@kungfu-tech/buildchain 2.12.7-alpha.1 → 2.12.7-alpha.10

package/dist/site/controller-registry.json

@@ -1037,10 +1037,26 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "package-name": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "prepare-paper-package": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "publish-dist-tag": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "setup-node": {
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "target-ref": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "toolchain-command": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -1100,7 +1116,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:d09d8f4081e7b5b9296487337206111591eeca6f8d7667e90012ac911c1b71cf"
+      "digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd"
     },
     {
       "schemaVersion": 1,
@@ -1333,6 +1349,10 @@
           "classification": "redacted",
           "source": "workflow-call-secret"
         },
+        "BUILDCHAIN_PROMOTION_TOKEN": {
+          "classification": "redacted",
+          "source": "workflow-call-secret"
+        },
         "allow-repository": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1607,7 +1627,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:380a550c76a7a0c884d0519b5e6e605ad3e04e86f637ba846c20b546faec4a0f"
+      "digest": "sha256:c2f1fd6e984606b077b27bb243b66077162c2c4be03f99c0d8f917bf7bf4d0d1"
     },
     {
       "schemaVersion": 1,
@@ -1713,5 +1733,5 @@
       "digest": "sha256:9b9f9a2320c4349903d72ee46e329211b5538ed5ebebaa93559df4eafb835997"
     }
   ],
-  "digest": "sha256:f4ea94c3590360ef21ade53056129f0183356de3d1997e43c49a0494d0acd34a"
+  "digest": "sha256:aeb2d6b05cdd8e8118d6cc2c82cf4b7bf00f934b809479017a12b69c299d0e05"
 }

package/dist/site/kfd-claims.json

@@ -21,10 +21,10 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "58bc630f5a8e5cb46eab9e874b7bd9cbdc45ce49f238385c289f749244e3ac1c",
+    "sha256": "0201832d7d360c5549c51841e7b3f953743166369e84b53b40755db0cb2452fd",
     "summary": {
       "cliCommandCount": 79,
-      "workflowCount": 46,
+      "workflowCount": 47,
       "actionCount": 4,
       "sitePageCount": 49,
       "docCommandRefCount": 246,
@@ -225,10 +225,10 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "58bc630f5a8e5cb46eab9e874b7bd9cbdc45ce49f238385c289f749244e3ac1c",
+      "sha256": "0201832d7d360c5549c51841e7b3f953743166369e84b53b40755db0cb2452fd",
       "summary": {
         "cliCommandCount": 79,
-        "workflowCount": 46,
+        "workflowCount": 47,
         "actionCount": 4,
         "sitePageCount": 49,
         "docCommandRefCount": 246,
@@ -2642,17 +2642,21 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 22,
+          "inputCount": 28,
           "inputs": [
             "admission-json",
+            "authority-workflow-path",
             "auto-admission",
+            "auto-admission-kind",
             "buildchain-ref",
             "buildchain-repository",
             "control-plane-audit-json",
             "dry-run",
+            "evidence-controller-artifact",
             "evidence-manifest-pattern",
             "evidence-passport-artifact",
             "evidence-payload-pattern",
+            "evidence-publication-artifact",
             "evidence-repository",
             "evidence-run-id",
             "evidence-summary-artifact",
@@ -2661,7 +2665,9 @@
             "package-name",
             "product",
             "publication-target",
+            "publication-version",
             "publisher-workflow-path",
+            "required-status-check",
             "runner-provenance-json",
             "source-sha",
             "target-ref",
@@ -3300,6 +3306,46 @@
           "inputs": [],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:paper-release-sealed",
+          "name": "workflow:paper-release-sealed",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/paper-release-sealed.yml",
+          "evidencePath": ".github/workflows/paper-release-sealed.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 25,
+          "inputs": [
+            "artifact-name",
+            "artifact-paths",
+            "artifact-retention-days",
+            "branch-protection-bypass-apps",
+            "branch-protection-bypass-teams",
+            "branch-protection-bypass-users",
+            "buildchain-contract-lock-path",
+            "buildchain-ref",
+            "buildchain-repository",
+            "dry-run",
+            "github-release",
+            "github-release-notes",
+            "github-release-title",
+            "package-name",
+            "publish-dist-tag",
+            "publisher-workflow-path",
+            "release-passport-impact-json",
+            "release-passport-output-dir",
+            "release-passport-product-name",
+            "required-status-check",
+            "target-ref",
+            "target-sha",
+            "toolchain-type",
+            "verify-command",
+            "working-directory"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:paper-release",
           "name": "workflow:paper-release",
@@ -3427,7 +3473,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 17,
+          "inputCount": 21,
           "inputs": [
             "artifact-name",
             "artifact-paths",
@@ -3439,7 +3485,11 @@
             "buildchain-ref",
             "buildchain-repository",
             "node-version",
+            "package-name",
+            "prepare-paper-package",
+            "publish-dist-tag",
             "setup-node",
+            "target-ref",
             "toolchain-command",
             "toolchain-digest",
             "toolchain-image",
@@ -3671,16 +3721,18 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 52,
+          "inputCount": 54,
           "inputs": [
             "allow-repository",
             "branch-protection-bypass-apps",
             "branch-protection-bypass-teams",
             "branch-protection-bypass-users",
             "dry-run",
+            "expected-publication-version",
             "generated-ref-update-token",
             "generated-status-check-token",
             "github-release",
+            "github-release-artifact-paths",
             "github-release-notes",
             "github-release-title",
             "promote-only-release-candidate",
@@ -4532,6 +4584,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 295
+    "publicSurfaceCount": 296
   }
 }

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "2.12.7-alpha.1",
+    "version": "2.12.7-alpha.10",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/manual-registry.json

@@ -65,7 +65,7 @@
       "title": "Sealed publication authority",
       "path": "docs/publication-authority.md",
       "plane": "verify",
-      "digest": "sha256:fc08e6657a1b586b6b8b5618ca4f49dfaa85955687f5bba8e2e69e7513fe6c71",
+      "digest": "sha256:06ba05f9d8a2685a0896334b6013a97c45b7d71163cf6898e5a6274baf7f0296",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator",
@@ -329,7 +329,7 @@
       "title": "Release governance",
       "path": "docs/release-governance.md",
       "plane": "why",
-      "digest": "sha256:beba38634bfdde032bb2ff85dc98dd8d755f942dabe227bf9b7aba8127ab7ce9",
+      "digest": "sha256:cce9f80add3c746fe28d8ebf5afb809348694741cb75d19154ed3057a9374c0d",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer",

package/dist/site/node-api-registry.json

@@ -8,7 +8,7 @@
       "specifier": "@kungfu-tech/buildchain",
       "export": ".",
       "target": "./packages/core/index.js",
-      "digest": "sha256:180f7e5d0f83bcb17d1268265fa264554f8715869818f440b411b6ecd6934536",
+      "digest": "sha256:07013ab68f7947772ec5bee502f97bae4b2c2f87235188f2f28f6fbb2dc5cb23",
       "summary": "Root toolkit export for Buildchain's public Node API.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -47,7 +47,7 @@
       "specifier": "@kungfu-tech/buildchain/core",
       "export": "./core",
       "target": "./packages/core/index.js",
-      "digest": "sha256:180f7e5d0f83bcb17d1268265fa264554f8715869818f440b411b6ecd6934536",
+      "digest": "sha256:07013ab68f7947772ec5bee502f97bae4b2c2f87235188f2f28f6fbb2dc5cb23",
       "summary": "Alias for the root public toolkit export.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -86,7 +86,7 @@
       "specifier": "@kungfu-tech/buildchain/controller-evidence",
       "export": "./controller-evidence",
       "target": "./packages/core/controller-evidence.js",
-      "digest": "sha256:477c219ae49b3829dc6c607226b487e82cb6a9db277699e78af463d84002a268",
+      "digest": "sha256:3c9cf557ee0e2e4376335bb7d0e61b6e8c9a1d8699962dd8a1e7adc529e13f89",
       "summary": "Project-independent controller descriptors, source/runtime-bound plans, receipts, aggregates, and validation APIs.",
       "capabilityGroup": "reusable-build",
       "audience": [
@@ -242,7 +242,7 @@
       "specifier": "@kungfu-tech/buildchain/publication-authority",
       "export": "./publication-authority",
       "target": "./packages/core/publication-authority.js",
-      "digest": "sha256:7fbca828c55cdf40f6bb41dc0f15cb192ee106df3fe1c6e4e2ea2ae1332e88b9",
+      "digest": "sha256:3c95bd9d7abc5048fb7b456e411c08f2875fe1cf65940fa3e50689acb6781a0c",
       "summary": "Sealed publication authority registry, runner provenance, control-plane audit, admission, and independent verification APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -255,7 +255,7 @@
       "specifier": "@kungfu-tech/buildchain/publication-control-plane-audit",
       "export": "./publication-control-plane-audit",
       "target": "./packages/core/publication-control-plane-audit.js",
-      "digest": "sha256:9e34235fe4a07631b617f3325bb7a983053699c47a1263e3917175d8f1c51758",
+      "digest": "sha256:58baa05440b86259812f370aa9645ba26a4df8e986dd57598412b479589286dc",
       "summary": "Read-only publication control-plane snapshot evaluation APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -268,7 +268,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-publication-authority",
       "export": "./buildchain-publication-authority",
       "target": "./packages/core/buildchain-publication-authority.js",
-      "digest": "sha256:731f21387a62cddfc8f4e4637557d4275af8ad3c79f4353750fd36be8e8dc2b1",
+      "digest": "sha256:48c5f4cb70cacb75e85b579db686a09f56d1372b8bdfeba112a3ade01524d3f5",
       "summary": "Buildchain-owned closed-world publication authority descriptor registry.",
       "capabilityGroup": "release-passport-trust",
       "audience": [