@kungfu-tech/buildchain 4.1.4-alpha.0 → 4.1.5-alpha.0

package/AGENTS.md

@@ -52,6 +52,11 @@ before its first pipeline PR. The TOML declares `feature/*`, `fix/*`, `chore/*`,
 `docs/*`, `ci/*`, and `refactor/*` development routes. The tool-maintained stable
 contract lock binds the qualified published runtime.
 
+An Alpha qualification branch uses the same generated caller pair at `@v4-alpha`
+and its tool-maintained Alpha lock. Both callers must select the same channel;
+the complete product and protected delivery checks still apply. The default
+generated consumer pair and protected self configuration remain `@v4`.
+
 Products declare their own install, build, and verification commands in TOML.
 Publication, source qualification, reviews, merge queues, provider readback and
 recovery belong to the published runtime. Internal workflow libraries and actions are implementation only. The complete

package/CONTRIBUTING.md

@@ -122,6 +122,10 @@ queue candidates, and protected source qualification. Policy, enforcement, and o
 independent `@kungfu-origin` review. A development merge does not publish a floating channel. Consumers adopt the
 new API only after that channel publishes it and their contract locks are refreshed.
 
+Qualify a new Alpha through the generated `@v4-alpha` caller pair and matching
+Alpha lock on an isolated qualification branch. Self checks accept either shared
+channel template as a complete pair, while initialization defaults to `@v4`.
+
 ## Generated files
 
 GitHub Actions consume committed bundles. When changing an action

package/architecture/agent-change-map.md

@@ -110,25 +110,25 @@ Safe change route: Reduce one declared responsibility in its owning module, run
 ### Current top twenty maintenance hotspots
 
 - `tests/build-surface-promotion.test.mjs`
-- `tests/internal-architecture.test.mjs`
 - `tests/build-surface.test.mjs`
+- `tests/internal-architecture.test.mjs`
 - `tests/release-topology.test.mjs`
 - `scripts/check-inventory.mjs`
 - `tests/build-configuration.test.mjs`
 - `tests/dev-delivery-minimal-request.test.mjs`
 - `tests/workflow-taxonomy.test.mjs`
-- `packages/core/governance/buildchain-publication-authority.js`
 - `tests/minimal-consumer-contract.test.mjs`
-- `scripts/check-release-topology.mjs`
+- `packages/core/governance/buildchain-publication-authority.js`
 - `tests/floating-consumer-policy-contract.test.mjs`
-- `scripts/check-universal-workflow-bootstrap.mjs`
+- `scripts/check-release-topology.mjs`
 - `tests/adopter-delivery.test.mjs`
 - `tests/buildchain-ref-promotion-recovery-entry.test.mjs`
+- `tests/release-candidate-recovery.test.mjs`
+- `scripts/check-universal-workflow-bootstrap.mjs`
 - `tests/controller-evidence.test.mjs`
+- `tests/declarative-promotion-mode.test.mjs`
 - `tests/github-governance-authority.test.mjs`
 - `tests/macos-credential-island.test.mjs`
-- `tests/native-artifact-signing-authority.test.mjs`
-- `tests/release-candidate-recovery.test.mjs`
 
 ## action-process-runtime
 

package/architecture/maintainability-debt.json

@@ -2209,25 +2209,25 @@
   },
   "hotspots": [
     "tests/build-surface-promotion.test.mjs",
-    "tests/internal-architecture.test.mjs",
     "tests/build-surface.test.mjs",
+    "tests/internal-architecture.test.mjs",
     "tests/release-topology.test.mjs",
     "scripts/check-inventory.mjs",
     "tests/build-configuration.test.mjs",
     "tests/dev-delivery-minimal-request.test.mjs",
     "tests/workflow-taxonomy.test.mjs",
-    "packages/core/governance/buildchain-publication-authority.js",
     "tests/minimal-consumer-contract.test.mjs",
-    "scripts/check-release-topology.mjs",
+    "packages/core/governance/buildchain-publication-authority.js",
     "tests/floating-consumer-policy-contract.test.mjs",
-    "scripts/check-universal-workflow-bootstrap.mjs",
+    "scripts/check-release-topology.mjs",
     "tests/adopter-delivery.test.mjs",
     "tests/buildchain-ref-promotion-recovery-entry.test.mjs",
+    "tests/release-candidate-recovery.test.mjs",
+    "scripts/check-universal-workflow-bootstrap.mjs",
     "tests/controller-evidence.test.mjs",
+    "tests/declarative-promotion-mode.test.mjs",
     "tests/github-governance-authority.test.mjs",
-    "tests/macos-credential-island.test.mjs",
-    "tests/native-artifact-signing-authority.test.mjs",
-    "tests/release-candidate-recovery.test.mjs"
+    "tests/macos-credential-island.test.mjs"
   ],
   "burnDownSlices": [
     {

package/architecture/minimal-consumer-migration.json

@@ -1,6 +1,6 @@
 {
   "schema": "buildchain.consumer-migration/v1",
-  "stage": "self-default-entry; final-release-qualification-pending",
+  "stage": "self-default-entry",
   "workflows": [
     {
       "path": ".github/workflows/buildchain-recover.yml",

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "4.1.4-alpha.0",
+    "version": "4.1.5-alpha.0",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v4",
@@ -2428,5 +2428,5 @@
   "compatibilityFactCutRoot": "sha256:58f33e498596505a26b6fc3c7ae5acef847ff699eee6c7e17a7b318a40bdf0d6",
   "compatibilityProofRegistryRoot": "sha256:2f6477405c7891b754b33ad6515d55618bd320e7cdc59330d7cc645e17201e72",
   "compatibilityDigest": "sha256:808c03915bf090ded3082642ffc5163e15bdd090b629344df9bfb65544041dd3",
-  "contractDigest": "sha256:fbfecb8be6bb882fb501312ac90915473e867853f71606975ce7a263edff6492"
+  "contractDigest": "sha256:b159318ec4aeeb9816bb8f6694b37696c972986ef183871307816756c57521c9"
 }

package/dist/site/buildchain-site.json

@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.4-alpha.0",
+    "version": "4.1.5-alpha.0",
     "versionSource": "package.json#version"
   },
   "source": {

package/dist/site/kfd-claims.json

@@ -21,7 +21,7 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "55d89b706fec968198fcef2d3a492a68578ff3054acbff25cd07ebcf199cf34a",
+    "sha256": "33525f562a21e2b792bef4408bc8c18c51c24f7a6123e34b971b08ad5ef51c7a",
     "summary": {
       "cliCommandCount": 113,
       "workflowCount": 44,
@@ -246,7 +246,7 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "55d89b706fec968198fcef2d3a492a68578ff3054acbff25cd07ebcf199cf34a",
+      "sha256": "33525f562a21e2b792bef4408bc8c18c51c24f7a6123e34b971b08ad5ef51c7a",
       "summary": {
         "cliCommandCount": 113,
         "workflowCount": 44,

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.4-alpha.0",
+    "version": "4.1.5-alpha.0",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/public-surface-audit.json

@@ -10604,7 +10604,7 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "b0cf6f05cea3a3730c2afc07fa767d913242387c9aca6674c7b1a7932d2de31d",
-    "workflowRegistryDigest": "91b294efd44e50db6f37dd38704a7bfa6cd7d5d1ac0db40cc7f31b0fd5f491d8",
+    "workflowRegistryDigest": "ee7d6bd28911dcb8c1f9dbae2ad7d9e6c9908a30bf84c5ddb5b3fb066078ac67",
     "pageRegistryDigest": "c55e8a3395da7962539c2c82039ba700bd132f1629b77c7363dc106e97eed8c3"
   },
   "comparison": {

package/dist/site/publication-registry.json

@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.4-alpha.0",
+    "version": "4.1.5-alpha.0",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.4-alpha.0",
+    "version": "4.1.5-alpha.0",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",

package/dist/site/workflow-registry.json

@@ -858,7 +858,7 @@
       "status": "repository-internal",
       "owner": "buildchain-workflows",
       "maturity": "repository-internal",
-      "introducedVersion": "4.1.4-alpha.0",
+      "introducedVersion": "4.1.5-alpha.0",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "4.1.4-alpha.0",
+  "version": "4.1.5-alpha.0",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",

package/scripts/check-self-consumer-contract.mjs

@@ -22,7 +22,13 @@ export function checkSelfConsumerContract(root = ROOT) {
   const retired = path.join(root, ".buildchain/minimal-consumer.toml");
   if (fs.lstatSync(retired, { throwIfNoEntry: false }))
     fail("retired transition config must not remain in the self consumer tree");
-  const callers = consumerWorkflows();
+  const uses = yaml(read(".github/workflows/buildchain.yml"))?.jobs?.buildchain
+    ?.uses;
+  const channel =
+    typeof uses === "string" && uses.endsWith("@v4-alpha")
+      ? "v4-alpha"
+      : SELF_ENTRY_CHANNEL;
+  const callers = consumerWorkflows(channel);
   for (const [file, bytes] of Object.entries(callers))
     if (read(file) !== bytes) fail(`${file}: generated caller drift`);
   const taxonomy = JSON.parse(read("architecture/workflow-taxonomy.json"));
@@ -113,7 +119,7 @@ export function checkSelfConsumerContract(root = ROOT) {
     fail("cross-platform LF checkout contract is missing");
   return {
     ok: true,
-    channel: SELF_ENTRY_CHANNEL,
+    channel,
     callers: Object.keys(callers),
     plan,
   };

package/scripts/generate-minimal-consumer-contract.mjs

@@ -163,7 +163,7 @@ output(
   await format(
     JSON.stringify({
       schema: "buildchain.consumer-migration/v1",
-      stage: "self-default-entry; final-release-qualification-pending",
+      stage: "self-default-entry",
       workflows: workflowInventory(),
       consumerSources: consumerSourceInventory(),
     }),