@kungfu-tech/buildchain 2.11.11-alpha.0 → 2.11.11-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "name": "Buildchain",
6
6
  "package": "@kungfu-tech/buildchain",
7
- "version": "2.11.11-alpha.0",
7
+ "version": "2.11.11-alpha.2",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "majorLine": "v2",
@@ -456,9 +456,9 @@
456
456
  "agents can discover supported Node APIs without importing internal file paths"
457
457
  ],
458
458
  "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
459
- "auditDigest": "sha256:7f1929511af6cf55c185de1ccaa08e701c95f9e4561ec2310a17d8c8c4020681"
459
+ "auditDigest": "sha256:e9f0e3de042dfa569990493c31e089173a8f49dbf30b3b6177f9a587305ab5dd"
460
460
  }
461
461
  ],
462
462
  "compatibilityDigest": "sha256:967df7e854fdf582294ddfb6403eff25c00db9518a24051e7d47cbd75527c785",
463
- "contractDigest": "sha256:627c72e5dcca39ae48127728ce1706f1a9204a8b3b22804ed5bee4c1d81fe185"
463
+ "contractDigest": "sha256:a03fe83aa09e1168ec20e0be37082fe0315fc9d042b459f043dc67b715d81c75"
464
464
  }
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-bundle",
4
- "generatedAt": "2026-07-10T03:36:38.823Z",
5
- "publishedAt": "2026-07-10T03:36:38.823Z",
4
+ "generatedAt": "2026-07-10T04:04:37.303Z",
5
+ "publishedAt": "2026-07-10T04:04:37.303Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "4a35e5eb65ec91f288a88930725c597e67e866dc",
22
+ "sourceRevision": "f8fa460b361070d78ed8cf0a4933a0c84c7aa5b5",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "2.11.11-alpha.0",
40
+ "version": "2.11.11-alpha.2",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "source": {
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "2.11.11-alpha.0",
7
+ "version": "2.11.11-alpha.2",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {
@@ -216,7 +216,7 @@
216
216
  "specifier": "@kungfu-tech/buildchain/publication-package",
217
217
  "export": "./publication-package",
218
218
  "target": "./packages/core/publication-package.js",
219
- "digest": "sha256:3c96b1a7483eda44c1a89a7af1a1b262fb40cce8a4bcf81f5ad048b69664db67",
219
+ "digest": "sha256:72ad7e591fd9e3fc06cc75930742653feb4e067df9fde7430d7481822d930429",
220
220
  "summary": "Publication npm package synthesis APIs for Buildchain-managed paper release presets.",
221
221
  "capabilityGroup": "reusable-build",
222
222
  "audience": [
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-publication-release-registry",
4
- "generatedAt": "2026-07-10T03:36:38.823Z",
5
- "publishedAt": "2026-07-10T03:36:38.823Z",
4
+ "generatedAt": "2026-07-10T04:04:37.303Z",
5
+ "publishedAt": "2026-07-10T04:04:37.303Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "4a35e5eb65ec91f288a88930725c597e67e866dc",
22
+ "sourceRevision": "f8fa460b361070d78ed8cf0a4933a0c84c7aa5b5",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -32,7 +32,7 @@
32
32
  },
33
33
  "package": {
34
34
  "name": "@kungfu-tech/buildchain",
35
- "version": "2.11.11-alpha.0",
35
+ "version": "2.11.11-alpha.2",
36
36
  "versionSource": "package.json#version"
37
37
  },
38
38
  "sourceKind": "package-site-bundle",
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-manifest",
4
- "generatedAt": "2026-07-10T03:36:38.823Z",
5
- "publishedAt": "2026-07-10T03:36:38.823Z",
4
+ "generatedAt": "2026-07-10T04:04:37.303Z",
5
+ "publishedAt": "2026-07-10T04:04:37.303Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "4a35e5eb65ec91f288a88930725c597e67e866dc",
22
+ "sourceRevision": "f8fa460b361070d78ed8cf0a4933a0c84c7aa5b5",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "2.11.11-alpha.0",
40
+ "version": "2.11.11-alpha.2",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "entrypoint": "buildchain-site.json",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kungfu-tech/buildchain",
3
- "version": "2.11.11-alpha.0",
3
+ "version": "2.11.11-alpha.2",
4
4
  "private": false,
5
5
  "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
6
6
  "repository": "https://github.com/kungfu-systems/buildchain",
@@ -17,6 +17,23 @@ function readJson(filePath) {
17
17
  return JSON.parse(fs.readFileSync(filePath, "utf8"));
18
18
  }
19
19
 
20
+ function sourceRepositoryMetadata(sourcePackage) {
21
+ const repository = sourcePackage.repository;
22
+ if (typeof repository === "string") {
23
+ return repository.trim() || undefined;
24
+ }
25
+ if (
26
+ repository &&
27
+ typeof repository === "object" &&
28
+ !Array.isArray(repository) &&
29
+ typeof repository.url === "string" &&
30
+ repository.url.trim()
31
+ ) {
32
+ return { ...repository, url: repository.url.trim() };
33
+ }
34
+ return undefined;
35
+ }
36
+
20
37
  function copyFilePreservingPath({ cwd, outputDir, relPath, copied }) {
21
38
  const source = path.resolve(cwd, relPath);
22
39
  if (!fs.existsSync(source) || !fs.statSync(source).isFile()) {
@@ -142,12 +159,19 @@ export function preparePublicationNpmPackage({
142
159
  const sourcePackage = fs.existsSync(path.join(resolvedCwd, "package.json"))
143
160
  ? readJson(path.join(resolvedCwd, "package.json"))
144
161
  : {};
162
+ const repository = sourceRepositoryMetadata(sourcePackage);
163
+ if (facts.package.auth === "trusted-publishing" && !repository) {
164
+ throw new Error(
165
+ "publication npm package with trusted-publishing requires source package.json repository metadata",
166
+ );
167
+ }
145
168
  const packageJson = {
146
169
  name: facts.package.name,
147
170
  version: facts.package.version,
148
171
  private: false,
149
172
  description: `${facts.publication.title} publication artifact package.`,
150
173
  license: sourcePackage.license || "UNLICENSED",
174
+ repository,
151
175
  type: "module",
152
176
  files: [
153
177
  ".buildchain/publication/",
@@ -855,6 +855,7 @@ for (const requiredSnippet of [
855
855
  "scripts/create-release-bundle.mjs",
856
856
  "buildchain-release-bundle",
857
857
  "scripts/ensure-github-release.mjs",
858
+ "--impact-json .buildchain/release-evidence/authoritative-release-state-impact.json",
858
859
  "gh release upload",
859
860
  ]) {
860
861
  if (!binaryDistributionWorkflow.includes(requiredSnippet)) {