee8321b9938227e3ae77cfaf194db9588010e"
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
"platform": "macos",
|
|
13
|
+
"capsuleRoot": "sha256:29a870ce850c7d6bde848fd77d7f382acf1f743d627c6265a913be51a8c05edf",
|
|
14
|
+
"transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
|
|
15
|
+
"stateRoot": "sha256:8e138381ff578bce96ea3934c74b927287a9d53c8b29b4a2e7b2d92cf5ab272d",
|
|
16
|
+
"evidenceRoot": "sha256:0c20fcb7aac8c420e98e63d1968ee8321b9938227e3ae77cfaf194db9588010e"
|
|
17
|
+
},
|
|
18
|
+
{
|
|
19
|
+
"platform": "windows",
|
|
20
|
+
"capsuleRoot": "sha256:29a870ce850c7d6bde848fd77d7f382acf1f743d627c6265a913be51a8c05edf",
|
|
21
|
+
"transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
|
|
22
|
+
"stateRoot": "sha256:8e138381ff578bce96ea3934c74b927287a9d53c8b29b4a2e7b2d92cf5ab272d",
|
|
23
|
+
"evidenceRoot": "sha256:0c20fcb7aac8c420e98e63d1968ee8321b9938227e3ae77cfaf194db9588010e"
|
|
24
|
+
}
|
|
25
|
+
],
|
|
26
|
+
"vectorRoot": "sha256:3e968de4060d0fea4cbff82409541f9b6fa903212e18921f2606390eb24993ed"
|
|
27
|
+
}
|
|
@@ -22,7 +22,7 @@
|
|
|
22
22
|
"ref": "v4-alpha",
|
|
23
23
|
"sha": "dddddddddddddddddddddddddddddddddddddddd",
|
|
24
24
|
"contractRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
|
|
25
|
-
"consumerPolicyReceiptRoot": "sha256:
|
|
25
|
+
"consumerPolicyReceiptRoot": "sha256:83e75f961e61f5a6ed3648898836076afa5561a0b25bfc07ff6d3f2d4b7405d6"
|
|
26
26
|
},
|
|
27
27
|
"warrant": {
|
|
28
28
|
"candidateId": "candidate-alpha-2",
|
|
@@ -0,0 +1,81 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://buildchain.kungfu-tech.com/schemas/v4-adopter-delivery-v1.schema.json",
|
|
4
|
+
"title": "Buildchain v4 adopter delivery gate input",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": [
|
|
8
|
+
"schemaVersion",
|
|
9
|
+
"contract",
|
|
10
|
+
"driverSelector",
|
|
11
|
+
"artifactProfileSelector",
|
|
12
|
+
"request",
|
|
13
|
+
"context"
|
|
14
|
+
],
|
|
15
|
+
"properties": {
|
|
16
|
+
"schemaVersion": { "const": 1 },
|
|
17
|
+
"contract": { "const": "kungfu-buildchain-v4-adopter-delivery/v1" },
|
|
18
|
+
"driverSelector": {
|
|
19
|
+
"enum": ["json-assertion", "kfd-category", "legacy-kfd"]
|
|
20
|
+
},
|
|
21
|
+
"artifactProfileSelector": { "enum": ["git-commit", "package"] },
|
|
22
|
+
"request": { "$ref": "#/$defs/request" },
|
|
23
|
+
"context": { "type": "object" }
|
|
24
|
+
},
|
|
25
|
+
"$defs": {
|
|
26
|
+
"reference": {
|
|
27
|
+
"type": "object",
|
|
28
|
+
"additionalProperties": false,
|
|
29
|
+
"required": ["id", "version"],
|
|
30
|
+
"properties": {
|
|
31
|
+
"id": {
|
|
32
|
+
"type": "string",
|
|
33
|
+
"pattern": "^[a-z][a-z0-9.-]*(/[a-z][a-z0-9.-]*)*$"
|
|
34
|
+
},
|
|
35
|
+
"version": {
|
|
36
|
+
"type": "string",
|
|
37
|
+
"pattern": "^[1-9][0-9]*\\.[0-9]+\\.[0-9]+$"
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
},
|
|
41
|
+
"request": {
|
|
42
|
+
"type": "object",
|
|
43
|
+
"additionalProperties": false,
|
|
44
|
+
"required": [
|
|
45
|
+
"schemaVersion",
|
|
46
|
+
"contract",
|
|
47
|
+
"protocol",
|
|
48
|
+
"artifactProfile",
|
|
49
|
+
"project",
|
|
50
|
+
"artifact",
|
|
51
|
+
"declaration"
|
|
52
|
+
],
|
|
53
|
+
"properties": {
|
|
54
|
+
"schemaVersion": { "const": 1 },
|
|
55
|
+
"contract": { "const": "kungfu-buildchain-adopter-delivery-request" },
|
|
56
|
+
"protocol": { "$ref": "#/$defs/reference" },
|
|
57
|
+
"artifactProfile": { "$ref": "#/$defs/reference" },
|
|
58
|
+
"project": {
|
|
59
|
+
"type": "object",
|
|
60
|
+
"additionalProperties": false,
|
|
61
|
+
"required": ["instanceId", "adopterId"],
|
|
62
|
+
"properties": {
|
|
63
|
+
"instanceId": { "type": "string", "minLength": 1 },
|
|
64
|
+
"adopterId": { "type": "string", "minLength": 1 }
|
|
65
|
+
}
|
|
66
|
+
},
|
|
67
|
+
"artifact": {
|
|
68
|
+
"type": "object",
|
|
69
|
+
"additionalProperties": false,
|
|
70
|
+
"required": ["kind", "coordinate", "root"],
|
|
71
|
+
"properties": {
|
|
72
|
+
"kind": { "type": "string", "minLength": 1 },
|
|
73
|
+
"coordinate": { "type": "string", "minLength": 1 },
|
|
74
|
+
"root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
|
|
75
|
+
}
|
|
76
|
+
},
|
|
77
|
+
"declaration": { "type": "object" }
|
|
78
|
+
}
|
|
79
|
+
}
|
|
80
|
+
}
|
|
81
|
+
}
|
|
@@ -47,8 +47,10 @@
|
|
|
47
47
|
},
|
|
48
48
|
"sourcePath": { "type": "string" },
|
|
49
49
|
"sourceLine": { "type": "integer", "minimum": 0 },
|
|
50
|
-
"visibleSelector": { "enum": ["", "v4", "v4-alpha"] },
|
|
51
|
-
"selectorClass": {
|
|
50
|
+
"visibleSelector": { "enum": ["", "v4", "v4-alpha", "alpha/v4/v4.0"] },
|
|
51
|
+
"selectorClass": {
|
|
52
|
+
"enum": ["", "floating", "protected-bootstrap", "rejected"]
|
|
53
|
+
},
|
|
52
54
|
"channel": { "enum": ["", "stable", "alpha"] },
|
|
53
55
|
"resolvedWorkflowSha": {
|
|
54
56
|
"type": "string",
|
|
@@ -0,0 +1,233 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://buildchain.kungfu.ai/contracts/v4-publication-rehearsal-capsule-v1.schema.json",
|
|
4
|
+
"title": "Buildchain v4 Publication Rehearsal Capsule",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": [
|
|
8
|
+
"schema",
|
|
9
|
+
"coreVersion",
|
|
10
|
+
"source",
|
|
11
|
+
"candidate",
|
|
12
|
+
"manifest",
|
|
13
|
+
"config",
|
|
14
|
+
"providerBindings",
|
|
15
|
+
"providerBindingsRoot",
|
|
16
|
+
"providerPolicy",
|
|
17
|
+
"expectedObservations",
|
|
18
|
+
"declaration",
|
|
19
|
+
"transaction",
|
|
20
|
+
"files",
|
|
21
|
+
"capsuleRoot"
|
|
22
|
+
],
|
|
23
|
+
"properties": {
|
|
24
|
+
"schema": { "const": "buildchain-v4-publication-rehearsal-capsule/v1" },
|
|
25
|
+
"coreVersion": { "const": "buildchain.release-tail/v1" },
|
|
26
|
+
"source": {
|
|
27
|
+
"type": "object",
|
|
28
|
+
"additionalProperties": false,
|
|
29
|
+
"required": ["repository", "revision", "root"],
|
|
30
|
+
"properties": {
|
|
31
|
+
"repository": { "type": "string", "minLength": 1 },
|
|
32
|
+
"revision": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
|
|
33
|
+
"root": { "$ref": "#/$defs/root" }
|
|
34
|
+
}
|
|
35
|
+
},
|
|
36
|
+
"candidate": {
|
|
37
|
+
"type": "object",
|
|
38
|
+
"additionalProperties": false,
|
|
39
|
+
"required": ["root"],
|
|
40
|
+
"properties": { "root": { "$ref": "#/$defs/root" } }
|
|
41
|
+
},
|
|
42
|
+
"manifest": { "$ref": "#/$defs/fileBinding" },
|
|
43
|
+
"config": { "$ref": "#/$defs/fileBinding" },
|
|
44
|
+
"providerBindings": { "$ref": "#/$defs/providerBindings" },
|
|
45
|
+
"providerBindingsRoot": { "$ref": "#/$defs/root" },
|
|
46
|
+
"providerPolicy": {
|
|
47
|
+
"type": "object",
|
|
48
|
+
"additionalProperties": false,
|
|
49
|
+
"required": [
|
|
50
|
+
"schema",
|
|
51
|
+
"effectDefault",
|
|
52
|
+
"allowedCapabilityIds",
|
|
53
|
+
"allowedAdapters",
|
|
54
|
+
"root"
|
|
55
|
+
],
|
|
56
|
+
"properties": {
|
|
57
|
+
"schema": {
|
|
58
|
+
"const": "buildchain-v4-publication-rehearsal-provider-policy/v1"
|
|
59
|
+
},
|
|
60
|
+
"effectDefault": { "const": "disabled" },
|
|
61
|
+
"allowedCapabilityIds": {
|
|
62
|
+
"type": "array",
|
|
63
|
+
"minItems": 1,
|
|
64
|
+
"uniqueItems": true,
|
|
65
|
+
"items": { "type": "string", "minLength": 1 }
|
|
66
|
+
},
|
|
67
|
+
"allowedAdapters": {
|
|
68
|
+
"type": "array",
|
|
69
|
+
"minItems": 1,
|
|
70
|
+
"uniqueItems": true,
|
|
71
|
+
"items": {
|
|
72
|
+
"type": "string",
|
|
73
|
+
"pattern": "^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$"
|
|
74
|
+
}
|
|
75
|
+
},
|
|
76
|
+
"root": { "$ref": "#/$defs/root" }
|
|
77
|
+
}
|
|
78
|
+
},
|
|
79
|
+
"expectedObservations": {
|
|
80
|
+
"type": "object",
|
|
81
|
+
"additionalProperties": false,
|
|
82
|
+
"required": ["entries", "root"],
|
|
83
|
+
"properties": {
|
|
84
|
+
"entries": {
|
|
85
|
+
"type": "array",
|
|
86
|
+
"items": { "$ref": "#/$defs/observationSequence" }
|
|
87
|
+
},
|
|
88
|
+
"root": { "$ref": "#/$defs/root" }
|
|
89
|
+
}
|
|
90
|
+
},
|
|
91
|
+
"declaration": { "$ref": "release-tail-capabilities-v1.schema.json" },
|
|
92
|
+
"transaction": { "type": "object" },
|
|
93
|
+
"files": {
|
|
94
|
+
"type": "array",
|
|
95
|
+
"minItems": 1,
|
|
96
|
+
"items": {
|
|
97
|
+
"type": "object",
|
|
98
|
+
"additionalProperties": false,
|
|
99
|
+
"required": ["role", "path", "size", "root"],
|
|
100
|
+
"properties": {
|
|
101
|
+
"role": {
|
|
102
|
+
"type": "string",
|
|
103
|
+
"pattern": "^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$"
|
|
104
|
+
},
|
|
105
|
+
"path": { "$ref": "#/$defs/path" },
|
|
106
|
+
"size": { "type": "integer", "minimum": 0 },
|
|
107
|
+
"root": { "$ref": "#/$defs/root" }
|
|
108
|
+
}
|
|
109
|
+
}
|
|
110
|
+
},
|
|
111
|
+
"capsuleRoot": { "$ref": "#/$defs/root" }
|
|
112
|
+
},
|
|
113
|
+
"$defs": {
|
|
114
|
+
"root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
|
|
115
|
+
"path": {
|
|
116
|
+
"type": "string",
|
|
117
|
+
"minLength": 1,
|
|
118
|
+
"pattern": "^(?!/)(?!.*(?:^|/)\\.(?:/|$))(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\)(?!.*\/$).+$"
|
|
119
|
+
},
|
|
120
|
+
"providerBindings": {
|
|
121
|
+
"type": "object",
|
|
122
|
+
"additionalProperties": false,
|
|
123
|
+
"required": ["schema", "artifacts", "documents", "evidence"],
|
|
124
|
+
"properties": {
|
|
125
|
+
"schema": {
|
|
126
|
+
"const": "kungfu.buildchain.release-tail.provider-bindings/v1"
|
|
127
|
+
},
|
|
128
|
+
"artifacts": {
|
|
129
|
+
"type": "object",
|
|
130
|
+
"propertyNames": {
|
|
131
|
+
"pattern": "^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$"
|
|
132
|
+
},
|
|
133
|
+
"additionalProperties": {
|
|
134
|
+
"type": "object",
|
|
135
|
+
"additionalProperties": false,
|
|
136
|
+
"required": ["path", "name"],
|
|
137
|
+
"properties": {
|
|
138
|
+
"path": { "$ref": "#/$defs/path" },
|
|
139
|
+
"name": { "type": "string", "minLength": 1 }
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
},
|
|
143
|
+
"documents": {
|
|
144
|
+
"type": "object",
|
|
145
|
+
"propertyNames": {
|
|
146
|
+
"pattern": "^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$"
|
|
147
|
+
},
|
|
148
|
+
"additionalProperties": { "$ref": "#/$defs/providerDocument" }
|
|
149
|
+
},
|
|
150
|
+
"evidence": {
|
|
151
|
+
"type": "object",
|
|
152
|
+
"additionalProperties": false,
|
|
153
|
+
"required": ["inputs", "output"],
|
|
154
|
+
"properties": {
|
|
155
|
+
"inputs": {
|
|
156
|
+
"type": "array",
|
|
157
|
+
"uniqueItems": true,
|
|
158
|
+
"items": { "$ref": "#/$defs/path" }
|
|
159
|
+
},
|
|
160
|
+
"output": { "$ref": "#/$defs/path" }
|
|
161
|
+
}
|
|
162
|
+
}
|
|
163
|
+
}
|
|
164
|
+
},
|
|
165
|
+
"providerDocument": {
|
|
166
|
+
"type": "object",
|
|
167
|
+
"additionalProperties": false,
|
|
168
|
+
"required": ["path", "method"],
|
|
169
|
+
"properties": {
|
|
170
|
+
"path": { "$ref": "#/$defs/path" },
|
|
171
|
+
"method": { "enum": ["PUT", "POST"] }
|
|
172
|
+
}
|
|
173
|
+
},
|
|
174
|
+
"fileBinding": {
|
|
175
|
+
"type": "object",
|
|
176
|
+
"additionalProperties": false,
|
|
177
|
+
"required": ["path", "root"],
|
|
178
|
+
"properties": {
|
|
179
|
+
"path": { "$ref": "#/$defs/path" },
|
|
180
|
+
"root": { "$ref": "#/$defs/root" }
|
|
181
|
+
}
|
|
182
|
+
},
|
|
183
|
+
"readback": {
|
|
184
|
+
"type": "object",
|
|
185
|
+
"additionalProperties": false,
|
|
186
|
+
"required": [
|
|
187
|
+
"outcome",
|
|
188
|
+
"subjectRoot",
|
|
189
|
+
"targetRoot",
|
|
190
|
+
"evidenceRoots",
|
|
191
|
+
"providerCode"
|
|
192
|
+
],
|
|
193
|
+
"properties": {
|
|
194
|
+
"outcome": { "enum": ["observed", "absent", "transient", "conflict"] },
|
|
195
|
+
"subjectRoot": {
|
|
196
|
+
"oneOf": [{ "$ref": "#/$defs/root" }, { "const": "" }]
|
|
197
|
+
},
|
|
198
|
+
"targetRoot": {
|
|
199
|
+
"oneOf": [{ "$ref": "#/$defs/root" }, { "const": "" }]
|
|
200
|
+
},
|
|
201
|
+
"evidenceRoots": {
|
|
202
|
+
"type": "array",
|
|
203
|
+
"uniqueItems": true,
|
|
204
|
+
"items": { "$ref": "#/$defs/root" }
|
|
205
|
+
},
|
|
206
|
+
"providerCode": { "type": "string", "minLength": 1 }
|
|
207
|
+
}
|
|
208
|
+
},
|
|
209
|
+
"observationSequence": {
|
|
210
|
+
"type": "object",
|
|
211
|
+
"additionalProperties": false,
|
|
212
|
+
"required": ["operationId", "readbacks", "apply"],
|
|
213
|
+
"properties": {
|
|
214
|
+
"operationId": { "$ref": "#/$defs/root" },
|
|
215
|
+
"readbacks": {
|
|
216
|
+
"type": "array",
|
|
217
|
+
"minItems": 1,
|
|
218
|
+
"items": { "$ref": "#/$defs/readback" }
|
|
219
|
+
},
|
|
220
|
+
"apply": {
|
|
221
|
+
"type": "object",
|
|
222
|
+
"additionalProperties": false,
|
|
223
|
+
"required": ["outcome", "code", "classification"],
|
|
224
|
+
"properties": {
|
|
225
|
+
"outcome": { "enum": ["applied", "transient", "conflict"] },
|
|
226
|
+
"code": { "type": "string", "minLength": 1 },
|
|
227
|
+
"classification": { "type": "string", "minLength": 1 }
|
|
228
|
+
}
|
|
229
|
+
}
|
|
230
|
+
}
|
|
231
|
+
}
|
|
232
|
+
}
|
|
233
|
+
}
|
|
@@ -21,6 +21,9 @@
|
|
|
21
21
|
"schemas/kfd-product-gate-input-v1.schema.json",
|
|
22
22
|
"schemas/dev-delivery-authority-v2.schema.json",
|
|
23
23
|
"schemas/v4-compatibility-facts-v1.schema.json",
|
|
24
|
+
"schemas/v4-publication-rehearsal-capsule-v1.schema.json",
|
|
25
|
+
"schemas/v4-adopter-delivery-v1.schema.json",
|
|
26
|
+
"schemas/release-tail-capabilities-v1.schema.json",
|
|
24
27
|
"buildchain-contract.json",
|
|
25
28
|
"kfd-upstream-aggregate.json",
|
|
26
29
|
"kfd-claims.json",
|
|
@@ -9,6 +9,9 @@
|
|
|
9
9
|
"schemas/kfd-product-gate-input-v1.schema.json",
|
|
10
10
|
"schemas/dev-delivery-authority-v2.schema.json",
|
|
11
11
|
"schemas/v4-compatibility-facts-v1.schema.json",
|
|
12
|
+
"schemas/v4-publication-rehearsal-capsule-v1.schema.json",
|
|
13
|
+
"schemas/v4-adopter-delivery-v1.schema.json",
|
|
14
|
+
"schemas/release-tail-capabilities-v1.schema.json",
|
|
12
15
|
"kfd-support.json",
|
|
13
16
|
"artifact-evidence.json",
|
|
14
17
|
"product-mechanism.json",
|
|
@@ -45,6 +48,9 @@
|
|
|
45
48
|
"schemas/kfd-product-gate-input-v1.schema.json",
|
|
46
49
|
"schemas/dev-delivery-authority-v2.schema.json",
|
|
47
50
|
"schemas/v4-compatibility-facts-v1.schema.json",
|
|
51
|
+
"schemas/v4-publication-rehearsal-capsule-v1.schema.json",
|
|
52
|
+
"schemas/v4-adopter-delivery-v1.schema.json",
|
|
53
|
+
"schemas/release-tail-capabilities-v1.schema.json",
|
|
48
54
|
"buildchain-contract.json",
|
|
49
55
|
"kfd-claims.json",
|
|
50
56
|
"product-mechanism.json",
|
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"name": "Buildchain",
|
|
6
6
|
"package": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "4.0.1-alpha.
|
|
7
|
+
"version": "4.0.1-alpha.8",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"majorLine": "v4",
|
|
@@ -1361,7 +1361,7 @@
|
|
|
1361
1361
|
"retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
|
|
1362
1362
|
],
|
|
1363
1363
|
"breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
|
|
1364
|
-
"auditDigest": "sha256:
|
|
1364
|
+
"auditDigest": "sha256:6cf134f8bc0c0ab488cb159ef2bb9f7a94b454c4f7adee134ce7dee00d84c5d3",
|
|
1365
1365
|
"compatibleBreakingDigests": [
|
|
1366
1366
|
"sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650"
|
|
1367
1367
|
],
|
|
@@ -1591,7 +1591,7 @@
|
|
|
1591
1591
|
"GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
|
|
1592
1592
|
],
|
|
1593
1593
|
"breakingDigest": "sha256:5f10c81d3f80cb417960be682921884639c40b6d875f1a3b1ffae7e652c3f468",
|
|
1594
|
-
"auditDigest": "sha256:
|
|
1594
|
+
"auditDigest": "sha256:0fc3f61d5a10b76dcc03aba4e1d4eea2a25b0de4921929d5c86d27db00d08da6"
|
|
1595
1595
|
},
|
|
1596
1596
|
{
|
|
1597
1597
|
"contractVersion": 1,
|
|
@@ -1646,7 +1646,7 @@
|
|
|
1646
1646
|
"resume-from-candidate-run is fail-closed and uses a fresh caller event instead of rerunning a frozen startup graph"
|
|
1647
1647
|
],
|
|
1648
1648
|
"breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
|
|
1649
|
-
"auditDigest": "sha256:
|
|
1649
|
+
"auditDigest": "sha256:fc62e34e4fde50da0bf5bf2f9e0b455a8ff1ccea62f7348d1a132567e2c829e1",
|
|
1650
1650
|
"compatibleBreakingDigests": [
|
|
1651
1651
|
"sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
|
|
1652
1652
|
],
|
|
@@ -1888,7 +1888,7 @@
|
|
|
1888
1888
|
"semver GitHub Releases are created or updated only after transaction completion, with prerelease/latest metadata bound to the authoritative publication channel and tag syntax retained as the fallback for ordinary callers"
|
|
1889
1889
|
],
|
|
1890
1890
|
"breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda",
|
|
1891
|
-
"auditDigest": "sha256:
|
|
1891
|
+
"auditDigest": "sha256:3c34606573df2ff29c4bc9b959f0b842ca7653427139c4bf8d600f152d5fe1a4",
|
|
1892
1892
|
"compatibleBreakingDigests": [
|
|
1893
1893
|
"sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
|
|
1894
1894
|
],
|
|
@@ -2012,7 +2012,7 @@
|
|
|
2012
2012
|
"release-state SHA is recorded as a durable audit entrance"
|
|
2013
2013
|
],
|
|
2014
2014
|
"breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
|
|
2015
|
-
"auditDigest": "sha256:
|
|
2015
|
+
"auditDigest": "sha256:7b433d34f87651d8fb187d06b83113e93cbc0243a0f93ce33f375a4737f144f6"
|
|
2016
2016
|
},
|
|
2017
2017
|
{
|
|
2018
2018
|
"contractVersion": 1,
|
|
@@ -2061,7 +2061,7 @@
|
|
|
2061
2061
|
"prose-only public claims downgrade the release trust passport audit"
|
|
2062
2062
|
],
|
|
2063
2063
|
"breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
|
|
2064
|
-
"auditDigest": "sha256:
|
|
2064
|
+
"auditDigest": "sha256:7b433d34f87651d8fb187d06b83113e93cbc0243a0f93ce33f375a4737f144f6"
|
|
2065
2065
|
},
|
|
2066
2066
|
{
|
|
2067
2067
|
"contractVersion": 1,
|
|
@@ -2121,7 +2121,7 @@
|
|
|
2121
2121
|
"README badge block checks and writes are generated from machine-readable repository facts"
|
|
2122
2122
|
],
|
|
2123
2123
|
"breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
|
|
2124
|
-
"auditDigest": "sha256:
|
|
2124
|
+
"auditDigest": "sha256:b3ca92bdcfc8415867ebfd504883ac05982ee9116056141e0bdf10b400fe4d9a"
|
|
2125
2125
|
},
|
|
2126
2126
|
{
|
|
2127
2127
|
"contractVersion": 1,
|
|
@@ -2211,7 +2211,7 @@
|
|
|
2211
2211
|
"manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
|
|
2212
2212
|
],
|
|
2213
2213
|
"breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
|
|
2214
|
-
"auditDigest": "sha256:
|
|
2214
|
+
"auditDigest": "sha256:9ac244b89ab685df5c1d43ebcb9195c9133261b77d2ce948e3d4083e8651f086"
|
|
2215
2215
|
},
|
|
2216
2216
|
{
|
|
2217
2217
|
"contractVersion": 1,
|
|
@@ -2233,7 +2233,7 @@
|
|
|
2233
2233
|
"agents can discover supported Node APIs without importing internal file paths"
|
|
2234
2234
|
],
|
|
2235
2235
|
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
|
|
2236
|
-
"auditDigest": "sha256:
|
|
2236
|
+
"auditDigest": "sha256:14c116689f571b197fad4632683335bc13718abd17276f3da0ffbf1e85a74483"
|
|
2237
2237
|
},
|
|
2238
2238
|
{
|
|
2239
2239
|
"contractVersion": 1,
|
|
@@ -2348,7 +2348,7 @@
|
|
|
2348
2348
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
2349
2349
|
],
|
|
2350
2350
|
"breakingDigest": "sha256:d4bd0f2a1921bfed71a4d9104d45934555bde74a5c189f93ad79f37074c02b87",
|
|
2351
|
-
"auditDigest": "sha256:
|
|
2351
|
+
"auditDigest": "sha256:754b9b628d1906785c3882a5ec62c7f8a9f83140ce3741fecc40f3baa91bd0a2"
|
|
2352
2352
|
},
|
|
2353
2353
|
{
|
|
2354
2354
|
"contractVersion": 1,
|
|
@@ -2908,7 +2908,7 @@
|
|
|
2908
2908
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
2909
2909
|
],
|
|
2910
2910
|
"breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
|
|
2911
|
-
"auditDigest": "sha256:
|
|
2911
|
+
"auditDigest": "sha256:6cf134f8bc0c0ab488cb159ef2bb9f7a94b454c4f7adee134ce7dee00d84c5d3",
|
|
2912
2912
|
"compatibleBreakingDigests": [
|
|
2913
2913
|
"sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1",
|
|
2914
2914
|
"sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
|
|
@@ -5082,7 +5082,7 @@
|
|
|
5082
5082
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
5083
5083
|
],
|
|
5084
5084
|
"breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
|
|
5085
|
-
"auditDigest": "sha256:
|
|
5085
|
+
"auditDigest": "sha256:fc62e34e4fde50da0bf5bf2f9e0b455a8ff1ccea62f7348d1a132567e2c829e1"
|
|
5086
5086
|
},
|
|
5087
5087
|
{
|
|
5088
5088
|
"contractVersion": 1,
|
|
@@ -5308,5 +5308,5 @@
|
|
|
5308
5308
|
"compatibilityFactCutRoot": "sha256:f61b975d4a96c921cc4bd37fb3ed9a0596b47004fe34dc7219979d697e3707f9",
|
|
5309
5309
|
"compatibilityProofRegistryRoot": "sha256:b7194b811e4d3af2df4390bc4d1731e16a86215bd64ee18cb630dd5492f4fb63",
|
|
5310
5310
|
"compatibilityDigest": "sha256:5de1c69386510b74b17eb70141b8bdd07063d62c504f91db5e84b67c6d4b64a2",
|
|
5311
|
-
"contractDigest": "sha256:
|
|
5311
|
+
"contractDigest": "sha256:5174492f4e44f42e3e5b6869eb8a6226542ebb772b3928494efafc168b4fa5f5"
|
|
5312
5312
|
}
|