@kungfu-tech/buildchain 4.1.2-alpha.0 → 4.1.3-alpha.0

package/dist/readers/release-discussion.cjs

@@ -0,0 +1,203 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// packages/core/release/discussion/reader-entry.js
+var reader_entry_exports = {};
+__export(reader_entry_exports, {
+  decodeRecord: () => decodeRecord,
+  readReleaseDiscussion: () => readReleaseDiscussion
+});
+module.exports = __toCommonJS(reader_entry_exports);
+var import_node_fs = __toESM(require("fs"), 1);
+
+// packages/core/release/discussion/envelope.js
+var import_node_crypto = require("crypto");
+var ENVELOPE_SCHEMA = "buildchain.discussion-record/v1";
+var INTENT_SCHEMA = "buildchain.release-discussion/v1";
+var PAYLOAD_SCHEMA = "buildchain.release-progress/v1";
+var MARKER = "<!-- buildchain-transaction\n";
+var MAX_RECORD_BYTES = 48e3;
+function canonicalJson(value) {
+  if (typeof value === "number" && !Number.isFinite(value))
+    throw new Error("Transaction numbers must be finite");
+  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
+  if (value && typeof value === "object")
+    return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`).join(",")}}`;
+  const encoded = JSON.stringify(value);
+  if (encoded === void 0)
+    throw new Error("Transaction records must contain JSON values");
+  return encoded;
+}
+function recordDigest(value) {
+  return `sha256:${(0, import_node_crypto.createHash)("sha256").update(canonicalJson(value)).digest("hex")}`;
+}
+function validateRuntime(runtime) {
+  if (!/^[\w.-]+\/[\w.-]+$/u.test(runtime?.repository || "") || !/^[a-f0-9]{40}$/u.test(runtime?.sha || "") || !/^sha256:[a-f0-9]{64}$/u.test(runtime?.readerDigest || ""))
+    throw new Error(
+      "Record requires selected runtime repository, exact revision and reader digest"
+    );
+  return runtime;
+}
+function decodeRecord(body) {
+  if (typeof body !== "string" || !body.includes(MARKER)) return void 0;
+  if (Buffer.byteLength(body) > MAX_RECORD_BYTES)
+    throw new Error("Oversized transaction record");
+  const start = body.indexOf(MARKER) + MARKER.length;
+  const end = body.indexOf("\n-->", start);
+  if (end < 0 || body.indexOf(MARKER, start) >= 0)
+    throw new Error("Malformed transaction envelope");
+  const record = JSON.parse(body.slice(start, end));
+  if (![ENVELOPE_SCHEMA, INTENT_SCHEMA].includes(record.schema))
+    throw new Error("Unsupported transaction envelope schema");
+  return record;
+}
+
+// packages/core/release/discussion/reader.js
+function readReleaseDiscussion({ body, records }) {
+  const intent = decodeRecord(body);
+  if (intent?.schema !== INTENT_SCHEMA)
+    throw new Error("Missing release Discussion intent");
+  if (intent.id !== recordDigest({ repository: intent.repository, key: intent.key }))
+    throw new Error("Release intent identity mismatch");
+  if (!Array.isArray(intent.expectedNodes) || !intent.expectedNodes.length || new Set(intent.expectedNodes).size !== intent.expectedNodes.length)
+    throw new Error("Missing or duplicate expected nodes");
+  const attempts = groupAttempts(validateRecords(intent, records));
+  if (!attempts.size)
+    return {
+      intent,
+      status: "pending",
+      attempts: [],
+      missingNodes: intent.expectedNodes
+    };
+  const { head, lineage } = resolveLineage(attempts);
+  const nodes = currentNodes(attempts.get(head).events);
+  const missingNodes = intent.expectedNodes.filter((node) => !nodes[node]);
+  const complete = intent.expectedNodes.every(
+    (node) => nodes[node]?.status === "success"
+  );
+  const failed = Object.values(nodes).some(
+    (event) => ["failure", "cancelled"].includes(event.status)
+  );
+  return {
+    intent,
+    attempt: head,
+    attempts: lineage.reverse(),
+    nodes,
+    missingNodes,
+    status: complete ? "complete" : failed ? "failed" : "running",
+    handoff: {
+      schema: "buildchain.release-handoff/v1",
+      intent: intent.id,
+      predecessor: head,
+      completedNodes: intent.expectedNodes.filter(
+        (node) => nodes[node]?.status === "success"
+      )
+    }
+  };
+}
+function validateRecords(intent, records) {
+  const events = /* @__PURE__ */ new Map();
+  for (const raw of records) {
+    const event = typeof raw === "string" ? decodeRecord(raw) : raw;
+    if (!event) continue;
+    validateRuntime(event.runtime);
+    if (!["progress", "checkpoint"].includes(event.kind) || !event.writer || !event.attempt || typeof event.predecessor !== "string")
+      throw new Error("Invalid record ownership");
+    const { id, ...content } = event;
+    if (event.schema !== ENVELOPE_SCHEMA || event.payloadSchema !== PAYLOAD_SCHEMA)
+      throw new Error("Record requires its historical runtime reader");
+    if (event.intent !== intent.id || id !== recordDigest(content))
+      throw new Error("Release record identity mismatch");
+    if (event.node !== "attempt" && !intent.expectedNodes.includes(event.node))
+      throw new Error("Undeclared release node");
+    if (!["running", "success", "failure", "cancelled"].includes(event.status) || !Number.isSafeInteger(event.sequence) || event.sequence < 0)
+      throw new Error("Invalid release progress");
+    events.set(id, event);
+  }
+  return events;
+}
+function groupAttempts(events) {
+  const attempts = /* @__PURE__ */ new Map();
+  for (const event of events.values()) {
+    const attempt = attempts.get(event.attempt) || {
+      predecessor: event.predecessor,
+      events: []
+    };
+    if (attempt.predecessor !== event.predecessor)
+      throw new Error("Conflicting workflow attempt identity");
+    attempt.events.push(event);
+    attempts.set(event.attempt, attempt);
+  }
+  return attempts;
+}
+function resolveLineage(attempts) {
+  const predecessors = new Set(
+    [...attempts.values()].map((attempt) => attempt.predecessor).filter(Boolean)
+  );
+  for (const predecessor of predecessors)
+    if (!attempts.has(predecessor))
+      throw new Error("Recovery predecessor is missing");
+  const heads = [...attempts.keys()].filter((id) => !predecessors.has(id));
+  if (heads.length !== 1)
+    throw new Error("Release attempt succession is ambiguous or cyclic");
+  const lineage = [];
+  let current = heads[0];
+  while (current) {
+    if (lineage.includes(current)) throw new Error("Cyclic recovery chain");
+    lineage.push(current);
+    current = attempts.get(current).predecessor;
+  }
+  if (lineage.length !== attempts.size)
+    throw new Error("Disconnected recovery chain");
+  return { head: heads[0], lineage };
+}
+function currentNodes(events) {
+  const nodes = {}, sequences = /* @__PURE__ */ new Map();
+  for (const event of events) {
+    if (event.kind === "checkpoint") continue;
+    const key = `${event.node}:${event.sequence}`;
+    if (sequences.has(key) && sequences.get(key) !== event.id)
+      throw new Error("Conflicting node progress at the same sequence");
+    sequences.set(key, event.id);
+    const old = nodes[event.node];
+    if (!old || old.sequence < event.sequence) nodes[event.node] = event;
+  }
+  return nodes;
+}
+
+// packages/core/release/discussion/reader-entry.js
+if (typeof require !== "undefined" && require.main === module) {
+  const input = JSON.parse(import_node_fs.default.readFileSync(0, "utf8"));
+  process.stdout.write(`${JSON.stringify(readReleaseDiscussion(input))}
+`);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  decodeRecord,
+  readReleaseDiscussion
+});

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "4.1.2-alpha.0",
+    "version": "4.1.3-alpha.0",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v4",
@@ -250,6 +250,8 @@
         "controller-receipt-digest",
         "controller-receipt-json",
         "controller-receipt-status",
+        "discussion-id",
+        "discussion-url",
         "github-artifact-attestation-evidence-root",
         "github-artifact-attestation-id",
         "github-artifact-attestation-publication-receipt-digest",
@@ -285,8 +287,8 @@
         "release-tail-transaction-state",
         "release-transaction-root"
       ],
-      "breakingDigest": "sha256:a32cbccc2a4b6e1a16f9feba892a1e8d4b8db0098ff63ea2e9719e985da64a7c",
-      "auditDigest": "sha256:93b4545f1b37650a575f8a7cd8d18410eb37549229b47a771912521ff030da79"
+      "breakingDigest": "sha256:c9727056289fc47fbd3bd5f1d0b39b9816f2d6828f3262587aec53e5062da7f1",
+      "auditDigest": "sha256:ba4112f3b5f9c896f61462cebe3f5458a13d315499aced829bddc30830ff6969"
     },
     {
       "contractVersion": 1,
@@ -322,6 +324,8 @@
         "controller-receipt-digest",
         "controller-receipt-json",
         "controller-receipt-status",
+        "discussion-id",
+        "discussion-url",
         "github-artifact-attestation-evidence-root",
         "github-artifact-attestation-id",
         "github-artifact-attestation-publication-receipt-digest",
@@ -346,8 +350,8 @@
         "release-tail-transaction-state",
         "release-transaction-root"
       ],
-      "breakingDigest": "sha256:3130cd971f83ef8fb44cbe3ea0e25c95b65693aaab15b6cc4e5a1e3657f2b6ee",
-      "auditDigest": "sha256:0db2252d311d3db96afb72636fb76c17229800aa1c1cde202ee6a097c36c534a"
+      "breakingDigest": "sha256:64b800e0189286f5bc8615f8f1a0ee1ba2420a79dc6ec77b14e96619ef4dd094",
+      "auditDigest": "sha256:212545ad11011e703d17bb346787362730167743c2110e81a8b32d6c0493d509"
     },
     {
       "contractVersion": 1,
@@ -598,7 +602,7 @@
         "no consumer command, script, shell, checkout, or executable tail hook is accepted"
       ],
       "breakingDigest": "sha256:930a8c3bb97347aea40ab19c4ee1dc29c1f4b75897e19bc0d56da1018fa382c8",
-      "auditDigest": "sha256:17c4a1b24c1afb1c5e6b2226489878de5158287c931ef5e5c690221f594fd98f"
+      "auditDigest": "sha256:5d3a78e4f2499a8638f20dd4adfa976d0bd82f4f4cdf619dce080c22b5188336"
     },
     {
       "contractVersion": 1,
@@ -981,7 +985,7 @@
         "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
       ],
       "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
-      "auditDigest": "sha256:83c04bec0c94e01071310ce4526f9059ccc88333dcdd29bc3d0c737d607d87d1"
+      "auditDigest": "sha256:0a81bae0763d7f3cbff96a0d46fc1d1e8030a2ac644136c138e857369e9fe7e1"
     },
     {
       "contractVersion": 1,
@@ -1003,7 +1007,7 @@
         "agents can discover supported Node APIs without importing internal file paths"
       ],
       "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
-      "auditDigest": "sha256:e88cb115ee4261b72b5dc8a6f7c21d39e2f62a2bba3a39e9042cf96b053f4c36"
+      "auditDigest": "sha256:21f345bfa78b36f65004d826035e1f113bf4ab46818076421d5b4fea7ff12f2a"
     },
     {
       "contractVersion": 1,
@@ -2182,7 +2186,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:884bc7c4dccbc561b1d22a20cc5f7f50172c9691775aa2b84179e036a138cb20",
-      "auditDigest": "sha256:0db2252d311d3db96afb72636fb76c17229800aa1c1cde202ee6a097c36c534a"
+      "auditDigest": "sha256:212545ad11011e703d17bb346787362730167743c2110e81a8b32d6c0493d509"
     },
     {
       "contractVersion": 1,
@@ -2403,6 +2407,6 @@
   "compatibilityFactRegistryRoot": "sha256:ea8f656c9fd74aa2d2fb9b7807e7daa39a708f6a7cd37ab7d154eac7be5605a6",
   "compatibilityFactCutRoot": "sha256:58f33e498596505a26b6fc3c7ae5acef847ff699eee6c7e17a7b318a40bdf0d6",
   "compatibilityProofRegistryRoot": "sha256:2f6477405c7891b754b33ad6515d55618bd320e7cdc59330d7cc645e17201e72",
-  "compatibilityDigest": "sha256:b1088f1c224329b16cd23c285bc69334aa1ee102e5b44d5c09aaf156d76821b6",
-  "contractDigest": "sha256:c07ea3b02cc7d09eaf46b691f9f995968d85786339726e3ae58614d1ab91d82a"
+  "compatibilityDigest": "sha256:14368a3f99f38a8c9c1e053f7ec3651766e3535237f4c551cc75417cf7ef97b3",
+  "contractDigest": "sha256:279ca245e3de6aa314261c4452b228bc5518d4fdb9e79c447d996140c9326f8d"
 }