@kungfu-tech/buildchain 4.1.6-alpha.0 → 4.1.7-alpha.0

package/AGENTS.md

@@ -8,11 +8,11 @@ confidence: high
 sensitivity: public
 evidence_grade: B
 review_state: unreviewed
-last_reviewed: 2026-09-20
+last_reviewed: 2026-09-23
 ai_provenance:
   model_family: GPT-6
   product: Codex
-  generated_at: 2026-09-20
+  generated_at: 2026-09-23
   visible_context: Buildchain 4.1 source, architecture registries and local validation.
   invisible_context_boundary: No unpublished release or external consumer qualification is claimed.
 ---
@@ -60,14 +60,16 @@ generated consumer pair and protected self configuration remain `@v4`.
 Products declare their own install, build, and verification commands in TOML.
 Publication, source qualification, reviews, merge queues, provider readback and
 recovery belong to the published runtime. Internal workflow libraries and actions are implementation only. The complete
-public reusable API is `public-ops-pipeline.yml` and `public-ops-recover.yml`;
+API for new consumers is `public-ops-pipeline.yml` and `public-ops-recover.yml`;
 self callers use the same public reusable-workflow contract as every other consumer.
 
 ## Building this repo
 
 Read [Code organization](docs/code-organization.md) before changing implementation
 layout. Keep workflows, action adapters, JavaScript modules and Rust domains in
-their declared responsibility layers. No historical compatibility entry is retained.
+their declared responsibility layers. Published historical entry contracts are retained
+by `architecture/consumer-upgrade.json`. Generate them from their maintained components;
+do not add independent implementations or remove a published path during a compatible upgrade.
 
 Buildchain is a pnpm workspace running on Node 24:
 
@@ -81,7 +83,7 @@ Workflow paths are governed by [`architecture/workflow-taxonomy.json`](architect
 and the generated [`Workflow Catalog`](docs/workflow-catalog.md). Before adding,
 renaming, or editing workflow YAML, register its role (`public`, component `.`,
 or `self`) and category (`build`, `release`, or `ops`). Use the derived filename;
-do not invent prefixes, categories, or compatibility aliases. Edit canonical
+do not invent prefixes, categories, or unregistered compatibility aliases. Edit canonical
 implementations, run `pnpm run generate:workflows`, and pass
 `pnpm run check:workflows` plus the full check. Taxonomy and gate changes require
 independent `@kungfu-origin` review through CODEOWNERS.

package/CONTRIBUTING.md

@@ -8,11 +8,11 @@ confidence: high
 sensitivity: public
 evidence_grade: B
 review_state: unreviewed
-last_reviewed: 2026-09-20
+last_reviewed: 2026-09-23
 ai_provenance:
   model_family: GPT-6
   product: Codex
-  generated_at: 2026-09-20
+  generated_at: 2026-09-23
   visible_context: Repository contribution rules and implementation naming and release transition changes.
   invisible_context_boundary: No private credentials or unpublished external release state.
 ---
@@ -55,8 +55,11 @@ host live in `crates`. `bin` contains the CLI entry, and `scripts` contains only
 repository tooling. Schemas, ownership declarations and tests live in
 `contracts`, `architecture` and `tests`.
 
-Do not add historical aliases or compatibility forwarders. Update every owned
-caller and generated artifact when moving a contract or implementation.
+Preserve published consumer contracts when moving an implementation. Historical
+entry paths are explicitly retained in `architecture/consumer-upgrade.json` and
+generated from the current canonical workflow. Their input defaults, outputs,
+permissions and job contexts remain part of the upgrade contract. Do not add
+unregistered aliases or independently maintained copies.
 
 ## Build and verification
 
@@ -96,9 +99,12 @@ category vocabulary is enforced by `architecture/workflow-taxonomy.json`:
 Categories are only `build`, `release`, and `ops`. Register the identity, role,
 category, purpose, owner, lifecycle status, invocation, and rationale before
 adding its derived filename. The [Workflow Catalog](docs/workflow-catalog.md)
-lists every canonical API and component path. Consumers select only the two public
+lists every canonical API and component path. New consumers select the two public
 entries; actions and product-specific components are internal. Self automation
-has only the generated normal and recovery entries. Retired paths have no generated aliases. A matching prefix alone does not admit an unregistered workflow.
+has only the generated normal and recovery entries. Existing consumers retain
+the published paths registered in the consumer upgrade contract. The checker
+verifies their generated bodies against the canonical implementation; they add
+no repository event roots. A matching prefix alone does not admit an unregistered workflow.
 
 `validate`, `doctor`, and consumer source inspection check the generated caller
 bytes and the registered implementation inventory separately. A repository that

package/README.md

@@ -8,11 +8,11 @@ confidence: high
 sensitivity: public
 evidence_grade: B
 review_state: unreviewed
-last_reviewed: 2026-09-20
+last_reviewed: 2026-09-24
 ai_provenance:
   model_family: GPT-6
   product: Codex
-  generated_at: 2026-09-20
+  generated_at: 2026-09-24
   visible_context: Buildchain 4.1 source, architecture registries and local validation.
   invisible_context_boundary: No unpublished release or external consumer qualification is claimed.
 ---
@@ -277,7 +277,7 @@ owns release orchestration and its evidence.
 
 ## Consumer workflow contract
 
-Every product uses the same two generated files:
+New consumers use the same two generated files:
 
 - `.github/workflows/buildchain.yml` calls `public-ops-pipeline.yml@v4`.
 - `.github/workflows/buildchain-recover.yml` calls `public-ops-recover.yml@v4`.
@@ -289,13 +289,17 @@ release. The runtime manages publication, provider readback and completion.
 Recovery takes an exact attempt and, when needed, one temporary repaired runtime.
 
 The [workflow catalog](docs/workflow-catalog.md) distinguishes the two public
-entries from internal components. Consumers do not call internal workflows or
-actions, supply publication payloads, or implement their own release controller.
+entries from internal components. New integrations declare products in TOML and
+use these entries for release orchestration.
 The three [standard examples](templates/minimal-consumer/) share identical caller
 bytes; their TOML and product source differ. Tool-maintained locks bind the
 published runtime. Existing npm Trusted Publishing continues to authenticate
 publication in the hosted workflow.
 
+Existing consumers can retain the registered historical workflow paths and their
+schema-1 product configuration. See [Compatible upgrades](docs/getting-started.md#migrating-old-callers)
+for the supported interfaces and validation boundary.
+
 ## Release Model
 
 Buildchain treats a reviewed branch merge as release intent:

package/architecture/action-taxonomy.json

@@ -90,6 +90,7 @@
             "aggregate",
             "execute",
             "plan",
+            "qualify-contract",
             "qualify-profile",
             "resolve",
             "run-profile"
@@ -400,6 +401,7 @@
             "bind-selection",
             "candidate",
             "classify",
+            "historical-evidence",
             "inspect-invocation",
             "qualify",
             "qualify-candidate",

package/architecture/agent-change-map.md

@@ -129,6 +129,8 @@ Safe change route: Reduce one declared responsibility in its owning module, run
 - `tests/declarative-promotion-mode.test.mjs`
 - `tests/github-governance-authority.test.mjs`
 - `tests/macos-credential-island.test.mjs`
+- `tests/public-dogfood-contract.test.mjs`
+- `packages/core/workflow/workflow-taxonomy.mjs`
 
 ## action-process-runtime
 
@@ -2243,6 +2245,7 @@ Owner: Buildchain runtime maintainers
 - `packages/core/runtime/entry/actions.js`
 - `packages/core/runtime/entry/activation.js`
 - `packages/core/runtime/entry/attempt.js`
+- `packages/core/runtime/entry/compatibility.js`
 - `packages/core/runtime/entry/github.js`
 - `packages/core/runtime/entry/recovery.js`
 - `packages/core/runtime/entry/selection.js`
@@ -2256,11 +2259,13 @@ Owner: Buildchain runtime maintainers
 
 ### Tests
 
+- `tests/consumer-build-compatibility.test.mjs`
 - `tests/pipeline-recovery-runtime-continuation.test.mjs`
 - `tests/runtime-entry-activation.test.mjs`
 - `tests/runtime-entry-architecture.test.mjs`
 - `tests/runtime-entry-provider.test.mjs`
 - `tests/runtime-entry-selection.test.mjs`
+- `tests/runtime-entry-transport.test.mjs`
 
 ### Generated outputs
 
@@ -2269,7 +2274,7 @@ Owner: Buildchain runtime maintainers
 
 ### Minimal validation
 
-- `node --test tests/runtime-entry-selection.test.mjs tests/runtime-entry-activation.test.mjs tests/runtime-entry-provider.test.mjs tests/runtime-entry-architecture.test.mjs`
+- `node --test tests/runtime-entry-selection.test.mjs tests/runtime-entry-activation.test.mjs tests/runtime-entry-provider.test.mjs tests/runtime-entry-architecture.test.mjs tests/runtime-entry-transport.test.mjs tests/consumer-build-compatibility.test.mjs`
 
 ## runtime-provider-foundations
 

package/architecture/build-orchestration.json

@@ -45,6 +45,9 @@
     "packages/core/build/plan/action-context.js",
     "packages/core/build/plan/action.js",
     "packages/core/build/plan/admission.js",
+    "packages/core/build/plan/compatibility-artifacts.js",
+    "packages/core/build/plan/compatibility-plan.js",
+    "packages/core/build/plan/compatibility.js",
     "packages/core/build/plan/configuration.js",
     "packages/core/build/plan/environment.js",
     "packages/core/build/plan/identity.js",
@@ -60,8 +63,10 @@
     "packages/core/build/signing/credential-transaction.js",
     "packages/core/build/signing/transaction.js",
     "packages/core/build/summary/aggregation.js",
+    "packages/core/build/summary/compatibility.js",
     "packages/core/build/summary/controller-receipt.js",
     "packages/core/build/summary/finalization.js",
+    "packages/core/build/summary/historical-outputs.js",
     "packages/core/build/summary/payloads.js"
   ],
   "entryJob": "execution-runtime",
@@ -69,6 +74,7 @@
     "runtime-ref",
     "contract-lock",
     "resume-run-id",
-    "runtime-selection"
+    "runtime-selection",
+    "compatibility-inputs"
   ]
 }