@kungfu-tech/buildchain 2.10.3 → 2.10.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (37) hide show
  1. package/README.md +1 -0
  2. package/actions/promote-buildchain-ref/README.md +10 -7
  3. package/dist/site/badge-endpoint-registry.json +160 -0
  4. package/dist/site/badges/v1/kfd-4/aligned.json +14 -0
  5. package/dist/site/badges/v1/kfd-4/declared.json +14 -0
  6. package/dist/site/badges/v1/kfd-4/downgraded.json +14 -0
  7. package/dist/site/badges/v1/kfd-4/draft.json +14 -0
  8. package/dist/site/badges/v1/kfd-4/failed.json +14 -0
  9. package/dist/site/badges/v1/kfd-4/missing.json +14 -0
  10. package/dist/site/badges/v1/kfd-4/passed.json +14 -0
  11. package/dist/site/badges/v1/kfd-4/planned.json +14 -0
  12. package/dist/site/buildchain-contract.json +13 -13
  13. package/dist/site/buildchain-site.json +24 -24
  14. package/dist/site/capability-registry.json +1 -1
  15. package/dist/site/kfd-claims.json +4 -4
  16. package/dist/site/manual-registry.json +5 -5
  17. package/dist/site/node-api-registry.json +9 -9
  18. package/dist/site/page-registry.json +14 -14
  19. package/dist/site/public-surface-audit.json +1 -1
  20. package/dist/site/site-manifest.json +9 -9
  21. package/docs/readme-badges.md +14 -10
  22. package/docs/release-candidate.md +4 -1
  23. package/docs/release-governance.md +5 -2
  24. package/docs/release-passport.md +5 -2
  25. package/docs/reusable-build-surface.md +5 -2
  26. package/package.json +2 -2
  27. package/packages/core/artifact-passport.js +37 -11
  28. package/packages/core/badges.js +1 -0
  29. package/packages/core/buildchain-contract.js +1 -1
  30. package/packages/core/buildchain-kfd-claims.js +1 -1
  31. package/packages/core/index.js +1 -0
  32. package/packages/core/readme-badges.js +98 -39
  33. package/packages/core/release-passport.js +1 -0
  34. package/scripts/check-inventory.mjs +2 -0
  35. package/scripts/generate-site-bundle.mjs +11 -6
  36. package/scripts/web-surface-production-release-pr.mjs +88 -3
  37. package/scripts/web-surface.mjs +39 -1
package/dist/site/capability-registry.json CHANGED
@@ -100,7 +100,7 @@
100
100
  {
101
101
  "id": "kfd-trust",
102
102
  "title": "KFD Trust and Surface Closure",
103
- "summary": "Discover KFD-1, KFD-2, and KFD-3 support, public surface reverse audits, and product capability queries.",
103
+ "summary": "Discover KFD trust support, public surface reverse audits, and product capability queries.",
104
104
  "audience": [
105
105
  "agent",
106
106
  "maintainer"
package/dist/site/kfd-claims.json CHANGED
@@ -14,14 +14,14 @@
14
14
  },
15
15
  "runtimeContract": {
16
16
  "contract": "kungfu-buildchain-runtime-contract-world",
17
- "compatibilityDigest": "sha256:407d6d5ee6a96a34d2cc30db9ac64cf4b1819ab6d77bd7a57a07a124f22101ca",
17
+ "compatibilityDigest": "sha256:967df7e854fdf582294ddfb6403eff25c00db9518a24051e7d47cbd75527c785",
18
18
  "majorLine": "v2"
19
19
  },
20
20
  "publicSurfaceReverseAudit": {
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "046b397df3042bdf9771e279cedb2d29cc0d691d379e2c244c3b9476c16c6ce3",
24
+ "sha256": "8643f99a115112c2fa97081d7ba9bb7c8d6a4be74df40a5d50410e417d4f2856",
25
25
  "summary": {
26
26
  "cliCommandCount": 52,
27
27
  "workflowCount": 35,
@@ -158,7 +158,7 @@
158
158
  },
159
159
  {
160
160
  "id": "claim:buildchain-semver-github-release",
161
- "claim": "Semver promotion can create or update an exact-tag GitHub Release only after the publish transaction completes, and uploads Buildchain release passport/evidence assets.",
161
+ "claim": "Semver promotion can create or update the public GitHub Release only after the publish transaction completes, and uploads Buildchain release passport/evidence assets while preserving the internal transaction exact tag.",
162
162
  "sourcePaths": [
163
163
  "actions/promote-buildchain-ref/index.js",
164
164
  "actions/promote-buildchain-ref/action.yml",
@@ -207,7 +207,7 @@
207
207
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
208
208
  "path": "dist/site/public-surface-audit.json",
209
209
  "status": "passed",
210
- "sha256": "046b397df3042bdf9771e279cedb2d29cc0d691d379e2c244c3b9476c16c6ce3",
210
+ "sha256": "8643f99a115112c2fa97081d7ba9bb7c8d6a4be74df40a5d50410e417d4f2856",
211
211
  "summary": {
212
212
  "cliCommandCount": 52,
213
213
  "workflowCount": 35,
package/dist/site/manual-registry.json CHANGED
@@ -36,7 +36,7 @@
36
36
  "title": "Release Passport protocol",
37
37
  "path": "docs/release-passport.md",
38
38
  "plane": "verify",
39
- "digest": "sha256:75d8bade4b0b96b26941b11835c2debcdada8f1723412935fb8ae6884f08f9f3",
39
+ "digest": "sha256:ca764740841b364ff7cfea79b87221d29c09df09fee6d19e78ed4b0b173bfad3",
40
40
  "capabilityGroup": "release-passport-trust",
41
41
  "audience": [
42
42
  "release-operator",
@@ -50,7 +50,7 @@
50
50
  "title": "Release Candidate Passport",
51
51
  "path": "docs/release-candidate.md",
52
52
  "plane": "verify",
53
- "digest": "sha256:6b5107cded122925e8560a9b117ff1c96f5cf05d934caf83d7e4b2a4d777175e",
53
+ "digest": "sha256:391f14569c7d2a43dd9986c6a29462d674a77338dac6a4ac89c79a4c3d6c4947",
54
54
  "capabilityGroup": "reusable-build",
55
55
  "audience": [
56
56
  "release-operator",
@@ -78,7 +78,7 @@
78
78
  "title": "README badge blocks",
79
79
  "path": "docs/readme-badges.md",
80
80
  "plane": "use",
81
- "digest": "sha256:06eaef737dcc73a6526d856d79275ee87af9670f0e2be39a5596758bfc3527c9",
81
+ "digest": "sha256:ddaf49a7d6e6c11aea8d21d1ba736159897e16207cd74af0044014425faf8a2c",
82
82
  "capabilityGroup": "distribution-indexes",
83
83
  "audience": [
84
84
  "consumer",
@@ -273,7 +273,7 @@
273
273
  "title": "Reusable build surface",
274
274
  "path": "docs/reusable-build-surface.md",
275
275
  "plane": "use",
276
- "digest": "sha256:e76aefe23b83f1b99b8c13cee1ca99760fd9902a41fbec25e193426329826340",
276
+ "digest": "sha256:a3f979fcede4450dabe5b8d6182395993c9f28559f7176b071a6ff9db565a355",
277
277
  "capabilityGroup": "reusable-build",
278
278
  "audience": [
279
279
  "consumer",
@@ -300,7 +300,7 @@
300
300
  "title": "Release governance",
301
301
  "path": "docs/release-governance.md",
302
302
  "plane": "why",
303
- "digest": "sha256:15fa0295ae2d97a2fd4ca17024d3da62df1057c9118b77a7e6b7550a404cd27b",
303
+ "digest": "sha256:69218a4749170e1f84b82f211d57187a7ff33f1a510aced587e240d1d901b9e7",
304
304
  "capabilityGroup": "governance-versioning",
305
305
  "audience": [
306
306
  "maintainer",
package/dist/site/node-api-registry.json CHANGED
@@ -8,7 +8,7 @@
8
8
  "specifier": "@kungfu-tech/buildchain",
9
9
  "export": ".",
10
10
  "target": "./packages/core/index.js",
11
- "digest": "sha256:91dac9241f8e9aa02df360a0720d3998cf8eca27910517d8afabcb4a97e019e1",
11
+ "digest": "sha256:22dd10ba022b722440e75636ea165317ee2aedb737531e20f14a9e6e7fe299c4",
12
12
  "summary": "Root toolkit export for Buildchain's public Node API.",
13
13
  "capabilityGroup": "api-cli-reference",
14
14
  "audience": [
@@ -21,7 +21,7 @@
21
21
  "specifier": "@kungfu-tech/buildchain/badges",
22
22
  "export": "./badges",
23
23
  "target": "./packages/core/badges.js",
24
- "digest": "sha256:207ebe604c6f109f61816932fbadaf95fcf96a075a60d79dce4a90629337e2c9",
24
+ "digest": "sha256:1527c396db5fcd7e9ccdd68e6d862e468b2424789d1c9dd2015996bae03eabd3",
25
25
  "summary": "Badge bundle facts, rendering, checking, and update APIs.",
26
26
  "capabilityGroup": "distribution-indexes",
27
27
  "audience": [
@@ -47,7 +47,7 @@
47
47
  "specifier": "@kungfu-tech/buildchain/core",
48
48
  "export": "./core",
49
49
  "target": "./packages/core/index.js",
50
- "digest": "sha256:91dac9241f8e9aa02df360a0720d3998cf8eca27910517d8afabcb4a97e019e1",
50
+ "digest": "sha256:22dd10ba022b722440e75636ea165317ee2aedb737531e20f14a9e6e7fe299c4",
51
51
  "summary": "Alias for the root public toolkit export.",
52
52
  "capabilityGroup": "api-cli-reference",
53
53
  "audience": [
@@ -60,7 +60,7 @@
60
60
  "specifier": "@kungfu-tech/buildchain/artifact-passport",
61
61
  "export": "./artifact-passport",
62
62
  "target": "./packages/core/artifact-passport.js",
63
- "digest": "sha256:2f882bf245658fb7a204004d7aa3a22f7e34816e4ba101fb0969a002d05fc12c",
63
+ "digest": "sha256:beb4da1f056630bf7e19b709374a327c0004e87d541e03ac1eddfa8c65bb66c4",
64
64
  "summary": "Artifact passport digest and evidence helper APIs.",
65
65
  "capabilityGroup": "release-passport-trust",
66
66
  "audience": [
@@ -73,7 +73,7 @@
73
73
  "specifier": "@kungfu-tech/buildchain/buildchain-contract",
74
74
  "export": "./buildchain-contract",
75
75
  "target": "./packages/core/buildchain-contract.js",
76
- "digest": "sha256:b3c4164d08acc2d3d56783d695e47feceb3e134b7e87e80294ea05a87e7921d7",
76
+ "digest": "sha256:54eea325e5c33972670a702ce03d0553944614e0bbb6673f89ca13cff7d616ed",
77
77
  "summary": "Runtime contract world and compatibility digest APIs for floating-ref drift checks.",
78
78
  "capabilityGroup": "governance-versioning",
79
79
  "audience": [
@@ -151,7 +151,7 @@
151
151
  "specifier": "@kungfu-tech/buildchain/readme-badges",
152
152
  "export": "./readme-badges",
153
153
  "target": "./packages/core/readme-badges.js",
154
- "digest": "sha256:3d4b61918f31a24de8fb11b15a9544df2c9696f6bd8c7efb1e373f0745cb3ce0",
154
+ "digest": "sha256:13914ebabbc92ed49dd842c2aa51cc99d72b0732423c0b53a030c6458a0cd9d8",
155
155
  "summary": "Managed README badge block facts, rendering, drift checks, and updates.",
156
156
  "capabilityGroup": "distribution-indexes",
157
157
  "audience": [
@@ -216,7 +216,7 @@
216
216
  "specifier": "@kungfu-tech/buildchain/release-passport",
217
217
  "export": "./release-passport",
218
218
  "target": "./packages/core/release-passport.js",
219
- "digest": "sha256:ce36cc21cfd3e0508a2a816292863dc2e11f19146b2624ef066fc9aaa4f4190e",
219
+ "digest": "sha256:e4218271c4e24ea9b4a5bab04b4d0364c92774075a07d474e05a234eaceae2b1",
220
220
  "summary": "Release passport collection, verification, explanation, and evidence APIs.",
221
221
  "capabilityGroup": "release-passport-trust",
222
222
  "audience": [
@@ -255,7 +255,7 @@
255
255
  "specifier": "@kungfu-tech/buildchain/buildchain-kfd-claims",
256
256
  "export": "./buildchain-kfd-claims",
257
257
  "target": "./packages/core/buildchain-kfd-claims.js",
258
- "digest": "sha256:fa934cd170be8f729c05aec3e2df52ed5765445d2dffaeb391f1d367f6a09195",
258
+ "digest": "sha256:e800194bd945e6727d2e467d3dc155e0df95c656d58047590d12e5174ca84463",
259
259
  "summary": "Buildchain self KFD claim registry, witnesses, and public claim APIs.",
260
260
  "capabilityGroup": "kfd-trust",
261
261
  "audience": [
@@ -284,7 +284,7 @@
284
284
  {
285
285
  "id": "readme-badges",
286
286
  "path": "docs/readme-badges.md",
287
- "digest": "sha256:06eaef737dcc73a6526d856d79275ee87af9670f0e2be39a5596758bfc3527c9"
287
+ "digest": "sha256:ddaf49a7d6e6c11aea8d21d1ba736159897e16207cd74af0044014425faf8a2c"
288
288
  },
289
289
  {
290
290
  "id": "homebrew",