@kungfu-tech/buildchain 4.0.2-alpha.9 → 4.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (157) hide show
  1. package/AGENTS.md +10 -1
  2. package/CONTRIBUTING.md +24 -0
  3. package/README.md +2 -2
  4. package/actions/promote-buildchain-ref/README.md +1 -1
  5. package/actions/v4-release-candidate-promote/README.md +28 -0
  6. package/architecture/agent-change-map.md +64 -7
  7. package/architecture/ci-lane-change-budget.json +366 -0
  8. package/architecture/internal-capabilities.json +53 -8
  9. package/architecture/maintainability-debt.json +147 -93
  10. package/architecture/maintainability-policy.json +32 -28
  11. package/architecture/release-tail-contract-inventory.json +6 -6
  12. package/architecture/v4-architecture-constitution.md +23 -20
  13. package/architecture/v4-cross-platform-adopter-qualification.json +1 -1
  14. package/architecture/v4-delivery-authority-parity.json +2 -2
  15. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.json +1 -1
  16. package/architecture/v4-floating-consumer-policy.json +2 -2
  17. package/architecture/v4-next-development-parity.json +5 -5
  18. package/architecture/v4-partial-mutation-recovery-qualification.json +4 -1
  19. package/architecture/v4-platform-stage-checkpoints.json +1 -1
  20. package/architecture/v4-provider-operation-journal-contract.json +5 -2
  21. package/architecture/v4-publication-facade-patches.json +64 -0
  22. package/architecture/v4-release-activation-shadow-domain.json +5 -2
  23. package/architecture/v4-release-topology.json +74 -39
  24. package/architecture/v4-rust-wasm-production-authority.json +58 -0
  25. package/architecture/v4-stable-publication-fence.json +5 -2
  26. package/architecture/v4-stage-capsule-qualification.json +2 -2
  27. package/architecture/v4-tail-reseal-parity.json +8 -6
  28. package/architecture/v4-universal-workflow-bootstrap.json +171 -0
  29. package/architecture/v4-universal-workflow-fault-campaign.json +72 -0
  30. package/architecture/v4-universal-workflow-train-admission.json +40 -0
  31. package/architecture/workflow-taxonomy.json +1451 -0
  32. package/bin/buildchain.mjs +7 -7
  33. package/contracts/buildchain-v2-residuals-v1.json +57 -48
  34. package/contracts/dev-delivery-authority-v2.schema.json +16 -2
  35. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  36. package/contracts/v4-canonical-contracts-v1.schema.json +1 -0
  37. package/dist/site/buildchain-contract.json +93 -48
  38. package/dist/site/buildchain-site.json +222 -69
  39. package/dist/site/capability-registry.json +4 -4
  40. package/dist/site/controller-registry.json +50 -13
  41. package/dist/site/kfd-claims.json +2585 -1000
  42. package/dist/site/kfd-upstream-aggregate.json +1 -1
  43. package/dist/site/manual-registry.json +13 -13
  44. package/dist/site/node-api-registry.json +120 -115
  45. package/dist/site/page-registry.json +204 -51
  46. package/dist/site/public-surface-audit.json +3205 -1219
  47. package/dist/site/publication-authority-registry.json +1124 -362
  48. package/dist/site/publication-registry.json +4 -4
  49. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +16 -2
  50. package/dist/site/site-manifest.json +17 -17
  51. package/dist/site/workflow-registry.json +5061 -1659
  52. package/docs/MAP.md +1 -0
  53. package/docs/auditable-demo.md +1 -1
  54. package/docs/cli.md +21 -8
  55. package/docs/dev-delivery-warrant.md +1 -1
  56. package/docs/engineering-housekeeper.md +3 -3
  57. package/docs/kfd-support.md +26 -2
  58. package/docs/next-development-transition.md +2 -2
  59. package/docs/node-api-reference.md +190 -190
  60. package/docs/publication-authority.md +2 -2
  61. package/docs/release-candidate.md +3 -3
  62. package/docs/release-flow.md +67 -19
  63. package/docs/release-governance.md +8 -8
  64. package/docs/release-passport.md +27 -2
  65. package/docs/reusable-build-surface.md +16 -0
  66. package/docs/v4-adopter-delivery.md +2 -2
  67. package/docs/v4-production-release.md +71 -8
  68. package/docs/v4-rust-wasm-production-authority.md +58 -0
  69. package/docs/v4-stage-capsule.md +2 -2
  70. package/docs/v4-tail-reseal.md +1 -1
  71. package/docs/workflow-catalog.md +154 -0
  72. package/docs/workflow-path-migration.md +109 -0
  73. package/package.json +10 -6
  74. package/packages/core/artifact-verification-envelope.js +5 -5
  75. package/packages/core/buildchain-contract.js +1 -1
  76. package/packages/core/buildchain-kfd-claims.js +2 -2
  77. package/packages/core/buildchain-publication-authority.js +42 -26
  78. package/packages/core/buildchain-v4-domain.wasm +0 -0
  79. package/packages/core/ci-lane-change-budget.js +14 -1
  80. package/packages/core/controller-evidence.js +4 -1
  81. package/packages/core/dev-delivery-candidate-identity.js +40 -6
  82. package/packages/core/dev-delivery-warrant-state.js +3 -4
  83. package/packages/core/dev-delivery-warrant.js +12 -2
  84. package/packages/core/github-governance-authority.js +4 -4
  85. package/packages/core/kfd-adopter-manifest.js +46 -47
  86. package/packages/core/next-development-projection.js +2 -2
  87. package/packages/core/paper-agent-entry.js +30 -4
  88. package/packages/core/paper-fleet.js +1 -1
  89. package/packages/core/paper-runtime-channels.js +348 -0
  90. package/packages/core/paper-scaffold-content.js +10 -0
  91. package/packages/core/paper.js +37 -71
  92. package/packages/core/release-line-dry-run.js +1 -1
  93. package/packages/core/release-passport-contract.js +5 -5
  94. package/packages/core/release-passport.js +5 -4
  95. package/packages/core/release-tail-provider-plane.js +68 -1048
  96. package/packages/core/v4-canonical-contracts.js +10 -75
  97. package/packages/core/v4-domain-wasm-artifact.js +7 -0
  98. package/packages/core/v4-domain-wasm.js +216 -0
  99. package/packages/core/v4-floating-consumer-evidence.js +1 -1
  100. package/packages/core/v4-floating-consumer-policy.js +1 -1
  101. package/packages/core/v4-partial-mutation-recovery-qualification.js +9 -386
  102. package/packages/core/v4-product-publication.js +19 -349
  103. package/packages/core/v4-protected-publication-source.js +19 -21
  104. package/packages/core/v4-provider-operation-journal.js +18 -487
  105. package/packages/core/v4-provider-readback-idempotency.js +12 -97
  106. package/packages/core/v4-release-activation-shadow.js +13 -500
  107. package/packages/core/v4-release-invocation.js +28 -389
  108. package/packages/core/v4-stable-publication-fence.js +13 -342
  109. package/packages/core/v4-universal-workflow-bootstrap.js +586 -0
  110. package/scripts/binary-publication-evidence.mjs +135 -0
  111. package/scripts/build-contract-core.mjs +1 -14
  112. package/scripts/build-v4-domain-wasm.mjs +189 -0
  113. package/scripts/check-action-bundles.mjs +12 -2
  114. package/scripts/check-ci-lane-change-budget.mjs +4 -1
  115. package/scripts/check-core-mechanism-inventory.mjs +4 -3
  116. package/scripts/check-inventory.mjs +35 -44
  117. package/scripts/check-maintainability.mjs +16 -113
  118. package/scripts/check-v4-floating-consumer-policy-contract.mjs +2 -2
  119. package/scripts/check-v4-public-dogfood-contract.mjs +22 -9
  120. package/scripts/check-v4-release-topology.mjs +90 -33
  121. package/scripts/check-v4-runtime-semantic-closure.mjs +4 -1
  122. package/scripts/check-v4-universal-workflow-bootstrap.mjs +266 -0
  123. package/scripts/check-workflow-taxonomy.mjs +6 -0
  124. package/scripts/copy-v4-domain-wasm.mjs +14 -0
  125. package/scripts/dev-delivery-authority-command-adapters.mjs +1 -1
  126. package/scripts/dev-delivery-authority.mjs +8 -8
  127. package/scripts/dev-delivery-source-proof-reuse.mjs +2 -1
  128. package/scripts/dev-delivery-warrant-options.mjs +14 -9
  129. package/scripts/dev-delivery-warrant-store.mjs +73 -7
  130. package/scripts/dev-delivery-warrant-transition.mjs +109 -0
  131. package/scripts/dev-delivery-warrant.mjs +76 -99
  132. package/scripts/dev-pr-auto-merge.mjs +15 -15
  133. package/scripts/generate-channel-build-workflow.mjs +7 -2
  134. package/scripts/generate-channel-promotion-workflow.mjs +7 -5
  135. package/scripts/generate-site-bundle.mjs +11 -11
  136. package/scripts/generate-v4-universal-workflow-facades.mjs +458 -0
  137. package/scripts/generate-workflow-taxonomy.mjs +25 -0
  138. package/scripts/github-output.mjs +31 -0
  139. package/scripts/maintainability-metrics.mjs +16 -5
  140. package/scripts/maintainability-public-surface.mjs +115 -0
  141. package/scripts/next-development-review.mjs +307 -0
  142. package/scripts/paper-work-fleet-cli.mjs +2 -0
  143. package/scripts/release-asset-client.mjs +91 -0
  144. package/scripts/release-candidate-resolver.mjs +9 -9
  145. package/scripts/source-verification-evidence.mjs +344 -0
  146. package/scripts/stable-candidate-qualification.mjs +1 -1
  147. package/scripts/universal-facade-maintainability.mjs +82 -0
  148. package/scripts/v4-product-publication-intent.mjs +13 -6
  149. package/scripts/v4-publication-settlement.mjs +211 -0
  150. package/scripts/v4-universal-workflow-backflow.mjs +212 -0
  151. package/scripts/v4-universal-workflow-engine.mjs +618 -0
  152. package/scripts/v4-universal-workflow-self-dogfood.mjs +205 -0
  153. package/scripts/verify-version-state-delta.mjs +173 -0
  154. package/scripts/workflow-taxonomy.mjs +507 -0
  155. package/templates/native-dev-delivery.yml +4 -7
  156. package/templates/universal-buildchain-bootstrap-recovery.yml +282 -0
  157. package/templates/universal-buildchain-bootstrap.yml +28 -0
package/dist/site/capability-registry.json CHANGED
@@ -15,7 +15,7 @@
15
15
  "maturity": "stable",
16
16
  "counts": {
17
17
  "manualCount": 4,
18
- "pageCount": 18,
18
+ "pageCount": 21,
19
19
  "cliCommandCount": 9,
20
20
  "nodeApiCount": 0,
21
21
  "workflowCount": 0,
@@ -52,7 +52,7 @@
52
52
  "pageCount": 8,
53
53
  "cliCommandCount": 27,
54
54
  "nodeApiCount": 24,
55
- "workflowCount": 4,
55
+ "workflowCount": 2,
56
56
  "actionCount": 3
57
57
  },
58
58
  "manuals": [
@@ -257,7 +257,7 @@
257
257
  "pageCount": 17,
258
258
  "cliCommandCount": 13,
259
259
  "nodeApiCount": 16,
260
- "workflowCount": 20,
260
+ "workflowCount": 23,
261
261
  "actionCount": 0
262
262
  },
263
263
  "manuals": [
@@ -298,7 +298,7 @@
298
298
  "pageCount": 12,
299
299
  "cliCommandCount": 0,
300
300
  "nodeApiCount": 2,
301
- "workflowCount": 48,
301
+ "workflowCount": 84,
302
302
  "actionCount": 2
303
303
  },
304
304
  "manuals": [
package/dist/site/controller-registry.json CHANGED
@@ -52,6 +52,10 @@
52
52
  "classification": "included",
53
53
  "source": "workflow-call-input"
54
54
  },
55
+ "universal-request-json": {
56
+ "classification": "digest-only",
57
+ "source": "workflow-call-input"
58
+ },
55
59
  "upload-artifacts": {
56
60
  "classification": "included",
57
61
  "source": "workflow-call-input"
@@ -94,7 +98,7 @@
94
98
  "controller-receipt"
95
99
  ]
96
100
  },
97
- "digest": "sha256:91aeff9ffcc598918626c24850a00063a79ddf26aa48702fa22e7dce8c761968"
101
+ "digest": "sha256:cdb7dc4e69031dcd2c590789c666ececbad6bcc9cb916ae5b7f4cee4cda6d63e"
98
102
  },
99
103
  {
100
104
  "schemaVersion": 1,
@@ -498,6 +502,10 @@
498
502
  "classification": "included",
499
503
  "source": "workflow-call-input"
500
504
  },
505
+ "universal-request-json": {
506
+ "classification": "digest-only",
507
+ "source": "workflow-call-input"
508
+ },
501
509
  "untrusted-policy": {
502
510
  "classification": "included",
503
511
  "source": "workflow-call-input"
@@ -564,7 +572,7 @@
564
572
  "controller-receipt"
565
573
  ]
566
574
  },
567
- "digest": "sha256:c36f7dcd859a460ce757bc080132e9bf1be6875ff90e0a44308b414198a494fe"
575
+ "digest": "sha256:939f1ac15513a0417b539b3d10e875a9f0ea02e885facac9fa4de0ab0e1f8ee5"
568
576
  },
569
577
  {
570
578
  "schemaVersion": 1,
@@ -980,6 +988,10 @@
980
988
  "classification": "included",
981
989
  "source": "workflow-call-input"
982
990
  },
991
+ "universal-request-json": {
992
+ "classification": "digest-only",
993
+ "source": "workflow-call-input"
994
+ },
983
995
  "untrusted-policy": {
984
996
  "classification": "included",
985
997
  "source": "workflow-call-input"
@@ -1030,7 +1042,7 @@
1030
1042
  "controller-receipt"
1031
1043
  ]
1032
1044
  },
1033
- "digest": "sha256:a653e831202898143b5e46cc42120a22290f416b9dc851c1bec7088eb42bcb17"
1045
+ "digest": "sha256:382ae38afbf17236d093ec5bf945b7a151b99dacd1af53ac447c1ca5de73b956"
1034
1046
  },
1035
1047
  {
1036
1048
  "schemaVersion": 1,
@@ -1154,6 +1166,10 @@
1154
1166
  "classification": "included",
1155
1167
  "source": "workflow-call-input"
1156
1168
  },
1169
+ "universal-request-json": {
1170
+ "classification": "digest-only",
1171
+ "source": "workflow-call-input"
1172
+ },
1157
1173
  "untrusted-policy": {
1158
1174
  "classification": "included",
1159
1175
  "source": "workflow-call-input"
@@ -1187,7 +1203,7 @@
1187
1203
  ]
1188
1204
  },
1189
1205
  "semanticBoundary": "References the Shifu aggregate digest and status without copying project Gate identifiers or Gate policy.",
1190
- "digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d"
1206
+ "digest": "sha256:76c8da1ca1d7c6014cbda3ae3c82b2e28dafda45ddc7d3b4d6fccb6d3fd4853e"
1191
1207
  },
1192
1208
  {
1193
1209
  "schemaVersion": 1,
@@ -1367,6 +1383,10 @@
1367
1383
  "classification": "digest-only",
1368
1384
  "source": "workflow-call-input"
1369
1385
  },
1386
+ "universal-request-json": {
1387
+ "classification": "digest-only",
1388
+ "source": "workflow-call-input"
1389
+ },
1370
1390
  "verify-command": {
1371
1391
  "classification": "digest-only",
1372
1392
  "source": "workflow-call-input"
@@ -1419,7 +1439,7 @@
1419
1439
  "controller-receipt"
1420
1440
  ]
1421
1441
  },
1422
- "digest": "sha256:834c08b0099b646075b1850548454986b7c150f808019c6ec7d8eae377214a19"
1442
+ "digest": "sha256:8977c5222c4e30ee2d22e6519add1760cbbd917097b57f576d249001918217c8"
1423
1443
  },
1424
1444
  {
1425
1445
  "schemaVersion": 1,
@@ -1515,6 +1535,10 @@
1515
1535
  "classification": "included",
1516
1536
  "source": "workflow-call-input"
1517
1537
  },
1538
+ "universal-request-json": {
1539
+ "classification": "digest-only",
1540
+ "source": "workflow-call-input"
1541
+ },
1518
1542
  "verify-command": {
1519
1543
  "classification": "digest-only",
1520
1544
  "source": "workflow-call-input"
@@ -1558,7 +1582,7 @@
1558
1582
  "controller-receipt"
1559
1583
  ]
1560
1584
  },
1561
- "digest": "sha256:e48bb7719886d3949d63ec69d638264b20c7de8a70ee2db3cca78d4369f5a41e"
1585
+ "digest": "sha256:6768756f1a1855ffec164c9745a45805b775741d2ef72f464bfac093efffee7d"
1562
1586
  },
1563
1587
  {
1564
1588
  "schemaVersion": 1,
@@ -1714,6 +1738,10 @@
1714
1738
  "classification": "included",
1715
1739
  "source": "workflow-call-input"
1716
1740
  },
1741
+ "universal-request-json": {
1742
+ "classification": "digest-only",
1743
+ "source": "workflow-call-input"
1744
+ },
1717
1745
  "verify-command": {
1718
1746
  "classification": "digest-only",
1719
1747
  "source": "workflow-call-input"
@@ -1771,7 +1799,7 @@
1771
1799
  "controller-receipt"
1772
1800
  ]
1773
1801
  },
1774
- "digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173"
1802
+ "digest": "sha256:24602f0ed35bbfb794051921b90686c9eed2434b17fd5da14e9ad95355c01634"
1775
1803
  },
1776
1804
  {
1777
1805
  "schemaVersion": 1,
@@ -2306,6 +2334,10 @@
2306
2334
  "trusted-publishing": {
2307
2335
  "classification": "included",
2308
2336
  "source": "workflow-call-input"
2337
+ },
2338
+ "universal-request-json": {
2339
+ "classification": "digest-only",
2340
+ "source": "workflow-call-input"
2309
2341
  }
2310
2342
  },
2311
2343
  "expected": {
@@ -2349,7 +2381,7 @@
2349
2381
  "controller-receipt"
2350
2382
  ]
2351
2383
  },
2352
- "digest": "sha256:f4d2d311fa07f70310f1538c6274ddf17a78392db716687c25171c3ba495d21f"
2384
+ "digest": "sha256:13a70da4c3234954c2acf5ff96c077e00b06297316bb2287ce28661ce1e62ef1"
2353
2385
  },
2354
2386
  {
2355
2387
  "schemaVersion": 1,
@@ -2437,6 +2469,10 @@
2437
2469
  "classification": "included",
2438
2470
  "source": "workflow-call-input"
2439
2471
  },
2472
+ "universal-request-json": {
2473
+ "classification": "digest-only",
2474
+ "source": "workflow-call-input"
2475
+ },
2440
2476
  "upstream-release-json": {
2441
2477
  "classification": "digest-only",
2442
2478
  "source": "workflow-call-input"
@@ -2493,7 +2529,7 @@
2493
2529
  "controller-receipt"
2494
2530
  ]
2495
2531
  },
2496
- "digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12"
2532
+ "digest": "sha256:e5aca2f9ebac530742cae8aa1e5959179bc3eca29bba384dd8f7cdf5821f5648"
2497
2533
  },
2498
2534
  {
2499
2535
  "schemaVersion": 1,
@@ -2501,8 +2537,9 @@
2501
2537
  "id": "binary-distribution",
2502
2538
  "version": 1,
2503
2539
  "workflow": {
2504
- "id": "binary-distribution",
2505
- "path": ".github/workflows/binary-distribution.yml"
2540
+ "id": "self-build-binary-distribution",
2541
+ "path": ".github/workflows/self-build-binary-distribution.yml",
2542
+ "contractPath": ".github/workflows/binary-distribution.yml"
2506
2543
  },
2507
2544
  "inputs": {},
2508
2545
  "expected": {
@@ -2539,8 +2576,8 @@
2539
2576
  "controller-receipt"
2540
2577
  ]
2541
2578
  },
2542
- "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
2579
+ "digest": "sha256:79fcf0b55df11186a5096aca13eaa965768ce7ee84b1e979eb1463f0b3f4e05e"
2543
2580
  }
2544
2581
  ],
2545
- "digest": "sha256:e9fe5b78abb43be3daeebf5a6c214f0c53e6519e96edb76b284bb8b737e57474"
2582
+ "digest": "sha256:6e49d5c9b70da381067ef03e088cb635ef7f4dba7fc56c7fa82e4c00784cf013"
2546
2583
  }