@kungfu-tech/buildchain 2.10.9 → 2.10.10

package/bin/buildchain.mjs

@@ -9,6 +9,7 @@ import { npmPublishDryRun } from "../scripts/npm-publish-dry-run.mjs";
 import { runLifecycle } from "../scripts/run-lifecycle-core.mjs";
 import { verifyInfraContractEvidenceBundle } from "../scripts/infra-contract-core.mjs";
 import { runReleasePropagationCli } from "../scripts/release-propagation.mjs";
+import { runPublicationArtifactCli } from "../scripts/publication-artifact.mjs";
 import { validateBuildchainConfig } from "../packages/core/buildchain-config.js";
 import { detectPackageManager } from "../packages/core/package-manager.js";
 import {
@@ -92,7 +93,7 @@ function usage() {
   return `Usage:
   buildchain --help
   buildchain version
-  buildchain init [--cwd <dir>] [--type package|native|web-surface|infra-contract|anchored-package] [--force]
+  buildchain init [--cwd <dir>] [--type package|native|web-surface|infra-contract|publication-artifact|anchored-package] [--force]
                   [--package-manager pnpm|npm|yarn] [--runner-preset <preset>]
                   [--artifact-name <template>]
   buildchain validate [--cwd <dir>] [--require-version-state]
@@ -200,6 +201,9 @@ function usage() {
                   [--path <jsonl>] -- <command> [args...]
   buildchain web-surface ...
   buildchain infra-contract ...
+  buildchain publication-artifact manifest [--cwd <dir>] [--source-sha <sha>]
+                                           [--output <file>] [--passport-output <file>]
+                                           [--source-bundle <file>] [--no-source-bundle] [--json]
   buildchain release-propagation <plan|write-lock> ...
   buildchain badges readme [--cwd <dir>] [--readme <path>] [--check] [--write] [--json]
   buildchain badges bundle [--cwd <dir>] [--readme <path>] [--claims <csv>] [--check] [--write] [--json]
@@ -228,6 +232,7 @@ Examples:
   buildchain infra-contract --mode apply --plan <plan.json> --source-sha <sha> --approval-id <id> --dry-run false --execute-adapter-commands true
   buildchain infra-contract --mode propagation-apply --propagation-plan <plan.json> --dry-run true
   buildchain infra-contract --mode evidence-bundle --artifact <artifact.json> --propagation-result <result.json>
+  buildchain publication-artifact manifest --source-sha <sha> --json
   buildchain release-propagation plan --graph graph.json --upstream-release release.json --json
   buildchain kfd status --json
   buildchain kfd schema list --json
@@ -1780,6 +1785,11 @@ async function main(argv = process.argv.slice(2)) {
     return;
   }
 
+  if (command === "publication-artifact" || command === "publication") {
+    runPublicationArtifactCli(args);
+    return;
+  }
+
   if (command === "release-propagation") {
     runReleasePropagationCli(args);
     return;

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "2.10.9",
+    "version": "2.10.10",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v2",
@@ -134,7 +134,7 @@
         "breaking contract drift fails closed before rendering, deployment, or release publication"
       ],
       "breakingDigest": "sha256:82ee63cb336e40d832dfff4a1c5e6cbfa221a4fc8b2359990033bc931bffc43a",
-      "auditDigest": "sha256:b021f998232e69eb1b34c39e6a6b05e9a24f6c0b3d114f6faab2bc2ed44f100c"
+      "auditDigest": "sha256:fdb586f033b0bcbe2455b1f9e1ced419d22b715fcdcb5d096265b741471cac9a"
     },
     {
       "contractVersion": 1,
@@ -344,7 +344,7 @@
         "README badge block checks and writes are generated from machine-readable repository facts"
       ],
       "breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
-      "auditDigest": "sha256:34b5fa8a801e82667bdf2578ad64274623a4635daa5e080f51cee422a4ed0ba4"
+      "auditDigest": "sha256:e2ffc6b772e24ebb72dfc8c7ee55eb533d48dbcb6223707387010a505155a3c3"
     },
     {
       "contractVersion": 1,
@@ -434,7 +434,7 @@
         "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
       ],
       "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
-      "auditDigest": "sha256:044cc7ec44c343b450be076db2d1604cb5f52afda6fca3eef67bc3a0960a2a06"
+      "auditDigest": "sha256:3d69a844c04e29c55ee82e5485960a0d21701de44f28358b3b21d05db26e1754"
     },
     {
       "contractVersion": 1,
@@ -456,9 +456,9 @@
         "agents can discover supported Node APIs without importing internal file paths"
       ],
       "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
-      "auditDigest": "sha256:896ddcc6c808d92fd757e087632bcfb069378046008d70132d7de74138f03b76"
+      "auditDigest": "sha256:44685053beb1571e543d5912009acea8eb29e13ca9bb96baffb10e87805dfcbf"
     }
   ],
   "compatibilityDigest": "sha256:967df7e854fdf582294ddfb6403eff25c00db9518a24051e7d47cbd75527c785",
-  "contractDigest": "sha256:511d42f392bdf81805b067079c2c436d7c13f013833215ebe93e6c5b512c10b0"
+  "contractDigest": "sha256:3ed710d73ac54819396ec372044ec633230fac360b8cad972b4318044d782538"
 }