@kungfu-tech/buildchain 4.0.2-alpha.10 → 4.0.2-alpha.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (44) hide show
  1. package/architecture/agent-change-map.md +40 -0
  2. package/architecture/ci-lane-change-budget.json +332 -0
  3. package/architecture/internal-capabilities.json +39 -0
  4. package/architecture/maintainability-debt.json +11 -9
  5. package/architecture/maintainability-policy.json +7 -7
  6. package/architecture/v4-release-topology.json +2 -1
  7. package/architecture/v4-universal-workflow-bootstrap.json +181 -0
  8. package/architecture/v4-universal-workflow-fault-campaign.json +72 -0
  9. package/architecture/v4-universal-workflow-train-admission.json +40 -0
  10. package/dist/site/buildchain-contract.json +86 -41
  11. package/dist/site/buildchain-site.json +15 -10
  12. package/dist/site/capability-registry.json +1 -1
  13. package/dist/site/controller-registry.json +46 -10
  14. package/dist/site/kfd-claims.json +154 -68
  15. package/dist/site/kfd-upstream-aggregate.json +1 -1
  16. package/dist/site/manual-registry.json +2 -2
  17. package/dist/site/node-api-registry.json +7 -7
  18. package/dist/site/page-registry.json +9 -4
  19. package/dist/site/public-surface-audit.json +158 -66
  20. package/dist/site/publication-authority-registry.json +67 -1
  21. package/dist/site/publication-registry.json +4 -4
  22. package/dist/site/site-manifest.json +6 -6
  23. package/dist/site/workflow-registry.json +189 -67
  24. package/docs/node-api-reference.md +9 -9
  25. package/docs/reusable-build-surface.md +16 -0
  26. package/package.json +2 -2
  27. package/packages/core/buildchain-publication-authority.js +3 -0
  28. package/packages/core/ci-lane-change-budget.js +14 -1
  29. package/packages/core/release-tail-provider-plane.js +1 -1
  30. package/packages/core/v4-product-publication.js +1 -1
  31. package/packages/core/v4-universal-workflow-bootstrap.js +596 -0
  32. package/scripts/check-maintainability.mjs +16 -113
  33. package/scripts/check-v4-release-topology.mjs +5 -2
  34. package/scripts/check-v4-universal-workflow-bootstrap.mjs +257 -0
  35. package/scripts/generate-channel-build-workflow.mjs +5 -1
  36. package/scripts/generate-channel-promotion-workflow.mjs +3 -2
  37. package/scripts/generate-v4-universal-workflow-facades.mjs +415 -0
  38. package/scripts/maintainability-public-surface.mjs +115 -0
  39. package/scripts/universal-facade-maintainability.mjs +82 -0
  40. package/scripts/v4-universal-workflow-backflow.mjs +212 -0
  41. package/scripts/v4-universal-workflow-engine.mjs +586 -0
  42. package/scripts/v4-universal-workflow-self-dogfood.mjs +205 -0
  43. package/templates/universal-buildchain-bootstrap-recovery.yml +282 -0
  44. package/templates/universal-buildchain-bootstrap.yml +28 -0
package/architecture/v4-universal-workflow-bootstrap.json ADDED
@@ -0,0 +1,181 @@
1
+ {
2
+ "schema": "kungfu-buildchain-v4-universal-workflow-bootstrap/v1",
3
+ "status": "migration-active",
4
+ "bootstrap": {
5
+ "publicWorkflow": ".github/workflows/bootstrap.yml",
6
+ "requestSchema": "kungfu-buildchain-v4-universal-workflow-request/v1",
7
+ "admissionSchema": "kungfu-buildchain-v4-universal-workflow-admission/v1",
8
+ "terminalReceiptSchema": "kungfu-buildchain-v4-universal-workflow-terminal-receipt/v1",
9
+ "candidateRepository": "kungfu-systems/buildchain",
10
+ "candidateEnginePath": "scripts/v4-universal-workflow-engine.mjs",
11
+ "consumerTemplate": "templates/universal-buildchain-bootstrap.yml",
12
+ "consumerRecoveryTemplate": "templates/universal-buildchain-bootstrap-recovery.yml",
13
+ "consumerRecoveryWorkflow": ".github/workflows/universal-bootstrap-recovery.yml",
14
+ "consumerRecoveryMode": "separate-pre-positioned-consumer-owned-shell",
15
+ "recoveryDependsOnPublishedBuildchain": false,
16
+ "selfDogfoodWorkflow": ".github/workflows/universal-bootstrap-dogfood.yml",
17
+ "faultCampaign": "architecture/v4-universal-workflow-fault-campaign.json",
18
+ "discoveryRefExecutionAuthority": false,
19
+ "exactShaExecutionAuthority": true,
20
+ "consumerSourceMutationPerIncident": false,
21
+ "consumerAdmission": "verified-caller-exact-repository-workflow-and-source",
22
+ "buildchainReleasePromotionPerIncident": false,
23
+ "selfDogfoodUsesPublicContract": true
24
+ },
25
+ "capabilityAdapters": [
26
+ {
27
+ "id": "bootstrap-conformance",
28
+ "execution": "exact-candidate-engine",
29
+ "payloadSchema": "kungfu-buildchain-v4-universal-bootstrap-conformance/v1",
30
+ "providerEffects": false
31
+ },
32
+ {
33
+ "id": "release-candidate-promote",
34
+ "execution": "exact-candidate-action-and-provider-readback",
35
+ "payloadSchema": "kungfu-buildchain-v4-universal-release-promotion/v1",
36
+ "providerEffects": true
37
+ },
38
+ {
39
+ "id": "release-invocation",
40
+ "execution": "exact-candidate-canonical-projection",
41
+ "payloadSchema": "kungfu-buildchain-v4-release-invocation/v1",
42
+ "providerEffects": false
43
+ }
44
+ ],
45
+ "complexityBudget": {
46
+ "bootstrapAbis": 1,
47
+ "requestEnvelopes": 1,
48
+ "candidateResolvers": 1,
49
+ "candidateEngines": 1,
50
+ "terminalReceiptAuthorities": 1,
51
+ "perWorkflowBootstrapImplementations": 0,
52
+ "buildchainOnlySelfReleasePaths": 0,
53
+ "perIncidentConsumerEdits": 0
54
+ },
55
+ "permissionCeiling": {
56
+ "actions": "write",
57
+ "artifact-metadata": "write",
58
+ "attestations": "write",
59
+ "checks": "write",
60
+ "contents": "write",
61
+ "deployments": "write",
62
+ "id-token": "write",
63
+ "issues": "write",
64
+ "packages": "write",
65
+ "pages": "write",
66
+ "pull-requests": "write",
67
+ "security-events": "write",
68
+ "statuses": "write"
69
+ },
70
+ "inventoryWorkflows": [
71
+ ".github/workflows/.auditable-demo.yml",
72
+ ".github/workflows/.binary-release-assets.yml",
73
+ ".github/workflows/.build.yml",
74
+ ".github/workflows/.bump-minor-version.yml",
75
+ ".github/workflows/.declarative-auditable-demo.yml",
76
+ ".github/workflows/.gate-profile.yml",
77
+ ".github/workflows/.publication-authority.yml",
78
+ ".github/workflows/.release-candidate-promote.yml",
79
+ ".github/workflows/.release-docker.yml",
80
+ ".github/workflows/.release-elastic-beanstalk.yml",
81
+ ".github/workflows/.release-new-version.yml",
82
+ ".github/workflows/.release-verify.yml",
83
+ ".github/workflows/.sam-release.yml",
84
+ ".github/workflows/.sam-verify.yml",
85
+ ".github/workflows/.sync-release-page.yml",
86
+ ".github/workflows/.sync-remote-git.yml",
87
+ ".github/workflows/.web-surface.yml",
88
+ ".github/workflows/.wheel-release.yml",
89
+ ".github/workflows/.wheel-verify.yml",
90
+ ".github/workflows/bootstrap.yml",
91
+ ".github/workflows/build.yml",
92
+ ".github/workflows/buildchain-patrol.yml",
93
+ ".github/workflows/check.yml",
94
+ ".github/workflows/dev-alpha-candidate-patrol.yml",
95
+ ".github/workflows/dev-delivery-warrant-cancel.yml",
96
+ ".github/workflows/dev-delivery-warrant-close.yml",
97
+ ".github/workflows/dev-pr-auto-merge.yml",
98
+ ".github/workflows/dev-qualification-patrol.yml",
99
+ ".github/workflows/engineering-housekeeper.yml",
100
+ ".github/workflows/github-artifact-attestation.yml",
101
+ ".github/workflows/paper-release-sealed.yml",
102
+ ".github/workflows/paper-release.yml",
103
+ ".github/workflows/patrol-daily.yml",
104
+ ".github/workflows/patrol-monthly.yml",
105
+ ".github/workflows/patrol-observed-evidence.yml",
106
+ ".github/workflows/patrol-weekly.yml",
107
+ ".github/workflows/publication-artifact.yml",
108
+ ".github/workflows/release-candidate-promote.yml",
109
+ ".github/workflows/release-governance-reconcile.yml",
110
+ ".github/workflows/release-propagation.yml",
111
+ ".github/workflows/release-tail.yml",
112
+ ".github/workflows/stable-candidate-patrol.yml",
113
+ ".github/workflows/universal-bootstrap-recovery.yml",
114
+ ".github/workflows/v4-adopter-delivery.yml",
115
+ ".github/workflows/v4-stage-capsule-canary.yml",
116
+ ".github/workflows/v4-tail-reseal.yml"
117
+ ],
118
+ "retiredWorkflowSurfaces": [
119
+ ".github/workflows/.release-docker.yml",
120
+ ".github/workflows/.release-elastic-beanstalk.yml",
121
+ ".github/workflows/.release-new-version.yml",
122
+ ".github/workflows/.sam-release.yml",
123
+ ".github/workflows/.wheel-release.yml"
124
+ ],
125
+ "bootstrapGovernedWorkflows": [
126
+ ".github/workflows/.auditable-demo.yml",
127
+ ".github/workflows/.binary-release-assets.yml",
128
+ ".github/workflows/.build.yml",
129
+ ".github/workflows/.bump-minor-version.yml",
130
+ ".github/workflows/.declarative-auditable-demo.yml",
131
+ ".github/workflows/.gate-profile.yml",
132
+ ".github/workflows/.publication-authority.yml",
133
+ ".github/workflows/.release-candidate-promote.yml",
134
+ ".github/workflows/.release-verify.yml",
135
+ ".github/workflows/.sam-verify.yml",
136
+ ".github/workflows/.sync-release-page.yml",
137
+ ".github/workflows/.sync-remote-git.yml",
138
+ ".github/workflows/.web-surface.yml",
139
+ ".github/workflows/.wheel-verify.yml",
140
+ ".github/workflows/bootstrap.yml",
141
+ ".github/workflows/build.yml",
142
+ ".github/workflows/buildchain-patrol.yml",
143
+ ".github/workflows/check.yml",
144
+ ".github/workflows/dev-alpha-candidate-patrol.yml",
145
+ ".github/workflows/dev-delivery-warrant-cancel.yml",
146
+ ".github/workflows/dev-delivery-warrant-close.yml",
147
+ ".github/workflows/dev-pr-auto-merge.yml",
148
+ ".github/workflows/dev-qualification-patrol.yml",
149
+ ".github/workflows/engineering-housekeeper.yml",
150
+ ".github/workflows/github-artifact-attestation.yml",
151
+ ".github/workflows/paper-release-sealed.yml",
152
+ ".github/workflows/paper-release.yml",
153
+ ".github/workflows/patrol-daily.yml",
154
+ ".github/workflows/patrol-monthly.yml",
155
+ ".github/workflows/patrol-observed-evidence.yml",
156
+ ".github/workflows/patrol-weekly.yml",
157
+ ".github/workflows/publication-artifact.yml",
158
+ ".github/workflows/release-candidate-promote.yml",
159
+ ".github/workflows/release-governance-reconcile.yml",
160
+ ".github/workflows/release-propagation.yml",
161
+ ".github/workflows/release-tail.yml",
162
+ ".github/workflows/stable-candidate-patrol.yml",
163
+ ".github/workflows/v4-adopter-delivery.yml",
164
+ ".github/workflows/v4-stage-capsule-canary.yml",
165
+ ".github/workflows/v4-tail-reseal.yml"
166
+ ],
167
+ "migration": {
168
+ "compatibilityFacadeGenerator": "scripts/generate-v4-universal-workflow-facades.mjs",
169
+ "facadeSourceRevision": "e211a3535b4b3c9a921324ea1a81522a4e271b98",
170
+ "channelGeneratedFacades": [
171
+ ".github/workflows/build.yml",
172
+ ".github/workflows/release-candidate-promote.yml"
173
+ ],
174
+ "staticBootstrap": "implemented",
175
+ "candidateEngine": "bounded-capability-adapters",
176
+ "compatibilityFacades": "generated-dual-path",
177
+ "externalConsumerDogfood": "public-consumer-three-platform-runtime-and-non-circular-recovery-hosted-proof-passed",
178
+ "buildchainSelfDogfood": "train-primary-and-consumer-recovery-three-pair-hosted-proof-passed",
179
+ "oldPathRetirement": "pending-protected-dev-integration"
180
+ }
181
+ }
package/architecture/v4-universal-workflow-fault-campaign.json ADDED
@@ -0,0 +1,72 @@
1
+ {
2
+ "schema": "kungfu-buildchain-v4-universal-workflow-fault-campaign/v1",
3
+ "independentFaultsOnly": true,
4
+ "simultaneousPrimaryAndRecoveryFailureClaimed": false,
5
+ "externalBoundary": {
6
+ "id": "github-workflow-parser-or-service-unavailable",
7
+ "classification": "irreducible-external-availability",
8
+ "recovered": false
9
+ },
10
+ "faults": [
11
+ {
12
+ "id": "primary-facade",
13
+ "injectionTarget": "templates/universal-buildchain-bootstrap.yml",
14
+ "recoveryRoute": "pre-positioned-recovery-shell",
15
+ "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
16
+ },
17
+ {
18
+ "id": "typed-input-adapter",
19
+ "injectionTarget": "packages/core/v4-universal-workflow-bootstrap.js",
20
+ "recoveryRoute": "exact-train-candidate",
21
+ "recoveryTarget": "scripts/v4-universal-workflow-engine.mjs"
22
+ },
23
+ {
24
+ "id": "route-selector",
25
+ "injectionTarget": ".github/workflows/bootstrap.yml",
26
+ "recoveryRoute": "pre-positioned-recovery-shell",
27
+ "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
28
+ },
29
+ {
30
+ "id": "ordinary-candidate-loader",
31
+ "injectionTarget": ".github/workflows/bootstrap.yml",
32
+ "recoveryRoute": "pre-positioned-recovery-shell",
33
+ "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
34
+ },
35
+ {
36
+ "id": "router",
37
+ "injectionTarget": "packages/core/v4-release-invocation.js",
38
+ "recoveryRoute": "exact-train-candidate",
39
+ "recoveryTarget": "scripts/v4-universal-workflow-engine.mjs"
40
+ },
41
+ {
42
+ "id": "action",
43
+ "injectionTarget": "actions/v4-release-candidate-promote/action.yml",
44
+ "recoveryRoute": "exact-train-candidate",
45
+ "recoveryTarget": "actions/v4-release-candidate-promote/dist/index.js"
46
+ },
47
+ {
48
+ "id": "cli-runtime",
49
+ "injectionTarget": "scripts/v4-universal-workflow-engine.mjs",
50
+ "recoveryRoute": "exact-train-candidate",
51
+ "recoveryTarget": "scripts/v4-universal-workflow-engine.mjs"
52
+ },
53
+ {
54
+ "id": "recovery-logic",
55
+ "injectionTarget": "templates/universal-buildchain-bootstrap-recovery.yml",
56
+ "recoveryRoute": "primary-bootstrap-shell",
57
+ "recoveryTarget": "templates/universal-buildchain-bootstrap.yml"
58
+ },
59
+ {
60
+ "id": "result-projection",
61
+ "injectionTarget": ".github/workflows/bootstrap.yml",
62
+ "recoveryRoute": "pre-positioned-recovery-shell",
63
+ "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
64
+ },
65
+ {
66
+ "id": "self-dogfood-caller",
67
+ "injectionTarget": ".github/workflows/universal-bootstrap-dogfood.yml",
68
+ "recoveryRoute": "consumer-equivalent-recovery-shell",
69
+ "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
70
+ }
71
+ ]
72
+ }
package/architecture/v4-universal-workflow-train-admission.json ADDED
@@ -0,0 +1,40 @@
1
+ {
2
+ "schema": "kungfu-buildchain-v4-universal-workflow-admission-policy/v1",
3
+ "sourceRepository": "kungfu-systems/buildchain",
4
+ "consumerAdmission": "verified-caller",
5
+ "allowedCapabilities": [
6
+ "bootstrap-conformance",
7
+ "release-candidate-promote",
8
+ "release-invocation"
9
+ ],
10
+ "permissionCeiling": {
11
+ "actions": "write",
12
+ "artifact-metadata": "write",
13
+ "attestations": "write",
14
+ "checks": "write",
15
+ "contents": "write",
16
+ "deployments": "write",
17
+ "id-token": "write",
18
+ "issues": "write",
19
+ "packages": "write",
20
+ "pages": "write",
21
+ "pull-requests": "write",
22
+ "security-events": "write",
23
+ "statuses": "write"
24
+ },
25
+ "contractRoots": [
26
+ "sha256:3e5ec3bb803169de0b64747cbc1e5bbff536a8409d7ba1a6528f2930bc294a5c",
27
+ "sha256:60fc0802b7e46cb4460264b8b7359d06b2406d66a9d805d0d076bb692f80b35e",
28
+ "sha256:65a0c2fc3faecaddf5076fff086b5d6e12eb9ba27796efc10aed19f2d93b9457",
29
+ "sha256:93cd47a50798199fcb778e90b338542ab58842392da11cc4f8914525e98790be",
30
+ "sha256:a31570dd0f1a85dae851a9acd3731a60967c474cd09615a11d6d8d10c6f9a78b",
31
+ "sha256:b6737ed958e8f53f7770b1c214c092591573ad63af41e05797117d9b7b212ed8",
32
+ "sha256:d6ad9cf661c0ba3825cabdc7185fd122a60fc1929dfc799cda3352650588663f"
33
+ ],
34
+ "targetRef": "dev/v4/v4.0",
35
+ "allowedReviewers": ["kungfu-origin"],
36
+ "minimumApprovals": 1,
37
+ "requiredChecks": ["check"],
38
+ "validFrom": "2026-08-30T00:00:00.000Z",
39
+ "expiresAt": "2026-09-07T00:00:00.000Z"
40
+ }