@kungfu-tech/buildchain 4.0.1 → 4.0.2-alpha.2

package/architecture/agent-change-map.md

@@ -77,7 +77,6 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
 - sources: `scripts/locked-source-checkout.mjs`
 - sources: `scripts/maintainability-domain-metrics.mjs`
 - sources: `scripts/paper.mjs`
-- sources: `scripts/publication-commit-evidence.mjs`
 - sources: `scripts/reconcile-github-governance.mjs`
 - sources: `scripts/release-candidate-resolver.mjs`
 - sources: `scripts/release-line-policy.mjs`
@@ -124,7 +123,6 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
 - tests: `tests/release-passport.test.mjs`
 - tests: `tests/release-propagation.test.mjs`
 - tests: `tests/v4-delivery-authority-parity.test.mjs`
-- tests: `tests/v4-floating-consumer-policy-contract.test.mjs`
 - tests: `tests/v4-floating-consumer-policy.test.mjs`
 - tests: `tests/v4-publication-rehearsal.test.mjs`
 - tests: `tests/web-surface.test.mjs`
@@ -154,6 +152,7 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
 
 - `tests/v3-v4-capability-inventory.test.mjs`
 - `tests/v4-floating-consumer-policy-contract.test.mjs`
+- `tests/v4-publication-qualification.test.mjs`
 - `.github/workflows/v4-adopter-delivery.yml`
 - `.github/workflows/buildchain-ref-promotion.yml`
 - `tests/release-candidate-recovery.test.mjs`
@@ -171,16 +170,17 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
 - `tests/promotion-channel-router.test.mjs`
 - `scripts/site-capability-metadata.mjs`
 - `tests/v4-floating-consumer-policy.test.mjs`
+- `tests/v4-declarative-promotion-mode.test.mjs`
 - `scripts/buildchain-cli-help.mjs`
 - `scripts/check-v4-floating-consumer-policy-contract.mjs`
 - `tests/dev-delivery-warrant.test.mjs`
 - `actions/promote-buildchain-ref/internal/version-state.js`
-- `packages/core/v4-floating-consumer-policy.js`
 - `packages/core/v4-floating-consumer-release-passport.js`
 - `packages/core/release-passport.js`
 - `tests/promote-buildchain-ref-governance.test.mjs`
-- `tests/v4-declarative-promotion-mode.test.mjs`
 - `scripts/buildchain-cli-help.mjs`
+- `scripts/check-maintainability.mjs`
+- `tests/maintainability.test.mjs`
 
 ## cli-command-registry
 
@@ -894,6 +894,7 @@ Owner: Buildchain protected delivery maintainers
 - `packages/core/dev-delivery-warrant.js`
 - `packages/core/dev-delivery-warrant-state.js`
 - `packages/core/dev-delivery-warrant-qualification.js`
+- `packages/core/dev-delivery-warrant-legacy-recovery.js`
 - `packages/core/dev-delivery-native-proof.js`
 - `packages/core/dev-delivery-native-execution.js`
 - `packages/core/dev-delivery-execution-failure.js`
@@ -940,6 +941,7 @@ Owner: Buildchain protected delivery maintainers
 
 - `tests/dev-delivery-warrant.test.mjs`
 - `tests/dev-delivery-warrant-command.test.mjs`
+- `tests/dev-delivery-warrant-legacy-recovery.test.mjs`
 - `tests/dev-delivery-two-phase.test.mjs`
 - `tests/dev-delivery-two-phase-run.test.mjs`
 - `tests/dev-delivery-native-run.test.mjs`
@@ -956,7 +958,7 @@ Owner: Buildchain protected delivery maintainers
 
 ### Minimal validation
 
-- `node --test tests/dev-delivery-warrant.test.mjs tests/dev-delivery-warrant-command.test.mjs tests/dev-delivery-two-phase.test.mjs tests/dev-delivery-two-phase-run.test.mjs tests/dev-delivery-native-run.test.mjs tests/dev-delivery-process-boundary.test.mjs tests/dev-delivery-process-boundary-negative.test.mjs tests/dev-delivery-provider-heartbeat.test.mjs tests/dev-delivery-authority.test.mjs tests/build-surface.test.mjs tests/v4-delivery-authority-parity.test.mjs`
+- `node --test tests/dev-delivery-warrant.test.mjs tests/dev-delivery-warrant-command.test.mjs tests/dev-delivery-warrant-legacy-recovery.test.mjs tests/dev-delivery-two-phase.test.mjs tests/dev-delivery-two-phase-run.test.mjs tests/dev-delivery-native-run.test.mjs tests/dev-delivery-process-boundary.test.mjs tests/dev-delivery-process-boundary-negative.test.mjs tests/dev-delivery-provider-heartbeat.test.mjs tests/dev-delivery-authority.test.mjs tests/build-surface.test.mjs tests/v4-delivery-authority-parity.test.mjs`
 
 ## v4-publication-rehearsal
 

package/architecture/ci-lane-change-budget.json

@@ -185,37 +185,105 @@
   },
   "declarations": [
     {
-      "laneId": ".github/workflows/.release-candidate-promote.yml#legacy-promote",
+      "laneId": ".github/workflows/.release-candidate-promote.yml#qualify",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "serialized",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 30,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "protected release qualification latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "QUALIFY is the read-only exact-runtime and sealed-candidate admission boundary."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.release-candidate-promote.yml#apply",
       "authorityClass": "release",
       "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "serialized",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 30,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "protected release APPLY latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "APPLY is the sole contents-write and provider-mutation OIDC authority boundary."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.release-candidate-promote.yml#settle",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "serialized",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 10,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "terminal receipt projection latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "SETTLE verifies and projects the already durable terminal ReleaseReceipt without mutation authority."
+      }
+    },
+    {
+      "laneId": ".github/workflows/buildchain-ref-promotion-recovery.yml#resume",
+      "authorityClass": "release",
+      "triggerClass": "manual",
       "concurrencyPolicy": {
         "mode": "none",
         "cancelInProgress": false
       },
-      "expectedRunnerMinutes": 45,
+      "expectedRunnerMinutes": 35,
       "cancellationBehavior": "finish-started",
       "sloImpact": {
         "mergeCritical": false,
-        "metric": "protected release completion latency",
+        "metric": "manual recovery adapter latency",
         "expectedContributionSeconds": 0,
-        "rationale": "This is the existing v3 promotion lane under an explicit legacy identity, not an added execution path."
+        "rationale": "The recovery surface is a one-way adapter into the same canonical publisher."
       }
     },
     {
-      "laneId": ".github/workflows/.release-candidate-promote.yml#v4-declarative-promote",
+      "laneId": ".github/workflows/buildchain-ref-promotion.yml#promote",
+      "authorityClass": "release",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 35,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "Buildchain alpha promotion adapter latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The Buildchain-owned alpha entry delegates to the single v4 publisher."
+      }
+    },
+    {
+      "laneId": ".github/workflows/release-candidate-promote.yml#invoke",
       "authorityClass": "release",
       "triggerClass": "reusable",
       "concurrencyPolicy": {
         "mode": "none",
         "cancelInProgress": false
       },
-      "expectedRunnerMinutes": 30,
+      "expectedRunnerMinutes": 35,
       "cancellationBehavior": "finish-started",
       "sloImpact": {
         "mergeCritical": false,
-        "metric": "protected release completion latency",
+        "metric": "public promotion adapter latency",
         "expectedContributionSeconds": 0,
-        "rationale": "The v4 provider lane replaces consumer tail execution only for release invocations and is outside merge-critical CI."
+        "rationale": "The public compatibility surface resolves discovery facts and invokes one fixed v4 publisher."
       }
     },
     {

package/architecture/internal-capabilities.json

@@ -76,6 +76,7 @@
     "packages/core/dev-delivery-warrant.js",
     "packages/core/dev-delivery-warrant-state.js",
     "packages/core/dev-delivery-warrant-qualification.js",
+    "packages/core/dev-delivery-warrant-legacy-recovery.js",
     "packages/core/dev-delivery-native-proof.js",
     "packages/core/dev-delivery-native-execution.js",
     "packages/core/dev-delivery-execution-failure.js",
@@ -591,6 +592,7 @@
         "packages/core/dev-delivery-warrant.js",
         "packages/core/dev-delivery-warrant-state.js",
         "packages/core/dev-delivery-warrant-qualification.js",
+        "packages/core/dev-delivery-warrant-legacy-recovery.js",
         "packages/core/dev-delivery-native-proof.js",
         "packages/core/dev-delivery-native-execution.js",
         "packages/core/dev-delivery-execution-failure.js",
@@ -624,6 +626,7 @@
       "tests": [
         "tests/dev-delivery-warrant.test.mjs",
         "tests/dev-delivery-warrant-command.test.mjs",
+        "tests/dev-delivery-warrant-legacy-recovery.test.mjs",
         "tests/dev-delivery-two-phase.test.mjs",
         "tests/dev-delivery-two-phase-run.test.mjs",
         "tests/dev-delivery-native-run.test.mjs",
@@ -649,7 +652,7 @@
         "dist/site/schemas/dev-delivery-authority-v2.schema.json"
       ],
       "validationCommands": [
-        "node --test tests/dev-delivery-warrant.test.mjs tests/dev-delivery-warrant-command.test.mjs tests/dev-delivery-two-phase.test.mjs tests/dev-delivery-two-phase-run.test.mjs tests/dev-delivery-native-run.test.mjs tests/dev-delivery-process-boundary.test.mjs tests/dev-delivery-process-boundary-negative.test.mjs tests/dev-delivery-provider-heartbeat.test.mjs tests/dev-delivery-authority.test.mjs tests/build-surface.test.mjs tests/v4-delivery-authority-parity.test.mjs"
+        "node --test tests/dev-delivery-warrant.test.mjs tests/dev-delivery-warrant-command.test.mjs tests/dev-delivery-warrant-legacy-recovery.test.mjs tests/dev-delivery-two-phase.test.mjs tests/dev-delivery-two-phase-run.test.mjs tests/dev-delivery-native-run.test.mjs tests/dev-delivery-process-boundary.test.mjs tests/dev-delivery-process-boundary-negative.test.mjs tests/dev-delivery-provider-heartbeat.test.mjs tests/dev-delivery-authority.test.mjs tests/build-surface.test.mjs tests/v4-delivery-authority-parity.test.mjs"
       ]
     },
     {

package/architecture/maintainability-debt.json

@@ -7,8 +7,8 @@
   },
   "totalExcessLedger": {
     "metric": "calibrated-full-dimensional-excess-v1",
-    "measuredExcess": 67962,
-    "current": 59901
+    "measuredExcess": 64284,
+    "current": 56223
   },
   "defaults": {
     "owner": "Buildchain architecture maintainers",
@@ -1220,7 +1220,7 @@
       "scripts/audit-publication-control-plane.mjs": {
         "baseline": {
           "functions": {
-            "main@200": {
+            "main@199": {
               "lines": 322,
               "complexity": 92
             }
@@ -1228,7 +1228,7 @@
         },
         "current": {
           "functions": {
-            "main@200": {
+            "main@199": {
               "lines": 322,
               "complexity": 92
             }
@@ -1236,7 +1236,7 @@
         },
         "target": {
           "functions": {
-            "main@200": {
+            "main@199": {
               "lines": 180,
               "complexity": 25
             }
@@ -1270,7 +1270,7 @@
           "lines": 1515
         },
         "current": {
-          "lines": 1515
+          "lines": 1483
         },
         "target": {
           "lines": 600
@@ -1279,21 +1279,21 @@
       "scripts/check-maintainability.mjs": {
         "baseline": {
           "functions": {
-            "evaluateMaintainability@353": {
+            "evaluateMaintainability@361": {
               "complexity": 29
             }
           }
         },
         "current": {
           "functions": {
-            "evaluateMaintainability@353": {
+            "evaluateMaintainability@361": {
               "complexity": 29
             }
           }
         },
         "target": {
           "functions": {
-            "evaluateMaintainability@353": {
+            "evaluateMaintainability@361": {
               "complexity": 25
             }
           }
@@ -1398,21 +1398,21 @@
       "scripts/dev-delivery-warrant-options.mjs": {
         "baseline": {
           "functions": {
-            "devDeliveryCliOptions@36": {
+            "devDeliveryCliOptions@61": {
               "lines": 247
             }
           }
         },
         "current": {
           "functions": {
-            "devDeliveryCliOptions@36": {
-              "lines": 247
+            "devDeliveryCliOptions@61": {
+              "lines": 233
             }
           }
         },
         "target": {
           "functions": {
-            "devDeliveryCliOptions@36": {
+            "devDeliveryCliOptions@61": {
               "lines": 180
             }
           }
@@ -1499,7 +1499,7 @@
         "current": {
           "functions": {
             "generateChannelPromotionWorkflow@277": {
-              "lines": 282
+              "lines": 240
             }
           }
         },
@@ -1664,38 +1664,6 @@
           }
         }
       },
-      "scripts/publication-commit-evidence.mjs": {
-        "baseline": {
-          "functions": {
-            "validateInstallerBundle@85": {
-              "complexity": 42
-            },
-            "verifyInstallerBundleReadback@307": {
-              "complexity": 30
-            }
-          }
-        },
-        "current": {
-          "functions": {
-            "validateInstallerBundle@85": {
-              "complexity": 42
-            },
-            "verifyInstallerBundleReadback@307": {
-              "complexity": 30
-            }
-          }
-        },
-        "target": {
-          "functions": {
-            "validateInstallerBundle@85": {
-              "complexity": 25
-            },
-            "verifyInstallerBundleReadback@307": {
-              "complexity": 25
-            }
-          }
-        }
-      },
       "scripts/reconcile-github-governance.mjs": {
         "baseline": {
           "lines": 689
@@ -2231,15 +2199,15 @@
         "baseline": {
           "lines": 3181,
           "functions": {
-            "<anonymous@2013>@2013": {
+            "<anonymous@1559>@1559": {
               "lines": 206
             }
           }
         },
         "current": {
-          "lines": 3178,
+          "lines": 2727,
           "functions": {
-            "<anonymous@2013>@2013": {
+            "<anonymous@1559>@1559": {
               "lines": 206
             }
           }
@@ -2247,7 +2215,7 @@
         "target": {
           "lines": 600,
           "functions": {
-            "<anonymous@2013>@2013": {
+            "<anonymous@1559>@1559": {
               "lines": 180
             }
           }
@@ -2260,36 +2228,30 @@
             "<anonymous@170>@170": {
               "lines": 195
             },
-            "<anonymous@553>@553": {
+            "<anonymous@544>@544": {
               "lines": 183
             },
-            "<anonymous@737>@737": {
-              "lines": 506
-            },
-            "<anonymous@2153>@2153": {
+            "<anonymous@1678>@1678": {
               "lines": 249
             },
-            "<anonymous@3337>@3337": {
+            "<anonymous@2684>@2684": {
               "lines": 188
             }
           }
         },
         "current": {
-          "lines": 3680,
+          "lines": 3027,
           "functions": {
             "<anonymous@170>@170": {
-              "lines": 195
+              "lines": 186
             },
-            "<anonymous@553>@553": {
+            "<anonymous@544>@544": {
               "lines": 183
             },
-            "<anonymous@737>@737": {
-              "lines": 506
-            },
-            "<anonymous@2153>@2153": {
+            "<anonymous@1678>@1678": {
               "lines": 249
             },
-            "<anonymous@3337>@3337": {
+            "<anonymous@2684>@2684": {
               "lines": 188
             }
           }
@@ -2300,16 +2262,13 @@
             "<anonymous@170>@170": {
               "lines": 180
             },
-            "<anonymous@553>@553": {
+            "<anonymous@544>@544": {
               "lines": 180
             },
-            "<anonymous@737>@737": {
+            "<anonymous@1678>@1678": {
               "lines": 180
             },
-            "<anonymous@2153>@2153": {
-              "lines": 180
-            },
-            "<anonymous@3337>@3337": {
+            "<anonymous@2684>@2684": {
               "lines": 180
             }
           }
@@ -2452,7 +2411,7 @@
           }
         },
         "current": {
-          "lines": 1179,
+          "lines": 1178,
           "functions": {
             "<anonymous@817>@817": {
               "lines": 205
@@ -2655,7 +2614,7 @@
           "lines": 1217
         },
         "current": {
-          "lines": 1208
+          "lines": 1126
         },
         "target": {
           "lines": 600
@@ -2688,7 +2647,7 @@
           "lines": 1355
         },
         "current": {
-          "lines": 1355
+          "lines": 1270
         },
         "target": {
           "lines": 600
@@ -2723,29 +2682,6 @@
           }
         }
       },
-      "tests/v4-floating-consumer-policy-contract.test.mjs": {
-        "baseline": {
-          "functions": {
-            "<anonymous@76>@76": {
-              "lines": 292
-            }
-          }
-        },
-        "current": {
-          "functions": {
-            "<anonymous@76>@76": {
-              "lines": 292
-            }
-          }
-        },
-        "target": {
-          "functions": {
-            "<anonymous@76>@76": {
-              "lines": 180
-            }
-          }
-        }
-      },
       "tests/v4-floating-consumer-policy.test.mjs": {
         "baseline": {
           "lines": 714
@@ -2986,7 +2922,7 @@
           "decisions": 27
         },
         "current": {
-          "lines": 1007,
+          "lines": 1006,
           "maxStepsPerJob": 30,
           "decisions": 27
         },
@@ -2998,25 +2934,13 @@
       },
       ".github/workflows/.release-candidate-promote.yml": {
         "baseline": {
-          "lines": 2736,
-          "jobs": 13,
-          "steps": 99,
-          "maxStepsPerJob": 47,
-          "decisions": 75
+          "lines": 2736
         },
         "current": {
-          "lines": 2677,
-          "jobs": 13,
-          "steps": 99,
-          "maxStepsPerJob": 47,
-          "decisions": 75
+          "lines": 1085
         },
         "target": {
-          "lines": 600,
-          "jobs": 8,
-          "steps": 50,
-          "maxStepsPerJob": 20,
-          "decisions": 25
+          "lines": 600
         }
       },
       ".github/workflows/.release-verify.yml": {
@@ -3084,7 +3008,7 @@
           "decisions": 28
         },
         "current": {
-          "lines": 1529,
+          "lines": 1528,
           "decisions": 28
         },
         "target": {
@@ -3136,7 +3060,7 @@
           "lines": 1218
         },
         "current": {
-          "lines": 1218
+          "lines": 1094
         },
         "target": {
           "lines": 600
@@ -3161,6 +3085,7 @@
   "hotspots": [
     "tests/v3-v4-capability-inventory.test.mjs",
     "tests/v4-floating-consumer-policy-contract.test.mjs",
+    "tests/v4-publication-qualification.test.mjs",
     ".github/workflows/v4-adopter-delivery.yml",
     ".github/workflows/buildchain-ref-promotion.yml",
     "tests/release-candidate-recovery.test.mjs",
@@ -3178,16 +3103,17 @@
     "tests/promotion-channel-router.test.mjs",
     "scripts/site-capability-metadata.mjs",
     "tests/v4-floating-consumer-policy.test.mjs",
+    "tests/v4-declarative-promotion-mode.test.mjs",
     "scripts/buildchain-cli-help.mjs",
     "scripts/check-v4-floating-consumer-policy-contract.mjs",
     "tests/dev-delivery-warrant.test.mjs",
     "actions/promote-buildchain-ref/internal/version-state.js",
-    "packages/core/v4-floating-consumer-policy.js",
     "packages/core/v4-floating-consumer-release-passport.js",
     "packages/core/release-passport.js",
     "tests/promote-buildchain-ref-governance.test.mjs",
-    "tests/v4-declarative-promotion-mode.test.mjs",
-    "scripts/buildchain-cli-help.mjs"
+    "scripts/buildchain-cli-help.mjs",
+    "scripts/check-maintainability.mjs",
+    "tests/maintainability.test.mjs"
   ],
   "burnDownSlices": [
     {
@@ -3202,14 +3128,14 @@
       "path": "tests/build-surface.test.mjs",
       "metric": "lines",
       "baseline": 4639,
-      "current": 3680
+      "current": 3027
     },
     {
       "domain": "workflows",
       "path": ".github/workflows/.release-candidate-promote.yml",
       "metric": "lines",
       "baseline": 2736,
-      "current": 2677
+      "current": 1085
     },
     {
       "domain": "sources",