@kungfu-tech/buildchain 2.12.3 → 2.12.4-alpha.2

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "2.12.3",
+    "version": "2.12.4-alpha.2",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v2",
@@ -549,9 +549,9 @@
         "agents can discover supported Node APIs without importing internal file paths"
       ],
       "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
-      "auditDigest": "sha256:4458f86ab03e26015a1247fcf6fd89837256b39ecd7e82dfde2140e8967d2eb0"
+      "auditDigest": "sha256:0b025f14bab42fd92705ce4e63e3b1881a70f43ee903eaa4e0d853b23e46ade3"
     }
   ],
   "compatibilityDigest": "sha256:2090784977bc7d54fc647215ef73532b9db26147a0b40ec3f56c31d611d806cc",
-  "contractDigest": "sha256:9debce5534f2dc23ef3075fbea83843314c660c63e1024b98003b96376fcb9fc"
+  "contractDigest": "sha256:2269c84729a244558c839a7fd4f3da3d4d3078900c5fea50574c0d3ee536e904"
 }

package/dist/site/buildchain-site.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-bundle",
-  "generatedAt": "2026-07-13T14:20:40.123Z",
-  "publishedAt": "2026-07-13T14:20:40.123Z",
+  "generatedAt": "2026-07-13T14:46:16.105Z",
+  "publishedAt": "2026-07-13T14:46:16.105Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "761f1dfbaff1aa2b50fd1b7f4dbe16ec0e86b297",
+  "sourceRevision": "c4dd3fbaf0241d8872c54a574718cbd7869266ab",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "2.12.3",
+    "version": "2.12.4-alpha.2",
     "versionSource": "package.json#version"
   },
   "source": {

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "2.12.3",
+    "version": "2.12.4-alpha.2",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/node-api-registry.json

@@ -255,7 +255,7 @@
       "specifier": "@kungfu-tech/buildchain/stable-candidate-ledger",
       "export": "./stable-candidate-ledger",
       "target": "./packages/core/stable-candidate-ledger.js",
-      "digest": "sha256:cefb5d1747e6e0e11490350e6b49877fe69982117a027b7c5b28e08d7afee374",
+      "digest": "sha256:c816025953dda54e43fc13c01139a19ea96b4377844108af537eb190255a8dbd",
       "summary": "Immutable alpha candidate ledger, qualification, revocation, selection, and exact stable source-lock APIs.",
       "capabilityGroup": "governance-versioning",
       "audience": [

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-07-13T14:20:40.123Z",
-  "publishedAt": "2026-07-13T14:20:40.123Z",
+  "generatedAt": "2026-07-13T14:46:16.105Z",
+  "publishedAt": "2026-07-13T14:46:16.105Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "761f1dfbaff1aa2b50fd1b7f4dbe16ec0e86b297",
+  "sourceRevision": "c4dd3fbaf0241d8872c54a574718cbd7869266ab",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "2.12.3",
+    "version": "2.12.4-alpha.2",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-07-13T14:20:40.123Z",
-  "publishedAt": "2026-07-13T14:20:40.123Z",
+  "generatedAt": "2026-07-13T14:46:16.105Z",
+  "publishedAt": "2026-07-13T14:46:16.105Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "761f1dfbaff1aa2b50fd1b7f4dbe16ec0e86b297",
+  "sourceRevision": "c4dd3fbaf0241d8872c54a574718cbd7869266ab",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "2.12.3",
+    "version": "2.12.4-alpha.2",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "2.12.3",
+  "version": "2.12.4-alpha.2",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",

package/packages/core/stable-candidate-ledger.js

@@ -235,7 +235,9 @@ export function markStableCandidatePromoted(
   const version = exactAlpha(versionInput).version;
   const candidate = ledger.candidates.find((entry) => entry.version === version);
   if (!candidate) throw new Error(`candidate ${version} is not registered`);
-  if (!candidate.qualification?.ok && candidate.decision?.reason !== "human-release-now") {
+  const humanAuthority = candidate.decision?.reason === "human-release-now"
+    || candidate.promotionRequest?.authority === "human";
+  if (!candidate.qualification?.ok && !humanAuthority) {
     throw new Error(`candidate ${version} is not qualified for promotion`);
   }
   candidate.state = "promoted";

package/scripts/shifu-gate-profile.mjs

@@ -110,6 +110,10 @@ export function windowsBatchInvocation(command, args, { cwd, comSpec } = {}) {
   };
 }
 
+export function prepareGateExecutionFiles(files) {
+  for (const file of files) fs.rmSync(file, { force: true });
+}
+
 function runArgv(
   argv,
   args,
@@ -234,6 +238,7 @@ function runMode() {
   const executionPath = path.join(outputRoot, "execution.json");
   const env = gateEnvironment();
   fs.mkdirSync(outputRoot, { recursive: true });
+  prepareGateExecutionFiles([receiptPath, validationPath, executionPath]);
   const argv = commandForPlatform(commandJson, entry.platform);
   const runArgs = gateArgs(
     [