@kungfu-tech/buildchain 4.1.3-alpha.9 → 4.1.4-alpha.0

package/architecture/code-layout.json

@@ -38,18 +38,8 @@
   },
   "cliEntrypoints": ["bin/buildchain.mjs"],
   "workflowRequestSchemas": {
-    ".github/workflows/public-release-promote.yml": "contracts/promotion-request-v1.schema.json",
+    ".github/workflows/.release-candidate-promote.yml": "contracts/promotion-request-v1.schema.json",
     ".github/workflows/.release-promote.yml": "contracts/promotion-invocation-v1.schema.json"
   },
-  "publicActionNodes": [
-    "build/artifact/prepare-attestation",
-    "build/artifact/seal-attestation",
-    "build/credential/macos-island",
-    "build/lifecycle/run",
-    "build/lifecycle/validate",
-    "governance/incident/report",
-    "release/promotion/candidate",
-    "release/promotion/ref",
-    "release/tail/settle"
-  ]
+  "publicActionNodes": []
 }

package/architecture/core-mechanisms.json

@@ -283,13 +283,7 @@
         "terminal PR state"
       ],
       "providerReadback": ["GitHub PR head and checks", "Git ref state root"],
-      "publicSurfaces": [
-        "export:./dev-delivery-warrant",
-        "cli:dev",
-        "workflow:public-ops-dev-auto-merge",
-        "workflow:public-ops-warrant-cancel",
-        "workflow:public-ops-warrant-close"
-      ],
+      "publicSurfaces": ["export:./dev-delivery-warrant", "cli:dev"],
       "sourcePaths": [
         "packages/core/dev-delivery/dev-delivery-proof.js",
         "packages/core/dev-delivery/dev-delivery-warrant-cancellation.js",
@@ -330,6 +324,11 @@
       "implementationDisposition": "current-owned-module-graph; authority is declared in architecture/capability-state-machine-manifest.json; no legacy runtime fallback",
       "closedRequirements": [
         "v4 durable store and lease authority are not yet selected"
+      ],
+      "internalSurfaces": [
+        "workflow:.ops-dev-auto-merge",
+        "workflow:.ops-warrant-cancel",
+        "workflow:.ops-warrant-close"
       ]
     },
     {
@@ -416,8 +415,7 @@
       "publicSurfaces": [
         "export:./release-candidate",
         "export:./release-train",
-        "cli:candidate",
-        "workflow:public-release-promote"
+        "cli:candidate"
       ],
       "sourcePaths": [
         "packages/core/release/release-candidate.js",
@@ -442,7 +440,8 @@
       "closedRequirements": [
         "v4 canonical serialization boundary is not yet selected",
         "v4 Release Train authority remains deferred to the parity wave"
-      ]
+      ],
+      "internalSurfaces": ["workflow:.release-candidate-promote"]
     },
     {
       "id": "release-candidate-recovery",
@@ -539,10 +538,7 @@
         "remote ledger ref",
         "promotion refs"
       ],
-      "publicSurfaces": [
-        "export:./stable-candidate-ledger",
-        "workflow:public-ops-stable-candidate-patrol"
-      ],
+      "publicSurfaces": ["export:./stable-candidate-ledger"],
       "sourcePaths": [
         "packages/core/release/stable-candidate-ledger.js",
         "packages/core/release/commands/stable-candidate-patrol.mjs",
@@ -559,7 +555,8 @@
       "implementationDisposition": "current-owned-module-graph; authority is declared in architecture/capability-state-machine-manifest.json; no legacy runtime fallback",
       "closedRequirements": [
         "v4 scheduler and ledger store ownership are not yet selected"
-      ]
+      ],
+      "internalSurfaces": ["workflow:.ops-stable-candidate-patrol"]
     },
     {
       "id": "publish-transaction",
@@ -626,12 +623,7 @@
         "GitHub release/tag/ref",
         "durable state ref"
       ],
-      "publicSurfaces": [
-        "action:release/promotion/ref",
-        "cli:release-transaction",
-        "workflow:public-release-promote",
-        "workflow:public-release-paper"
-      ],
+      "publicSurfaces": ["cli:release-transaction"],
       "sourcePaths": [
         "packages/core/release/publish-transaction.js",
         "packages/core/release/commands/release-transaction.mjs",
@@ -652,6 +644,11 @@
       "implementationDisposition": "current-owned-module-graph; authority is declared in architecture/capability-state-machine-manifest.json; no legacy runtime fallback",
       "closedRequirements": [
         "v4 transaction journal store and npm effect executor are not yet selected"
+      ],
+      "internalSurfaces": [
+        "action:release/promotion/ref",
+        "workflow:.release-candidate-promote",
+        "workflow:.release-paper"
       ]
     },
     {
@@ -747,8 +744,7 @@
         "export:./buildchain-publication-authority",
         "cli:audit",
         "cli:create",
-        "cli:verify-publication-admission",
-        "workflow:public-build-publication"
+        "cli:verify-publication-admission"
       ],
       "sourcePaths": [
         "packages/core/publication/publication-authority.js",
@@ -768,7 +764,8 @@
       "implementationDisposition": "current-owned-module-graph; authority is declared in architecture/capability-state-machine-manifest.json; no legacy runtime fallback",
       "closedRequirements": [
         "v4 capability registry and provider-effect interface are not yet selected"
-      ]
+      ],
+      "internalSurfaces": ["workflow:.build-publication"]
     },
     {
       "id": "github-governance-authority",
@@ -814,8 +811,7 @@
       ],
       "publicSurfaces": [
         "export:./github-governance-authority",
-        "cli:release-governance",
-        "workflow:public-ops-release-governance"
+        "cli:release-governance"
       ],
       "sourcePaths": [
         "packages/core/governance/github-governance-authority.js",
@@ -830,7 +826,8 @@
       "implementationDisposition": "current-owned-module-graph; authority is declared in architecture/capability-state-machine-manifest.json; no legacy runtime fallback",
       "closedRequirements": [
         "v4 policy ownership boundary between core and GitHub adapter is not yet selected"
-      ]
+      ],
+      "internalSurfaces": ["workflow:.ops-release-governance"]
     },
     {
       "id": "engineering-housekeeper",
@@ -877,8 +874,7 @@
       ],
       "publicSurfaces": [
         "export:./engineering-housekeeper",
-        "export:./engineering-housekeeper-github",
-        "workflow:public-ops-housekeeping"
+        "export:./engineering-housekeeper-github"
       ],
       "sourcePaths": [
         "packages/core/governance/engineering-housekeeper.js",
@@ -899,7 +895,8 @@
       "implementationDisposition": "current-owned-module-graph; authority is declared in architecture/capability-state-machine-manifest.json; no legacy runtime fallback",
       "closedRequirements": [
         "A future Rust migration would require a separately qualified writer cutover; v4 intentionally retains the TypeScript production authority."
-      ]
+      ],
+      "internalSurfaces": ["workflow:.ops-housekeeping"]
     },
     {
       "id": "release-passport-and-artifact-proof",
@@ -953,7 +950,6 @@
         "local package/sidecar"
       ],
       "publicSurfaces": [
-        "action:build/artifact/prepare-attestation",
         "export:./release-passport",
         "export:./artifact-passport",
         "cli:verify-release-passport",
@@ -982,7 +978,8 @@
       "implementationDisposition": "current-owned-module-graph; authority is declared in architecture/capability-state-machine-manifest.json; no legacy runtime fallback",
       "closedRequirements": [
         "v4 proof graph storage and compatibility projection boundary are not yet selected"
-      ]
+      ],
+      "internalSurfaces": ["action:build/artifact/prepare-attestation"]
     },
     {
       "id": "release-propagation-work-control",
@@ -1033,8 +1030,7 @@
       ],
       "publicSurfaces": [
         "export:./release-propagation",
-        "cli:release-propagation",
-        "workflow:public-release-propagation"
+        "cli:release-propagation"
       ],
       "sourcePaths": [
         "packages/core/release/release-propagation-agent-entry.js",
@@ -1060,7 +1056,8 @@
       "implementationDisposition": "current-owned-module-graph; authority is declared in architecture/capability-state-machine-manifest.json; no legacy runtime fallback",
       "closedRequirements": [
         "v4 Work persistence and external executor protocol are not yet selected"
-      ]
+      ],
+      "internalSurfaces": ["workflow:.release-propagation"]
     },
     {
       "id": "release-tail-provider-plane",
@@ -1126,9 +1123,7 @@
       "publicSurfaces": [
         "export:./release-tail-provider-plane",
         "export:./release-tail-provider-adapters",
-        "cli:release-tail",
-        "workflow:public-release-tail",
-        "action:release/tail/settle"
+        "cli:release-tail"
       ],
       "sourcePaths": [
         "packages/core/release/release-tail-provider-plane.js",
@@ -1141,12 +1136,16 @@
         "tests/release-tail-contract.test.mjs"
       ],
       "callers": [
-        ".github/workflows/public-release-tail.yml",
+        ".github/workflows/.release-tail.yml",
         "packages/core/release/cli/release-handlers.mjs"
       ],
       "implementationDisposition": "current-owned-module-graph; authority is declared in architecture/capability-state-machine-manifest.json; no legacy runtime fallback",
       "closedRequirements": [
         "consumer cutovers and production provider credentials remain separate reviewed changes"
+      ],
+      "internalSurfaces": [
+        "workflow:.release-tail",
+        "action:release/tail/settle"
       ]
     }
   ],

package/architecture/cross-platform-adopter-qualification.json

@@ -3,7 +3,7 @@
   "contract": "kungfu-buildchain-v4-cross-platform-adopter-qualification",
   "implementation": "packages/core/adoption/cross-platform-adopter-qualification.js",
   "runner": "packages/core/adoption/commands/cross-platform-adopter-qualification.mjs",
-  "publicWorkflow": ".github/workflows/public-build-adopter-qualification.yml",
+  "publicWorkflow": ".github/workflows/.build-adopter-qualification.yml",
   "sourceBinding": {
     "runtime": "job.workflow_sha",
     "consumer": "exact checked-out consumer commit",

package/architecture/dev-delivery-orchestration.json

@@ -1,7 +1,7 @@
 {
   "schema": "buildchain.dev-delivery-orchestration/v2",
-  "workflow": ".github/workflows/public-ops-dev-auto-merge.yml",
-  "terminalWorkflow": ".github/workflows/public-ops-warrant-close.yml",
+  "workflow": ".github/workflows/.ops-dev-auto-merge.yml",
+  "terminalWorkflow": ".github/workflows/.ops-warrant-close.yml",
   "maxOrchestrationLines": 660,
   "nodes": [
     {

package/architecture/floating-consumer-policy.json

@@ -8,9 +8,9 @@
     "persistedSelectors": ["v4", "v4-alpha"],
     "publicWorkflowEntrypoints": [
       ".github/workflows/.build.yml",
-      ".github/workflows/public-build-publication.yml",
-      ".github/workflows/public-release-promote.yml",
-      ".github/workflows/public-build-stage-capsule-canary.yml"
+      ".github/workflows/.build-publication.yml",
+      ".github/workflows/.release-candidate-promote.yml",
+      ".github/workflows/.build-stage-capsule-canary.yml"
     ]
   },
   "contractLocks": {

package/architecture/internal-capabilities.json

@@ -41,6 +41,8 @@
     "packages/core/adoption/cli/support.mjs",
     "packages/core/adoption/cli/surface-register.mjs",
     "packages/core/adoption/commands/cross-platform-adopter-qualification.mjs",
+    "packages/core/adoption/commands/init-repo.mjs",
+    "packages/core/adoption/consumer-init.js",
     "packages/core/adoption/cross-platform-adopter-qualification.js",
     "packages/core/adoption/kfd-adopter-category-driver.js",
     "packages/core/adoption/qualification/actions.js",
@@ -229,6 +231,7 @@
     "packages/core/consumer/contract/examples.js",
     "packages/core/consumer/contract/identity.js",
     "packages/core/consumer/contract/inspection.js",
+    "packages/core/consumer/contract/local-validation.js",
     "packages/core/consumer/contract/plan.js",
     "packages/core/consumer/contract/products.js",
     "packages/core/consumer/contract/reader.js",
@@ -416,27 +419,22 @@
     "packages/core/observability/transaction-journal.js",
     "packages/core/paper/cli/dispatch.mjs",
     "packages/core/paper/commands/paper-work-fleet-cli.mjs",
-    "packages/core/paper/operations/bootstrap.js",
+    "packages/core/paper/consumer-status.js",
     "packages/core/paper/operations/files.js",
     "packages/core/paper/operations/github-observation.js",
     "packages/core/paper/operations/identity.js",
+    "packages/core/paper/operations/migration.js",
     "packages/core/paper/operations/npm-observation.js",
-    "packages/core/paper/operations/plans.js",
     "packages/core/paper/operations/preflight-checks.js",
     "packages/core/paper/operations/provisioning-validation.js",
-    "packages/core/paper/operations/provisioning.js",
     "packages/core/paper/operations/runtime-observation.js",
     "packages/core/paper/operations/runtime.js",
-    "packages/core/paper/operations/scaffold-config.js",
-    "packages/core/paper/operations/scaffold-workflows.js",
     "packages/core/paper/operations/scaffold.js",
     "packages/core/paper/operations/status-facts.js",
     "packages/core/paper/operations/status.js",
     "packages/core/paper/operations/toolchain-observation.js",
-    "packages/core/paper/operations/workspace.js",
     "packages/core/paper/paper-agent-entry.js",
     "packages/core/paper/paper-fleet.js",
-    "packages/core/paper/paper-npm-bootstrap.js",
     "packages/core/paper/paper-repository.js",
     "packages/core/paper/paper-runtime-channels.js",
     "packages/core/paper/paper-scaffold-content.js",
@@ -1193,9 +1191,9 @@
       ],
       "contracts": [
         ".github/workflows/.release-promote.yml",
-        ".github/workflows/public-release-promote.yml"
+        ".github/workflows/.release-candidate-promote.yml"
       ],
-      "generatedOutputs": [".github/workflows/public-release-promote.yml"],
+      "generatedOutputs": [".github/workflows/.release-candidate-promote.yml"],
       "validationCommands": [
         "node --test tests/promotion-routing-evidence.test.mjs tests/build-surface.test.mjs tests/build-surface-promotion.test.mjs"
       ]
@@ -1327,7 +1325,7 @@
       ],
       "contracts": [
         ".github/workflows/.build.yml",
-        ".github/workflows/build.yml",
+        ".github/workflows/.build-candidate.yml",
         "architecture/build-environments.json",
         "actions/build/lifecycle/plan/action.yml",
         "actions/build/lifecycle/prepare/action.yml",
@@ -1339,7 +1337,7 @@
         "architecture/build-orchestration.json"
       ],
       "generatedOutputs": [
-        ".github/workflows/build.yml",
+        ".github/workflows/.build-candidate.yml",
         "actions/build/lifecycle/run/dist/index.js"
       ],
       "validationCommands": [
@@ -1358,7 +1356,7 @@
         "tests/web-surface.test.mjs",
         "tests/web-surface-publication-authority.test.mjs"
       ],
-      "contracts": [".github/workflows/public-release-web.yml"],
+      "contracts": [".github/workflows/.release-web.yml"],
       "generatedOutputs": [],
       "validationCommands": [
         "node --test tests/web-surface.test.mjs tests/web-surface-publication-authority.test.mjs"
@@ -1464,7 +1462,6 @@
         "packages/core/paper/commands/paper-work-fleet-cli.mjs",
         "packages/core/paper/paper-agent-entry.js",
         "packages/core/paper/paper-fleet.js",
-        "packages/core/paper/paper-npm-bootstrap.js",
         "packages/core/paper/paper-repository.js",
         "packages/core/paper/paper-runtime-channels.js",
         "packages/core/paper/paper-scaffold-content.js",
@@ -1558,7 +1555,7 @@
       "contracts": [
         "contracts/release-tail-capabilities-v1.schema.json",
         "contracts/release-tail-provider-bindings-v1.schema.json",
-        ".github/workflows/public-release-tail.yml",
+        ".github/workflows/.release-tail.yml",
         "actions/release/tail/settle/action.yml",
         "docs/release-tail-provider-plane.md"
       ],
@@ -1637,7 +1634,7 @@
         "architecture/decisions/0003-two-phase-delivery-warrant.md",
         "contracts/dev-delivery-authority-v2.schema.json",
         "dist/site/schemas/dev-delivery-authority-v2.schema.json",
-        ".github/workflows/public-ops-dev-auto-merge.yml",
+        ".github/workflows/.ops-dev-auto-merge.yml",
         "templates/native-dev-delivery.yml",
         "docs/dev-delivery-warrant.md",
         "docs/dev-delivery-qualification-landing-adr.md"
@@ -1709,7 +1706,7 @@
         "contracts/fixtures/v4-adopter-delivery-v1/gate-positive.json",
         "contracts/fixtures/v4-adopter-delivery-v1/gate-unknown-selector.json",
         "contracts/fixtures/v4-adopter-delivery-v1/offline-vectors.json",
-        ".github/workflows/public-build-adopter-qualification.yml",
+        ".github/workflows/.build-adopter-qualification.yml",
         "docs/v4-adopter-delivery.md"
       ],
       "generatedOutputs": [],
@@ -1825,7 +1822,7 @@
         "architecture/tail-reseal-parity.json",
         "contracts/v4-tail-reseal-v1.schema.json",
         "contracts/fixtures/v4-tail-reseal-v1/valid.json",
-        ".github/workflows/public-ops-tail-reseal.yml",
+        ".github/workflows/.ops-tail-reseal.yml",
         "docs/v4-stage-capsule.md",
         "docs/v4-tail-reseal.md"
       ],
@@ -1852,7 +1849,7 @@
         "architecture/universal-workflow-bootstrap.json",
         "architecture/universal-workflow-fault-campaign.json",
         "architecture/universal-workflow-capability-policy.json",
-        ".github/workflows/public-ops-bootstrap.yml"
+        ".github/workflows/.ops-bootstrap.yml"
       ],
       "generatedOutputs": [],
       "validationCommands": [
@@ -2634,27 +2631,25 @@
       "id": "paper-lifecycle-operations",
       "owner": "Buildchain Paper maintainers",
       "implementation": [
-        "packages/core/paper/operations/bootstrap.js",
+        "packages/core/paper/consumer-status.js",
         "packages/core/paper/operations/files.js",
         "packages/core/paper/operations/github-observation.js",
         "packages/core/paper/operations/identity.js",
+        "packages/core/paper/operations/migration.js",
         "packages/core/paper/operations/npm-observation.js",
-        "packages/core/paper/operations/plans.js",
         "packages/core/paper/operations/preflight-checks.js",
         "packages/core/paper/operations/provisioning-validation.js",
-        "packages/core/paper/operations/provisioning.js",
         "packages/core/paper/operations/runtime-observation.js",
         "packages/core/paper/operations/runtime.js",
-        "packages/core/paper/operations/scaffold-config.js",
-        "packages/core/paper/operations/scaffold-workflows.js",
         "packages/core/paper/operations/scaffold.js",
         "packages/core/paper/operations/status-facts.js",
         "packages/core/paper/operations/status.js",
-        "packages/core/paper/operations/toolchain-observation.js",
-        "packages/core/paper/operations/workspace.js"
+        "packages/core/paper/operations/toolchain-observation.js"
       ],
       "tests": [
         "tests/paper-check-policy.test.mjs",
+        "tests/paper-consumer-migration.test.mjs",
+        "tests/paper-consumer-scaffold.test.mjs",
         "tests/paper-migration.test.mjs",
         "tests/paper-publication-controller.test.mjs",
         "tests/paper-publication-node.test.mjs",
@@ -3071,10 +3066,13 @@
       "id": "minimal-consumer-contract",
       "owner": "Buildchain consumer contract maintainers",
       "implementation": [
+        "packages/core/adoption/commands/init-repo.mjs",
+        "packages/core/adoption/consumer-init.js",
         "packages/core/consumer/contract/entries.js",
         "packages/core/consumer/contract/examples.js",
         "packages/core/consumer/contract/identity.js",
         "packages/core/consumer/contract/inspection.js",
+        "packages/core/consumer/contract/local-validation.js",
         "packages/core/consumer/contract/plan.js",
         "packages/core/consumer/contract/products.js",
         "packages/core/consumer/contract/reader.js",
@@ -3082,8 +3080,9 @@
         "scripts/generate-minimal-consumer-contract.mjs"
       ],
       "tests": [
-        "tests/minimal-consumer-contract.test.mjs",
-        "tests/consumer-product-config.test.mjs"
+        "tests/consumer-init.test.mjs",
+        "tests/consumer-product-config.test.mjs",
+        "tests/minimal-consumer-contract.test.mjs"
       ],
       "contracts": ["architecture/decisions/0005-minimal-consumer-contract.md"],
       "generatedOutputs": [
@@ -3091,7 +3090,7 @@
         "templates/minimal-consumer"
       ],
       "validationCommands": [
-        "node --test tests/minimal-consumer-contract.test.mjs",
+        "node --test tests/minimal-consumer-contract.test.mjs tests/consumer-product-config.test.mjs tests/consumer-init.test.mjs",
         "node scripts/generate-minimal-consumer-contract.mjs --check"
       ]
     },