@kungfu-tech/buildchain 4.0.2-alpha.34 → 4.0.2-alpha.35

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (91) hide show
  1. package/AGENTS.md +9 -0
  2. package/CONTRIBUTING.md +24 -0
  3. package/README.md +2 -2
  4. package/actions/promote-buildchain-ref/README.md +1 -1
  5. package/architecture/agent-change-map.md +6 -4
  6. package/architecture/internal-capabilities.json +4 -4
  7. package/architecture/maintainability-debt.json +13 -11
  8. package/architecture/maintainability-policy.json +4 -4
  9. package/architecture/release-tail-contract-inventory.json +6 -6
  10. package/architecture/v4-delivery-authority-parity.json +2 -2
  11. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.json +1 -1
  12. package/architecture/v4-floating-consumer-policy.json +1 -1
  13. package/architecture/v4-next-development-parity.json +4 -4
  14. package/architecture/v4-platform-stage-checkpoints.json +1 -1
  15. package/architecture/v4-publication-facade-patches.json +53 -0
  16. package/architecture/v4-release-topology.json +46 -29
  17. package/architecture/v4-rust-wasm-production-authority.json +1 -0
  18. package/architecture/v4-stage-capsule-qualification.json +1 -1
  19. package/architecture/v4-universal-workflow-bootstrap.json +1 -1
  20. package/architecture/v4-universal-workflow-fault-campaign.json +1 -1
  21. package/architecture/v4-universal-workflow-train-admission.json +4 -4
  22. package/architecture/workflow-taxonomy.json +1437 -0
  23. package/contracts/buildchain-v2-residuals-v1.json +64 -1
  24. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  25. package/contracts/v4-canonical-contracts-v1.schema.json +1 -0
  26. package/dist/site/buildchain-contract.json +20 -20
  27. package/dist/site/buildchain-site.json +122 -56
  28. package/dist/site/capability-registry.json +4 -4
  29. package/dist/site/controller-registry.json +5 -4
  30. package/dist/site/kfd-claims.json +2617 -964
  31. package/dist/site/kfd-upstream-aggregate.json +1 -1
  32. package/dist/site/manual-registry.json +10 -10
  33. package/dist/site/node-api-registry.json +26 -21
  34. package/dist/site/page-registry.json +107 -41
  35. package/dist/site/public-surface-audit.json +3196 -1128
  36. package/dist/site/publication-authority-registry.json +1179 -417
  37. package/dist/site/publication-registry.json +4 -4
  38. package/dist/site/site-manifest.json +14 -14
  39. package/dist/site/workflow-registry.json +5484 -1924
  40. package/docs/MAP.md +1 -0
  41. package/docs/auditable-demo.md +1 -1
  42. package/docs/cli.md +3 -3
  43. package/docs/dev-delivery-warrant.md +1 -1
  44. package/docs/engineering-housekeeper.md +3 -3
  45. package/docs/next-development-transition.md +1 -1
  46. package/docs/node-api-reference.md +30 -30
  47. package/docs/publication-authority.md +2 -2
  48. package/docs/release-candidate.md +3 -3
  49. package/docs/release-flow.md +67 -19
  50. package/docs/release-governance.md +8 -8
  51. package/docs/v4-adopter-delivery.md +1 -1
  52. package/docs/v4-production-release.md +45 -8
  53. package/docs/v4-stage-capsule.md +1 -1
  54. package/docs/workflow-catalog.md +151 -0
  55. package/package.json +8 -6
  56. package/packages/core/buildchain-contract.js +1 -1
  57. package/packages/core/buildchain-kfd-claims.js +2 -2
  58. package/packages/core/buildchain-publication-authority.js +40 -25
  59. package/packages/core/buildchain-v4-domain.wasm +0 -0
  60. package/packages/core/controller-evidence.js +4 -1
  61. package/packages/core/github-governance-authority.js +4 -4
  62. package/packages/core/next-development-projection.js +1 -1
  63. package/packages/core/release-line-dry-run.js +1 -1
  64. package/packages/core/v4-canonical-contracts.js +1 -0
  65. package/packages/core/v4-domain-wasm-artifact.js +2 -2
  66. package/packages/core/v4-floating-consumer-evidence.js +1 -1
  67. package/packages/core/v4-floating-consumer-policy.js +1 -1
  68. package/scripts/binary-publication-evidence.mjs +135 -0
  69. package/scripts/check-ci-lane-change-budget.mjs +4 -1
  70. package/scripts/check-core-mechanism-inventory.mjs +4 -3
  71. package/scripts/check-inventory.mjs +22 -22
  72. package/scripts/check-v4-floating-consumer-policy-contract.mjs +1 -1
  73. package/scripts/check-v4-public-dogfood-contract.mjs +18 -5
  74. package/scripts/check-v4-release-topology.mjs +5 -2
  75. package/scripts/check-v4-runtime-semantic-closure.mjs +4 -1
  76. package/scripts/check-v4-universal-workflow-bootstrap.mjs +5 -9
  77. package/scripts/check-workflow-taxonomy.mjs +6 -0
  78. package/scripts/generate-channel-build-workflow.mjs +2 -1
  79. package/scripts/generate-channel-promotion-workflow.mjs +4 -3
  80. package/scripts/generate-site-bundle.mjs +11 -11
  81. package/scripts/generate-v4-universal-workflow-facades.mjs +24 -6
  82. package/scripts/generate-workflow-taxonomy.mjs +25 -0
  83. package/scripts/maintainability-metrics.mjs +16 -5
  84. package/scripts/release-asset-client.mjs +90 -0
  85. package/scripts/release-candidate-resolver.mjs +1 -1
  86. package/scripts/source-verification-evidence.mjs +344 -0
  87. package/scripts/stable-candidate-qualification.mjs +1 -1
  88. package/scripts/v4-publication-settlement.mjs +207 -0
  89. package/scripts/v4-universal-workflow-self-dogfood.mjs +1 -1
  90. package/scripts/verify-version-state-delta.mjs +173 -0
  91. package/scripts/workflow-taxonomy.mjs +468 -0
package/architecture/v4-release-topology.json CHANGED
@@ -15,43 +15,43 @@
15
15
  ".github/workflows/.publication-authority.yml",
16
16
  ".github/workflows/.release-candidate-promote.yml",
17
17
  ".github/workflows/.web-surface.yml",
18
- ".github/workflows/auditable-demo.yml",
19
- ".github/workflows/binary-release-assets.yml",
20
- ".github/workflows/build-surface-fixture.yml",
18
+ ".github/workflows/self-build-demo-dogfood.yml",
19
+ ".github/workflows/self-release-binary-assets.yml",
20
+ ".github/workflows/self-build-fixture.yml",
21
21
  ".github/workflows/build.yml",
22
- ".github/workflows/buildchain-alpha-self-dogfood.yml",
23
- ".github/workflows/buildchain-dev-delivery.yml",
24
- ".github/workflows/buildchain-ref-promotion-recovery.yml",
25
- ".github/workflows/buildchain-ref-promotion.yml",
26
- ".github/workflows/buildchain-patrol-daily.yml",
27
- ".github/workflows/buildchain-patrol-monthly.yml",
28
- ".github/workflows/buildchain-patrol-weekly.yml",
29
- ".github/workflows/buildchain-stable-candidate-patrol.yml",
22
+ ".github/workflows/self-build-alpha-dogfood.yml",
23
+ ".github/workflows/self-ops-dev-delivery.yml",
24
+ ".github/workflows/self-ops-promotion-recovery.yml",
25
+ ".github/workflows/self-release-promote.yml",
26
+ ".github/workflows/self-ops-patrol-daily.yml",
27
+ ".github/workflows/self-ops-patrol-monthly.yml",
28
+ ".github/workflows/self-ops-patrol-weekly.yml",
29
+ ".github/workflows/self-ops-stable-candidate-patrol.yml",
30
30
  ".github/workflows/dev-alpha-candidate-patrol.yml",
31
31
  ".github/workflows/dev-pr-auto-merge.yml",
32
32
  ".github/workflows/github-artifact-attestation.yml",
33
- ".github/workflows/npm-publish.yml",
33
+ ".github/workflows/self-release-npm-dry-run.yml",
34
34
  ".github/workflows/paper-release-sealed.yml",
35
35
  ".github/workflows/paper-release.yml",
36
36
  ".github/workflows/patrol-observed-evidence.yml",
37
37
  ".github/workflows/release-candidate-promote.yml",
38
- ".github/workflows/release-line-bootstrap.yml",
39
- ".github/workflows/release-new-version.yml",
38
+ ".github/workflows/self-release-line-open.yml",
39
+ ".github/workflows/self-release-new-version-compat.yml",
40
40
  ".github/workflows/release-propagation.yml",
41
41
  ".github/workflows/release-tail.yml",
42
42
  ".github/workflows/stable-candidate-patrol.yml",
43
- ".github/workflows/v4-publication-rehearsal-dogfood.yml",
44
- ".github/workflows/v4-declarative-release-tail-dogfood.yml"
43
+ ".github/workflows/self-release-rehearsal-dogfood.yml",
44
+ ".github/workflows/self-release-tail-dogfood.yml"
45
45
  ],
46
46
  "unknownTopologyPolicy": "fail-closed"
47
47
  },
48
48
  "semanticScope": {
49
49
  "workflowPaths": [
50
50
  ".github/workflows/.release-candidate-promote.yml",
51
- ".github/workflows/buildchain-ref-promotion-recovery.yml",
52
- ".github/workflows/buildchain-ref-promotion.yml",
51
+ ".github/workflows/self-ops-promotion-recovery.yml",
52
+ ".github/workflows/self-release-promote.yml",
53
53
  ".github/workflows/release-candidate-promote.yml",
54
- ".github/workflows/v4-declarative-release-tail-dogfood.yml"
54
+ ".github/workflows/self-release-tail-dogfood.yml"
55
55
  ],
56
56
  "excludedMechanisms": [
57
57
  "Paper product release",
@@ -78,14 +78,21 @@
78
78
  "packages/core/v4-publication-rehearsal.js"
79
79
  ],
80
80
  "runtimeSelectors": [
81
+ ".github/workflows/.build-engine.yml",
81
82
  ".github/workflows/.build.yml",
82
83
  ".github/workflows/.release-candidate-promote.yml",
84
+ ".github/workflows/.release-promote.yml",
83
85
  ".github/workflows/.web-surface.yml",
84
- ".github/workflows/buildchain-ref-promotion-recovery.yml",
85
- ".github/workflows/buildchain-ref-promotion.yml",
86
86
  ".github/workflows/paper-release.yml",
87
+ ".github/workflows/public-build-publication.yml",
88
+ ".github/workflows/public-ops-tail-reseal.yml",
89
+ ".github/workflows/public-release-paper.yml",
90
+ ".github/workflows/public-release-promote.yml",
91
+ ".github/workflows/public-release-web.yml",
87
92
  ".github/workflows/publication-artifact.yml",
88
93
  ".github/workflows/release-candidate-promote.yml",
94
+ ".github/workflows/self-ops-promotion-recovery.yml",
95
+ ".github/workflows/self-release-promote.yml",
89
96
  ".github/workflows/v4-tail-reseal.yml",
90
97
  "packages/core/buildchain-contract.js",
91
98
  "packages/core/v4-runtime-ref-resume-authority.js",
@@ -105,18 +112,25 @@
105
112
  "runtimeEngines": ["actions/v4-release-candidate-promote/index.js"],
106
113
  "terminalProjections": [
107
114
  ".github/workflows/.release-candidate-promote.yml",
115
+ ".github/workflows/.release-promote.yml",
108
116
  "actions/v4-release-candidate-promote/index.js",
109
117
  "packages/core/v4-release-invocation.js",
118
+ "scripts/v4-publication-settlement.mjs",
110
119
  "scripts/v4-universal-workflow-engine.mjs"
111
120
  ],
112
121
  "privilegedExecutableClosure": {
113
- "entrypoints": ["actions/v4-release-candidate-promote/index.js"],
122
+ "entrypoints": [
123
+ "actions/v4-release-candidate-promote/index.js",
124
+ "scripts/binary-publication-evidence.mjs",
125
+ "scripts/v4-publication-settlement.mjs"
126
+ ],
114
127
  "modules": [
115
128
  "actions/promote-buildchain-ref/github-release.js",
116
129
  "actions/promote-buildchain-ref/internal/version-state.js",
117
130
  "actions/promote-buildchain-ref/reuse-complete-release.js",
118
131
  "actions/promote-buildchain-ref/v4-provider-plane.js",
119
132
  "actions/v4-release-candidate-promote/index.js",
133
+ "actions/v4-release-candidate-promote/next-development-queue.js",
120
134
  "actions/v4-release-candidate-promote/product-provider-adapters.js",
121
135
  "actions/v4-release-candidate-promote/product-provider-github-adapters.js",
122
136
  "actions/v4-release-candidate-promote/product-provider.js",
@@ -171,15 +185,18 @@
171
185
  "packages/core/v4-runtime-selector-persistence.js",
172
186
  "packages/core/web-surface-publication-candidate.js",
173
187
  "packages/core/workflow-yaml-contract.js",
174
- "scripts/ensure-github-release.mjs"
188
+ "scripts/binary-publication-evidence.mjs",
189
+ "scripts/ensure-github-release.mjs",
190
+ "scripts/release-asset-client.mjs",
191
+ "scripts/v4-publication-settlement.mjs"
175
192
  ],
176
- "root": "sha256:288290a0da4e608869026688fc4981ded81cbc97b9e7bd7c031b9b8369653a39"
193
+ "root": "sha256:58d343a7ec944ebe2c12a04c389d362733de196b7d34e39e330d2b8053c5e3f6"
177
194
  },
178
195
  "rustWasmAuthority": {
179
196
  "loader": "packages/core/v4-domain-wasm.js",
180
197
  "metadata": "packages/core/v4-domain-wasm-artifact.js",
181
198
  "artifact": "packages/core/buildchain-v4-domain.wasm",
182
- "artifactRoot": "sha256:32a808ba9b749d1297c0ce4b7be1586afdae3d849e44f3f7ffb1742e572f5627",
199
+ "artifactRoot": "sha256:b37c330e9366b7e9cf9dc4b7573b1e9495212dd9520e8b8ec6cdc3fd0ab7cafd",
183
200
  "distributedArtifacts": [
184
201
  "actions/promote-buildchain-ref/dist/buildchain-v4-domain.wasm",
185
202
  "actions/release-tail/dist/buildchain-v4-domain.wasm",
@@ -196,7 +213,7 @@
196
213
  "actions/promote-buildchain-ref/lib.js"
197
214
  ],
198
215
  "freshEntry": ".github/workflows/release-candidate-promote.yml",
199
- "recoveryEntry": ".github/workflows/buildchain-ref-promotion-recovery.yml",
216
+ "recoveryEntry": ".github/workflows/self-ops-promotion-recovery.yml",
200
217
  "forbiddenLegacyEnginePatterns": [
201
218
  "legacy-promote",
202
219
  "v4-declarative-promote",
@@ -265,7 +282,7 @@
265
282
  "reusableEdges": []
266
283
  },
267
284
  {
268
- "path": ".github/workflows/buildchain-ref-promotion-recovery.yml",
285
+ "path": ".github/workflows/self-ops-promotion-recovery.yml",
269
286
  "triggers": ["workflow_dispatch"],
270
287
  "jobs": [
271
288
  "resume|reusable-call|kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v4-alpha|write|write|-|contents-write,oidc-write"
@@ -275,7 +292,7 @@
275
292
  ]
276
293
  },
277
294
  {
278
- "path": ".github/workflows/buildchain-ref-promotion.yml",
295
+ "path": ".github/workflows/self-release-promote.yml",
279
296
  "triggers": ["workflow_dispatch", "workflow_run:completed"],
280
297
  "jobs": [
281
298
  "classify-workflow-run|runner|-|read|-|-|-",
@@ -301,7 +318,7 @@
301
318
  ]
302
319
  },
303
320
  {
304
- "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
321
+ "path": ".github/workflows/self-release-tail-dogfood.yml",
305
322
  "triggers": ["workflow_dispatch"],
306
323
  "jobs": [
307
324
  "publish|reusable-call|kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v4-alpha|-|-|-|-"
package/architecture/v4-rust-wasm-production-authority.json CHANGED
@@ -17,6 +17,7 @@
17
17
  "failurePolicy": "fail-closed"
18
18
  },
19
19
  "rustOwnedSemantics": [
20
+ "source-verification-evidence-identity-and-reuse",
20
21
  "canonical-json-and-content-roots",
21
22
  "release-invocation-plan-transaction-and-receipt",
22
23
  "product-publication-plan-and-version-intent",
package/architecture/v4-stage-capsule-qualification.json CHANGED
@@ -24,7 +24,7 @@
24
24
  ]
25
25
  },
26
26
  "publicConsumerDogfood": {
27
- "callerWorkflow": ".github/workflows/v4-public-consumer-dogfood.yml",
27
+ "callerWorkflow": ".github/workflows/self-build-public-consumer-dogfood.yml",
28
28
  "reusableWorkflow": "kungfu-systems/buildchain/.github/workflows/v4-stage-capsule-canary.yml",
29
29
  "validationRef": "v4-alpha",
30
30
  "invocation": "workflow_call",
package/architecture/v4-universal-workflow-bootstrap.json CHANGED
@@ -13,7 +13,7 @@
13
13
  "consumerRecoveryWorkflow": ".github/workflows/universal-bootstrap-recovery.yml",
14
14
  "consumerRecoveryMode": "separate-pre-positioned-consumer-owned-shell",
15
15
  "recoveryDependsOnPublishedBuildchain": false,
16
- "selfDogfoodWorkflow": ".github/workflows/universal-bootstrap-dogfood.yml",
16
+ "selfDogfoodWorkflow": ".github/workflows/self-ops-bootstrap-dogfood.yml",
17
17
  "faultCampaign": "architecture/v4-universal-workflow-fault-campaign.json",
18
18
  "discoveryRefExecutionAuthority": false,
19
19
  "exactShaExecutionAuthority": true,
package/architecture/v4-universal-workflow-fault-campaign.json CHANGED
@@ -64,7 +64,7 @@
64
64
  },
65
65
  {
66
66
  "id": "self-dogfood-caller",
67
- "injectionTarget": ".github/workflows/universal-bootstrap-dogfood.yml",
67
+ "injectionTarget": ".github/workflows/self-ops-bootstrap-dogfood.yml",
68
68
  "recoveryRoute": "consumer-equivalent-recovery-shell",
69
69
  "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
70
70
  }
package/architecture/v4-universal-workflow-train-admission.json CHANGED
@@ -23,13 +23,13 @@
23
23
  "statuses": "write"
24
24
  },
25
25
  "contractRoots": [
26
+ "sha256:1de4662862d6b519a115613d542891506e0b267a439219c9192ec515347d7b2a",
27
+ "sha256:38ab6e09aea11256a038c208b5e83dafc19cd740057e0eb90e1b1bd28175b067",
26
28
  "sha256:4563c954e84d34b73e6683981e1e23dd6b8bb9b9551392b4e393efb624cc980e",
27
- "sha256:639c9b8e68e0735030450d9014937dc0d427dfc105dafc6f1a659be426437ce5",
29
+ "sha256:4e1f0a8ae7b3f7651b16687d7cfab88a9622c5f88e04c82faf66769230ef595d",
28
30
  "sha256:65a0c2fc3faecaddf5076fff086b5d6e12eb9ba27796efc10aed19f2d93b9457",
29
- "sha256:b6737ed958e8f53f7770b1c214c092591573ad63af41e05797117d9b7b212ed8",
30
31
  "sha256:b94023c4abe4216765198adcaefb4825874a4d9053be096d35a53d6821128b52",
31
- "sha256:ca0592275354f0690756e3f11accdd23615987827c346618c50c2e8a2807ad4d",
32
- "sha256:d6ad9cf661c0ba3825cabdc7185fd122a60fc1929dfc799cda3352650588663f"
32
+ "sha256:ca0592275354f0690756e3f11accdd23615987827c346618c50c2e8a2807ad4d"
33
33
  ],
34
34
  "targetRef": "dev/v4/v4.0",
35
35
  "allowedReviewers": ["kungfu-origin"],