@kungfu-tech/buildchain 2.12.7-alpha.21 → 2.12.7-alpha.3

package/dist/site/kfd-claims.json

@@ -21,10 +21,10 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "8815fc5abfe516e247a7024a367be5e3144fbe49196b7ec251dba4598bfc59ea",
+    "sha256": "e348bc83923857ba1a3a850370b5023fbde79ba49edff09bca8f8ba61e9fd638",
     "summary": {
       "cliCommandCount": 79,
-      "workflowCount": 47,
+      "workflowCount": 46,
       "actionCount": 4,
       "sitePageCount": 49,
       "docCommandRefCount": 246,
@@ -225,10 +225,10 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "8815fc5abfe516e247a7024a367be5e3144fbe49196b7ec251dba4598bfc59ea",
+      "sha256": "e348bc83923857ba1a3a850370b5023fbde79ba49edff09bca8f8ba61e9fd638",
       "summary": {
         "cliCommandCount": 79,
-        "workflowCount": 47,
+        "workflowCount": 46,
         "actionCount": 4,
         "sitePageCount": 49,
         "docCommandRefCount": 246,
@@ -2642,22 +2642,17 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 29,
+          "inputCount": 22,
           "inputs": [
             "admission-json",
-            "authority-workflow-path",
             "auto-admission",
-            "auto-admission-kind",
-            "auto-no-gate",
             "buildchain-ref",
             "buildchain-repository",
             "control-plane-audit-json",
             "dry-run",
-            "evidence-controller-artifact",
             "evidence-manifest-pattern",
             "evidence-passport-artifact",
             "evidence-payload-pattern",
-            "evidence-publication-artifact",
             "evidence-repository",
             "evidence-run-id",
             "evidence-summary-artifact",
@@ -2666,9 +2661,7 @@
             "package-name",
             "product",
             "publication-target",
-            "publication-version",
             "publisher-workflow-path",
-            "required-status-check",
             "runner-provenance-json",
             "source-sha",
             "target-ref",
@@ -3307,46 +3300,6 @@
           "inputs": [],
           "reverseAuditSource": ".github/workflows"
         },
-        {
-          "id": "workflow:paper-release-sealed",
-          "name": "workflow:paper-release-sealed",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/paper-release-sealed.yml",
-          "evidencePath": ".github/workflows/paper-release-sealed.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 25,
-          "inputs": [
-            "artifact-name",
-            "artifact-paths",
-            "artifact-retention-days",
-            "branch-protection-bypass-apps",
-            "branch-protection-bypass-teams",
-            "branch-protection-bypass-users",
-            "buildchain-contract-lock-path",
-            "buildchain-ref",
-            "buildchain-repository",
-            "dry-run",
-            "github-release",
-            "github-release-notes",
-            "github-release-title",
-            "package-name",
-            "publish-dist-tag",
-            "publisher-workflow-path",
-            "release-passport-impact-json",
-            "release-passport-output-dir",
-            "release-passport-product-name",
-            "required-status-check",
-            "target-ref",
-            "target-sha",
-            "toolchain-type",
-            "verify-command",
-            "working-directory"
-          ],
-          "reverseAuditSource": ".github/workflows"
-        },
         {
           "id": "workflow:paper-release",
           "name": "workflow:paper-release",
@@ -3474,7 +3427,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 21,
+          "inputCount": 17,
           "inputs": [
             "artifact-name",
             "artifact-paths",
@@ -3486,11 +3439,7 @@
             "buildchain-ref",
             "buildchain-repository",
             "node-version",
-            "package-name",
-            "prepare-paper-package",
-            "publish-dist-tag",
             "setup-node",
-            "target-ref",
             "toolchain-command",
             "toolchain-digest",
             "toolchain-image",
@@ -3510,7 +3459,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 56,
+          "inputCount": 55,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -3531,7 +3480,6 @@
             "package-manager",
             "publication-admission-json",
             "publication-auto-admission",
-            "publication-auto-no-gate",
             "publication-control-plane-audit-json",
             "publication-expected-json",
             "publication-gate-aggregate-json",
@@ -3723,18 +3671,16 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 54,
+          "inputCount": 52,
           "inputs": [
             "allow-repository",
             "branch-protection-bypass-apps",
             "branch-protection-bypass-teams",
             "branch-protection-bypass-users",
             "dry-run",
-            "expected-publication-version",
             "generated-ref-update-token",
             "generated-status-check-token",
             "github-release",
-            "github-release-artifact-paths",
             "github-release-notes",
             "github-release-title",
             "promote-only-release-candidate",
@@ -4586,6 +4532,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 296
+    "publicSurfaceCount": 295
   }
 }

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "2.12.7-alpha.21",
+    "version": "2.12.7-alpha.3",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/manual-registry.json

@@ -65,7 +65,7 @@
       "title": "Sealed publication authority",
       "path": "docs/publication-authority.md",
       "plane": "verify",
-      "digest": "sha256:05bc22c7e5885e591bc121fc43f588e5d49ccf0a8de6a642811c1d0d03dcee1e",
+      "digest": "sha256:fc08e6657a1b586b6b8b5618ca4f49dfaa85955687f5bba8e2e69e7513fe6c71",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator",
@@ -79,7 +79,7 @@
       "title": "Release Candidate Passport",
       "path": "docs/release-candidate.md",
       "plane": "verify",
-      "digest": "sha256:6a20c6e3e483327d5ccbe70271f7fb4752731bd0523eeddb96f27b2b6ebf1cf8",
+      "digest": "sha256:841d6f3281ba6dfe80527e4f149807bdbd05d41f9e94afe1c446fcd6d29e307c",
       "capabilityGroup": "reusable-build",
       "audience": [
         "release-operator",

package/dist/site/node-api-registry.json

@@ -8,7 +8,7 @@
       "specifier": "@kungfu-tech/buildchain",
       "export": ".",
       "target": "./packages/core/index.js",
-      "digest": "sha256:07013ab68f7947772ec5bee502f97bae4b2c2f87235188f2f28f6fbb2dc5cb23",
+      "digest": "sha256:180f7e5d0f83bcb17d1268265fa264554f8715869818f440b411b6ecd6934536",
       "summary": "Root toolkit export for Buildchain's public Node API.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -47,7 +47,7 @@
       "specifier": "@kungfu-tech/buildchain/core",
       "export": "./core",
       "target": "./packages/core/index.js",
-      "digest": "sha256:07013ab68f7947772ec5bee502f97bae4b2c2f87235188f2f28f6fbb2dc5cb23",
+      "digest": "sha256:180f7e5d0f83bcb17d1268265fa264554f8715869818f440b411b6ecd6934536",
       "summary": "Alias for the root public toolkit export.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -86,7 +86,7 @@
       "specifier": "@kungfu-tech/buildchain/controller-evidence",
       "export": "./controller-evidence",
       "target": "./packages/core/controller-evidence.js",
-      "digest": "sha256:3c9cf557ee0e2e4376335bb7d0e61b6e8c9a1d8699962dd8a1e7adc529e13f89",
+      "digest": "sha256:477c219ae49b3829dc6c607226b487e82cb6a9db277699e78af463d84002a268",
       "summary": "Project-independent controller descriptors, source/runtime-bound plans, receipts, aggregates, and validation APIs.",
       "capabilityGroup": "reusable-build",
       "audience": [
@@ -242,7 +242,7 @@
       "specifier": "@kungfu-tech/buildchain/publication-authority",
       "export": "./publication-authority",
       "target": "./packages/core/publication-authority.js",
-      "digest": "sha256:3c95bd9d7abc5048fb7b456e411c08f2875fe1cf65940fa3e50689acb6781a0c",
+      "digest": "sha256:7fbca828c55cdf40f6bb41dc0f15cb192ee106df3fe1c6e4e2ea2ae1332e88b9",
       "summary": "Sealed publication authority registry, runner provenance, control-plane audit, admission, and independent verification APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -255,7 +255,7 @@
       "specifier": "@kungfu-tech/buildchain/publication-control-plane-audit",
       "export": "./publication-control-plane-audit",
       "target": "./packages/core/publication-control-plane-audit.js",
-      "digest": "sha256:58baa05440b86259812f370aa9645ba26a4df8e986dd57598412b479589286dc",
+      "digest": "sha256:9e34235fe4a07631b617f3325bb7a983053699c47a1263e3917175d8f1c51758",
       "summary": "Read-only publication control-plane snapshot evaluation APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -268,7 +268,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-publication-authority",
       "export": "./buildchain-publication-authority",
       "target": "./packages/core/buildchain-publication-authority.js",
-      "digest": "sha256:48c5f4cb70cacb75e85b579db686a09f56d1372b8bdfeba112a3ade01524d3f5",
+      "digest": "sha256:731f21387a62cddfc8f4e4637557d4275af8ad3c79f4353750fd36be8e8dc2b1",
       "summary": "Buildchain-owned closed-world publication authority descriptor registry.",
       "capabilityGroup": "release-passport-trust",
       "audience": [