@kungfu-tech/buildchain 4.0.2-alpha.34 → 4.0.2-alpha.36

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/AGENTS.md +9 -0
  2. package/CONTRIBUTING.md +24 -0
  3. package/README.md +2 -2
  4. package/actions/promote-buildchain-ref/README.md +1 -1
  5. package/architecture/agent-change-map.md +7 -4
  6. package/architecture/ci-lane-change-budget.json +17 -0
  7. package/architecture/internal-capabilities.json +4 -4
  8. package/architecture/maintainability-debt.json +14 -11
  9. package/architecture/maintainability-policy.json +4 -4
  10. package/architecture/release-tail-contract-inventory.json +6 -6
  11. package/architecture/v4-delivery-authority-parity.json +2 -2
  12. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.json +1 -1
  13. package/architecture/v4-floating-consumer-policy.json +1 -1
  14. package/architecture/v4-next-development-parity.json +4 -4
  15. package/architecture/v4-platform-stage-checkpoints.json +1 -1
  16. package/architecture/v4-publication-facade-patches.json +53 -0
  17. package/architecture/v4-release-topology.json +56 -33
  18. package/architecture/v4-rust-wasm-production-authority.json +1 -0
  19. package/architecture/v4-stage-capsule-qualification.json +1 -1
  20. package/architecture/v4-universal-workflow-bootstrap.json +1 -1
  21. package/architecture/v4-universal-workflow-fault-campaign.json +1 -1
  22. package/architecture/v4-universal-workflow-train-admission.json +4 -4
  23. package/architecture/workflow-taxonomy.json +1448 -0
  24. package/contracts/buildchain-v2-residuals-v1.json +64 -1
  25. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  26. package/contracts/v4-canonical-contracts-v1.schema.json +1 -0
  27. package/dist/site/buildchain-contract.json +20 -20
  28. package/dist/site/buildchain-site.json +127 -56
  29. package/dist/site/capability-registry.json +4 -4
  30. package/dist/site/controller-registry.json +5 -4
  31. package/dist/site/kfd-claims.json +2623 -956
  32. package/dist/site/kfd-upstream-aggregate.json +1 -1
  33. package/dist/site/manual-registry.json +10 -10
  34. package/dist/site/node-api-registry.json +26 -21
  35. package/dist/site/page-registry.json +112 -41
  36. package/dist/site/public-surface-audit.json +3205 -1126
  37. package/dist/site/publication-authority-registry.json +1182 -415
  38. package/dist/site/publication-registry.json +4 -4
  39. package/dist/site/site-manifest.json +14 -14
  40. package/dist/site/workflow-registry.json +5460 -1870
  41. package/docs/MAP.md +1 -0
  42. package/docs/auditable-demo.md +1 -1
  43. package/docs/cli.md +3 -3
  44. package/docs/dev-delivery-warrant.md +1 -1
  45. package/docs/engineering-housekeeper.md +3 -3
  46. package/docs/next-development-transition.md +1 -1
  47. package/docs/node-api-reference.md +30 -30
  48. package/docs/publication-authority.md +2 -2
  49. package/docs/release-candidate.md +3 -3
  50. package/docs/release-flow.md +67 -19
  51. package/docs/release-governance.md +8 -8
  52. package/docs/v4-adopter-delivery.md +1 -1
  53. package/docs/v4-production-release.md +71 -8
  54. package/docs/v4-stage-capsule.md +1 -1
  55. package/docs/workflow-catalog.md +152 -0
  56. package/package.json +8 -6
  57. package/packages/core/buildchain-contract.js +1 -1
  58. package/packages/core/buildchain-kfd-claims.js +2 -2
  59. package/packages/core/buildchain-publication-authority.js +40 -25
  60. package/packages/core/buildchain-v4-domain.wasm +0 -0
  61. package/packages/core/controller-evidence.js +4 -1
  62. package/packages/core/github-governance-authority.js +4 -4
  63. package/packages/core/next-development-projection.js +1 -1
  64. package/packages/core/release-line-dry-run.js +1 -1
  65. package/packages/core/v4-canonical-contracts.js +1 -0
  66. package/packages/core/v4-domain-wasm-artifact.js +2 -2
  67. package/packages/core/v4-floating-consumer-evidence.js +1 -1
  68. package/packages/core/v4-floating-consumer-policy.js +1 -1
  69. package/scripts/binary-publication-evidence.mjs +135 -0
  70. package/scripts/check-ci-lane-change-budget.mjs +4 -1
  71. package/scripts/check-core-mechanism-inventory.mjs +4 -3
  72. package/scripts/check-inventory.mjs +22 -22
  73. package/scripts/check-v4-floating-consumer-policy-contract.mjs +1 -1
  74. package/scripts/check-v4-public-dogfood-contract.mjs +18 -5
  75. package/scripts/check-v4-release-topology.mjs +35 -6
  76. package/scripts/check-v4-runtime-semantic-closure.mjs +4 -1
  77. package/scripts/check-v4-universal-workflow-bootstrap.mjs +5 -9
  78. package/scripts/check-workflow-taxonomy.mjs +6 -0
  79. package/scripts/generate-channel-build-workflow.mjs +2 -1
  80. package/scripts/generate-channel-promotion-workflow.mjs +4 -3
  81. package/scripts/generate-site-bundle.mjs +11 -11
  82. package/scripts/generate-v4-universal-workflow-facades.mjs +24 -6
  83. package/scripts/generate-workflow-taxonomy.mjs +25 -0
  84. package/scripts/maintainability-metrics.mjs +16 -5
  85. package/scripts/next-development-review.mjs +307 -0
  86. package/scripts/release-asset-client.mjs +91 -0
  87. package/scripts/release-candidate-resolver.mjs +1 -1
  88. package/scripts/source-verification-evidence.mjs +344 -0
  89. package/scripts/stable-candidate-qualification.mjs +1 -1
  90. package/scripts/v4-publication-settlement.mjs +211 -0
  91. package/scripts/v4-universal-workflow-self-dogfood.mjs +1 -1
  92. package/scripts/verify-version-state-delta.mjs +173 -0
  93. package/scripts/workflow-taxonomy.mjs +468 -0
package/architecture/v4-release-topology.json CHANGED
@@ -15,49 +15,51 @@
15
15
  ".github/workflows/.publication-authority.yml",
16
16
  ".github/workflows/.release-candidate-promote.yml",
17
17
  ".github/workflows/.web-surface.yml",
18
- ".github/workflows/auditable-demo.yml",
19
- ".github/workflows/binary-release-assets.yml",
20
- ".github/workflows/build-surface-fixture.yml",
18
+ ".github/workflows/self-build-demo-dogfood.yml",
19
+ ".github/workflows/self-release-binary-assets.yml",
20
+ ".github/workflows/self-build-fixture.yml",
21
21
  ".github/workflows/build.yml",
22
- ".github/workflows/buildchain-alpha-self-dogfood.yml",
23
- ".github/workflows/buildchain-dev-delivery.yml",
24
- ".github/workflows/buildchain-ref-promotion-recovery.yml",
25
- ".github/workflows/buildchain-ref-promotion.yml",
26
- ".github/workflows/buildchain-patrol-daily.yml",
27
- ".github/workflows/buildchain-patrol-monthly.yml",
28
- ".github/workflows/buildchain-patrol-weekly.yml",
29
- ".github/workflows/buildchain-stable-candidate-patrol.yml",
22
+ ".github/workflows/self-build-alpha-dogfood.yml",
23
+ ".github/workflows/self-ops-dev-delivery.yml",
24
+ ".github/workflows/self-ops-promotion-recovery.yml",
25
+ ".github/workflows/self-release-promote.yml",
26
+ ".github/workflows/self-ops-patrol-daily.yml",
27
+ ".github/workflows/self-ops-patrol-monthly.yml",
28
+ ".github/workflows/self-ops-patrol-weekly.yml",
29
+ ".github/workflows/self-ops-stable-candidate-patrol.yml",
30
30
  ".github/workflows/dev-alpha-candidate-patrol.yml",
31
31
  ".github/workflows/dev-pr-auto-merge.yml",
32
32
  ".github/workflows/github-artifact-attestation.yml",
33
- ".github/workflows/npm-publish.yml",
33
+ ".github/workflows/self-release-npm-dry-run.yml",
34
34
  ".github/workflows/paper-release-sealed.yml",
35
35
  ".github/workflows/paper-release.yml",
36
36
  ".github/workflows/patrol-observed-evidence.yml",
37
37
  ".github/workflows/release-candidate-promote.yml",
38
- ".github/workflows/release-line-bootstrap.yml",
39
- ".github/workflows/release-new-version.yml",
38
+ ".github/workflows/self-release-line-open.yml",
39
+ ".github/workflows/self-release-new-version-compat.yml",
40
40
  ".github/workflows/release-propagation.yml",
41
41
  ".github/workflows/release-tail.yml",
42
42
  ".github/workflows/stable-candidate-patrol.yml",
43
- ".github/workflows/v4-publication-rehearsal-dogfood.yml",
44
- ".github/workflows/v4-declarative-release-tail-dogfood.yml"
43
+ ".github/workflows/self-release-rehearsal-dogfood.yml",
44
+ ".github/workflows/self-release-tail-dogfood.yml",
45
+ ".github/workflows/self-release-next-development.yml"
45
46
  ],
46
47
  "unknownTopologyPolicy": "fail-closed"
47
48
  },
48
49
  "semanticScope": {
49
50
  "workflowPaths": [
50
51
  ".github/workflows/.release-candidate-promote.yml",
51
- ".github/workflows/buildchain-ref-promotion-recovery.yml",
52
- ".github/workflows/buildchain-ref-promotion.yml",
52
+ ".github/workflows/self-ops-promotion-recovery.yml",
53
+ ".github/workflows/self-release-promote.yml",
53
54
  ".github/workflows/release-candidate-promote.yml",
54
- ".github/workflows/v4-declarative-release-tail-dogfood.yml"
55
+ ".github/workflows/self-release-tail-dogfood.yml"
55
56
  ],
56
57
  "excludedMechanisms": [
57
58
  "Paper product release",
58
59
  "npm dry-run",
59
60
  "v3 rollback workflows",
60
- "retired compatibility workflows"
61
+ "retired compatibility workflows",
62
+ "Post-publication protected development review: no package, tag or Release mutation; independently inventoried in closedWorld and privilegedExecutableClosure."
61
63
  ]
62
64
  },
63
65
  "authorityClosure": {
@@ -78,14 +80,21 @@
78
80
  "packages/core/v4-publication-rehearsal.js"
79
81
  ],
80
82
  "runtimeSelectors": [
83
+ ".github/workflows/.build-engine.yml",
81
84
  ".github/workflows/.build.yml",
82
85
  ".github/workflows/.release-candidate-promote.yml",
86
+ ".github/workflows/.release-promote.yml",
83
87
  ".github/workflows/.web-surface.yml",
84
- ".github/workflows/buildchain-ref-promotion-recovery.yml",
85
- ".github/workflows/buildchain-ref-promotion.yml",
86
88
  ".github/workflows/paper-release.yml",
89
+ ".github/workflows/public-build-publication.yml",
90
+ ".github/workflows/public-ops-tail-reseal.yml",
91
+ ".github/workflows/public-release-paper.yml",
92
+ ".github/workflows/public-release-promote.yml",
93
+ ".github/workflows/public-release-web.yml",
87
94
  ".github/workflows/publication-artifact.yml",
88
95
  ".github/workflows/release-candidate-promote.yml",
96
+ ".github/workflows/self-ops-promotion-recovery.yml",
97
+ ".github/workflows/self-release-promote.yml",
89
98
  ".github/workflows/v4-tail-reseal.yml",
90
99
  "packages/core/buildchain-contract.js",
91
100
  "packages/core/v4-runtime-ref-resume-authority.js",
@@ -105,21 +114,30 @@
105
114
  "runtimeEngines": ["actions/v4-release-candidate-promote/index.js"],
106
115
  "terminalProjections": [
107
116
  ".github/workflows/.release-candidate-promote.yml",
117
+ ".github/workflows/.release-promote.yml",
108
118
  "actions/v4-release-candidate-promote/index.js",
109
119
  "packages/core/v4-release-invocation.js",
120
+ "scripts/v4-publication-settlement.mjs",
110
121
  "scripts/v4-universal-workflow-engine.mjs"
111
122
  ],
112
123
  "privilegedExecutableClosure": {
113
- "entrypoints": ["actions/v4-release-candidate-promote/index.js"],
124
+ "entrypoints": [
125
+ "actions/v4-release-candidate-promote/index.js",
126
+ "scripts/binary-publication-evidence.mjs",
127
+ "scripts/next-development-review.mjs",
128
+ "scripts/v4-publication-settlement.mjs"
129
+ ],
114
130
  "modules": [
115
131
  "actions/promote-buildchain-ref/github-release.js",
116
132
  "actions/promote-buildchain-ref/internal/version-state.js",
117
133
  "actions/promote-buildchain-ref/reuse-complete-release.js",
118
134
  "actions/promote-buildchain-ref/v4-provider-plane.js",
119
135
  "actions/v4-release-candidate-promote/index.js",
136
+ "actions/v4-release-candidate-promote/next-development-queue.js",
120
137
  "actions/v4-release-candidate-promote/product-provider-adapters.js",
121
138
  "actions/v4-release-candidate-promote/product-provider-github-adapters.js",
122
139
  "actions/v4-release-candidate-promote/product-provider.js",
140
+ "actions/v4-release-candidate-promote/publication-completion.js",
123
141
  "packages/core/adopter-delivery-gate.js",
124
142
  "packages/core/adopter-delivery-json.js",
125
143
  "packages/core/adopter-delivery-passport.js",
@@ -171,15 +189,20 @@
171
189
  "packages/core/v4-runtime-selector-persistence.js",
172
190
  "packages/core/web-surface-publication-candidate.js",
173
191
  "packages/core/workflow-yaml-contract.js",
174
- "scripts/ensure-github-release.mjs"
192
+ "scripts/binary-publication-evidence.mjs",
193
+ "scripts/ensure-github-release.mjs",
194
+ "scripts/next-development-review.mjs",
195
+ "scripts/release-asset-client.mjs",
196
+ "scripts/v4-publication-settlement.mjs",
197
+ "scripts/verify-version-state-delta.mjs"
175
198
  ],
176
- "root": "sha256:288290a0da4e608869026688fc4981ded81cbc97b9e7bd7c031b9b8369653a39"
199
+ "root": "sha256:7a4de4f149edfdcced84267304aab1ccf9997badcaca899b7dc4fbe9288c34cb"
177
200
  },
178
201
  "rustWasmAuthority": {
179
202
  "loader": "packages/core/v4-domain-wasm.js",
180
203
  "metadata": "packages/core/v4-domain-wasm-artifact.js",
181
204
  "artifact": "packages/core/buildchain-v4-domain.wasm",
182
- "artifactRoot": "sha256:32a808ba9b749d1297c0ce4b7be1586afdae3d849e44f3f7ffb1742e572f5627",
205
+ "artifactRoot": "sha256:b37c330e9366b7e9cf9dc4b7573b1e9495212dd9520e8b8ec6cdc3fd0ab7cafd",
183
206
  "distributedArtifacts": [
184
207
  "actions/promote-buildchain-ref/dist/buildchain-v4-domain.wasm",
185
208
  "actions/release-tail/dist/buildchain-v4-domain.wasm",
@@ -196,7 +219,7 @@
196
219
  "actions/promote-buildchain-ref/lib.js"
197
220
  ],
198
221
  "freshEntry": ".github/workflows/release-candidate-promote.yml",
199
- "recoveryEntry": ".github/workflows/buildchain-ref-promotion-recovery.yml",
222
+ "recoveryEntry": ".github/workflows/self-ops-promotion-recovery.yml",
200
223
  "forbiddenLegacyEnginePatterns": [
201
224
  "legacy-promote",
202
225
  "v4-declarative-promote",
@@ -265,7 +288,7 @@
265
288
  "reusableEdges": []
266
289
  },
267
290
  {
268
- "path": ".github/workflows/buildchain-ref-promotion-recovery.yml",
291
+ "path": ".github/workflows/self-ops-promotion-recovery.yml",
269
292
  "triggers": ["workflow_dispatch"],
270
293
  "jobs": [
271
294
  "resume|reusable-call|kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v4-alpha|write|write|-|contents-write,oidc-write"
@@ -275,7 +298,7 @@
275
298
  ]
276
299
  },
277
300
  {
278
- "path": ".github/workflows/buildchain-ref-promotion.yml",
301
+ "path": ".github/workflows/self-release-promote.yml",
279
302
  "triggers": ["workflow_dispatch", "workflow_run:completed"],
280
303
  "jobs": [
281
304
  "classify-workflow-run|runner|-|read|-|-|-",
@@ -301,7 +324,7 @@
301
324
  ]
302
325
  },
303
326
  {
304
- "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
327
+ "path": ".github/workflows/self-release-tail-dogfood.yml",
305
328
  "triggers": ["workflow_dispatch"],
306
329
  "jobs": [
307
330
  "publish|reusable-call|kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v4-alpha|-|-|-|-"
@@ -312,10 +335,10 @@
312
335
  }
313
336
  ],
314
337
  "metrics": {
315
- "workflowCount": 33,
316
- "jobCount": 89,
338
+ "workflowCount": 34,
339
+ "jobCount": 90,
317
340
  "reusableEdgeCount": 23,
318
- "mutationRelevantNodeCount": 74,
341
+ "mutationRelevantNodeCount": 75,
319
342
  "contentsWriteJobCount": 14,
320
343
  "oidcWriteJobCount": 16
321
344
  },
package/architecture/v4-rust-wasm-production-authority.json CHANGED
@@ -17,6 +17,7 @@
17
17
  "failurePolicy": "fail-closed"
18
18
  },
19
19
  "rustOwnedSemantics": [
20
+ "source-verification-evidence-identity-and-reuse",
20
21
  "canonical-json-and-content-roots",
21
22
  "release-invocation-plan-transaction-and-receipt",
22
23
  "product-publication-plan-and-version-intent",
package/architecture/v4-stage-capsule-qualification.json CHANGED
@@ -24,7 +24,7 @@
24
24
  ]
25
25
  },
26
26
  "publicConsumerDogfood": {
27
- "callerWorkflow": ".github/workflows/v4-public-consumer-dogfood.yml",
27
+ "callerWorkflow": ".github/workflows/self-build-public-consumer-dogfood.yml",
28
28
  "reusableWorkflow": "kungfu-systems/buildchain/.github/workflows/v4-stage-capsule-canary.yml",
29
29
  "validationRef": "v4-alpha",
30
30
  "invocation": "workflow_call",
package/architecture/v4-universal-workflow-bootstrap.json CHANGED
@@ -13,7 +13,7 @@
13
13
  "consumerRecoveryWorkflow": ".github/workflows/universal-bootstrap-recovery.yml",
14
14
  "consumerRecoveryMode": "separate-pre-positioned-consumer-owned-shell",
15
15
  "recoveryDependsOnPublishedBuildchain": false,
16
- "selfDogfoodWorkflow": ".github/workflows/universal-bootstrap-dogfood.yml",
16
+ "selfDogfoodWorkflow": ".github/workflows/self-ops-bootstrap-dogfood.yml",
17
17
  "faultCampaign": "architecture/v4-universal-workflow-fault-campaign.json",
18
18
  "discoveryRefExecutionAuthority": false,
19
19
  "exactShaExecutionAuthority": true,
package/architecture/v4-universal-workflow-fault-campaign.json CHANGED
@@ -64,7 +64,7 @@
64
64
  },
65
65
  {
66
66
  "id": "self-dogfood-caller",
67
- "injectionTarget": ".github/workflows/universal-bootstrap-dogfood.yml",
67
+ "injectionTarget": ".github/workflows/self-ops-bootstrap-dogfood.yml",
68
68
  "recoveryRoute": "consumer-equivalent-recovery-shell",
69
69
  "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
70
70
  }
package/architecture/v4-universal-workflow-train-admission.json CHANGED
@@ -23,13 +23,13 @@
23
23
  "statuses": "write"
24
24
  },
25
25
  "contractRoots": [
26
+ "sha256:1de4662862d6b519a115613d542891506e0b267a439219c9192ec515347d7b2a",
27
+ "sha256:38ab6e09aea11256a038c208b5e83dafc19cd740057e0eb90e1b1bd28175b067",
26
28
  "sha256:4563c954e84d34b73e6683981e1e23dd6b8bb9b9551392b4e393efb624cc980e",
27
- "sha256:639c9b8e68e0735030450d9014937dc0d427dfc105dafc6f1a659be426437ce5",
29
+ "sha256:4e1f0a8ae7b3f7651b16687d7cfab88a9622c5f88e04c82faf66769230ef595d",
28
30
  "sha256:65a0c2fc3faecaddf5076fff086b5d6e12eb9ba27796efc10aed19f2d93b9457",
29
- "sha256:b6737ed958e8f53f7770b1c214c092591573ad63af41e05797117d9b7b212ed8",
30
31
  "sha256:b94023c4abe4216765198adcaefb4825874a4d9053be096d35a53d6821128b52",
31
- "sha256:ca0592275354f0690756e3f11accdd23615987827c346618c50c2e8a2807ad4d",
32
- "sha256:d6ad9cf661c0ba3825cabdc7185fd122a60fc1929dfc799cda3352650588663f"
32
+ "sha256:ca0592275354f0690756e3f11accdd23615987827c346618c50c2e8a2807ad4d"
33
33
  ],
34
34
  "targetRef": "dev/v4/v4.0",
35
35
  "allowedReviewers": ["kungfu-origin"],