@kungfu-tech/buildchain 4.0.2-alpha.0 → 4.0.2-alpha.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (63) hide show
  1. package/architecture/agent-change-map.md +12 -5
  2. package/architecture/ci-lane-change-budget.json +76 -8
  3. package/architecture/internal-capabilities.json +5 -1
  4. package/architecture/maintainability-debt.json +62 -132
  5. package/architecture/maintainability-policy.json +17 -12
  6. package/architecture/release-tail-contract-inventory.json +4 -4
  7. package/architecture/v3-core-mechanism-inventory.json +1 -0
  8. package/architecture/v3-v4-live-capability-inventory.json +17 -17
  9. package/architecture/v4-delivery-warrant-shadow-fixtures.json +5 -5
  10. package/architecture/v4-release-invocation-fixtures.json +139 -0
  11. package/architecture/v4-release-topology.json +316 -0
  12. package/architecture/v4-runtime-semantic-closure.json +4 -1
  13. package/contracts/buildchain-v2-residuals-v1.json +0 -9
  14. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  15. package/contracts/v4-release-invocation-v1.schema.json +134 -0
  16. package/dist/site/buildchain-contract.json +9 -9
  17. package/dist/site/buildchain-site.json +7 -7
  18. package/dist/site/kfd-claims.json +26 -5
  19. package/dist/site/kfd-upstream-aggregate.json +1 -1
  20. package/dist/site/manual-registry.json +1 -1
  21. package/dist/site/node-api-registry.json +92 -17
  22. package/dist/site/page-registry.json +2 -2
  23. package/dist/site/public-surface-audit.json +36 -9
  24. package/dist/site/publication-authority-registry.json +2 -3
  25. package/dist/site/publication-registry.json +4 -4
  26. package/dist/site/site-manifest.json +5 -5
  27. package/dist/site/workflow-registry.json +38 -11
  28. package/docs/node-api-reference.md +19 -16
  29. package/package.json +2 -2
  30. package/packages/core/dev-delivery-candidate-identity.js +45 -17
  31. package/packages/core/dev-delivery-execution-transfer.js +6 -7
  32. package/packages/core/dev-delivery-provider-heartbeat.js +22 -6
  33. package/packages/core/dev-delivery-warrant-legacy-recovery.js +4 -2
  34. package/packages/core/dev-delivery-warrant-native-compatibility.js +33 -0
  35. package/packages/core/dev-delivery-warrant-state.js +54 -54
  36. package/packages/core/dev-delivery-warrant.js +8 -0
  37. package/packages/core/dev-delivery-writer-protocol-transition.js +72 -0
  38. package/packages/core/release-tail-product-capabilities.js +29 -0
  39. package/packages/core/release-tail-provider-plane.js +2 -2
  40. package/packages/core/v4-canonical-contracts.js +14 -0
  41. package/packages/core/v4-floating-consumer-policy.js +4 -1
  42. package/packages/core/v4-product-publication.js +387 -0
  43. package/packages/core/v4-protected-publication-source.js +93 -0
  44. package/packages/core/v4-publication-qualification.js +1 -0
  45. package/packages/core/v4-release-invocation.js +425 -0
  46. package/scripts/audit-publication-control-plane.mjs +0 -1
  47. package/scripts/check-inventory.mjs +27 -59
  48. package/scripts/check-maintainability.mjs +13 -5
  49. package/scripts/check-v3-v4-capability-inventory.mjs +3 -61
  50. package/scripts/check-v4-floating-consumer-policy-contract.mjs +10 -20
  51. package/scripts/check-v4-release-topology.mjs +490 -0
  52. package/scripts/dev-delivery-warrant.mjs +26 -5
  53. package/scripts/generate-channel-promotion-workflow.mjs +14 -55
  54. package/scripts/release-candidate-resolver.mjs +23 -24
  55. package/scripts/resume-from-candidate-run.mjs +16 -17
  56. package/scripts/v3-v4-capability-catalog.mjs +107 -0
  57. package/scripts/v4-declarative-promotion-admission.mjs +4 -1
  58. package/scripts/v4-product-publication-intent.mjs +114 -0
  59. package/scripts/v4-release-candidate-adapter.mjs +41 -0
  60. package/scripts/capture-package-release-propagation.mjs +0 -263
  61. package/scripts/publication-commit-evidence.mjs +0 -444
  62. package/scripts/publish-github-artifact-attestation-evidence.mjs +0 -201
  63. package/scripts/stage-github-artifact-attestation-inputs.mjs +0 -65
@@ -77,7 +77,6 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
77
77
  - sources: `scripts/locked-source-checkout.mjs`
78
78
  - sources: `scripts/maintainability-domain-metrics.mjs`
79
79
  - sources: `scripts/paper.mjs`
80
- - sources: `scripts/publication-commit-evidence.mjs`
81
80
  - sources: `scripts/reconcile-github-governance.mjs`
82
81
  - sources: `scripts/release-candidate-resolver.mjs`
83
82
  - sources: `scripts/release-line-policy.mjs`
@@ -124,7 +123,6 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
124
123
  - tests: `tests/release-passport.test.mjs`
125
124
  - tests: `tests/release-propagation.test.mjs`
126
125
  - tests: `tests/v4-delivery-authority-parity.test.mjs`
127
- - tests: `tests/v4-floating-consumer-policy-contract.test.mjs`
128
126
  - tests: `tests/v4-floating-consumer-policy.test.mjs`
129
127
  - tests: `tests/v4-publication-rehearsal.test.mjs`
130
128
  - tests: `tests/web-surface.test.mjs`
@@ -154,6 +152,7 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
154
152
 
155
153
  - `tests/v3-v4-capability-inventory.test.mjs`
156
154
  - `tests/v4-floating-consumer-policy-contract.test.mjs`
155
+ - `tests/v4-publication-qualification.test.mjs`
157
156
  - `.github/workflows/v4-adopter-delivery.yml`
158
157
  - `.github/workflows/buildchain-ref-promotion.yml`
159
158
  - `tests/release-candidate-recovery.test.mjs`
@@ -166,21 +165,26 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
166
165
  - `scripts/check-v3-v4-capability-inventory.mjs`
167
166
  - `.github/workflows/release-candidate-promote.yml`
168
167
  - `actions/promote-buildchain-ref/lib.js`
168
+ - `actions/v4-release-candidate-promote/index.js`
169
+ - `actions/v4-release-candidate-promote/product-provider.js`
169
170
  - `scripts/check-inventory.mjs`
170
171
  - `tests/promote-buildchain-ref.test.mjs`
171
172
  - `tests/promotion-channel-router.test.mjs`
173
+ - `tests/v4-release-topology.test.mjs`
172
174
  - `scripts/site-capability-metadata.mjs`
173
175
  - `tests/v4-floating-consumer-policy.test.mjs`
176
+ - `tests/v4-declarative-promotion-mode.test.mjs`
174
177
  - `scripts/buildchain-cli-help.mjs`
175
178
  - `scripts/check-v4-floating-consumer-policy-contract.mjs`
176
179
  - `tests/dev-delivery-warrant.test.mjs`
180
+ - `packages/core/dev-delivery-warrant-state.js`
177
181
  - `actions/promote-buildchain-ref/internal/version-state.js`
178
- - `packages/core/v4-floating-consumer-policy.js`
179
182
  - `packages/core/v4-floating-consumer-release-passport.js`
180
183
  - `packages/core/release-passport.js`
181
184
  - `tests/promote-buildchain-ref-governance.test.mjs`
182
- - `tests/v4-declarative-promotion-mode.test.mjs`
183
185
  - `scripts/buildchain-cli-help.mjs`
186
+ - `scripts/check-maintainability.mjs`
187
+ - `tests/maintainability.test.mjs`
184
188
 
185
189
  ## cli-command-registry
186
190
 
@@ -381,6 +385,7 @@ Owner: Buildchain action maintainers
381
385
 
382
386
  ### Implementation
383
387
 
388
+ - `actions/promote-buildchain-ref/internal/contained-published-version-state.js`
384
389
  - `actions/promote-buildchain-ref/internal/promote-alpha-channel.js`
385
390
  - `actions/promote-buildchain-ref/internal/promote-major-channel.js`
386
391
  - `actions/promote-buildchain-ref/internal/promote-release-channel.js`
@@ -392,6 +397,7 @@ Owner: Buildchain action maintainers
392
397
 
393
398
  ### Tests
394
399
 
400
+ - `tests/promote-buildchain-ref-contained-published-version-state.test.mjs`
395
401
  - `tests/promote-buildchain-ref.test.mjs`
396
402
  - `tests/promote-buildchain-ref-recovery.test.mjs`
397
403
  - `tests/promote-buildchain-ref-governance.test.mjs`
@@ -403,7 +409,7 @@ Owner: Buildchain action maintainers
403
409
 
404
410
  ### Minimal validation
405
411
 
406
- - `node --test tests/promote-buildchain-ref.test.mjs tests/promote-buildchain-ref-recovery.test.mjs tests/promote-buildchain-ref-governance.test.mjs tests/promotion-responsibilities.test.mjs`
412
+ - `node --test tests/promote-buildchain-ref-contained-published-version-state.test.mjs tests/promote-buildchain-ref.test.mjs tests/promote-buildchain-ref-recovery.test.mjs tests/promote-buildchain-ref-governance.test.mjs tests/promotion-responsibilities.test.mjs`
407
413
 
408
414
  ## promotion-github-transaction-store
409
415
 
@@ -893,6 +899,7 @@ Owner: Buildchain protected delivery maintainers
893
899
 
894
900
  - `packages/core/dev-delivery-warrant.js`
895
901
  - `packages/core/dev-delivery-warrant-state.js`
902
+ - `packages/core/dev-delivery-warrant-native-compatibility.js`
896
903
  - `packages/core/dev-delivery-warrant-qualification.js`
897
904
  - `packages/core/dev-delivery-warrant-legacy-recovery.js`
898
905
  - `packages/core/dev-delivery-native-proof.js`
@@ -185,37 +185,105 @@
185
185
  },
186
186
  "declarations": [
187
187
  {
188
- "laneId": ".github/workflows/.release-candidate-promote.yml#legacy-promote",
188
+ "laneId": ".github/workflows/.release-candidate-promote.yml#qualify",
189
+ "authorityClass": "evidence",
190
+ "triggerClass": "reusable",
191
+ "concurrencyPolicy": {
192
+ "mode": "serialized",
193
+ "cancelInProgress": false
194
+ },
195
+ "expectedRunnerMinutes": 30,
196
+ "cancellationBehavior": "finish-started",
197
+ "sloImpact": {
198
+ "mergeCritical": false,
199
+ "metric": "protected release qualification latency",
200
+ "expectedContributionSeconds": 0,
201
+ "rationale": "QUALIFY is the read-only exact-runtime and sealed-candidate admission boundary."
202
+ }
203
+ },
204
+ {
205
+ "laneId": ".github/workflows/.release-candidate-promote.yml#apply",
189
206
  "authorityClass": "release",
190
207
  "triggerClass": "reusable",
208
+ "concurrencyPolicy": {
209
+ "mode": "serialized",
210
+ "cancelInProgress": false
211
+ },
212
+ "expectedRunnerMinutes": 30,
213
+ "cancellationBehavior": "finish-started",
214
+ "sloImpact": {
215
+ "mergeCritical": false,
216
+ "metric": "protected release APPLY latency",
217
+ "expectedContributionSeconds": 0,
218
+ "rationale": "APPLY is the sole contents-write and provider-mutation OIDC authority boundary."
219
+ }
220
+ },
221
+ {
222
+ "laneId": ".github/workflows/.release-candidate-promote.yml#settle",
223
+ "authorityClass": "evidence",
224
+ "triggerClass": "reusable",
225
+ "concurrencyPolicy": {
226
+ "mode": "serialized",
227
+ "cancelInProgress": false
228
+ },
229
+ "expectedRunnerMinutes": 10,
230
+ "cancellationBehavior": "finish-started",
231
+ "sloImpact": {
232
+ "mergeCritical": false,
233
+ "metric": "terminal receipt projection latency",
234
+ "expectedContributionSeconds": 0,
235
+ "rationale": "SETTLE verifies and projects the already durable terminal ReleaseReceipt without mutation authority."
236
+ }
237
+ },
238
+ {
239
+ "laneId": ".github/workflows/buildchain-ref-promotion-recovery.yml#resume",
240
+ "authorityClass": "release",
241
+ "triggerClass": "manual",
191
242
  "concurrencyPolicy": {
192
243
  "mode": "none",
193
244
  "cancelInProgress": false
194
245
  },
195
- "expectedRunnerMinutes": 45,
246
+ "expectedRunnerMinutes": 35,
196
247
  "cancellationBehavior": "finish-started",
197
248
  "sloImpact": {
198
249
  "mergeCritical": false,
199
- "metric": "protected release completion latency",
250
+ "metric": "manual recovery adapter latency",
200
251
  "expectedContributionSeconds": 0,
201
- "rationale": "This is the existing v3 promotion lane under an explicit legacy identity, not an added execution path."
252
+ "rationale": "The recovery surface is a one-way adapter into the same canonical publisher."
202
253
  }
203
254
  },
204
255
  {
205
- "laneId": ".github/workflows/.release-candidate-promote.yml#v4-declarative-promote",
256
+ "laneId": ".github/workflows/buildchain-ref-promotion.yml#promote",
257
+ "authorityClass": "release",
258
+ "triggerClass": "mixed",
259
+ "concurrencyPolicy": {
260
+ "mode": "none",
261
+ "cancelInProgress": false
262
+ },
263
+ "expectedRunnerMinutes": 35,
264
+ "cancellationBehavior": "finish-started",
265
+ "sloImpact": {
266
+ "mergeCritical": false,
267
+ "metric": "Buildchain alpha promotion adapter latency",
268
+ "expectedContributionSeconds": 0,
269
+ "rationale": "The Buildchain-owned alpha entry delegates to the single v4 publisher."
270
+ }
271
+ },
272
+ {
273
+ "laneId": ".github/workflows/release-candidate-promote.yml#invoke",
206
274
  "authorityClass": "release",
207
275
  "triggerClass": "reusable",
208
276
  "concurrencyPolicy": {
209
277
  "mode": "none",
210
278
  "cancelInProgress": false
211
279
  },
212
- "expectedRunnerMinutes": 30,
280
+ "expectedRunnerMinutes": 35,
213
281
  "cancellationBehavior": "finish-started",
214
282
  "sloImpact": {
215
283
  "mergeCritical": false,
216
- "metric": "protected release completion latency",
284
+ "metric": "public promotion adapter latency",
217
285
  "expectedContributionSeconds": 0,
218
- "rationale": "The v4 provider lane replaces consumer tail execution only for release invocations and is outside merge-critical CI."
286
+ "rationale": "The public compatibility surface resolves discovery facts and invokes one fixed v4 publisher."
219
287
  }
220
288
  },
221
289
  {
@@ -75,6 +75,7 @@
75
75
  "scripts/v4-stage-capsule-qualification.mjs",
76
76
  "packages/core/dev-delivery-warrant.js",
77
77
  "packages/core/dev-delivery-warrant-state.js",
78
+ "packages/core/dev-delivery-warrant-native-compatibility.js",
78
79
  "packages/core/dev-delivery-warrant-qualification.js",
79
80
  "packages/core/dev-delivery-warrant-legacy-recovery.js",
80
81
  "packages/core/dev-delivery-native-proof.js",
@@ -270,11 +271,13 @@
270
271
  "id": "promotion-channel-orchestration",
271
272
  "owner": "Buildchain action maintainers",
272
273
  "implementation": [
274
+ "actions/promote-buildchain-ref/internal/contained-published-version-state.js",
273
275
  "actions/promote-buildchain-ref/internal/promote-alpha-channel.js",
274
276
  "actions/promote-buildchain-ref/internal/promote-major-channel.js",
275
277
  "actions/promote-buildchain-ref/internal/promote-release-channel.js"
276
278
  ],
277
279
  "tests": [
280
+ "tests/promote-buildchain-ref-contained-published-version-state.test.mjs",
278
281
  "tests/promote-buildchain-ref.test.mjs",
279
282
  "tests/promote-buildchain-ref-recovery.test.mjs",
280
283
  "tests/promote-buildchain-ref-governance.test.mjs",
@@ -286,7 +289,7 @@
286
289
  ],
287
290
  "generatedOutputs": ["actions/promote-buildchain-ref/dist/index.js"],
288
291
  "validationCommands": [
289
- "node --test tests/promote-buildchain-ref.test.mjs tests/promote-buildchain-ref-recovery.test.mjs tests/promote-buildchain-ref-governance.test.mjs tests/promotion-responsibilities.test.mjs"
292
+ "node --test tests/promote-buildchain-ref-contained-published-version-state.test.mjs tests/promote-buildchain-ref.test.mjs tests/promote-buildchain-ref-recovery.test.mjs tests/promote-buildchain-ref-governance.test.mjs tests/promotion-responsibilities.test.mjs"
290
293
  ]
291
294
  },
292
295
  {
@@ -591,6 +594,7 @@
591
594
  "implementation": [
592
595
  "packages/core/dev-delivery-warrant.js",
593
596
  "packages/core/dev-delivery-warrant-state.js",
597
+ "packages/core/dev-delivery-warrant-native-compatibility.js",
594
598
  "packages/core/dev-delivery-warrant-qualification.js",
595
599
  "packages/core/dev-delivery-warrant-legacy-recovery.js",
596
600
  "packages/core/dev-delivery-native-proof.js",