@kungfu-tech/buildchain 4.0.2 → 4.0.3-alpha.0

package/packages/core/{v4-tail-reseal-receipt.js → tail-reseal-receipt.js}

@@ -1,23 +1,23 @@
-import { v4ContentRoot, validateV4Root } from "./v4-canonical-contracts.js";
+import { domainContentRoot, validateRoot } from "./canonical-contracts.js";
 import { validateReleaseCandidatePassport } from "./release-candidate.js";
 import {
-  V4_TAIL_RESEAL_PLAN_CONTRACT,
-  V4_TAIL_RESEAL_PLATFORMS,
-  V4TailResealFault,
-  normalizeV4TailResealRequest,
-  planV4TailReseal,
-} from "./v4-tail-reseal.js";
+  TAIL_RESEAL_PLAN_CONTRACT,
+  TAIL_RESEAL_PLATFORMS,
+  TailResealFault,
+  normalizeTailResealRequest,
+  planTailReseal,
+} from "./tail-reseal.js";
 
-export const V4_TAIL_RESEAL_RECEIPT_CONTRACT =
+export const TAIL_RESEAL_RECEIPT_CONTRACT =
   "kungfu-buildchain-v4-tail-reseal-receipt/v1";
 
 function fault(code, path, message) {
-  throw new V4TailResealFault(code, path, message);
+  throw new TailResealFault(code, path, message);
 }
 
 function root(value, path) {
   try {
-    validateV4Root(value, path);
+    validateRoot(value, path);
   } catch (error) {
     fault("invalid-tail-reseal-root", path, error.message);
   }
@@ -52,7 +52,7 @@ function positiveInteger(value, path) {
 function validateReadbacks(readbacks, request) {
   if (
     !Array.isArray(readbacks) ||
-    readbacks.length !== V4_TAIL_RESEAL_PLATFORMS.length
+    readbacks.length !== TAIL_RESEAL_PLATFORMS.length
   )
     fault(
       "tail-reseal-readback-mismatch",
@@ -116,7 +116,7 @@ function validateReadbacks(readbacks, request) {
   return normalized;
 }
 
-export function createV4TailResealReceipt({
+export function createTailResealReceipt({
   request,
   plan,
   readbacks,
@@ -124,13 +124,13 @@ export function createV4TailResealReceipt({
   protectedReadbackRoot,
   currentRun,
 } = {}) {
-  const normalized = normalizeV4TailResealRequest(request);
-  const expectedPlan = planV4TailReseal(normalized);
+  const normalized = normalizeTailResealRequest(request);
+  const expectedPlan = planTailReseal(normalized);
   const { planRoot: _planRoot, ...planBody } = plan || {};
   if (
-    plan?.schema !== V4_TAIL_RESEAL_PLAN_CONTRACT ||
+    plan?.schema !== TAIL_RESEAL_PLAN_CONTRACT ||
     plan.planRoot !== expectedPlan.planRoot ||
-    v4ContentRoot("tail-reseal-plan", planBody) !== expectedPlan.planRoot
+    domainContentRoot("tail-reseal-plan", planBody) !== expectedPlan.planRoot
   )
     fault(
       "tail-reseal-plan-drift",
@@ -168,7 +168,7 @@ export function createV4TailResealReceipt({
   positiveInteger(currentRun.id, "$/currentRun/id");
   positiveInteger(currentRun.attempt, "$/currentRun/attempt");
   const payload = {
-    schema: V4_TAIL_RESEAL_RECEIPT_CONTRACT,
+    schema: TAIL_RESEAL_RECEIPT_CONTRACT,
     action: "reused-retained-tail",
     repository: normalized.repository,
     source: normalized.source,
@@ -186,22 +186,22 @@ export function createV4TailResealReceipt({
     passport: {
       contract: passport.contract,
       candidateHash: passport.candidateHash,
-      passportRoot: v4ContentRoot("release-candidate-passport", passport),
+      passportRoot: domainContentRoot("release-candidate-passport", passport),
     },
     protectedReadbackRoot,
     currentRun,
   };
   return {
     ...payload,
-    receiptRoot: v4ContentRoot("tail-reseal-receipt", payload),
+    receiptRoot: domainContentRoot("tail-reseal-receipt", payload),
   };
 }
 
-export function verifyV4TailResealReceipt({ receipt, request, passport } = {}) {
+export function verifyTailResealReceipt({ receipt, request, passport } = {}) {
   try {
-    const expected = createV4TailResealReceipt({
+    const expected = createTailResealReceipt({
       request,
-      plan: planV4TailReseal(request),
+      plan: planTailReseal(request),
       readbacks: receipt.platformReadbacks,
       passport,
       protectedReadbackRoot: receipt.protectedReadbackRoot,

package/packages/core/{v4-tail-reseal.js → tail-reseal.js}

@@ -1,36 +1,36 @@
 import {
-  v4ContentRoot,
-  validateV4Clock,
-  validateV4Root,
-} from "./v4-canonical-contracts.js";
+  domainContentRoot,
+  validateClock,
+  validateRoot,
+} from "./canonical-contracts.js";
 import {
-  V4_TAIL_RESEAL_PLAN_CONTRACT,
-  V4_TAIL_RESEAL_PLATFORMS as PLATFORM_IDS,
-  V4_TAIL_RESEAL_PLATFORM_RUNNERS as PLATFORM_RUNNERS,
-  V4_TAIL_RESEAL_REQUEST_CONTRACT,
-  V4_TAIL_RESEAL_REUSED_STAGE_KEYS as REUSED_STAGE_KEYS,
-} from "./v4-tail-reseal-contract.js";
+  TAIL_RESEAL_PLAN_CONTRACT,
+  TAIL_RESEAL_PLATFORMS as PLATFORM_IDS,
+  TAIL_RESEAL_PLATFORM_RUNNERS as PLATFORM_RUNNERS,
+  TAIL_RESEAL_REQUEST_CONTRACT,
+  TAIL_RESEAL_REUSED_STAGE_KEYS as REUSED_STAGE_KEYS,
+} from "./tail-reseal-contract.js";
 
 export {
-  V4_TAIL_RESEAL_PLAN_CONTRACT,
-  V4_TAIL_RESEAL_REQUEST_CONTRACT,
-} from "./v4-tail-reseal-contract.js";
+  TAIL_RESEAL_PLAN_CONTRACT,
+  TAIL_RESEAL_REQUEST_CONTRACT,
+} from "./tail-reseal-contract.js";
 
 const SHA = /^[0-9a-f]{40}$/u;
 const TOKEN = /^[A-Za-z0-9][A-Za-z0-9._:/-]*$/u;
-const V4_RUNTIME_REF = /^(?:v4-alpha|train\/v4\/v4\.0\/[A-Za-z0-9._/-]+)$/u;
+const DOMAIN_RUNTIME_REF = /^(?:v4-alpha|train\/v4\/v4\.0\/[A-Za-z0-9._/-]+)$/u;
 
-export class V4TailResealFault extends Error {
+export class TailResealFault extends Error {
   constructor(code, path, message) {
     super(`${path}: ${message}`);
-    this.name = "V4TailResealFault";
+    this.name = "TailResealFault";
     this.code = code;
     this.path = path;
   }
 }
 
 function fault(code, path, message) {
-  throw new V4TailResealFault(code, path, message);
+  throw new TailResealFault(code, path, message);
 }
 
 function exactKeys(value, expected, path) {
@@ -84,7 +84,7 @@ function sha(value, path) {
 
 function root(value, path) {
   try {
-    validateV4Root(value, path);
+    validateRoot(value, path);
   } catch (error) {
     fault("invalid-tail-reseal-root", path, error.message);
   }
@@ -93,7 +93,7 @@ function root(value, path) {
 
 function clock(value, path) {
   try {
-    validateV4Clock(value, path);
+    validateClock(value, path);
   } catch (error) {
     fault("invalid-tail-reseal-clock", path, error.message);
   }
@@ -183,7 +183,7 @@ function validateRuntime(value) {
       "$/runtime/repository",
       "official Buildchain runtime required",
     );
-  if (!V4_RUNTIME_REF.test(value.ref))
+  if (!DOMAIN_RUNTIME_REF.test(value.ref))
     fault(
       "tail-reseal-runtime-mismatch",
       "$/runtime/ref",
@@ -457,7 +457,7 @@ function validatePlatforms(values) {
     );
 }
 
-export function normalizeV4TailResealRequest(request) {
+export function normalizeTailResealRequest(request) {
   exactKeys(
     request,
     [
@@ -477,7 +477,7 @@ export function normalizeV4TailResealRequest(request) {
     ],
     "$",
   );
-  if (request.schema !== V4_TAIL_RESEAL_REQUEST_CONTRACT)
+  if (request.schema !== TAIL_RESEAL_REQUEST_CONTRACT)
     fault(
       "unsupported-tail-reseal-version",
       "$/schema",
@@ -516,10 +516,10 @@ export function normalizeV4TailResealRequest(request) {
   return structuredClone(request);
 }
 
-export function planV4TailReseal(request) {
-  const normalized = normalizeV4TailResealRequest(request);
+export function planTailReseal(request) {
+  const normalized = normalizeTailResealRequest(request);
   const payload = {
-    schema: V4_TAIL_RESEAL_PLAN_CONTRACT,
+    schema: TAIL_RESEAL_PLAN_CONTRACT,
     mode: "production",
     productionAuthority: "v4",
     evaluatedAt: normalized.evaluatedAt,
@@ -584,11 +584,11 @@ export function planV4TailReseal(request) {
   };
   return {
     ...payload,
-    planRoot: v4ContentRoot("tail-reseal-plan", payload),
+    planRoot: domainContentRoot("tail-reseal-plan", payload),
   };
 }
 
 export {
-  V4_TAIL_RESEAL_PLATFORMS,
-  V4_TAIL_RESEAL_REUSED_STAGE_KEYS,
-} from "./v4-tail-reseal-contract.js";
+  TAIL_RESEAL_PLATFORMS,
+  TAIL_RESEAL_REUSED_STAGE_KEYS,
+} from "./tail-reseal-contract.js";

package/packages/core/{v4-universal-workflow-bootstrap.js → universal-workflow-bootstrap.js}

@@ -1,12 +1,12 @@
 import crypto from "node:crypto";
 
-export const V4_UNIVERSAL_WORKFLOW_REQUEST =
+export const UNIVERSAL_WORKFLOW_REQUEST =
   "kungfu-buildchain-v4-universal-workflow-request/v1";
-export const V4_UNIVERSAL_WORKFLOW_ADMISSION_POLICY =
+export const UNIVERSAL_WORKFLOW_ADMISSION_POLICY =
   "kungfu-buildchain-v4-universal-workflow-admission-policy/v1";
-export const V4_UNIVERSAL_WORKFLOW_ADMISSION =
+export const UNIVERSAL_WORKFLOW_ADMISSION =
   "kungfu-buildchain-v4-universal-workflow-admission/v1";
-export const V4_UNIVERSAL_WORKFLOW_TERMINAL_RECEIPT =
+export const UNIVERSAL_WORKFLOW_TERMINAL_RECEIPT =
   "kungfu-buildchain-v4-universal-workflow-terminal-receipt/v1";
 const EXACT_SHA = /^[0-9a-f]{40}$/u;
 const ROOT = /^sha256:[0-9a-f]{64}$/u;
@@ -166,13 +166,13 @@ function timestamp(value, label) {
   return normalized;
 }
 
-export function validateV4UniversalWorkflowRequest(value) {
+export function validateUniversalWorkflowRequest(value) {
   exactKeys(
     value,
     ["schema", "mode", "candidate", "consumer", "capability", "payload"],
     "request",
   );
-  if (value.schema !== V4_UNIVERSAL_WORKFLOW_REQUEST)
+  if (value.schema !== UNIVERSAL_WORKFLOW_REQUEST)
     fail("unsupported-request-schema", "request schema is unsupported");
   if (!MODES.has(value.mode))
     fail("unsupported-mode", "request mode is unsupported");
@@ -266,17 +266,17 @@ export function validateV4UniversalWorkflowRequest(value) {
     payload: canonical(value.payload),
   };
 }
-export function v4UniversalWorkflowRequestRoot(value) {
+export function universalWorkflowRequestRoot(value) {
   return documentRoot(
     "universal-workflow-request",
-    validateV4UniversalWorkflowRequest(value),
+    validateUniversalWorkflowRequest(value),
   );
 }
-export function v4ProductStateVersion(value, requestedSha) { const sourceSha = exactSha(requestedSha, "requestedSha"), ref = nonEmpty(value?.ref, "productStateRef.ref"), prefix = `refs/heads/buildchain/v4-product-state/${sourceSha}-`; if (!ref.startsWith(prefix)) fail("recovery-state-mismatch", "release recovery product state does not bind the requested source"); const match = ref.slice(prefix.length).match(/^(\d+)-(\d+)-(\d+)(?:-alpha-(\d+))?$/u); if (!match) fail("invalid-recovery-version", "release recovery product state version is invalid"); return `${match[1]}.${match[2]}.${match[3]}${match[4] === undefined ? "" : `-alpha.${match[4]}`}`; }
-export function selectV4FinalizedProductPublicationVersion(value) { const requestedSha = exactSha(value.requestedSha, "requestedSha"), requestedTree = exactSha(value.requestedTree, "requestedTree"), lane = nonEmpty(value.targetRef, "targetRef").match(/^(alpha|release)\/v(\d+)\/v(\d+)\.(\d+)$/u); if (!lane || lane[2] !== lane[3]) fail("invalid-finalization-lane", "product publication finalization target is not a release lane"); const expectedAlpha = lane[1] === "alpha", versions = []; for (const row of Array.isArray(value.recoveryStates) ? value.recoveryStates : []) { const stateRef = row?.stateRef, match = String(stateRef?.ref || "").match(/^refs\/heads\/buildchain\/v4-product-state\/([0-9a-f]{40})-(\d+)-(\d+)-(\d+)(?:-alpha-(\d+))?$/u); if (!match || match[2] !== lane[2] || match[3] !== lane[4]) continue; const stateTree = exactSha(row?.stateCommit?.tree?.sha, "productStateCommit.tree.sha"); if (stateTree !== requestedTree || !new Set(["ahead", "identical"]).has(row.headComparisonStatus)) continue; const sourceSha = exactSha(match[1], "productStateRef.sourceSha"), version = v4ProductStateVersion(stateRef, sourceSha), parsed = version.match(/^(\d+)\.(\d+)\.(\d+)(?:-alpha\.(\d+))?$/u); if ((parsed[4] !== undefined) !== expectedAlpha) continue; if (stateRef?.object?.type !== "commit" || exactSha(stateRef?.object?.sha, "productStateRef.object.sha") !== exactSha(row?.stateCommit?.sha, "productStateCommit.sha") || row.stateCommit.parents?.length !== 1 || exactSha(row.stateCommit.parents[0]?.sha, "productStateCommit.parents[0].sha") !== sourceSha) fail("finalization-state-mismatch", "product publication finalization state does not bind its source"); if (row.exactTagRef && (row.exactTagRef.ref !== `refs/tags/v${version}` || row.exactTagRef.object?.type !== "commit" || exactSha(row.exactTagRef.object?.sha, "exactTagRef.object.sha") !== sourceSha)) fail("finalization-tag-mismatch", "product publication finalization tag does not bind its source"); versions.push(version); } const selected = [...new Set(versions)].sort(); if (selected.length > 1) fail("finalization-state-ambiguous", `publication head ${requestedSha} matches multiple product versions`); return selected[0] || ""; }
-export function selectV4RecoveredProductPublicationVersion(value) {
-  if (value.routeDecision !== "Resume") return ""; const version = nonEmpty(value.candidateVersion, "candidateVersion"), sourceSha = exactSha(value.requestedSha, "requestedSha"), candidate = version.match(/^(\d+)\.(\d+)\.(\d+)(?:-alpha\.(\d+))?$/u); if (!candidate) fail("invalid-recovery-version", "release recovery candidate version is invalid"); if (value.explicitResume) return version;
-  const states = Array.isArray(value.recoveryStates) ? value.recoveryStates : []; if (states.length) { const recovered = [...new Set(states.map(({ stateRef, stateCommit, exactTagRef }) => { const selected = v4ProductStateVersion(stateRef, sourceSha), parsed = selected.match(/^(\d+)\.(\d+)\.(\d+)(?:-alpha\.(\d+))?$/u), parents = stateCommit?.parents || []; if (stateRef?.object?.type !== "commit" || exactSha(stateRef?.object?.sha, "productStateRef.object.sha") !== exactSha(stateCommit?.sha, "productStateCommit.sha") || parents.length !== 1 || exactSha(parents[0]?.sha, "productStateCommit.parents[0].sha") !== sourceSha) fail("recovery-state-mismatch", "release recovery product state commit does not bind the requested source"); if (exactTagRef && (exactTagRef.ref !== `refs/tags/v${selected}` || exactTagRef.object?.type !== "commit" || exactSha(exactTagRef.object?.sha, "exactTagRef.object.sha") !== sourceSha)) fail("recovery-tag-mismatch", "release recovery exact tag does not bind the requested source"); if (parsed[1] !== candidate[1] || parsed[2] !== candidate[2] || parsed[3] !== candidate[3] || (parsed[4] === undefined) !== (candidate[4] === undefined)) fail("recovery-state-mismatch", "release recovery product state is outside the candidate release line"); return selected; }))]; if (recovered.length !== 1) fail("recovery-state-ambiguous", "release recovery requires one exact product publication state; provide an exact transaction identity"); return recovered[0]; }
+export function productStateVersion(value, requestedSha) { const sourceSha = exactSha(requestedSha, "requestedSha"), ref = nonEmpty(value?.ref, "productStateRef.ref"), prefix = `refs/heads/buildchain/v4-product-state/${sourceSha}-`; if (!ref.startsWith(prefix)) fail("recovery-state-mismatch", "release recovery product state does not bind the requested source"); const match = ref.slice(prefix.length).match(/^(\d+)-(\d+)-(\d+)(?:-alpha-(\d+))?$/u); if (!match) fail("invalid-recovery-version", "release recovery product state version is invalid"); return `${match[1]}.${match[2]}.${match[3]}${match[4] === undefined ? "" : `-alpha.${match[4]}`}`; }
+export function selectFinalizedProductPublicationVersion(value) { const requestedSha = exactSha(value.requestedSha, "requestedSha"), requestedTree = exactSha(value.requestedTree, "requestedTree"), lane = nonEmpty(value.targetRef, "targetRef").match(/^(alpha|release)\/v(\d+)\/v(\d+)\.(\d+)$/u); if (!lane || lane[2] !== lane[3]) fail("invalid-finalization-lane", "product publication finalization target is not a release lane"); const expectedAlpha = lane[1] === "alpha", versions = []; for (const row of Array.isArray(value.recoveryStates) ? value.recoveryStates : []) { const stateRef = row?.stateRef, match = String(stateRef?.ref || "").match(/^refs\/heads\/buildchain\/v4-product-state\/([0-9a-f]{40})-(\d+)-(\d+)-(\d+)(?:-alpha-(\d+))?$/u); if (!match || match[2] !== lane[2] || match[3] !== lane[4]) continue; const stateTree = exactSha(row?.stateCommit?.tree?.sha, "productStateCommit.tree.sha"); if (stateTree !== requestedTree || !new Set(["ahead", "identical"]).has(row.headComparisonStatus)) continue; const sourceSha = exactSha(match[1], "productStateRef.sourceSha"), version = productStateVersion(stateRef, sourceSha), parsed = version.match(/^(\d+)\.(\d+)\.(\d+)(?:-alpha\.(\d+))?$/u); if ((parsed[4] !== undefined) !== expectedAlpha) continue; if (stateRef?.object?.type !== "commit" || exactSha(stateRef?.object?.sha, "productStateRef.object.sha") !== exactSha(row?.stateCommit?.sha, "productStateCommit.sha") || row.stateCommit.parents?.length !== 1 || exactSha(row.stateCommit.parents[0]?.sha, "productStateCommit.parents[0].sha") !== sourceSha) fail("finalization-state-mismatch", "product publication finalization state does not bind its source"); if (row.exactTagRef && (row.exactTagRef.ref !== `refs/tags/v${version}` || row.exactTagRef.object?.type !== "commit" || exactSha(row.exactTagRef.object?.sha, "exactTagRef.object.sha") !== sourceSha)) fail("finalization-tag-mismatch", "product publication finalization tag does not bind its source"); versions.push(version); } const selected = [...new Set(versions)].sort(); if (selected.length > 1) fail("finalization-state-ambiguous", `publication head ${requestedSha} matches multiple product versions`); return selected[0] || ""; }
+export function selectRecoveredProductPublicationVersion(value) {
+  if (value.routeDecision !== "Resume") return ""; const candidateVersion = nonEmpty(value.candidateVersion, "candidateVersion"), version = value.channel === "stable" ? candidateVersion.replace(/-alpha\.\d+$/u, "") : candidateVersion, sourceSha = exactSha(value.requestedSha, "requestedSha"), candidate = version.match(/^(\d+)\.(\d+)\.(\d+)(?:-alpha\.(\d+))?$/u); if (!candidate) fail("invalid-recovery-version", "release recovery candidate version is invalid"); if (value.explicitResume) return version;
+  const states = Array.isArray(value.recoveryStates) ? value.recoveryStates : []; if (states.length) { const recovered = [...new Set(states.map(({ stateRef, stateCommit, exactTagRef }) => { const selected = productStateVersion(stateRef, sourceSha), parsed = selected.match(/^(\d+)\.(\d+)\.(\d+)(?:-alpha\.(\d+))?$/u), parents = stateCommit?.parents || []; if (stateRef?.object?.type !== "commit" || exactSha(stateRef?.object?.sha, "productStateRef.object.sha") !== exactSha(stateCommit?.sha, "productStateCommit.sha") || parents.length !== 1 || exactSha(parents[0]?.sha, "productStateCommit.parents[0].sha") !== sourceSha) fail("recovery-state-mismatch", "release recovery product state commit does not bind the requested source"); if (exactTagRef && (exactTagRef.ref !== `refs/tags/v${selected}` || exactTagRef.object?.type !== "commit" || exactSha(exactTagRef.object?.sha, "exactTagRef.object.sha") !== sourceSha)) fail("recovery-tag-mismatch", "release recovery exact tag does not bind the requested source"); if (parsed[1] !== candidate[1] || parsed[2] !== candidate[2] || parsed[3] !== candidate[3] || (parsed[4] === undefined) !== (candidate[4] === undefined)) fail("recovery-state-mismatch", "release recovery product state is outside the candidate release line"); return selected; }))]; if (recovered.length !== 1) fail("recovery-state-ambiguous", "release recovery requires one exact product publication state; provide an exact transaction identity"); return recovered[0]; }
   if (!value.exactTagRef) fail("recovery-tag-missing", "release recovery requires an exact partial-publication tag"); if (value.exactTagRef.ref !== `refs/tags/v${version}` || value.exactTagRef.object?.type !== "commit" || exactSha(value.exactTagRef.object?.sha, "exactTagRef.object.sha") !== sourceSha) fail("recovery-tag-mismatch", "release recovery exact tag does not bind the requested source");
   return version;
 }
@@ -299,7 +299,7 @@ function validatePolicy(value) {
     ],
     "policy",
   );
-  if (value.schema !== V4_UNIVERSAL_WORKFLOW_ADMISSION_POLICY)
+  if (value.schema !== UNIVERSAL_WORKFLOW_ADMISSION_POLICY)
     fail("unsupported-policy-schema", "policy schema is unsupported");
   const consumerAdmission = nonEmpty(
     value.consumerAdmission,
@@ -394,7 +394,7 @@ function reviewedRuntimeSha(request, policy, evidence, runtimeSha) {
   return evidence.headSha;
 }
 
-export function v4UniversalWorkflowAdmissionRoot(value) {
+export function universalWorkflowAdmissionRoot(value) {
   return documentRoot("universal-workflow-admission", validatePolicy(value));
 }
 
@@ -409,7 +409,7 @@ function assertPermissionCeiling(requested, ceiling) {
   }
 }
 
-export function admitV4UniversalWorkflow({
+export function admitUniversalWorkflow({
   request: requestValue,
   policy: policyValue,
   observedRefSha,
@@ -419,9 +419,9 @@ export function admitV4UniversalWorkflow({
   reviewEvidence: reviewEvidenceValue,
   now,
 } = {}) {
-  const request = validateV4UniversalWorkflowRequest(requestValue);
+  const request = validateUniversalWorkflowRequest(requestValue);
   const policy = validatePolicy(policyValue);
-  const admissionRoot = v4UniversalWorkflowAdmissionRoot(policy);
+  const admissionRoot = universalWorkflowAdmissionRoot(policy);
   if (request.candidate.admissionRoot !== admissionRoot)
     fail("stale-admission", "request is not bound to the current admission");
   if (policy.sourceRepository !== request.candidate.repository)
@@ -507,7 +507,7 @@ export function admitV4UniversalWorkflow({
       "exact-head-checks-incomplete",
       "candidate exact-head checks are not successful",
     );
-  const requestRoot = v4UniversalWorkflowRequestRoot(request);
+  const requestRoot = universalWorkflowRequestRoot(request);
   const discovery = {
     repository: request.candidate.repository,
     ref: request.candidate.discoveryRef,
@@ -516,7 +516,7 @@ export function admitV4UniversalWorkflow({
     observedAt,
   };
   return {
-    schema: V4_UNIVERSAL_WORKFLOW_ADMISSION,
+    schema: UNIVERSAL_WORKFLOW_ADMISSION,
     status: "admitted",
     requestRoot,
     admissionRoot,
@@ -536,7 +536,7 @@ export function admitV4UniversalWorkflow({
   };
 }
 
-export function completeV4UniversalWorkflow({ admission, resultRoot, status }) {
+export function completeUniversalWorkflow({ admission, resultRoot, status }) {
   exactKeys(
     admission,
     [
@@ -555,14 +555,14 @@ export function completeV4UniversalWorkflow({ admission, resultRoot, status }) {
     "admission",
   );
   if (
-    admission.schema !== V4_UNIVERSAL_WORKFLOW_ADMISSION ||
+    admission.schema !== UNIVERSAL_WORKFLOW_ADMISSION ||
     admission.status !== "admitted"
   )
     fail("invalid-admission", "terminal receipt requires an admitted request");
   if (!new Set(["succeeded", "failed", "cancelled"]).has(status))
     fail("invalid-terminal-status", "terminal status is unsupported");
   const receipt = {
-    schema: V4_UNIVERSAL_WORKFLOW_TERMINAL_RECEIPT,
+    schema: UNIVERSAL_WORKFLOW_TERMINAL_RECEIPT,
     status,
     requestRoot: root(admission.requestRoot, "admission.requestRoot"),
     admissionRoot: root(admission.admissionRoot, "admission.admissionRoot"),

package/scripts/{v4-architecture.mjs → architecture.mjs}

@@ -5,12 +5,12 @@ import fs from "node:fs";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 
-const MANIFEST_PATH = "architecture/v4-capability-state-machine-manifest.json";
+const MANIFEST_PATH = "architecture/capability-state-machine-manifest.json";
 const MANIFEST_SCHEMA_PATH =
-  "architecture/v4-capability-state-machine-manifest.schema.json";
-const EXCEPTION_PATH = "architecture/v4-exception-ledger.json";
-const EXCEPTION_SCHEMA_PATH = "architecture/v4-exception-ledger.schema.json";
-const BOOTSTRAP_PATH = "architecture/v4-bootstrap-authority.json";
+  "architecture/capability-state-machine-manifest.schema.json";
+const EXCEPTION_PATH = "architecture/exception-ledger.json";
+const EXCEPTION_SCHEMA_PATH = "architecture/exception-ledger.schema.json";
+const BOOTSTRAP_PATH = "architecture/bootstrap-authority.json";
 const BUDGET_DIMENSIONS = Object.freeze([
   "authority",
   "semanticState",
@@ -368,7 +368,7 @@ function loadArchitecture(root = process.cwd()) {
   const bootstrap = readJson(root, BOOTSTRAP_PATH);
   const inventory = readJson(
     root,
-    "architecture/v3-core-mechanism-inventory.json",
+    "architecture/baseline-core-mechanism-inventory.json",
   );
   const schemaIssues = [];
   validateSchemaDocuments(manifestSchema, exceptionSchema, schemaIssues);

package/scripts/binary-publication-evidence.mjs

@@ -5,7 +5,7 @@ import { pathToFileURL } from "node:url";
 import {
   SETTLEMENT_ASSET,
   verifyPublicationSettlement,
-} from "./v4-publication-settlement.mjs";
+} from "./publication-settlement.mjs";
 import { releaseAssetClient } from "./release-asset-client.mjs";
 
 export async function readBinaryPublicationEvidence({

package/scripts/{v4-bridge-bootstrap.mjs → bridge-bootstrap.mjs}

@@ -10,7 +10,7 @@ const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const manifestPath = path.join(
   root,
   "crates",
-  "buildchain-v4-bridge",
+  "buildchain-host-bridge",
   "Cargo.toml",
 );
 
@@ -18,14 +18,14 @@ function bridgeBinary(profile = "debug", platform = process.platform) {
   return path.join(
     root,
     "crates",
-    "buildchain-v4-bridge",
+    "buildchain-host-bridge",
     "target",
     profile,
-    `buildchain-v4-bridge${platform === "win32" ? ".exe" : ""}`,
+    `buildchain-host-bridge${platform === "win32" ? ".exe" : ""}`,
   );
 }
 
-function createV4HostRequest({
+function createHostRequest({
   command,
   args = [],
   input = Buffer.alloc(0),
@@ -45,7 +45,7 @@ function createV4HostRequest({
   };
 }
 
-function buildV4Bridge({ release = false } = {}) {
+function buildBridge({ release = false } = {}) {
   return spawnSync(
     "cargo",
     [
@@ -59,14 +59,14 @@ function buildV4Bridge({ release = false } = {}) {
   );
 }
 
-function runV4Bridge(
+function runBridge(
   request,
   { mode = "exchange", profile = "debug", env = {}, encoding = null } = {},
 ) {
   const binary = bridgeBinary(profile);
   if (!fs.existsSync(binary)) {
     throw new Error(
-      `Buildchain v4 bridge is not built: ${path.relative(root, binary)}; run pnpm bridge:v4:build`,
+      `Buildchain v4 bridge is not built: ${path.relative(root, binary)}; run pnpm bridge:build`,
     );
   }
   return spawnSync(binary, [mode], {
@@ -74,11 +74,7 @@ function runV4Bridge(
     env: {
       ...process.env,
       BUILDCHAIN_V4_HOST_COMMAND: process.execPath,
-      BUILDCHAIN_V4_HOST_SCRIPT: path.join(
-        root,
-        "scripts",
-        "v4-host-adapter.mjs",
-      ),
+      BUILDCHAIN_V4_HOST_SCRIPT: path.join(root, "scripts", "host-adapter.mjs"),
       ...env,
     },
     input: JSON.stringify(request),
@@ -94,7 +90,7 @@ function parseRunArgs(args) {
   const command = bridgeArgs[0];
   if (!command) {
     throw new Error(
-      "usage: node scripts/v4-bridge-bootstrap.mjs <run|exchange> <command-id> -- [command-args...]",
+      "usage: node scripts/bridge-bootstrap.mjs <run|exchange> <command-id> -- [command-args...]",
     );
   }
   return { command, commandArgs };
@@ -103,7 +99,7 @@ function parseRunArgs(args) {
 function main(args = process.argv.slice(2)) {
   const [mode = "", ...rest] = args;
   if (mode === "build") {
-    const result = buildV4Bridge({ release: rest.includes("--release") });
+    const result = buildBridge({ release: rest.includes("--release") });
     process.stdout.write(result.stdout || "");
     process.stderr.write(result.stderr || "");
     process.exitCode = result.status ?? 1;
@@ -111,13 +107,13 @@ function main(args = process.argv.slice(2)) {
   }
   if (!["run", "exchange"].includes(mode)) {
     throw new Error(
-      "usage: node scripts/v4-bridge-bootstrap.mjs <build|run|exchange> ...",
+      "usage: node scripts/bridge-bootstrap.mjs <build|run|exchange> ...",
     );
   }
   const { command, commandArgs } = parseRunArgs(rest);
   const input = fs.readFileSync(0);
-  const request = createV4HostRequest({ command, args: commandArgs, input });
-  const result = runV4Bridge(request, {
+  const request = createHostRequest({ command, args: commandArgs, input });
+  const result = runBridge(request, {
     mode: mode === "run" ? "compat" : "exchange",
   });
   if (result.error) throw result.error;
@@ -138,4 +134,4 @@ if (
   }
 }
 
-export { bridgeBinary, buildV4Bridge, createV4HostRequest, main, runV4Bridge };
+export { bridgeBinary, buildBridge, createHostRequest, main, runBridge };

package/scripts/{v4-bridge-evidence.mjs → bridge-evidence.mjs}

@@ -7,13 +7,13 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 
 import {
   bridgeBinary,
-  buildV4Bridge,
-  createV4HostRequest,
-  runV4Bridge,
-} from "./v4-bridge-bootstrap.mjs";
+  buildBridge,
+  createHostRequest,
+  runBridge,
+} from "./bridge-bootstrap.mjs";
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const hostScript = path.join(root, "scripts", "v4-host-adapter.mjs");
+const hostScript = path.join(root, "scripts", "host-adapter.mjs");
 
 function flag(args, name, fallback = "") {
   const index = args.indexOf(`--${name}`);
@@ -51,10 +51,10 @@ function collectEvidence(args = process.argv.slice(2)) {
   if (!Number.isInteger(iterations) || iterations < 3 || iterations > 50) {
     throw new Error("--iterations must be between 3 and 50");
   }
-  const build = buildV4Bridge({ release: true });
+  const build = buildBridge({ release: true });
   if (build.status !== 0) throw new Error(build.stderr || build.stdout);
   const binary = bridgeBinary("release");
-  const request = createV4HostRequest({
+  const request = createHostRequest({
     command: "architecture.list",
     args: ["--json"],
   });
@@ -71,7 +71,7 @@ function collectEvidence(args = process.argv.slice(2)) {
   );
   const bridge = timed(
     () =>
-      runV4Bridge(request, {
+      runBridge(request, {
         mode: "exchange",
         profile: "release",
         encoding: "utf8",

package/scripts/{build-v4-domain-wasm.mjs → build-domain-wasm.mjs}

@@ -7,19 +7,9 @@ import { fileURLToPath } from "node:url";
 import { spawnSyncCommand } from "../packages/core/spawn-command.js";
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const crate = path.join(root, "crates", "buildchain-v4-contracts");
-const artifact = path.join(
-  root,
-  "packages",
-  "core",
-  "buildchain-v4-domain.wasm",
-);
-const metadata = path.join(
-  root,
-  "packages",
-  "core",
-  "v4-domain-wasm-artifact.js",
-);
+const crate = path.join(root, "crates", "buildchain-domain-contracts");
+const artifact = path.join(root, "packages", "core", "buildchain-domain.wasm");
+const metadata = path.join(root, "packages", "core", "domain-wasm-artifact.js");
 const check = process.argv.includes("--check");
 const toolchain = process.env.BUILDCHAIN_RUST_WASM_TOOLCHAIN || "1.96.0";
 const expectedRustc = "rustc 1.96.0 (ac68faa20 2026-05-25)";
@@ -103,7 +93,7 @@ for (const file of sourceInputs) {
 }
 const sourceSha256 = sourceHash.digest("hex");
 const generatedMetadata = (artifactSha256) =>
-  `// Generated by scripts/build-v4-domain-wasm.mjs.\nexport const V4_DOMAIN_WASM_ABI_VERSION = 1;\nexport const V4_DOMAIN_WASM_RUSTC = ${JSON.stringify(expectedRustc)};\nexport const V4_DOMAIN_WASM_SOURCE_SHA256 =\n  ${JSON.stringify(sourceSha256)};\nexport const V4_DOMAIN_WASM_SHA256 =\n  ${JSON.stringify(artifactSha256)};\n`;
+  `// Generated by scripts/build-domain-wasm.mjs.\nexport const DOMAIN_WASM_ABI_VERSION = 1;\nexport const DOMAIN_WASM_RUSTC = ${JSON.stringify(expectedRustc)};\nexport const DOMAIN_WASM_SOURCE_SHA256 =\n  ${JSON.stringify(sourceSha256)};\nexport const DOMAIN_WASM_SHA256 =\n  ${JSON.stringify(artifactSha256)};\n`;
 
 if (!canonicalBuildHost && !check) {
   throw new Error(
@@ -128,9 +118,7 @@ if (!canonicalBuildHost) {
 } else {
   const buildEnvironment = rustBuildEnvironment();
 
-  const temporary = fs.mkdtempSync(
-    path.join(os.tmpdir(), "buildchain-v4-wasm-"),
-  );
+  const temporary = fs.mkdtempSync(path.join(os.tmpdir(), "buildchain-wasm-"));
   try {
     const build = spawnSyncCommand(
       "cargo",
@@ -158,7 +146,7 @@ if (!canonicalBuildHost) {
       temporary,
       "wasm32-unknown-unknown",
       "release",
-      "buildchain_v4_contracts.wasm",
+      "buildchain_domain_contracts.wasm",
     );
     const built = fs.readFileSync(builtPath);
     const artifactSha256 = sha256(built);