@kungfu-tech/buildchain 4.1.3-alpha.4 → 4.1.3-alpha.6

package/architecture/platform-stage-checkpoints.json

@@ -28,7 +28,12 @@
     {
       "id": "checkout-input",
       "inputs": ["source-tree"],
-      "outputs": [{ "name": "source-layout", "path": "source/layout.json" }],
+      "outputs": [
+        {
+          "name": "source-layout",
+          "path": "source/layout.json"
+        }
+      ],
       "environment": [],
       "toolchains": ["git"],
       "providerEffects": false
@@ -37,7 +42,10 @@
       "id": "install",
       "inputs": ["lockfile", "source-tree"],
       "outputs": [
-        { "name": "dependency-layout", "path": "install/dependencies.json" }
+        {
+          "name": "dependency-layout",
+          "path": "install/dependencies.json"
+        }
       ],
       "environment": ["package-manager"],
       "toolchains": ["node"],
@@ -46,7 +54,12 @@
     {
       "id": "build",
       "inputs": ["dependency-layout", "source-tree"],
-      "outputs": [{ "name": "build-output", "path": "build/output.bin" }],
+      "outputs": [
+        {
+          "name": "build-output",
+          "path": "build/output.bin"
+        }
+      ],
       "environment": ["build-profile"],
       "toolchains": ["node"],
       "providerEffects": false
@@ -55,7 +68,10 @@
       "id": "verify",
       "inputs": ["build-output", "source-tree"],
       "outputs": [
-        { "name": "verification-report", "path": "verify/report.json" }
+        {
+          "name": "verification-report",
+          "path": "verify/report.json"
+        }
       ],
       "environment": ["verification-profile"],
       "toolchains": ["node"],
@@ -64,7 +80,12 @@
     {
       "id": "package",
       "inputs": ["build-output", "source-tree", "verification-report"],
-      "outputs": [{ "name": "package-archive", "path": "package/archive.bin" }],
+      "outputs": [
+        {
+          "name": "package-archive",
+          "path": "package/archive.bin"
+        }
+      ],
       "environment": ["package-profile"],
       "toolchains": ["node"],
       "providerEffects": false
@@ -73,7 +94,10 @@
       "id": "signing-preparation",
       "inputs": ["package-archive", "source-tree"],
       "outputs": [
-        { "name": "signing-request", "path": "signing/request.json" }
+        {
+          "name": "signing-request",
+          "path": "signing/request.json"
+        }
       ],
       "environment": ["signing-profile"],
       "toolchains": ["node"],
@@ -81,7 +105,7 @@
     }
   ],
   "projections": {
-    "protectedWorkflow": ".github/workflows/self-build-verify.yml",
+    "protectedWorkflow": ".github/workflows/buildchain.yml",
     "generatedTemplate": "packages/core/adoption/commands/init-repo.mjs",
     "agentGuidance": "AGENTS.md",
     "manual": "docs/v4-stage-capsule.md"

package/architecture/release-topology.json

@@ -17,6 +17,8 @@
       ".github/workflows/.release-pipeline-version.yml",
       ".github/workflows/.release-promote.yml",
       ".github/workflows/build.yml",
+      ".github/workflows/buildchain-recover.yml",
+      ".github/workflows/buildchain.yml",
       ".github/workflows/public-build-demo.yml",
       ".github/workflows/public-ops-alpha-candidate-patrol.yml",
       ".github/workflows/public-ops-dev-auto-merge.yml",
@@ -30,41 +32,22 @@
       ".github/workflows/public-release-promote.yml",
       ".github/workflows/public-release-propagation.yml",
       ".github/workflows/public-release-tail.yml",
-      ".github/workflows/public-release-web.yml",
-      ".github/workflows/self-build-alpha-dogfood.yml",
-      ".github/workflows/self-build-demo-dogfood.yml",
-      ".github/workflows/self-build-fixture.yml",
-      ".github/workflows/self-build-stable-dogfood.yml",
-      ".github/workflows/self-ops-dev-delivery.yml",
-      ".github/workflows/self-ops-patrol-daily.yml",
-      ".github/workflows/self-ops-patrol-monthly.yml",
-      ".github/workflows/self-ops-patrol-weekly.yml",
-      ".github/workflows/self-ops-promotion-recovery.yml",
-      ".github/workflows/self-ops-stable-candidate-patrol.yml",
-      ".github/workflows/self-release-binary-assets.yml",
-      ".github/workflows/self-release-line-open.yml",
-      ".github/workflows/self-release-next-development.yml",
-      ".github/workflows/self-release-npm-dry-run.yml",
-      ".github/workflows/self-release-promote.yml",
-      ".github/workflows/self-release-rehearsal-dogfood.yml",
-      ".github/workflows/self-release-tail-dogfood.yml"
+      ".github/workflows/public-release-web.yml"
     ],
     "unknownTopologyPolicy": "fail-closed"
   },
   "semanticScope": {
     "workflowPaths": [
       ".github/workflows/.release-promote.yml",
-      ".github/workflows/self-ops-promotion-recovery.yml",
-      ".github/workflows/self-release-promote.yml",
-      ".github/workflows/public-release-promote.yml",
-      ".github/workflows/self-release-tail-dogfood.yml"
+      ".github/workflows/public-release-promote.yml"
     ],
     "excludedMechanisms": [
       "Paper product release",
       "npm dry-run",
       "Protected generated version review: no package, tag or Release mutation; independently inventoried in closedWorld and privilegedExecutableClosure. Stable finalization review consumes the exact tag and regenerates the rooted version state before protected auto-merge.",
       "Post-publication protected development review: no package, tag or Release mutation; independently inventoried in closedWorld and privilegedExecutableClosure.",
-      "Post-publication OCI Compose preview activation is measured separately in postPublicationScope; it consumes completed publication and qualification, copies one manifest to the sealed alias, and cannot materialize versions or release refs."
+      "Post-publication OCI Compose preview activation is measured separately in postPublicationScope; it consumes completed publication and qualification, copies one manifest to the sealed alias, and cannot materialize versions or release refs.",
+      "Generated normal and recovery callers delegate to the public pipeline; their authority is measured in pipelinePublicationScope, including the product publisher."
     ]
   },
   "authorityClosure": {
@@ -99,7 +82,10 @@
       "packages/core/runtime/entry/selection.js",
       "packages/core/runtime/entry/source.js"
     ],
-    "runtimeEngines": ["packages/core/release/promote-candidate/action.js"],
+    "runtimeEngines": [
+      "packages/core/release/promote-candidate/action.js",
+      "packages/core/publication/pipeline/apply.js"
+    ],
     "terminalProjections": [
       "actions/release/promotion/apply/action.yml",
       "actions/release/promotion/settle/action.yml",
@@ -433,8 +419,8 @@
       "packages/core/release/promote-ref/internal/promote-release-channel.js",
       "packages/core/release/promote-ref/lib.js"
     ],
-    "freshEntry": ".github/workflows/public-release-promote.yml",
-    "recoveryEntry": ".github/workflows/self-ops-promotion-recovery.yml",
+    "freshEntry": ".github/workflows/public-ops-pipeline.yml",
+    "recoveryEntry": ".github/workflows/public-ops-recover.yml",
     "forbiddenPublisherPatterns": [
       "legacy-promote",
       "v4-declarative-promote",
@@ -513,54 +499,19 @@
           "resolve-promotion|runner|-|read|-|jobOutput|-"
         ],
         "reusableEdges": ["./.github/workflows/.release-promote.yml"]
-      },
-      {
-        "path": ".github/workflows/self-ops-promotion-recovery.yml",
-        "triggers": ["workflow_dispatch"],
-        "jobs": [
-          "resume|reusable-call|kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4|write|write|-|contents-write,oidc-write"
-        ],
-        "reusableEdges": [
-          "kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4"
-        ]
-      },
-      {
-        "path": ".github/workflows/self-release-promote.yml",
-        "triggers": ["workflow_dispatch", "workflow_run"],
-        "jobs": [
-          "classify-workflow-run|runner|-|read|-|jobOutput|-",
-          "execution-runtime|runner|-|read|-|jobOutput|-",
-          "promote|reusable-call|kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4|write|write|-|contents-write,oidc-write",
-          "reject-invalid-candidate-recovery|runner|-|read|-|-|-",
-          "reject-invalid-durable-recovery|runner|-|read|-|-|-",
-          "reject-manual-apply|runner|-|read|-|-|-"
-        ],
-        "reusableEdges": [
-          "kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4"
-        ]
-      },
-      {
-        "path": ".github/workflows/self-release-tail-dogfood.yml",
-        "triggers": ["workflow_dispatch"],
-        "jobs": [
-          "publish|reusable-call|kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4|write|write|-|contents-write,oidc-write"
-        ],
-        "reusableEdges": [
-          "kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4"
-        ]
       }
     ],
     "metrics": {
-      "workflowCount": 39,
-      "jobCount": 116,
-      "reusableEdgeCount": 26,
-      "mutationRelevantNodeCount": 77,
-      "contentsWriteJobCount": 38,
-      "oidcWriteJobCount": 25
+      "workflowCount": 24,
+      "jobCount": 87,
+      "reusableEdgeCount": 14,
+      "mutationRelevantNodeCount": 60,
+      "contentsWriteJobCount": 29,
+      "oidcWriteJobCount": 21
     },
     "semanticMetrics": {
-      "workflowCount": 5,
-      "mutationRelevantNodeCount": 8,
+      "workflowCount": 2,
+      "mutationRelevantNodeCount": 5,
       "contentsWriteJobCount": 1,
       "oidcWriteJobCount": 1
     }
@@ -613,16 +564,18 @@
       ".github/workflows/public-ops-pipeline.yml",
       ".github/workflows/public-ops-recover.yml",
       ".github/workflows/.ops-pipeline-execute.yml",
-      ".github/workflows/.release-pipeline-version.yml"
+      ".github/workflows/.release-pipeline-version.yml",
+      ".github/workflows/buildchain.yml",
+      ".github/workflows/buildchain-recover.yml"
     ],
     "authority": "retained-protected-source-qualified-sealed-products-and-live-provider-readback",
     "maximumMetrics": {
-      "workflowCount": 5,
-      "jobCount": 21,
-      "reusableEdgeCount": 6,
-      "mutationRelevantNodeCount": 16,
-      "contentsWriteJobCount": 16,
-      "oidcWriteJobCount": 6
+      "workflowCount": 7,
+      "jobCount": 23,
+      "reusableEdgeCount": 8,
+      "mutationRelevantNodeCount": 18,
+      "contentsWriteJobCount": 18,
+      "oidcWriteJobCount": 8
     },
     "observedTopology": {
       "jobRecordFields": [
@@ -696,19 +649,46 @@
             "materialize|runner|-|write|-|jobOutput|contents-write"
           ],
           "reusableEdges": []
+        },
+        {
+          "path": ".github/workflows/buildchain.yml",
+          "triggers": [
+            "merge_group",
+            "pull_request",
+            "pull_request_review",
+            "pull_request_target",
+            "push",
+            "repository_dispatch"
+          ],
+          "jobs": [
+            "buildchain|reusable-call|kungfu-systems/buildchain/.github/workflows/public-ops-pipeline.yml@v4-alpha|write|write|-|contents-write,oidc-write"
+          ],
+          "reusableEdges": [
+            "kungfu-systems/buildchain/.github/workflows/public-ops-pipeline.yml@v4-alpha"
+          ]
+        },
+        {
+          "path": ".github/workflows/buildchain-recover.yml",
+          "triggers": ["workflow_dispatch"],
+          "jobs": [
+            "buildchain|reusable-call|kungfu-systems/buildchain/.github/workflows/public-ops-recover.yml@v4-alpha|write|write|-|contents-write,oidc-write"
+          ],
+          "reusableEdges": [
+            "kungfu-systems/buildchain/.github/workflows/public-ops-recover.yml@v4-alpha"
+          ]
         }
       ],
       "metrics": {
-        "workflowCount": 5,
-        "jobCount": 21,
-        "reusableEdgeCount": 6,
-        "mutationRelevantNodeCount": 16,
-        "contentsWriteJobCount": 16,
-        "oidcWriteJobCount": 6
+        "workflowCount": 7,
+        "jobCount": 23,
+        "reusableEdgeCount": 8,
+        "mutationRelevantNodeCount": 18,
+        "contentsWriteJobCount": 18,
+        "oidcWriteJobCount": 8
       },
       "semanticMetrics": {
-        "workflowCount": 5,
-        "mutationRelevantNodeCount": 16,
+        "workflowCount": 7,
+        "mutationRelevantNodeCount": 18,
         "contentsWriteJobCount": 10,
         "oidcWriteJobCount": 3
       }

package/architecture/stage-capsule-qualification.json

@@ -46,7 +46,9 @@
     "relativeOrSelfInvocationAllowed": false,
     "directQualificationInvocationAllowed": false,
     "candidateBranchOverrideAllowed": false,
-    "recursionRecovery": "floating-selector-with-trusted-runtime-input"
+    "recursionRecovery": "floating-selector-with-trusted-runtime-input",
+    "active": false,
+    "supersededBy": ".github/workflows/buildchain.yml"
   },
   "faultCampaign": [
     "corrupt",

package/architecture/universal-workflow-bootstrap.json

@@ -57,7 +57,9 @@
     "runtimeRecovery": "same-public-entry-with-transient-runtime",
     "entryRecovery": "upgrade-public-entry-and-full-rerun",
     "executionAuthority": "selected-runtime",
-    "entryRepairRequiresNewRelease": true
+    "entryRepairRequiresNewRelease": true,
+    "selfDogfoodActive": false,
+    "selfDogfoodSupersededBy": ".github/workflows/buildchain.yml"
   },
   "capabilityAdapters": [
     {

package/architecture/universal-workflow-capability-policy.json

@@ -28,14 +28,15 @@
     "sha256:025e2a4a37bb9364c03aa3c9ab6bad773f78a541203a23791e2d7afd70d773ca",
     "sha256:02e8b51faabbc960e9c70b090426272b720f3e1438b69a0f683b21257bed6302",
     "sha256:07bb744fedc9512b1e40f5c00a0037194fc869600fc7fd07de7f3b975b9760ff",
-    "sha256:13dea813a98cb2cc1a51cafb880127ee2c022f3c5aae5144818aec17e9cb7498",
     "sha256:17c5fc05f8599662cd061a94add5313dc0fcea58404f9a92ee632c98abce24c6",
     "sha256:1f3cbeb68fed850330720784bbe2d1d2c91b759cc2459a7fcd0b150af4c47c34",
     "sha256:24cbb86e8fb198f7a949372291e712dd83ff12ba667c7049775ef497261bc62e",
+    "sha256:2649d77a31c75fb93c40a04dea30362c3247cd777dc8ed38a2487d082d25ab05",
     "sha256:265ccc9da3d84b8bf50746b6722b18c680dcc65bd322a5170e81bd5d0fa5b2b0",
     "sha256:2c5a19fe5ebe2550336c42f7de0c71b0e736776758b404716a5f77e0236920dc",
     "sha256:34829b6e556284ef7c3f342fafcf92588a94761534e5f19ea12131f389ad4f50",
     "sha256:3d6119d1295ea7083d44a1b82fde5cb5dca910e427d1aee119d3ffbf421810f3",
+    "sha256:3da67ab9893f312415d23c3ec55ab2c16d20fb4efef972f954b3099141e42a08",
     "sha256:40fdce377a9b02cb53f41e822cfc5d96c2f7e57a86a7574bf8ee39f3e0f0e12e",
     "sha256:421b65afe174ce4ae57290efc73e43f94140b8ef70a2db5cda43e16921d61b4e",
     "sha256:428467c6ac1d768609ff12e72a190462bab9b5bc7dd2ea491553a364aa4c6ef6",
@@ -59,9 +60,8 @@
     "sha256:dd9ae24a7a586c616a7b3b2b733eb38bfd3f8b19e5faec9e16851719be6abd61",
     "sha256:deee1c61c9731de6e2120abd4c30d3ce760df2ff3f7afb4dd84973543b353660",
     "sha256:e207436baa946b3d25d0159a510b7da474cac8d33701c2e66c089117c05f473d",
-    "sha256:e42c7878242188da76b146480ae7b1d1cc454eb93942d2071e97e458b2c12e2f",
     "sha256:f780070e235bffdee96fc355d7ed5e2fd4188482c41b24e2558a32086634a87c"
   ],
-  "validFrom": "2026-08-30T00:00:00.000Z",
-  "expiresAt": "2026-09-15T00:00:00.000Z"
+  "validFrom": "2026-09-15T00:00:00.000Z",
+  "expiresAt": "2026-10-01T00:00:00.000Z"
 }

package/architecture/universal-workflow-fault-campaign.json

@@ -60,7 +60,9 @@
       "id": "self-dogfood-caller",
       "injectionTarget": ".github/workflows/self-ops-bootstrap-dogfood.yml",
       "recoveryRoute": "upgrade-entry-and-full-rerun",
-      "recoveryTarget": "templates/universal-buildchain-bootstrap.yml"
+      "recoveryTarget": "templates/universal-buildchain-bootstrap.yml",
+      "retired": true,
+      "retirementReason": "Standalone self caller removed; retained campaign does not qualify the minimal pipeline."
     }
   ]
 }