@kungfu-tech/buildchain 2.12.7-alpha.22 → 2.12.7-alpha.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (30) hide show
  1. package/actions/promote-buildchain-ref/README.md +1 -5
  2. package/dist/site/buildchain-contract.json +22 -47
  3. package/dist/site/buildchain-site.json +14 -14
  4. package/dist/site/capability-registry.json +1 -1
  5. package/dist/site/controller-registry.json +3 -23
  6. package/dist/site/kfd-claims.json +8 -59
  7. package/dist/site/kfd-upstream-aggregate.json +1 -1
  8. package/dist/site/manual-registry.json +2 -2
  9. package/dist/site/node-api-registry.json +6 -6
  10. package/dist/site/page-registry.json +8 -8
  11. package/dist/site/public-surface-audit.json +8 -68
  12. package/dist/site/publication-authority-registry.json +1 -25
  13. package/dist/site/publication-registry.json +4 -4
  14. package/dist/site/site-manifest.json +6 -6
  15. package/dist/site/workflow-registry.json +5 -68
  16. package/docs/publication-artifacts.md +19 -22
  17. package/docs/publication-authority.md +7 -10
  18. package/docs/release-candidate.md +0 -19
  19. package/package.json +1 -1
  20. package/packages/core/buildchain-publication-authority.js +0 -1
  21. package/packages/core/controller-evidence.js +1 -1
  22. package/packages/core/index.js +0 -7
  23. package/packages/core/publication-authority.js +2 -41
  24. package/packages/core/publication-control-plane-audit.js +1 -3
  25. package/scripts/assemble-self-publication-admission.mjs +8 -17
  26. package/scripts/audit-publication-control-plane.mjs +2 -5
  27. package/scripts/locked-source-checkout.mjs +13 -50
  28. package/packages/core/publication-artifact-candidate.js +0 -128
  29. package/scripts/assemble-publication-artifact-admission.mjs +0 -190
  30. package/scripts/publication-artifact-candidate.mjs +0 -122
@@ -287,7 +287,7 @@
287
287
  "pageCount": 6,
288
288
  "cliCommandCount": 0,
289
289
  "nodeApiCount": 2,
290
- "workflowCount": 30,
290
+ "workflowCount": 29,
291
291
  "actionCount": 0
292
292
  },
293
293
  "manuals": [
@@ -1037,26 +1037,10 @@
1037
1037
  "classification": "included",
1038
1038
  "source": "workflow-call-input"
1039
1039
  },
1040
- "package-name": {
1041
- "classification": "included",
1042
- "source": "workflow-call-input"
1043
- },
1044
- "prepare-paper-package": {
1045
- "classification": "included",
1046
- "source": "workflow-call-input"
1047
- },
1048
- "publish-dist-tag": {
1049
- "classification": "included",
1050
- "source": "workflow-call-input"
1051
- },
1052
1040
  "setup-node": {
1053
1041
  "classification": "included",
1054
1042
  "source": "workflow-call-input"
1055
1043
  },
1056
- "target-ref": {
1057
- "classification": "included",
1058
- "source": "workflow-call-input"
1059
- },
1060
1044
  "toolchain-command": {
1061
1045
  "classification": "digest-only",
1062
1046
  "source": "workflow-call-input"
@@ -1116,7 +1100,7 @@
1116
1100
  "controller-receipt"
1117
1101
  ]
1118
1102
  },
1119
- "digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd"
1103
+ "digest": "sha256:d09d8f4081e7b5b9296487337206111591eeca6f8d7667e90012ac911c1b71cf"
1120
1104
  },
1121
1105
  {
1122
1106
  "schemaVersion": 1,
@@ -1441,10 +1425,6 @@
1441
1425
  "classification": "included",
1442
1426
  "source": "workflow-call-input"
1443
1427
  },
1444
- "publication-auto-no-gate": {
1445
- "classification": "included",
1446
- "source": "workflow-call-input"
1447
- },
1448
1428
  "publication-control-plane-audit-json": {
1449
1429
  "classification": "digest-only",
1450
1430
  "source": "workflow-call-input"
@@ -1631,7 +1611,7 @@
1631
1611
  "controller-receipt"
1632
1612
  ]
1633
1613
  },
1634
- "digest": "sha256:c5dfeb63bbe3507e3c58f74e2a5792e6558002e3aafab6453cc8b8837db2a729"
1614
+ "digest": "sha256:c2f1fd6e984606b077b27bb243b66077162c2c4be03f99c0d8f917bf7bf4d0d1"
1635
1615
  },
1636
1616
  {
1637
1617
  "schemaVersion": 1,
@@ -1737,5 +1717,5 @@
1737
1717
  "digest": "sha256:9b9f9a2320c4349903d72ee46e329211b5538ed5ebebaa93559df4eafb835997"
1738
1718
  }
1739
1719
  ],
1740
- "digest": "sha256:22be9d05109396f2b5c44a74fb0f67e4a554c462662c5a41e44e466c4d90ed04"
1720
+ "digest": "sha256:7b7a03b9814e00f968e7c1ff0cdd2b447d49c78a1a9eba4ec5d2645d8f724521"
1741
1721
  }
@@ -21,10 +21,10 @@
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "8815fc5abfe516e247a7024a367be5e3144fbe49196b7ec251dba4598bfc59ea",
24
+ "sha256": "7bafa611c991c1b808267f22e6708bed2cf00b655ebd6bee60c50dd27fcefa37",
25
25
  "summary": {
26
26
  "cliCommandCount": 79,
27
- "workflowCount": 47,
27
+ "workflowCount": 46,
28
28
  "actionCount": 4,
29
29
  "sitePageCount": 49,
30
30
  "docCommandRefCount": 246,
@@ -225,10 +225,10 @@
225
225
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
226
226
  "path": "dist/site/public-surface-audit.json",
227
227
  "status": "passed",
228
- "sha256": "8815fc5abfe516e247a7024a367be5e3144fbe49196b7ec251dba4598bfc59ea",
228
+ "sha256": "7bafa611c991c1b808267f22e6708bed2cf00b655ebd6bee60c50dd27fcefa37",
229
229
  "summary": {
230
230
  "cliCommandCount": 79,
231
- "workflowCount": 47,
231
+ "workflowCount": 46,
232
232
  "actionCount": 4,
233
233
  "sitePageCount": 49,
234
234
  "docCommandRefCount": 246,
@@ -2642,22 +2642,17 @@
2642
2642
  "visibility": "public",
2643
2643
  "participantFacing": true,
2644
2644
  "public": true,
2645
- "inputCount": 29,
2645
+ "inputCount": 23,
2646
2646
  "inputs": [
2647
2647
  "admission-json",
2648
- "authority-workflow-path",
2649
2648
  "auto-admission",
2650
- "auto-admission-kind",
2651
- "auto-no-gate",
2652
2649
  "buildchain-ref",
2653
2650
  "buildchain-repository",
2654
2651
  "control-plane-audit-json",
2655
2652
  "dry-run",
2656
- "evidence-controller-artifact",
2657
2653
  "evidence-manifest-pattern",
2658
2654
  "evidence-passport-artifact",
2659
2655
  "evidence-payload-pattern",
2660
- "evidence-publication-artifact",
2661
2656
  "evidence-repository",
2662
2657
  "evidence-run-id",
2663
2658
  "evidence-summary-artifact",
@@ -2668,7 +2663,6 @@
2668
2663
  "publication-target",
2669
2664
  "publication-version",
2670
2665
  "publisher-workflow-path",
2671
- "required-status-check",
2672
2666
  "runner-provenance-json",
2673
2667
  "source-sha",
2674
2668
  "target-ref",
@@ -3307,46 +3301,6 @@
3307
3301
  "inputs": [],
3308
3302
  "reverseAuditSource": ".github/workflows"
3309
3303
  },
3310
- {
3311
- "id": "workflow:paper-release-sealed",
3312
- "name": "workflow:paper-release-sealed",
3313
- "kind": "workflow",
3314
- "sourcePath": ".github/workflows/paper-release-sealed.yml",
3315
- "evidencePath": ".github/workflows/paper-release-sealed.yml",
3316
- "availability": "shipped",
3317
- "visibility": "public",
3318
- "participantFacing": true,
3319
- "public": true,
3320
- "inputCount": 25,
3321
- "inputs": [
3322
- "artifact-name",
3323
- "artifact-paths",
3324
- "artifact-retention-days",
3325
- "branch-protection-bypass-apps",
3326
- "branch-protection-bypass-teams",
3327
- "branch-protection-bypass-users",
3328
- "buildchain-contract-lock-path",
3329
- "buildchain-ref",
3330
- "buildchain-repository",
3331
- "dry-run",
3332
- "github-release",
3333
- "github-release-notes",
3334
- "github-release-title",
3335
- "package-name",
3336
- "publish-dist-tag",
3337
- "publisher-workflow-path",
3338
- "release-passport-impact-json",
3339
- "release-passport-output-dir",
3340
- "release-passport-product-name",
3341
- "required-status-check",
3342
- "target-ref",
3343
- "target-sha",
3344
- "toolchain-type",
3345
- "verify-command",
3346
- "working-directory"
3347
- ],
3348
- "reverseAuditSource": ".github/workflows"
3349
- },
3350
3304
  {
3351
3305
  "id": "workflow:paper-release",
3352
3306
  "name": "workflow:paper-release",
@@ -3474,7 +3428,7 @@
3474
3428
  "visibility": "public",
3475
3429
  "participantFacing": true,
3476
3430
  "public": true,
3477
- "inputCount": 21,
3431
+ "inputCount": 17,
3478
3432
  "inputs": [
3479
3433
  "artifact-name",
3480
3434
  "artifact-paths",
@@ -3486,11 +3440,7 @@
3486
3440
  "buildchain-ref",
3487
3441
  "buildchain-repository",
3488
3442
  "node-version",
3489
- "package-name",
3490
- "prepare-paper-package",
3491
- "publish-dist-tag",
3492
3443
  "setup-node",
3493
- "target-ref",
3494
3444
  "toolchain-command",
3495
3445
  "toolchain-digest",
3496
3446
  "toolchain-image",
@@ -3510,7 +3460,7 @@
3510
3460
  "visibility": "public",
3511
3461
  "participantFacing": true,
3512
3462
  "public": true,
3513
- "inputCount": 56,
3463
+ "inputCount": 55,
3514
3464
  "inputs": [
3515
3465
  "allow-repository",
3516
3466
  "artifact-name",
@@ -3531,7 +3481,6 @@
3531
3481
  "package-manager",
3532
3482
  "publication-admission-json",
3533
3483
  "publication-auto-admission",
3534
- "publication-auto-no-gate",
3535
3484
  "publication-control-plane-audit-json",
3536
3485
  "publication-expected-json",
3537
3486
  "publication-gate-aggregate-json",
@@ -4586,6 +4535,6 @@
4586
4535
  }
4587
4536
  }
4588
4537
  ],
4589
- "publicSurfaceCount": 296
4538
+ "publicSurfaceCount": 295
4590
4539
  }
4591
4540
  }
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "2.12.7-alpha.22",
7
+ "version": "2.12.7-alpha.4",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {
@@ -65,7 +65,7 @@
65
65
  "title": "Sealed publication authority",
66
66
  "path": "docs/publication-authority.md",
67
67
  "plane": "verify",
68
- "digest": "sha256:05bc22c7e5885e591bc121fc43f588e5d49ccf0a8de6a642811c1d0d03dcee1e",
68
+ "digest": "sha256:06ba05f9d8a2685a0896334b6013a97c45b7d71163cf6898e5a6274baf7f0296",
69
69
  "capabilityGroup": "release-passport-trust",
70
70
  "audience": [
71
71
  "release-operator",
@@ -79,7 +79,7 @@
79
79
  "title": "Release Candidate Passport",
80
80
  "path": "docs/release-candidate.md",
81
81
  "plane": "verify",
82
- "digest": "sha256:6a20c6e3e483327d5ccbe70271f7fb4752731bd0523eeddb96f27b2b6ebf1cf8",
82
+ "digest": "sha256:841d6f3281ba6dfe80527e4f149807bdbd05d41f9e94afe1c446fcd6d29e307c",
83
83
  "capabilityGroup": "reusable-build",
84
84
  "audience": [
85
85
  "release-operator",
@@ -8,7 +8,7 @@
8
8
  "specifier": "@kungfu-tech/buildchain",
9
9
  "export": ".",
10
10
  "target": "./packages/core/index.js",
11
- "digest": "sha256:07013ab68f7947772ec5bee502f97bae4b2c2f87235188f2f28f6fbb2dc5cb23",
11
+ "digest": "sha256:180f7e5d0f83bcb17d1268265fa264554f8715869818f440b411b6ecd6934536",
12
12
  "summary": "Root toolkit export for Buildchain's public Node API.",
13
13
  "capabilityGroup": "api-cli-reference",
14
14
  "audience": [
@@ -47,7 +47,7 @@
47
47
  "specifier": "@kungfu-tech/buildchain/core",
48
48
  "export": "./core",
49
49
  "target": "./packages/core/index.js",
50
- "digest": "sha256:07013ab68f7947772ec5bee502f97bae4b2c2f87235188f2f28f6fbb2dc5cb23",
50
+ "digest": "sha256:180f7e5d0f83bcb17d1268265fa264554f8715869818f440b411b6ecd6934536",
51
51
  "summary": "Alias for the root public toolkit export.",
52
52
  "capabilityGroup": "api-cli-reference",
53
53
  "audience": [
@@ -86,7 +86,7 @@
86
86
  "specifier": "@kungfu-tech/buildchain/controller-evidence",
87
87
  "export": "./controller-evidence",
88
88
  "target": "./packages/core/controller-evidence.js",
89
- "digest": "sha256:3c9cf557ee0e2e4376335bb7d0e61b6e8c9a1d8699962dd8a1e7adc529e13f89",
89
+ "digest": "sha256:477c219ae49b3829dc6c607226b487e82cb6a9db277699e78af463d84002a268",
90
90
  "summary": "Project-independent controller descriptors, source/runtime-bound plans, receipts, aggregates, and validation APIs.",
91
91
  "capabilityGroup": "reusable-build",
92
92
  "audience": [
@@ -242,7 +242,7 @@
242
242
  "specifier": "@kungfu-tech/buildchain/publication-authority",
243
243
  "export": "./publication-authority",
244
244
  "target": "./packages/core/publication-authority.js",
245
- "digest": "sha256:3c95bd9d7abc5048fb7b456e411c08f2875fe1cf65940fa3e50689acb6781a0c",
245
+ "digest": "sha256:7fbca828c55cdf40f6bb41dc0f15cb192ee106df3fe1c6e4e2ea2ae1332e88b9",
246
246
  "summary": "Sealed publication authority registry, runner provenance, control-plane audit, admission, and independent verification APIs.",
247
247
  "capabilityGroup": "release-passport-trust",
248
248
  "audience": [
@@ -255,7 +255,7 @@
255
255
  "specifier": "@kungfu-tech/buildchain/publication-control-plane-audit",
256
256
  "export": "./publication-control-plane-audit",
257
257
  "target": "./packages/core/publication-control-plane-audit.js",
258
- "digest": "sha256:58baa05440b86259812f370aa9645ba26a4df8e986dd57598412b479589286dc",
258
+ "digest": "sha256:9e34235fe4a07631b617f3325bb7a983053699c47a1263e3917175d8f1c51758",
259
259
  "summary": "Read-only publication control-plane snapshot evaluation APIs.",
260
260
  "capabilityGroup": "release-passport-trust",
261
261
  "audience": [
@@ -268,7 +268,7 @@
268
268
  "specifier": "@kungfu-tech/buildchain/buildchain-publication-authority",
269
269
  "export": "./buildchain-publication-authority",
270
270
  "target": "./packages/core/buildchain-publication-authority.js",
271
- "digest": "sha256:48c5f4cb70cacb75e85b579db686a09f56d1372b8bdfeba112a3ade01524d3f5",
271
+ "digest": "sha256:731f21387a62cddfc8f4e4637557d4275af8ad3c79f4353750fd36be8e8dc2b1",
272
272
  "summary": "Buildchain-owned closed-world publication authority descriptor registry.",
273
273
  "capabilityGroup": "release-passport-trust",
274
274
  "audience": [