@kungfu-tech/buildchain 4.1.6 → 4.1.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +7 -5
- package/CONTRIBUTING.md +12 -6
- package/README.md +9 -5
- package/architecture/action-taxonomy.json +2 -0
- package/architecture/agent-change-map.md +6 -1
- package/architecture/build-orchestration.json +7 -1
- package/architecture/ci-lane-change-budget.json +1836 -0
- package/architecture/consumer-upgrade.json +6482 -0
- package/architecture/internal-capabilities.json +5 -2
- package/architecture/maintainability-debt.json +18 -10
- package/architecture/maintainability-policy.json +9 -9
- package/architecture/release-topology.json +10 -1
- package/architecture/universal-workflow-bootstrap.json +88 -18
- package/architecture/universal-workflow-capability-policy.json +2 -2
- package/architecture/workflow-taxonomy.json +2 -1
- package/contracts/dev-delivery-authority-v2.schema.json +29 -3
- package/contracts/fixtures/consumer-upgrade/build-v4.0.0.json +764 -0
- package/contracts/fixtures/consumer-upgrade/consumer-calls.json +447 -0
- package/contracts/fixtures/consumer-upgrade/dev-delivery-identity-v4.0.0.json +27 -0
- package/contracts/fixtures/consumer-upgrade/dev-pr-auto-merge-v4.0.0.json +256 -0
- package/contracts/fixtures/consumer-upgrade/dev-pr-auto-merge-v4.0.9.json +358 -0
- package/contracts/fixtures/consumer-upgrade/release-v4.0.0.json +815 -0
- package/contracts/promotion-invocation-v1.schema.json +5 -0
- package/dist/site/buildchain-contract.json +40 -23
- package/dist/site/buildchain-site.json +20 -20
- package/dist/site/capability-registry.json +5 -5
- package/dist/site/controller-registry.json +17 -5
- package/dist/site/kfd-claims.json +1376 -143
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +4 -4
- package/dist/site/node-api-registry.json +22 -22
- package/dist/site/page-registry.json +14 -14
- package/dist/site/public-surface-audit.json +1733 -101
- package/dist/site/publication-authority-registry.json +651 -32
- package/dist/site/publication-registry.json +1 -1
- package/dist/site/schemas/dev-delivery-authority-v2.schema.json +29 -3
- package/dist/site/site-manifest.json +5 -5
- package/dist/site/workflow-registry.json +2501 -149
- package/docs/MAP.md +5 -4
- package/docs/code-organization.md +11 -8
- package/docs/getting-started.md +31 -2
- package/docs/migration-inventory.md +8 -6
- package/docs/node-api-reference.md +36 -36
- package/docs/workflow-path-migration.md +8 -7
- package/package.json +1 -1
- package/packages/core/build/artifact/contracts.js +10 -2
- package/packages/core/build/artifact/transport.js +1 -1
- package/packages/core/build/artifact/upload.js +2 -2
- package/packages/core/build/plan/action.js +2 -0
- package/packages/core/build/plan/admission.js +9 -3
- package/packages/core/build/plan/compatibility-artifacts.js +47 -0
- package/packages/core/build/plan/compatibility-plan.js +121 -0
- package/packages/core/build/plan/compatibility.js +162 -0
- package/packages/core/build/plan/configuration.js +10 -37
- package/packages/core/build/plan/identity.js +42 -0
- package/packages/core/build/plan/lifecycle.js +1 -0
- package/packages/core/build/plan/resolve.js +2 -0
- package/packages/core/build/summary/aggregation.js +4 -2
- package/packages/core/build/summary/compatibility.js +24 -0
- package/packages/core/build/summary/finalization.js +18 -0
- package/packages/core/build/summary/historical-outputs.js +88 -0
- package/packages/core/contracts/runtime-contract-inspection.js +8 -0
- package/packages/core/dev-delivery/candidate/submission.js +2 -1
- package/packages/core/dev-delivery/commands/dev-delivery-authority-command-adapters.mjs +2 -1
- package/packages/core/dev-delivery/commands/dev-delivery-authority.mjs +6 -5
- package/packages/core/dev-delivery/commands/dev-delivery-warrant-options.mjs +22 -3
- package/packages/core/dev-delivery/dev-delivery-candidate-identity.js +13 -4
- package/packages/core/dev-delivery/dev-delivery-warrant.js +4 -1
- package/packages/core/dev-delivery/warrant/handoff.js +2 -1
- package/packages/core/dev-delivery/warrant/transitions.js +2 -2
- package/packages/core/governance/buildchain-publication-authority.js +5 -9
- package/packages/core/release/github-release-metadata.js +58 -0
- package/packages/core/release/promote-candidate/action.js +4 -2
- package/packages/core/release/promote-candidate/preparation.js +6 -0
- package/packages/core/release/promote-candidate/publication.js +36 -0
- package/packages/core/release/promote-candidate/release-documents.js +1 -1
- package/packages/core/release/promotion/candidate.js +4 -2
- package/packages/core/release/promotion/compatibility-context.js +93 -0
- package/packages/core/release/promotion/compatibility-qualification.js +48 -0
- package/packages/core/release/promotion/compatibility.js +141 -0
- package/packages/core/release/promotion/historical-evidence-action.js +17 -0
- package/packages/core/release/promotion/historical-evidence-files.js +112 -0
- package/packages/core/release/promotion/historical-evidence.js +231 -0
- package/packages/core/release/promotion/qualification.js +12 -1
- package/packages/core/release/promotion/routing.js +3 -2
- package/packages/core/release/promotion-request.js +31 -2
- package/packages/core/release/release-tail-provider-adapters.js +18 -0
- package/packages/core/runtime/entry/actions.js +4 -1
- package/packages/core/runtime/entry/compatibility.js +53 -0
- package/packages/core/workflow/engine/conformance.js +7 -3
- package/packages/core/workflow/pipeline/controller.js +26 -26
- package/scripts/check-dev-delivery-actions.mjs +12 -0
- package/scripts/check-inventory.mjs +1 -1
- package/scripts/check-public-dogfood-contract.mjs +2 -0
- package/scripts/check-release-topology.mjs +5 -1
- package/scripts/check-self-consumer-contract.mjs +5 -1
- package/scripts/generate-bootstrap-admission.mjs +20 -0
- package/scripts/generate-site-bundle.mjs +5 -5
- package/scripts/generate-workflow-taxonomy.mjs +17 -0
- package/scripts/maintainability-metrics.mjs +30 -2
- package/scripts/maintainability-public-surface.mjs +5 -3
|
@@ -501,6 +501,11 @@
|
|
|
501
501
|
"type": "string",
|
|
502
502
|
"default": "",
|
|
503
503
|
"description": "Existing consumer release Discussion ID; restore its retained candidate through the selected runtime."
|
|
504
|
+
},
|
|
505
|
+
"historical-inputs-json": {
|
|
506
|
+
"type": "string",
|
|
507
|
+
"default": "",
|
|
508
|
+
"description": "Validated historical promotion context emitted by the retained entry."
|
|
504
509
|
}
|
|
505
510
|
}
|
|
506
511
|
}
|
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"name": "Buildchain",
|
|
6
6
|
"package": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "4.1.
|
|
7
|
+
"version": "4.1.7",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"majorLine": "v4",
|
|
@@ -87,6 +87,7 @@
|
|
|
87
87
|
"apiRole": "implementation",
|
|
88
88
|
"requiredInputs": [],
|
|
89
89
|
"optionalInputs": [
|
|
90
|
+
"compatibility-inputs",
|
|
90
91
|
"config-path",
|
|
91
92
|
"contract-lock",
|
|
92
93
|
"resume-run-id",
|
|
@@ -97,7 +98,7 @@
|
|
|
97
98
|
"result"
|
|
98
99
|
],
|
|
99
100
|
"breakingDigest": "sha256:f8f6b7286b1afcca92ef357e48f7bb9cb5ce15c3b43108a0c5a7c66c2683fbe5",
|
|
100
|
-
"auditDigest": "sha256:
|
|
101
|
+
"auditDigest": "sha256:5ac131fc2db8d3b0d4b73b84c9c857a021d09315b4b25e22e592e259dc5a4636"
|
|
101
102
|
},
|
|
102
103
|
{
|
|
103
104
|
"contractVersion": 1,
|
|
@@ -122,6 +123,7 @@
|
|
|
122
123
|
"apiRole": "implementation",
|
|
123
124
|
"requiredInputs": [],
|
|
124
125
|
"optionalInputs": [
|
|
126
|
+
"compatibility-inputs",
|
|
125
127
|
"config-path",
|
|
126
128
|
"contract-lock",
|
|
127
129
|
"resume-run-id",
|
|
@@ -134,7 +136,7 @@
|
|
|
134
136
|
"result"
|
|
135
137
|
],
|
|
136
138
|
"breakingDigest": "sha256:fe7df253cf7ce886a6a4d2e8013f22cb7ac3ea34fd1f96eb36a061382cf074f2",
|
|
137
|
-
"auditDigest": "sha256:
|
|
139
|
+
"auditDigest": "sha256:3c0afd1c1b252ef8ce3d1acef515c357bad7ce841fd905e2393641a6a3899493"
|
|
138
140
|
},
|
|
139
141
|
{
|
|
140
142
|
"contractVersion": 1,
|
|
@@ -665,7 +667,7 @@
|
|
|
665
667
|
],
|
|
666
668
|
"apiRole": "implementation",
|
|
667
669
|
"breakingDigest": "sha256:fbe7b9c8fd9270cf287e6beca3d1946c8404d6313688c5841088ca3d4b7a76ad",
|
|
668
|
-
"auditDigest": "sha256:
|
|
670
|
+
"auditDigest": "sha256:2c51e8ea7a9208c9c6f7a8ca15d2472177e3c5b224e112f3a064151a7fd70dc9"
|
|
669
671
|
},
|
|
670
672
|
{
|
|
671
673
|
"contractVersion": 1,
|
|
@@ -1051,7 +1053,7 @@
|
|
|
1051
1053
|
"manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
|
|
1052
1054
|
],
|
|
1053
1055
|
"breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
|
|
1054
|
-
"auditDigest": "sha256:
|
|
1056
|
+
"auditDigest": "sha256:bfd3b7e5086a7033be2b6a82b1eb98b519a36dba8bcef497739aa2fdee007630"
|
|
1055
1057
|
},
|
|
1056
1058
|
{
|
|
1057
1059
|
"contractVersion": 1,
|
|
@@ -1073,7 +1075,7 @@
|
|
|
1073
1075
|
"agents can discover supported Node APIs without importing internal file paths"
|
|
1074
1076
|
],
|
|
1075
1077
|
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
|
|
1076
|
-
"auditDigest": "sha256:
|
|
1078
|
+
"auditDigest": "sha256:733d8b9f35843943d3ac7548ee7f587a9942fa50a4d05010fa8df5eb0ba48151"
|
|
1077
1079
|
},
|
|
1078
1080
|
{
|
|
1079
1081
|
"contractVersion": 1,
|
|
@@ -1081,7 +1083,7 @@
|
|
|
1081
1083
|
"additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
|
|
1082
1084
|
"id": "controller:source-check",
|
|
1083
1085
|
"kind": "controller",
|
|
1084
|
-
"path": ".github/workflows
|
|
1086
|
+
"path": ".github/workflows/check.yml",
|
|
1085
1087
|
"requiredInputs": [],
|
|
1086
1088
|
"requiredOutputs": [
|
|
1087
1089
|
"controller-plan-json",
|
|
@@ -1093,7 +1095,7 @@
|
|
|
1093
1095
|
"breakingDefaults": {
|
|
1094
1096
|
"evidenceContract": "buildchain.controller-evidence/v1",
|
|
1095
1097
|
"descriptorVersion": 1,
|
|
1096
|
-
"workflowPath": ".github/workflows
|
|
1098
|
+
"workflowPath": ".github/workflows/check.yml",
|
|
1097
1099
|
"requiredStages": [
|
|
1098
1100
|
"resolve-runtime",
|
|
1099
1101
|
"checkout-source",
|
|
@@ -1113,6 +1115,8 @@
|
|
|
1113
1115
|
"inputClassificationPolicy": "buildchain-controller-input-policy/v1"
|
|
1114
1116
|
},
|
|
1115
1117
|
"optionalInputs": [
|
|
1118
|
+
"buildchain-ref",
|
|
1119
|
+
"buildchain-repository",
|
|
1116
1120
|
"contract-lock",
|
|
1117
1121
|
"mode",
|
|
1118
1122
|
"node-version",
|
|
@@ -1129,9 +1133,17 @@
|
|
|
1129
1133
|
],
|
|
1130
1134
|
"controllerDescriptor": {
|
|
1131
1135
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1132
|
-
"digest": "sha256:
|
|
1133
|
-
"registryDigest": "sha256:
|
|
1136
|
+
"digest": "sha256:b82be1358eaf5751a36b06648de7447a7cca488935df4c3c3e351b58cd0263ef",
|
|
1137
|
+
"registryDigest": "sha256:5801f9cc732698c8a137a711f8596502d32e88509bf174ee036da0ea332007fa",
|
|
1134
1138
|
"inputClassifications": {
|
|
1139
|
+
"buildchain-ref": {
|
|
1140
|
+
"classification": "included",
|
|
1141
|
+
"source": "workflow-call-input"
|
|
1142
|
+
},
|
|
1143
|
+
"buildchain-repository": {
|
|
1144
|
+
"classification": "included",
|
|
1145
|
+
"source": "workflow-call-input"
|
|
1146
|
+
},
|
|
1135
1147
|
"contract-lock": {
|
|
1136
1148
|
"classification": "included",
|
|
1137
1149
|
"source": "workflow-call-input"
|
|
@@ -1193,8 +1205,8 @@
|
|
|
1193
1205
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
1194
1206
|
],
|
|
1195
1207
|
"apiRole": "implementation",
|
|
1196
|
-
"breakingDigest": "sha256:
|
|
1197
|
-
"auditDigest": "sha256:
|
|
1208
|
+
"breakingDigest": "sha256:c6f6b734dd1cd951c0b5b178307d0e0083c2e894d9c3afa058294ed153f80ef5",
|
|
1209
|
+
"auditDigest": "sha256:39d8fd6efe3a63936d6244dbebfa855c450559d1f2293c4059cee60903c5a43d"
|
|
1198
1210
|
},
|
|
1199
1211
|
{
|
|
1200
1212
|
"contractVersion": 1,
|
|
@@ -1243,6 +1255,7 @@
|
|
|
1243
1255
|
"BUILDCHAIN_MACOS_NOTARY_API_KEY_ID",
|
|
1244
1256
|
"BUILDCHAIN_MACOS_NOTARY_API_KEY_P8_BASE64",
|
|
1245
1257
|
"BUILDCHAIN_PROMOTION_TOKEN",
|
|
1258
|
+
"compatibility-inputs",
|
|
1246
1259
|
"config-path",
|
|
1247
1260
|
"contract-lock",
|
|
1248
1261
|
"resume-run-id",
|
|
@@ -1252,8 +1265,8 @@
|
|
|
1252
1265
|
],
|
|
1253
1266
|
"controllerDescriptor": {
|
|
1254
1267
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1255
|
-
"digest": "sha256:
|
|
1256
|
-
"registryDigest": "sha256:
|
|
1268
|
+
"digest": "sha256:7f3559f3b6bf1fb0624846addbd7018ef78647e9a1339a08c114a6e2fd464aca",
|
|
1269
|
+
"registryDigest": "sha256:5801f9cc732698c8a137a711f8596502d32e88509bf174ee036da0ea332007fa",
|
|
1257
1270
|
"inputClassifications": {
|
|
1258
1271
|
"BUILDCHAIN_MACOS_CERTIFICATE_P12_BASE64": {
|
|
1259
1272
|
"classification": "redacted",
|
|
@@ -1279,6 +1292,10 @@
|
|
|
1279
1292
|
"classification": "redacted",
|
|
1280
1293
|
"source": "workflow-call-secret"
|
|
1281
1294
|
},
|
|
1295
|
+
"compatibility-inputs": {
|
|
1296
|
+
"classification": "included",
|
|
1297
|
+
"source": "workflow-call-input"
|
|
1298
|
+
},
|
|
1282
1299
|
"config-path": {
|
|
1283
1300
|
"classification": "digest-only",
|
|
1284
1301
|
"source": "workflow-call-input"
|
|
@@ -1313,7 +1330,7 @@
|
|
|
1313
1330
|
],
|
|
1314
1331
|
"apiRole": "implementation",
|
|
1315
1332
|
"breakingDigest": "sha256:53e3c1acd82720f4bc27d48ad11effe44bba1e515115462cac43814e12991e8d",
|
|
1316
|
-
"auditDigest": "sha256:
|
|
1333
|
+
"auditDigest": "sha256:5ac131fc2db8d3b0d4b73b84c9c857a021d09315b4b25e22e592e259dc5a4636"
|
|
1317
1334
|
},
|
|
1318
1335
|
{
|
|
1319
1336
|
"contractVersion": 1,
|
|
@@ -1384,7 +1401,7 @@
|
|
|
1384
1401
|
"controllerDescriptor": {
|
|
1385
1402
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1386
1403
|
"digest": "sha256:83fb2f980409ff9eb7091fc675b1f1ecd471d335945d8fa6003357f0af709dd5",
|
|
1387
|
-
"registryDigest": "sha256:
|
|
1404
|
+
"registryDigest": "sha256:5801f9cc732698c8a137a711f8596502d32e88509bf174ee036da0ea332007fa",
|
|
1388
1405
|
"inputClassifications": {
|
|
1389
1406
|
"artifact-name": {
|
|
1390
1407
|
"classification": "included",
|
|
@@ -1603,7 +1620,7 @@
|
|
|
1603
1620
|
"controllerDescriptor": {
|
|
1604
1621
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1605
1622
|
"digest": "sha256:ffef96c7b7bbcec02f9cc2b9e25df2e8c23945e4154fda489b2c357aa865202c",
|
|
1606
|
-
"registryDigest": "sha256:
|
|
1623
|
+
"registryDigest": "sha256:5801f9cc732698c8a137a711f8596502d32e88509bf174ee036da0ea332007fa",
|
|
1607
1624
|
"inputClassifications": {
|
|
1608
1625
|
"artifact-path": {
|
|
1609
1626
|
"classification": "digest-only",
|
|
@@ -1836,7 +1853,7 @@
|
|
|
1836
1853
|
"controllerDescriptor": {
|
|
1837
1854
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1838
1855
|
"digest": "sha256:2c320c01ed604bcfb14175aefbd7dd6c961f04e3fc52cb0f02f50b08db725f2d",
|
|
1839
|
-
"registryDigest": "sha256:
|
|
1856
|
+
"registryDigest": "sha256:5801f9cc732698c8a137a711f8596502d32e88509bf174ee036da0ea332007fa",
|
|
1840
1857
|
"inputClassifications": {
|
|
1841
1858
|
"artifact-name": {
|
|
1842
1859
|
"classification": "included",
|
|
@@ -2008,7 +2025,7 @@
|
|
|
2008
2025
|
"controllerDescriptor": {
|
|
2009
2026
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2010
2027
|
"digest": "sha256:1a98258cc22ecd79ebca7acb5bba5fbd4daef8af34439003ef586b4f8e84744e",
|
|
2011
|
-
"registryDigest": "sha256:
|
|
2028
|
+
"registryDigest": "sha256:5801f9cc732698c8a137a711f8596502d32e88509bf174ee036da0ea332007fa",
|
|
2012
2029
|
"inputClassifications": {
|
|
2013
2030
|
"BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID": {
|
|
2014
2031
|
"classification": "redacted",
|
|
@@ -2191,7 +2208,7 @@
|
|
|
2191
2208
|
"controllerDescriptor": {
|
|
2192
2209
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2193
2210
|
"digest": "sha256:b24b12bd41b968aef7694e41d0186cd130a748f6142b196e9e98dd30b026058d",
|
|
2194
|
-
"registryDigest": "sha256:
|
|
2211
|
+
"registryDigest": "sha256:5801f9cc732698c8a137a711f8596502d32e88509bf174ee036da0ea332007fa",
|
|
2195
2212
|
"inputClassifications": {
|
|
2196
2213
|
"BUILDCHAIN_ISSUE_APP_ID": {
|
|
2197
2214
|
"classification": "redacted",
|
|
@@ -2325,7 +2342,7 @@
|
|
|
2325
2342
|
"controllerDescriptor": {
|
|
2326
2343
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2327
2344
|
"digest": "sha256:8f495bf2d183158c3e38da53f0f8cf1f7cb44aae8ba05f4ca2447b1a08b2ffea",
|
|
2328
|
-
"registryDigest": "sha256:
|
|
2345
|
+
"registryDigest": "sha256:5801f9cc732698c8a137a711f8596502d32e88509bf174ee036da0ea332007fa",
|
|
2329
2346
|
"inputClassifications": {
|
|
2330
2347
|
"agent-work-context-json": {
|
|
2331
2348
|
"classification": "digest-only",
|
|
@@ -2427,6 +2444,6 @@
|
|
|
2427
2444
|
"compatibilityFactRegistryRoot": "sha256:ea8f656c9fd74aa2d2fb9b7807e7daa39a708f6a7cd37ab7d154eac7be5605a6",
|
|
2428
2445
|
"compatibilityFactCutRoot": "sha256:58f33e498596505a26b6fc3c7ae5acef847ff699eee6c7e17a7b318a40bdf0d6",
|
|
2429
2446
|
"compatibilityProofRegistryRoot": "sha256:2f6477405c7891b754b33ad6515d55618bd320e7cdc59330d7cc645e17201e72",
|
|
2430
|
-
"compatibilityDigest": "sha256:
|
|
2431
|
-
"contractDigest": "sha256:
|
|
2447
|
+
"compatibilityDigest": "sha256:813bf1ddee2bf87619b4af9e4abcc74bd524de95aef0b77cb94a14e54d9a15f0",
|
|
2448
|
+
"contractDigest": "sha256:b05fd64d52cf71d2052f720e076c8fcea34d1c195b76460ca8dd6c88a0b1f91e"
|
|
2432
2449
|
}
|