@kungfu-tech/buildchain 2.12.5 → 2.12.6-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/dist/site/buildchain-contract.json +5 -5
  2. package/dist/site/buildchain-site.json +4 -4
  3. package/dist/site/kfd-upstream-aggregate.json +1 -1
  4. package/dist/site/node-api-registry.json +1 -1
  5. package/dist/site/publication-registry.json +4 -4
  6. package/dist/site/site-manifest.json +4 -4
  7. package/package.json +1 -1
  8. package/packages/core/release-passport.js +3 -0
package/dist/site/buildchain-contract.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "name": "Buildchain",
6
6
  "package": "@kungfu-tech/buildchain",
7
- "version": "2.12.5",
7
+ "version": "2.12.6-alpha.1",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "majorLine": "v2",
@@ -328,7 +328,7 @@
328
328
  "release-state SHA is recorded as a durable audit entrance"
329
329
  ],
330
330
  "breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
331
- "auditDigest": "sha256:32fd54ceb8e1a0219918e7744797e3a1bf3f614bb8498028209275b98304ac5b"
331
+ "auditDigest": "sha256:af307129d9df51a1a0d5f7cfff742b0db7d9f8f04dd810cf97a62c79e2d3a726"
332
332
  },
333
333
  {
334
334
  "contractVersion": 1,
@@ -377,7 +377,7 @@
377
377
  "prose-only public claims downgrade the release trust passport audit"
378
378
  ],
379
379
  "breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
380
- "auditDigest": "sha256:32fd54ceb8e1a0219918e7744797e3a1bf3f614bb8498028209275b98304ac5b"
380
+ "auditDigest": "sha256:af307129d9df51a1a0d5f7cfff742b0db7d9f8f04dd810cf97a62c79e2d3a726"
381
381
  },
382
382
  {
383
383
  "contractVersion": 1,
@@ -549,7 +549,7 @@
549
549
  "agents can discover supported Node APIs without importing internal file paths"
550
550
  ],
551
551
  "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
552
- "auditDigest": "sha256:3bcfa43a81ab6b7cab1a82deee789d412978df48496f8cc73b6edef71a38569a"
552
+ "auditDigest": "sha256:63874351201e9323e51c011e81cf1d4d1ff0e3f6d733d5a0cef2537eba95228a"
553
553
  },
554
554
  {
555
555
  "contractVersion": 1,
@@ -2549,5 +2549,5 @@
2549
2549
  }
2550
2550
  ],
2551
2551
  "compatibilityDigest": "sha256:2520207c5d6d6a737dd32251a42be9c5299644d9aebf690a8402ead1724ed495",
2552
- "contractDigest": "sha256:e441710d65f4eb03c727ca9617b391eae29aeee155b3b06d927529fa02f7ba13"
2552
+ "contractDigest": "sha256:42aa83a6655bff23ddbf009abd3b5b0d85b16933fdebc925da68aa1e6e375954"
2553
2553
  }
package/dist/site/buildchain-site.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-bundle",
4
- "generatedAt": "2026-07-14T03:09:51.427Z",
5
- "publishedAt": "2026-07-14T03:09:51.427Z",
4
+ "generatedAt": "2026-07-14T03:30:19.688Z",
5
+ "publishedAt": "2026-07-14T03:30:19.688Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "0007f6be62256f5a4888b3c627ee24a6587b1201",
22
+ "sourceRevision": "6b3cda76595d1135eac98d1dec539a5c76b26650",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "2.12.5",
40
+ "version": "2.12.6-alpha.1",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "source": {
package/dist/site/kfd-upstream-aggregate.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "2.12.5",
7
+ "version": "2.12.6-alpha.1",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {
package/dist/site/node-api-registry.json CHANGED
@@ -281,7 +281,7 @@
281
281
  "specifier": "@kungfu-tech/buildchain/release-passport",
282
282
  "export": "./release-passport",
283
283
  "target": "./packages/core/release-passport.js",
284
- "digest": "sha256:32fd54ceb8e1a0219918e7744797e3a1bf3f614bb8498028209275b98304ac5b",
284
+ "digest": "sha256:af307129d9df51a1a0d5f7cfff742b0db7d9f8f04dd810cf97a62c79e2d3a726",
285
285
  "summary": "Release passport collection, verification, explanation, and evidence APIs.",
286
286
  "capabilityGroup": "release-passport-trust",
287
287
  "audience": [
package/dist/site/publication-registry.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-publication-release-registry",
4
- "generatedAt": "2026-07-14T03:09:51.427Z",
5
- "publishedAt": "2026-07-14T03:09:51.427Z",
4
+ "generatedAt": "2026-07-14T03:30:19.688Z",
5
+ "publishedAt": "2026-07-14T03:30:19.688Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "0007f6be62256f5a4888b3c627ee24a6587b1201",
22
+ "sourceRevision": "6b3cda76595d1135eac98d1dec539a5c76b26650",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -32,7 +32,7 @@
32
32
  },
33
33
  "package": {
34
34
  "name": "@kungfu-tech/buildchain",
35
- "version": "2.12.5",
35
+ "version": "2.12.6-alpha.1",
36
36
  "versionSource": "package.json#version"
37
37
  },
38
38
  "sourceKind": "package-site-bundle",
package/dist/site/site-manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-manifest",
4
- "generatedAt": "2026-07-14T03:09:51.427Z",
5
- "publishedAt": "2026-07-14T03:09:51.427Z",
4
+ "generatedAt": "2026-07-14T03:30:19.688Z",
5
+ "publishedAt": "2026-07-14T03:30:19.688Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "0007f6be62256f5a4888b3c627ee24a6587b1201",
22
+ "sourceRevision": "6b3cda76595d1135eac98d1dec539a5c76b26650",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "2.12.5",
40
+ "version": "2.12.6-alpha.1",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "entrypoint": "buildchain-site.json",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kungfu-tech/buildchain",
3
- "version": "2.12.5",
3
+ "version": "2.12.6-alpha.1",
4
4
  "private": false,
5
5
  "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
6
6
  "repository": "https://github.com/kungfu-systems/buildchain",
package/packages/core/release-passport.js CHANGED
@@ -353,6 +353,9 @@ function mergeAuthoritativePassportBase(passport, basePassport = undefined, { re
353
353
  merged[key] = basePassport[key];
354
354
  }
355
355
  }
356
+ if (basePassport.controllerReceipts !== undefined) {
357
+ merged.controllerReceipts = basePassport.controllerReceipts;
358
+ }
356
359
  for (const key of kfdKeys) {
357
360
  if (basePassport[key] && typeof basePassport[key] === "object" && !Array.isArray(basePassport[key])) {
358
361
  merged[key] = basePassport[key];