@kungfu-tech/buildchain 2.11.0 → 2.11.1-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/bin/buildchain.mjs +7 -3
- package/dist/site/buildchain-contract.json +5 -5
- package/dist/site/buildchain-site.json +26 -26
- package/dist/site/cli-registry.json +2 -2
- package/dist/site/kfd-claims.json +6 -6
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +5 -5
- package/dist/site/node-api-registry.json +7 -7
- package/dist/site/page-registry.json +16 -16
- package/dist/site/public-surface-audit.json +15 -5
- package/dist/site/site-manifest.json +9 -9
- package/docs/MAP.md +1 -1
- package/docs/cli.md +17 -6
- package/docs/kfd-support.md +11 -9
- package/docs/publication-artifacts.md +12 -9
- package/docs/release-candidate.md +3 -3
- package/docs/release-passport.md +9 -4
- package/package.json +1 -1
- package/packages/core/README.md +3 -1
- package/packages/core/artifact-passport.js +70 -2
- package/packages/core/buildchain-layout.js +103 -8
- package/packages/core/index.js +16 -0
- package/packages/core/kfd.js +6 -0
- package/packages/core/kfd3-surface-register.js +1 -1
- package/scripts/generate-buildchain-kfd-witnesses.mjs +11 -4
- package/scripts/init-repo.mjs +7 -2
package/README.md
CHANGED
|
@@ -179,7 +179,7 @@ readable, but new consumers should keep Buildchain-owned files under
|
|
|
179
179
|
```text
|
|
180
180
|
.buildchain/buildchain.toml
|
|
181
181
|
.buildchain/contract-lock.json
|
|
182
|
-
.buildchain/kfd/kfd-3
|
|
182
|
+
.buildchain/kfd/kfd-3/surfaces.json
|
|
183
183
|
.buildchain/release-passport/buildchain.release.json
|
|
184
184
|
```
|
|
185
185
|
|
package/bin/buildchain.mjs
CHANGED
|
@@ -137,16 +137,17 @@ function usage() {
|
|
|
137
137
|
buildchain verify release-passport <file-or-url> [--json]
|
|
138
138
|
buildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...>
|
|
139
139
|
[--passport <file-or-url>] [--locator-config <json>]
|
|
140
|
-
[--repository <owner/repo>] [--tag <tag>]
|
|
140
|
+
[--repository <owner/repo>] [--tag <tag>]
|
|
141
|
+
[--npm-registry <url>] [--json]
|
|
141
142
|
buildchain verify infra-contract-evidence-bundle <file> [--json]
|
|
142
143
|
buildchain verify observability-log <jsonl> [--min-events <n>]
|
|
143
144
|
[--require-phase <csv>]
|
|
144
145
|
[--require-component <csv>]
|
|
145
146
|
[--require-event <csv>] [--allow-errors] [--json]
|
|
146
147
|
buildchain explain release --passport <file-or-url> [--for human|agent] [--json]
|
|
147
|
-
buildchain explain artifact <subject> [--passport <file-or-url>] [--for human|agent] [--json]
|
|
148
|
+
buildchain explain artifact <subject> [--passport <file-or-url>] [--npm-registry <url>] [--for human|agent] [--json]
|
|
148
149
|
buildchain inspect release --passport <file-or-url> [--json]
|
|
149
|
-
buildchain inspect artifact <subject> [--passport <file-or-url>] [--json]
|
|
150
|
+
buildchain inspect artifact <subject> [--passport <file-or-url>] [--npm-registry <url>] [--json]
|
|
150
151
|
buildchain doctor [--cwd <dir>] [--require-publish-source-lock] [--json]
|
|
151
152
|
buildchain log <info|warn|error> --event <name> [--phase <phase>]
|
|
152
153
|
[--component <name>] [--source <name>] [--attribute key=value]...
|
|
@@ -1616,6 +1617,7 @@ async function main(argv = process.argv.slice(2)) {
|
|
|
1616
1617
|
githubReleaseBaseUrl: readFlag(verifyArgs, "github-release-base-url", ""),
|
|
1617
1618
|
subjectDigest: readFlag(verifyArgs, "subject-digest", ""),
|
|
1618
1619
|
subjectKind: readFlag(verifyArgs, "subject-kind", ""),
|
|
1620
|
+
npmRegistryBaseUrl: readFlag(verifyArgs, "npm-registry", ""),
|
|
1619
1621
|
});
|
|
1620
1622
|
if (readBooleanFlag(verifyArgs, "json")) {
|
|
1621
1623
|
printJson(report);
|
|
@@ -1706,6 +1708,7 @@ async function main(argv = process.argv.slice(2)) {
|
|
|
1706
1708
|
githubReleaseBaseUrl: readFlag(explainArgs, "github-release-base-url", ""),
|
|
1707
1709
|
subjectDigest: readFlag(explainArgs, "subject-digest", ""),
|
|
1708
1710
|
subjectKind: readFlag(explainArgs, "subject-kind", ""),
|
|
1711
|
+
npmRegistryBaseUrl: readFlag(explainArgs, "npm-registry", ""),
|
|
1709
1712
|
forAudience: readFlag(explainArgs, "for", "human"),
|
|
1710
1713
|
});
|
|
1711
1714
|
if (readBooleanFlag(explainArgs, "json")) {
|
|
@@ -1756,6 +1759,7 @@ async function main(argv = process.argv.slice(2)) {
|
|
|
1756
1759
|
githubReleaseBaseUrl: readFlag(inspectArgs, "github-release-base-url", ""),
|
|
1757
1760
|
subjectDigest: readFlag(inspectArgs, "subject-digest", ""),
|
|
1758
1761
|
subjectKind: readFlag(inspectArgs, "subject-kind", ""),
|
|
1762
|
+
npmRegistryBaseUrl: readFlag(inspectArgs, "npm-registry", ""),
|
|
1759
1763
|
});
|
|
1760
1764
|
printJson(report);
|
|
1761
1765
|
process.exitCode = report.ok ? 0 : 1;
|
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"name": "Buildchain",
|
|
6
6
|
"package": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "2.11.
|
|
7
|
+
"version": "2.11.1-alpha.2",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"majorLine": "v2",
|
|
@@ -344,7 +344,7 @@
|
|
|
344
344
|
"README badge block checks and writes are generated from machine-readable repository facts"
|
|
345
345
|
],
|
|
346
346
|
"breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
|
|
347
|
-
"auditDigest": "sha256:
|
|
347
|
+
"auditDigest": "sha256:af9dac0e27f5daed03718f2e446425f1334f0773f3e028aaf0f59b375540ba05"
|
|
348
348
|
},
|
|
349
349
|
{
|
|
350
350
|
"contractVersion": 1,
|
|
@@ -434,7 +434,7 @@
|
|
|
434
434
|
"manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
|
|
435
435
|
],
|
|
436
436
|
"breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
|
|
437
|
-
"auditDigest": "sha256:
|
|
437
|
+
"auditDigest": "sha256:6aa86d76c2c9779f1a3f1a9a7ea7f8344afdc797fe2e75223bb0302280891e42"
|
|
438
438
|
},
|
|
439
439
|
{
|
|
440
440
|
"contractVersion": 1,
|
|
@@ -456,9 +456,9 @@
|
|
|
456
456
|
"agents can discover supported Node APIs without importing internal file paths"
|
|
457
457
|
],
|
|
458
458
|
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
|
|
459
|
-
"auditDigest": "sha256:
|
|
459
|
+
"auditDigest": "sha256:2ce4d36547980b7cf1edc4bf5577ca9ec362f2a50ccc34594f9cca23db3a9e39"
|
|
460
460
|
}
|
|
461
461
|
],
|
|
462
462
|
"compatibilityDigest": "sha256:967df7e854fdf582294ddfb6403eff25c00db9518a24051e7d47cbd75527c785",
|
|
463
|
-
"contractDigest": "sha256:
|
|
463
|
+
"contractDigest": "sha256:4057e088a44f8e01ec18f405e35cb0af81f2aebb7d77a019b2f159961277ca81"
|
|
464
464
|
}
|