@kungfu-tech/buildchain 2.11.10 → 2.11.11-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/dist/site/buildchain-contract.json +5 -5
  2. package/dist/site/buildchain-site.json +4 -4
  3. package/dist/site/kfd-upstream-aggregate.json +1 -1
  4. package/dist/site/node-api-registry.json +1 -1
  5. package/dist/site/publication-registry.json +4 -4
  6. package/dist/site/site-manifest.json +4 -4
  7. package/package.json +1 -1
  8. package/packages/core/release-passport.js +3 -0
package/dist/site/buildchain-contract.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "name": "Buildchain",
6
6
  "package": "@kungfu-tech/buildchain",
7
- "version": "2.11.10",
7
+ "version": "2.11.11-alpha.0",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "majorLine": "v2",
@@ -235,7 +235,7 @@
235
235
  "release-state SHA is recorded as a durable audit entrance"
236
236
  ],
237
237
  "breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
238
- "auditDigest": "sha256:f458470154bed291a4adcd703f0fe810897d95d4e939793da676cc526a5a80bb"
238
+ "auditDigest": "sha256:8d5a050df580d9bb7bbf3300b8fa4d22df8478bc1028de08b5af7a902d38448d"
239
239
  },
240
240
  {
241
241
  "contractVersion": 1,
@@ -284,7 +284,7 @@
284
284
  "prose-only public claims downgrade the release trust passport audit"
285
285
  ],
286
286
  "breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
287
- "auditDigest": "sha256:f458470154bed291a4adcd703f0fe810897d95d4e939793da676cc526a5a80bb"
287
+ "auditDigest": "sha256:8d5a050df580d9bb7bbf3300b8fa4d22df8478bc1028de08b5af7a902d38448d"
288
288
  },
289
289
  {
290
290
  "contractVersion": 1,
@@ -456,9 +456,9 @@
456
456
  "agents can discover supported Node APIs without importing internal file paths"
457
457
  ],
458
458
  "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
459
- "auditDigest": "sha256:1cda1562ba9b386200aa9ae5b5c349ee921e4dbff9419c868b8af33754a7e424"
459
+ "auditDigest": "sha256:7f1929511af6cf55c185de1ccaa08e701c95f9e4561ec2310a17d8c8c4020681"
460
460
  }
461
461
  ],
462
462
  "compatibilityDigest": "sha256:967df7e854fdf582294ddfb6403eff25c00db9518a24051e7d47cbd75527c785",
463
- "contractDigest": "sha256:1dc9f204a2ef991935f064a7e3705115a916741b24737355ed22bacc24af5f8a"
463
+ "contractDigest": "sha256:627c72e5dcca39ae48127728ce1706f1a9204a8b3b22804ed5bee4c1d81fe185"
464
464
  }
package/dist/site/buildchain-site.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-bundle",
4
- "generatedAt": "2026-07-10T03:21:44.776Z",
5
- "publishedAt": "2026-07-10T03:21:44.776Z",
4
+ "generatedAt": "2026-07-10T03:36:38.823Z",
5
+ "publishedAt": "2026-07-10T03:36:38.823Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "20774d17657b0c67b7728b6d3eec403bb251ece3",
22
+ "sourceRevision": "4a35e5eb65ec91f288a88930725c597e67e866dc",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "2.11.10",
40
+ "version": "2.11.11-alpha.0",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "source": {
package/dist/site/kfd-upstream-aggregate.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "2.11.10",
7
+ "version": "2.11.11-alpha.0",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {
package/dist/site/node-api-registry.json CHANGED
@@ -255,7 +255,7 @@
255
255
  "specifier": "@kungfu-tech/buildchain/release-passport",
256
256
  "export": "./release-passport",
257
257
  "target": "./packages/core/release-passport.js",
258
- "digest": "sha256:f458470154bed291a4adcd703f0fe810897d95d4e939793da676cc526a5a80bb",
258
+ "digest": "sha256:8d5a050df580d9bb7bbf3300b8fa4d22df8478bc1028de08b5af7a902d38448d",
259
259
  "summary": "Release passport collection, verification, explanation, and evidence APIs.",
260
260
  "capabilityGroup": "release-passport-trust",
261
261
  "audience": [
package/dist/site/publication-registry.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-publication-release-registry",
4
- "generatedAt": "2026-07-10T03:21:44.776Z",
5
- "publishedAt": "2026-07-10T03:21:44.776Z",
4
+ "generatedAt": "2026-07-10T03:36:38.823Z",
5
+ "publishedAt": "2026-07-10T03:36:38.823Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "20774d17657b0c67b7728b6d3eec403bb251ece3",
22
+ "sourceRevision": "4a35e5eb65ec91f288a88930725c597e67e866dc",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -32,7 +32,7 @@
32
32
  },
33
33
  "package": {
34
34
  "name": "@kungfu-tech/buildchain",
35
- "version": "2.11.10",
35
+ "version": "2.11.11-alpha.0",
36
36
  "versionSource": "package.json#version"
37
37
  },
38
38
  "sourceKind": "package-site-bundle",
package/dist/site/site-manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-manifest",
4
- "generatedAt": "2026-07-10T03:21:44.776Z",
5
- "publishedAt": "2026-07-10T03:21:44.776Z",
4
+ "generatedAt": "2026-07-10T03:36:38.823Z",
5
+ "publishedAt": "2026-07-10T03:36:38.823Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "20774d17657b0c67b7728b6d3eec403bb251ece3",
22
+ "sourceRevision": "4a35e5eb65ec91f288a88930725c597e67e866dc",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "2.11.10",
40
+ "version": "2.11.11-alpha.0",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "entrypoint": "buildchain-site.json",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kungfu-tech/buildchain",
3
- "version": "2.11.10",
3
+ "version": "2.11.11-alpha.0",
4
4
  "private": false,
5
5
  "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
6
6
  "repository": "https://github.com/kungfu-systems/buildchain",
package/packages/core/release-passport.js CHANGED
@@ -364,6 +364,9 @@ function mergeAuthoritativeImpactBase(impact, basePassport = undefined) {
364
364
  return impact;
365
365
  }
366
366
  const merged = { ...impact };
367
+ if (optionalString(impact?.release?.version)) {
368
+ return merged;
369
+ }
367
370
  if (basePassport.versionImpact && typeof basePassport.versionImpact === "object" && !Array.isArray(basePassport.versionImpact)) {
368
371
  merged.versionImpact = {
369
372
  ...(impact.versionImpact && typeof impact.versionImpact === "object" && !Array.isArray(impact.versionImpact) ? impact.versionImpact : {}),