@kungfu-tech/buildchain 4.0.2-alpha.9 → 4.0.3-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (281) hide show
  1. package/AGENTS.md +14 -5
  2. package/CONTRIBUTING.md +58 -0
  3. package/README.md +3 -3
  4. package/actions/promote-buildchain-ref/README.md +1 -1
  5. package/actions/release-candidate-promote/README.md +31 -0
  6. package/architecture/agent-change-map.md +190 -126
  7. package/architecture/{v4-architecture-constitution.md → architecture-constitution.md} +33 -30
  8. package/architecture/{v3-core-mechanism-inventory.md → baseline-core-mechanism-inventory.md} +1 -1
  9. package/architecture/{v4-bootstrap-authority.json → bootstrap-authority.json} +3 -3
  10. package/architecture/{v3-v4-capability-closure.md → capability-parity-closure.md} +3 -3
  11. package/architecture/{v3-v4-live-capability-inventory.json → capability-parity-live-capability-inventory.json} +4 -4
  12. package/architecture/{v4-capability-state-machine-manifest.json → capability-state-machine-manifest.json} +2 -2
  13. package/architecture/{v4-capability-state-machine-manifest.schema.json → capability-state-machine-manifest.schema.json} +2 -2
  14. package/architecture/ci-lane-change-budget.json +384 -0
  15. package/architecture/{v4-cross-platform-adopter-qualification.json → cross-platform-adopter-qualification.json} +4 -4
  16. package/architecture/{v4-delivery-authority-parity.json → delivery-authority-parity.json} +17 -17
  17. package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.json → delivery-warrant-shadow-bootstrap-plan.json} +4 -4
  18. package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.md → delivery-warrant-shadow-bootstrap-plan.md} +7 -7
  19. package/architecture/{v4-floating-consumer-policy.json → floating-consumer-policy.json} +2 -2
  20. package/architecture/{v4-floating-consumer-policy.md → floating-consumer-policy.md} +1 -1
  21. package/architecture/implementation-naming.json +1273 -0
  22. package/architecture/internal-capabilities.json +201 -154
  23. package/architecture/maintainability-debt.json +205 -146
  24. package/architecture/maintainability-policy.json +37 -33
  25. package/architecture/{v4-next-development-parity.json → next-development-parity.json} +12 -12
  26. package/architecture/{v4-partial-mutation-recovery-qualification.json → partial-mutation-recovery-qualification.json} +8 -5
  27. package/architecture/{v4-platform-stage-checkpoints.json → platform-stage-checkpoints.json} +3 -3
  28. package/architecture/{v4-provider-operation-journal-contract.json → provider-operation-journal-contract.json} +10 -7
  29. package/architecture/publication-facade-patches.json +64 -0
  30. package/architecture/{v4-publication-rehearsal-parity.json → publication-rehearsal-parity.json} +4 -4
  31. package/architecture/{v4-release-activation-shadow-domain.json → release-activation-shadow-domain.json} +9 -6
  32. package/architecture/release-tail-contract-inventory.json +6 -6
  33. package/architecture/{v4-release-topology.json → release-topology.json} +163 -72
  34. package/architecture/{v4-release-train-parity.json → release-train-parity.json} +2 -2
  35. package/architecture/{v4-runtime-ref-resume-authority.json → runtime-ref-resume-authority.json} +1 -1
  36. package/architecture/{v4-runtime-semantic-closure.json → runtime-semantic-closure.json} +2 -2
  37. package/architecture/{v4-rust-libnode-bridge-evaluation.json → rust-libnode-bridge-evaluation.json} +3 -3
  38. package/architecture/{v4-rust-libnode-bridge-spike.md → rust-libnode-bridge-spike.md} +6 -6
  39. package/architecture/rust-wasm-production-authority.json +58 -0
  40. package/architecture/{v4-stable-publication-fence.json → stable-publication-fence.json} +7 -4
  41. package/architecture/{v4-stage-capsule-contract.json → stage-capsule-contract.json} +1 -1
  42. package/architecture/{v4-stage-capsule-qualification.json → stage-capsule-qualification.json} +8 -8
  43. package/architecture/{v4-stage-capsule-resume-planner.json → stage-capsule-resume-planner.json} +2 -2
  44. package/architecture/{v4-stage-capsule-store-contract.json → stage-capsule-store-contract.json} +4 -4
  45. package/architecture/{v4-tail-reseal-parity.json → tail-reseal-parity.json} +35 -33
  46. package/architecture/universal-workflow-bootstrap.json +176 -0
  47. package/architecture/universal-workflow-fault-campaign.json +72 -0
  48. package/architecture/universal-workflow-train-admission.json +40 -0
  49. package/architecture/workflow-taxonomy.json +1462 -0
  50. package/bin/buildchain.mjs +10 -10
  51. package/bin/internal/adopter-delivery-cli.mjs +9 -9
  52. package/contracts/buildchain-v2-residuals-v1.json +57 -48
  53. package/contracts/dev-delivery-authority-v2.schema.json +16 -2
  54. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  55. package/contracts/v4-canonical-contracts-v1.schema.json +1 -0
  56. package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/Cargo.lock +1 -1
  57. package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/Cargo.toml +1 -1
  58. package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/src/main.rs +3 -3
  59. package/dist/site/buildchain-contract.json +98 -53
  60. package/dist/site/buildchain-site.json +351 -102
  61. package/dist/site/capability-registry.json +7 -7
  62. package/dist/site/controller-registry.json +50 -13
  63. package/dist/site/kfd-claims.json +2773 -1052
  64. package/dist/site/kfd-upstream-aggregate.json +1 -1
  65. package/dist/site/manual-registry.json +14 -14
  66. package/dist/site/node-api-registry.json +13176 -10733
  67. package/dist/site/page-registry.json +332 -83
  68. package/dist/site/public-surface-audit.json +3227 -1222
  69. package/dist/site/publication-authority-registry.json +1135 -363
  70. package/dist/site/publication-registry.json +4 -4
  71. package/dist/site/release-provenance.json +18 -9
  72. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +16 -2
  73. package/dist/site/site-manifest.json +18 -18
  74. package/dist/site/workflow-registry.json +5367 -1931
  75. package/docs/MAP.md +5 -3
  76. package/docs/auditable-demo.md +1 -1
  77. package/docs/cli.md +21 -8
  78. package/docs/dev-delivery-warrant.md +1 -1
  79. package/docs/engineering-housekeeper.md +3 -3
  80. package/docs/kfd-support.md +26 -2
  81. package/docs/next-development-transition.md +26 -3
  82. package/docs/node-api-reference.md +618 -358
  83. package/docs/oci-publication.md +173 -0
  84. package/docs/publication-authority.md +2 -2
  85. package/docs/publish-transaction.md +36 -3
  86. package/docs/release-candidate.md +3 -3
  87. package/docs/release-flow.md +67 -19
  88. package/docs/release-governance.md +8 -8
  89. package/docs/release-passport.md +27 -2
  90. package/docs/reusable-build-surface.md +17 -1
  91. package/docs/v4-adopter-delivery.md +4 -4
  92. package/docs/v4-canonical-contracts.md +7 -7
  93. package/docs/v4-delivery-warrant-read-candidate.md +3 -3
  94. package/docs/v4-delivery-warrant-semantic-diff.md +3 -3
  95. package/docs/v4-production-release.md +77 -8
  96. package/docs/v4-publication-rehearsal.md +3 -3
  97. package/docs/v4-runtime-ref-resume-authority.md +2 -2
  98. package/docs/v4-rust-wasm-production-authority.md +58 -0
  99. package/docs/v4-stage-capsule.md +9 -9
  100. package/docs/v4-tail-reseal.md +2 -2
  101. package/docs/workflow-catalog.md +155 -0
  102. package/docs/workflow-path-migration.md +109 -0
  103. package/package.json +39 -24
  104. package/packages/compatibility/adopter-delivery.js +16 -0
  105. package/packages/compatibility/cross-platform-adopter-qualification.js +12 -0
  106. package/packages/compatibility/floating-consumer-policy.js +14 -0
  107. package/packages/compatibility/publication-qualification.js +11 -0
  108. package/packages/compatibility/publication-rehearsal.js +18 -0
  109. package/packages/compatibility/runtime-ref-resume-authority.js +13 -0
  110. package/packages/compatibility/tail-reseal-receipt.js +7 -0
  111. package/packages/compatibility/tail-reseal.js +11 -0
  112. package/packages/core/{v4-adopter-delivery-parity.js → adopter-delivery-parity.js} +12 -12
  113. package/packages/core/{v4-adopter-delivery.js → adopter-delivery.js} +24 -24
  114. package/packages/core/artifact-verification-envelope.js +5 -5
  115. package/packages/core/buildchain-contract.js +6 -6
  116. package/packages/core/buildchain-domain.wasm +0 -0
  117. package/packages/core/buildchain-kfd-claims.js +2 -2
  118. package/packages/core/buildchain-publication-authority.js +43 -26
  119. package/packages/core/{v4-canonical-contracts.js → canonical-contracts.js} +39 -103
  120. package/packages/core/ci-lane-change-budget.js +14 -1
  121. package/packages/core/controller-evidence.js +4 -1
  122. package/packages/core/{v4-cross-platform-adopter-qualification.js → cross-platform-adopter-qualification.js} +19 -19
  123. package/packages/core/{v4-delivery-warrant-fixture-runner.js → delivery-warrant-fixture-runner.js} +36 -32
  124. package/packages/core/{v4-delivery-warrant-read-candidate.js → delivery-warrant-read-candidate.js} +40 -40
  125. package/packages/core/{v4-delivery-warrant-semantic-diff-gate.js → delivery-warrant-semantic-diff-gate.js} +58 -59
  126. package/packages/core/{v4-delivery-warrant-shadow-adapter.js → delivery-warrant-shadow-adapter.js} +15 -15
  127. package/packages/core/dev-delivery-candidate-identity.js +40 -6
  128. package/packages/core/dev-delivery-execution-transfer.js +6 -6
  129. package/packages/core/dev-delivery-native-proof.js +12 -8
  130. package/packages/core/dev-delivery-warrant-legacy-recovery.js +1 -1
  131. package/packages/core/dev-delivery-warrant-native-compatibility.js +4 -4
  132. package/packages/core/dev-delivery-warrant-state.js +14 -15
  133. package/packages/core/dev-delivery-warrant.js +15 -5
  134. package/packages/core/domain-wasm-artifact.js +7 -0
  135. package/packages/core/domain-wasm.js +216 -0
  136. package/packages/core/{v4-floating-consumer-evidence.js → floating-consumer-evidence.js} +14 -14
  137. package/packages/core/{v4-floating-consumer-policy.js → floating-consumer-policy.js} +28 -30
  138. package/packages/core/{v4-floating-consumer-release-passport.js → floating-consumer-release-passport.js} +25 -25
  139. package/packages/core/github-governance-authority.js +4 -4
  140. package/packages/core/index.js +4 -8
  141. package/packages/core/kfd-adopter-manifest.js +46 -47
  142. package/packages/core/next-development-projection.js +26 -3
  143. package/packages/core/next-development-transition.js +5 -6
  144. package/packages/core/oci-compose-qualification.js +143 -0
  145. package/packages/core/oci-publication-bundle.js +281 -0
  146. package/packages/core/oci-publication-graph.js +206 -0
  147. package/packages/core/paper-agent-entry.js +30 -4
  148. package/packages/core/paper-fleet.js +1 -1
  149. package/packages/core/paper-runtime-channels.js +348 -0
  150. package/packages/core/paper-scaffold-content.js +10 -0
  151. package/packages/core/paper.js +37 -71
  152. package/packages/core/partial-mutation-recovery-qualification.js +18 -0
  153. package/packages/core/{v4-platform-stage-checkpoints.js → platform-stage-checkpoints.js} +37 -37
  154. package/packages/core/product-publication.js +59 -0
  155. package/packages/core/{v4-protected-publication-source.js → protected-publication-source.js} +22 -24
  156. package/packages/core/provider-operation-journal.js +62 -0
  157. package/packages/core/{v4-provider-readback-idempotency.js → provider-readback-idempotency.js} +40 -125
  158. package/packages/core/public-export-compatibility.js +33 -0
  159. package/packages/core/publication-development.js +72 -0
  160. package/packages/core/{v4-publication-qualification.js → publication-qualification.js} +17 -17
  161. package/packages/core/{v4-publication-rehearsal-capsule.js → publication-rehearsal-capsule.js} +23 -23
  162. package/packages/core/publication-rehearsal-projection.js +2 -2
  163. package/packages/core/{v4-publication-rehearsal-provider-bindings.js → publication-rehearsal-provider-bindings.js} +4 -4
  164. package/packages/core/publication-rehearsal-runtime.js +21 -21
  165. package/packages/core/{v4-publication-rehearsal.js → publication-rehearsal.js} +33 -33
  166. package/packages/core/publication-sealed-bundle.js +78 -13
  167. package/packages/core/release-activation-shadow.js +32 -0
  168. package/packages/core/release-candidate.js +6 -6
  169. package/packages/core/release-invocation.js +64 -0
  170. package/packages/core/release-line-dry-run.js +1 -1
  171. package/packages/core/release-passport-contract.js +5 -5
  172. package/packages/core/release-passport.js +41 -40
  173. package/packages/core/release-tail-product-capabilities.js +9 -0
  174. package/packages/core/release-tail-provider-plane.js +68 -1048
  175. package/packages/core/{v4-runtime-ref-resume-authority.js → runtime-ref-resume-authority.js} +36 -40
  176. package/packages/core/{v4-runtime-selector-persistence.js → runtime-selector-persistence.js} +7 -7
  177. package/packages/core/stable-publication-fence.js +28 -0
  178. package/packages/core/{v4-stage-capsule-local-store.js → stage-capsule-local-store.js} +56 -54
  179. package/packages/core/{v4-stage-capsule-qualification-campaign.js → stage-capsule-qualification-campaign.js} +37 -38
  180. package/packages/core/{v4-stage-capsule-qualification.js → stage-capsule-qualification.js} +28 -29
  181. package/packages/core/{v4-stage-capsule-resume-planner.js → stage-capsule-resume-planner.js} +29 -29
  182. package/packages/core/{v4-stage-capsule-store.js → stage-capsule-store.js} +59 -56
  183. package/packages/core/{v4-stage-capsule.js → stage-capsule.js} +45 -45
  184. package/packages/core/{v4-tail-reseal-contract.js → tail-reseal-contract.js} +6 -6
  185. package/packages/core/{v4-tail-reseal-github.js → tail-reseal-github.js} +12 -12
  186. package/packages/core/{v4-tail-reseal-receipt.js → tail-reseal-receipt.js} +22 -22
  187. package/packages/core/{v4-tail-reseal.js → tail-reseal.js} +29 -29
  188. package/packages/core/universal-workflow-bootstrap.js +586 -0
  189. package/scripts/{v4-architecture.mjs → architecture.mjs} +6 -6
  190. package/scripts/binary-publication-evidence.mjs +135 -0
  191. package/scripts/{v4-bridge-bootstrap.mjs → bridge-bootstrap.mjs} +14 -18
  192. package/scripts/{v4-bridge-evidence.mjs → bridge-evidence.mjs} +8 -8
  193. package/scripts/build-contract-core.mjs +1 -14
  194. package/scripts/build-domain-wasm.mjs +177 -0
  195. package/scripts/{v3-v4-capability-catalog.mjs → capability-parity-catalog.mjs} +19 -19
  196. package/scripts/check-action-bundles.mjs +12 -2
  197. package/scripts/{check-v3-v4-capability-inventory.mjs → check-capability-parity-inventory.mjs} +42 -42
  198. package/scripts/check-ci-lane-change-budget.mjs +4 -1
  199. package/scripts/check-core-mechanism-inventory.mjs +8 -4
  200. package/scripts/{check-v4-floating-consumer-policy-contract.mjs → check-floating-consumer-policy-contract.mjs} +10 -10
  201. package/scripts/check-implementation-naming.mjs +135 -0
  202. package/scripts/check-inventory.mjs +39 -47
  203. package/scripts/check-maintainability.mjs +25 -115
  204. package/scripts/{check-v4-public-dogfood-contract.mjs → check-public-dogfood-contract.mjs} +37 -24
  205. package/scripts/{check-v4-release-topology.mjs → check-release-topology.mjs} +131 -52
  206. package/scripts/{check-v4-runtime-semantic-closure.mjs → check-runtime-semantic-closure.mjs} +23 -17
  207. package/scripts/check-universal-workflow-bootstrap.mjs +266 -0
  208. package/scripts/check-workflow-taxonomy.mjs +6 -0
  209. package/scripts/{v4-consumer-policy.mjs → consumer-policy.mjs} +15 -15
  210. package/scripts/copy-domain-wasm.mjs +14 -0
  211. package/scripts/{v4-cross-platform-adopter-qualification.mjs → cross-platform-adopter-qualification.mjs} +9 -9
  212. package/scripts/{v4-declarative-promotion-admission.mjs → declarative-promotion-admission.mjs} +4 -4
  213. package/scripts/dev-delivery-authority-command-adapters.mjs +1 -1
  214. package/scripts/dev-delivery-authority.mjs +8 -8
  215. package/scripts/dev-delivery-source-proof-reuse.mjs +2 -1
  216. package/scripts/dev-delivery-warrant-options.mjs +15 -10
  217. package/scripts/dev-delivery-warrant-store.mjs +98 -13
  218. package/scripts/dev-delivery-warrant-transition.mjs +109 -0
  219. package/scripts/dev-delivery-warrant.mjs +80 -103
  220. package/scripts/dev-pr-auto-merge.mjs +15 -15
  221. package/scripts/dev-pr-delivery-warrant.mjs +1 -1
  222. package/scripts/generate-channel-build-workflow.mjs +7 -2
  223. package/scripts/generate-channel-promotion-workflow.mjs +19 -34
  224. package/scripts/generate-release-candidate-passport.mjs +23 -23
  225. package/scripts/generate-site-bundle.mjs +28 -28
  226. package/scripts/generate-universal-workflow-facades.mjs +498 -0
  227. package/scripts/generate-workflow-taxonomy.mjs +25 -0
  228. package/scripts/github-output.mjs +31 -0
  229. package/scripts/{v4-host-adapter.mjs → host-adapter.mjs} +1 -1
  230. package/scripts/implementation-references.mjs +25 -0
  231. package/scripts/init-repo.mjs +1 -1
  232. package/scripts/maintainability-metrics.mjs +16 -5
  233. package/scripts/maintainability-public-surface.mjs +115 -0
  234. package/scripts/next-development-review.mjs +313 -0
  235. package/scripts/oci-compose-preview.mjs +261 -0
  236. package/scripts/paper-work-fleet-cli.mjs +2 -0
  237. package/scripts/{v4-platform-stage-checkpoint-rehearsal.mjs → platform-stage-checkpoint-rehearsal.mjs} +17 -17
  238. package/scripts/{v4-product-publication-intent.mjs → product-publication-intent.mjs} +28 -13
  239. package/scripts/publication-candidate-kind.mjs +93 -0
  240. package/scripts/publication-candidate-sealer.mjs +16 -1
  241. package/scripts/{v4-publication-rehearsal-fixture.mjs → publication-rehearsal-fixture.mjs} +5 -5
  242. package/scripts/publication-settlement.mjs +211 -0
  243. package/scripts/release-asset-client.mjs +91 -0
  244. package/scripts/{v4-release-candidate-adapter.mjs → release-candidate-adapter.mjs} +4 -4
  245. package/scripts/release-candidate-resolver.mjs +24 -35
  246. package/scripts/release-tail.mjs +5 -5
  247. package/scripts/resume-from-candidate-run.mjs +35 -42
  248. package/scripts/site-capability-metadata.mjs +9 -0
  249. package/scripts/source-verification-evidence.mjs +344 -0
  250. package/scripts/stable-candidate-qualification.mjs +1 -1
  251. package/scripts/{v4-stage-capsule-qualification.mjs → stage-capsule-qualification.mjs} +62 -62
  252. package/scripts/{v4-stage-capsule-resume-rehearsal.mjs → stage-capsule-resume-rehearsal.mjs} +6 -6
  253. package/scripts/{v4-tail-reseal-macos-rehearsal.mjs → tail-reseal-macos-rehearsal.mjs} +9 -9
  254. package/scripts/{v4-tail-reseal.mjs → tail-reseal.mjs} +19 -19
  255. package/scripts/universal-facade-maintainability.mjs +91 -0
  256. package/scripts/universal-workflow-backflow.mjs +212 -0
  257. package/scripts/universal-workflow-engine.mjs +620 -0
  258. package/scripts/universal-workflow-self-dogfood.mjs +205 -0
  259. package/scripts/verify-version-state-delta.mjs +175 -0
  260. package/scripts/{v4-warrant-shadow-plan.mjs → warrant-shadow-plan.mjs} +6 -6
  261. package/scripts/workflow-taxonomy.mjs +507 -0
  262. package/templates/native-dev-delivery.yml +4 -7
  263. package/templates/universal-buildchain-bootstrap-recovery.yml +282 -0
  264. package/templates/universal-buildchain-bootstrap.yml +28 -0
  265. package/actions/v4-release-candidate-promote/README.md +0 -3
  266. package/packages/core/v4-partial-mutation-recovery-qualification.js +0 -395
  267. package/packages/core/v4-product-publication.js +0 -387
  268. package/packages/core/v4-provider-operation-journal.js +0 -531
  269. package/packages/core/v4-release-activation-shadow.js +0 -519
  270. package/packages/core/v4-release-invocation.js +0 -425
  271. package/packages/core/v4-stable-publication-fence.js +0 -357
  272. /package/architecture/{v4-adopter-delivery-parity.json → adopter-delivery-parity.json} +0 -0
  273. /package/architecture/{v3-core-mechanism-inventory.json → baseline-core-mechanism-inventory.json} +0 -0
  274. /package/architecture/{v4-canonical-contract-fixtures.json → canonical-contract-fixtures.json} +0 -0
  275. /package/architecture/{v4-compatibility-facts-parity.json → compatibility-facts-parity.json} +0 -0
  276. /package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.schema.json → delivery-warrant-shadow-bootstrap-plan.schema.json} +0 -0
  277. /package/architecture/{v4-delivery-warrant-shadow-fixtures.json → delivery-warrant-shadow-fixtures.json} +0 -0
  278. /package/architecture/{v4-delivery-warrant-shadow-fixtures.schema.json → delivery-warrant-shadow-fixtures.schema.json} +0 -0
  279. /package/architecture/{v4-exception-ledger.json → exception-ledger.json} +0 -0
  280. /package/architecture/{v4-exception-ledger.schema.json → exception-ledger.schema.json} +0 -0
  281. /package/architecture/{v4-release-invocation-fixtures.json → release-invocation-fixtures.json} +0 -0
@@ -1,395 +0,0 @@
1
- import {
2
- V4ContractFault,
3
- v4ContentRoot,
4
- validateV4Clock,
5
- validateV4Root,
6
- } from "./v4-canonical-contracts.js";
7
-
8
- export const V4_PARTIAL_MUTATION_RECOVERY_REQUEST_CONTRACT =
9
- "buildchain-v4-partial-mutation-recovery-request/v1";
10
- export const V4_PARTIAL_MUTATION_RECOVERY_PLAN_CONTRACT =
11
- "buildchain-v4-partial-mutation-recovery-plan/v1";
12
-
13
- const TOKEN = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
14
- const PHASES = new Set([
15
- "planned",
16
- "intended",
17
- "attempting",
18
- "observed",
19
- "confirmable",
20
- "retryable",
21
- "confirmed",
22
- "rejected",
23
- "terminal",
24
- ]);
25
- const PRIORITY = new Map(
26
- ["escalate", "compensate", "reconcile", "wait", "retry"].map(
27
- (value, index) => [value, index],
28
- ),
29
- );
30
-
31
- function fault(code, path, message) {
32
- throw new V4ContractFault(code, path, message);
33
- }
34
-
35
- function exactKeys(value, expected, path) {
36
- if (!value || typeof value !== "object" || Array.isArray(value))
37
- fault("invalid-partial-mutation-recovery-shape", path, "object required");
38
- const actual = Object.keys(value).sort();
39
- const canonical = [...expected].sort();
40
- if (
41
- actual.length !== canonical.length ||
42
- actual.some((key, index) => key !== canonical[index])
43
- )
44
- fault(
45
- "invalid-partial-mutation-recovery-shape",
46
- path,
47
- "keys do not match the closed recovery contract",
48
- );
49
- }
50
-
51
- function token(value, path) {
52
- if (typeof value !== "string" || !TOKEN.test(value))
53
- fault(
54
- "invalid-partial-mutation-recovery-token",
55
- path,
56
- "recovery identifiers must be ASCII tokens",
57
- );
58
- }
59
-
60
- function sortedUnique(values, path, validate) {
61
- if (!Array.isArray(values))
62
- fault("invalid-partial-mutation-recovery-shape", path, "array required");
63
- let prior = null;
64
- for (const [index, value] of values.entries()) {
65
- validate(value, `${path}/${index}`);
66
- if (prior !== null && value <= prior)
67
- fault(
68
- "unordered-partial-mutation-recovery-evidence",
69
- `${path}/${index}`,
70
- "values must be unique and byte-sorted",
71
- );
72
- prior = value;
73
- }
74
- }
75
-
76
- function validateStageResume(value, request) {
77
- exactKeys(
78
- value,
79
- [
80
- "schema",
81
- "planRoot",
82
- "sourceRoot",
83
- "policyRoot",
84
- "platformRoot",
85
- "qualificationRoots",
86
- "decisions",
87
- ],
88
- "$/stageResume",
89
- );
90
- if (value.schema !== "buildchain-v4-stage-capsule-resume-evidence/v1")
91
- fault(
92
- "unsupported-partial-mutation-recovery-version",
93
- "$/stageResume/schema",
94
- "unsupported Stage Capsule resume evidence",
95
- );
96
- for (const [field, expected] of [
97
- ["sourceRoot", request.sourceRoot],
98
- ["policyRoot", request.policyRoot],
99
- ["platformRoot", request.platformRoot],
100
- ]) {
101
- validateV4Root(value[field], `$/stageResume/${field}`);
102
- if (value[field] !== expected)
103
- fault(
104
- "partial-mutation-recovery-binding-mismatch",
105
- `$/stageResume/${field}`,
106
- `Stage Capsule ${field} drifted from the recovery request`,
107
- );
108
- }
109
- validateV4Root(value.planRoot, "$/stageResume/planRoot");
110
- sortedUnique(
111
- value.qualificationRoots,
112
- "$/stageResume/qualificationRoots",
113
- validateV4Root,
114
- );
115
- if (value.qualificationRoots.length === 0)
116
- fault(
117
- "missing-partial-mutation-recovery-evidence",
118
- "$/stageResume/qualificationRoots",
119
- "Stage Capsule qualification roots are required",
120
- );
121
- if (!Array.isArray(value.decisions) || value.decisions.length === 0)
122
- fault(
123
- "missing-partial-mutation-recovery-evidence",
124
- "$/stageResume/decisions",
125
- "Stage Capsule decisions are required",
126
- );
127
- let prior = null;
128
- for (const [index, decision] of value.decisions.entries()) {
129
- const path = `$/stageResume/decisions/${index}`;
130
- exactKeys(decision, ["stageKey", "decision", "reasonCode"], path);
131
- token(decision.stageKey, `${path}/stageKey`);
132
- token(decision.reasonCode, `${path}/reasonCode`);
133
- if (!new Set(["reuse", "rebuild", "reject"]).has(decision.decision))
134
- fault(
135
- "invalid-partial-mutation-recovery-stage-decision",
136
- `${path}/decision`,
137
- "unsupported Stage Capsule decision",
138
- );
139
- if (prior !== null && decision.stageKey <= prior)
140
- fault(
141
- "unordered-partial-mutation-recovery-evidence",
142
- `${path}/stageKey`,
143
- "stage decisions must be unique and byte-sorted",
144
- );
145
- prior = decision.stageKey;
146
- }
147
- }
148
-
149
- function validateActivation(value, request) {
150
- exactKeys(
151
- value,
152
- [
153
- "schema",
154
- "planRoot",
155
- "stateRoot",
156
- "qualificationRoot",
157
- "policyRoot",
158
- "steps",
159
- ],
160
- "$/activation",
161
- );
162
- if (value.schema !== "buildchain-v4-release-activation-recovery-evidence/v1")
163
- fault(
164
- "unsupported-partial-mutation-recovery-version",
165
- "$/activation/schema",
166
- "unsupported release activation evidence",
167
- );
168
- for (const field of [
169
- "planRoot",
170
- "stateRoot",
171
- "qualificationRoot",
172
- "policyRoot",
173
- ])
174
- validateV4Root(value[field], `$/activation/${field}`);
175
- if (
176
- value.qualificationRoot !== request.qualificationRoot ||
177
- value.policyRoot !== request.policyRoot
178
- )
179
- fault(
180
- "partial-mutation-recovery-binding-mismatch",
181
- "$/activation",
182
- "activation qualification or policy root drifted",
183
- );
184
- if (!Array.isArray(value.steps) || value.steps.length === 0)
185
- fault(
186
- "missing-partial-mutation-recovery-evidence",
187
- "$/activation/steps",
188
- "activation steps are required",
189
- );
190
- let prior = null;
191
- const operationRoots = new Set();
192
- for (const [index, step] of value.steps.entries()) {
193
- const path = `$/activation/steps/${index}`;
194
- exactKeys(
195
- step,
196
- [
197
- "stepId",
198
- "operationRoot",
199
- "phase",
200
- "journalRoot",
201
- "journalStateRoot",
202
- "compensationBoundaryRoot",
203
- "attemptCount",
204
- ],
205
- path,
206
- );
207
- token(step.stepId, `${path}/stepId`);
208
- for (const field of ["operationRoot", "compensationBoundaryRoot"])
209
- validateV4Root(step[field], `${path}/${field}`);
210
- if (operationRoots.has(step.operationRoot))
211
- fault(
212
- "conflicting-partial-mutation-recovery-evidence",
213
- `${path}/operationRoot`,
214
- "activation steps must bind unique provider operations",
215
- );
216
- operationRoots.add(step.operationRoot);
217
- if (!PHASES.has(step.phase))
218
- fault(
219
- "unknown-partial-mutation-recovery-phase",
220
- `${path}/phase`,
221
- "operation phase is not in the closed recovery state set",
222
- );
223
- if (!Number.isSafeInteger(step.attemptCount) || step.attemptCount < 0)
224
- fault(
225
- "invalid-partial-mutation-recovery-attempt-count",
226
- `${path}/attemptCount`,
227
- "attempt count must be a non-negative safe integer",
228
- );
229
- const rootsRequired = step.phase !== "planned";
230
- for (const field of ["journalRoot", "journalStateRoot"])
231
- if (rootsRequired) validateV4Root(step[field], `${path}/${field}`);
232
- else if (step[field] !== null)
233
- fault(
234
- "conflicting-partial-mutation-recovery-evidence",
235
- `${path}/${field}`,
236
- "planned operations cannot claim retained journal roots",
237
- );
238
- if (step.phase === "attempting" && step.attemptCount === 0)
239
- fault(
240
- "conflicting-partial-mutation-recovery-evidence",
241
- `${path}/attemptCount`,
242
- "attempting requires a retained attempt",
243
- );
244
- if (prior !== null && step.stepId <= prior)
245
- fault(
246
- "unordered-partial-mutation-recovery-evidence",
247
- `${path}/stepId`,
248
- "activation steps must be unique and byte-sorted",
249
- );
250
- prior = step.stepId;
251
- }
252
- }
253
-
254
- function validateRequest(request) {
255
- exactKeys(
256
- request,
257
- [
258
- "schema",
259
- "evaluatedAt",
260
- "sourceRoot",
261
- "policyRoot",
262
- "platformRoot",
263
- "qualificationRoot",
264
- "maxAttempts",
265
- "compensableBoundaryRoots",
266
- "stageResume",
267
- "activation",
268
- ],
269
- "$",
270
- );
271
- if (request.schema !== V4_PARTIAL_MUTATION_RECOVERY_REQUEST_CONTRACT)
272
- fault(
273
- "unsupported-partial-mutation-recovery-version",
274
- "$/schema",
275
- "unsupported partial-mutation recovery request",
276
- );
277
- validateV4Clock(request.evaluatedAt, "$/evaluatedAt");
278
- for (const field of [
279
- "sourceRoot",
280
- "policyRoot",
281
- "platformRoot",
282
- "qualificationRoot",
283
- ])
284
- validateV4Root(request[field], `$/` + field);
285
- if (!Number.isSafeInteger(request.maxAttempts) || request.maxAttempts < 1)
286
- fault(
287
- "invalid-partial-mutation-recovery-attempt-budget",
288
- "$/maxAttempts",
289
- "maxAttempts must be a positive safe integer",
290
- );
291
- sortedUnique(
292
- request.compensableBoundaryRoots,
293
- "$/compensableBoundaryRoots",
294
- validateV4Root,
295
- );
296
- validateStageResume(request.stageResume, request);
297
- validateActivation(request.activation, request);
298
- }
299
-
300
- function checkpoint(kind, id, root) {
301
- const payload = { kind, id, root };
302
- return {
303
- ...payload,
304
- checkpointRoot: v4ContentRoot(
305
- "partial-mutation-recovery-checkpoint",
306
- payload,
307
- ),
308
- };
309
- }
310
-
311
- function operationDecision(step, request) {
312
- if (step.phase === "confirmed") return null;
313
- let action;
314
- if (["rejected", "terminal"].includes(step.phase))
315
- action = request.compensableBoundaryRoots.includes(
316
- step.compensationBoundaryRoot,
317
- )
318
- ? "compensate"
319
- : "escalate";
320
- else if (step.attemptCount >= request.maxAttempts) action = "escalate";
321
- else if (["observed", "confirmable"].includes(step.phase))
322
- action = "reconcile";
323
- else if (step.phase === "attempting") action = "wait";
324
- else action = "retry";
325
- const retainedRoot = step.journalStateRoot ?? step.operationRoot;
326
- return {
327
- stepId: step.stepId,
328
- operationRoot: step.operationRoot,
329
- action,
330
- checkpoint: checkpoint("provider-operation", step.stepId, retainedRoot),
331
- };
332
- }
333
-
334
- export function planV4PartialMutationRecovery(request) {
335
- validateRequest(request);
336
- const stageFailures = request.stageResume.decisions.filter(
337
- ({ decision }) => decision !== "reuse",
338
- );
339
- let nextOperations = request.activation.steps
340
- .map((step) => operationDecision(step, request))
341
- .filter(Boolean);
342
- if (stageFailures.length > 0) {
343
- const first = stageFailures[0];
344
- nextOperations = [
345
- {
346
- stepId: first.stageKey,
347
- operationRoot: null,
348
- action: "escalate",
349
- checkpoint: checkpoint(
350
- "stage-capsule",
351
- first.stageKey,
352
- request.stageResume.planRoot,
353
- ),
354
- },
355
- ];
356
- }
357
- nextOperations.sort((left, right) => {
358
- const priority = PRIORITY.get(left.action) - PRIORITY.get(right.action);
359
- if (priority !== 0) return priority;
360
- return left.stepId < right.stepId ? -1 : left.stepId > right.stepId ? 1 : 0;
361
- });
362
- const classification = nextOperations[0]?.action ?? "terminal-noop";
363
- const terminalOperationRoots = request.activation.steps
364
- .filter(({ phase }) => phase === "confirmed")
365
- .map(({ operationRoot }) => operationRoot)
366
- .sort();
367
- const payload = {
368
- schema: V4_PARTIAL_MUTATION_RECOVERY_PLAN_CONTRACT,
369
- mode: "production",
370
- productionAuthority: "v4",
371
- evaluatedAt: request.evaluatedAt,
372
- sourceRoot: request.sourceRoot,
373
- policyRoot: request.policyRoot,
374
- platformRoot: request.platformRoot,
375
- qualificationRoot: request.qualificationRoot,
376
- stageResumePlanRoot: request.stageResume.planRoot,
377
- activationPlanRoot: request.activation.planRoot,
378
- activationStateRoot: request.activation.stateRoot,
379
- classification,
380
- unresolvedCheckpoint: nextOperations[0]?.checkpoint ?? null,
381
- nextOperations,
382
- terminalOperationRoots,
383
- zeroExternalMutations: true,
384
- complexity: {
385
- stageDecisionCount: request.stageResume.decisions.length,
386
- operationCount: request.activation.steps.length,
387
- nextOperationCount: nextOperations.length,
388
- externalMutationCount: 0,
389
- },
390
- };
391
- return {
392
- ...payload,
393
- planRoot: v4ContentRoot("partial-mutation-recovery-plan", payload),
394
- };
395
- }