@kungfu-tech/buildchain 4.0.4 → 4.0.5-alpha.0

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "4.0.4",
+    "version": "4.0.5-alpha.0",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v4",
@@ -5437,12 +5437,12 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:7c18fdd3df180db9e1f043a2286ef3f02fae60b84e42b76cd50da9cfeb77883d",
-      "auditDigest": "sha256:60a99366c243554e0b5f494754d6c0ccfdfc4a1b1d345e33de96893e39acf32d"
+      "auditDigest": "sha256:f53bd6542ba64b6f8840ea3f85a4d172dce1b8439b7f45a4503cf4bfa0eae15e"
     }
   ],
   "compatibilityFactRegistryRoot": "sha256:232fd556a2372b29db586bbc2acbdfce6464a68c93902797ff527f75f7816c42",
   "compatibilityFactCutRoot": "sha256:f61b975d4a96c921cc4bd37fb3ed9a0596b47004fe34dc7219979d697e3707f9",
   "compatibilityProofRegistryRoot": "sha256:b7194b811e4d3af2df4390bc4d1731e16a86215bd64ee18cb630dd5492f4fb63",
   "compatibilityDigest": "sha256:a0d4f48bb6236f6932466cfb2802b866035c5be5861a9d41c2975307a640fb18",
-  "contractDigest": "sha256:c98bbc9fc63f47d55711c7414081174236d94514d916b10f7394ec3d7a9a6fe6"
+  "contractDigest": "sha256:87352d7335537daa3355f3f41a6dc6654e23b5cb61465127069a93679c9214c3"
 }

package/dist/site/buildchain-site.json

@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "29a053e8547b7b1d12c3244f18f69b7ee1eb8a33",
+  "sourceRevision": "1f3b279e6a980aa2bd278a4ff4b63e064a80a09d",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.4",
+    "version": "4.0.5-alpha.0",
     "versionSource": "package.json#version"
   },
   "source": {

package/dist/site/kfd-claims.json

@@ -21,7 +21,7 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "2a4ae3826c24eb556bee87b11e642b18a86876ff53bd7de1a25d96a101100ec2",
+    "sha256": "a0eb2237fef75f9886f60247fff020cd7e88a91def620970197720b825e4bc35",
     "summary": {
       "cliCommandCount": 117,
       "workflowCount": 115,
@@ -246,7 +246,7 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "2a4ae3826c24eb556bee87b11e642b18a86876ff53bd7de1a25d96a101100ec2",
+      "sha256": "a0eb2237fef75f9886f60247fff020cd7e88a91def620970197720b825e4bc35",
       "summary": {
         "cliCommandCount": 117,
         "workflowCount": 115,

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.4",
+    "version": "4.0.5-alpha.0",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/public-surface-audit.json

@@ -10948,7 +10948,7 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "fbc23073bbae240489a2f826b2c26daadc58e704050c5f8df366509f5c5a1c3e",
-    "workflowRegistryDigest": "46a2b2c9c8be40bd3221a8f1a29522ec65a67cd61777806c3b02e55251b03267",
+    "workflowRegistryDigest": "d541d6d8970116516f176a9b1bbc6daeeb9a44c4602b060c830898638701cfd1",
     "pageRegistryDigest": "876cf4df5144c253cc3f6b06593d2a0d0b033c231b9552743064609148183469"
   },
   "comparison": {

package/dist/site/publication-registry.json

@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "29a053e8547b7b1d12c3244f18f69b7ee1eb8a33",
+  "sourceRevision": "1f3b279e6a980aa2bd278a4ff4b63e064a80a09d",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.4",
+    "version": "4.0.5-alpha.0",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "29a053e8547b7b1d12c3244f18f69b7ee1eb8a33",
+  "sourceRevision": "1f3b279e6a980aa2bd278a4ff4b63e064a80a09d",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.4",
+    "version": "4.0.5-alpha.0",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",

package/dist/site/workflow-registry.json

@@ -2746,7 +2746,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.4",
+      "introducedVersion": "4.0.5-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -3943,7 +3943,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.4",
+      "introducedVersion": "4.0.5-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -6004,7 +6004,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.4",
+      "introducedVersion": "4.0.5-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -6035,7 +6035,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.4",
+      "introducedVersion": "4.0.5-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -6066,7 +6066,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.4",
+      "introducedVersion": "4.0.5-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "4.0.4",
+  "version": "4.0.5-alpha.0",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",

package/scripts/binary-publication-evidence.mjs

@@ -2,10 +2,7 @@ import fs from "node:fs";
 import crypto from "node:crypto";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
-import {
-  SETTLEMENT_ASSET,
-  verifyPublicationSettlement,
-} from "./publication-settlement.mjs";
+import { SETTLEMENT_ASSET, verifyPublicationSettlement } from "./publication-settlement.mjs";
 import { releaseAssetClient } from "./release-asset-client.mjs";
 
 export async function readBinaryPublicationEvidence({
@@ -13,7 +10,8 @@ export async function readBinaryPublicationEvidence({
   repository,
   tag,
   sourceSha,
-  attempts = 40,
+  // Protected finalization includes PR verification, review and merge queue.
+  attempts = 160,
   wait = () => new Promise((resolve) => setTimeout(resolve, 15000)),
 }) {
   for (let attempt = 0; attempt < attempts; attempt++) {
@@ -54,9 +52,7 @@ export async function readBinaryPublicationEvidence({
     }
     if (attempt + 1 < attempts) await wait();
   }
-  throw new Error(
-    "completed v4 publication evidence is not available within the bounded wait",
-  );
+  throw new Error("completed v4 publication evidence is not available within the bounded wait");
 }
 
 export function prepareBinaryAssetPaths({
@@ -94,22 +90,24 @@ export function prepareBinaryAssetPaths({
   return files;
 }
 
+export async function writeBinaryPublicationEvidence(options) {
+  const settlement = await readBinaryPublicationEvidence(options);
+  const directory = ".buildchain/publication-evidence";
+  options.client.write(`${directory}/${SETTLEMENT_ASSET}`, settlement);
+  const release = settlement.documents.passport.release;
+  options.client.write(`${directory}/release.json`, {
+    channel: release.channel,
+    publishedVersion: release.version,
+    versionLabel: release.version,
+  });
+}
+
 async function main(mode) {
   const repository = process.env.GITHUB_REPOSITORY;
   const tag = process.env.RELEASE_TAG;
   const client = releaseAssetClient(repository);
   if (mode === "read") {
-    const settlement = await readBinaryPublicationEvidence({
-      client,
-      repository,
-      tag,
-      sourceSha: process.env.SOURCE_SHA,
-    });
-    const directory = ".buildchain/publication-evidence";
-    client.write(`${directory}/${SETTLEMENT_ASSET}`, settlement);
-    client.write(`${directory}/release.json`, {
-      channel: settlement.release.channel,
-    });
+    await writeBinaryPublicationEvidence({ client, repository, tag, sourceSha: process.env.SOURCE_SHA });
   } else if (mode === "publish") {
     const release = client.release(tag);
     const files = prepareBinaryAssetPaths({

package/scripts/release-line-policy.mjs

@@ -47,7 +47,8 @@ export function parseVersionStateRef(ref) {
 
 export function parseReleaseLineRecoveryRef(ref) {
   const normalizedRef = normalizeRef(ref);
-  const match = normalizedRef.match(/^fix\/(alpha|release)-line-v(\d+)-v(\d+\.\d+)-[0-9A-Za-z._-]+$/);
+  const match = normalizedRef.match(/^fix\/(alpha|release)-line-v(\d+)-v(\d+\.\d+)-[0-9A-Za-z._-]+$/)
+    || normalizedRef.match(/^chore\/v4-product-pr\/(alpha|release)-v(\d+)-v(\d+\.\d+)\/[0-9a-f]{12}-[0-9a-f]{12}-[0-9a-f]{12}$/);
   if (!match) return undefined;
   return {
     channel: match[1],
@@ -56,7 +57,6 @@ export function parseReleaseLineRecoveryRef(ref) {
     normalizedRef: `${match[1]}/v${match[2]}/v${match[3]}`,
   };
 }
-
 function getRecoveryBumpKeyword({ target, baseRef, baseChannel, version, looseVersionNumber, headRef }) {
   if (!target) return "";
   if (baseChannel !== target.channel || target.normalizedRef !== normalizeRef(baseRef)) {