@kungfu-tech/buildchain 4.1.3-alpha.4 → 4.1.3-alpha.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +41 -75
- package/CONTRIBUTING.md +19 -26
- package/architecture/agent-change-map.md +8 -12
- package/architecture/capability-state-machine-manifest.json +1 -4
- package/architecture/ci-lane-change-budget.json +35 -1026
- package/architecture/core-mechanisms.json +3 -6
- package/architecture/internal-capabilities.json +1 -5
- package/architecture/maintainability-debt.json +44 -36
- package/architecture/maintainability-policy.json +8 -8
- package/architecture/minimal-consumer-migration.json +80 -1977
- package/architecture/platform-stage-checkpoints.json +31 -7
- package/architecture/release-topology.json +64 -84
- package/architecture/stage-capsule-qualification.json +3 -1
- package/architecture/universal-workflow-bootstrap.json +3 -1
- package/architecture/universal-workflow-capability-policy.json +4 -4
- package/architecture/universal-workflow-fault-campaign.json +3 -1
- package/architecture/workflow-taxonomy.json +24 -341
- package/dist/site/buildchain-contract.json +13 -67
- package/dist/site/buildchain-site.json +33 -23
- package/dist/site/capability-registry.json +2 -2
- package/dist/site/controller-registry.json +1 -47
- package/dist/site/kfd-claims.json +78 -448
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +3 -3
- package/dist/site/node-api-registry.json +24 -24
- package/dist/site/page-registry.json +26 -16
- package/dist/site/public-surface-audit.json +35 -349
- package/dist/site/publication-authority-registry.json +51 -511
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/site-manifest.json +7 -7
- package/dist/site/workflow-registry.json +263 -1128
- package/docs/code-organization.md +9 -6
- package/docs/node-api-reference.md +57 -57
- package/docs/release-governance.md +10 -12
- package/docs/runtime-entry.md +31 -3
- package/docs/runtime-train-validation.md +39 -11
- package/docs/stable-candidate-patrol.md +6 -5
- package/docs/workflow-catalog.md +3 -32
- package/package.json +1 -1
- package/packages/core/adoption/buildchain-kfd-claims.js +7 -7
- package/packages/core/dev-delivery/dev-delivery-provider-heartbeat.js +18 -15
- package/packages/core/dev-delivery/native/actions.js +2 -0
- package/packages/core/dev-delivery/native/process-entry.js +19 -0
- package/packages/core/dev-delivery/queue/landing-action.js +49 -1
- package/packages/core/dev-delivery/warrant/failure-settlement.js +8 -6
- package/packages/core/dev-delivery/warrant/service.js +7 -0
- package/packages/core/governance/buildchain-publication-authority.js +2 -23
- package/packages/core/governance/github-governance-authority.js +1 -0
- package/packages/core/observability/controller-evidence.js +0 -8
- package/packages/core/providers/github/pipeline-entry-runs.js +8 -1
- package/packages/core/providers/github/pipeline-events.js +79 -0
- package/packages/core/providers/github/pipeline-source.js +24 -7
- package/packages/core/publication/pipeline/pack.js +31 -8
- package/packages/core/workflow/pipeline/actions.js +0 -23
- package/packages/core/workflow/pipeline/build-evidence.js +123 -5
- package/packages/core/workflow/pipeline/build-result.js +1 -0
- package/packages/core/workflow/pipeline/channel-control.js +25 -4
- package/packages/core/workflow/pipeline/controller.js +9 -1
- package/packages/core/workflow/pipeline/delivery-control.js +54 -9
- package/packages/core/workflow/pipeline/delivery-observation.js +16 -10
- package/packages/core/workflow/pipeline/group-control.js +1 -0
- package/packages/core/workflow/pipeline/guard-build.js +37 -0
- package/packages/core/workflow/pipeline/guard.js +4 -2
- package/packages/core/workflow/pipeline/host.js +23 -1
- package/packages/core/workflow/pipeline/integration-status.js +113 -0
- package/packages/core/workflow/pipeline/record-action.js +27 -0
- package/packages/core/workflow/pipeline/recorder-status.js +69 -0
- package/packages/core/workflow/workflow-taxonomy.mjs +67 -47
- package/scripts/check-inventory.mjs +7 -70
- package/scripts/check-pipeline-publication-topology.mjs +2 -0
- package/scripts/check-public-dogfood-contract.mjs +38 -51
- package/scripts/check-release-topology.mjs +8 -7
- package/scripts/check-self-consumer-contract.mjs +133 -0
- package/scripts/check-universal-workflow-bootstrap.mjs +4 -6
- package/scripts/generate-minimal-consumer-contract.mjs +1 -1
- package/scripts/inventory/binary.mjs +9 -19
- package/scripts/inventory/promotion.mjs +2 -13
- package/scripts/prepare-product-toolchain.mjs +10 -0
- package/scripts/verify-product-platform.mjs +65 -0
|
@@ -115,50 +115,6 @@
|
|
|
115
115
|
"invocation": "dispatch-service",
|
|
116
116
|
"rationale": "Buildchain Artifact Signing Authority: owned release public workflow with one canonical implementation."
|
|
117
117
|
},
|
|
118
|
-
{
|
|
119
|
-
"id": "auditable-demo",
|
|
120
|
-
"role": "self",
|
|
121
|
-
"category": "build",
|
|
122
|
-
"purpose": "demo-dogfood",
|
|
123
|
-
"summary": "Buildchain Declarative Demo Dogfood",
|
|
124
|
-
"owner": "kungfu-origin",
|
|
125
|
-
"status": "active",
|
|
126
|
-
"invocation": "repository",
|
|
127
|
-
"rationale": "Buildchain Declarative Demo Dogfood: owned build self workflow with one canonical implementation."
|
|
128
|
-
},
|
|
129
|
-
{
|
|
130
|
-
"id": "auditable-demo-media-profile-qualification",
|
|
131
|
-
"role": "self",
|
|
132
|
-
"category": "build",
|
|
133
|
-
"purpose": "demo-media-qualification",
|
|
134
|
-
"summary": "Auditable Demo Media Profile Qualification",
|
|
135
|
-
"owner": "kungfu-origin",
|
|
136
|
-
"status": "active",
|
|
137
|
-
"invocation": "repository",
|
|
138
|
-
"rationale": "Auditable Demo Media Profile Qualification: owned build self workflow with one canonical implementation."
|
|
139
|
-
},
|
|
140
|
-
{
|
|
141
|
-
"id": "binary-distribution",
|
|
142
|
-
"role": "self",
|
|
143
|
-
"category": "build",
|
|
144
|
-
"purpose": "binary-distribution",
|
|
145
|
-
"summary": "Binary Distribution",
|
|
146
|
-
"owner": "kungfu-origin",
|
|
147
|
-
"status": "active",
|
|
148
|
-
"invocation": "repository",
|
|
149
|
-
"rationale": "Binary Distribution: owned build self workflow with one canonical implementation."
|
|
150
|
-
},
|
|
151
|
-
{
|
|
152
|
-
"id": "binary-release-assets",
|
|
153
|
-
"role": "self",
|
|
154
|
-
"category": "release",
|
|
155
|
-
"purpose": "binary-assets",
|
|
156
|
-
"summary": "Binary Release Assets",
|
|
157
|
-
"owner": "kungfu-origin",
|
|
158
|
-
"status": "active",
|
|
159
|
-
"invocation": "repository",
|
|
160
|
-
"rationale": "Binary Release Assets: owned release self workflow with one canonical implementation."
|
|
161
|
-
},
|
|
162
118
|
{
|
|
163
119
|
"id": "bootstrap",
|
|
164
120
|
"role": "public",
|
|
@@ -182,50 +138,6 @@
|
|
|
182
138
|
"rationale": "Buildchain Channel Build: owned build public workflow with one canonical implementation.",
|
|
183
139
|
"path": ".github/workflows/build.yml"
|
|
184
140
|
},
|
|
185
|
-
{
|
|
186
|
-
"id": "build-surface-fixture",
|
|
187
|
-
"role": "self",
|
|
188
|
-
"category": "build",
|
|
189
|
-
"purpose": "fixture",
|
|
190
|
-
"summary": "Build Surface Fixture",
|
|
191
|
-
"owner": "kungfu-origin",
|
|
192
|
-
"status": "active",
|
|
193
|
-
"invocation": "repository",
|
|
194
|
-
"rationale": "Build Surface Fixture: owned build self workflow with one canonical implementation."
|
|
195
|
-
},
|
|
196
|
-
{
|
|
197
|
-
"id": "buildchain-alpha-self-dogfood",
|
|
198
|
-
"role": "self",
|
|
199
|
-
"category": "build",
|
|
200
|
-
"purpose": "alpha-dogfood",
|
|
201
|
-
"summary": "Buildchain Alpha Self-Dogfood",
|
|
202
|
-
"owner": "kungfu-origin",
|
|
203
|
-
"status": "active",
|
|
204
|
-
"invocation": "repository",
|
|
205
|
-
"rationale": "Buildchain Alpha Self-Dogfood: owned build self workflow with one canonical implementation."
|
|
206
|
-
},
|
|
207
|
-
{
|
|
208
|
-
"id": "buildchain-stable-self-dogfood",
|
|
209
|
-
"role": "self",
|
|
210
|
-
"category": "build",
|
|
211
|
-
"purpose": "stable-dogfood",
|
|
212
|
-
"summary": "Buildchain Stable Self-Dogfood",
|
|
213
|
-
"owner": "kungfu-origin",
|
|
214
|
-
"status": "active",
|
|
215
|
-
"invocation": "repository",
|
|
216
|
-
"rationale": "Buildchain Stable Self-Dogfood: owned build self workflow with one canonical implementation."
|
|
217
|
-
},
|
|
218
|
-
{
|
|
219
|
-
"id": "buildchain-dev-delivery",
|
|
220
|
-
"role": "self",
|
|
221
|
-
"category": "ops",
|
|
222
|
-
"purpose": "dev-delivery",
|
|
223
|
-
"summary": "Buildchain Dev Delivery",
|
|
224
|
-
"owner": "kungfu-origin",
|
|
225
|
-
"status": "active",
|
|
226
|
-
"invocation": "repository",
|
|
227
|
-
"rationale": "Buildchain Dev Delivery: owned ops self workflow with one canonical implementation."
|
|
228
|
-
},
|
|
229
141
|
{
|
|
230
142
|
"id": "buildchain-patrol",
|
|
231
143
|
"role": "public",
|
|
@@ -237,83 +149,6 @@
|
|
|
237
149
|
"invocation": "reusable",
|
|
238
150
|
"rationale": "Buildchain Patrol: owned ops public workflow with one canonical implementation."
|
|
239
151
|
},
|
|
240
|
-
{
|
|
241
|
-
"id": "buildchain-patrol-daily",
|
|
242
|
-
"role": "self",
|
|
243
|
-
"category": "ops",
|
|
244
|
-
"purpose": "patrol-daily",
|
|
245
|
-
"summary": "Buildchain Dogfood Patrol Daily",
|
|
246
|
-
"owner": "kungfu-origin",
|
|
247
|
-
"status": "active",
|
|
248
|
-
"invocation": "repository",
|
|
249
|
-
"rationale": "Buildchain Dogfood Patrol Daily: owned ops self workflow with one canonical implementation."
|
|
250
|
-
},
|
|
251
|
-
{
|
|
252
|
-
"id": "buildchain-patrol-monthly",
|
|
253
|
-
"role": "self",
|
|
254
|
-
"category": "ops",
|
|
255
|
-
"purpose": "patrol-monthly",
|
|
256
|
-
"summary": "Buildchain Dogfood Patrol Monthly",
|
|
257
|
-
"owner": "kungfu-origin",
|
|
258
|
-
"status": "active",
|
|
259
|
-
"invocation": "repository",
|
|
260
|
-
"rationale": "Buildchain Dogfood Patrol Monthly: owned ops self workflow with one canonical implementation."
|
|
261
|
-
},
|
|
262
|
-
{
|
|
263
|
-
"id": "buildchain-patrol-weekly",
|
|
264
|
-
"role": "self",
|
|
265
|
-
"category": "ops",
|
|
266
|
-
"purpose": "patrol-weekly",
|
|
267
|
-
"summary": "Buildchain Dogfood Patrol Weekly",
|
|
268
|
-
"owner": "kungfu-origin",
|
|
269
|
-
"status": "active",
|
|
270
|
-
"invocation": "repository",
|
|
271
|
-
"rationale": "Buildchain Dogfood Patrol Weekly: owned ops self workflow with one canonical implementation."
|
|
272
|
-
},
|
|
273
|
-
{
|
|
274
|
-
"id": "buildchain-ref-promotion",
|
|
275
|
-
"role": "self",
|
|
276
|
-
"category": "release",
|
|
277
|
-
"purpose": "promote",
|
|
278
|
-
"summary": "Buildchain Ref Promotion",
|
|
279
|
-
"owner": "kungfu-origin",
|
|
280
|
-
"status": "active",
|
|
281
|
-
"invocation": "repository",
|
|
282
|
-
"rationale": "Buildchain Ref Promotion: owned release self workflow with one canonical implementation."
|
|
283
|
-
},
|
|
284
|
-
{
|
|
285
|
-
"id": "buildchain-ref-promotion-recovery",
|
|
286
|
-
"role": "self",
|
|
287
|
-
"category": "ops",
|
|
288
|
-
"purpose": "promotion-recovery",
|
|
289
|
-
"summary": "Buildchain Ref Promotion Recovery",
|
|
290
|
-
"owner": "kungfu-origin",
|
|
291
|
-
"status": "active",
|
|
292
|
-
"invocation": "repository",
|
|
293
|
-
"rationale": "Buildchain Ref Promotion Recovery: owned ops self workflow with one canonical implementation."
|
|
294
|
-
},
|
|
295
|
-
{
|
|
296
|
-
"id": "buildchain-stable-candidate-patrol",
|
|
297
|
-
"role": "self",
|
|
298
|
-
"category": "ops",
|
|
299
|
-
"purpose": "stable-candidate-patrol",
|
|
300
|
-
"summary": "Buildchain Dogfood Stable Candidate Patrol",
|
|
301
|
-
"owner": "kungfu-origin",
|
|
302
|
-
"status": "active",
|
|
303
|
-
"invocation": "repository",
|
|
304
|
-
"rationale": "Buildchain Dogfood Stable Candidate Patrol: owned ops self workflow with one canonical implementation."
|
|
305
|
-
},
|
|
306
|
-
{
|
|
307
|
-
"id": "buildchain-stable-candidate-qualification",
|
|
308
|
-
"role": "self",
|
|
309
|
-
"category": "build",
|
|
310
|
-
"purpose": "stable-candidate-qualification",
|
|
311
|
-
"summary": "Buildchain Stable Candidate Qualification",
|
|
312
|
-
"owner": "kungfu-origin",
|
|
313
|
-
"status": "active",
|
|
314
|
-
"invocation": "repository",
|
|
315
|
-
"rationale": "Buildchain Stable Candidate Qualification: owned build self workflow with one canonical implementation."
|
|
316
|
-
},
|
|
317
152
|
{
|
|
318
153
|
"id": "check",
|
|
319
154
|
"role": "public",
|
|
@@ -358,17 +193,6 @@
|
|
|
358
193
|
"invocation": "reusable",
|
|
359
194
|
"rationale": "Dev Delivery Warrant Close: owned ops public workflow with one canonical implementation."
|
|
360
195
|
},
|
|
361
|
-
{
|
|
362
|
-
"id": "dev-merge-queue-governance",
|
|
363
|
-
"role": "self",
|
|
364
|
-
"category": "ops",
|
|
365
|
-
"purpose": "merge-queue",
|
|
366
|
-
"summary": "Dev Merge Queue Governance",
|
|
367
|
-
"owner": "kungfu-origin",
|
|
368
|
-
"status": "active",
|
|
369
|
-
"invocation": "repository",
|
|
370
|
-
"rationale": "Dev Merge Queue Governance: owned ops self workflow with one canonical implementation."
|
|
371
|
-
},
|
|
372
196
|
{
|
|
373
197
|
"id": "dev-pr-auto-merge",
|
|
374
198
|
"role": "public",
|
|
@@ -402,39 +226,6 @@
|
|
|
402
226
|
"invocation": "reusable",
|
|
403
227
|
"rationale": "Engineering Housekeeper: owned ops public workflow with one canonical implementation."
|
|
404
228
|
},
|
|
405
|
-
{
|
|
406
|
-
"id": "engineering-housekeeper-daily",
|
|
407
|
-
"role": "self",
|
|
408
|
-
"category": "ops",
|
|
409
|
-
"purpose": "housekeeping-daily",
|
|
410
|
-
"summary": "Engineering Housekeeper Daily",
|
|
411
|
-
"owner": "kungfu-origin",
|
|
412
|
-
"status": "active",
|
|
413
|
-
"invocation": "repository",
|
|
414
|
-
"rationale": "Engineering Housekeeper Daily: owned ops self workflow with one canonical implementation."
|
|
415
|
-
},
|
|
416
|
-
{
|
|
417
|
-
"id": "engineering-housekeeper-monthly",
|
|
418
|
-
"role": "self",
|
|
419
|
-
"category": "ops",
|
|
420
|
-
"purpose": "housekeeping-monthly",
|
|
421
|
-
"summary": "Engineering Housekeeper Monthly",
|
|
422
|
-
"owner": "kungfu-origin",
|
|
423
|
-
"status": "active",
|
|
424
|
-
"invocation": "repository",
|
|
425
|
-
"rationale": "Engineering Housekeeper Monthly: owned ops self workflow with one canonical implementation."
|
|
426
|
-
},
|
|
427
|
-
{
|
|
428
|
-
"id": "engineering-housekeeper-weekly",
|
|
429
|
-
"role": "self",
|
|
430
|
-
"category": "ops",
|
|
431
|
-
"purpose": "housekeeping-weekly",
|
|
432
|
-
"summary": "Engineering Housekeeper Weekly",
|
|
433
|
-
"owner": "kungfu-origin",
|
|
434
|
-
"status": "active",
|
|
435
|
-
"invocation": "repository",
|
|
436
|
-
"rationale": "Engineering Housekeeper Weekly: owned ops self workflow with one canonical implementation."
|
|
437
|
-
},
|
|
438
229
|
{
|
|
439
230
|
"id": "github-artifact-attestation",
|
|
440
231
|
"role": "public",
|
|
@@ -446,39 +237,6 @@
|
|
|
446
237
|
"invocation": "reusable",
|
|
447
238
|
"rationale": "Buildchain GitHub Artifact Attestation: owned release public workflow with one canonical implementation."
|
|
448
239
|
},
|
|
449
|
-
{
|
|
450
|
-
"id": "github-governance-audit",
|
|
451
|
-
"role": "self",
|
|
452
|
-
"category": "ops",
|
|
453
|
-
"purpose": "governance-audit",
|
|
454
|
-
"summary": "GitHub Governance Authority Audit",
|
|
455
|
-
"owner": "kungfu-origin",
|
|
456
|
-
"status": "active",
|
|
457
|
-
"invocation": "repository",
|
|
458
|
-
"rationale": "GitHub Governance Authority Audit: owned ops self workflow with one canonical implementation."
|
|
459
|
-
},
|
|
460
|
-
{
|
|
461
|
-
"id": "next-development-review",
|
|
462
|
-
"role": "self",
|
|
463
|
-
"category": "release",
|
|
464
|
-
"purpose": "next-development",
|
|
465
|
-
"summary": "Next Development Review",
|
|
466
|
-
"owner": "kungfu-origin",
|
|
467
|
-
"status": "active",
|
|
468
|
-
"invocation": "repository",
|
|
469
|
-
"rationale": "Next Development Review: owned release self workflow with one canonical implementation."
|
|
470
|
-
},
|
|
471
|
-
{
|
|
472
|
-
"id": "npm-publish",
|
|
473
|
-
"role": "self",
|
|
474
|
-
"category": "release",
|
|
475
|
-
"purpose": "npm-dry-run",
|
|
476
|
-
"summary": "Publish npm package",
|
|
477
|
-
"owner": "kungfu-origin",
|
|
478
|
-
"status": "active",
|
|
479
|
-
"invocation": "repository",
|
|
480
|
-
"rationale": "Publish npm package: owned release self workflow with one canonical implementation."
|
|
481
|
-
},
|
|
482
240
|
{
|
|
483
241
|
"id": "paper-release",
|
|
484
242
|
"role": "public",
|
|
@@ -567,17 +325,6 @@
|
|
|
567
325
|
"invocation": "reusable",
|
|
568
326
|
"rationale": "Release Governance Reconcile: owned ops public workflow with one canonical implementation."
|
|
569
327
|
},
|
|
570
|
-
{
|
|
571
|
-
"id": "release-line-bootstrap",
|
|
572
|
-
"role": "self",
|
|
573
|
-
"category": "release",
|
|
574
|
-
"purpose": "line-open",
|
|
575
|
-
"summary": "Release Line Bootstrap",
|
|
576
|
-
"owner": "kungfu-origin",
|
|
577
|
-
"status": "active",
|
|
578
|
-
"invocation": "repository",
|
|
579
|
-
"rationale": "Release Line Bootstrap: owned release self workflow with one canonical implementation."
|
|
580
|
-
},
|
|
581
328
|
{
|
|
582
329
|
"id": "release-propagation",
|
|
583
330
|
"role": "public",
|
|
@@ -600,17 +347,6 @@
|
|
|
600
347
|
"invocation": "reusable",
|
|
601
348
|
"rationale": "Declarative Release Tail: owned release public workflow with one canonical implementation."
|
|
602
349
|
},
|
|
603
|
-
{
|
|
604
|
-
"id": "self-hosted-runner-smoke",
|
|
605
|
-
"role": "self",
|
|
606
|
-
"category": "ops",
|
|
607
|
-
"purpose": "runner-smoke",
|
|
608
|
-
"summary": "Self-hosted Runner Smoke",
|
|
609
|
-
"owner": "kungfu-origin",
|
|
610
|
-
"status": "active",
|
|
611
|
-
"invocation": "repository",
|
|
612
|
-
"rationale": "Self-hosted Runner Smoke: owned ops self workflow with one canonical implementation."
|
|
613
|
-
},
|
|
614
350
|
{
|
|
615
351
|
"id": "stable-candidate-patrol",
|
|
616
352
|
"role": "public",
|
|
@@ -622,17 +358,6 @@
|
|
|
622
358
|
"invocation": "reusable",
|
|
623
359
|
"rationale": "Buildchain Stable Candidate Patrol: owned ops public workflow with one canonical implementation."
|
|
624
360
|
},
|
|
625
|
-
{
|
|
626
|
-
"id": "universal-bootstrap-dogfood",
|
|
627
|
-
"role": "self",
|
|
628
|
-
"category": "ops",
|
|
629
|
-
"purpose": "bootstrap-dogfood",
|
|
630
|
-
"summary": "Universal Bootstrap Train-First Self-Dogfood",
|
|
631
|
-
"owner": "kungfu-origin",
|
|
632
|
-
"status": "active",
|
|
633
|
-
"invocation": "repository",
|
|
634
|
-
"rationale": "Universal Bootstrap Train-First Self-Dogfood: owned ops self workflow with one canonical implementation."
|
|
635
|
-
},
|
|
636
361
|
{
|
|
637
362
|
"id": "v4-adopter-delivery",
|
|
638
363
|
"role": "public",
|
|
@@ -644,50 +369,6 @@
|
|
|
644
369
|
"invocation": "reusable",
|
|
645
370
|
"rationale": "V4 Adopter Delivery: owned build public workflow with one canonical implementation."
|
|
646
371
|
},
|
|
647
|
-
{
|
|
648
|
-
"id": "v4-adopter-delivery-dogfood",
|
|
649
|
-
"role": "self",
|
|
650
|
-
"category": "build",
|
|
651
|
-
"purpose": "adopter-dogfood",
|
|
652
|
-
"summary": "V4 Adopter Delivery Dogfood",
|
|
653
|
-
"owner": "kungfu-origin",
|
|
654
|
-
"status": "active",
|
|
655
|
-
"invocation": "repository",
|
|
656
|
-
"rationale": "V4 Adopter Delivery Dogfood: owned build self workflow with one canonical implementation."
|
|
657
|
-
},
|
|
658
|
-
{
|
|
659
|
-
"id": "v4-declarative-release-tail-dogfood",
|
|
660
|
-
"role": "self",
|
|
661
|
-
"category": "release",
|
|
662
|
-
"purpose": "tail-dogfood",
|
|
663
|
-
"summary": "V4 Declarative Release Tail Dogfood",
|
|
664
|
-
"owner": "kungfu-origin",
|
|
665
|
-
"status": "active",
|
|
666
|
-
"invocation": "repository",
|
|
667
|
-
"rationale": "V4 Declarative Release Tail Dogfood: owned release self workflow with one canonical implementation."
|
|
668
|
-
},
|
|
669
|
-
{
|
|
670
|
-
"id": "v4-public-consumer-dogfood",
|
|
671
|
-
"role": "self",
|
|
672
|
-
"category": "build",
|
|
673
|
-
"purpose": "public-consumer-dogfood",
|
|
674
|
-
"summary": "V4 Public Consumer Dogfood",
|
|
675
|
-
"owner": "kungfu-origin",
|
|
676
|
-
"status": "active",
|
|
677
|
-
"invocation": "repository",
|
|
678
|
-
"rationale": "V4 Public Consumer Dogfood: owned build self workflow with one canonical implementation."
|
|
679
|
-
},
|
|
680
|
-
{
|
|
681
|
-
"id": "v4-publication-rehearsal-dogfood",
|
|
682
|
-
"role": "self",
|
|
683
|
-
"category": "release",
|
|
684
|
-
"purpose": "rehearsal-dogfood",
|
|
685
|
-
"summary": "V4 Publication Rehearsal Dogfood",
|
|
686
|
-
"owner": "kungfu-origin",
|
|
687
|
-
"status": "active",
|
|
688
|
-
"invocation": "repository",
|
|
689
|
-
"rationale": "V4 Publication Rehearsal Dogfood: owned release self workflow with one canonical implementation."
|
|
690
|
-
},
|
|
691
372
|
{
|
|
692
373
|
"id": "v4-stage-capsule-canary",
|
|
693
374
|
"role": "public",
|
|
@@ -710,17 +391,6 @@
|
|
|
710
391
|
"invocation": "reusable",
|
|
711
392
|
"rationale": "V4 Retained Candidate Tail Reseal: owned ops public workflow with one canonical implementation."
|
|
712
393
|
},
|
|
713
|
-
{
|
|
714
|
-
"id": "verify",
|
|
715
|
-
"role": "self",
|
|
716
|
-
"category": "build",
|
|
717
|
-
"purpose": "verify",
|
|
718
|
-
"summary": "Verify",
|
|
719
|
-
"owner": "kungfu-origin",
|
|
720
|
-
"status": "active",
|
|
721
|
-
"invocation": "repository",
|
|
722
|
-
"rationale": "Verify: owned build self workflow with one canonical implementation."
|
|
723
|
-
},
|
|
724
394
|
{
|
|
725
395
|
"id": "oci-compose-preview",
|
|
726
396
|
"role": "public",
|
|
@@ -732,17 +402,6 @@
|
|
|
732
402
|
"invocation": "reusable",
|
|
733
403
|
"rationale": "Buildchain OCI Compose Preview: owned release public workflow with one canonical implementation."
|
|
734
404
|
},
|
|
735
|
-
{
|
|
736
|
-
"id": "channel-verify",
|
|
737
|
-
"role": "self",
|
|
738
|
-
"category": "build",
|
|
739
|
-
"purpose": "channel-verify",
|
|
740
|
-
"summary": "Release - Verify",
|
|
741
|
-
"owner": "kungfu-origin",
|
|
742
|
-
"status": "active",
|
|
743
|
-
"invocation": "repository",
|
|
744
|
-
"rationale": "Verify exact release PR lineage without retired prebuild, dependency discovery, version mutation or approval adapters."
|
|
745
|
-
},
|
|
746
405
|
{
|
|
747
406
|
"id": "pipeline",
|
|
748
407
|
"role": "public",
|
|
@@ -808,6 +467,30 @@
|
|
|
808
467
|
"status": "active",
|
|
809
468
|
"invocation": "reusable",
|
|
810
469
|
"rationale": "Regenerate declared version material in credentialless product jobs and independently qualify it before publication or protected next-development Git writes."
|
|
470
|
+
},
|
|
471
|
+
{
|
|
472
|
+
"id": "buildchain",
|
|
473
|
+
"role": "self",
|
|
474
|
+
"category": "ops",
|
|
475
|
+
"purpose": "pipeline",
|
|
476
|
+
"summary": "Buildchain pipeline",
|
|
477
|
+
"owner": "kungfu-origin",
|
|
478
|
+
"status": "active",
|
|
479
|
+
"invocation": "repository",
|
|
480
|
+
"rationale": "Generated minimal consumer caller; all orchestration belongs to the published runtime.",
|
|
481
|
+
"path": ".github/workflows/buildchain.yml"
|
|
482
|
+
},
|
|
483
|
+
{
|
|
484
|
+
"id": "buildchain-recover",
|
|
485
|
+
"role": "self",
|
|
486
|
+
"category": "ops",
|
|
487
|
+
"purpose": "recovery",
|
|
488
|
+
"summary": "Buildchain recovery",
|
|
489
|
+
"owner": "kungfu-origin",
|
|
490
|
+
"status": "active",
|
|
491
|
+
"invocation": "repository",
|
|
492
|
+
"rationale": "Generated minimal consumer caller; all orchestration belongs to the published runtime.",
|
|
493
|
+
"path": ".github/workflows/buildchain-recover.yml"
|
|
811
494
|
}
|
|
812
495
|
]
|
|
813
496
|
}
|
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"name": "Buildchain",
|
|
6
6
|
"package": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "4.1.3-alpha.
|
|
7
|
+
"version": "4.1.3-alpha.6",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"majorLine": "v4",
|
|
@@ -987,7 +987,7 @@
|
|
|
987
987
|
"manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
|
|
988
988
|
],
|
|
989
989
|
"breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
|
|
990
|
-
"auditDigest": "sha256:
|
|
990
|
+
"auditDigest": "sha256:8e402d7c63f47616e20428339384117ad77dafb4167488b3141fe7d4ba8a31f2"
|
|
991
991
|
},
|
|
992
992
|
{
|
|
993
993
|
"contractVersion": 1,
|
|
@@ -1009,7 +1009,7 @@
|
|
|
1009
1009
|
"agents can discover supported Node APIs without importing internal file paths"
|
|
1010
1010
|
],
|
|
1011
1011
|
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
|
|
1012
|
-
"auditDigest": "sha256:
|
|
1012
|
+
"auditDigest": "sha256:a0b5493e6dfb712073b13d967a4802cc5accb22f9eae6905eb4340a57bb7fe95"
|
|
1013
1013
|
},
|
|
1014
1014
|
{
|
|
1015
1015
|
"contractVersion": 1,
|
|
@@ -1066,7 +1066,7 @@
|
|
|
1066
1066
|
"controllerDescriptor": {
|
|
1067
1067
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1068
1068
|
"digest": "sha256:3f2f0e2f9f8a21ea3db046cb477f2534711de29745e3f40be959eef398a2e692",
|
|
1069
|
-
"registryDigest": "sha256:
|
|
1069
|
+
"registryDigest": "sha256:e4a23fdcb6c8f3483e8c5dc70f813cec94313597f6196189d0f14e2c084ea7f4",
|
|
1070
1070
|
"inputClassifications": {
|
|
1071
1071
|
"contract-lock": {
|
|
1072
1072
|
"classification": "included",
|
|
@@ -1188,7 +1188,7 @@
|
|
|
1188
1188
|
"controllerDescriptor": {
|
|
1189
1189
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1190
1190
|
"digest": "sha256:849a51ff18efbc2bf4668cd6ba6e08004caf5fc01de4676eade0f917d24c5fd1",
|
|
1191
|
-
"registryDigest": "sha256:
|
|
1191
|
+
"registryDigest": "sha256:e4a23fdcb6c8f3483e8c5dc70f813cec94313597f6196189d0f14e2c084ea7f4",
|
|
1192
1192
|
"inputClassifications": {
|
|
1193
1193
|
"BUILDCHAIN_MACOS_CERTIFICATE_P12_BASE64": {
|
|
1194
1194
|
"classification": "redacted",
|
|
@@ -1318,7 +1318,7 @@
|
|
|
1318
1318
|
"controllerDescriptor": {
|
|
1319
1319
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1320
1320
|
"digest": "sha256:83fb2f980409ff9eb7091fc675b1f1ecd471d335945d8fa6003357f0af709dd5",
|
|
1321
|
-
"registryDigest": "sha256:
|
|
1321
|
+
"registryDigest": "sha256:e4a23fdcb6c8f3483e8c5dc70f813cec94313597f6196189d0f14e2c084ea7f4",
|
|
1322
1322
|
"inputClassifications": {
|
|
1323
1323
|
"artifact-name": {
|
|
1324
1324
|
"classification": "included",
|
|
@@ -1536,7 +1536,7 @@
|
|
|
1536
1536
|
"controllerDescriptor": {
|
|
1537
1537
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1538
1538
|
"digest": "sha256:8818db80d272797d84488cd5db915014edf0081b78afa8a52561f54e0deee908",
|
|
1539
|
-
"registryDigest": "sha256:
|
|
1539
|
+
"registryDigest": "sha256:e4a23fdcb6c8f3483e8c5dc70f813cec94313597f6196189d0f14e2c084ea7f4",
|
|
1540
1540
|
"inputClassifications": {
|
|
1541
1541
|
"artifact-path": {
|
|
1542
1542
|
"classification": "digest-only",
|
|
@@ -1768,7 +1768,7 @@
|
|
|
1768
1768
|
"controllerDescriptor": {
|
|
1769
1769
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1770
1770
|
"digest": "sha256:8807dfdad8dc0ae15b51616049804b8a44936d37e364d209e099f680385d81af",
|
|
1771
|
-
"registryDigest": "sha256:
|
|
1771
|
+
"registryDigest": "sha256:e4a23fdcb6c8f3483e8c5dc70f813cec94313597f6196189d0f14e2c084ea7f4",
|
|
1772
1772
|
"inputClassifications": {
|
|
1773
1773
|
"artifact-name": {
|
|
1774
1774
|
"classification": "included",
|
|
@@ -1939,7 +1939,7 @@
|
|
|
1939
1939
|
"controllerDescriptor": {
|
|
1940
1940
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1941
1941
|
"digest": "sha256:f98dae8ad9a494e651690ac128cf4b1b4a6df55cfb255ecca24dae60d0d205fa",
|
|
1942
|
-
"registryDigest": "sha256:
|
|
1942
|
+
"registryDigest": "sha256:e4a23fdcb6c8f3483e8c5dc70f813cec94313597f6196189d0f14e2c084ea7f4",
|
|
1943
1943
|
"inputClassifications": {
|
|
1944
1944
|
"BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID": {
|
|
1945
1945
|
"classification": "redacted",
|
|
@@ -2121,7 +2121,7 @@
|
|
|
2121
2121
|
"controllerDescriptor": {
|
|
2122
2122
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2123
2123
|
"digest": "sha256:699a18f875d395d830bb07c511ec7e6e9dff1ac97a057004a0e58c51d065ce19",
|
|
2124
|
-
"registryDigest": "sha256:
|
|
2124
|
+
"registryDigest": "sha256:e4a23fdcb6c8f3483e8c5dc70f813cec94313597f6196189d0f14e2c084ea7f4",
|
|
2125
2125
|
"inputClassifications": {
|
|
2126
2126
|
"BUILDCHAIN_ISSUE_APP_ID": {
|
|
2127
2127
|
"classification": "redacted",
|
|
@@ -2254,7 +2254,7 @@
|
|
|
2254
2254
|
"controllerDescriptor": {
|
|
2255
2255
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2256
2256
|
"digest": "sha256:bf6c18f33642654314281e4f1aaf49c16d3a8e765e62c7162ad53beaef630c76",
|
|
2257
|
-
"registryDigest": "sha256:
|
|
2257
|
+
"registryDigest": "sha256:e4a23fdcb6c8f3483e8c5dc70f813cec94313597f6196189d0f14e2c084ea7f4",
|
|
2258
2258
|
"inputClassifications": {
|
|
2259
2259
|
"agent-work-context-json": {
|
|
2260
2260
|
"classification": "digest-only",
|
|
@@ -2350,65 +2350,11 @@
|
|
|
2350
2350
|
],
|
|
2351
2351
|
"breakingDigest": "sha256:63cbc80ea892431ee4780c358a60f4357ba95553c632dd86e1d62c18e375ecca",
|
|
2352
2352
|
"auditDigest": "sha256:64f8aa3f462050f332bba0880eabec68cb149239656f06c134dad17d1bb01318"
|
|
2353
|
-
},
|
|
2354
|
-
{
|
|
2355
|
-
"contractVersion": 1,
|
|
2356
|
-
"stability": "stable",
|
|
2357
|
-
"additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
|
|
2358
|
-
"id": "controller:binary-distribution",
|
|
2359
|
-
"kind": "controller",
|
|
2360
|
-
"path": ".github/workflows/self-build-binary-distribution.yml",
|
|
2361
|
-
"requiredInputs": [],
|
|
2362
|
-
"requiredOutputs": [
|
|
2363
|
-
"controller-plan-json",
|
|
2364
|
-
"controller-plan-digest",
|
|
2365
|
-
"controller-receipt-json",
|
|
2366
|
-
"controller-receipt-digest",
|
|
2367
|
-
"controller-receipt-status"
|
|
2368
|
-
],
|
|
2369
|
-
"breakingDefaults": {
|
|
2370
|
-
"evidenceContract": "buildchain.controller-evidence/v1",
|
|
2371
|
-
"descriptorVersion": 1,
|
|
2372
|
-
"workflowPath": ".github/workflows/self-build-binary-distribution.yml",
|
|
2373
|
-
"requiredStages": [
|
|
2374
|
-
"resolve-runtime",
|
|
2375
|
-
"build",
|
|
2376
|
-
"verify",
|
|
2377
|
-
"bundle",
|
|
2378
|
-
"aggregate"
|
|
2379
|
-
],
|
|
2380
|
-
"capabilities": [
|
|
2381
|
-
"standalone-binary-build",
|
|
2382
|
-
"release-evidence-bundle",
|
|
2383
|
-
"artifact-admission"
|
|
2384
|
-
],
|
|
2385
|
-
"evidenceRequirements": [
|
|
2386
|
-
"release-evidence-bundle",
|
|
2387
|
-
"release-passport",
|
|
2388
|
-
"controller-receipt"
|
|
2389
|
-
],
|
|
2390
|
-
"inputClassificationPolicy": "buildchain-controller-input-policy/v1"
|
|
2391
|
-
},
|
|
2392
|
-
"optionalInputs": [],
|
|
2393
|
-
"controllerDescriptor": {
|
|
2394
|
-
"contract": "buildchain.controller-descriptor/v1",
|
|
2395
|
-
"digest": "sha256:2e6bee5214be76d3f2b8088e23f3a61a79124696f2d69ec3cc86d793d2306ead",
|
|
2396
|
-
"registryDigest": "sha256:f3a2670f026d44ad84d482668ef5ee2a447a4f80f986c96986d61977272bdccd",
|
|
2397
|
-
"inputClassifications": {}
|
|
2398
|
-
},
|
|
2399
|
-
"guarantees": [
|
|
2400
|
-
"plans bind exact consumer source SHA, exact Buildchain runtime SHA, and the runtime contract digest",
|
|
2401
|
-
"receipts bind the plan digest and preserve pass, fail, skip, and partial stage outcomes",
|
|
2402
|
-
"redacted input values are never serialized and digest-only input values are never emitted in plaintext",
|
|
2403
|
-
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
2404
|
-
],
|
|
2405
|
-
"breakingDigest": "sha256:c8dc1280b05fa2fc1e976292d7a3d31d6dfb99ce1a814834462e634b38671859",
|
|
2406
|
-
"auditDigest": "sha256:4c892cec44e63f9e11a30efe5d19b6fbc4d655f7efc434f6fb0e06aaa705a57a"
|
|
2407
2353
|
}
|
|
2408
2354
|
],
|
|
2409
2355
|
"compatibilityFactRegistryRoot": "sha256:ea8f656c9fd74aa2d2fb9b7807e7daa39a708f6a7cd37ab7d154eac7be5605a6",
|
|
2410
2356
|
"compatibilityFactCutRoot": "sha256:58f33e498596505a26b6fc3c7ae5acef847ff699eee6c7e17a7b318a40bdf0d6",
|
|
2411
2357
|
"compatibilityProofRegistryRoot": "sha256:2f6477405c7891b754b33ad6515d55618bd320e7cdc59330d7cc645e17201e72",
|
|
2412
|
-
"compatibilityDigest": "sha256:
|
|
2413
|
-
"contractDigest": "sha256:
|
|
2358
|
+
"compatibilityDigest": "sha256:81e32696723fe82fe29d2b2214cd56cf6c87bbeae5cff1a201de7ee7fd10ee9c",
|
|
2359
|
+
"contractDigest": "sha256:2125354f4924646f58caa65471da9d47d585c86b532136369dcd9b237598253c"
|
|
2414
2360
|
}
|