@kungfu-tech/buildchain 4.0.9 → 4.1.0-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1536) hide show
  1. package/AGENTS.md +35 -5
  2. package/CONTRIBUTING.md +18 -29
  3. package/README.md +55 -29
  4. package/actions/build/artifact/prepare-attestation/README.md +26 -0
  5. package/actions/build/artifact/seal-attestation/README.md +26 -0
  6. package/actions/build/lifecycle/run/README.md +71 -0
  7. package/actions/build/lifecycle/validate/README.md +52 -0
  8. package/actions/governance/incident/report/README.md +107 -0
  9. package/actions/release/promotion/ref/README.md +92 -0
  10. package/architecture/action-taxonomy.json +543 -0
  11. package/architecture/agent-change-map.md +2061 -431
  12. package/architecture/build-environments.json +18 -2
  13. package/architecture/build-orchestration.json +58 -9
  14. package/architecture/capability-state-machine-manifest.json +15 -16
  15. package/architecture/capability-state-machine-manifest.schema.json +2 -2
  16. package/architecture/ci-lane-change-budget.json +2105 -225
  17. package/architecture/code-layout.json +55 -0
  18. package/architecture/core-mechanisms.json +1160 -0
  19. package/architecture/cross-platform-adopter-qualification.json +4 -14
  20. package/architecture/delivery-authority-parity.json +46 -46
  21. package/architecture/delivery-warrant-shadow-bootstrap-plan.json +4 -4
  22. package/architecture/delivery-warrant-shadow-bootstrap-plan.md +3 -3
  23. package/architecture/dev-delivery-orchestration.json +175 -0
  24. package/architecture/floating-consumer-policy.json +15 -11
  25. package/architecture/history/warrant-shadow-observations.json +900 -0
  26. package/architecture/internal-capabilities.json +2332 -358
  27. package/architecture/layered-transition.json +32 -0
  28. package/architecture/maintainability-debt.json +883 -1840
  29. package/architecture/maintainability-policy.json +63 -1438
  30. package/architecture/partial-mutation-recovery-qualification.json +4 -4
  31. package/architecture/platform-stage-checkpoints.json +1 -1
  32. package/architecture/promotion-job-topology.json +85 -0
  33. package/architecture/provider-operation-journal-contract.json +5 -5
  34. package/architecture/publication-facade-patches.json +5 -5
  35. package/architecture/release-activation-shadow-domain.json +4 -4
  36. package/architecture/release-invocation-fixtures.json +31 -16
  37. package/architecture/release-tail-contract-inventory.json +1 -9
  38. package/architecture/release-tail-contract.json +273 -0
  39. package/architecture/release-topology.json +245 -215
  40. package/architecture/runtime-ref-resume-authority.json +1 -1
  41. package/architecture/runtime-semantic-closure.json +27 -17
  42. package/architecture/rust-libnode-bridge-evaluation.json +1 -1
  43. package/architecture/rust-wasm-production-authority.json +7 -7
  44. package/architecture/stable-publication-fence.json +4 -4
  45. package/architecture/stage-capsule-qualification.json +4 -4
  46. package/architecture/stage-capsule-resume-planner.json +1 -1
  47. package/architecture/stage-capsule-store-contract.json +2 -2
  48. package/architecture/tail-reseal-parity.json +22 -17
  49. package/architecture/universal-workflow-bootstrap.json +121 -102
  50. package/architecture/universal-workflow-fault-campaign.json +11 -11
  51. package/architecture/universal-workflow-train-admission.json +44 -8
  52. package/architecture/workflow-taxonomy.json +81 -798
  53. package/bin/buildchain.mjs +2 -1820
  54. package/contracts/buildchain-v2-residuals-v1.json +2 -138
  55. package/contracts/dev-delivery-authority-v2.schema.json +509 -231
  56. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  57. package/contracts/promotion-invocation-v1.schema.json +547 -0
  58. package/contracts/promotion-request-v1.schema.json +472 -0
  59. package/contracts/v4-adopter-delivery-v1.schema.json +1 -1
  60. package/contracts/v4-compatibility-facts-v1.schema.json +4 -4
  61. package/contracts/v4-floating-consumer-policy-receipt-v1.schema.json +124 -21
  62. package/contracts/v4-release-invocation-v1.schema.json +1 -1
  63. package/crates/buildchain-host-bridge/src/main.rs +1 -1
  64. package/dist/site/buildchain-contract.json +145 -2206
  65. package/dist/site/buildchain-site.json +350 -326
  66. package/dist/site/capability-registry.json +17 -17
  67. package/dist/site/cli-registry.json +354 -365
  68. package/dist/site/controller-registry.json +142 -715
  69. package/dist/site/kfd-claims.json +5871 -3138
  70. package/dist/site/kfd-upstream-aggregate.json +1 -1
  71. package/dist/site/manual-registry.json +26 -26
  72. package/dist/site/node-api-registry.json +12561 -16063
  73. package/dist/site/page-registry.json +312 -292
  74. package/dist/site/public-surface-audit.json +3844 -3601
  75. package/dist/site/publication-authority-registry.json +295 -1117
  76. package/dist/site/publication-registry.json +5 -5
  77. package/dist/site/release-provenance.json +80 -90
  78. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +509 -231
  79. package/dist/site/schemas/v4-adopter-delivery-v1.schema.json +1 -1
  80. package/dist/site/schemas/v4-compatibility-facts-v1.schema.json +4 -4
  81. package/dist/site/site-manifest.json +31 -31
  82. package/dist/site/workflow-registry.json +7274 -5321
  83. package/docs/MAP.md +8 -6
  84. package/docs/auditable-demo.md +4 -4
  85. package/docs/aws-us-elastic-runner-burst-plane.md +5 -5
  86. package/docs/binary-distribution.md +2 -2
  87. package/docs/bootstrap-recovery.md +50 -0
  88. package/docs/cli-reference.md +2 -35
  89. package/docs/cli.md +6 -6
  90. package/docs/code-organization.md +131 -0
  91. package/docs/consumer-issue-reporting.md +1 -1
  92. package/docs/dev-alpha-candidate-patrol.md +1 -1
  93. package/docs/dev-delivery-orchestration.md +116 -0
  94. package/docs/dev-delivery-qualification-landing-adr.md +1 -1
  95. package/docs/dev-delivery-warrant.md +5 -2
  96. package/docs/dev-qualification-patrol.md +1 -1
  97. package/docs/engineering-housekeeper.md +3 -3
  98. package/docs/github-artifact-attestation.md +3 -3
  99. package/docs/kfd-support.md +1 -1
  100. package/docs/lifecycle-protocol.md +8 -8
  101. package/docs/migration-inventory.md +6 -6
  102. package/docs/next-development-transition.md +4 -4
  103. package/docs/node-api-reference.md +2273 -2644
  104. package/docs/ownership.md +3 -3
  105. package/docs/publication-artifacts.md +5 -5
  106. package/docs/publication-authority.md +4 -4
  107. package/docs/publish-transaction.md +10 -10
  108. package/docs/release-activation-transaction.md +1 -1
  109. package/docs/release-candidate.md +4 -4
  110. package/docs/release-governance.md +25 -25
  111. package/docs/release-passport.md +2 -2
  112. package/docs/release-promotion-request.md +64 -0
  113. package/docs/release-propagation.md +19 -18
  114. package/docs/release-tail-contract.md +40 -76
  115. package/docs/release-tail-provider-plane.md +17 -26
  116. package/docs/reusable-build-surface.md +34 -21
  117. package/docs/shifu-gate-profiles.md +4 -4
  118. package/docs/site-bundle-contract.md +1 -1
  119. package/docs/stable-candidate-patrol.md +1 -1
  120. package/docs/v4-adopter-delivery.md +50 -121
  121. package/docs/v4-canonical-contracts.md +3 -3
  122. package/docs/v4-compatibility-facts.md +1 -1
  123. package/docs/v4-declarative-release-tail-migration.md +24 -29
  124. package/docs/v4-production-release.md +16 -1
  125. package/docs/v4-publication-rehearsal.md +1 -1
  126. package/docs/v4-runtime-ref-resume-authority.md +2 -2
  127. package/docs/v4-rust-wasm-production-authority.md +2 -2
  128. package/docs/v4-stage-capsule.md +1 -1
  129. package/docs/web-surface-deployments.md +22 -28
  130. package/docs/workflow-catalog.md +82 -127
  131. package/docs/workflow-path-migration.md +1 -5
  132. package/package.json +99 -102
  133. package/packages/core/README.md +41 -164
  134. package/packages/core/adoption/adopter-delivery-parity.js +219 -0
  135. package/packages/core/adoption/adopter-delivery.js +210 -0
  136. package/packages/core/adoption/buildchain-kfd-claims.js +733 -0
  137. package/packages/core/adoption/cli/delivery.mjs +39 -0
  138. package/packages/core/adoption/cli/dispatch.mjs +5 -0
  139. package/packages/core/adoption/cli/kfd-aggregate.mjs +20 -0
  140. package/packages/core/adoption/cli/kfd-hub.mjs +53 -0
  141. package/packages/core/adoption/cli/kfd-migrate-layout.mjs +27 -0
  142. package/packages/core/adoption/cli/kfd-schema.mjs +55 -0
  143. package/packages/core/adoption/cli/kfd-status.mjs +21 -0
  144. package/packages/core/adoption/cli/kfd-upstream.mjs +69 -0
  145. package/packages/core/adoption/cli/kfd.mjs +63 -0
  146. package/packages/core/adoption/cli/output.mjs +18 -0
  147. package/packages/core/adoption/cli/product-gate.mjs +110 -0
  148. package/packages/core/adoption/cli/project.mjs +38 -0
  149. package/packages/core/adoption/cli/standards.mjs +282 -0
  150. package/packages/core/adoption/cli/support.mjs +101 -0
  151. package/packages/core/adoption/cli/surface-register.mjs +172 -0
  152. package/packages/core/adoption/commands/cross-platform-adopter-qualification.mjs +28 -0
  153. package/packages/core/adoption/commands/init-repo.mjs +518 -0
  154. package/packages/core/adoption/cross-platform-adopter-qualification.js +217 -0
  155. package/packages/core/adoption/kfd-agent-hub.js +496 -0
  156. package/packages/core/adoption/kfd.js +966 -0
  157. package/packages/core/adoption/kfd2-product-claims.js +454 -0
  158. package/packages/core/adoption/kfd3-surface-register.js +924 -0
  159. package/packages/core/adoption/qualification/actions.js +106 -0
  160. package/packages/core/adoption/qualification/admission.js +96 -0
  161. package/packages/core/adoption/qualification/aggregate.js +10 -0
  162. package/packages/core/adoption/qualification/io.js +51 -0
  163. package/packages/core/adoption/qualification/platform.js +120 -0
  164. package/packages/core/build/anchored-version-material.js +281 -0
  165. package/packages/core/build/artifact/actions.js +47 -0
  166. package/packages/core/build/artifact/attestation.js +166 -0
  167. package/packages/core/build/artifact/contracts.js +168 -0
  168. package/packages/core/build/artifact/coordinates.js +113 -0
  169. package/packages/core/build/artifact/credential-transport.js +68 -0
  170. package/packages/core/build/artifact/expectations.js +94 -0
  171. package/packages/core/build/artifact/files.js +14 -0
  172. package/packages/core/build/artifact/naming.js +65 -0
  173. package/packages/core/build/artifact/services.js +17 -0
  174. package/packages/core/build/artifact/store.js +119 -0
  175. package/packages/core/build/artifact/summary.js +20 -0
  176. package/packages/core/build/artifact/transfer-policy.js +34 -0
  177. package/packages/core/build/artifact/transport.js +112 -0
  178. package/packages/core/build/artifact/upload.js +178 -0
  179. package/packages/core/build/artifact-coordinate-action.js +46 -0
  180. package/packages/core/build/artifact-coordinate.js +58 -0
  181. package/packages/core/build/artifact-integrity.js +10 -0
  182. package/packages/core/build/artifact-passport.js +842 -0
  183. package/packages/core/build/artifact-verification-envelope.js +500 -0
  184. package/packages/core/build/binary/actions.js +77 -0
  185. package/packages/core/build/binary/checksums.js +33 -0
  186. package/packages/core/build/binary/distribution.js +271 -0
  187. package/packages/core/build/binary-publication-dispatch.js +49 -0
  188. package/packages/core/build/build-facts.js +518 -0
  189. package/packages/core/build/cache/compiler-evidence.js +287 -0
  190. package/packages/core/build/cli/cache.mjs +77 -0
  191. package/packages/core/build/cli/facts.mjs +120 -0
  192. package/packages/core/build/cli/homebrew.mjs +101 -0
  193. package/packages/core/build/cli/lifecycle.mjs +66 -0
  194. package/packages/core/build/commands/aggregate-build-summary.mjs +75 -0
  195. package/packages/core/build/commands/anchored-version-material.mjs +42 -0
  196. package/packages/core/build/commands/artifact-signing-controller.mjs +112 -0
  197. package/packages/core/build/commands/artifact-signing-delegation.mjs +34 -0
  198. package/packages/core/build/commands/auditable-demo-platform.mjs +77 -0
  199. package/packages/core/build/commands/auditable-demo-transport-smoke.mjs +24 -0
  200. package/packages/core/build/commands/auditable-demo.mjs +63 -0
  201. package/packages/core/build/commands/compiler-cache-evidence.mjs +39 -0
  202. package/packages/core/build/commands/dispatch-artifact-signing-authority.mjs +19 -0
  203. package/packages/core/build/commands/import-artifact-signing-results.mjs +10 -0
  204. package/packages/core/build/commands/lifecycle-substage-evidence.mjs +42 -0
  205. package/packages/core/build/commands/resolve-artifact-coordinates.mjs +58 -0
  206. package/packages/core/build/commands/resolve-artifact-transfer-mode.mjs +54 -0
  207. package/packages/core/build/commands/resolve-build-configuration.mjs +23 -0
  208. package/packages/core/build/commands/resolve-build-contract.mjs +94 -0
  209. package/packages/core/build/commands/run-candidate-body-prefix-renderer.mjs +24 -0
  210. package/packages/core/build/commands/run-lifecycle.mjs +56 -0
  211. package/packages/core/build/commands/seal-artifact-signing-requests.mjs +10 -0
  212. package/packages/core/build/commands/seal-macos-credential-input.mjs +4 -0
  213. package/packages/core/build/commands/shifu-gate-profile.mjs +43 -0
  214. package/packages/core/build/commands/source-verification-evidence.mjs +14 -0
  215. package/packages/core/build/commands/stage-capsule-qualification.mjs +79 -0
  216. package/packages/core/build/commands/validate-package-manager-contract.mjs +24 -0
  217. package/packages/core/build/credential/seal-input.js +109 -0
  218. package/packages/core/build/demo/action-context.js +25 -0
  219. package/packages/core/build/demo/adapter-actions.js +35 -0
  220. package/packages/core/build/demo/adapter-transactions.js +66 -0
  221. package/packages/core/build/demo/adapter.js +272 -0
  222. package/packages/core/build/demo/binary-action.js +29 -0
  223. package/packages/core/build/demo/bundle-verification.js +211 -0
  224. package/packages/core/build/demo/capture-adaptation.js +37 -0
  225. package/packages/core/build/demo/capture.js +377 -0
  226. package/packages/core/build/demo/collection-actions.js +62 -0
  227. package/packages/core/build/demo/collection-containers.js +136 -0
  228. package/packages/core/build/demo/collection-context.js +40 -0
  229. package/packages/core/build/demo/collection.js +129 -0
  230. package/packages/core/build/demo/composition.js +319 -0
  231. package/packages/core/build/demo/container.js +113 -0
  232. package/packages/core/build/demo/gate.js +297 -0
  233. package/packages/core/build/demo/inspection-worker.js +4 -0
  234. package/packages/core/build/demo/io.js +220 -0
  235. package/packages/core/build/demo/materialization.js +350 -0
  236. package/packages/core/build/demo/media-bundle.js +112 -0
  237. package/packages/core/build/demo/media-inspection.js +332 -0
  238. package/packages/core/build/demo/media-profile.js +399 -0
  239. package/packages/core/build/demo/media-qualification-action.js +37 -0
  240. package/packages/core/build/demo/media-qualification.js +117 -0
  241. package/packages/core/build/demo/presentation.js +222 -0
  242. package/packages/core/build/demo/publication.js +118 -0
  243. package/packages/core/build/demo/renderer-evidence.js +193 -0
  244. package/packages/core/build/demo/renditions.js +398 -0
  245. package/packages/core/build/demo/scenario.js +493 -0
  246. package/packages/core/build/demo/schema.js +278 -0
  247. package/packages/core/build/demo/transport-smoke.js +149 -0
  248. package/packages/core/build/demo/values.js +137 -0
  249. package/packages/core/build/environment/action.js +17 -0
  250. package/packages/core/build/environment/provision.js +121 -0
  251. package/packages/core/build/gate/actions.js +99 -0
  252. package/packages/core/build/gate/aggregate.js +21 -0
  253. package/packages/core/build/gate/commands.js +66 -0
  254. package/packages/core/build/gate/controller.js +43 -0
  255. package/packages/core/build/gate/environment.js +18 -0
  256. package/packages/core/build/gate/execution.js +88 -0
  257. package/packages/core/build/gate/files.js +46 -0
  258. package/packages/core/build/gate/outputs.js +31 -0
  259. package/packages/core/build/gate/plan.js +61 -0
  260. package/packages/core/build/github-artifact-attestation.js +642 -0
  261. package/packages/core/build/github-attestation/action.js +26 -0
  262. package/packages/core/build/github-attestation/admission.js +34 -0
  263. package/packages/core/build/github-attestation/transaction.js +83 -0
  264. package/packages/core/build/homebrew.js +416 -0
  265. package/packages/core/build/lifecycle/action.js +65 -0
  266. package/packages/core/build/lifecycle/artifacts.js +123 -0
  267. package/packages/core/build/lifecycle/context.js +202 -0
  268. package/packages/core/build/lifecycle/diagnostics.js +254 -0
  269. package/packages/core/build/lifecycle/errors.js +44 -0
  270. package/packages/core/build/lifecycle/execution.js +221 -0
  271. package/packages/core/build/lifecycle/files.js +61 -0
  272. package/packages/core/build/lifecycle/manifest.js +107 -0
  273. package/packages/core/build/lifecycle/sampling.js +209 -0
  274. package/packages/core/build/lifecycle/stage-action.js +18 -0
  275. package/packages/core/build/lifecycle/stage.js +143 -0
  276. package/packages/core/build/lifecycle/substage-evidence.js +232 -0
  277. package/packages/core/build/lifecycle/transaction.js +13 -0
  278. package/packages/core/build/macos-credential-island/action.js +704 -0
  279. package/packages/core/build/macos-credential-island/cleanup.js +48 -0
  280. package/packages/core/build/macos-credential-island/dmg-assembly.js +443 -0
  281. package/packages/core/build/macos-credential-island/lib.js +816 -0
  282. package/packages/core/build/package-manager.js +315 -0
  283. package/packages/core/build/plan/action-context.js +30 -0
  284. package/packages/core/build/plan/action.js +79 -0
  285. package/packages/core/build/plan/admission.js +93 -0
  286. package/packages/core/build/plan/configuration.js +196 -0
  287. package/packages/core/build/plan/environment.js +18 -0
  288. package/packages/core/build/plan/identity.js +49 -0
  289. package/packages/core/build/plan/lifecycle.js +38 -0
  290. package/packages/core/build/plan/matrices.js +58 -0
  291. package/packages/core/build/plan/resolve.js +76 -0
  292. package/packages/core/build/plan/runners.js +48 -0
  293. package/packages/core/build/plan/source.js +58 -0
  294. package/packages/core/build/plan/stage-order.js +10 -0
  295. package/packages/core/build/plan/values.js +10 -0
  296. package/packages/core/build/platform-stage-checkpoints.js +471 -0
  297. package/packages/core/build/release-evidence-bundle.js +156 -0
  298. package/packages/core/build/runner/matrix.js +266 -0
  299. package/packages/core/build/runner/presets.js +115 -0
  300. package/packages/core/build/signing/actions.js +54 -0
  301. package/packages/core/build/signing/authority-actions.js +147 -0
  302. package/packages/core/build/signing/authority-transaction.js +82 -0
  303. package/packages/core/build/signing/control.js +223 -0
  304. package/packages/core/build/signing/controller-transaction.js +110 -0
  305. package/packages/core/build/signing/credential-transaction.js +66 -0
  306. package/packages/core/build/signing/delegation.js +281 -0
  307. package/packages/core/build/signing/detached.js +170 -0
  308. package/packages/core/build/signing/dispatch.js +307 -0
  309. package/packages/core/build/signing/environment.js +13 -0
  310. package/packages/core/build/signing/files.js +53 -0
  311. package/packages/core/build/signing/import-results.js +151 -0
  312. package/packages/core/build/signing/intake.js +113 -0
  313. package/packages/core/build/signing/materialize.js +54 -0
  314. package/packages/core/build/signing/merge-results.js +82 -0
  315. package/packages/core/build/signing/native-result.js +244 -0
  316. package/packages/core/build/signing/prepare.js +44 -0
  317. package/packages/core/build/signing/request.js +519 -0
  318. package/packages/core/build/signing/seal-requests.js +402 -0
  319. package/packages/core/build/signing/transaction.js +158 -0
  320. package/packages/core/build/signing/verify-results.js +118 -0
  321. package/packages/core/build/source/checkout-action.js +16 -0
  322. package/packages/core/build/source/controller-actions.js +52 -0
  323. package/packages/core/build/source/controller.js +182 -0
  324. package/packages/core/build/source/lifecycle-action.js +32 -0
  325. package/packages/core/build/source/lifecycle.js +134 -0
  326. package/packages/core/build/source/proof-actions.js +57 -0
  327. package/packages/core/build/source/proof-lookup.js +82 -0
  328. package/packages/core/build/source/proof.js +134 -0
  329. package/packages/core/build/source-admission.js +35 -0
  330. package/packages/core/build/stage-capsule/actions.js +53 -0
  331. package/packages/core/build/stage-capsule/campaign/aggregate.js +51 -0
  332. package/packages/core/build/stage-capsule/campaign/context.js +51 -0
  333. package/packages/core/build/stage-capsule/campaign/resume.js +240 -0
  334. package/packages/core/build/stage-capsule/campaign/run.js +47 -0
  335. package/packages/core/build/stage-capsule/campaign/seed.js +124 -0
  336. package/packages/core/build/stage-capsule/campaign/worker.js +17 -0
  337. package/packages/core/build/stage-capsule/canary.js +62 -0
  338. package/packages/core/build/stage-capsule/rehearsal/checkpoint.js +110 -0
  339. package/packages/core/build/stage-capsule/rehearsal/files.js +36 -0
  340. package/packages/core/build/stage-capsule/rehearsal/macos-tail.js +104 -0
  341. package/packages/core/build/stage-capsule/rehearsal/resume.js +38 -0
  342. package/packages/core/build/stage-capsule/rehearsal/run.js +46 -0
  343. package/packages/core/build/stage-capsule/rehearsal/verify.js +56 -0
  344. package/packages/core/build/stage-capsule/rehearsal/worker.js +11 -0
  345. package/packages/core/build/stage-capsule-local-store.js +428 -0
  346. package/packages/core/build/stage-capsule-qualification-campaign.js +511 -0
  347. package/packages/core/build/stage-capsule-qualification.js +455 -0
  348. package/packages/core/build/stage-capsule-resume-planner.js +397 -0
  349. package/packages/core/build/stage-capsule-store.js +404 -0
  350. package/packages/core/build/stage-capsule.js +319 -0
  351. package/packages/core/build/standalone/build.js +266 -0
  352. package/packages/core/build/standalone/bundle.js +69 -0
  353. package/packages/core/build/standalone/identity.js +47 -0
  354. package/packages/core/build/standalone/logging.js +72 -0
  355. package/packages/core/build/standalone/process.js +50 -0
  356. package/packages/core/build/summary/action.js +33 -0
  357. package/packages/core/build/summary/aggregation.js +120 -0
  358. package/packages/core/build/summary/artifacts.js +165 -0
  359. package/packages/core/build/summary/controller-receipt.js +50 -0
  360. package/packages/core/build/summary/execution.js +39 -0
  361. package/packages/core/build/summary/finalization.js +133 -0
  362. package/packages/core/build/summary/payloads.js +80 -0
  363. package/packages/core/build/validate-config/action.js +58 -0
  364. package/packages/core/build/validate-config/lib.js +42 -0
  365. package/packages/core/build/verification/actions.js +54 -0
  366. package/packages/core/build/verification/discovery.js +115 -0
  367. package/packages/core/build/verification/identity.js +123 -0
  368. package/packages/core/build/verification/proof.js +8 -0
  369. package/packages/core/build/verification/repository.js +4 -0
  370. package/packages/core/build/verification/runner.js +69 -0
  371. package/packages/core/build/verification/source.js +169 -0
  372. package/packages/core/consumer/buildchain-config.js +1825 -0
  373. package/packages/core/consumer/channel-selection.js +211 -0
  374. package/packages/core/consumer/cli/infrastructure.mjs +6 -0
  375. package/packages/core/consumer/commands/buildchain-channel-router.mjs +81 -0
  376. package/packages/core/consumer/commands/consumer-policy.mjs +229 -0
  377. package/packages/core/consumer/floating-consumer-evidence.js +341 -0
  378. package/packages/core/consumer/floating-consumer-policy.js +596 -0
  379. package/packages/core/consumer/invocation-selector.js +4 -0
  380. package/packages/core/consumer/policy-admission.js +103 -0
  381. package/packages/core/consumer/policy-scan.js +33 -0
  382. package/packages/core/consumer/runtime-selector-persistence.js +291 -0
  383. package/packages/core/consumer/workflow-definition-authority.js +64 -0
  384. package/packages/core/contracts/action-inventory.js +78 -0
  385. package/packages/core/contracts/action-taxonomy.js +46 -0
  386. package/packages/core/contracts/buildchain-contract.js +1038 -0
  387. package/packages/core/contracts/canonical-contracts.js +239 -0
  388. package/packages/core/contracts/cli/context.mjs +28 -0
  389. package/packages/core/contracts/cli/introspection.mjs +47 -0
  390. package/packages/core/contracts/cli/options.mjs +85 -0
  391. package/packages/core/contracts/cli-reference.js +192 -0
  392. package/packages/core/contracts/commands/buildchain-contract-lock.mjs +120 -0
  393. package/packages/core/contracts/commands/workflow-call-contract.mjs +133 -0
  394. package/packages/core/contracts/public-surface-audit.js +274 -0
  395. package/packages/core/contracts/public-surface-cli.js +134 -0
  396. package/packages/core/contracts/runtime-contract-action.js +48 -0
  397. package/packages/core/contracts/runtime-contract-inspection.js +115 -0
  398. package/packages/core/contracts/structured-values.js +29 -0
  399. package/packages/core/contracts/workflow-yaml-contract.js +373 -0
  400. package/packages/core/dev-delivery/admission/gh-cli-client.js +110 -0
  401. package/packages/core/dev-delivery/admission/github-client.js +274 -0
  402. package/packages/core/dev-delivery/admission/policy.js +177 -0
  403. package/packages/core/dev-delivery/admission/queue.js +554 -0
  404. package/packages/core/dev-delivery/admission/readiness.js +222 -0
  405. package/packages/core/dev-delivery/admission/report.js +27 -0
  406. package/packages/core/dev-delivery/admission/request.js +34 -0
  407. package/packages/core/dev-delivery/admission/targeted.js +375 -0
  408. package/packages/core/dev-delivery/admission/transaction.js +47 -0
  409. package/packages/core/dev-delivery/buildchain-delivery-bootstrap.js +240 -0
  410. package/packages/core/dev-delivery/buildchain-delivery-infrastructure.js +164 -0
  411. package/packages/core/dev-delivery/buildchain-delivery-self-dogfood.js +395 -0
  412. package/packages/core/dev-delivery/candidate/admission-actions.js +34 -0
  413. package/packages/core/dev-delivery/candidate/admission.js +172 -0
  414. package/packages/core/dev-delivery/candidate/coordinates.js +46 -0
  415. package/packages/core/dev-delivery/candidate/evidence.js +20 -0
  416. package/packages/core/dev-delivery/candidate/request.js +39 -0
  417. package/packages/core/dev-delivery/candidate/reservation-action.js +21 -0
  418. package/packages/core/dev-delivery/candidate/reservation.js +98 -0
  419. package/packages/core/dev-delivery/candidate/source-paths.js +102 -0
  420. package/packages/core/dev-delivery/candidate/submission.js +41 -0
  421. package/packages/core/dev-delivery/cli/dispatch.mjs +54 -0
  422. package/packages/core/dev-delivery/commands/dev-delivery-authority-command-adapters.mjs +193 -0
  423. package/packages/core/dev-delivery/commands/dev-delivery-authority-provider.mjs +28 -0
  424. package/packages/core/dev-delivery/commands/dev-delivery-authority.mjs +454 -0
  425. package/packages/core/dev-delivery/commands/dev-delivery-process-boundary.mjs +93 -0
  426. package/packages/core/dev-delivery/commands/dev-delivery-proof.mjs +258 -0
  427. package/packages/core/dev-delivery/commands/dev-delivery-provider-heartbeat.mjs +76 -0
  428. package/packages/core/dev-delivery/commands/dev-delivery-request.sh +160 -0
  429. package/packages/core/dev-delivery/commands/dev-delivery-source-proof-reuse.mjs +128 -0
  430. package/packages/core/dev-delivery/commands/dev-delivery-two-phase.mjs +180 -0
  431. package/packages/core/dev-delivery/commands/dev-delivery-warrant-options.mjs +283 -0
  432. package/packages/core/dev-delivery/commands/dev-delivery-warrant.mjs +65 -0
  433. package/packages/core/dev-delivery/commands/dev-merge-queue.mjs +98 -0
  434. package/packages/core/dev-delivery/commands/dev-pr-auto-merge.mjs +111 -0
  435. package/packages/core/dev-delivery/commands/dev-pr-delivery-warrant.mjs +467 -0
  436. package/packages/core/dev-delivery/commands/dev-pr-prequeue-guard.mjs +381 -0
  437. package/packages/core/dev-delivery/commands/dev-qualification-patrol.mjs +21 -0
  438. package/packages/core/dev-delivery/delivery-warrant-fixture-runner.js +375 -0
  439. package/packages/core/dev-delivery/delivery-warrant-read-candidate.js +281 -0
  440. package/packages/core/dev-delivery/delivery-warrant-semantic-diff-gate.js +351 -0
  441. package/packages/core/dev-delivery/delivery-warrant-shadow-adapter.js +444 -0
  442. package/packages/core/dev-delivery/dev-delivery-authority-candidate.js +197 -0
  443. package/packages/core/dev-delivery/dev-delivery-authority-landing.js +459 -0
  444. package/packages/core/dev-delivery/dev-delivery-authority-state.js +424 -0
  445. package/packages/core/dev-delivery/dev-delivery-candidate-identity.js +152 -0
  446. package/packages/core/dev-delivery/dev-delivery-contract-surface.js +74 -0
  447. package/packages/core/dev-delivery/dev-delivery-native-proof.js +509 -0
  448. package/packages/core/dev-delivery/dev-delivery-proof.js +282 -0
  449. package/packages/core/dev-delivery/dev-delivery-warrant-native-requirements.js +7 -0
  450. package/packages/core/dev-delivery/dev-delivery-warrant-state.js +580 -0
  451. package/packages/core/dev-delivery/dev-delivery-warrant.js +588 -0
  452. package/packages/core/dev-delivery/merge-queue-policy.js +543 -0
  453. package/packages/core/dev-delivery/native/action-context.js +59 -0
  454. package/packages/core/dev-delivery/native/actions.js +74 -0
  455. package/packages/core/dev-delivery/native/attempt.js +93 -0
  456. package/packages/core/dev-delivery/native/candidate.js +101 -0
  457. package/packages/core/dev-delivery/native/context-record.js +26 -0
  458. package/packages/core/dev-delivery/native/execution.js +176 -0
  459. package/packages/core/dev-delivery/native/failure.js +105 -0
  460. package/packages/core/dev-delivery/native/files.js +11 -0
  461. package/packages/core/dev-delivery/native/finalizer-admission.js +93 -0
  462. package/packages/core/dev-delivery/native/heartbeat-action.js +29 -0
  463. package/packages/core/dev-delivery/native/heartbeat.js +137 -0
  464. package/packages/core/dev-delivery/native/provider-boundary.js +71 -0
  465. package/packages/core/dev-delivery/native/qualification.js +228 -0
  466. package/packages/core/dev-delivery/native/readback.js +32 -0
  467. package/packages/core/dev-delivery/native/reuse.js +60 -0
  468. package/packages/core/dev-delivery/native/seal-action.js +19 -0
  469. package/packages/core/dev-delivery/native/transactions.js +156 -0
  470. package/packages/core/dev-delivery/native/transfer.js +122 -0
  471. package/packages/core/dev-delivery/published-delivery-authority.js +266 -0
  472. package/packages/core/dev-delivery/qualification/action.js +60 -0
  473. package/packages/core/dev-delivery/qualification/controller.js +218 -0
  474. package/packages/core/dev-delivery/qualification/github-client.js +108 -0
  475. package/packages/core/dev-delivery/qualification/model.js +186 -0
  476. package/packages/core/dev-delivery/qualification/report.js +25 -0
  477. package/packages/core/dev-delivery/queue/completion.js +52 -0
  478. package/packages/core/dev-delivery/queue/landing-action.js +60 -0
  479. package/packages/core/dev-delivery/queue/reconciliation-action.js +45 -0
  480. package/packages/core/dev-delivery/source-proof/evidence.js +92 -0
  481. package/packages/core/dev-delivery/source-proof/io.js +97 -0
  482. package/packages/core/dev-delivery/source-proof/predicates.js +88 -0
  483. package/packages/core/dev-delivery/source-proof/replay.js +143 -0
  484. package/packages/core/dev-delivery/source-proof/reuse.js +116 -0
  485. package/packages/core/dev-delivery/source-proof/seal.js +32 -0
  486. package/packages/core/dev-delivery/warrant/actions.js +78 -0
  487. package/packages/core/dev-delivery/warrant/cancellation.js +49 -0
  488. package/packages/core/dev-delivery/warrant/failure-settlement.js +93 -0
  489. package/packages/core/dev-delivery/warrant/handoff.js +107 -0
  490. package/packages/core/dev-delivery/warrant/observation.js +59 -0
  491. package/packages/core/dev-delivery/warrant/persistence.js +109 -0
  492. package/packages/core/dev-delivery/warrant/reservation-readback.js +72 -0
  493. package/packages/core/dev-delivery/warrant/service.js +134 -0
  494. package/packages/core/dev-delivery/warrant/terminal-policy.js +53 -0
  495. package/packages/core/dev-delivery/warrant/terminal.js +89 -0
  496. package/packages/core/dev-delivery/warrant/transitions.js +222 -0
  497. package/packages/core/dev-delivery/warrant/values.js +102 -0
  498. package/packages/core/governance/alpha-candidate/action.js +96 -0
  499. package/packages/core/governance/alpha-candidate/controller.js +490 -0
  500. package/packages/core/governance/alpha-candidate/lifecycle.js +121 -0
  501. package/packages/core/governance/alpha-candidate/options.js +60 -0
  502. package/packages/core/governance/alpha-candidate/outputs.js +23 -0
  503. package/packages/core/governance/alpha-candidate/provider.js +192 -0
  504. package/packages/core/governance/alpha-candidate/report.js +56 -0
  505. package/packages/core/governance/alpha-candidate/state.js +184 -0
  506. package/packages/core/governance/alpha-candidate/values.js +90 -0
  507. package/packages/core/governance/architecture-graph.js +24 -0
  508. package/packages/core/governance/audit/actions.js +57 -0
  509. package/packages/core/governance/audit/collection.js +259 -0
  510. package/packages/core/governance/audit/github-reader.js +204 -0
  511. package/packages/core/governance/audit/identity.js +86 -0
  512. package/packages/core/governance/audit/incident.mjs +39 -0
  513. package/packages/core/governance/audit/transactions.js +75 -0
  514. package/packages/core/governance/buildchain-compatibility-authority.js +335 -0
  515. package/packages/core/governance/buildchain-compatibility-fact.js +386 -0
  516. package/packages/core/governance/buildchain-compatibility-facts.json +18 -0
  517. package/packages/core/governance/buildchain-compatibility-proof.js +523 -0
  518. package/packages/core/governance/buildchain-publication-authority.js +117 -0
  519. package/packages/core/governance/candidate/body-action.js +18 -0
  520. package/packages/core/governance/candidate/body-renderer.js +160 -0
  521. package/packages/core/governance/ci-lane-change-budget.js +260 -0
  522. package/packages/core/governance/cli/compatibility-facts.mjs +101 -0
  523. package/packages/core/governance/cli/dispatch.mjs +19 -0
  524. package/packages/core/governance/cli/doctor.mjs +144 -0
  525. package/packages/core/governance/commands/architecture.mjs +594 -0
  526. package/packages/core/governance/commands/audit-github-governance.mjs +43 -0
  527. package/packages/core/governance/commands/audit-publication-control-plane.mjs +26 -0
  528. package/packages/core/governance/commands/buildchain-patrol.mjs +32 -0
  529. package/packages/core/governance/commands/create-github-artifact-attestation-policy.mjs +62 -0
  530. package/packages/core/governance/commands/engineering-housekeeper-workflow.mjs +23 -0
  531. package/packages/core/governance/commands/reconcile-github-governance.mjs +689 -0
  532. package/packages/core/governance/commands/reconcile-release-governance.mjs +77 -0
  533. package/packages/core/governance/commands/workflow-friction-report.mjs +375 -0
  534. package/packages/core/governance/github-governance-authority.js +1367 -0
  535. package/packages/core/governance/housekeeping/action.js +45 -0
  536. package/packages/core/governance/housekeeping/execution.js +75 -0
  537. package/packages/core/governance/housekeeping/options.js +103 -0
  538. package/packages/core/governance/housekeeping/report.js +53 -0
  539. package/packages/core/governance/housekeeping/transactions.js +96 -0
  540. package/packages/core/governance/patrol/action.js +41 -0
  541. package/packages/core/governance/patrol/controller.js +125 -0
  542. package/packages/core/governance/patrol/options.js +121 -0
  543. package/packages/core/governance/patrol/report.js +53 -0
  544. package/packages/core/governance/patrol/transaction.js +30 -0
  545. package/packages/core/governance/publication/audit.js +26 -0
  546. package/packages/core/governance/publication/collection.js +396 -0
  547. package/packages/core/governance/publication/policy-values.js +227 -0
  548. package/packages/core/governance/publication/source-authorization.js +293 -0
  549. package/packages/core/governance/receipt-admission-action.js +12 -0
  550. package/packages/core/governance/receipt-admission.js +34 -0
  551. package/packages/core/governance/release-check-policy.js +179 -0
  552. package/packages/core/governance/release-reconciliation-action.js +25 -0
  553. package/packages/core/governance/release-reconciliation.js +122 -0
  554. package/packages/core/governance/report-issue/action.js +201 -0
  555. package/packages/core/index.js +85 -117
  556. package/packages/core/observability/cli/candidate.mjs +42 -0
  557. package/packages/core/observability/cli/context.mjs +47 -0
  558. package/packages/core/observability/cli/diagnostics.mjs +88 -0
  559. package/packages/core/observability/cli/events.mjs +126 -0
  560. package/packages/core/observability/cli/process-sample.mjs +71 -0
  561. package/packages/core/observability/commands/aggregate-diagnostics-summary.mjs +45 -0
  562. package/packages/core/observability/commands/controller-evidence.mjs +109 -0
  563. package/packages/core/observability/commands/observed-evidence.mjs +27 -0
  564. package/packages/core/observability/controller/identity-action.js +11 -0
  565. package/packages/core/observability/controller/identity.js +32 -0
  566. package/packages/core/observability/controller-actions.js +63 -0
  567. package/packages/core/observability/controller-evidence-io.js +112 -0
  568. package/packages/core/observability/controller-evidence.js +555 -0
  569. package/packages/core/observability/controller-input-boundary.js +47 -0
  570. package/packages/core/observability/diagnostics/aggregate.js +25 -0
  571. package/packages/core/observability/diagnostics.js +1904 -0
  572. package/packages/core/observability/evidence/actions.js +20 -0
  573. package/packages/core/observability/evidence/bundle.js +163 -0
  574. package/packages/core/observability/evidence/publication.js +360 -0
  575. package/packages/core/observability/evidence/transactions.js +62 -0
  576. package/packages/core/observability/process/sampling.js +128 -0
  577. package/packages/core/observability/publisher-admission.js +26 -0
  578. package/packages/core/observability/transaction-journal.js +40 -0
  579. package/packages/core/paper/cli/dispatch.mjs +17 -0
  580. package/packages/core/paper/commands/paper-agent-cli.mjs +35 -0
  581. package/packages/core/paper/commands/paper-work-fleet-cli.mjs +577 -0
  582. package/packages/core/paper/commands/paper.mjs +632 -0
  583. package/packages/core/paper/operations/bootstrap.js +73 -0
  584. package/packages/core/paper/operations/files.js +48 -0
  585. package/packages/core/paper/operations/github-observation.js +136 -0
  586. package/packages/core/paper/operations/identity.js +59 -0
  587. package/packages/core/paper/operations/npm-observation.js +118 -0
  588. package/packages/core/paper/operations/plans.js +213 -0
  589. package/packages/core/paper/operations/preflight-checks.js +269 -0
  590. package/packages/core/paper/operations/provisioning-validation.js +155 -0
  591. package/packages/core/paper/operations/provisioning.js +113 -0
  592. package/packages/core/paper/operations/runtime-observation.js +25 -0
  593. package/packages/core/paper/operations/runtime.js +84 -0
  594. package/packages/core/paper/operations/scaffold-config.js +77 -0
  595. package/packages/core/paper/operations/scaffold-workflows.js +99 -0
  596. package/packages/core/paper/operations/scaffold.js +370 -0
  597. package/packages/core/paper/operations/status-facts.js +264 -0
  598. package/packages/core/paper/operations/status.js +353 -0
  599. package/packages/core/paper/operations/toolchain-observation.js +49 -0
  600. package/packages/core/paper/operations/workspace.js +60 -0
  601. package/packages/core/paper/paper-agent-entry.js +396 -0
  602. package/packages/core/paper/paper-fleet.js +310 -0
  603. package/packages/core/paper/paper-npm-bootstrap.js +492 -0
  604. package/packages/core/paper/paper-repository.js +214 -0
  605. package/packages/core/paper/paper-runtime-channels.js +344 -0
  606. package/packages/core/paper/paper-scaffold-content.js +574 -0
  607. package/packages/core/paper/paper.js +308 -0
  608. package/packages/core/paper/publication/actions.js +109 -0
  609. package/packages/core/paper/publication/candidate.js +140 -0
  610. package/packages/core/paper/publication/controller.js +117 -0
  611. package/packages/core/paper/publication/envelope.js +118 -0
  612. package/packages/core/paper/publication/propagation.js +135 -0
  613. package/packages/core/paper/publication/readback.js +89 -0
  614. package/packages/core/paper/publication/target.js +54 -0
  615. package/packages/core/paper/publication-controller.js +144 -0
  616. package/packages/core/providers/artifact-relay/files.js +71 -0
  617. package/packages/core/providers/artifact-relay/s3-client.js +259 -0
  618. package/packages/core/providers/artifact-relay/transactions.js +258 -0
  619. package/packages/core/providers/commands/artifact-relay-s3.mjs +62 -0
  620. package/packages/core/providers/commands/aws-codebuild-toolchain.mjs +15 -0
  621. package/packages/core/providers/commands/aws-macos-jit-controller-runtime.mjs +82 -0
  622. package/packages/core/providers/commands/aws-runner-burst-core.mjs +249 -0
  623. package/packages/core/providers/commands/aws-runner-burst.mjs +80 -0
  624. package/packages/core/providers/commands/aws-windows-jit-campaign.mjs +202 -0
  625. package/packages/core/providers/commands/aws-windows-jit-controller.mjs +578 -0
  626. package/packages/core/providers/commands/aws-windows-jit-operator.sh +506 -0
  627. package/packages/core/providers/commands/infra-contract-core.mjs +1032 -0
  628. package/packages/core/providers/commands/infra-contract.mjs +345 -0
  629. package/packages/core/providers/commands/locked-source-checkout.mjs +9 -0
  630. package/packages/core/providers/commands/route-offline-runners.mjs +30 -0
  631. package/packages/core/providers/demo/capture-worker.py +541 -0
  632. package/packages/core/providers/dev-delivery/candidate.js +112 -0
  633. package/packages/core/providers/dev-delivery/protection.js +29 -0
  634. package/packages/core/providers/dev-delivery/store.js +292 -0
  635. package/packages/core/providers/git/fetch-process.js +27 -0
  636. package/packages/core/providers/git/fetch-worker.js +146 -0
  637. package/packages/core/providers/git/patch-root.js +54 -0
  638. package/packages/core/providers/git-ref-readback.mjs +22 -0
  639. package/packages/core/providers/github/artifact-attestation.js +32 -0
  640. package/packages/core/providers/github/commits.js +32 -0
  641. package/packages/core/providers/github/json-client.js +65 -0
  642. package/packages/core/providers/github/product-publication.js +44 -0
  643. package/packages/core/providers/github/publication-control-plane.js +116 -0
  644. package/packages/core/providers/github/pull-requests.js +24 -0
  645. package/packages/core/providers/github/qualification.js +181 -0
  646. package/packages/core/providers/github/release-assets.js +91 -0
  647. package/packages/core/providers/github/signing-request.js +81 -0
  648. package/packages/core/providers/github/source-lock.js +98 -0
  649. package/packages/core/providers/github-cli-api.js +35 -0
  650. package/packages/core/providers/github-issue-comment.js +83 -0
  651. package/packages/core/providers/github-permission.js +11 -0
  652. package/packages/core/providers/github-token.js +121 -0
  653. package/packages/core/providers/process/sample-worker.mjs +14 -0
  654. package/packages/core/providers/runner/observation.js +30 -0
  655. package/packages/core/providers/runner/offline-routing.js +205 -0
  656. package/packages/core/providers/signing/detached-key.js +20 -0
  657. package/packages/core/providers/signing/macos/compound-archive.py +434 -0
  658. package/packages/core/providers/signing/macos/sign-request.sh +145 -0
  659. package/packages/core/providers/signing/native.js +77 -0
  660. package/packages/core/providers/signing/windows/sign-request.ps1 +48 -0
  661. package/packages/core/providers/source-checkout/action.js +31 -0
  662. package/packages/core/providers/source-checkout/auth.js +32 -0
  663. package/packages/core/providers/source-checkout/fetch.js +135 -0
  664. package/packages/core/providers/source-checkout/git.js +220 -0
  665. package/packages/core/providers/source-checkout/transaction.js +360 -0
  666. package/packages/core/providers/source-checkout/values.js +115 -0
  667. package/packages/core/providers/source-checkout/workspace.js +50 -0
  668. package/packages/core/providers/sync-git/action.mjs +16 -0
  669. package/packages/core/providers/sync-git/transfer.mjs +86 -0
  670. package/packages/core/providers/toolchain/codebuild-policy.js +36 -0
  671. package/packages/core/providers/toolchain/codebuild.js +220 -0
  672. package/packages/core/publication/authority/actions.js +156 -0
  673. package/packages/core/publication/authority/admission.js +113 -0
  674. package/packages/core/publication/authority/assembly.js +77 -0
  675. package/packages/core/publication/authority/binary-evidence.js +77 -0
  676. package/packages/core/publication/authority/candidate-evidence.js +42 -0
  677. package/packages/core/publication/authority/consumer-gate.js +80 -0
  678. package/packages/core/publication/authority/control-plane.js +38 -0
  679. package/packages/core/publication/authority/evidence.js +113 -0
  680. package/packages/core/publication/authority/gate.js +39 -0
  681. package/packages/core/publication/authority/governance.js +61 -0
  682. package/packages/core/publication/authority/paper-evidence.js +24 -0
  683. package/packages/core/publication/authority/request.js +13 -0
  684. package/packages/core/publication/authority/result.js +37 -0
  685. package/packages/core/publication/authority/runner.js +26 -0
  686. package/packages/core/publication/authority/seal.js +97 -0
  687. package/packages/core/publication/authority/verification-evidence.js +80 -0
  688. package/packages/core/publication/authority/verification.js +94 -0
  689. package/packages/core/publication/binary/action.js +33 -0
  690. package/packages/core/publication/binary/capability.js +55 -0
  691. package/packages/core/publication/binary/evidence.js +109 -0
  692. package/packages/core/publication/binary/transaction.js +38 -0
  693. package/packages/core/publication/candidate/artifact.js +71 -0
  694. package/packages/core/publication/candidate/collection-action.js +24 -0
  695. package/packages/core/publication/candidate/collection.js +70 -0
  696. package/packages/core/publication/candidate/kind.js +93 -0
  697. package/packages/core/publication/candidate/manifest.js +35 -0
  698. package/packages/core/publication/candidate/package-binding.js +42 -0
  699. package/packages/core/publication/candidate/package.js +50 -0
  700. package/packages/core/publication/candidate/paper-package.js +120 -0
  701. package/packages/core/publication/candidate/passport.js +36 -0
  702. package/packages/core/publication/candidate/qualification-action.js +41 -0
  703. package/packages/core/publication/candidate/qualification.js +56 -0
  704. package/packages/core/publication/candidate/registry-hydration.js +204 -0
  705. package/packages/core/publication/candidate/reproducibility.js +29 -0
  706. package/packages/core/publication/candidate/sealing.js +184 -0
  707. package/packages/core/publication/candidate/stage-capsules.js +205 -0
  708. package/packages/core/publication/candidate/toolchain.js +80 -0
  709. package/packages/core/publication/cli/dispatch.mjs +107 -0
  710. package/packages/core/publication/commands/create-release-bundle.mjs +32 -0
  711. package/packages/core/publication/commands/generate-release-candidate-passport.mjs +80 -0
  712. package/packages/core/publication/commands/installer-publication.mjs +45 -0
  713. package/packages/core/publication/commands/npm-publish-dry-run.mjs +48 -0
  714. package/packages/core/publication/commands/npm-publish-transaction.mjs +55 -0
  715. package/packages/core/publication/commands/publication-artifact-candidate.mjs +48 -0
  716. package/packages/core/publication/commands/publication-artifact.mjs +67 -0
  717. package/packages/core/publication/commands/publication-package.mjs +38 -0
  718. package/packages/core/publication/commands/publication-registry-hydrate.mjs +19 -0
  719. package/packages/core/publication/commands/publication-reproducibility.mjs +62 -0
  720. package/packages/core/publication/installer/evidence.js +319 -0
  721. package/packages/core/publication/npm/environment.js +18 -0
  722. package/packages/core/publication/npm/evidence.js +57 -0
  723. package/packages/core/publication/npm/pack-preview.js +22 -0
  724. package/packages/core/publication/npm/package-plan.js +82 -0
  725. package/packages/core/publication/npm/package.js +120 -0
  726. package/packages/core/publication/npm/preview-action.js +30 -0
  727. package/packages/core/publication/npm/preview.js +92 -0
  728. package/packages/core/publication/npm/registry.js +61 -0
  729. package/packages/core/publication/npm/transaction.js +115 -0
  730. package/packages/core/publication/oci/preview-actions.js +48 -0
  731. package/packages/core/publication/oci/preview-admission.js +93 -0
  732. package/packages/core/publication/oci/preview-promotion.js +64 -0
  733. package/packages/core/publication/oci/preview-registry.js +36 -0
  734. package/packages/core/publication/oci/preview-transaction.js +42 -0
  735. package/packages/core/publication/oci/preview-values.js +8 -0
  736. package/packages/core/publication/oci-compose-qualification.js +143 -0
  737. package/packages/core/publication/oci-publication-bundle.js +281 -0
  738. package/packages/core/publication/publication-artifact-candidate.js +128 -0
  739. package/packages/core/publication/publication-artifact.js +641 -0
  740. package/packages/core/publication/publication-authority.js +1163 -0
  741. package/packages/core/publication/publication-development.js +72 -0
  742. package/packages/core/publication/publication-package.js +252 -0
  743. package/packages/core/publication/publication-rehearsal-capsule.js +468 -0
  744. package/packages/core/publication/publication-rehearsal-projection.js +104 -0
  745. package/packages/core/publication/publication-rehearsal-runtime.js +190 -0
  746. package/packages/core/publication/publication-rehearsal.js +481 -0
  747. package/packages/core/publication/publication-reproducibility.js +947 -0
  748. package/packages/core/publication/settlement/actions.js +63 -0
  749. package/packages/core/publication/settlement/transaction.js +197 -0
  750. package/packages/core/release/binary/coordinates-action.js +25 -0
  751. package/packages/core/release/binary/coordinates.js +76 -0
  752. package/packages/core/release/candidate/download.js +64 -0
  753. package/packages/core/release/candidate/lineage.js +72 -0
  754. package/packages/core/release/candidate/materialize.js +155 -0
  755. package/packages/core/release/candidate/payloads.js +330 -0
  756. package/packages/core/release/candidate/publication-intent.js +89 -0
  757. package/packages/core/release/candidate/resolve.js +132 -0
  758. package/packages/core/release/candidate/run-selection.js +88 -0
  759. package/packages/core/release/candidate/selection.js +181 -0
  760. package/packages/core/release/candidate/transport.js +143 -0
  761. package/packages/core/release/cli/command-handlers.mjs +14 -0
  762. package/packages/core/release/cli/dispatch.mjs +39 -0
  763. package/packages/core/release/cli/inspection-handlers.mjs +178 -0
  764. package/packages/core/release/cli/release-handlers.mjs +332 -0
  765. package/packages/core/release/cli/trust-release.mjs +19 -0
  766. package/packages/core/release/cli/verification-handlers.mjs +303 -0
  767. package/packages/core/release/commands/dev-alpha-candidate-patrol.mjs +42 -0
  768. package/packages/core/release/commands/ensure-github-release.mjs +199 -0
  769. package/packages/core/release/commands/next-development-review.mjs +77 -0
  770. package/packages/core/release/commands/next-development-transition.mjs +47 -0
  771. package/packages/core/release/commands/promotion-channel-router.mjs +62 -0
  772. package/packages/core/release/commands/promotion-identity-resolver.mjs +77 -0
  773. package/packages/core/release/commands/publish-source-ref-resolver.mjs +113 -0
  774. package/packages/core/release/commands/release-candidate-resolver.mjs +122 -0
  775. package/packages/core/release/commands/release-line-dry-run.mjs +53 -0
  776. package/packages/core/release/commands/release-propagation.mjs +411 -0
  777. package/packages/core/release/commands/release-tail.mjs +169 -0
  778. package/packages/core/release/commands/release-transaction.mjs +212 -0
  779. package/packages/core/release/commands/resolve-publish-gate.mjs +34 -0
  780. package/packages/core/release/commands/resolve-publish-source.mjs +96 -0
  781. package/packages/core/release/commands/resume-from-candidate-run.mjs +107 -0
  782. package/packages/core/release/commands/stable-candidate-patrol.mjs +31 -0
  783. package/packages/core/release/commands/stable-candidate-qualification.mjs +24 -0
  784. package/packages/core/release/commands/stable-release-gate.mjs +351 -0
  785. package/packages/core/release/commands/tail-reseal.mjs +148 -0
  786. package/packages/core/release/commands/verify-promotion-router-binding.sh +36 -0
  787. package/packages/core/release/commands/verify-publish-channel-ref.mjs +83 -0
  788. package/packages/core/release/commands/verify-publish-source-lock.mjs +37 -0
  789. package/packages/core/release/commands/verify-release-pr.mjs +6 -0
  790. package/packages/core/release/commands/verify-version-state-delta.mjs +21 -0
  791. package/packages/core/release/github-provider-plane.js +319 -0
  792. package/packages/core/release/github-release.js +385 -0
  793. package/packages/core/release/line/action.js +49 -0
  794. package/packages/core/release/line/governance.js +96 -0
  795. package/packages/core/release/line/plan.js +56 -0
  796. package/packages/core/release/line/policy.js +320 -0
  797. package/packages/core/release/line/protection.js +35 -0
  798. package/packages/core/release/line/request.js +22 -0
  799. package/packages/core/release/line/source.js +79 -0
  800. package/packages/core/release/line/transaction.js +33 -0
  801. package/packages/core/release/line/verification-action.js +13 -0
  802. package/packages/core/release/line/verification.js +13 -0
  803. package/packages/core/release/next-development/actions.js +122 -0
  804. package/packages/core/release/next-development/approval.js +59 -0
  805. package/packages/core/release/next-development/enqueue.js +51 -0
  806. package/packages/core/release/next-development/finalization.js +127 -0
  807. package/packages/core/release/next-development/observation.js +41 -0
  808. package/packages/core/release/next-development/review-policy.js +56 -0
  809. package/packages/core/release/next-development/verification.js +89 -0
  810. package/packages/core/release/next-development-projection.js +310 -0
  811. package/packages/core/release/next-development-transition.js +737 -0
  812. package/packages/core/release/partial-mutation-recovery-qualification.js +18 -0
  813. package/packages/core/release/passport/artifact-index.js +65 -0
  814. package/packages/core/release/passport/assembly-artifacts.js +43 -0
  815. package/packages/core/release/passport/assembly-inputs.js +107 -0
  816. package/packages/core/release/passport/assembly-material.js +261 -0
  817. package/packages/core/release/passport/assembly-render.js +320 -0
  818. package/packages/core/release/passport/assembly.js +12 -0
  819. package/packages/core/release/passport/assets.js +46 -0
  820. package/packages/core/release/passport/attachments.js +88 -0
  821. package/packages/core/release/passport/authoritative-base.js +123 -0
  822. package/packages/core/release/passport/build.js +39 -0
  823. package/packages/core/release/passport/collection-inputs.js +383 -0
  824. package/packages/core/release/passport/collection-material.js +199 -0
  825. package/packages/core/release/passport/collection-options.js +97 -0
  826. package/packages/core/release/passport/collection-output.js +303 -0
  827. package/packages/core/release/passport/collection.js +10 -0
  828. package/packages/core/release/passport/commands.js +44 -0
  829. package/packages/core/release/passport/consumer-input.js +18 -0
  830. package/packages/core/release/passport/consumer-validation.js +83 -0
  831. package/packages/core/release/passport/discovery.js +36 -0
  832. package/packages/core/release/passport/documents.js +116 -0
  833. package/packages/core/release/passport/evidence-validation.js +280 -0
  834. package/packages/core/release/passport/files.js +43 -0
  835. package/packages/core/release/passport/fixture.js +19 -0
  836. package/packages/core/release/passport/identity.js +46 -0
  837. package/packages/core/release/passport/impact-validation.js +230 -0
  838. package/packages/core/release/passport/impact.js +149 -0
  839. package/packages/core/release/passport/inputs.js +55 -0
  840. package/packages/core/release/passport/invariants.js +93 -0
  841. package/packages/core/release/passport/issues.js +29 -0
  842. package/packages/core/release/passport/json.js +16 -0
  843. package/packages/core/release/passport/locations.js +82 -0
  844. package/packages/core/release/passport/packages.js +123 -0
  845. package/packages/core/release/passport/publish-validation.js +279 -0
  846. package/packages/core/release/passport/publish.js +58 -0
  847. package/packages/core/release/passport/report.js +154 -0
  848. package/packages/core/release/passport/state-validation.js +163 -0
  849. package/packages/core/release/passport/transaction.js +69 -0
  850. package/packages/core/release/passport/trust-claims.js +365 -0
  851. package/packages/core/release/passport/trust-validation.js +528 -0
  852. package/packages/core/release/product-publication.js +59 -0
  853. package/packages/core/release/promote-candidate/action.js +9 -0
  854. package/packages/core/release/promote-candidate/development-source.js +39 -0
  855. package/packages/core/release/promote-candidate/evidence-binding.js +142 -0
  856. package/packages/core/release/promote-candidate/evidence-inputs.js +99 -0
  857. package/packages/core/release/promote-candidate/files.js +10 -0
  858. package/packages/core/release/promote-candidate/next-development-provider.js +300 -0
  859. package/packages/core/release/promote-candidate/next-development-queue.js +63 -0
  860. package/packages/core/release/promote-candidate/oci-provider.js +241 -0
  861. package/packages/core/release/promote-candidate/oci-registry-client.js +67 -0
  862. package/packages/core/release/promote-candidate/outputs.js +29 -0
  863. package/packages/core/release/promote-candidate/product-finalization-wait.js +52 -0
  864. package/packages/core/release/promote-candidate/product-provider-adapters.js +462 -0
  865. package/packages/core/release/promote-candidate/product-provider-github-adapters.js +595 -0
  866. package/packages/core/release/promote-candidate/product-provider.js +188 -0
  867. package/packages/core/release/promote-candidate/provider-request.js +51 -0
  868. package/packages/core/release/promote-candidate/provider-settlement.js +83 -0
  869. package/packages/core/release/promote-candidate/publication-completion.js +56 -0
  870. package/packages/core/release/promote-candidate/release-documents.js +156 -0
  871. package/packages/core/release/promote-candidate/transaction.js +130 -0
  872. package/packages/core/release/promote-ref/action-environment.js +2 -0
  873. package/packages/core/release/promote-ref/action-inputs.js +285 -0
  874. package/packages/core/release/promote-ref/action-outputs.js +140 -0
  875. package/packages/core/release/promote-ref/action-request.js +205 -0
  876. package/packages/core/release/promote-ref/action.js +92 -0
  877. package/packages/core/release/promote-ref/internal/branch-protection.js +218 -0
  878. package/packages/core/release/promote-ref/internal/candidate-admission.js +149 -0
  879. package/packages/core/release/promote-ref/internal/channel-governance.js +297 -0
  880. package/packages/core/release/promote-ref/internal/channel-resume.js +198 -0
  881. package/packages/core/release/promote-ref/internal/channel-tags.js +207 -0
  882. package/packages/core/release/promote-ref/internal/contained-published-version-state.js +80 -0
  883. package/packages/core/release/promote-ref/internal/durable-transaction-operations.js +463 -0
  884. package/packages/core/release/promote-ref/internal/durable-transaction-store.js +395 -0
  885. package/packages/core/release/promote-ref/internal/generated-branch.js +16 -0
  886. package/packages/core/release/promote-ref/internal/generated-identity.js +12 -0
  887. package/packages/core/release/promote-ref/internal/generated-ref.js +93 -0
  888. package/packages/core/release/promote-ref/internal/github-adapter.js +312 -0
  889. package/packages/core/release/promote-ref/internal/npm-distribution.js +185 -0
  890. package/packages/core/release/promote-ref/internal/npm-existing-evidence.js +61 -0
  891. package/packages/core/release/promote-ref/internal/passport-files.js +116 -0
  892. package/packages/core/release/promote-ref/internal/passport-generation.js +567 -0
  893. package/packages/core/release/promote-ref/internal/promote-alpha-channel.js +588 -0
  894. package/packages/core/release/promote-ref/internal/promote-major-channel.js +476 -0
  895. package/packages/core/release/promote-ref/internal/promote-release-channel.js +573 -0
  896. package/packages/core/release/promote-ref/internal/promotion-operations.js +1170 -0
  897. package/packages/core/release/promote-ref/internal/promotion-options.js +101 -0
  898. package/packages/core/release/promote-ref/internal/promotion-policy.js +218 -0
  899. package/packages/core/release/promote-ref/internal/publish-command.js +211 -0
  900. package/packages/core/release/promote-ref/internal/publish-contract.js +181 -0
  901. package/packages/core/release/promote-ref/internal/publish-transaction.js +510 -0
  902. package/packages/core/release/promote-ref/internal/tag-selection.js +159 -0
  903. package/packages/core/release/promote-ref/internal/transaction-context.js +506 -0
  904. package/packages/core/release/promote-ref/internal/transaction-recovery.js +379 -0
  905. package/packages/core/release/promote-ref/internal/version-state-operations.js +545 -0
  906. package/packages/core/release/promote-ref/lib.js +600 -0
  907. package/packages/core/release/promote-ref/release-tail.js +102 -0
  908. package/packages/core/release/promote-ref/source-lock.js +91 -0
  909. package/packages/core/release/promotion/actions.js +133 -0
  910. package/packages/core/release/promotion/admission.js +52 -0
  911. package/packages/core/release/promotion/candidate.js +71 -0
  912. package/packages/core/release/promotion/channel.js +104 -0
  913. package/packages/core/release/promotion/identities.js +56 -0
  914. package/packages/core/release/promotion/product-state.js +68 -0
  915. package/packages/core/release/promotion/publish-gate.js +128 -0
  916. package/packages/core/release/promotion/qualification-action.js +72 -0
  917. package/packages/core/release/promotion/qualification.js +95 -0
  918. package/packages/core/release/promotion/routing.js +94 -0
  919. package/packages/core/release/promotion/selection.js +55 -0
  920. package/packages/core/release/promotion/source-intent.js +35 -0
  921. package/packages/core/release/promotion-request.js +148 -0
  922. package/packages/core/release/propagation/actions.js +75 -0
  923. package/packages/core/release/propagation/delivery.js +202 -0
  924. package/packages/core/release/propagation/planning.js +197 -0
  925. package/packages/core/release/propagation/report.js +97 -0
  926. package/packages/core/release/propagation/store.js +26 -0
  927. package/packages/core/release/propagation/transactions.js +213 -0
  928. package/packages/core/release/propagation/work.js +146 -0
  929. package/packages/core/release/protected-publication-source.js +91 -0
  930. package/packages/core/release/provider-operation-journal.js +62 -0
  931. package/packages/core/release/provider-readback-idempotency.js +309 -0
  932. package/packages/core/release/qualification/actions.js +51 -0
  933. package/packages/core/release/qualification/campaign.js +154 -0
  934. package/packages/core/release/qualification/options.js +102 -0
  935. package/packages/core/release/qualification/public-build.js +109 -0
  936. package/packages/core/release/recovery/artifacts.js +161 -0
  937. package/packages/core/release/recovery/candidate.js +529 -0
  938. package/packages/core/release/recovery/capsules.js +102 -0
  939. package/packages/core/release/recovery/download.js +191 -0
  940. package/packages/core/release/recovery/files.js +39 -0
  941. package/packages/core/release/recovery/provenance.js +199 -0
  942. package/packages/core/release/recovery/publication.js +193 -0
  943. package/packages/core/release/recovery/readback.js +169 -0
  944. package/packages/core/release/recovery/runtime.js +224 -0
  945. package/packages/core/release/recovery/transactions.js +139 -0
  946. package/packages/core/release/release-activation-shadow.js +32 -0
  947. package/packages/core/release/release-blocker-priority.js +183 -0
  948. package/packages/core/release/release-candidate-recovery.js +595 -0
  949. package/packages/core/release/release-candidate.js +591 -0
  950. package/packages/core/release/release-invocation.js +64 -0
  951. package/packages/core/release/release-line-bootstrap.js +292 -0
  952. package/packages/core/release/release-line-dry-run.js +302 -0
  953. package/packages/core/release/release-passport-contract.js +479 -0
  954. package/packages/core/release/release-passport.js +74 -0
  955. package/packages/core/release/release-tail-provider-adapters.js +460 -0
  956. package/packages/core/release/release-tail-provider-plane.js +248 -0
  957. package/packages/core/release/reseal/actions.js +84 -0
  958. package/packages/core/release/reseal/admission.js +75 -0
  959. package/packages/core/release/reseal/files.js +39 -0
  960. package/packages/core/release/reseal/finalize-platform.js +65 -0
  961. package/packages/core/release/reseal/outputs.js +21 -0
  962. package/packages/core/release/reseal/plan.js +24 -0
  963. package/packages/core/release/reseal/platform.js +135 -0
  964. package/packages/core/release/reseal/readbacks.js +36 -0
  965. package/packages/core/release/reseal/seal.js +125 -0
  966. package/packages/core/release/reuse-complete-release.js +240 -0
  967. package/packages/core/release/runtime-override-authorization.js +242 -0
  968. package/packages/core/release/settle/action.js +412 -0
  969. package/packages/core/release/source/channel.js +45 -0
  970. package/packages/core/release/source/coordinates.js +160 -0
  971. package/packages/core/release/source/lineage.js +144 -0
  972. package/packages/core/release/source/manifest.js +114 -0
  973. package/packages/core/release/stable-patrol/action.js +87 -0
  974. package/packages/core/release/stable-patrol/controller.js +346 -0
  975. package/packages/core/release/stable-patrol/coordinates.js +16 -0
  976. package/packages/core/release/stable-patrol/github-client.js +181 -0
  977. package/packages/core/release/stable-patrol/options.js +87 -0
  978. package/packages/core/release/stable-patrol/report.js +28 -0
  979. package/packages/core/release/stable-publication-fence.js +28 -0
  980. package/packages/core/release/tail-reseal-github.js +175 -0
  981. package/packages/core/release/tail-reseal-receipt.js +228 -0
  982. package/packages/core/release/tail-reseal.js +594 -0
  983. package/packages/core/release/version-state/verification.js +164 -0
  984. package/packages/core/release/version-state.js +458 -0
  985. package/packages/core/runtime/action-host.js +19 -0
  986. package/packages/core/runtime/action-process.mjs +23 -0
  987. package/packages/core/runtime/buildchain-domain.wasm +0 -0
  988. package/packages/core/runtime/checkout-identity.js +27 -0
  989. package/packages/core/runtime/commands/bridge-bootstrap.mjs +147 -0
  990. package/packages/core/runtime/commands/host-adapter.mjs +185 -0
  991. package/packages/core/runtime/commands/runtime-ref-core.mjs +171 -0
  992. package/packages/core/runtime/consumer-shell.js +174 -0
  993. package/packages/core/runtime/domain-wasm-artifact.js +7 -0
  994. package/packages/core/runtime/installation-root.js +29 -0
  995. package/packages/core/runtime/locked-dependencies.js +74 -0
  996. package/packages/core/runtime/provider-closure.js +60 -0
  997. package/packages/core/runtime/runtime-selection-action.js +34 -0
  998. package/packages/core/runtime/runtime-selection.js +136 -0
  999. package/packages/core/runtime/toolchain/actions.js +14 -0
  1000. package/packages/core/runtime/toolchain/user-paths.js +9 -0
  1001. package/packages/core/runtime/toolchain/windows-rust.js +67 -0
  1002. package/packages/core/runtime/workflow-runtime.js +11 -0
  1003. package/packages/core/web/apply-admission-action.js +20 -0
  1004. package/packages/core/web/apply-admission.js +44 -0
  1005. package/packages/core/web/cli/badges.mjs +100 -0
  1006. package/packages/core/web/cli/surface.mjs +6 -0
  1007. package/packages/core/web/commands/web-surface-core.mjs +2603 -0
  1008. package/packages/core/web/commands/web-surface-production-release-pr.mjs +126 -0
  1009. package/packages/core/web/commands/web-surface.mjs +294 -0
  1010. package/packages/core/web/controller-actions.js +45 -0
  1011. package/packages/core/web/controller.js +145 -0
  1012. package/packages/core/web/deployment/apply-action.js +31 -0
  1013. package/packages/core/web/deployment/apply-evidence.js +134 -0
  1014. package/packages/core/web/deployment/apply.js +118 -0
  1015. package/packages/core/web/deployment/cloudfront-wait.js +88 -0
  1016. package/packages/core/web/deployment/plan-files.js +41 -0
  1017. package/packages/core/web/deployment/planning-action.js +28 -0
  1018. package/packages/core/web/deployment/planning.js +126 -0
  1019. package/packages/core/web/deployment/report-action.js +74 -0
  1020. package/packages/core/web/deployment/summary.js +44 -0
  1021. package/packages/core/web/preview-feedback-action.js +26 -0
  1022. package/packages/core/web/preview-feedback.js +40 -0
  1023. package/packages/core/web/production-decision-action.js +42 -0
  1024. package/packages/core/web/production-decision.js +85 -0
  1025. package/packages/core/web/production-intent-action.js +14 -0
  1026. package/packages/core/web/production-intent.js +167 -0
  1027. package/packages/core/web/publication-admission-action.js +92 -0
  1028. package/packages/core/web/publication-admission.js +183 -0
  1029. package/packages/core/web/publication-capability-action.js +22 -0
  1030. package/packages/core/web/publication-capability.js +73 -0
  1031. package/packages/core/web/readme-badges.js +891 -0
  1032. package/packages/core/web/release-feedback.js +414 -0
  1033. package/packages/core/web/release-pr-action.js +47 -0
  1034. package/packages/core/web/release-pr-handoff.js +176 -0
  1035. package/packages/core/web/release-pr-provider.js +295 -0
  1036. package/packages/core/web/release-pr-summary.js +42 -0
  1037. package/packages/core/web/release-pr-transaction.js +158 -0
  1038. package/packages/core/web/release-review-action.js +21 -0
  1039. package/packages/core/web/release-review.js +130 -0
  1040. package/packages/core/web/web-surface-publication-candidate.js +162 -0
  1041. package/packages/core/workflow/admission/actions.js +56 -0
  1042. package/packages/core/workflow/admission/recovery.js +47 -0
  1043. package/packages/core/workflow/admission/review.js +188 -0
  1044. package/packages/core/workflow/admission/transactions.js +60 -0
  1045. package/packages/core/workflow/cli/main.mjs +131 -0
  1046. package/packages/core/workflow/cli/process.mjs +16 -0
  1047. package/packages/core/workflow/commands/buildchain-cli-help.mjs +318 -0
  1048. package/packages/core/workflow/commands/universal-workflow-backflow.mjs +26 -0
  1049. package/packages/core/workflow/commands/universal-workflow-engine.mjs +73 -0
  1050. package/packages/core/workflow/dogfood/actions.js +62 -0
  1051. package/packages/core/workflow/dogfood/readiness.js +74 -0
  1052. package/packages/core/workflow/dogfood/transactions.js +90 -0
  1053. package/packages/core/workflow/engine/action.js +42 -0
  1054. package/packages/core/workflow/engine/conformance.js +93 -0
  1055. package/packages/core/workflow/engine/execution.js +77 -0
  1056. package/packages/core/workflow/engine/identity.js +34 -0
  1057. package/packages/core/workflow/engine/provider-context.js +16 -0
  1058. package/packages/core/workflow/engine/release-environment.js +57 -0
  1059. package/packages/core/workflow/engine/release-evidence.js +39 -0
  1060. package/packages/core/workflow/engine/release-observation.js +97 -0
  1061. package/packages/core/workflow/engine/release-promotion.js +227 -0
  1062. package/packages/core/workflow/event-trust.js +25 -0
  1063. package/packages/core/workflow/installation.js +33 -0
  1064. package/packages/core/workflow/request-rejection.js +3 -0
  1065. package/packages/core/workflow/settlement/actions.js +34 -0
  1066. package/packages/core/workflow/settlement/backflow.js +187 -0
  1067. package/packages/core/workflow/universal-self-dogfood.js +163 -0
  1068. package/packages/core/workflow/universal-workflow-bootstrap.js +586 -0
  1069. package/packages/core/workflow/workflow-taxonomy.mjs +351 -0
  1070. package/scripts/bridge-evidence.mjs +9 -2
  1071. package/scripts/build-domain-wasm.mjs +15 -3
  1072. package/scripts/build-standalone-binary.mjs +1 -375
  1073. package/scripts/check-action-bundles.mjs +14 -25
  1074. package/scripts/check-ci-lane-change-budget.mjs +3 -3
  1075. package/scripts/check-code-layout.mjs +386 -0
  1076. package/scripts/check-core-mechanism-inventory.mjs +17 -16
  1077. package/scripts/check-dev-delivery-actions.mjs +35 -0
  1078. package/scripts/check-floating-consumer-policy-contract.mjs +33 -59
  1079. package/scripts/check-implementation-naming.mjs +2 -23
  1080. package/scripts/check-internal-architecture.mjs +3 -3
  1081. package/scripts/check-inventory.mjs +160 -318
  1082. package/scripts/check-javascript-syntax.mjs +1 -1
  1083. package/scripts/check-maintainability.mjs +25 -21
  1084. package/scripts/check-project-cut-merge-queue-admission.mjs +1 -1
  1085. package/scripts/check-public-dogfood-contract.mjs +166 -43
  1086. package/scripts/check-release-tail-contract.mjs +62 -71
  1087. package/scripts/check-release-topology.mjs +101 -77
  1088. package/scripts/check-runtime-semantic-closure.mjs +5 -8
  1089. package/scripts/check-source-bindings.mjs +54 -0
  1090. package/scripts/check-universal-workflow-bootstrap.mjs +136 -124
  1091. package/scripts/check-workflow-taxonomy.mjs +1 -1
  1092. package/scripts/check-workflows.sh +11 -0
  1093. package/scripts/generate-bootstrap-admission.mjs +32 -0
  1094. package/scripts/generate-bootstrap-recovery.mjs +94 -0
  1095. package/scripts/generate-buildchain-kfd-witnesses.mjs +3 -3
  1096. package/scripts/generate-channel-promotion-workflow.mjs +39 -518
  1097. package/scripts/generate-next-development-guidance.mjs +1 -1
  1098. package/scripts/generate-public-reference.mjs +2 -2
  1099. package/scripts/generate-site-bundle.mjs +42 -43
  1100. package/scripts/generate-tail-reseal-fixture.mjs +108 -0
  1101. package/scripts/generate-workflow-taxonomy.mjs +2 -2
  1102. package/scripts/inventory/binary.mjs +36 -0
  1103. package/scripts/inventory/promotion.mjs +72 -0
  1104. package/scripts/maintainability-domain-metrics.mjs +1 -1
  1105. package/scripts/maintainability-metrics.mjs +37 -37
  1106. package/scripts/maintainability-public-surface.mjs +19 -95
  1107. package/scripts/next-development-self-dogfood-harness.mjs +2 -2
  1108. package/scripts/next-development-self-dogfood.mjs +2 -2
  1109. package/scripts/platform-stage-checkpoint-rehearsal.mjs +33 -201
  1110. package/scripts/public-reference.mjs +0 -187
  1111. package/scripts/publication-rehearsal-fixture.mjs +1 -1
  1112. package/scripts/release-train-self-dogfood.mjs +9 -14
  1113. package/scripts/site-action-audit.mjs +16 -0
  1114. package/scripts/site-capability-metadata.mjs +3 -7
  1115. package/scripts/source-metric-lineage.mjs +17 -0
  1116. package/scripts/stage-capsule-resume-rehearsal.mjs +19 -55
  1117. package/scripts/tail-reseal-macos-rehearsal.mjs +1 -109
  1118. package/scripts/tsup-action.config.mjs +21 -0
  1119. package/scripts/verify-golden-path.mjs +1 -1
  1120. package/scripts/warrant-shadow-plan.mjs +49 -243
  1121. package/scripts/workflow-action-graph.mjs +149 -0
  1122. package/templates/bootstrap-recovery/actions/build/source/admit/action.yml +17 -0
  1123. package/templates/bootstrap-recovery/actions/build/source/admit/dist/index.js +63 -0
  1124. package/templates/bootstrap-recovery/actions/runtime/dependencies/install/action.yml +18 -0
  1125. package/templates/bootstrap-recovery/actions/runtime/dependencies/install/dist/index.js +63 -0
  1126. package/templates/bootstrap-recovery/actions/runtime/environment/prepare/action.yml +21 -0
  1127. package/templates/bootstrap-recovery/actions/workflow/admission/inspect/action.yml +27 -0
  1128. package/templates/bootstrap-recovery/actions/workflow/admission/inspect/dist/index.js +64 -0
  1129. package/templates/bootstrap-recovery/actions/workflow/admission/review/action.yml +15 -0
  1130. package/templates/bootstrap-recovery/actions/workflow/admission/review/dist/index.js +65 -0
  1131. package/templates/bootstrap-recovery/actions/workflow/recovery/admit/action.yml +47 -0
  1132. package/templates/bootstrap-recovery/actions/workflow/recovery/execute/action.yml +48 -0
  1133. package/templates/bootstrap-recovery/actions/workflow/recovery/settle/action.yml +54 -0
  1134. package/templates/bootstrap-recovery/actions/workflow/settlement/seal/action.yml +17 -0
  1135. package/templates/bootstrap-recovery/actions/workflow/settlement/seal/dist/index.js +65 -0
  1136. package/templates/bootstrap-recovery/manifest.json +68 -0
  1137. package/templates/bootstrap-recovery/package.json +9 -0
  1138. package/templates/native-dev-delivery.yml +28 -41
  1139. package/templates/universal-buildchain-bootstrap-recovery.yml +46 -213
  1140. package/templates/universal-buildchain-bootstrap.yml +1 -1
  1141. package/actions/github-artifact-attestation/README.md +0 -10
  1142. package/actions/promote-buildchain-ref/README.md +0 -549
  1143. package/actions/report-buildchain-issue/README.md +0 -107
  1144. package/actions/run-lifecycle/README.md +0 -71
  1145. package/actions/validate-config/README.md +0 -52
  1146. package/architecture/implementation-naming.json +0 -1273
  1147. package/bin/internal/adopter-delivery-cli.mjs +0 -70
  1148. package/bin/internal/cli-options.mjs +0 -79
  1149. package/bin/internal/compatibility-facts-cli.mjs +0 -101
  1150. package/bin/internal/trust-release-cli.mjs +0 -19
  1151. package/bin/internal/trust-release-command-handlers.mjs +0 -14
  1152. package/bin/internal/trust-release-inspection-handlers.mjs +0 -175
  1153. package/bin/internal/trust-release-release-handlers.mjs +0 -332
  1154. package/bin/internal/trust-release-verification-handlers.mjs +0 -306
  1155. package/contracts/fixtures/v4-adopter-delivery-v1/archive-template.json +0 -19
  1156. package/contracts/fixtures/v4-adopter-delivery-v1/bootstrap-positive.json +0 -93
  1157. package/packages/compatibility/adopter-delivery.js +0 -16
  1158. package/packages/compatibility/cross-platform-adopter-qualification.js +0 -12
  1159. package/packages/compatibility/floating-consumer-policy.js +0 -14
  1160. package/packages/compatibility/publication-qualification.js +0 -11
  1161. package/packages/compatibility/publication-rehearsal.js +0 -18
  1162. package/packages/compatibility/runtime-ref-resume-authority.js +0 -13
  1163. package/packages/compatibility/tail-reseal-receipt.js +0 -7
  1164. package/packages/compatibility/tail-reseal.js +0 -11
  1165. package/packages/core/adopter-delivery-parity.js +0 -219
  1166. package/packages/core/adopter-delivery.js +0 -359
  1167. package/packages/core/anchored-version-material.js +0 -281
  1168. package/packages/core/artifact-passport.js +0 -847
  1169. package/packages/core/artifact-verification-envelope.js +0 -500
  1170. package/packages/core/build-facts.js +0 -575
  1171. package/packages/core/buildchain-compatibility-authority.js +0 -336
  1172. package/packages/core/buildchain-compatibility-fact.js +0 -394
  1173. package/packages/core/buildchain-compatibility-facts.json +0 -217
  1174. package/packages/core/buildchain-compatibility-proof.js +0 -566
  1175. package/packages/core/buildchain-config.js +0 -1887
  1176. package/packages/core/buildchain-contract.js +0 -1048
  1177. package/packages/core/buildchain-delivery-bootstrap.js +0 -240
  1178. package/packages/core/buildchain-delivery-infrastructure.js +0 -164
  1179. package/packages/core/buildchain-delivery-self-dogfood.js +0 -395
  1180. package/packages/core/buildchain-domain.wasm +0 -0
  1181. package/packages/core/buildchain-kfd-claims.js +0 -733
  1182. package/packages/core/buildchain-publication-authority.js +0 -118
  1183. package/packages/core/canonical-contracts.js +0 -239
  1184. package/packages/core/ci-lane-change-budget.js +0 -260
  1185. package/packages/core/controller-evidence.js +0 -553
  1186. package/packages/core/cross-platform-adopter-qualification.js +0 -343
  1187. package/packages/core/delivery-warrant-fixture-runner.js +0 -375
  1188. package/packages/core/delivery-warrant-read-candidate.js +0 -286
  1189. package/packages/core/delivery-warrant-semantic-diff-gate.js +0 -351
  1190. package/packages/core/delivery-warrant-shadow-adapter.js +0 -447
  1191. package/packages/core/dev-delivery-authority-candidate.js +0 -270
  1192. package/packages/core/dev-delivery-authority-landing.js +0 -461
  1193. package/packages/core/dev-delivery-authority-state.js +0 -583
  1194. package/packages/core/dev-delivery-candidate-identity.js +0 -169
  1195. package/packages/core/dev-delivery-contract-surface.js +0 -76
  1196. package/packages/core/dev-delivery-native-proof.js +0 -566
  1197. package/packages/core/dev-delivery-proof.js +0 -286
  1198. package/packages/core/dev-delivery-warrant-legacy-recovery.js +0 -248
  1199. package/packages/core/dev-delivery-warrant-native-compatibility.js +0 -33
  1200. package/packages/core/dev-delivery-warrant-state.js +0 -599
  1201. package/packages/core/dev-delivery-warrant.js +0 -598
  1202. package/packages/core/diagnostics.js +0 -1904
  1203. package/packages/core/domain-wasm-artifact.js +0 -7
  1204. package/packages/core/floating-consumer-evidence.js +0 -338
  1205. package/packages/core/floating-consumer-policy.js +0 -571
  1206. package/packages/core/github-artifact-attestation.js +0 -642
  1207. package/packages/core/github-governance-authority.js +0 -1369
  1208. package/packages/core/homebrew.js +0 -414
  1209. package/packages/core/kfd-agent-hub.js +0 -496
  1210. package/packages/core/kfd.js +0 -966
  1211. package/packages/core/kfd2-product-claims.js +0 -454
  1212. package/packages/core/kfd3-surface-register.js +0 -924
  1213. package/packages/core/legacy-kfd-adopter-driver.js +0 -167
  1214. package/packages/core/next-development-projection.js +0 -310
  1215. package/packages/core/next-development-transition.js +0 -737
  1216. package/packages/core/oci-compose-qualification.js +0 -143
  1217. package/packages/core/oci-publication-bundle.js +0 -281
  1218. package/packages/core/package-manager.js +0 -323
  1219. package/packages/core/paper-agent-entry.js +0 -396
  1220. package/packages/core/paper-fleet.js +0 -313
  1221. package/packages/core/paper-npm-bootstrap.js +0 -492
  1222. package/packages/core/paper-repository.js +0 -214
  1223. package/packages/core/paper-runtime-channels.js +0 -348
  1224. package/packages/core/paper-scaffold-content.js +0 -574
  1225. package/packages/core/paper.js +0 -2478
  1226. package/packages/core/partial-mutation-recovery-qualification.js +0 -18
  1227. package/packages/core/platform-stage-checkpoints.js +0 -471
  1228. package/packages/core/product-publication.js +0 -59
  1229. package/packages/core/protected-publication-source.js +0 -91
  1230. package/packages/core/provider-operation-journal.js +0 -62
  1231. package/packages/core/provider-readback-idempotency.js +0 -309
  1232. package/packages/core/public-export-compatibility.js +0 -33
  1233. package/packages/core/public-surface-audit.js +0 -273
  1234. package/packages/core/public-surface-cli.js +0 -128
  1235. package/packages/core/publication-artifact-candidate.js +0 -128
  1236. package/packages/core/publication-artifact.js +0 -641
  1237. package/packages/core/publication-authority.js +0 -1163
  1238. package/packages/core/publication-development.js +0 -72
  1239. package/packages/core/publication-package.js +0 -252
  1240. package/packages/core/publication-rehearsal-capsule.js +0 -468
  1241. package/packages/core/publication-rehearsal-projection.js +0 -104
  1242. package/packages/core/publication-rehearsal-runtime.js +0 -190
  1243. package/packages/core/publication-rehearsal.js +0 -481
  1244. package/packages/core/publication-reproducibility.js +0 -947
  1245. package/packages/core/published-delivery-authority.js +0 -266
  1246. package/packages/core/readme-badges.js +0 -893
  1247. package/packages/core/release-activation-shadow.js +0 -32
  1248. package/packages/core/release-blocker-priority.js +0 -192
  1249. package/packages/core/release-candidate-recovery.js +0 -595
  1250. package/packages/core/release-candidate.js +0 -591
  1251. package/packages/core/release-invocation.js +0 -64
  1252. package/packages/core/release-line-bootstrap.js +0 -297
  1253. package/packages/core/release-line-dry-run.js +0 -303
  1254. package/packages/core/release-passport-contract.js +0 -479
  1255. package/packages/core/release-passport.js +0 -2884
  1256. package/packages/core/release-tail-compatibility.js +0 -60
  1257. package/packages/core/release-tail-provider-adapters.js +0 -461
  1258. package/packages/core/release-tail-provider-plane.js +0 -248
  1259. package/packages/core/runtime-selector-persistence.js +0 -228
  1260. package/packages/core/stable-publication-fence.js +0 -28
  1261. package/packages/core/stage-capsule-local-store.js +0 -428
  1262. package/packages/core/stage-capsule-qualification-campaign.js +0 -511
  1263. package/packages/core/stage-capsule-qualification.js +0 -455
  1264. package/packages/core/stage-capsule-resume-planner.js +0 -397
  1265. package/packages/core/stage-capsule-store.js +0 -404
  1266. package/packages/core/stage-capsule.js +0 -319
  1267. package/packages/core/tail-reseal-github.js +0 -178
  1268. package/packages/core/tail-reseal-receipt.js +0 -225
  1269. package/packages/core/tail-reseal.js +0 -594
  1270. package/packages/core/universal-workflow-bootstrap.js +0 -586
  1271. package/packages/core/web-surface-publication-candidate.js +0 -162
  1272. package/packages/core/workflow-yaml-contract.js +0 -342
  1273. package/scripts/aggregate-build-summary.mjs +0 -187
  1274. package/scripts/aggregate-diagnostics-summary.mjs +0 -54
  1275. package/scripts/anchored-version-material.mjs +0 -42
  1276. package/scripts/architecture.mjs +0 -610
  1277. package/scripts/artifact-relay-s3.mjs +0 -539
  1278. package/scripts/artifact-signing-controller-core.mjs +0 -525
  1279. package/scripts/artifact-signing-controller.mjs +0 -302
  1280. package/scripts/artifact-signing-delegation.mjs +0 -316
  1281. package/scripts/assemble-binary-release-admission.mjs +0 -213
  1282. package/scripts/assemble-publication-artifact-admission.mjs +0 -200
  1283. package/scripts/assemble-self-publication-admission.mjs +0 -201
  1284. package/scripts/assemble-web-surface-publication-admission.mjs +0 -204
  1285. package/scripts/audit-github-governance.mjs +0 -493
  1286. package/scripts/audit-publication-control-plane.mjs +0 -527
  1287. package/scripts/auditable-demo-bundle-verification.mjs +0 -148
  1288. package/scripts/auditable-demo-platform.mjs +0 -600
  1289. package/scripts/auditable-demo-presentation.mjs +0 -83
  1290. package/scripts/auditable-demo-renditions.mjs +0 -399
  1291. package/scripts/auditable-demo-transport-smoke.mjs +0 -176
  1292. package/scripts/auditable-demo.mjs +0 -1324
  1293. package/scripts/aws-codebuild-toolchain.mjs +0 -285
  1294. package/scripts/aws-macos-jit-controller-runtime.mjs +0 -82
  1295. package/scripts/aws-runner-burst-core.mjs +0 -248
  1296. package/scripts/aws-runner-burst.mjs +0 -79
  1297. package/scripts/aws-windows-jit-campaign.mjs +0 -202
  1298. package/scripts/aws-windows-jit-controller.mjs +0 -578
  1299. package/scripts/binary-publication-evidence.mjs +0 -133
  1300. package/scripts/bridge-bootstrap.mjs +0 -137
  1301. package/scripts/build-contract-core.mjs +0 -1216
  1302. package/scripts/buildchain-channel-router.mjs +0 -249
  1303. package/scripts/buildchain-cli-help.mjs +0 -321
  1304. package/scripts/buildchain-contract-lock.mjs +0 -184
  1305. package/scripts/buildchain-patrol.mjs +0 -280
  1306. package/scripts/compiler-cache-evidence.mjs +0 -304
  1307. package/scripts/consumer-policy.mjs +0 -231
  1308. package/scripts/controller-evidence.mjs +0 -208
  1309. package/scripts/copy-domain-wasm.mjs +0 -14
  1310. package/scripts/create-github-artifact-attestation-policy.mjs +0 -62
  1311. package/scripts/create-release-bundle.mjs +0 -167
  1312. package/scripts/cross-platform-adopter-qualification.mjs +0 -228
  1313. package/scripts/declarative-promotion-admission.mjs +0 -45
  1314. package/scripts/dev-alpha-candidate-patrol.mjs +0 -1197
  1315. package/scripts/dev-delivery-authority-command-adapters.mjs +0 -206
  1316. package/scripts/dev-delivery-authority-provider.mjs +0 -28
  1317. package/scripts/dev-delivery-authority.mjs +0 -490
  1318. package/scripts/dev-delivery-native-run.mjs +0 -177
  1319. package/scripts/dev-delivery-process-boundary.mjs +0 -260
  1320. package/scripts/dev-delivery-proof.mjs +0 -258
  1321. package/scripts/dev-delivery-provider-heartbeat.mjs +0 -215
  1322. package/scripts/dev-delivery-source-proof-replay.mjs +0 -153
  1323. package/scripts/dev-delivery-source-proof-reuse.mjs +0 -548
  1324. package/scripts/dev-delivery-two-phase-resume.mjs +0 -345
  1325. package/scripts/dev-delivery-two-phase.mjs +0 -573
  1326. package/scripts/dev-delivery-warrant-options.mjs +0 -298
  1327. package/scripts/dev-delivery-warrant-store.mjs +0 -316
  1328. package/scripts/dev-delivery-warrant-transition.mjs +0 -109
  1329. package/scripts/dev-delivery-warrant.mjs +0 -559
  1330. package/scripts/dev-merge-queue.mjs +0 -536
  1331. package/scripts/dev-pr-auto-merge.mjs +0 -1222
  1332. package/scripts/dev-pr-delivery-warrant.mjs +0 -467
  1333. package/scripts/dev-pr-prequeue-guard.mjs +0 -381
  1334. package/scripts/dev-qualification-patrol.mjs +0 -594
  1335. package/scripts/dispatch-artifact-signing-authority.mjs +0 -407
  1336. package/scripts/engineering-housekeeper-workflow.mjs +0 -401
  1337. package/scripts/ensure-github-release.mjs +0 -199
  1338. package/scripts/finalize-native-artifact-signing-result.mjs +0 -272
  1339. package/scripts/generate-channel-build-workflow.mjs +0 -69
  1340. package/scripts/generate-release-candidate-passport.mjs +0 -285
  1341. package/scripts/generate-universal-workflow-facades.mjs +0 -499
  1342. package/scripts/git-fetch-process-tree.mjs +0 -175
  1343. package/scripts/host-adapter.mjs +0 -182
  1344. package/scripts/implementation-references.mjs +0 -25
  1345. package/scripts/import-artifact-signing-results.mjs +0 -135
  1346. package/scripts/infra-contract-core.mjs +0 -1032
  1347. package/scripts/infra-contract.mjs +0 -345
  1348. package/scripts/init-repo.mjs +0 -518
  1349. package/scripts/inspect-artifact-signing-requests.mjs +0 -157
  1350. package/scripts/installer-publication.mjs +0 -361
  1351. package/scripts/lifecycle-substage-evidence.mjs +0 -274
  1352. package/scripts/locked-source-checkout.mjs +0 -595
  1353. package/scripts/materialize-artifact-signing-request.mjs +0 -66
  1354. package/scripts/merge-artifact-signing-results.mjs +0 -76
  1355. package/scripts/next-development-review.mjs +0 -331
  1356. package/scripts/next-development-transition.mjs +0 -47
  1357. package/scripts/npm-publish-dry-run.mjs +0 -182
  1358. package/scripts/npm-publish-transaction.mjs +0 -331
  1359. package/scripts/observed-evidence.mjs +0 -311
  1360. package/scripts/oci-compose-preview.mjs +0 -261
  1361. package/scripts/paper-agent-cli.mjs +0 -35
  1362. package/scripts/paper-work-fleet-cli.mjs +0 -594
  1363. package/scripts/paper.mjs +0 -644
  1364. package/scripts/product-publication-intent.mjs +0 -129
  1365. package/scripts/promotion-channel-router.mjs +0 -139
  1366. package/scripts/promotion-identity-resolver.mjs +0 -129
  1367. package/scripts/publication-artifact-candidate.mjs +0 -122
  1368. package/scripts/publication-artifact.mjs +0 -67
  1369. package/scripts/publication-candidate-kind.mjs +0 -93
  1370. package/scripts/publication-candidate-sealer.mjs +0 -119
  1371. package/scripts/publication-package.mjs +0 -38
  1372. package/scripts/publication-registry-hydrate.mjs +0 -216
  1373. package/scripts/publication-reproducibility.mjs +0 -62
  1374. package/scripts/publication-settlement.mjs +0 -217
  1375. package/scripts/publish-source-ref-resolver.mjs +0 -113
  1376. package/scripts/reconcile-github-governance.mjs +0 -689
  1377. package/scripts/reconcile-release-governance.mjs +0 -368
  1378. package/scripts/release-asset-client.mjs +0 -91
  1379. package/scripts/release-candidate-adapter.mjs +0 -41
  1380. package/scripts/release-candidate-anchor-provenance.mjs +0 -99
  1381. package/scripts/release-candidate-resolver.mjs +0 -842
  1382. package/scripts/release-finalization-review.mjs +0 -53
  1383. package/scripts/release-line-dry-run.mjs +0 -53
  1384. package/scripts/release-line-policy.mjs +0 -231
  1385. package/scripts/release-propagation.mjs +0 -411
  1386. package/scripts/release-tail.mjs +0 -178
  1387. package/scripts/release-transaction.mjs +0 -212
  1388. package/scripts/resolve-artifact-coordinates.mjs +0 -174
  1389. package/scripts/resolve-artifact-transfer-mode.mjs +0 -126
  1390. package/scripts/resolve-build-configuration.mjs +0 -105
  1391. package/scripts/resolve-build-contract.mjs +0 -96
  1392. package/scripts/resolve-publish-gate.mjs +0 -33
  1393. package/scripts/resolve-publish-source.mjs +0 -99
  1394. package/scripts/resume-from-candidate-run.mjs +0 -1117
  1395. package/scripts/route-offline-runners.mjs +0 -237
  1396. package/scripts/run-candidate-body-prefix-renderer.mjs +0 -187
  1397. package/scripts/run-lifecycle-core.mjs +0 -850
  1398. package/scripts/run-lifecycle.mjs +0 -56
  1399. package/scripts/runtime-ref-core.mjs +0 -171
  1400. package/scripts/seal-artifact-signing-requests.mjs +0 -431
  1401. package/scripts/seal-macos-credential-input.mjs +0 -135
  1402. package/scripts/shifu-gate-profile.mjs +0 -374
  1403. package/scripts/sign-detached-artifact-requests.mjs +0 -237
  1404. package/scripts/source-verification-evidence.mjs +0 -344
  1405. package/scripts/stable-candidate-patrol.mjs +0 -527
  1406. package/scripts/stable-candidate-policy.mjs +0 -25
  1407. package/scripts/stable-candidate-qualification.mjs +0 -358
  1408. package/scripts/stable-release-gate.mjs +0 -351
  1409. package/scripts/stage-capsule-qualification.mjs +0 -528
  1410. package/scripts/tail-reseal.mjs +0 -416
  1411. package/scripts/universal-facade-maintainability.mjs +0 -91
  1412. package/scripts/universal-workflow-backflow.mjs +0 -212
  1413. package/scripts/universal-workflow-engine.mjs +0 -620
  1414. package/scripts/universal-workflow-self-dogfood.mjs +0 -212
  1415. package/scripts/validate-package-manager-contract.mjs +0 -24
  1416. package/scripts/verify-artifact-signing-results.mjs +0 -124
  1417. package/scripts/verify-publish-channel-ref.mjs +0 -125
  1418. package/scripts/verify-publish-source-lock.mjs +0 -37
  1419. package/scripts/verify-release-pr.mjs +0 -34
  1420. package/scripts/verify-version-state-delta.mjs +0 -175
  1421. package/scripts/verify-web-surface-publication-capability.mjs +0 -78
  1422. package/scripts/web-surface-core.mjs +0 -2603
  1423. package/scripts/web-surface-production-decision.mjs +0 -158
  1424. package/scripts/web-surface-production-release-pr.mjs +0 -712
  1425. package/scripts/web-surface-release-feedback.mjs +0 -358
  1426. package/scripts/web-surface-release-pr-review.mjs +0 -187
  1427. package/scripts/web-surface.mjs +0 -460
  1428. package/scripts/workflow-call-contract.mjs +0 -133
  1429. package/scripts/workflow-friction-report.mjs +0 -375
  1430. package/scripts/workflow-taxonomy.mjs +0 -507
  1431. /package/actions/{macos-credential-island → build/credential/macos-island}/README.md +0 -0
  1432. /package/actions/{release-candidate-promote → release/promotion/candidate}/README.md +0 -0
  1433. /package/actions/{release-tail → release/tail/settle}/README.md +0 -0
  1434. /package/packages/core/{adopter-delivery-gate.js → adoption/adopter-delivery-gate.js} +0 -0
  1435. /package/packages/core/{adopter-delivery-json.js → adoption/adopter-delivery-json.js} +0 -0
  1436. /package/packages/core/{adopter-delivery-passport.js → adoption/adopter-delivery-passport.js} +0 -0
  1437. /package/packages/core/{adopter-delivery-vectors.js → adoption/adopter-delivery-vectors.js} +0 -0
  1438. /package/packages/core/{adopter-delivery-vectors.json → adoption/adopter-delivery-vectors.json} +0 -0
  1439. /package/packages/core/{buildchain-agent-manuals.js → adoption/buildchain-agent-manuals.js} +0 -0
  1440. /package/packages/core/{kfd-adopter-category-driver.js → adoption/kfd-adopter-category-driver.js} +0 -0
  1441. /package/packages/core/{kfd-adopter-manifest.js → adoption/kfd-adopter-manifest.js} +0 -0
  1442. /package/packages/core/{kfd-gate.js → adoption/kfd-gate.js} +0 -0
  1443. /package/packages/core/{kfd-product-gates.js → adoption/kfd-product-gates.js} +0 -0
  1444. /package/packages/core/{artifact-signing-result.js → build/artifact-signing-result.js} +0 -0
  1445. /package/packages/core/{artifact-signing.js → build/artifact-signing.js} +0 -0
  1446. /package/packages/core/{build-configuration.js → build/build-configuration.js} +0 -0
  1447. /package/{scripts → packages/core/build/commands}/resolve-artifact-signing-upload-route.mjs +0 -0
  1448. /package/packages/core/{detached-artifact-signature.js → build/detached-artifact-signature.js} +0 -0
  1449. /package/{scripts/gate-profile-core.mjs → packages/core/build/gate/contracts.js} +0 -0
  1450. /package/packages/core/{portable-dev-cache.js → build/portable-dev-cache.js} +0 -0
  1451. /package/packages/core/{buildchain-channel-identity.js → consumer/buildchain-channel-identity.js} +0 -0
  1452. /package/packages/core/{floating-consumer-release-passport.js → consumer/floating-consumer-release-passport.js} +0 -0
  1453. /package/packages/core/{runtime-ref-resume-authority.js → consumer/runtime-ref-resume-authority.js} +0 -0
  1454. /package/packages/core/{buildchain-layout.js → contracts/buildchain-layout.js} +0 -0
  1455. /package/{bin/internal → packages/core/contracts}/command-registry.mjs +0 -0
  1456. /package/packages/core/{kungfu-temporal-fact.js → contracts/kungfu-temporal-fact.js} +0 -0
  1457. /package/packages/core/{surface-manifest.js → contracts/surface-manifest.js} +0 -0
  1458. /package/packages/core/{workflow-call-contract.js → contracts/workflow-call-contract.js} +0 -0
  1459. /package/{scripts → packages/core/dev-delivery/commands}/project-cut-merge-queue-admission.mjs +0 -0
  1460. /package/packages/core/{dev-delivery-authority-evidence.js → dev-delivery/dev-delivery-authority-evidence.js} +0 -0
  1461. /package/packages/core/{dev-delivery-authority-observation.js → dev-delivery/dev-delivery-authority-observation.js} +0 -0
  1462. /package/packages/core/{dev-delivery-authority-qualification.js → dev-delivery/dev-delivery-authority-qualification.js} +0 -0
  1463. /package/packages/core/{dev-delivery-authority-settlement.js → dev-delivery/dev-delivery-authority-settlement.js} +0 -0
  1464. /package/packages/core/{dev-delivery-common.js → dev-delivery/dev-delivery-common.js} +0 -0
  1465. /package/packages/core/{dev-delivery-execution-failure.js → dev-delivery/dev-delivery-execution-failure.js} +0 -0
  1466. /package/packages/core/{dev-delivery-execution-transfer.js → dev-delivery/dev-delivery-execution-transfer.js} +0 -0
  1467. /package/packages/core/{dev-delivery-landing-admission-core.js → dev-delivery/dev-delivery-landing-admission-core.js} +0 -0
  1468. /package/packages/core/{dev-delivery-landing-readback.js → dev-delivery/dev-delivery-landing-readback.js} +0 -0
  1469. /package/packages/core/{dev-delivery-landing-terminal-evidence.js → dev-delivery/dev-delivery-landing-terminal-evidence.js} +0 -0
  1470. /package/packages/core/{dev-delivery-landing-testing-port.js → dev-delivery/dev-delivery-landing-testing-port.js} +0 -0
  1471. /package/packages/core/{dev-delivery-native-execution.js → dev-delivery/dev-delivery-native-execution.js} +0 -0
  1472. /package/packages/core/{dev-delivery-process-boundary.js → dev-delivery/dev-delivery-process-boundary.js} +0 -0
  1473. /package/packages/core/{dev-delivery-provider-attempt.js → dev-delivery/dev-delivery-provider-attempt.js} +0 -0
  1474. /package/packages/core/{dev-delivery-provider-heartbeat.js → dev-delivery/dev-delivery-provider-heartbeat.js} +0 -0
  1475. /package/packages/core/{dev-delivery-warrant-cancellation.js → dev-delivery/dev-delivery-warrant-cancellation.js} +0 -0
  1476. /package/packages/core/{dev-delivery-warrant-qualification.js → dev-delivery/dev-delivery-warrant-qualification.js} +0 -0
  1477. /package/packages/core/{dev-delivery-warrant-settlement.js → dev-delivery/dev-delivery-warrant-settlement.js} +0 -0
  1478. /package/packages/core/{dev-delivery-writer-protocol-transition.js → dev-delivery/dev-delivery-writer-protocol-transition.js} +0 -0
  1479. /package/packages/core/{engineering-housekeeper-github-client.js → governance/engineering-housekeeper-github-client.js} +0 -0
  1480. /package/packages/core/{engineering-housekeeper-github.js → governance/engineering-housekeeper-github.js} +0 -0
  1481. /package/packages/core/{engineering-housekeeper.js → governance/engineering-housekeeper.js} +0 -0
  1482. /package/packages/core/{issue-reporting.js → governance/issue-reporting.js} +0 -0
  1483. /package/packages/core/{cache-evidence.js → observability/cache-evidence.js} +0 -0
  1484. /package/packages/core/{candidate-timeline.js → observability/candidate-timeline.js} +0 -0
  1485. /package/packages/core/{logging.js → observability/logging.js} +0 -0
  1486. /package/packages/core/{paper-work.js → paper/paper-work.js} +0 -0
  1487. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-controller-core.mjs +0 -0
  1488. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-controller.mjs +0 -0
  1489. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-core.mjs +0 -0
  1490. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-job-controller.mjs +0 -0
  1491. /package/{scripts → packages/core/providers/commands}/aws-macos-jit.mjs +0 -0
  1492. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-campaign-core.mjs +0 -0
  1493. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-controller-core.mjs +0 -0
  1494. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-core.mjs +0 -0
  1495. /package/{scripts → packages/core/providers/commands}/aws-windows-jit.mjs +0 -0
  1496. /package/{scripts → packages/core/providers/commands}/github-output.mjs +0 -0
  1497. /package/packages/core/{oci-publication-graph.js → publication/oci-publication-graph.js} +0 -0
  1498. /package/packages/core/{publication-control-plane-audit.js → publication/publication-control-plane-audit.js} +0 -0
  1499. /package/packages/core/{publication-qualification.js → publication/publication-qualification.js} +0 -0
  1500. /package/packages/core/{publication-rehearsal-provider-bindings.js → publication/publication-rehearsal-provider-bindings.js} +0 -0
  1501. /package/packages/core/{publication-sealed-bundle.js → publication/publication-sealed-bundle.js} +0 -0
  1502. /package/packages/core/{channel-candidate.js → release/channel-candidate.js} +0 -0
  1503. /package/packages/core/{channel-promotion-baseline.js → release/channel-promotion-baseline.js} +0 -0
  1504. /package/{scripts → packages/core/release/commands}/promotion-routing-evidence.mjs +0 -0
  1505. /package/packages/core/{dev-alpha-active-release-train.js → release/dev-alpha-active-release-train.js} +0 -0
  1506. /package/packages/core/{dev-alpha-candidate-selection.js → release/dev-alpha-candidate-selection.js} +0 -0
  1507. /package/packages/core/{next-development-candidate-reservation.js → release/next-development-candidate-reservation.js} +0 -0
  1508. /package/packages/core/{next-development-controller.js → release/next-development-controller.js} +0 -0
  1509. /package/packages/core/{publish-transaction.js → release/publish-transaction.js} +0 -0
  1510. /package/packages/core/{release-activation-transaction.js → release/release-activation-transaction.js} +0 -0
  1511. /package/packages/core/{release-propagation-agent-entry.js → release/release-propagation-agent-entry.js} +0 -0
  1512. /package/packages/core/{release-propagation-capture.js → release/release-propagation-capture.js} +0 -0
  1513. /package/packages/core/{release-propagation-common.js → release/release-propagation-common.js} +0 -0
  1514. /package/packages/core/{release-propagation-execution-profile.js → release/release-propagation-execution-profile.js} +0 -0
  1515. /package/packages/core/{release-propagation-pickup.js → release/release-propagation-pickup.js} +0 -0
  1516. /package/packages/core/{release-propagation-push.js → release/release-propagation-push.js} +0 -0
  1517. /package/packages/core/{release-propagation-release.js → release/release-propagation-release.js} +0 -0
  1518. /package/packages/core/{release-propagation-stage-evidence.js → release/release-propagation-stage-evidence.js} +0 -0
  1519. /package/packages/core/{release-propagation-work-capture.js → release/release-propagation-work-capture.js} +0 -0
  1520. /package/packages/core/{release-propagation-work-constants.js → release/release-propagation-work-constants.js} +0 -0
  1521. /package/packages/core/{release-propagation-work-control.js → release/release-propagation-work-control.js} +0 -0
  1522. /package/packages/core/{release-propagation-work-transitions.js → release/release-propagation-work-transitions.js} +0 -0
  1523. /package/packages/core/{release-propagation-work.js → release/release-propagation-work.js} +0 -0
  1524. /package/packages/core/{release-propagation.js → release/release-propagation.js} +0 -0
  1525. /package/packages/core/{release-tail-product-capabilities.js → release/release-tail-product-capabilities.js} +0 -0
  1526. /package/packages/core/{release-train.js → release/release-train.js} +0 -0
  1527. /package/packages/core/{self-dogfood-version.js → release/self-dogfood-version.js} +0 -0
  1528. /package/packages/core/{stable-candidate-ledger.js → release/stable-candidate-ledger.js} +0 -0
  1529. /package/packages/core/{stable-release-gate.js → release/stable-release-gate.js} +0 -0
  1530. /package/packages/core/{tail-reseal-contract.js → release/tail-reseal-contract.js} +0 -0
  1531. /package/packages/core/{domain-wasm.js → runtime/domain-wasm.js} +0 -0
  1532. /package/packages/core/{spawn-command.js → runtime/spawn-command.js} +0 -0
  1533. /package/packages/core/{badges.js → web/badges.js} +0 -0
  1534. /package/{scripts → packages/core/web/commands}/web-surface-cloudfront-rewrite.mjs +0 -0
  1535. /package/{scripts → packages/core/web/commands}/web-surface-immutable-object.mjs +0 -0
  1536. /package/{scripts → packages/core/web/commands}/web-surface-routing.mjs +0 -0
@@ -13,12 +13,12 @@ export {
13
13
  runLifecycleStage,
14
14
  updateConfiguredVersionStateContents,
15
15
  validateBuildchainConfig,
16
- } from "./buildchain-config.js";
16
+ } from "./consumer/buildchain-config.js";
17
17
 
18
18
  export {
19
19
  ANCHORED_VERSION_MATERIAL_CONTRACT,
20
20
  createAnchoredVersionMaterialEvidence,
21
- } from "./anchored-version-material.js";
21
+ } from "./build/anchored-version-material.js";
22
22
 
23
23
  export {
24
24
  STABLE_CANDIDATE_LEDGER_CONTRACT,
@@ -32,7 +32,7 @@ export {
32
32
  selectStableCandidate,
33
33
  setStableCandidateHold,
34
34
  stableCandidatePromotionRefs,
35
- } from "./stable-candidate-ledger.js";
35
+ } from "./release/stable-candidate-ledger.js";
36
36
 
37
37
  export {
38
38
  assertPackageManager,
@@ -44,7 +44,7 @@ export {
44
44
  getWorkspaceInfo,
45
45
  shellJoin,
46
46
  validatePackageManagerContract,
47
- } from "./package-manager.js";
47
+ } from "./build/package-manager.js";
48
48
 
49
49
  export {
50
50
  createReleaseTransaction,
@@ -56,7 +56,7 @@ export {
56
56
  transitionReleaseTransaction,
57
57
  validatePublishEvidence,
58
58
  writeReleaseTransaction,
59
- } from "./publish-transaction.js";
59
+ } from "./release/publish-transaction.js";
60
60
 
61
61
  export {
62
62
  RELEASE_TAIL_CAPABILITY_REGISTRY,
@@ -79,7 +79,7 @@ export {
79
79
  validateReleaseTailEffectPlan,
80
80
  validateReleaseTailTransaction,
81
81
  writeReleaseTailTransaction,
82
- } from "./release-tail-provider-plane.js";
82
+ } from "./release/release-tail-provider-plane.js";
83
83
 
84
84
  export {
85
85
  ReleaseTailProviderError,
@@ -89,19 +89,14 @@ export {
89
89
  createSignedStaticChannelAdapter,
90
90
  createSiteReleaseActivationAdapter,
91
91
  githubReleaseAssetsTargetRoot,
92
- } from "./release-tail-provider-adapters.js";
92
+ } from "./release/release-tail-provider-adapters.js";
93
93
 
94
- export {
95
- RELEASE_TAIL_COMPATIBILITY_CONTRACT,
96
- RELEASE_TAIL_LEGACY_HOOKS,
97
- diagnoseLegacyReleaseTailHooks,
98
- } from "./release-tail-compatibility.js";
99
94
 
100
95
  export {
101
96
  createPortableDevCachePlan,
102
97
  createPortableDevCacheReceipt,
103
98
  verifyPortableDevCachePlan,
104
- } from "./portable-dev-cache.js";
99
+ } from "./build/portable-dev-cache.js";
105
100
 
106
101
  export {
107
102
  BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT,
@@ -111,12 +106,12 @@ export {
111
106
  createCacheOperationReceipt,
112
107
  verifyCacheEvidenceSet,
113
108
  verifyCacheOperationReceipt,
114
- } from "./cache-evidence.js";
109
+ } from "./observability/cache-evidence.js";
115
110
 
116
111
  export {
117
112
  explainReleaseLineDryRun,
118
113
  formatReleaseLineDryRun,
119
- } from "./release-line-dry-run.js";
114
+ } from "./release/release-line-dry-run.js";
120
115
 
121
116
  export {
122
117
  BUILDCHAIN_LOG_EVENT_CONTRACT,
@@ -129,7 +124,7 @@ export {
129
124
  redactBuildchainLogAttributes,
130
125
  summarizeBuildchainLogEvents,
131
126
  verifyBuildchainLogEvents,
132
- } from "./logging.js";
127
+ } from "./observability/logging.js";
133
128
 
134
129
  export {
135
130
  BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT,
@@ -137,18 +132,18 @@ export {
137
132
  createCandidateTimeline,
138
133
  formatCandidateTimelineReport,
139
134
  normalizeCandidateTimelineEvent,
140
- } from "./candidate-timeline.js";
135
+ } from "./observability/candidate-timeline.js";
141
136
 
142
137
  export {
143
138
  CI_LANE_CHANGE_BUDGET_CONTRACT,
144
139
  evaluateCiLaneChangeBudget,
145
- } from "./ci-lane-change-budget.js";
140
+ } from "./governance/ci-lane-change-budget.js";
146
141
 
147
142
  export {
148
143
  CHANNEL_CANDIDATE_DECISION_SCHEMA,
149
144
  channelCandidateSourceLockRef,
150
145
  decideChannelCandidate,
151
- } from "./channel-candidate.js";
146
+ } from "./release/channel-candidate.js";
152
147
 
153
148
  export {
154
149
  BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT,
@@ -180,11 +175,10 @@ export {
180
175
  summarizeProcessSamples,
181
176
  validateAnchoredPackageRelease,
182
177
  writeDiagnosticsArtifact,
183
- } from "./diagnostics.js";
178
+ } from "./observability/diagnostics.js";
184
179
 
185
180
  export {
186
181
  BUILD_FACTS_GIT_CONTRACT,
187
- BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT,
188
182
  BUILD_FACTS_MODULE_CONTRACT,
189
183
  BUILD_FACTS_PRODUCT_CONTRACT,
190
184
  BUILD_FACTS_VERIFY_CONTRACT,
@@ -194,11 +188,9 @@ export {
194
188
  collectGitSourceFacts,
195
189
  collectModuleBuildFacts,
196
190
  collectVersionSourceFact,
197
- createKungfuBuildInfoProjection,
198
191
  verifyBuildFacts,
199
192
  writeBuildFacts,
200
- writeKungfuBuildInfoProjection,
201
- } from "./build-facts.js";
193
+ } from "./build/build-facts.js";
202
194
 
203
195
  export {
204
196
  FAMILY_RELEASE_EVIDENCE_CONTRACT,
@@ -206,20 +198,20 @@ export {
206
198
  createReleaseCandidatePassport,
207
199
  sha256Json,
208
200
  validateReleaseCandidatePassport,
209
- } from "./release-candidate.js";
201
+ } from "./release/release-candidate.js";
210
202
 
211
203
  export {
212
204
  RELEASE_CANDIDATE_RECOVERY_CONTRACT,
213
205
  ReleaseCandidateRecoveryError,
214
206
  recoveryFailure,
215
207
  verifyReleaseCandidateRecovery,
216
- } from "./release-candidate-recovery.js";
208
+ } from "./release/release-candidate-recovery.js";
217
209
 
218
210
  export {
219
211
  PUBLICATION_NPM_PACKAGE_CONTRACT,
220
212
  collectPublicationPackageFacts,
221
213
  preparePublicationNpmPackage,
222
- } from "./publication-package.js";
214
+ } from "./publication/publication-package.js";
223
215
 
224
216
  export {
225
217
  PUBLICATION_ADMISSION_CONTRACT,
@@ -246,14 +238,14 @@ export {
246
238
  publicationGateAggregateBindings,
247
239
  verifyPublicationAdmission,
248
240
  verifyPublicationQualificationReceipt,
249
- } from "./publication-authority.js";
241
+ } from "./publication/publication-authority.js";
250
242
 
251
243
  export {
252
244
  PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT,
253
245
  createPublicationArtifactCandidate,
254
246
  publicationArtifactCandidateDigest,
255
247
  resolvePublicationCandidateFile,
256
- } from "./publication-artifact-candidate.js";
248
+ } from "./publication/publication-artifact-candidate.js";
257
249
 
258
250
  export {
259
251
  WEB_SURFACE_PRODUCTION_DECISION_CONTRACT,
@@ -261,14 +253,14 @@ export {
261
253
  createWebSurfaceProductionDecision,
262
254
  createWebSurfacePublicationCandidate,
263
255
  webSurfacePublicationDigest,
264
- } from "./web-surface-publication-candidate.js";
256
+ } from "./web/web-surface-publication-candidate.js";
265
257
 
266
258
  export {
267
259
  buildchainPublicationAuthorityDescriptors,
268
260
  createBuildchainPublicationAuthorityRegistry,
269
- } from "./buildchain-publication-authority.js";
261
+ } from "./governance/buildchain-publication-authority.js";
270
262
 
271
- export { evaluatePublicationControlPlaneSnapshot } from "./publication-control-plane-audit.js";
263
+ export { evaluatePublicationControlPlaneSnapshot } from "./publication/publication-control-plane-audit.js";
272
264
  export {
273
265
  BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY,
274
266
  BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS,
@@ -290,10 +282,10 @@ export {
290
282
  parseCodeowners,
291
283
  resolveGithubGovernanceTargetPolicy,
292
284
  verifyGithubGovernanceReceipt,
293
- } from "./github-governance-authority.js";
285
+ } from "./governance/github-governance-authority.js";
294
286
 
295
- export * from "./engineering-housekeeper.js";
296
- export * from "./engineering-housekeeper-github.js";
287
+ export * from "./governance/engineering-housekeeper.js";
288
+ export * from "./governance/engineering-housekeeper-github.js";
297
289
 
298
290
  export {
299
291
  ARTIFACT_PASSPORT_LOCATOR_CONTRACT,
@@ -302,10 +294,8 @@ export {
302
294
  discoverArtifactPassport,
303
295
  explainArtifactPassport,
304
296
  resolveArtifactSubject,
305
- sha512IntegrityBuffer,
306
- sha512IntegrityFile,
307
297
  verifyArtifactPassport,
308
- } from "./artifact-passport.js";
298
+ } from "./build/artifact-passport.js";
309
299
 
310
300
  export {
311
301
  ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT,
@@ -319,7 +309,7 @@ export {
319
309
  sealArtifactVerificationReport,
320
310
  validateKfdAdopterReleaseBinding,
321
311
  verifyArtifactVerificationEnvelope,
322
- } from "./artifact-verification-envelope.js";
312
+ } from "./build/artifact-verification-envelope.js";
323
313
 
324
314
  export {
325
315
  ARTIFACT_SIGNING_AUTHORITY_CONTRACT,
@@ -332,7 +322,7 @@ export {
332
322
  resolveArtifactSigningProfile,
333
323
  validateArtifactSigningReceipt,
334
324
  validateArtifactSigningRequest,
335
- } from "./artifact-signing.js";
325
+ } from "./build/artifact-signing.js";
336
326
 
337
327
  export {
338
328
  ARTIFACT_SIGNING_RESULT_CONTRACT,
@@ -340,13 +330,13 @@ export {
340
330
  createArtifactSigningResult,
341
331
  validateArtifactSigningResult,
342
332
  verifyArtifactSigningResultFiles,
343
- } from "./artifact-signing-result.js";
333
+ } from "./build/artifact-signing-result.js";
344
334
 
345
335
  export {
346
336
  DETACHED_ARTIFACT_SIGNATURE_CONTRACT,
347
337
  signDetachedArtifactRequest,
348
338
  verifyDetachedArtifactSignature,
349
- } from "./detached-artifact-signature.js";
339
+ } from "./build/detached-artifact-signature.js";
350
340
 
351
341
  export {
352
342
  BUILDCHAIN_CONTRACT_LOCK,
@@ -360,7 +350,7 @@ export {
360
350
  readBuildchainContractWorld,
361
351
  renderBuildchainContractDriftIssueBody,
362
352
  sha256Json as sha256BuildchainContractJson,
363
- } from "./buildchain-contract.js";
353
+ } from "./contracts/buildchain-contract.js";
364
354
 
365
355
  export {
366
356
  BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT,
@@ -377,12 +367,12 @@ export {
377
367
  validateControllerPlan,
378
368
  validateControllerReceipt,
379
369
  validateControllerReceiptReference,
380
- } from "./controller-evidence.js";
370
+ } from "./observability/controller-evidence.js";
381
371
 
382
372
  export {
383
373
  planReleaseLineBootstrap,
384
374
  writeReleaseLineBootstrapVersionState,
385
- } from "./release-line-bootstrap.js";
375
+ } from "./release/release-line-bootstrap.js";
386
376
 
387
377
  export {
388
378
  BUILDCHAIN_JSON_FORMATTING_POLICY,
@@ -401,7 +391,7 @@ export {
401
391
  sha256Json as sha256KfdJson,
402
392
  validateKfd1ReleaseGateEvidence,
403
393
  validateKfd3CollaborationInterfaceReleaseGateEvidence,
404
- } from "./kfd-gate.js";
394
+ } from "./adoption/kfd-gate.js";
405
395
 
406
396
  export {
407
397
  BUILDCHAIN_AGENT_MANUALS,
@@ -414,7 +404,7 @@ export {
414
404
  createBuildchainKfdClaimRegistry,
415
405
  createBuildchainKfdSurfaceRegistry,
416
406
  createBuildchainPublicClaimDefinitions,
417
- } from "./buildchain-kfd-claims.js";
407
+ } from "./adoption/buildchain-kfd-claims.js";
418
408
 
419
409
  export {
420
410
  BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT,
@@ -425,7 +415,7 @@ export {
425
415
  enumerateDocCommandRefs,
426
416
  enumerateSitePages,
427
417
  enumerateWorkflowInputs,
428
- } from "./public-surface-audit.js";
418
+ } from "./contracts/public-surface-audit.js";
429
419
 
430
420
  export {
431
421
  PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT,
@@ -435,30 +425,19 @@ export {
435
425
  collectPublicationArtifact,
436
426
  createPublicationSourceBundle,
437
427
  writePublicationArtifact,
438
- } from "./publication-artifact.js";
439
-
440
- export {
441
- AGENT_INDEX_CONTRACT,
442
- ARTIFACT_EVIDENCE_CONTRACT,
443
- IMPACT_LEDGER_CONTRACT,
444
- KFD2_RELEASE_TRUST_PASSPORT_CONTRACT,
445
- KFD2_TRUST_PROOF_CONTRACT,
446
- PRODUCT_MECHANISM_CONTRACT,
447
- RELEASE_CHECK_REPORT_CONTRACT,
448
- RELEASE_EVIDENCE_ATTACHMENT_CONTRACT,
449
- RELEASE_PASSPORT_CONTRACT,
450
- collectGitHubReleasePassport,
451
- createArtifactEvidence,
452
- createReleaseCheckReport,
453
- createReleasePassport,
454
- explainReleasePassport,
455
- makeReleasePassportFixtureAssets,
456
- readJsonFromLocation,
457
- sha256File,
458
- sha256Text,
459
- validateKnownReleasePassportContracts,
460
- verifyReleasePassport,
461
- } from "./release-passport.js";
428
+ } from "./publication/publication-artifact.js";
429
+
430
+ export { AGENT_INDEX_CONTRACT, ARTIFACT_EVIDENCE_CONTRACT, IMPACT_LEDGER_CONTRACT, KFD2_RELEASE_TRUST_PASSPORT_CONTRACT, KFD2_TRUST_PROOF_CONTRACT, PRODUCT_MECHANISM_CONTRACT, RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from "./release/passport/identity.js";
431
+ export { RELEASE_CHECK_REPORT_CONTRACT, RELEASE_PASSPORT_CONTRACT } from "./release/release-passport-contract.js";
432
+ export { collectGitHubReleasePassport } from "./release/passport/collection.js";
433
+ export { createArtifactEvidence } from "./release/passport/assembly-artifacts.js";
434
+ export { createReleasePassport } from "./release/passport/assembly.js";
435
+ export { createReleaseCheckReport } from "./release/passport/report.js";
436
+ export { explainReleasePassport, verifyReleasePassport } from "./release/release-passport.js";
437
+ export { makeReleasePassportFixtureAssets, validateKnownReleasePassportContracts } from "./release/passport/fixture.js";
438
+ export { readJsonFromLocation } from "./release/passport/locations.js";
439
+ export { sha256File } from "./release/passport/files.js";
440
+ export { sha256Text } from "./release/passport/json.js";
462
441
 
463
442
  export {
464
443
  GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT,
@@ -477,7 +456,7 @@ export {
477
456
  normalizeGitHubArtifactAttestationPolicy,
478
457
  prepareGitHubArtifactAttestation,
479
458
  verifyGitHubArtifactAttestationEvidence,
480
- } from "./github-artifact-attestation.js";
459
+ } from "./build/github-artifact-attestation.js";
481
460
 
482
461
  export {
483
462
  KFD_AGENT_HUB_ADOPTION_CONTRACT,
@@ -490,7 +469,7 @@ export {
490
469
  initKfdAgentHub,
491
470
  inspectKfdAgentHub,
492
471
  testKfdAgentHub,
493
- } from "./kfd-agent-hub.js";
472
+ } from "./adoption/kfd-agent-hub.js";
494
473
 
495
474
  export {
496
475
  KFD_PRODUCT_GATE_CONTRACT,
@@ -502,7 +481,7 @@ export {
502
481
  kfdProductGates,
503
482
  validateKfdProductGateResult,
504
483
  verifyKfdRecord,
505
- } from "./kfd-product-gates.js";
484
+ } from "./adoption/kfd-product-gates.js";
506
485
 
507
486
  export {
508
487
  RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT,
@@ -510,7 +489,7 @@ export {
510
489
  RELEASE_PASSPORT_SCHEMA_ID,
511
490
  createReleasePassportCheckManifest,
512
491
  validateReleasePassportSchema,
513
- } from "./release-passport-contract.js";
492
+ } from "./release/release-passport-contract.js";
514
493
 
515
494
  export {
516
495
  BUILDCHAIN_CONSUMER_ISSUE_CONTRACT,
@@ -530,7 +509,7 @@ export {
530
509
  reportWorkflowFrictionIssue,
531
510
  truncateUtf8,
532
511
  workflowFrictionMarker,
533
- } from "./issue-reporting.js";
512
+ } from "./governance/issue-reporting.js";
534
513
 
535
514
  export {
536
515
  BADGE_BUNDLE_DEFAULT_CLAIMS,
@@ -550,7 +529,7 @@ export {
550
529
  renderReadmeBadgeBlock,
551
530
  updateBadgeBundleBlock,
552
531
  updateReadmeBadgeBlock,
553
- } from "./readme-badges.js";
532
+ } from "./web/readme-badges.js";
554
533
 
555
534
  export {
556
535
  HOMEBREW_TAP_CHECK_CONTRACT,
@@ -560,7 +539,7 @@ export {
560
539
  collectHomebrewTapFacts,
561
540
  renderHomebrewFormula,
562
541
  updateHomebrewTap,
563
- } from "./homebrew.js";
542
+ } from "./build/homebrew.js";
564
543
 
565
544
  export {
566
545
  BUILDCHAIN_CONFIG_PATH,
@@ -601,7 +580,7 @@ export {
601
580
  resolveKfd2ProductClaimsRegistryPath,
602
581
  resolveKfd3SurfaceRegistryPath,
603
582
  resolveReleasePassportPath,
604
- } from "./buildchain-layout.js";
583
+ } from "./contracts/buildchain-layout.js";
605
584
  export {
606
585
  KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT,
607
586
  KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT,
@@ -611,7 +590,7 @@ export {
611
590
  renderKfd2ProductClaimOutputs,
612
591
  validateKfd2ProductClaimsRegistry,
613
592
  writeKfd2ProductClaimOutputs,
614
- } from "./kfd2-product-claims.js";
593
+ } from "./adoption/kfd2-product-claims.js";
615
594
  export {
616
595
  buildchainKfdClaims,
617
596
  collectKfdStatus,
@@ -625,7 +604,7 @@ export {
625
604
  normalizeKfdStandardId,
626
605
  readKfdSchema,
627
606
  schemas,
628
- } from "./kfd.js";
607
+ } from "./adoption/kfd.js";
629
608
 
630
609
  export {
631
610
  KFD3_CAPABILITY_QUERY_CONTRACT,
@@ -641,12 +620,12 @@ export {
641
620
  readKfd3SurfaceRegistry,
642
621
  registerKfd3Surfaces,
643
622
  writeKfd3SurfaceRegistry,
644
- } from "./kfd3-surface-register.js";
623
+ } from "./adoption/kfd3-surface-register.js";
645
624
 
646
- export * from "./release-propagation.js";
647
- export * from "./floating-consumer-policy.js";
648
- export * from "./runtime-ref-resume-authority.js";
649
- export * from "./publication-qualification.js";
625
+ export * from "./release/release-propagation.js";
626
+ export * from "./consumer/floating-consumer-policy.js";
627
+ export * from "./consumer/runtime-ref-resume-authority.js";
628
+ export * from "./publication/publication-qualification.js";
650
629
 
651
630
  export {
652
631
  RELEASE_ACTIVATION_CONTRACT,
@@ -660,42 +639,31 @@ export {
660
639
  rollbackReleaseActivationTransaction,
661
640
  validateReleaseActivationReceiptSet,
662
641
  validateReleaseActivationTransaction,
663
- } from "./release-activation-transaction.js";
642
+ } from "./release/release-activation-transaction.js";
664
643
 
665
644
  export {
666
645
  PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT,
667
646
  verifyPublicationReproducibility,
668
- } from "./publication-reproducibility.js";
647
+ } from "./publication/publication-reproducibility.js";
669
648
 
670
649
  export {
671
650
  PUBLICATION_SEALED_BUNDLE_CONTRACT,
672
651
  createPublicationSealedBundle,
673
652
  verifyPublicationSealedBundle,
674
- } from "./publication-sealed-bundle.js";
675
-
676
- export {
677
- PAPER_ALPHA_PLAN_CONTRACT,
678
- PAPER_BUILD_PLAN_CONTRACT,
679
- PAPER_MIGRATION_CONTRACT,
680
- PAPER_NPM_BOOTSTRAP_CONTRACT,
681
- PAPER_PATHS,
682
- PAPER_PREFLIGHT_CONTRACT,
683
- PAPER_RESUME_PLAN_CONTRACT,
684
- PAPER_SCAFFOLD_CONTRACT,
685
- PAPER_STATE_ORDER,
686
- PAPER_STATUS_CONTRACT,
687
- PAPER_VISIBILITY_CONTRACT,
688
- collectPaperPreflight,
689
- collectPaperStatus,
690
- createPaperAlphaPlan,
691
- createPaperBuildPlan,
692
- createPaperResumePlan,
693
- executePaperNpmBootstrap,
694
- planPaperMigration,
695
- planPaperScaffold,
696
- resolvePaperRepository,
697
- writePaperMigration,
698
- writePaperScaffold,
699
- } from "./paper.js"; export * from "./paper-work.js"; export * from "./paper-fleet.js";
700
-
701
- export * from "./public-export-compatibility.js";
653
+ } from "./publication/publication-sealed-bundle.js";
654
+
655
+ export { PAPER_ALPHA_PLAN_CONTRACT, PAPER_BUILD_PLAN_CONTRACT, PAPER_MIGRATION_CONTRACT, PAPER_NPM_BOOTSTRAP_CONTRACT, PAPER_PREFLIGHT_CONTRACT, PAPER_RESUME_PLAN_CONTRACT, PAPER_SCAFFOLD_CONTRACT, PAPER_STATE_ORDER, PAPER_STATUS_CONTRACT, PAPER_VISIBILITY_CONTRACT } from "./paper/operations/identity.js";
656
+ export { PAPER_PATHS, resolvePaperRepository } from "./paper/paper-repository.js";
657
+ export { collectPaperPreflight } from "./paper/paper.js";
658
+ export { collectPaperStatus } from "./paper/operations/status.js";
659
+ export { createPaperAlphaPlan, createPaperBuildPlan, createPaperResumePlan } from "./paper/operations/plans.js";
660
+ export { executePaperNpmBootstrap } from "./paper/operations/bootstrap.js";
661
+ export { planPaperMigration, planPaperScaffold, writePaperMigration, writePaperScaffold } from "./paper/operations/scaffold.js"; export * from "./paper/paper-work.js"; export * from "./paper/paper-fleet.js";
662
+
663
+ export {
664
+ SURFACE_TIMESTAMP_POLICY_CONTRACT,
665
+ applySurfaceTimestampPolicy,
666
+ createSurfaceTimestampPolicy,
667
+ } from "./contracts/surface-manifest.js";
668
+
669
+ export { sha512IntegrityBuffer, sha512IntegrityFile } from "./build/artifact-integrity.js";
@@ -0,0 +1,42 @@
1
+ import path from "node:path";
2
+ import {
3
+ createCandidateTimeline,
4
+ formatCandidateTimelineReport,
5
+ } from "../candidate-timeline.js";
6
+ import {
7
+ printJson,
8
+ readBooleanFlag,
9
+ readFlag,
10
+ readJsonInput,
11
+ readRepeatedFlag,
12
+ readRepeatedJsonInputs,
13
+ writeJsonFile,
14
+ } from "../../contracts/cli/options.mjs";
15
+
16
+ export async function handleCandidateCommand(args) {
17
+ const [subcommand = "", ...candidateArgs] = args;
18
+ if (subcommand !== "timeline") {
19
+ throw new Error(
20
+ "usage: buildchain candidate timeline --input <file-or-json>",
21
+ );
22
+ }
23
+ const inputValue = readFlag(candidateArgs, "input", "");
24
+ if (!inputValue) {
25
+ throw new Error(
26
+ "buildchain candidate timeline requires --input <file-or-json>",
27
+ );
28
+ }
29
+ const input = readJsonInput(inputValue, {
30
+ label: "candidate timeline input",
31
+ });
32
+ const timeline = createCandidateTimeline(input);
33
+ const output = readFlag(candidateArgs, "output", "");
34
+ if (output) writeJsonFile(path.resolve(output), timeline);
35
+ if (readBooleanFlag(candidateArgs, "json") || !output) {
36
+ printJson(timeline);
37
+ } else {
38
+ process.stdout.write(`${formatCandidateTimelineReport(timeline)}\n`);
39
+ process.stdout.write(`wrote: ${output}\n`);
40
+ }
41
+ return;
42
+ }
@@ -0,0 +1,47 @@
1
+ import {
2
+ createBuildchainLogger,
3
+ defaultBuildchainLogPath,
4
+ summarizeBuildchainLogEvents,
5
+ } from "../logging.js";
6
+ import {
7
+ printJson,
8
+ readBooleanFlag,
9
+ readFlag,
10
+ readJsonInput,
11
+ readRepeatedFlag,
12
+ readRepeatedJsonInputs,
13
+ writeJsonFile,
14
+ } from "../../contracts/cli/options.mjs";
15
+
16
+ export function readAttributes(args) {
17
+ const attributes = {};
18
+ for (const value of readRepeatedFlag(args, "attribute")) {
19
+ const separator = value.indexOf("=");
20
+ if (separator === -1) {
21
+ attributes[value] = true;
22
+ } else {
23
+ attributes[value.slice(0, separator)] = value.slice(separator + 1);
24
+ }
25
+ }
26
+ return attributes;
27
+ }
28
+
29
+ export function defaultCliLogPath(args) {
30
+ return readFlag(
31
+ args,
32
+ "path",
33
+ process.env.BUILDCHAIN_LOG_PATH ||
34
+ defaultBuildchainLogPath({ cwd: process.cwd() }),
35
+ );
36
+ }
37
+
38
+ export function cliLogger(args, defaults = {}) {
39
+ return createBuildchainLogger({
40
+ cwd: process.cwd(),
41
+ path: defaultCliLogPath(args),
42
+ console: !readBooleanFlag(args, "quiet"),
43
+ source: readFlag(args, "source", defaults.source || "user"),
44
+ component: readFlag(args, "component", defaults.component || "cli"),
45
+ phase: readFlag(args, "phase", defaults.phase || ""),
46
+ });
47
+ }
@@ -0,0 +1,88 @@
1
+ import {
2
+ BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT,
3
+ formatDiagnosticsSummaryTable,
4
+ startProcessSampler,
5
+ summarizeDiagnosticsArtifacts,
6
+ summarizeProcessSamples,
7
+ validateAnchoredPackageRelease,
8
+ } from "../diagnostics.js";
9
+ import {
10
+ printJson,
11
+ readBooleanFlag,
12
+ readFlag,
13
+ readJsonInput,
14
+ readRepeatedFlag,
15
+ readRepeatedJsonInputs,
16
+ writeJsonFile,
17
+ } from "../../contracts/cli/options.mjs";
18
+ function readDiagnosticsArtifactInputs(args) {
19
+ const values = [];
20
+ for (let index = 0; index < args.length; index += 1) {
21
+ const entry = args[index];
22
+ if (entry === "--artifact") {
23
+ const value = args[index + 1];
24
+ if (!value || value.startsWith("--")) {
25
+ throw new Error(
26
+ "buildchain diagnostics summary --artifact requires a file path",
27
+ );
28
+ }
29
+ values.push(value);
30
+ index += 1;
31
+ continue;
32
+ }
33
+ if (entry === "--output") {
34
+ index += 1;
35
+ continue;
36
+ }
37
+ if (entry === "--json") {
38
+ continue;
39
+ }
40
+ values.push(entry);
41
+ }
42
+ return values;
43
+ }
44
+
45
+
46
+
47
+ export async function handleDiagnosticsCommand(args) {
48
+ const [subcommand = "", ...diagnosticsArgs] = args;
49
+ if (subcommand !== "summary") {
50
+ throw new Error(
51
+ "usage: buildchain diagnostics summary <diagnostics.json>...",
52
+ );
53
+ }
54
+ const inputs = readDiagnosticsArtifactInputs(diagnosticsArgs);
55
+ if (inputs.length === 0) {
56
+ throw new Error(
57
+ "buildchain diagnostics summary requires at least one artifact",
58
+ );
59
+ }
60
+ const summary = summarizeDiagnosticsArtifacts(inputs);
61
+ if (summary.count !== inputs.length) {
62
+ throw new Error(
63
+ `buildchain diagnostics summary read ${summary.count}/${inputs.length} artifacts`,
64
+ );
65
+ }
66
+ const outputPath = readFlag(diagnosticsArgs, "output", "");
67
+ writeJsonFile(outputPath, summary);
68
+ if (readBooleanFlag(diagnosticsArgs, "json")) {
69
+ printJson(summary);
70
+ } else {
71
+ process.stdout.write(
72
+ `buildchain diagnostics summary: ${summary.count} platforms\n`,
73
+ );
74
+ process.stdout.write(
75
+ `warnings: ${summary.totalWarningCount} errors: ${summary.totalErrorCount}\n`,
76
+ );
77
+ if (summary.diagnosticsManifestWarningCount) {
78
+ process.stdout.write(
79
+ `diagnostics manifest warnings: ${summary.diagnosticsManifestWarningCount}\n`,
80
+ );
81
+ }
82
+ process.stdout.write(`${formatDiagnosticsSummaryTable(summary)}\n`);
83
+ if (outputPath) {
84
+ process.stdout.write(`wrote: ${outputPath}\n`);
85
+ }
86
+ }
87
+ return;
88
+ }