@kungfu-tech/buildchain 4.0.2-alpha.4 → 4.0.2-alpha.40

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (153) hide show
  1. package/AGENTS.md +10 -1
  2. package/CONTRIBUTING.md +24 -0
  3. package/README.md +2 -2
  4. package/actions/promote-buildchain-ref/README.md +1 -1
  5. package/actions/v4-release-candidate-promote/README.md +28 -0
  6. package/architecture/agent-change-map.md +66 -7
  7. package/architecture/ci-lane-change-budget.json +366 -0
  8. package/architecture/internal-capabilities.json +52 -8
  9. package/architecture/maintainability-debt.json +148 -92
  10. package/architecture/maintainability-policy.json +34 -30
  11. package/architecture/release-tail-contract-inventory.json +6 -6
  12. package/architecture/v4-architecture-constitution.md +23 -20
  13. package/architecture/v4-cross-platform-adopter-qualification.json +1 -1
  14. package/architecture/v4-delivery-authority-parity.json +2 -2
  15. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.json +1 -1
  16. package/architecture/v4-floating-consumer-policy.json +2 -2
  17. package/architecture/v4-next-development-parity.json +5 -5
  18. package/architecture/v4-partial-mutation-recovery-qualification.json +4 -1
  19. package/architecture/v4-platform-stage-checkpoints.json +1 -1
  20. package/architecture/v4-provider-operation-journal-contract.json +5 -2
  21. package/architecture/v4-publication-facade-patches.json +53 -0
  22. package/architecture/v4-release-activation-shadow-domain.json +5 -2
  23. package/architecture/v4-release-topology.json +143 -35
  24. package/architecture/v4-rust-wasm-production-authority.json +58 -0
  25. package/architecture/v4-stable-publication-fence.json +5 -2
  26. package/architecture/v4-stage-capsule-qualification.json +2 -2
  27. package/architecture/v4-tail-reseal-parity.json +8 -6
  28. package/architecture/v4-universal-workflow-bootstrap.json +171 -0
  29. package/architecture/v4-universal-workflow-fault-campaign.json +72 -0
  30. package/architecture/v4-universal-workflow-train-admission.json +40 -0
  31. package/architecture/workflow-taxonomy.json +1451 -0
  32. package/bin/buildchain.mjs +7 -7
  33. package/contracts/buildchain-v2-residuals-v1.json +57 -48
  34. package/contracts/dev-delivery-authority-v2.schema.json +16 -2
  35. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  36. package/contracts/v4-canonical-contracts-v1.schema.json +1 -0
  37. package/dist/site/buildchain-contract.json +93 -48
  38. package/dist/site/buildchain-site.json +222 -69
  39. package/dist/site/capability-registry.json +4 -4
  40. package/dist/site/controller-registry.json +50 -13
  41. package/dist/site/kfd-claims.json +2569 -982
  42. package/dist/site/kfd-upstream-aggregate.json +1 -1
  43. package/dist/site/manual-registry.json +13 -13
  44. package/dist/site/node-api-registry.json +88 -83
  45. package/dist/site/page-registry.json +204 -51
  46. package/dist/site/public-surface-audit.json +3207 -1219
  47. package/dist/site/publication-authority-registry.json +1124 -362
  48. package/dist/site/publication-registry.json +4 -4
  49. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +16 -2
  50. package/dist/site/site-manifest.json +17 -17
  51. package/dist/site/workflow-registry.json +5063 -1659
  52. package/docs/MAP.md +1 -0
  53. package/docs/auditable-demo.md +1 -1
  54. package/docs/cli.md +3 -3
  55. package/docs/dev-delivery-warrant.md +1 -1
  56. package/docs/engineering-housekeeper.md +3 -3
  57. package/docs/kfd-support.md +26 -2
  58. package/docs/next-development-transition.md +2 -2
  59. package/docs/node-api-reference.md +129 -129
  60. package/docs/publication-authority.md +2 -2
  61. package/docs/release-candidate.md +3 -3
  62. package/docs/release-flow.md +67 -19
  63. package/docs/release-governance.md +8 -8
  64. package/docs/release-passport.md +27 -2
  65. package/docs/reusable-build-surface.md +16 -0
  66. package/docs/v4-adopter-delivery.md +2 -2
  67. package/docs/v4-production-release.md +71 -8
  68. package/docs/v4-rust-wasm-production-authority.md +58 -0
  69. package/docs/v4-stage-capsule.md +2 -2
  70. package/docs/v4-tail-reseal.md +1 -1
  71. package/docs/workflow-catalog.md +154 -0
  72. package/docs/workflow-path-migration.md +109 -0
  73. package/package.json +10 -6
  74. package/packages/core/artifact-verification-envelope.js +5 -5
  75. package/packages/core/buildchain-contract.js +1 -1
  76. package/packages/core/buildchain-kfd-claims.js +2 -2
  77. package/packages/core/buildchain-publication-authority.js +42 -26
  78. package/packages/core/buildchain-v4-domain.wasm +0 -0
  79. package/packages/core/ci-lane-change-budget.js +14 -1
  80. package/packages/core/controller-evidence.js +4 -1
  81. package/packages/core/dev-delivery-candidate-identity.js +40 -6
  82. package/packages/core/dev-delivery-warrant-state.js +3 -4
  83. package/packages/core/dev-delivery-warrant.js +12 -2
  84. package/packages/core/github-governance-authority.js +4 -4
  85. package/packages/core/kfd-adopter-manifest.js +46 -47
  86. package/packages/core/next-development-projection.js +2 -2
  87. package/packages/core/release-line-dry-run.js +1 -1
  88. package/packages/core/release-passport-contract.js +5 -5
  89. package/packages/core/release-passport.js +5 -4
  90. package/packages/core/release-tail-product-capabilities.js +29 -0
  91. package/packages/core/release-tail-provider-plane.js +68 -1048
  92. package/packages/core/v4-canonical-contracts.js +14 -75
  93. package/packages/core/v4-domain-wasm-artifact.js +7 -0
  94. package/packages/core/v4-domain-wasm.js +216 -0
  95. package/packages/core/v4-floating-consumer-evidence.js +1 -1
  96. package/packages/core/v4-floating-consumer-policy.js +1 -1
  97. package/packages/core/v4-partial-mutation-recovery-qualification.js +9 -386
  98. package/packages/core/v4-product-publication.js +57 -0
  99. package/packages/core/v4-protected-publication-source.js +19 -21
  100. package/packages/core/v4-provider-operation-journal.js +18 -487
  101. package/packages/core/v4-provider-readback-idempotency.js +12 -97
  102. package/packages/core/v4-release-activation-shadow.js +13 -500
  103. package/packages/core/v4-release-invocation.js +28 -389
  104. package/packages/core/v4-stable-publication-fence.js +13 -342
  105. package/packages/core/v4-universal-workflow-bootstrap.js +586 -0
  106. package/scripts/binary-publication-evidence.mjs +135 -0
  107. package/scripts/build-contract-core.mjs +1 -14
  108. package/scripts/build-v4-domain-wasm.mjs +189 -0
  109. package/scripts/check-action-bundles.mjs +12 -2
  110. package/scripts/check-ci-lane-change-budget.mjs +4 -1
  111. package/scripts/check-core-mechanism-inventory.mjs +4 -3
  112. package/scripts/check-inventory.mjs +35 -44
  113. package/scripts/check-maintainability.mjs +16 -113
  114. package/scripts/check-v4-floating-consumer-policy-contract.mjs +2 -2
  115. package/scripts/check-v4-public-dogfood-contract.mjs +22 -9
  116. package/scripts/check-v4-release-topology.mjs +214 -50
  117. package/scripts/check-v4-runtime-semantic-closure.mjs +4 -1
  118. package/scripts/check-v4-universal-workflow-bootstrap.mjs +266 -0
  119. package/scripts/check-workflow-taxonomy.mjs +6 -0
  120. package/scripts/copy-v4-domain-wasm.mjs +14 -0
  121. package/scripts/dev-delivery-authority-command-adapters.mjs +1 -1
  122. package/scripts/dev-delivery-authority.mjs +8 -8
  123. package/scripts/dev-delivery-source-proof-reuse.mjs +2 -1
  124. package/scripts/dev-delivery-warrant-options.mjs +14 -9
  125. package/scripts/dev-delivery-warrant-store.mjs +73 -7
  126. package/scripts/dev-delivery-warrant-transition.mjs +109 -0
  127. package/scripts/dev-delivery-warrant.mjs +76 -99
  128. package/scripts/dev-pr-auto-merge.mjs +15 -15
  129. package/scripts/generate-channel-build-workflow.mjs +7 -2
  130. package/scripts/generate-channel-promotion-workflow.mjs +7 -5
  131. package/scripts/generate-site-bundle.mjs +11 -11
  132. package/scripts/generate-v4-universal-workflow-facades.mjs +458 -0
  133. package/scripts/generate-workflow-taxonomy.mjs +25 -0
  134. package/scripts/github-output.mjs +31 -0
  135. package/scripts/maintainability-metrics.mjs +16 -5
  136. package/scripts/maintainability-public-surface.mjs +115 -0
  137. package/scripts/next-development-review.mjs +307 -0
  138. package/scripts/release-asset-client.mjs +91 -0
  139. package/scripts/release-candidate-resolver.mjs +17 -18
  140. package/scripts/resume-from-candidate-run.mjs +1 -1
  141. package/scripts/source-verification-evidence.mjs +344 -0
  142. package/scripts/stable-candidate-qualification.mjs +1 -1
  143. package/scripts/universal-facade-maintainability.mjs +82 -0
  144. package/scripts/v4-product-publication-intent.mjs +121 -0
  145. package/scripts/v4-publication-settlement.mjs +211 -0
  146. package/scripts/v4-universal-workflow-backflow.mjs +212 -0
  147. package/scripts/v4-universal-workflow-engine.mjs +618 -0
  148. package/scripts/v4-universal-workflow-self-dogfood.mjs +205 -0
  149. package/scripts/verify-version-state-delta.mjs +173 -0
  150. package/scripts/workflow-taxonomy.mjs +507 -0
  151. package/templates/native-dev-delivery.yml +4 -7
  152. package/templates/universal-buildchain-bootstrap-recovery.yml +282 -0
  153. package/templates/universal-buildchain-bootstrap.yml +28 -0
package/architecture/v4-universal-workflow-fault-campaign.json ADDED
@@ -0,0 +1,72 @@
1
+ {
2
+ "schema": "kungfu-buildchain-v4-universal-workflow-fault-campaign/v1",
3
+ "independentFaultsOnly": true,
4
+ "simultaneousPrimaryAndRecoveryFailureClaimed": false,
5
+ "externalBoundary": {
6
+ "id": "github-workflow-parser-or-service-unavailable",
7
+ "classification": "irreducible-external-availability",
8
+ "recovered": false
9
+ },
10
+ "faults": [
11
+ {
12
+ "id": "primary-facade",
13
+ "injectionTarget": "templates/universal-buildchain-bootstrap.yml",
14
+ "recoveryRoute": "pre-positioned-recovery-shell",
15
+ "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
16
+ },
17
+ {
18
+ "id": "typed-input-adapter",
19
+ "injectionTarget": "packages/core/v4-universal-workflow-bootstrap.js",
20
+ "recoveryRoute": "exact-train-candidate",
21
+ "recoveryTarget": "scripts/v4-universal-workflow-engine.mjs"
22
+ },
23
+ {
24
+ "id": "route-selector",
25
+ "injectionTarget": ".github/workflows/bootstrap.yml",
26
+ "recoveryRoute": "pre-positioned-recovery-shell",
27
+ "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
28
+ },
29
+ {
30
+ "id": "ordinary-candidate-loader",
31
+ "injectionTarget": ".github/workflows/bootstrap.yml",
32
+ "recoveryRoute": "pre-positioned-recovery-shell",
33
+ "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
34
+ },
35
+ {
36
+ "id": "router",
37
+ "injectionTarget": "packages/core/v4-release-invocation.js",
38
+ "recoveryRoute": "exact-train-candidate",
39
+ "recoveryTarget": "scripts/v4-universal-workflow-engine.mjs"
40
+ },
41
+ {
42
+ "id": "action",
43
+ "injectionTarget": "actions/v4-release-candidate-promote/action.yml",
44
+ "recoveryRoute": "exact-train-candidate",
45
+ "recoveryTarget": "actions/v4-release-candidate-promote/dist/index.js"
46
+ },
47
+ {
48
+ "id": "cli-runtime",
49
+ "injectionTarget": "scripts/v4-universal-workflow-engine.mjs",
50
+ "recoveryRoute": "exact-train-candidate",
51
+ "recoveryTarget": "scripts/v4-universal-workflow-engine.mjs"
52
+ },
53
+ {
54
+ "id": "recovery-logic",
55
+ "injectionTarget": "templates/universal-buildchain-bootstrap-recovery.yml",
56
+ "recoveryRoute": "primary-bootstrap-shell",
57
+ "recoveryTarget": "templates/universal-buildchain-bootstrap.yml"
58
+ },
59
+ {
60
+ "id": "result-projection",
61
+ "injectionTarget": ".github/workflows/bootstrap.yml",
62
+ "recoveryRoute": "pre-positioned-recovery-shell",
63
+ "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
64
+ },
65
+ {
66
+ "id": "self-dogfood-caller",
67
+ "injectionTarget": ".github/workflows/self-ops-bootstrap-dogfood.yml",
68
+ "recoveryRoute": "consumer-equivalent-recovery-shell",
69
+ "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
70
+ }
71
+ ]
72
+ }
package/architecture/v4-universal-workflow-train-admission.json ADDED
@@ -0,0 +1,40 @@
1
+ {
2
+ "schema": "kungfu-buildchain-v4-universal-workflow-admission-policy/v1",
3
+ "sourceRepository": "kungfu-systems/buildchain",
4
+ "consumerAdmission": "verified-caller",
5
+ "allowedCapabilities": [
6
+ "bootstrap-conformance",
7
+ "release-candidate-promote",
8
+ "release-invocation"
9
+ ],
10
+ "permissionCeiling": {
11
+ "actions": "write",
12
+ "artifact-metadata": "write",
13
+ "attestations": "write",
14
+ "checks": "write",
15
+ "contents": "write",
16
+ "deployments": "write",
17
+ "id-token": "write",
18
+ "issues": "write",
19
+ "packages": "write",
20
+ "pages": "write",
21
+ "pull-requests": "write",
22
+ "security-events": "write",
23
+ "statuses": "write"
24
+ },
25
+ "contractRoots": [
26
+ "sha256:1de4662862d6b519a115613d542891506e0b267a439219c9192ec515347d7b2a",
27
+ "sha256:38ab6e09aea11256a038c208b5e83dafc19cd740057e0eb90e1b1bd28175b067",
28
+ "sha256:4e1f0a8ae7b3f7651b16687d7cfab88a9622c5f88e04c82faf66769230ef595d",
29
+ "sha256:613b0803c29c86f0c6c90a3e0bebd9bcd0ba62dca9eae94afaab3abe869e0a47",
30
+ "sha256:65a0c2fc3faecaddf5076fff086b5d6e12eb9ba27796efc10aed19f2d93b9457",
31
+ "sha256:b94023c4abe4216765198adcaefb4825874a4d9053be096d35a53d6821128b52",
32
+ "sha256:ca0592275354f0690756e3f11accdd23615987827c346618c50c2e8a2807ad4d"
33
+ ],
34
+ "targetRef": "dev/v4/v4.0",
35
+ "allowedReviewers": ["kungfu-origin"],
36
+ "minimumApprovals": 1,
37
+ "requiredChecks": ["check"],
38
+ "validFrom": "2026-08-30T00:00:00.000Z",
39
+ "expiresAt": "2026-09-07T00:00:00.000Z"
40
+ }