@kungfu-tech/buildchain 2.11.14-alpha.0 → 2.11.14-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (29) hide show
  1. package/dist/site/buildchain-contract.json +25 -17
  2. package/dist/site/buildchain-site.json +26 -21
  3. package/dist/site/kfd-claims.json +5 -4
  4. package/dist/site/kfd-upstream-aggregate.json +1 -1
  5. package/dist/site/manual-registry.json +5 -5
  6. package/dist/site/node-api-registry.json +3 -3
  7. package/dist/site/page-registry.json +17 -12
  8. package/dist/site/public-surface-audit.json +4 -3
  9. package/dist/site/publication-registry.json +4 -4
  10. package/dist/site/site-manifest.json +9 -9
  11. package/dist/site/workflow-registry.json +2 -1
  12. package/docs/lifecycle-protocol.md +4 -1
  13. package/docs/publication-artifacts.md +9 -0
  14. package/docs/release-flow.md +10 -1
  15. package/docs/release-governance.md +51 -3
  16. package/docs/reusable-build-surface.md +6 -2
  17. package/docs/web-surface-deployments.md +15 -1
  18. package/package.json +1 -1
  19. package/packages/core/buildchain-contract.js +9 -1
  20. package/packages/core/publication-artifact.js +56 -8
  21. package/packages/core/publication-package.js +5 -0
  22. package/packages/core/stable-release-gate.js +284 -0
  23. package/scripts/check-inventory.mjs +2 -0
  24. package/scripts/locked-source-checkout.mjs +43 -9
  25. package/scripts/publication-artifact.mjs +20 -2
  26. package/scripts/publication-registry-hydrate.mjs +216 -0
  27. package/scripts/run-lifecycle-core.mjs +7 -2
  28. package/scripts/stable-release-gate.mjs +295 -0
  29. package/scripts/web-surface-core.mjs +28 -0
package/dist/site/buildchain-contract.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "name": "Buildchain",
6
6
  "package": "@kungfu-tech/buildchain",
7
- "version": "2.11.14-alpha.0",
7
+ "version": "2.11.14-alpha.2",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "majorLine": "v2",
@@ -35,6 +35,10 @@
35
35
  "platforms-json",
36
36
  "release-candidate",
37
37
  "artifact-transfer-mode",
38
+ "checkout-cache-mode",
39
+ "checkout-cache-fallback",
40
+ "checkout-cache-timeout-seconds",
41
+ "checkout-cache-fetch-attempts",
38
42
  "buildchain-contract-lock-path",
39
43
  "buildchain-contract-drift-issue-mode"
40
44
  ],
@@ -42,10 +46,11 @@
42
46
  "runtime floating refs are resolved to immutable SHAs before matrix jobs",
43
47
  "publish source locks are verified before heavy build jobs",
44
48
  "release-candidate builds do not publish registry artifacts",
45
- "contract drift is checked before heavy build jobs for stable floating refs"
49
+ "contract drift is checked before heavy build jobs for stable floating refs",
50
+ "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
46
51
  ],
47
- "breakingDigest": "sha256:6303aa2c2cb8c2cef4301ceea95cc3c426c2aa81d98714aa9bdf2471d63faee1",
48
- "auditDigest": "sha256:7c456219712222f67a4d7b4ee13183c2f9e42d7ac518100ff413419c189fc2d4"
52
+ "breakingDigest": "sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650",
53
+ "auditDigest": "sha256:470204345d064b20293e3f775c10f344e1d587f034169ee1d52766f2419e861f"
49
54
  },
50
55
  {
51
56
  "contractVersion": 1,
@@ -65,7 +70,7 @@
65
70
  ],
66
71
  "breakingDefaults": {
67
72
  "promoteOnlyReleaseCandidate": true,
68
- "requiredStatusCheck": "check"
73
+ "requiredStatusCheck": "check / check"
69
74
  },
70
75
  "optionalInputs": [
71
76
  "buildchain-ref",
@@ -91,8 +96,8 @@
91
96
  "publish-gate source locks are created by the wrapper and enforced by promote-buildchain-ref before publish side effects",
92
97
  "GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
93
98
  ],
94
- "breakingDigest": "sha256:403d2fcdb0c5eabe749e89102defad69745f70a1556707bec7831fcc2e9fa8f8",
95
- "auditDigest": "sha256:1d12801725d7fb1849be6eb92bf4b08842c0260f3a2a09c87548870a3c50ae3e"
99
+ "breakingDigest": "sha256:6dbae32ce3d7aab3be6957065105af574794581847b7637314dad45f5349c919",
100
+ "auditDigest": "sha256:c02484e4e6b073311cdf4b9ac9690b84344b4ec214adf799515f7dd4480fd7f8"
96
101
  },
97
102
  {
98
103
  "contractVersion": 1,
@@ -131,10 +136,12 @@
131
136
  "runtime floating refs are resolved to immutable SHAs before caller build and deploy work",
132
137
  "contract drift is checked before caller build, web-surface render, deploy planning, and apply side effects",
133
138
  "compatible contract drift continues and produces a consumer issue or summary",
134
- "breaking contract drift fails closed before rendering, deployment, or release publication"
139
+ "breaking contract drift fails closed before rendering, deployment, or release publication",
140
+ "effective channel and preview alias are injected before caller build and verify commands",
141
+ "channel-aware artifact host facts are checked against the deploy plan before adapter side effects"
135
142
  ],
136
- "breakingDigest": "sha256:82ee63cb336e40d832dfff4a1c5e6cbfa221a4fc8b2359990033bc931bffc43a",
137
- "auditDigest": "sha256:d01b542ec2b15ac0418e40336ca257bd99a71f2344c730efdee188fa57bb2ace"
143
+ "breakingDigest": "sha256:da569f90374e878948e3d5160ed9929338ce0572473ca8ee54867b0fe1aaeace",
144
+ "auditDigest": "sha256:a229811cdba006d4d04cec00e7df7a7363bbe2bf45e8429790f7f98b34f8be34"
138
145
  },
139
146
  {
140
147
  "contractVersion": 1,
@@ -154,7 +161,8 @@
154
161
  ],
155
162
  "breakingDefaults": {
156
163
  "requireGovernance": false,
157
- "releasePassport": true
164
+ "releasePassport": true,
165
+ "requiredStatusCheck": "check / check"
158
166
  },
159
167
  "optionalInputs": [
160
168
  "publish-transaction",
@@ -175,8 +183,8 @@
175
183
  "publish transactions can require a resolved publish-gate source lock to prevent floating-ref drift",
176
184
  "semver GitHub Releases are created or updated only after transaction completion, with prerelease/latest metadata derived from the public release tag"
177
185
  ],
178
- "breakingDigest": "sha256:0c5896590c8c9a44dfecbe060bcef1b43d3a9556737309dbe7e5f2bf83bfee6c",
179
- "auditDigest": "sha256:a2d78432dae8488b0b3a2359eb0daa8f605910689529ea4d0f1b46b7613f00db"
186
+ "breakingDigest": "sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874",
187
+ "auditDigest": "sha256:19a838fa786936a65585c00d65b15fe84c83ee19a0d41f3b6502226a966345a9"
180
188
  },
181
189
  {
182
190
  "contractVersion": 1,
@@ -434,7 +442,7 @@
434
442
  "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
435
443
  ],
436
444
  "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
437
- "auditDigest": "sha256:35c557bee5f9f1e71b038d69b1dca6db7f991ed9663b87662ccc8f2653a650cc"
445
+ "auditDigest": "sha256:3748b966a3d07715d68a9f1805ac41b7cd8ec79df9f6d3785a8edb2af79ebdcf"
438
446
  },
439
447
  {
440
448
  "contractVersion": 1,
@@ -456,9 +464,9 @@
456
464
  "agents can discover supported Node APIs without importing internal file paths"
457
465
  ],
458
466
  "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
459
- "auditDigest": "sha256:4754455d100bb473a24d084920a84b165e3203f9bbb34ee1c6cc5eca230d22b5"
467
+ "auditDigest": "sha256:b3833018162da89782de7b4f5723f1aca1bd7dc362b8276bf5e997fd6640d7f1"
460
468
  }
461
469
  ],
462
- "compatibilityDigest": "sha256:967df7e854fdf582294ddfb6403eff25c00db9518a24051e7d47cbd75527c785",
463
- "contractDigest": "sha256:a3d2c81eccd070907aec809ff214d6b8c689235b9080ff37fdbf781436ae13b7"
470
+ "compatibilityDigest": "sha256:1396e42444aaf3f26a40121faf3d599eb9db13537f627fc8dbcef2475af8af44",
471
+ "contractDigest": "sha256:81c2f37aea1c0bc660bfa94e50a3aeca2461f962750271d94f3e0e267db6319c"
464
472
  }