@kungfu-tech/buildchain 4.0.2 → 4.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +4 -4
- package/CONTRIBUTING.md +34 -0
- package/README.md +1 -1
- package/architecture/agent-change-map.md +154 -147
- package/architecture/{v4-architecture-constitution.md → architecture-constitution.md} +11 -11
- package/architecture/{v3-core-mechanism-inventory.md → baseline-core-mechanism-inventory.md} +1 -1
- package/architecture/{v4-bootstrap-authority.json → bootstrap-authority.json} +3 -3
- package/architecture/{v3-v4-capability-closure.md → capability-parity-closure.md} +3 -3
- package/architecture/{v3-v4-live-capability-inventory.json → capability-parity-live-capability-inventory.json} +4 -4
- package/architecture/{v4-capability-state-machine-manifest.json → capability-state-machine-manifest.json} +2 -2
- package/architecture/{v4-capability-state-machine-manifest.schema.json → capability-state-machine-manifest.schema.json} +2 -2
- package/architecture/ci-lane-change-budget.json +18 -0
- package/architecture/{v4-cross-platform-adopter-qualification.json → cross-platform-adopter-qualification.json} +3 -3
- package/architecture/{v4-delivery-authority-parity.json → delivery-authority-parity.json} +16 -16
- package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.json → delivery-warrant-shadow-bootstrap-plan.json} +3 -3
- package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.md → delivery-warrant-shadow-bootstrap-plan.md} +7 -7
- package/architecture/{v4-floating-consumer-policy.md → floating-consumer-policy.md} +1 -1
- package/architecture/implementation-naming.json +1273 -0
- package/architecture/internal-capabilities.json +171 -169
- package/architecture/maintainability-debt.json +87 -82
- package/architecture/maintainability-policy.json +15 -15
- package/architecture/{v4-next-development-parity.json → next-development-parity.json} +8 -8
- package/architecture/{v4-partial-mutation-recovery-qualification.json → partial-mutation-recovery-qualification.json} +8 -8
- package/architecture/{v4-platform-stage-checkpoints.json → platform-stage-checkpoints.json} +2 -2
- package/architecture/{v4-provider-operation-journal-contract.json → provider-operation-journal-contract.json} +9 -9
- package/architecture/{v4-publication-rehearsal-parity.json → publication-rehearsal-parity.json} +4 -4
- package/architecture/{v4-release-activation-shadow-domain.json → release-activation-shadow-domain.json} +8 -8
- package/architecture/{v4-release-topology.json → release-topology.json} +112 -56
- package/architecture/{v4-release-train-parity.json → release-train-parity.json} +2 -2
- package/architecture/{v4-runtime-ref-resume-authority.json → runtime-ref-resume-authority.json} +1 -1
- package/architecture/{v4-runtime-semantic-closure.json → runtime-semantic-closure.json} +2 -2
- package/architecture/{v4-rust-libnode-bridge-evaluation.json → rust-libnode-bridge-evaluation.json} +3 -3
- package/architecture/{v4-rust-libnode-bridge-spike.md → rust-libnode-bridge-spike.md} +6 -6
- package/architecture/{v4-rust-wasm-production-authority.json → rust-wasm-production-authority.json} +11 -11
- package/architecture/{v4-stable-publication-fence.json → stable-publication-fence.json} +6 -6
- package/architecture/{v4-stage-capsule-contract.json → stage-capsule-contract.json} +1 -1
- package/architecture/{v4-stage-capsule-qualification.json → stage-capsule-qualification.json} +6 -6
- package/architecture/{v4-stage-capsule-resume-planner.json → stage-capsule-resume-planner.json} +2 -2
- package/architecture/{v4-stage-capsule-store-contract.json → stage-capsule-store-contract.json} +4 -4
- package/architecture/{v4-tail-reseal-parity.json → tail-reseal-parity.json} +28 -28
- package/architecture/{v4-universal-workflow-bootstrap.json → universal-workflow-bootstrap.json} +9 -4
- package/architecture/{v4-universal-workflow-fault-campaign.json → universal-workflow-fault-campaign.json} +8 -8
- package/architecture/{v4-universal-workflow-train-admission.json → universal-workflow-train-admission.json} +8 -8
- package/architecture/workflow-taxonomy.json +11 -0
- package/bin/buildchain.mjs +3 -3
- package/bin/internal/adopter-delivery-cli.mjs +9 -9
- package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
- package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/Cargo.lock +1 -1
- package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/Cargo.toml +1 -1
- package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/src/main.rs +3 -3
- package/dist/site/buildchain-contract.json +18 -18
- package/dist/site/buildchain-site.json +167 -71
- package/dist/site/capability-registry.json +5 -5
- package/dist/site/kfd-claims.json +226 -90
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +7 -7
- package/dist/site/node-api-registry.json +12929 -10491
- package/dist/site/page-registry.json +155 -59
- package/dist/site/public-surface-audit.json +65 -46
- package/dist/site/publication-authority-registry.json +27 -17
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/release-provenance.json +18 -9
- package/dist/site/site-manifest.json +11 -11
- package/dist/site/workflow-registry.json +86 -52
- package/docs/MAP.md +4 -3
- package/docs/next-development-transition.md +24 -1
- package/docs/node-api-reference.md +435 -175
- package/docs/oci-publication.md +173 -0
- package/docs/publish-transaction.md +36 -3
- package/docs/release-flow.md +1 -1
- package/docs/reusable-build-surface.md +1 -1
- package/docs/v4-adopter-delivery.md +2 -2
- package/docs/v4-canonical-contracts.md +7 -7
- package/docs/v4-delivery-warrant-read-candidate.md +3 -3
- package/docs/v4-delivery-warrant-semantic-diff.md +3 -3
- package/docs/v4-production-release.md +8 -2
- package/docs/v4-publication-rehearsal.md +3 -3
- package/docs/v4-runtime-ref-resume-authority.md +2 -2
- package/docs/v4-rust-wasm-production-authority.md +6 -6
- package/docs/v4-stage-capsule.md +7 -7
- package/docs/v4-tail-reseal.md +1 -1
- package/docs/workflow-catalog.md +1 -0
- package/package.json +37 -26
- package/packages/compatibility/adopter-delivery.js +16 -0
- package/packages/compatibility/cross-platform-adopter-qualification.js +12 -0
- package/packages/compatibility/floating-consumer-policy.js +14 -0
- package/packages/compatibility/publication-qualification.js +11 -0
- package/packages/compatibility/publication-rehearsal.js +18 -0
- package/packages/compatibility/runtime-ref-resume-authority.js +13 -0
- package/packages/compatibility/tail-reseal-receipt.js +7 -0
- package/packages/compatibility/tail-reseal.js +11 -0
- package/packages/core/{v4-adopter-delivery-parity.js → adopter-delivery-parity.js} +12 -12
- package/packages/core/{v4-adopter-delivery.js → adopter-delivery.js} +24 -24
- package/packages/core/buildchain-contract.js +5 -5
- package/packages/core/buildchain-domain.wasm +0 -0
- package/packages/core/buildchain-publication-authority.js +1 -0
- package/packages/core/{v4-canonical-contracts.js → canonical-contracts.js} +32 -31
- package/packages/core/{v4-cross-platform-adopter-qualification.js → cross-platform-adopter-qualification.js} +19 -19
- package/packages/core/{v4-delivery-warrant-fixture-runner.js → delivery-warrant-fixture-runner.js} +36 -32
- package/packages/core/{v4-delivery-warrant-read-candidate.js → delivery-warrant-read-candidate.js} +40 -40
- package/packages/core/{v4-delivery-warrant-semantic-diff-gate.js → delivery-warrant-semantic-diff-gate.js} +58 -59
- package/packages/core/{v4-delivery-warrant-shadow-adapter.js → delivery-warrant-shadow-adapter.js} +15 -15
- package/packages/core/dev-delivery-execution-transfer.js +6 -6
- package/packages/core/dev-delivery-native-proof.js +12 -8
- package/packages/core/dev-delivery-warrant-legacy-recovery.js +1 -1
- package/packages/core/dev-delivery-warrant-native-compatibility.js +4 -4
- package/packages/core/dev-delivery-warrant-state.js +11 -11
- package/packages/core/dev-delivery-warrant.js +3 -3
- package/packages/core/domain-wasm-artifact.js +7 -0
- package/packages/core/{v4-domain-wasm.js → domain-wasm.js} +31 -31
- package/packages/core/{v4-floating-consumer-evidence.js → floating-consumer-evidence.js} +13 -13
- package/packages/core/{v4-floating-consumer-policy.js → floating-consumer-policy.js} +27 -29
- package/packages/core/{v4-floating-consumer-release-passport.js → floating-consumer-release-passport.js} +25 -25
- package/packages/core/index.js +4 -8
- package/packages/core/next-development-projection.js +24 -1
- package/packages/core/next-development-transition.js +5 -6
- package/packages/core/oci-compose-qualification.js +143 -0
- package/packages/core/oci-publication-bundle.js +281 -0
- package/packages/core/oci-publication-graph.js +206 -0
- package/packages/core/paper-runtime-channels.js +2 -2
- package/packages/core/paper.js +3 -3
- package/packages/core/partial-mutation-recovery-qualification.js +18 -0
- package/packages/core/{v4-platform-stage-checkpoints.js → platform-stage-checkpoints.js} +37 -37
- package/packages/core/{v4-product-publication.js → product-publication.js} +11 -9
- package/packages/core/{v4-protected-publication-source.js → protected-publication-source.js} +3 -3
- package/packages/core/provider-operation-journal.js +62 -0
- package/packages/core/{v4-provider-readback-idempotency.js → provider-readback-idempotency.js} +33 -33
- package/packages/core/public-export-compatibility.js +33 -0
- package/packages/core/publication-development.js +72 -0
- package/packages/core/{v4-publication-qualification.js → publication-qualification.js} +17 -17
- package/packages/core/{v4-publication-rehearsal-capsule.js → publication-rehearsal-capsule.js} +23 -23
- package/packages/core/publication-rehearsal-projection.js +2 -2
- package/packages/core/{v4-publication-rehearsal-provider-bindings.js → publication-rehearsal-provider-bindings.js} +4 -4
- package/packages/core/publication-rehearsal-runtime.js +21 -21
- package/packages/core/{v4-publication-rehearsal.js → publication-rehearsal.js} +33 -33
- package/packages/core/publication-sealed-bundle.js +78 -13
- package/packages/core/release-activation-shadow.js +32 -0
- package/packages/core/release-candidate.js +6 -6
- package/packages/core/{v4-release-invocation.js → release-invocation.js} +15 -15
- package/packages/core/release-passport.js +36 -36
- package/packages/core/release-tail-product-capabilities.js +9 -0
- package/packages/core/release-tail-provider-plane.js +10 -10
- package/packages/core/{v4-runtime-ref-resume-authority.js → runtime-ref-resume-authority.js} +36 -40
- package/packages/core/{v4-runtime-selector-persistence.js → runtime-selector-persistence.js} +7 -7
- package/packages/core/stable-publication-fence.js +28 -0
- package/packages/core/{v4-stage-capsule-local-store.js → stage-capsule-local-store.js} +56 -54
- package/packages/core/{v4-stage-capsule-qualification-campaign.js → stage-capsule-qualification-campaign.js} +37 -38
- package/packages/core/{v4-stage-capsule-qualification.js → stage-capsule-qualification.js} +28 -29
- package/packages/core/{v4-stage-capsule-resume-planner.js → stage-capsule-resume-planner.js} +29 -29
- package/packages/core/{v4-stage-capsule-store.js → stage-capsule-store.js} +59 -56
- package/packages/core/{v4-stage-capsule.js → stage-capsule.js} +45 -45
- package/packages/core/{v4-tail-reseal-contract.js → tail-reseal-contract.js} +6 -6
- package/packages/core/{v4-tail-reseal-github.js → tail-reseal-github.js} +12 -12
- package/packages/core/{v4-tail-reseal-receipt.js → tail-reseal-receipt.js} +22 -22
- package/packages/core/{v4-tail-reseal.js → tail-reseal.js} +29 -29
- package/packages/core/{v4-universal-workflow-bootstrap.js → universal-workflow-bootstrap.js} +23 -23
- package/scripts/{v4-architecture.mjs → architecture.mjs} +6 -6
- package/scripts/binary-publication-evidence.mjs +1 -1
- package/scripts/{v4-bridge-bootstrap.mjs → bridge-bootstrap.mjs} +14 -18
- package/scripts/{v4-bridge-evidence.mjs → bridge-evidence.mjs} +8 -8
- package/scripts/{build-v4-domain-wasm.mjs → build-domain-wasm.mjs} +6 -18
- package/scripts/{v3-v4-capability-catalog.mjs → capability-parity-catalog.mjs} +19 -19
- package/scripts/check-action-bundles.mjs +2 -2
- package/scripts/{check-v3-v4-capability-inventory.mjs → check-capability-parity-inventory.mjs} +42 -42
- package/scripts/check-core-mechanism-inventory.mjs +4 -1
- package/scripts/{check-v4-floating-consumer-policy-contract.mjs → check-floating-consumer-policy-contract.mjs} +8 -8
- package/scripts/check-implementation-naming.mjs +135 -0
- package/scripts/check-inventory.mjs +6 -5
- package/scripts/check-maintainability.mjs +9 -2
- package/scripts/{check-v4-public-dogfood-contract.mjs → check-public-dogfood-contract.mjs} +15 -15
- package/scripts/{check-v4-release-topology.mjs → check-release-topology.mjs} +53 -31
- package/scripts/{check-v4-runtime-semantic-closure.mjs → check-runtime-semantic-closure.mjs} +19 -16
- package/scripts/{check-v4-universal-workflow-bootstrap.mjs → check-universal-workflow-bootstrap.mjs} +14 -14
- package/scripts/{v4-consumer-policy.mjs → consumer-policy.mjs} +15 -15
- package/scripts/{copy-v4-domain-wasm.mjs → copy-domain-wasm.mjs} +3 -3
- package/scripts/{v4-cross-platform-adopter-qualification.mjs → cross-platform-adopter-qualification.mjs} +9 -9
- package/scripts/{v4-declarative-promotion-admission.mjs → declarative-promotion-admission.mjs} +4 -4
- package/scripts/dev-delivery-warrant-options.mjs +1 -1
- package/scripts/dev-delivery-warrant-store.mjs +29 -10
- package/scripts/dev-delivery-warrant.mjs +4 -4
- package/scripts/dev-pr-delivery-warrant.mjs +1 -1
- package/scripts/generate-channel-build-workflow.mjs +2 -2
- package/scripts/generate-channel-promotion-workflow.mjs +14 -31
- package/scripts/generate-release-candidate-passport.mjs +23 -23
- package/scripts/generate-site-bundle.mjs +17 -17
- package/scripts/{generate-v4-universal-workflow-facades.mjs → generate-universal-workflow-facades.mjs} +61 -21
- package/scripts/{v4-host-adapter.mjs → host-adapter.mjs} +1 -1
- package/scripts/implementation-references.mjs +25 -0
- package/scripts/init-repo.mjs +1 -1
- package/scripts/next-development-review.mjs +17 -11
- package/scripts/oci-compose-preview.mjs +261 -0
- package/scripts/{v4-platform-stage-checkpoint-rehearsal.mjs → platform-stage-checkpoint-rehearsal.mjs} +17 -17
- package/scripts/{v4-product-publication-intent.mjs → product-publication-intent.mjs} +16 -8
- package/scripts/publication-candidate-kind.mjs +93 -0
- package/scripts/publication-candidate-sealer.mjs +16 -1
- package/scripts/{v4-publication-rehearsal-fixture.mjs → publication-rehearsal-fixture.mjs} +5 -5
- package/scripts/{v4-publication-settlement.mjs → publication-settlement.mjs} +8 -8
- package/scripts/{v4-release-candidate-adapter.mjs → release-candidate-adapter.mjs} +4 -4
- package/scripts/release-candidate-resolver.mjs +15 -26
- package/scripts/release-tail.mjs +5 -5
- package/scripts/resume-from-candidate-run.mjs +35 -42
- package/scripts/site-capability-metadata.mjs +9 -0
- package/scripts/source-verification-evidence.mjs +7 -7
- package/scripts/{v4-stage-capsule-qualification.mjs → stage-capsule-qualification.mjs} +62 -62
- package/scripts/{v4-stage-capsule-resume-rehearsal.mjs → stage-capsule-resume-rehearsal.mjs} +6 -6
- package/scripts/{v4-tail-reseal-macos-rehearsal.mjs → tail-reseal-macos-rehearsal.mjs} +9 -9
- package/scripts/{v4-tail-reseal.mjs → tail-reseal.mjs} +19 -19
- package/scripts/universal-facade-maintainability.mjs +12 -3
- package/scripts/{v4-universal-workflow-backflow.mjs → universal-workflow-backflow.mjs} +10 -10
- package/scripts/{v4-universal-workflow-engine.mjs → universal-workflow-engine.mjs} +40 -38
- package/scripts/{v4-universal-workflow-self-dogfood.mjs → universal-workflow-self-dogfood.mjs} +12 -12
- package/scripts/verify-version-state-delta.mjs +4 -2
- package/scripts/{v4-warrant-shadow-plan.mjs → warrant-shadow-plan.mjs} +6 -6
- package/templates/universal-buildchain-bootstrap-recovery.yml +4 -4
- package/packages/core/buildchain-v4-domain.wasm +0 -0
- package/packages/core/v4-domain-wasm-artifact.js +0 -7
- package/packages/core/v4-partial-mutation-recovery-qualification.js +0 -18
- package/packages/core/v4-provider-operation-journal.js +0 -62
- package/packages/core/v4-release-activation-shadow.js +0 -32
- package/packages/core/v4-stable-publication-fence.js +0 -28
- /package/actions/{v4-release-candidate-promote → release-candidate-promote}/README.md +0 -0
- /package/architecture/{v4-adopter-delivery-parity.json → adopter-delivery-parity.json} +0 -0
- /package/architecture/{v3-core-mechanism-inventory.json → baseline-core-mechanism-inventory.json} +0 -0
- /package/architecture/{v4-canonical-contract-fixtures.json → canonical-contract-fixtures.json} +0 -0
- /package/architecture/{v4-compatibility-facts-parity.json → compatibility-facts-parity.json} +0 -0
- /package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.schema.json → delivery-warrant-shadow-bootstrap-plan.schema.json} +0 -0
- /package/architecture/{v4-delivery-warrant-shadow-fixtures.json → delivery-warrant-shadow-fixtures.json} +0 -0
- /package/architecture/{v4-delivery-warrant-shadow-fixtures.schema.json → delivery-warrant-shadow-fixtures.schema.json} +0 -0
- /package/architecture/{v4-exception-ledger.json → exception-ledger.json} +0 -0
- /package/architecture/{v4-exception-ledger.schema.json → exception-ledger.schema.json} +0 -0
- /package/architecture/{v4-floating-consumer-policy.json → floating-consumer-policy.json} +0 -0
- /package/architecture/{v4-publication-facade-patches.json → publication-facade-patches.json} +0 -0
- /package/architecture/{v4-release-invocation-fixtures.json → release-invocation-fixtures.json} +0 -0
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@kungfu-tech/buildchain",
|
|
3
|
-
"version": "4.0.
|
|
3
|
+
"version": "4.0.3",
|
|
4
4
|
"private": false,
|
|
5
5
|
"description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
|
|
6
6
|
"repository": "https://github.com/kungfu-systems/buildchain",
|
|
@@ -43,14 +43,14 @@
|
|
|
43
43
|
"./release-line-bootstrap": "./packages/core/release-line-bootstrap.js",
|
|
44
44
|
"./readme-badges": "./packages/core/readme-badges.js",
|
|
45
45
|
"./public-surface-audit": "./packages/core/public-surface-audit.js",
|
|
46
|
-
"./v4-floating-consumer-policy": "./packages/
|
|
47
|
-
"./v4-runtime-ref-resume-authority": "./packages/
|
|
48
|
-
"./v4-tail-reseal": "./packages/
|
|
49
|
-
"./v4-tail-reseal-receipt": "./packages/
|
|
50
|
-
"./v4-publication-rehearsal": "./packages/
|
|
46
|
+
"./v4-floating-consumer-policy": "./packages/compatibility/floating-consumer-policy.js",
|
|
47
|
+
"./v4-runtime-ref-resume-authority": "./packages/compatibility/runtime-ref-resume-authority.js",
|
|
48
|
+
"./v4-tail-reseal": "./packages/compatibility/tail-reseal.js",
|
|
49
|
+
"./v4-tail-reseal-receipt": "./packages/compatibility/tail-reseal-receipt.js",
|
|
50
|
+
"./v4-publication-rehearsal": "./packages/compatibility/publication-rehearsal.js",
|
|
51
51
|
"./publication-rehearsal-runtime": "./packages/core/publication-rehearsal-runtime.js",
|
|
52
52
|
"./publication-rehearsal-projection": "./packages/core/publication-rehearsal-projection.js",
|
|
53
|
-
"./v4-publication-qualification": "./packages/
|
|
53
|
+
"./v4-publication-qualification": "./packages/compatibility/publication-qualification.js",
|
|
54
54
|
"./adopter-delivery-gate": "./packages/core/adopter-delivery-gate.js",
|
|
55
55
|
"./kfd-adopter-category-driver": "./packages/core/kfd-adopter-category-driver.js",
|
|
56
56
|
"./buildchain-delivery-infrastructure": "./packages/core/buildchain-delivery-infrastructure.js",
|
|
@@ -60,8 +60,8 @@
|
|
|
60
60
|
"./legacy-kfd-adopter-driver": "./packages/core/legacy-kfd-adopter-driver.js",
|
|
61
61
|
"./adopter-delivery-passport": "./packages/core/adopter-delivery-passport.js",
|
|
62
62
|
"./adopter-delivery-vectors": "./packages/core/adopter-delivery-vectors.js",
|
|
63
|
-
"./v4-adopter-delivery": "./packages/
|
|
64
|
-
"./v4-cross-platform-adopter-qualification": "./packages/
|
|
63
|
+
"./v4-adopter-delivery": "./packages/compatibility/adopter-delivery.js",
|
|
64
|
+
"./v4-cross-platform-adopter-qualification": "./packages/compatibility/cross-platform-adopter-qualification.js",
|
|
65
65
|
"./logging": "./packages/core/logging.js",
|
|
66
66
|
"./portable-dev-cache": "./packages/core/portable-dev-cache.js",
|
|
67
67
|
"./publication-artifact": "./packages/core/publication-artifact.js",
|
|
@@ -123,7 +123,16 @@
|
|
|
123
123
|
"./site/product-mechanism.json": "./dist/site/product-mechanism.json",
|
|
124
124
|
"./site/release-provenance.json": "./dist/site/release-provenance.json",
|
|
125
125
|
"./site/agent-index.json": "./dist/site/agent-index.json",
|
|
126
|
-
"./package.json": "./package.json"
|
|
126
|
+
"./package.json": "./package.json",
|
|
127
|
+
"./oci-publication": "./packages/core/oci-publication-bundle.js",
|
|
128
|
+
"./floating-consumer-policy": "./packages/core/floating-consumer-policy.js",
|
|
129
|
+
"./runtime-ref-resume-authority": "./packages/core/runtime-ref-resume-authority.js",
|
|
130
|
+
"./tail-reseal": "./packages/core/tail-reseal.js",
|
|
131
|
+
"./tail-reseal-receipt": "./packages/core/tail-reseal-receipt.js",
|
|
132
|
+
"./publication-rehearsal": "./packages/core/publication-rehearsal.js",
|
|
133
|
+
"./publication-qualification": "./packages/core/publication-qualification.js",
|
|
134
|
+
"./adopter-delivery": "./packages/core/adopter-delivery.js",
|
|
135
|
+
"./cross-platform-adopter-qualification": "./packages/core/cross-platform-adopter-qualification.js"
|
|
127
136
|
},
|
|
128
137
|
"files": [
|
|
129
138
|
"AGENTS.md",
|
|
@@ -131,9 +140,9 @@
|
|
|
131
140
|
"bin/",
|
|
132
141
|
"CONTRIBUTING.md",
|
|
133
142
|
"contracts/",
|
|
134
|
-
"crates/buildchain-
|
|
135
|
-
"crates/buildchain-
|
|
136
|
-
"crates/buildchain-
|
|
143
|
+
"crates/buildchain-host-bridge/Cargo.lock",
|
|
144
|
+
"crates/buildchain-host-bridge/Cargo.toml",
|
|
145
|
+
"crates/buildchain-host-bridge/src/",
|
|
137
146
|
"LICENSE-POLICY.md",
|
|
138
147
|
"scripts/*.mjs",
|
|
139
148
|
"templates/",
|
|
@@ -143,7 +152,8 @@
|
|
|
143
152
|
"SECURITY.md",
|
|
144
153
|
"docs/*.md",
|
|
145
154
|
"actions/*/README.md",
|
|
146
|
-
"fixtures/*/README.md"
|
|
155
|
+
"fixtures/*/README.md",
|
|
156
|
+
"packages/compatibility/"
|
|
147
157
|
],
|
|
148
158
|
"engines": {
|
|
149
159
|
"node": ">=22.14.0"
|
|
@@ -154,14 +164,14 @@
|
|
|
154
164
|
},
|
|
155
165
|
"packageManager": "pnpm@11.7.0",
|
|
156
166
|
"scripts": {
|
|
157
|
-
"precheck:static": "prettier --check architecture/decisions/0003-two-phase-delivery-warrant.md architecture/
|
|
167
|
+
"precheck:static": "prettier --check architecture/decisions/0003-two-phase-delivery-warrant.md architecture/delivery-authority-parity.json contracts/dev-delivery-authority-v2.schema.json dist/site/schemas/dev-delivery-authority-v2.schema.json docs/dev-delivery-qualification-landing-adr.md packages/core/dev-delivery-authority-candidate.js packages/core/dev-delivery-authority-evidence.js packages/core/dev-delivery-authority-landing.js packages/core/dev-delivery-authority-observation.js packages/core/dev-delivery-authority-qualification.js packages/core/dev-delivery-authority-settlement.js packages/core/dev-delivery-authority-state.js packages/core/dev-delivery-execution-failure.js packages/core/dev-delivery-execution-transfer.js packages/core/dev-delivery-landing-readback.js packages/core/dev-delivery-landing-terminal-evidence.js packages/core/dev-delivery-landing-testing-port.js packages/core/dev-delivery-native-execution.js packages/core/dev-delivery-native-proof.js packages/core/dev-delivery-process-boundary.js packages/core/dev-delivery-warrant-qualification.js packages/core/dev-delivery-warrant-state.js scripts/dev-delivery-authority-command-adapters.mjs scripts/dev-delivery-authority-provider.mjs scripts/dev-delivery-authority.mjs scripts/dev-delivery-native-run.mjs scripts/dev-delivery-process-boundary.mjs scripts/dev-delivery-two-phase-resume.mjs scripts/dev-delivery-two-phase.mjs scripts/dev-delivery-warrant-options.mjs scripts/dev-delivery-warrant-store.mjs templates/native-dev-delivery.yml",
|
|
158
168
|
"operator:windows-jit": "bash scripts/aws-windows-jit-operator.sh",
|
|
159
|
-
"check": "pnpm run check:static && node scripts/check-ci-lane-change-budget.mjs && node scripts/check-
|
|
160
|
-
"check:static": "node scripts/check-javascript-syntax.mjs && prettier --check architecture/*.json contracts/release-tail-provider-bindings-v1.schema.json contracts/v4-canonical-contracts-v1.schema.json contracts/v4-compatibility-facts-v1.schema.json contracts/v4-delivery-warrant-semantic-diff-report-v1.schema.json contracts/v4-delivery-warrant-trace-v1.schema.json contracts/v4-floating-consumer-policy-receipt-v1.schema.json contracts/v4-runtime-ref-resume-authority-v1.schema.json contracts/v4-tail-reseal-v1.schema.json contracts/v4-host-contract-v1.schema.json contracts/v4-provider-operation-journal-v1.schema.json contracts/v4-release-activation-shadow-v1.schema.json contracts/v4-stable-publication-fence-v1.schema.json contracts/v4-partial-mutation-recovery-v1.schema.json contracts/v4-stage-capsule-v1.schema.json contracts/v4-stage-capsule-store-v1.schema.json contracts/v4-stage-capsule-resume-v1.schema.json contracts/release-tail-capabilities-v1.schema.json contracts/fixtures/release-tail-capabilities-v1/*.json contracts/fixtures/v4-delivery-warrant-trace-v1/*.json contracts/fixtures/v4-floating-consumer-policy-v1/*.json contracts/fixtures/v4-runtime-ref-resume-authority-v1/*.json contracts/fixtures/v4-tail-reseal-v1/*.json contracts/fixtures/v4-compatibility-facts-v1/*.json contracts/fixtures/v4-provider-operation-journal-v1/*.json contracts/fixtures/v4-provider-readback-idempotency-v1/*.json contracts/fixtures/v4-release-activation-shadow-v1/*.json contracts/fixtures/v4-stable-publication-fence-v1/*.json contracts/fixtures/v4-partial-mutation-recovery-v1/*.json contracts/fixtures/v4-stage-capsule-v1/*.json contracts/fixtures/v4-stage-capsule-store-v1/*.json contracts/fixtures/v4-stage-capsule-resume-v1/*.json bin/internal/command-registry.mjs bin/internal/compatibility-facts-cli.mjs packages/core/
|
|
161
|
-
"check:
|
|
162
|
-
"check:
|
|
163
|
-
"build:
|
|
164
|
-
"check:
|
|
169
|
+
"check": "pnpm run check:implementation-naming && pnpm run check:static && node scripts/check-ci-lane-change-budget.mjs && node scripts/check-public-dogfood-contract.mjs && node scripts/check-floating-consumer-policy-contract.mjs && node scripts/check-release-topology.mjs && node scripts/check-universal-workflow-bootstrap.mjs && pnpm run check:bridge && pnpm run check:contracts:rust && pnpm run check:wasm && node scripts/check-maintainability.mjs && node scripts/check-internal-architecture.mjs && node scripts/generate-agent-change-map.mjs && node scripts/check-inventory.mjs && node scripts/check-core-mechanism-inventory.mjs && node scripts/check-runtime-semantic-closure.mjs && node scripts/check-capability-parity-inventory.mjs && node scripts/check-release-tail-contract.mjs && node scripts/publication-rehearsal-fixture.mjs --check && node scripts/architecture.mjs validate && node scripts/warrant-shadow-plan.mjs validate && pnpm run check:site && pnpm run check:workflows && pnpm run test:unit && pnpm run check:golden-path && node scripts/check-action-bundles.mjs",
|
|
170
|
+
"check:static": "node scripts/check-javascript-syntax.mjs && prettier --check architecture/*.json contracts/release-tail-provider-bindings-v1.schema.json contracts/v4-canonical-contracts-v1.schema.json contracts/v4-compatibility-facts-v1.schema.json contracts/v4-delivery-warrant-semantic-diff-report-v1.schema.json contracts/v4-delivery-warrant-trace-v1.schema.json contracts/v4-floating-consumer-policy-receipt-v1.schema.json contracts/v4-runtime-ref-resume-authority-v1.schema.json contracts/v4-tail-reseal-v1.schema.json contracts/v4-host-contract-v1.schema.json contracts/v4-provider-operation-journal-v1.schema.json contracts/v4-release-activation-shadow-v1.schema.json contracts/v4-stable-publication-fence-v1.schema.json contracts/v4-partial-mutation-recovery-v1.schema.json contracts/v4-stage-capsule-v1.schema.json contracts/v4-stage-capsule-store-v1.schema.json contracts/v4-stage-capsule-resume-v1.schema.json contracts/release-tail-capabilities-v1.schema.json contracts/fixtures/release-tail-capabilities-v1/*.json contracts/fixtures/v4-delivery-warrant-trace-v1/*.json contracts/fixtures/v4-floating-consumer-policy-v1/*.json contracts/fixtures/v4-runtime-ref-resume-authority-v1/*.json contracts/fixtures/v4-tail-reseal-v1/*.json contracts/fixtures/v4-compatibility-facts-v1/*.json contracts/fixtures/v4-provider-operation-journal-v1/*.json contracts/fixtures/v4-provider-readback-idempotency-v1/*.json contracts/fixtures/v4-release-activation-shadow-v1/*.json contracts/fixtures/v4-stable-publication-fence-v1/*.json contracts/fixtures/v4-partial-mutation-recovery-v1/*.json contracts/fixtures/v4-stage-capsule-v1/*.json contracts/fixtures/v4-stage-capsule-store-v1/*.json contracts/fixtures/v4-stage-capsule-resume-v1/*.json bin/internal/command-registry.mjs bin/internal/compatibility-facts-cli.mjs packages/core/canonical-contracts.js packages/core/kungfu-temporal-fact.js packages/core/buildchain-compatibility-fact.js packages/core/buildchain-compatibility-authority.js packages/core/buildchain-compatibility-proof.js packages/core/floating-consumer-evidence.js packages/core/floating-consumer-policy.js packages/core/floating-consumer-release-passport.js packages/core/runtime-ref-resume-authority.js packages/core/tail-reseal-contract.js packages/core/tail-reseal-github.js packages/core/tail-reseal-receipt.js packages/core/tail-reseal.js packages/core/runtime-selector-persistence.js packages/core/provider-operation-journal.js packages/core/provider-readback-idempotency.js packages/core/release-activation-shadow.js packages/core/stable-publication-fence.js packages/core/partial-mutation-recovery-qualification.js packages/core/stage-capsule.js packages/core/stage-capsule-store.js packages/core/stage-capsule-local-store.js packages/core/platform-stage-checkpoints.js packages/core/stage-capsule-resume-planner.js packages/core/stage-capsule-qualification.js packages/core/stage-capsule-qualification-campaign.js packages/core/delivery-warrant-fixture-runner.js packages/core/delivery-warrant-read-candidate.js packages/core/delivery-warrant-semantic-diff-gate.js packages/core/delivery-warrant-shadow-adapter.js scripts/authorize-promotion-runtime-override.cjs scripts/check-core-mechanism-inventory.mjs scripts/check-runtime-semantic-closure.mjs scripts/check-release-tail-contract.mjs scripts/check-javascript-syntax.mjs scripts/check-maintainability.mjs scripts/dev-pr-prequeue-guard.mjs scripts/check-public-dogfood-contract.mjs scripts/maintainability-metrics.mjs scripts/maintainability-domain-metrics.mjs scripts/maintainability-governance.mjs scripts/generate-agent-change-map.mjs scripts/public-reference.mjs scripts/site-reference-registry.mjs scripts/generate-public-reference.mjs scripts/architecture.mjs scripts/bridge-bootstrap.mjs scripts/bridge-evidence.mjs scripts/consumer-policy.mjs scripts/host-adapter.mjs scripts/platform-stage-checkpoint-rehearsal.mjs scripts/stage-capsule-resume-rehearsal.mjs scripts/stage-capsule-qualification.mjs scripts/tail-reseal-macos-rehearsal.mjs scripts/tail-reseal.mjs scripts/warrant-shadow-plan.mjs scripts/verify-golden-path.mjs tests/authorize-promotion-runtime-override.test.mjs tests/command-registry.test.mjs tests/core-mechanism-inventory.test.mjs tests/release-tail-contract.test.mjs tests/maintainability.test.mjs tests/maintainability-governance.test.mjs tests/promotion-responsibilities.test.mjs tests/public-reference.test.mjs tests/architecture.test.mjs tests/bridge.test.mjs tests/canonical-contracts.test.mjs tests/delivery-warrant-fixture-runner.test.mjs tests/delivery-warrant-read-candidate.test.mjs tests/floating-consumer-policy.test.mjs tests/runtime-ref-resume-authority.test.mjs tests/runtime-semantic-closure.test.mjs tests/tail-reseal.test.mjs tests/tail-reseal-parity.test.mjs tests/compatibility-facts.test.mjs tests/platform-stage-checkpoints.test.mjs tests/provider-operation-journal.test.mjs tests/provider-readback-idempotency.test.mjs tests/public-dogfood-contract.test.mjs tests/release-activation-shadow.test.mjs tests/stable-publication-fence.test.mjs tests/partial-mutation-recovery-qualification.test.mjs tests/stage-capsule.test.mjs tests/stage-capsule-store.test.mjs tests/stage-capsule-resume-planner.test.mjs tests/stage-capsule-qualification.test.mjs tests/warrant-shadow-plan.test.mjs",
|
|
171
|
+
"check:bridge": "cargo fmt --manifest-path crates/buildchain-host-bridge/Cargo.toml -- --check && cargo clippy --locked --manifest-path crates/buildchain-host-bridge/Cargo.toml -- -D warnings && cargo test --locked --manifest-path crates/buildchain-host-bridge/Cargo.toml",
|
|
172
|
+
"check:contracts": "pnpm run check:contracts:rust && node --test tests/canonical-contracts.test.mjs tests/delivery-warrant-fixture-runner.test.mjs tests/delivery-warrant-read-candidate.test.mjs tests/domain-wasm.test.mjs tests/floating-consumer-policy-contract.test.mjs tests/floating-consumer-policy.test.mjs tests/runtime-ref-resume-authority.test.mjs tests/tail-reseal.test.mjs tests/tail-reseal-parity.test.mjs tests/compatibility-facts.test.mjs tests/publication-rehearsal.test.mjs tests/platform-stage-checkpoints.test.mjs tests/provider-operation-journal.test.mjs tests/provider-readback-idempotency.test.mjs tests/public-dogfood-contract.test.mjs tests/release-activation-shadow.test.mjs tests/stable-publication-fence.test.mjs tests/partial-mutation-recovery-qualification.test.mjs tests/stage-capsule.test.mjs tests/stage-capsule-store.test.mjs tests/stage-capsule-resume-planner.test.mjs tests/stage-capsule-qualification.test.mjs",
|
|
173
|
+
"build:wasm": "node scripts/build-domain-wasm.mjs",
|
|
174
|
+
"check:wasm": "prettier --check packages/core/domain-wasm.js packages/core/domain-wasm-artifact.js scripts/build-domain-wasm.mjs scripts/copy-domain-wasm.mjs tests/domain-wasm.test.mjs && node scripts/build-domain-wasm.mjs --check",
|
|
165
175
|
"check:workflows": "node scripts/check-workflow-taxonomy.mjs && bash scripts/check-workflows.sh",
|
|
166
176
|
"generate:reference": "node scripts/generate-public-reference.mjs",
|
|
167
177
|
"check:reference": "node scripts/generate-public-reference.mjs --check",
|
|
@@ -175,11 +185,12 @@
|
|
|
175
185
|
"binary:build": "node scripts/build-standalone-binary.mjs",
|
|
176
186
|
"package": "npm pack --dry-run --json --registry=https://registry.npmjs.org/",
|
|
177
187
|
"pack:check": "npm pack --dry-run --json --registry=https://registry.npmjs.org/",
|
|
178
|
-
"bridge:
|
|
179
|
-
"bridge:
|
|
180
|
-
"bridge:
|
|
181
|
-
"check:
|
|
182
|
-
"generate:workflows": "node scripts/generate-workflow-taxonomy.mjs"
|
|
188
|
+
"bridge:build": "node scripts/bridge-bootstrap.mjs build",
|
|
189
|
+
"bridge:run": "node scripts/bridge-bootstrap.mjs run",
|
|
190
|
+
"bridge:evidence": "node scripts/bridge-evidence.mjs",
|
|
191
|
+
"check:contracts:rust": "cargo fmt --manifest-path crates/buildchain-domain-contracts/Cargo.toml -- --check && cargo clippy --locked --manifest-path crates/buildchain-domain-contracts/Cargo.toml -- -D warnings && cargo test --locked --manifest-path crates/buildchain-domain-contracts/Cargo.toml",
|
|
192
|
+
"generate:workflows": "node scripts/generate-workflow-taxonomy.mjs",
|
|
193
|
+
"check:implementation-naming": "node scripts/check-implementation-naming.mjs"
|
|
183
194
|
},
|
|
184
195
|
"devDependencies": {
|
|
185
196
|
"ajv": "8.17.1",
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
// Published names forward to the canonical implementation.
|
|
2
|
+
export * from "../core/adopter-delivery.js";
|
|
3
|
+
export {
|
|
4
|
+
ADOPTER_DELIVERY_ARCHIVE_AUTHORITY as V4_ADOPTER_DELIVERY_ARCHIVE_AUTHORITY,
|
|
5
|
+
ADOPTER_DELIVERY_BOOTSTRAP_LINEAGE_CONTRACT as V4_ADOPTER_DELIVERY_BOOTSTRAP_LINEAGE_CONTRACT,
|
|
6
|
+
ADOPTER_DELIVERY_CONTRACT as V4_ADOPTER_DELIVERY_CONTRACT,
|
|
7
|
+
ADOPTER_DELIVERY_READBACK_CONTRACT as V4_ADOPTER_DELIVERY_READBACK_CONTRACT,
|
|
8
|
+
ADOPTER_DELIVERY_SELECTORS as V4_ADOPTER_DELIVERY_SELECTORS,
|
|
9
|
+
ADOPTER_DELIVERY_SOURCE as V4_ADOPTER_DELIVERY_SOURCE,
|
|
10
|
+
assertPublishedAdopterDeliveryRequest as assertV4PublishedAdopterDeliveryRequest,
|
|
11
|
+
createAdopterDeliveryRuntime as createV4AdopterDeliveryRuntime,
|
|
12
|
+
loadPublishedAdopterDeliveryAuthority as loadV4PublishedAdopterDeliveryAuthority,
|
|
13
|
+
qualifyAdopterDeliveryBootstrap as qualifyV4AdopterDeliveryBootstrap,
|
|
14
|
+
runAdopterDeliveryGate as runV4AdopterDeliveryGate,
|
|
15
|
+
verifyAdopterDeliveryReadback as verifyV4AdopterDeliveryReadback,
|
|
16
|
+
} from "../core/adopter-delivery.js";
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
// Published names forward to the canonical implementation.
|
|
2
|
+
export * from "../core/cross-platform-adopter-qualification.js";
|
|
3
|
+
export {
|
|
4
|
+
CROSS_PLATFORM_ADOPTER_PLATFORMS as V4_CROSS_PLATFORM_ADOPTER_PLATFORMS,
|
|
5
|
+
CROSS_PLATFORM_ADOPTER_QUALIFICATION_CONTRACT as V4_CROSS_PLATFORM_ADOPTER_QUALIFICATION_CONTRACT,
|
|
6
|
+
CROSS_PLATFORM_ADOPTER_REPORT_CONTRACT as V4_CROSS_PLATFORM_ADOPTER_REPORT_CONTRACT,
|
|
7
|
+
CROSS_PLATFORM_NEUTRAL_DRIVER as V4_CROSS_PLATFORM_NEUTRAL_DRIVER,
|
|
8
|
+
createCrossPlatformAdopterReport as createV4CrossPlatformAdopterReport,
|
|
9
|
+
qualifyCrossPlatformAdopters as qualifyV4CrossPlatformAdopters,
|
|
10
|
+
summarizeBaselineCapabilityInventory as summarizeV3V4CapabilityInventory,
|
|
11
|
+
validateCrossPlatformAdopterReport as validateV4CrossPlatformAdopterReport,
|
|
12
|
+
} from "../core/cross-platform-adopter-qualification.js";
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
// Published names forward to the canonical implementation.
|
|
2
|
+
export * from "../core/floating-consumer-policy.js";
|
|
3
|
+
export {
|
|
4
|
+
FLOATING_CONSUMER_CERTIFICATION as V4_FLOATING_CONSUMER_CERTIFICATION,
|
|
5
|
+
FLOATING_CONSUMER_POLICY as V4_FLOATING_CONSUMER_POLICY,
|
|
6
|
+
FLOATING_CONSUMER_RECEIPT as V4_FLOATING_CONSUMER_RECEIPT,
|
|
7
|
+
certifyFloatingConsumerPolicyReceipt as certifyV4FloatingConsumerPolicyReceipt,
|
|
8
|
+
resolveFloatingConsumerPolicyAuthority as resolveV4FloatingConsumerPolicyAuthority,
|
|
9
|
+
scanFloatingConsumerPolicy as scanV4FloatingConsumerPolicy,
|
|
10
|
+
consumerPolicyScannerRoot as v4ConsumerPolicyScannerRoot,
|
|
11
|
+
floatingConsumerDocumentRoot as v4FloatingConsumerDocumentRoot,
|
|
12
|
+
verifyFloatingConsumerPolicyCertification as verifyV4FloatingConsumerPolicyCertification,
|
|
13
|
+
verifyFloatingConsumerPolicyReceipt as verifyV4FloatingConsumerPolicyReceipt,
|
|
14
|
+
} from "../core/floating-consumer-policy.js";
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
// Published names forward to the canonical implementation.
|
|
2
|
+
export * from "../core/publication-qualification.js";
|
|
3
|
+
export {
|
|
4
|
+
PublicationQualificationError as V4PublicationQualificationError,
|
|
5
|
+
PUBLICATION_QUALIFICATION_SCHEMA as V4_PUBLICATION_QUALIFICATION_SCHEMA,
|
|
6
|
+
assertNoExecutionFields as assertNoV4ExecutionFields,
|
|
7
|
+
assertDeclarativePromotionInputs as assertV4DeclarativePromotionInputs,
|
|
8
|
+
createDomainPublicationQualificationReceipt as createV4PublicationQualificationReceipt,
|
|
9
|
+
domainPublicationQualificationRoot as v4PublicationQualificationRoot,
|
|
10
|
+
validatePublicationQualificationReceipt as validateV4PublicationQualificationReceipt,
|
|
11
|
+
} from "../core/publication-qualification.js";
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
// Published names forward to the canonical implementation.
|
|
2
|
+
export * from "../core/publication-rehearsal.js";
|
|
3
|
+
export {
|
|
4
|
+
PublicationRehearsalFault as V4PublicationRehearsalFault,
|
|
5
|
+
PUBLICATION_REHEARSAL_AUTHORITY_CONTRACT as V4_PUBLICATION_REHEARSAL_AUTHORITY_CONTRACT,
|
|
6
|
+
DOMAIN_PUBLICATION_REHEARSAL_CAPSULE_CONTRACT as V4_PUBLICATION_REHEARSAL_CAPSULE_CONTRACT,
|
|
7
|
+
PUBLICATION_REHEARSAL_CORE_VERSION as V4_PUBLICATION_REHEARSAL_CORE_VERSION,
|
|
8
|
+
DOMAIN_PUBLICATION_REHEARSAL_EVIDENCE_CONTRACT as V4_PUBLICATION_REHEARSAL_EVIDENCE_CONTRACT,
|
|
9
|
+
PUBLICATION_REHEARSAL_PROVIDER_POLICY_CONTRACT as V4_PUBLICATION_REHEARSAL_PROVIDER_POLICY_CONTRACT,
|
|
10
|
+
createPublicationRehearsalAuthority as createV4PublicationRehearsalAuthority,
|
|
11
|
+
createDomainPublicationRehearsalCapsule as createV4PublicationRehearsalCapsule,
|
|
12
|
+
createPublicationRehearsalProviderPolicy as createV4PublicationRehearsalProviderPolicy,
|
|
13
|
+
executeDomainPublicationRehearsal as executeV4PublicationRehearsal,
|
|
14
|
+
resolvePublicationRehearsalProviderBindings as resolveV4PublicationRehearsalProviderBindings,
|
|
15
|
+
validatePublicationRehearsalCapsule as validateV4PublicationRehearsalCapsule,
|
|
16
|
+
validatePublicationRehearsalProviderBindings as validateV4PublicationRehearsalProviderBindings,
|
|
17
|
+
verifyDomainPublicationRehearsalCapsule as verifyV4PublicationRehearsalCapsule,
|
|
18
|
+
} from "../core/publication-rehearsal.js";
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
// Published names forward to the canonical implementation.
|
|
2
|
+
export * from "../core/runtime-ref-resume-authority.js";
|
|
3
|
+
export {
|
|
4
|
+
RUNTIME_AUTHORIZATION_CONTRACT as V4_RUNTIME_AUTHORIZATION_CONTRACT,
|
|
5
|
+
RUNTIME_PERSISTENCE_SCAN_CONTRACT as V4_RUNTIME_PERSISTENCE_SCAN_CONTRACT,
|
|
6
|
+
RUNTIME_RESUME_LINEAGE_CONTRACT as V4_RUNTIME_RESUME_LINEAGE_CONTRACT,
|
|
7
|
+
authorizeRuntimeSelection as authorizeV4RuntimeSelection,
|
|
8
|
+
createRuntimeResumeLineage as createV4RuntimeResumeLineage,
|
|
9
|
+
scanRuntimeSelectorPersistence as scanV4RuntimeSelectorPersistence,
|
|
10
|
+
runtimeResumeDocumentRoot as v4RuntimeResumeDocumentRoot,
|
|
11
|
+
verifyRuntimeAuthorizationReceipt as verifyV4RuntimeAuthorizationReceipt,
|
|
12
|
+
verifyRuntimeResumeLineage as verifyV4RuntimeResumeLineage,
|
|
13
|
+
} from "../core/runtime-ref-resume-authority.js";
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
// Published names forward to the canonical implementation.
|
|
2
|
+
export * from "../core/tail-reseal-receipt.js";
|
|
3
|
+
export {
|
|
4
|
+
TAIL_RESEAL_RECEIPT_CONTRACT as V4_TAIL_RESEAL_RECEIPT_CONTRACT,
|
|
5
|
+
createTailResealReceipt as createV4TailResealReceipt,
|
|
6
|
+
verifyTailResealReceipt as verifyV4TailResealReceipt,
|
|
7
|
+
} from "../core/tail-reseal-receipt.js";
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
// Published names forward to the canonical implementation.
|
|
2
|
+
export * from "../core/tail-reseal.js";
|
|
3
|
+
export {
|
|
4
|
+
TailResealFault as V4TailResealFault,
|
|
5
|
+
TAIL_RESEAL_PLAN_CONTRACT as V4_TAIL_RESEAL_PLAN_CONTRACT,
|
|
6
|
+
TAIL_RESEAL_PLATFORMS as V4_TAIL_RESEAL_PLATFORMS,
|
|
7
|
+
TAIL_RESEAL_REQUEST_CONTRACT as V4_TAIL_RESEAL_REQUEST_CONTRACT,
|
|
8
|
+
TAIL_RESEAL_REUSED_STAGE_KEYS as V4_TAIL_RESEAL_REUSED_STAGE_KEYS,
|
|
9
|
+
normalizeTailResealRequest as normalizeV4TailResealRequest,
|
|
10
|
+
planTailReseal as planV4TailReseal,
|
|
11
|
+
} from "../core/tail-reseal.js";
|
|
@@ -8,9 +8,9 @@ import {
|
|
|
8
8
|
createAdopterDeliveryGate,
|
|
9
9
|
} from "./adopter-delivery-gate.js";
|
|
10
10
|
|
|
11
|
-
export const
|
|
11
|
+
export const ADOPTER_DELIVERY_PARITY_INPUT_CONTRACT =
|
|
12
12
|
"kungfu-buildchain-v4-adopter-delivery-parity-input";
|
|
13
|
-
export const
|
|
13
|
+
export const ADOPTER_DELIVERY_PARITY_PROJECTION_CONTRACT =
|
|
14
14
|
"buildchain-v4-adopter-delivery-parity-projection/v1";
|
|
15
15
|
|
|
16
16
|
const HOST_REQUEST_CONTRACT = "kungfu-buildchain-v4-host-request";
|
|
@@ -30,7 +30,7 @@ const root = path.resolve(
|
|
|
30
30
|
"../..",
|
|
31
31
|
);
|
|
32
32
|
|
|
33
|
-
export const
|
|
33
|
+
export const ADOPTER_DELIVERY_PARITY_SOURCE = Object.freeze({
|
|
34
34
|
v3Commit: "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
|
|
35
35
|
vectorSuiteRoot:
|
|
36
36
|
"sha256:c978707556406ffda4ef4192032332c01c2da1cebb6ad8c4f0edfc65d5cef0c7",
|
|
@@ -64,13 +64,13 @@ function definition(definition, execution, { profile = false } = {}) {
|
|
|
64
64
|
};
|
|
65
65
|
}
|
|
66
66
|
|
|
67
|
-
export function
|
|
67
|
+
export function createAdopterDeliveryParityInput({
|
|
68
68
|
vectorId,
|
|
69
69
|
request,
|
|
70
70
|
context = {},
|
|
71
71
|
drivers = [],
|
|
72
72
|
artifactProfiles = [],
|
|
73
|
-
sourceAuthority =
|
|
73
|
+
sourceAuthority = ADOPTER_DELIVERY_PARITY_SOURCE,
|
|
74
74
|
} = {}) {
|
|
75
75
|
if (typeof vectorId !== "string" || vectorId.length === 0) {
|
|
76
76
|
throw new TypeError("vectorId must be a non-empty string");
|
|
@@ -104,7 +104,7 @@ export function createV4AdopterDeliveryParityInput({
|
|
|
104
104
|
}
|
|
105
105
|
return {
|
|
106
106
|
schemaVersion: 1,
|
|
107
|
-
contract:
|
|
107
|
+
contract: ADOPTER_DELIVERY_PARITY_INPUT_CONTRACT,
|
|
108
108
|
vectorId,
|
|
109
109
|
sourceAuthority: clone(sourceAuthority),
|
|
110
110
|
request: clone(request),
|
|
@@ -132,7 +132,7 @@ function hostRequest(input, timeoutMs) {
|
|
|
132
132
|
};
|
|
133
133
|
}
|
|
134
134
|
|
|
135
|
-
export function
|
|
135
|
+
export function runAdopterDeliveryParity(
|
|
136
136
|
input,
|
|
137
137
|
{
|
|
138
138
|
command = process.platform === "win32" ? "cargo.exe" : "cargo",
|
|
@@ -141,7 +141,7 @@ export function runV4AdopterDeliveryParity(
|
|
|
141
141
|
"--locked",
|
|
142
142
|
"--quiet",
|
|
143
143
|
"--manifest-path",
|
|
144
|
-
"crates/buildchain-
|
|
144
|
+
"crates/buildchain-domain-contracts/Cargo.toml",
|
|
145
145
|
"--",
|
|
146
146
|
"host",
|
|
147
147
|
],
|
|
@@ -190,7 +190,7 @@ export function runV4AdopterDeliveryParity(
|
|
|
190
190
|
}
|
|
191
191
|
const projection = response.structuredResult;
|
|
192
192
|
if (
|
|
193
|
-
projection?.schema !==
|
|
193
|
+
projection?.schema !== ADOPTER_DELIVERY_PARITY_PROJECTION_CONTRACT ||
|
|
194
194
|
projection.effectMode !== "disabled" ||
|
|
195
195
|
projection.vectorId !== input.vectorId ||
|
|
196
196
|
!/^sha256:[0-9a-f]{64}$/u.test(projection.projectionRoot || "")
|
|
@@ -200,8 +200,8 @@ export function runV4AdopterDeliveryParity(
|
|
|
200
200
|
return projection;
|
|
201
201
|
}
|
|
202
202
|
|
|
203
|
-
export function
|
|
204
|
-
const projection =
|
|
203
|
+
export function assertAdopterDeliveryParity(input, options = {}) {
|
|
204
|
+
const projection = runAdopterDeliveryParity(input, options);
|
|
205
205
|
if (
|
|
206
206
|
adopterDeliveryGateDigest(projection.result) !==
|
|
207
207
|
adopterDeliveryGateDigest(input.expectedResult)
|
|
@@ -213,7 +213,7 @@ export function assertV4AdopterDeliveryParity(input, options = {}) {
|
|
|
213
213
|
return projection;
|
|
214
214
|
}
|
|
215
215
|
|
|
216
|
-
export const
|
|
216
|
+
export const ADOPTER_DELIVERY_PARITY_INTERFACES = Object.freeze({
|
|
217
217
|
driver: DRIVER_INTERFACE,
|
|
218
218
|
artifactProfile: PROFILE_INTERFACE,
|
|
219
219
|
});
|
|
@@ -11,13 +11,13 @@ import { createKfdAdopterCategoryProtocolDriver } from "./kfd-adopter-category-d
|
|
|
11
11
|
import { createLegacyKfdAdopterProtocolDriver } from "./legacy-kfd-adopter-driver.js";
|
|
12
12
|
import { loadPublishedBuildchainDeliveryAuthority } from "./published-delivery-authority.js";
|
|
13
13
|
|
|
14
|
-
export const
|
|
14
|
+
export const ADOPTER_DELIVERY_CONTRACT =
|
|
15
15
|
"kungfu-buildchain-v4-adopter-delivery/v1";
|
|
16
|
-
export const
|
|
16
|
+
export const ADOPTER_DELIVERY_READBACK_CONTRACT =
|
|
17
17
|
"kungfu-buildchain-v4-adopter-delivery-readback/v1";
|
|
18
|
-
export const
|
|
18
|
+
export const ADOPTER_DELIVERY_BOOTSTRAP_LINEAGE_CONTRACT =
|
|
19
19
|
"kungfu-buildchain-v4-adopter-delivery-bootstrap-lineage/v1";
|
|
20
|
-
export const
|
|
20
|
+
export const ADOPTER_DELIVERY_SOURCE = Object.freeze({
|
|
21
21
|
branch: "dev/v3/v3.0",
|
|
22
22
|
commit: "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
|
|
23
23
|
vectorSuiteRoot:
|
|
@@ -27,7 +27,7 @@ export const V4_ADOPTER_DELIVERY_SOURCE = Object.freeze({
|
|
|
27
27
|
initialTargetBase: "e5611377efc03178f8687d99968cfdfa3ce2825b",
|
|
28
28
|
targetBase: "e0342713c7447960c13bd73377282b2e93f4853d",
|
|
29
29
|
});
|
|
30
|
-
export const
|
|
30
|
+
export const ADOPTER_DELIVERY_ARCHIVE_AUTHORITY = Object.freeze({
|
|
31
31
|
buildchain: Object.freeze({
|
|
32
32
|
name: "@kungfu-tech/buildchain",
|
|
33
33
|
version: "3.0.9-alpha.16",
|
|
@@ -135,7 +135,7 @@ export function createJsonAssertionAdopterProtocolDriver() {
|
|
|
135
135
|
});
|
|
136
136
|
}
|
|
137
137
|
|
|
138
|
-
export function
|
|
138
|
+
export function createAdopterDeliveryRuntime({
|
|
139
139
|
drivers = [],
|
|
140
140
|
artifactProfiles = [],
|
|
141
141
|
} = {}) {
|
|
@@ -191,7 +191,7 @@ export function createV4AdopterDeliveryRuntime({
|
|
|
191
191
|
});
|
|
192
192
|
}
|
|
193
193
|
|
|
194
|
-
export function
|
|
194
|
+
export function runAdopterDeliveryGate(input, options = {}) {
|
|
195
195
|
const normalized = exactKeys(
|
|
196
196
|
input,
|
|
197
197
|
[
|
|
@@ -206,16 +206,16 @@ export function runV4AdopterDeliveryGate(input, options = {}) {
|
|
|
206
206
|
);
|
|
207
207
|
if (
|
|
208
208
|
normalized.schemaVersion !== 1 ||
|
|
209
|
-
normalized.contract !==
|
|
209
|
+
normalized.contract !== ADOPTER_DELIVERY_CONTRACT
|
|
210
210
|
) {
|
|
211
211
|
throw new Error("v4 adopter delivery contract or version is unsupported");
|
|
212
212
|
}
|
|
213
213
|
const gateResult =
|
|
214
|
-
|
|
214
|
+
createAdopterDeliveryRuntime(options).evaluate(normalized);
|
|
215
215
|
const result = {
|
|
216
216
|
schemaVersion: 1,
|
|
217
|
-
contract:
|
|
218
|
-
sourceAuthority: structuredClone(
|
|
217
|
+
contract: ADOPTER_DELIVERY_READBACK_CONTRACT,
|
|
218
|
+
sourceAuthority: structuredClone(ADOPTER_DELIVERY_SOURCE),
|
|
219
219
|
selection: {
|
|
220
220
|
driver: normalized.driverSelector,
|
|
221
221
|
artifactProfile: normalized.artifactProfileSelector,
|
|
@@ -230,14 +230,14 @@ export function runV4AdopterDeliveryGate(input, options = {}) {
|
|
|
230
230
|
return result;
|
|
231
231
|
}
|
|
232
232
|
|
|
233
|
-
export function
|
|
233
|
+
export function verifyAdopterDeliveryReadback(
|
|
234
234
|
{ input, readback } = {},
|
|
235
235
|
options = {},
|
|
236
236
|
) {
|
|
237
237
|
if (!readback || !ROOT.test(readback.deliveryRoot ?? "")) {
|
|
238
238
|
throw new Error("exact adopter delivery readback is required");
|
|
239
239
|
}
|
|
240
|
-
const observed =
|
|
240
|
+
const observed = runAdopterDeliveryGate(input, options);
|
|
241
241
|
if (
|
|
242
242
|
observed.deliveryRoot !== readback.deliveryRoot ||
|
|
243
243
|
adopterDeliveryGateDigest(observed) !== adopterDeliveryGateDigest(readback)
|
|
@@ -249,7 +249,7 @@ export function verifyV4AdopterDeliveryReadback(
|
|
|
249
249
|
return observed;
|
|
250
250
|
}
|
|
251
251
|
|
|
252
|
-
export function
|
|
252
|
+
export function qualifyAdopterDeliveryBootstrap({ input, lineage } = {}) {
|
|
253
253
|
const normalizedLineage = exactKeys(
|
|
254
254
|
lineage,
|
|
255
255
|
[
|
|
@@ -264,11 +264,11 @@ export function qualifyV4AdopterDeliveryBootstrap({ input, lineage } = {}) {
|
|
|
264
264
|
if (
|
|
265
265
|
normalizedLineage.schemaVersion !== 1 ||
|
|
266
266
|
normalizedLineage.contract !==
|
|
267
|
-
|
|
267
|
+
ADOPTER_DELIVERY_BOOTSTRAP_LINEAGE_CONTRACT ||
|
|
268
268
|
normalizedLineage.sourceAuthorityCommit !==
|
|
269
|
-
|
|
269
|
+
ADOPTER_DELIVERY_SOURCE.commit ||
|
|
270
270
|
normalizedLineage.targetBaseCommit !==
|
|
271
|
-
|
|
271
|
+
ADOPTER_DELIVERY_SOURCE.targetBase ||
|
|
272
272
|
!SHA.test(normalizedLineage.sourceAuthorityCommit) ||
|
|
273
273
|
!SHA.test(normalizedLineage.targetBaseCommit) ||
|
|
274
274
|
!ROOT.test(normalizedLineage.authorityArchiveRoot ?? "") ||
|
|
@@ -282,7 +282,7 @@ export function qualifyV4AdopterDeliveryBootstrap({ input, lineage } = {}) {
|
|
|
282
282
|
const result = {
|
|
283
283
|
schemaVersion: 1,
|
|
284
284
|
contract: "kungfu-buildchain-v4-adopter-delivery-bootstrap/v1",
|
|
285
|
-
sourceAuthority: structuredClone(
|
|
285
|
+
sourceAuthority: structuredClone(ADOPTER_DELIVERY_SOURCE),
|
|
286
286
|
lineage: normalizedLineage,
|
|
287
287
|
bootstrap,
|
|
288
288
|
qualifying: false,
|
|
@@ -293,11 +293,11 @@ export function qualifyV4AdopterDeliveryBootstrap({ input, lineage } = {}) {
|
|
|
293
293
|
return result;
|
|
294
294
|
}
|
|
295
295
|
|
|
296
|
-
export async function
|
|
296
|
+
export async function loadPublishedAdopterDeliveryAuthority({
|
|
297
297
|
packages,
|
|
298
298
|
expectedAuthorityRoot,
|
|
299
299
|
} = {}) {
|
|
300
|
-
const request =
|
|
300
|
+
const request = assertPublishedAdopterDeliveryRequest({
|
|
301
301
|
packages,
|
|
302
302
|
expectedAuthorityRoot,
|
|
303
303
|
});
|
|
@@ -311,14 +311,14 @@ export async function loadV4PublishedAdopterDeliveryAuthority({
|
|
|
311
311
|
return authority;
|
|
312
312
|
}
|
|
313
313
|
|
|
314
|
-
export function
|
|
314
|
+
export function assertPublishedAdopterDeliveryRequest({
|
|
315
315
|
packages,
|
|
316
316
|
expectedAuthorityRoot,
|
|
317
317
|
} = {}) {
|
|
318
318
|
if (
|
|
319
319
|
!ROOT.test(expectedAuthorityRoot ?? "") ||
|
|
320
320
|
expectedAuthorityRoot !==
|
|
321
|
-
|
|
321
|
+
ADOPTER_DELIVERY_ARCHIVE_AUTHORITY.authorityRoot
|
|
322
322
|
) {
|
|
323
323
|
throw new Error(
|
|
324
324
|
"exact published archive authority readback root is required",
|
|
@@ -335,7 +335,7 @@ export function assertV4PublishedAdopterDeliveryRequest({
|
|
|
335
335
|
["name", "version", "archivePath", "archiveRoot", "artifactRoot"],
|
|
336
336
|
`${key} archive identity`,
|
|
337
337
|
);
|
|
338
|
-
const expected =
|
|
338
|
+
const expected = ADOPTER_DELIVERY_ARCHIVE_AUTHORITY[key];
|
|
339
339
|
if (
|
|
340
340
|
typeof declaration.archivePath !== "string" ||
|
|
341
341
|
declaration.archivePath.length === 0 ||
|
|
@@ -353,7 +353,7 @@ export function assertV4PublishedAdopterDeliveryRequest({
|
|
|
353
353
|
};
|
|
354
354
|
}
|
|
355
355
|
|
|
356
|
-
export const
|
|
356
|
+
export const ADOPTER_DELIVERY_SELECTORS = Object.freeze({
|
|
357
357
|
drivers: BUILTIN_DRIVER_SELECTORS,
|
|
358
358
|
artifactProfiles: BUILTIN_PROFILE_SELECTORS,
|
|
359
359
|
});
|
|
@@ -166,12 +166,12 @@ function declarativeAuditableDemoSurface(root, pkg, majorLine) {
|
|
|
166
166
|
});
|
|
167
167
|
}
|
|
168
168
|
|
|
169
|
-
function
|
|
169
|
+
function releaseCandidatePromoteSurface(root, majorLine) {
|
|
170
170
|
return surface(root, {
|
|
171
|
-
id: "
|
|
171
|
+
id: "release-candidate-promote-action",
|
|
172
172
|
kind: "action",
|
|
173
|
-
path: "actions/
|
|
174
|
-
publicRef: `kungfu-systems/buildchain/actions/
|
|
173
|
+
path: "actions/release-candidate-promote/action.yml",
|
|
174
|
+
publicRef: `kungfu-systems/buildchain/actions/release-candidate-promote@${majorLine}`,
|
|
175
175
|
requiredInputs: [
|
|
176
176
|
"token", "repository", "source-sha", "version", "tag", "channel",
|
|
177
177
|
"candidate-passport-path", "stage-capsules-path",
|
|
@@ -514,7 +514,7 @@ export function createBuildchainContractWorld({
|
|
|
514
514
|
"Build Images owns encoding, Buildchain owns qualification and receipts, and site repositories own browser loading and accessibility behavior",
|
|
515
515
|
"media qualification does not claim browser playback, responsive layout, reduced-motion behavior, accessibility, or production deployment",
|
|
516
516
|
],
|
|
517
|
-
}), declarativeAuditableDemoSurface(root, pkg, majorLine),
|
|
517
|
+
}), declarativeAuditableDemoSurface(root, pkg, majorLine), releaseCandidatePromoteSurface(root, majorLine),
|
|
518
518
|
surface(root, {
|
|
519
519
|
id: "promote-buildchain-ref-action",
|
|
520
520
|
kind: "action",
|
|
Binary file
|
|
@@ -4,6 +4,7 @@ import path from "node:path";
|
|
|
4
4
|
import { createPublicationAuthorityRegistry } from "./publication-authority.js";
|
|
5
5
|
|
|
6
6
|
const DESCRIPTORS = Object.freeze([
|
|
7
|
+
[".github/workflows/public-release-oci-compose-preview.yml", "product-publication", true, ["oci-compose-preview"], "caller-secrets", "none", "fixed", "caller-bound"],
|
|
7
8
|
[".github/workflows/.auditable-demo.yml", "non-publication-oidc"],
|
|
8
9
|
[".github/workflows/.declarative-auditable-demo.yml", "governance-write"],
|
|
9
10
|
[".github/workflows/.build.yml", "non-publication-oidc"],
|