@kungfu-tech/buildchain 4.0.2-alpha.0 → 4.0.2-alpha.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (59) hide show
  1. package/architecture/agent-change-map.md +7 -4
  2. package/architecture/ci-lane-change-budget.json +76 -8
  3. package/architecture/internal-capabilities.json +2 -0
  4. package/architecture/maintainability-debt.json +52 -124
  5. package/architecture/maintainability-policy.json +15 -10
  6. package/architecture/release-tail-contract-inventory.json +4 -4
  7. package/architecture/v3-core-mechanism-inventory.json +1 -0
  8. package/architecture/v3-v4-live-capability-inventory.json +17 -17
  9. package/architecture/v4-delivery-warrant-shadow-fixtures.json +5 -5
  10. package/architecture/v4-release-invocation-fixtures.json +139 -0
  11. package/architecture/v4-release-topology.json +243 -0
  12. package/architecture/v4-runtime-semantic-closure.json +4 -1
  13. package/contracts/buildchain-v2-residuals-v1.json +0 -9
  14. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  15. package/contracts/v4-release-invocation-v1.schema.json +134 -0
  16. package/dist/site/buildchain-contract.json +9 -9
  17. package/dist/site/buildchain-site.json +7 -7
  18. package/dist/site/kfd-claims.json +24 -5
  19. package/dist/site/kfd-upstream-aggregate.json +1 -1
  20. package/dist/site/manual-registry.json +1 -1
  21. package/dist/site/node-api-registry.json +90 -15
  22. package/dist/site/page-registry.json +2 -2
  23. package/dist/site/public-surface-audit.json +34 -9
  24. package/dist/site/publication-authority-registry.json +2 -3
  25. package/dist/site/publication-registry.json +4 -4
  26. package/dist/site/site-manifest.json +5 -5
  27. package/dist/site/workflow-registry.json +36 -11
  28. package/docs/node-api-reference.md +16 -13
  29. package/package.json +2 -2
  30. package/packages/core/dev-delivery-candidate-identity.js +45 -17
  31. package/packages/core/dev-delivery-execution-transfer.js +6 -7
  32. package/packages/core/dev-delivery-provider-heartbeat.js +22 -6
  33. package/packages/core/dev-delivery-warrant-legacy-recovery.js +4 -2
  34. package/packages/core/dev-delivery-warrant-native-compatibility.js +33 -0
  35. package/packages/core/dev-delivery-warrant-state.js +54 -54
  36. package/packages/core/dev-delivery-warrant.js +8 -0
  37. package/packages/core/dev-delivery-writer-protocol-transition.js +72 -0
  38. package/packages/core/v4-canonical-contracts.js +10 -0
  39. package/packages/core/v4-floating-consumer-policy.js +4 -1
  40. package/packages/core/v4-protected-publication-source.js +93 -0
  41. package/packages/core/v4-publication-qualification.js +1 -0
  42. package/packages/core/v4-release-invocation.js +425 -0
  43. package/scripts/audit-publication-control-plane.mjs +0 -1
  44. package/scripts/check-inventory.mjs +27 -59
  45. package/scripts/check-maintainability.mjs +13 -5
  46. package/scripts/check-v3-v4-capability-inventory.mjs +3 -61
  47. package/scripts/check-v4-floating-consumer-policy-contract.mjs +10 -20
  48. package/scripts/check-v4-release-topology.mjs +383 -0
  49. package/scripts/dev-delivery-warrant.mjs +26 -5
  50. package/scripts/generate-channel-promotion-workflow.mjs +14 -55
  51. package/scripts/release-candidate-resolver.mjs +17 -17
  52. package/scripts/resume-from-candidate-run.mjs +15 -16
  53. package/scripts/v3-v4-capability-catalog.mjs +107 -0
  54. package/scripts/v4-declarative-promotion-admission.mjs +4 -1
  55. package/scripts/v4-release-candidate-adapter.mjs +41 -0
  56. package/scripts/capture-package-release-propagation.mjs +0 -263
  57. package/scripts/publication-commit-evidence.mjs +0 -444
  58. package/scripts/publish-github-artifact-attestation-evidence.mjs +0 -201
  59. package/scripts/stage-github-artifact-attestation-inputs.mjs +0 -65
@@ -21,7 +21,7 @@
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "3ba4e7c9bdccd207be8b168f85704ee0fe0403c64fa06deb27ecf6910407646e",
24
+ "sha256": "34e3f47e628d0b67211a951dbaa0503adb1e1aac8f21f1a31cedade748a411b0",
25
25
  "summary": {
26
26
  "cliCommandCount": 117,
27
27
  "workflowCount": 77,
@@ -246,7 +246,7 @@
246
246
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
247
247
  "path": "dist/site/public-surface-audit.json",
248
248
  "status": "passed",
249
- "sha256": "3ba4e7c9bdccd207be8b168f85704ee0fe0403c64fa06deb27ecf6910407646e",
249
+ "sha256": "34e3f47e628d0b67211a951dbaa0503adb1e1aac8f21f1a31cedade748a411b0",
250
250
  "summary": {
251
251
  "cliCommandCount": 117,
252
252
  "workflowCount": 77,
@@ -4104,10 +4104,9 @@
4104
4104
  "visibility": "public",
4105
4105
  "participantFacing": true,
4106
4106
  "public": true,
4107
- "inputCount": 38,
4107
+ "inputCount": 37,
4108
4108
  "inputs": [
4109
4109
  "admission-json",
4110
- "authority-job-id",
4111
4110
  "authority-workflow-path",
4112
4111
  "auto-admission",
4113
4112
  "auto-admission-kind",
@@ -6276,15 +6275,35 @@
6276
6275
  "visibility": "public",
6277
6276
  "participantFacing": true,
6278
6277
  "public": true,
6279
- "inputCount": 8,
6278
+ "inputCount": 28,
6280
6279
  "inputs": [
6281
6280
  "artifact-paths",
6281
+ "candidate-build-summary-path",
6282
6282
  "candidate-passport-path",
6283
6283
  "failure-after-capability",
6284
+ "mutation-token",
6284
6285
  "publication-qualification-path",
6286
+ "publish-auth",
6287
+ "publish-command",
6288
+ "publish-dist-tag",
6289
+ "publish-mode",
6290
+ "publish-package-main",
6291
+ "publish-package-set-order",
6292
+ "publish-rematerialize-on-resume",
6293
+ "publish-transaction-override",
6294
+ "publisher-workflow-sha",
6285
6295
  "repository",
6296
+ "required-artifacts-path",
6297
+ "required-status-check",
6298
+ "runtime-commit",
6299
+ "runtime-tree",
6300
+ "sealed-bundle-manifest",
6301
+ "sealed-bundle-root",
6302
+ "source-sha",
6286
6303
  "stage-capsules-path",
6287
6304
  "state-path",
6305
+ "target-ref",
6306
+ "target-sha",
6288
6307
  "token"
6289
6308
  ],
6290
6309
  "reverseAuditSource": "actions/*/action.yml"
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "4.0.2-alpha.0",
7
+ "version": "4.0.2-alpha.4",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {
@@ -362,7 +362,7 @@
362
362
  "title": "Generated Node API reference",
363
363
  "path": "docs/node-api-reference.md",
364
364
  "plane": "use",
365
- "digest": "sha256:e9683e04409d60ee1a4e60f89766c158586cf1eb91fc890f0b2660814f05dbdb",
365
+ "digest": "sha256:afc6f959491ea0360ee308ee476613a9b42ab37dc5755dc66d3edb484d5e81d3",
366
366
  "capabilityGroup": "api-cli-reference",
367
367
  "audience": [
368
368
  "agent",
@@ -8149,7 +8149,7 @@
8149
8149
  ],
8150
8150
  "source": {
8151
8151
  "path": "packages/core/dev-delivery-warrant.js",
8152
- "line": 512
8152
+ "line": 520
8153
8153
  },
8154
8154
  "example": "import { cancelQueuedDevDeliveryCandidate } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8155
8155
  "maturity": "stable",
@@ -8186,7 +8186,7 @@
8186
8186
  ],
8187
8187
  "source": {
8188
8188
  "path": "packages/core/dev-delivery-warrant.js",
8189
- "line": 387
8189
+ "line": 395
8190
8190
  },
8191
8191
  "example": "import { closeDevDeliveryWarrant } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8192
8192
  "maturity": "stable",
@@ -8291,6 +8291,30 @@
8291
8291
  "agent"
8292
8292
  ]
8293
8293
  },
8294
+ {
8295
+ "id": "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_MINIMUM_WRITER_PROTOCOL_ROOT",
8296
+ "name": "DEV_DELIVERY_MINIMUM_WRITER_PROTOCOL_ROOT",
8297
+ "kind": "value",
8298
+ "signature": "DEV_DELIVERY_MINIMUM_WRITER_PROTOCOL_ROOT",
8299
+ "parameters": [],
8300
+ "returns": "unknown",
8301
+ "errors": [
8302
+ "No narrower error contract was mechanically discoverable."
8303
+ ],
8304
+ "sideEffects": [
8305
+ "unknown"
8306
+ ],
8307
+ "source": {
8308
+ "path": "packages/core/dev-delivery-warrant.js",
8309
+ "line": 1
8310
+ },
8311
+ "example": "import { DEV_DELIVERY_MINIMUM_WRITER_PROTOCOL_ROOT } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8312
+ "maturity": "stable",
8313
+ "audience": [
8314
+ "developer",
8315
+ "agent"
8316
+ ]
8317
+ },
8294
8318
  {
8295
8319
  "id": "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_PRIORITIES",
8296
8320
  "name": "DEV_DELIVERY_PRIORITIES",
@@ -8459,6 +8483,54 @@
8459
8483
  "agent"
8460
8484
  ]
8461
8485
  },
8486
+ {
8487
+ "id": "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_WRITER_PROTOCOL_FENCE_RECEIPT_SCHEMA",
8488
+ "name": "DEV_DELIVERY_WRITER_PROTOCOL_FENCE_RECEIPT_SCHEMA",
8489
+ "kind": "value",
8490
+ "signature": "DEV_DELIVERY_WRITER_PROTOCOL_FENCE_RECEIPT_SCHEMA",
8491
+ "parameters": [],
8492
+ "returns": "unknown",
8493
+ "errors": [
8494
+ "No narrower error contract was mechanically discoverable."
8495
+ ],
8496
+ "sideEffects": [
8497
+ "unknown"
8498
+ ],
8499
+ "source": {
8500
+ "path": "packages/core/dev-delivery-warrant.js",
8501
+ "line": 1
8502
+ },
8503
+ "example": "import { DEV_DELIVERY_WRITER_PROTOCOL_FENCE_RECEIPT_SCHEMA } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8504
+ "maturity": "stable",
8505
+ "audience": [
8506
+ "developer",
8507
+ "agent"
8508
+ ]
8509
+ },
8510
+ {
8511
+ "id": "packages/core/dev-delivery-warrant.js#fenceDevDeliveryWriterProtocol",
8512
+ "name": "fenceDevDeliveryWriterProtocol",
8513
+ "kind": "value",
8514
+ "signature": "fenceDevDeliveryWriterProtocol",
8515
+ "parameters": [],
8516
+ "returns": "unknown",
8517
+ "errors": [
8518
+ "No narrower error contract was mechanically discoverable."
8519
+ ],
8520
+ "sideEffects": [
8521
+ "unknown"
8522
+ ],
8523
+ "source": {
8524
+ "path": "packages/core/dev-delivery-warrant.js",
8525
+ "line": 1
8526
+ },
8527
+ "example": "import { fenceDevDeliveryWriterProtocol } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8528
+ "maturity": "stable",
8529
+ "audience": [
8530
+ "developer",
8531
+ "agent"
8532
+ ]
8533
+ },
8462
8534
  {
8463
8535
  "id": "packages/core/dev-delivery-warrant.js#heartbeatDevDeliveryWarrant",
8464
8536
  "name": "heartbeatDevDeliveryWarrant",
@@ -8487,7 +8559,7 @@
8487
8559
  ],
8488
8560
  "source": {
8489
8561
  "path": "packages/core/dev-delivery-warrant.js",
8490
- "line": 258
8562
+ "line": 266
8491
8563
  },
8492
8564
  "example": "import { heartbeatDevDeliveryWarrant } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8493
8565
  "maturity": "stable",
@@ -8544,7 +8616,7 @@
8544
8616
  ],
8545
8617
  "source": {
8546
8618
  "path": "packages/core/dev-delivery-warrant.js",
8547
- "line": 526
8619
+ "line": 534
8548
8620
  },
8549
8621
  "example": "import { observeDevDeliveryQueue } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8550
8622
  "maturity": "stable",
@@ -8568,7 +8640,7 @@
8568
8640
  ],
8569
8641
  "source": {
8570
8642
  "path": "packages/core/dev-delivery-warrant.js",
8571
- "line": 383
8643
+ "line": 391
8572
8644
  },
8573
8645
  "example": "import { qualifyDevDeliveryWarrant } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8574
8646
  "maturity": "stable",
@@ -8616,7 +8688,7 @@
8616
8688
  ],
8617
8689
  "source": {
8618
8690
  "path": "packages/core/dev-delivery-warrant.js",
8619
- "line": 521
8691
+ "line": 529
8620
8692
  },
8621
8693
  "example": "import { reconcileDevDeliveryTerminalEvidence } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8622
8694
  "maturity": "stable",
@@ -8649,7 +8721,7 @@
8649
8721
  ],
8650
8722
  "source": {
8651
8723
  "path": "packages/core/dev-delivery-warrant.js",
8652
- "line": 304
8724
+ "line": 312
8653
8725
  },
8654
8726
  "example": "import { recoverExpiredDevDeliveryWarrant } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8655
8727
  "maturity": "stable",
@@ -8682,7 +8754,7 @@
8682
8754
  ],
8683
8755
  "source": {
8684
8756
  "path": "packages/core/dev-delivery-warrant.js",
8685
- "line": 98
8757
+ "line": 106
8686
8758
  },
8687
8759
  "example": "import { selectDevDeliveryWarrant } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8688
8760
  "maturity": "stable",
@@ -8706,7 +8778,7 @@
8706
8778
  ],
8707
8779
  "source": {
8708
8780
  "path": "packages/core/dev-delivery-warrant.js",
8709
- "line": 515
8781
+ "line": 523
8710
8782
  },
8711
8783
  "example": "import { settleDevDeliveryTerminalEvent } from \"@kungfu-tech/buildchain/dev-delivery-warrant\";",
8712
8784
  "maturity": "stable",
@@ -25849,7 +25921,7 @@
25849
25921
  ],
25850
25922
  "source": {
25851
25923
  "path": "packages/core/v4-floating-consumer-policy.js",
25852
- "line": 429
25924
+ "line": 432
25853
25925
  },
25854
25926
  "example": "import { scanV4FloatingConsumerPolicy } from \"@kungfu-tech/buildchain\";",
25855
25927
  "maturity": "stable",
@@ -29054,14 +29126,14 @@
29054
29126
  "specifier": "@kungfu-tech/buildchain/dev-delivery-warrant",
29055
29127
  "export": "./dev-delivery-warrant",
29056
29128
  "target": "./packages/core/dev-delivery-warrant.js",
29057
- "digest": "sha256:19d8a5b924bbc261d39bd33312d9177450d246256b2af44cea89f476394a477c",
29129
+ "digest": "sha256:14cc11a84018762f2169ade5e4daf94e2bc30a3f9f2bb1fb52105cd6dc6a0466",
29058
29130
  "summary": "Durable fair Dev Delivery Warrant queue, fenced lease, and split source and integration proof APIs.",
29059
29131
  "capabilityGroup": "governance-versioning",
29060
29132
  "audience": [
29061
29133
  "developer",
29062
29134
  "agent"
29063
29135
  ],
29064
- "symbolCount": 56,
29136
+ "symbolCount": 59,
29065
29137
  "symbolIds": [
29066
29138
  "packages/core/dev-delivery-warrant.js#cancelQueuedDevDeliveryCandidate",
29067
29139
  "packages/core/dev-delivery-proof.js#classifyDevDeliveryDelta",
@@ -29082,6 +29154,7 @@
29082
29154
  "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_CANCELLATION_RECEIPT_SCHEMA",
29083
29155
  "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_CLASSES",
29084
29156
  "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_LEASE_RECEIPT_SCHEMA",
29157
+ "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_MINIMUM_WRITER_PROTOCOL_ROOT",
29085
29158
  "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_PRIORITIES",
29086
29159
  "packages/core/dev-delivery-native-proof.js#DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA",
29087
29160
  "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_QUEUE_CONTRACT",
@@ -29090,7 +29163,9 @@
29090
29163
  "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_SUBMISSION_RECEIPT_SCHEMA",
29091
29164
  "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_TERMINAL_EVIDENCE_CORRECTION_SCHEMA",
29092
29165
  "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_WARRANT_SCHEMA",
29166
+ "packages/core/dev-delivery-warrant.js#DEV_DELIVERY_WRITER_PROTOCOL_FENCE_RECEIPT_SCHEMA",
29093
29167
  "packages/core/dev-delivery-common.js#devDeliveryContentRoot",
29168
+ "packages/core/dev-delivery-warrant.js#fenceDevDeliveryWriterProtocol",
29094
29169
  "packages/core/dev-delivery-warrant.js#heartbeatDevDeliveryWarrant",
29095
29170
  "packages/core/dev-delivery-proof.js#INTEGRATION_DELIVERY_PROOF_SCHEMA",
29096
29171
  "packages/core/dev-delivery-native-proof.js#NATIVE_COMMAND_CONTRACT_SCHEMA",
@@ -29519,7 +29594,7 @@
29519
29594
  "specifier": "@kungfu-tech/buildchain/v4-floating-consumer-policy",
29520
29595
  "export": "./v4-floating-consumer-policy",
29521
29596
  "target": "./packages/core/v4-floating-consumer-policy.js",
29522
- "digest": "sha256:95136fbc5d53bfd37b39b3e2fb331fbbb518ef51d5362cc65c5df4d2ea0fee35",
29597
+ "digest": "sha256:df1b9d27dc28324fc89dc5af7838d8d1b57aa91355e43653882286070ff2308c",
29523
29598
  "summary": "Semantic floating-selector admission, dual-lock receipt, and independent v4 consumer certification APIs.",
29524
29599
  "capabilityGroup": "governance-versioning",
29525
29600
  "audience": [
@@ -29740,7 +29815,7 @@
29740
29815
  "specifier": "@kungfu-tech/buildchain/v4-publication-qualification",
29741
29816
  "export": "./v4-publication-qualification",
29742
29817
  "target": "./packages/core/v4-publication-qualification.js",
29743
- "digest": "sha256:88df23b5a9e12838edab7c3a3c117fec2c145b7ded92f847d522051574214173",
29818
+ "digest": "sha256:514be74e61aa9e4145b43488a36f44f58e78b5cec67284dbff52a6083e811d96",
29744
29819
  "summary": "Sealed v4 candidate, source, artifact, policy, freshness, and command-free promotion admission APIs.",
29745
29820
  "capabilityGroup": "release-passport-trust",
29746
29821
  "audience": [
@@ -31119,7 +31194,7 @@
31119
31194
  {
31120
31195
  "id": "node-api-reference",
31121
31196
  "path": "docs/node-api-reference.md",
31122
- "digest": "sha256:e9683e04409d60ee1a4e60f89766c158586cf1eb91fc890f0b2660814f05dbdb"
31197
+ "digest": "sha256:afc6f959491ea0360ee308ee476613a9b42ab37dc5755dc66d3edb484d5e81d3"
31123
31198
  },
31124
31199
  {
31125
31200
  "id": "build-facts",