@kungfu-tech/buildchain 4.0.2-alpha.0 → 4.0.2-alpha.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (82) hide show
  1. package/architecture/agent-change-map.md +52 -5
  2. package/architecture/ci-lane-change-budget.json +408 -8
  3. package/architecture/internal-capabilities.json +44 -1
  4. package/architecture/maintainability-debt.json +65 -133
  5. package/architecture/maintainability-policy.json +20 -15
  6. package/architecture/release-tail-contract-inventory.json +4 -4
  7. package/architecture/v3-core-mechanism-inventory.json +1 -0
  8. package/architecture/v3-v4-live-capability-inventory.json +17 -17
  9. package/architecture/v4-delivery-warrant-shadow-fixtures.json +5 -5
  10. package/architecture/v4-release-invocation-fixtures.json +139 -0
  11. package/architecture/v4-release-topology.json +317 -0
  12. package/architecture/v4-runtime-semantic-closure.json +4 -1
  13. package/architecture/v4-universal-workflow-bootstrap.json +181 -0
  14. package/architecture/v4-universal-workflow-fault-campaign.json +72 -0
  15. package/architecture/v4-universal-workflow-train-admission.json +40 -0
  16. package/contracts/buildchain-v2-residuals-v1.json +0 -9
  17. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  18. package/contracts/v4-release-invocation-v1.schema.json +134 -0
  19. package/dist/site/buildchain-contract.json +87 -42
  20. package/dist/site/buildchain-site.json +15 -10
  21. package/dist/site/capability-registry.json +1 -1
  22. package/dist/site/controller-registry.json +46 -10
  23. package/dist/site/kfd-claims.json +176 -69
  24. package/dist/site/kfd-upstream-aggregate.json +1 -1
  25. package/dist/site/manual-registry.json +2 -2
  26. package/dist/site/node-api-registry.json +97 -22
  27. package/dist/site/page-registry.json +9 -4
  28. package/dist/site/public-surface-audit.json +190 -71
  29. package/dist/site/publication-authority-registry.json +68 -3
  30. package/dist/site/publication-registry.json +4 -4
  31. package/dist/site/site-manifest.json +6 -6
  32. package/dist/site/workflow-registry.json +221 -72
  33. package/docs/node-api-reference.md +28 -25
  34. package/docs/reusable-build-surface.md +16 -0
  35. package/package.json +2 -2
  36. package/packages/core/buildchain-publication-authority.js +3 -0
  37. package/packages/core/ci-lane-change-budget.js +14 -1
  38. package/packages/core/dev-delivery-candidate-identity.js +45 -17
  39. package/packages/core/dev-delivery-execution-transfer.js +6 -7
  40. package/packages/core/dev-delivery-provider-heartbeat.js +22 -6
  41. package/packages/core/dev-delivery-warrant-legacy-recovery.js +4 -2
  42. package/packages/core/dev-delivery-warrant-native-compatibility.js +33 -0
  43. package/packages/core/dev-delivery-warrant-state.js +54 -54
  44. package/packages/core/dev-delivery-warrant.js +8 -0
  45. package/packages/core/dev-delivery-writer-protocol-transition.js +72 -0
  46. package/packages/core/release-tail-product-capabilities.js +29 -0
  47. package/packages/core/release-tail-provider-plane.js +3 -3
  48. package/packages/core/v4-canonical-contracts.js +14 -0
  49. package/packages/core/v4-floating-consumer-policy.js +4 -1
  50. package/packages/core/v4-product-publication.js +387 -0
  51. package/packages/core/v4-protected-publication-source.js +93 -0
  52. package/packages/core/v4-publication-qualification.js +1 -0
  53. package/packages/core/v4-release-invocation.js +425 -0
  54. package/packages/core/v4-universal-workflow-bootstrap.js +596 -0
  55. package/scripts/audit-publication-control-plane.mjs +0 -1
  56. package/scripts/check-inventory.mjs +27 -59
  57. package/scripts/check-maintainability.mjs +29 -118
  58. package/scripts/check-v3-v4-capability-inventory.mjs +3 -61
  59. package/scripts/check-v4-floating-consumer-policy-contract.mjs +10 -20
  60. package/scripts/check-v4-release-topology.mjs +493 -0
  61. package/scripts/check-v4-universal-workflow-bootstrap.mjs +257 -0
  62. package/scripts/dev-delivery-warrant.mjs +26 -5
  63. package/scripts/generate-channel-build-workflow.mjs +5 -1
  64. package/scripts/generate-channel-promotion-workflow.mjs +17 -57
  65. package/scripts/generate-v4-universal-workflow-facades.mjs +415 -0
  66. package/scripts/maintainability-public-surface.mjs +115 -0
  67. package/scripts/release-candidate-resolver.mjs +23 -24
  68. package/scripts/resume-from-candidate-run.mjs +16 -17
  69. package/scripts/universal-facade-maintainability.mjs +82 -0
  70. package/scripts/v3-v4-capability-catalog.mjs +107 -0
  71. package/scripts/v4-declarative-promotion-admission.mjs +4 -1
  72. package/scripts/v4-product-publication-intent.mjs +114 -0
  73. package/scripts/v4-release-candidate-adapter.mjs +41 -0
  74. package/scripts/v4-universal-workflow-backflow.mjs +212 -0
  75. package/scripts/v4-universal-workflow-engine.mjs +586 -0
  76. package/scripts/v4-universal-workflow-self-dogfood.mjs +205 -0
  77. package/templates/universal-buildchain-bootstrap-recovery.yml +282 -0
  78. package/templates/universal-buildchain-bootstrap.yml +28 -0
  79. package/scripts/capture-package-release-propagation.mjs +0 -263
  80. package/scripts/publication-commit-evidence.mjs +0 -444
  81. package/scripts/publish-github-artifact-attestation-evidence.mjs +0 -201
  82. package/scripts/stage-github-artifact-attestation-inputs.mjs +0 -65
package/dist/site/publication-authority-registry.json CHANGED
@@ -232,6 +232,21 @@
232
232
  "runnerPolicy": "unqualified",
233
233
  "notes": ""
234
234
  },
235
+ {
236
+ "workflowPath": ".github/workflows/bootstrap.yml",
237
+ "authorityClass": "product-publication",
238
+ "publicationCapable": true,
239
+ "capabilityIds": [
240
+ "universal-candidate-execution"
241
+ ],
242
+ "credentialMode": "caller-secrets",
243
+ "publisherWorkflowMode": "caller-bound",
244
+ "publisherWorkflowPath": ".github/workflows/bootstrap.yml",
245
+ "environment": "none",
246
+ "environmentMode": "fixed",
247
+ "runnerPolicy": "qualified-measured",
248
+ "notes": ""
249
+ },
235
250
  {
236
251
  "workflowPath": ".github/workflows/build-surface-fixture.yml",
237
252
  "authorityClass": "non-publication-oidc",
@@ -732,6 +747,36 @@
732
747
  "runnerPolicy": "unqualified",
733
748
  "notes": ""
734
749
  },
750
+ {
751
+ "workflowPath": ".github/workflows/universal-bootstrap-dogfood.yml",
752
+ "authorityClass": "product-publication",
753
+ "publicationCapable": true,
754
+ "capabilityIds": [
755
+ "universal-candidate-execution"
756
+ ],
757
+ "credentialMode": "caller-secrets",
758
+ "publisherWorkflowMode": "caller-bound",
759
+ "publisherWorkflowPath": ".github/workflows/universal-bootstrap-dogfood.yml",
760
+ "environment": "none",
761
+ "environmentMode": "fixed",
762
+ "runnerPolicy": "qualified-measured",
763
+ "notes": ""
764
+ },
765
+ {
766
+ "workflowPath": ".github/workflows/universal-bootstrap-recovery.yml",
767
+ "authorityClass": "product-publication",
768
+ "publicationCapable": true,
769
+ "capabilityIds": [
770
+ "universal-candidate-execution"
771
+ ],
772
+ "credentialMode": "caller-secrets",
773
+ "publisherWorkflowMode": "caller-bound",
774
+ "publisherWorkflowPath": ".github/workflows/universal-bootstrap-recovery.yml",
775
+ "environment": "none",
776
+ "environmentMode": "fixed",
777
+ "runnerPolicy": "qualified-measured",
778
+ "notes": ""
779
+ },
735
780
  {
736
781
  "workflowPath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
737
782
  "authorityClass": "product-publication",
@@ -803,8 +848,7 @@
803
848
  "path": ".github/workflows/.release-candidate-promote.yml",
804
849
  "signals": [
805
850
  "write-permission",
806
- "oidc",
807
- "environment"
851
+ "oidc"
808
852
  ],
809
853
  "classified": true
810
854
  },
@@ -911,6 +955,11 @@
911
955
  ],
912
956
  "classified": true
913
957
  },
958
+ {
959
+ "path": ".github/workflows/bootstrap.yml",
960
+ "signals": [],
961
+ "classified": true
962
+ },
914
963
  {
915
964
  "path": ".github/workflows/build-surface-fixture.yml",
916
965
  "signals": [],
@@ -1215,6 +1264,22 @@
1215
1264
  ],
1216
1265
  "classified": true
1217
1266
  },
1267
+ {
1268
+ "path": ".github/workflows/universal-bootstrap-dogfood.yml",
1269
+ "signals": [
1270
+ "write-permission",
1271
+ "oidc"
1272
+ ],
1273
+ "classified": true
1274
+ },
1275
+ {
1276
+ "path": ".github/workflows/universal-bootstrap-recovery.yml",
1277
+ "signals": [
1278
+ "write-permission",
1279
+ "oidc"
1280
+ ],
1281
+ "classified": true
1282
+ },
1218
1283
  {
1219
1284
  "path": ".github/workflows/v4-adopter-delivery-dogfood.yml",
1220
1285
  "signals": [],
@@ -1260,5 +1325,5 @@
1260
1325
  "classified": false
1261
1326
  }
1262
1327
  ],
1263
- "registryDigest": "4f60d125496eb73e47dc21ceafa340e5cd7c5fd840eabfa17044dbacedd97f5a"
1328
+ "registryDigest": "266f19363d4d067bc07a41b2145e1699284ed2b25f4adf7e1d07e4f3b7ed49d2"
1264
1329
  }
package/dist/site/publication-registry.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-publication-release-registry",
4
- "generatedAt": "2026-08-28T20:30:35.956Z",
5
- "publishedAt": "2026-08-28T20:30:35.956Z",
4
+ "generatedAt": "2026-08-31T21:12:16.000Z",
5
+ "publishedAt": "2026-08-31T21:12:16.000Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "3881f9dea6fa750ce5e561fc86419a163ca19b90",
22
+ "sourceRevision": "f6ad53d9db073a6940b0cc08a80f0fcd1b3f14fb",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -32,7 +32,7 @@
32
32
  },
33
33
  "package": {
34
34
  "name": "@kungfu-tech/buildchain",
35
- "version": "4.0.2-alpha.0",
35
+ "version": "4.0.2-alpha.11",
36
36
  "versionSource": "package.json#version"
37
37
  },
38
38
  "sourceKind": "package-site-bundle",
package/dist/site/site-manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-manifest",
4
- "generatedAt": "2026-08-28T20:30:35.956Z",
5
- "publishedAt": "2026-08-28T20:30:35.956Z",
4
+ "generatedAt": "2026-08-31T21:12:16.000Z",
5
+ "publishedAt": "2026-08-31T21:12:16.000Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "3881f9dea6fa750ce5e561fc86419a163ca19b90",
22
+ "sourceRevision": "f6ad53d9db073a6940b0cc08a80f0fcd1b3f14fb",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "4.0.2-alpha.0",
40
+ "version": "4.0.2-alpha.11",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "entrypoint": "buildchain-site.json",
@@ -253,7 +253,7 @@
253
253
  "path": "docs/node-api-reference.md",
254
254
  "plane": "use",
255
255
  "exists": true,
256
- "digest": "sha256:e9683e04409d60ee1a4e60f89766c158586cf1eb91fc890f0b2660814f05dbdb"
256
+ "digest": "sha256:a5863a53832a8f1f3fac531d94af8a07ebb1dba2c8852da628fd85179fb504a9"
257
257
  },
258
258
  {
259
259
  "id": "build-facts",
@@ -293,7 +293,7 @@
293
293
  "path": "docs/reusable-build-surface.md",
294
294
  "plane": "use",
295
295
  "exists": true,
296
- "digest": "sha256:fc2649d0ae4dc6a08275bc1f2509efd3e9730227eaa8157ef64daf4b9c850264"
296
+ "digest": "sha256:0ea67ecc0eb6e4d49f71e11ccd670d442b811c9132736dd8c600d038dc6ebbe9"
297
297
  },
298
298
  {
299
299
  "id": "v4-adopter-delivery",