@kungfu-tech/buildchain 2.12.7-alpha.7 → 2.12.7-alpha.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/dist/site/buildchain-contract.json +3 -3
  2. package/dist/site/buildchain-site.json +4 -4
  3. package/dist/site/kfd-claims.json +4 -3
  4. package/dist/site/kfd-upstream-aggregate.json +1 -1
  5. package/dist/site/node-api-registry.json +1 -1
  6. package/dist/site/public-surface-audit.json +3 -2
  7. package/dist/site/publication-registry.json +4 -4
  8. package/dist/site/site-manifest.json +4 -4
  9. package/dist/site/workflow-registry.json +2 -1
  10. package/package.json +1 -1
  11. package/packages/core/publication-control-plane-audit.js +3 -1
  12. package/scripts/audit-publication-control-plane.mjs +5 -2
package/dist/site/buildchain-contract.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "name": "Buildchain",
6
6
  "package": "@kungfu-tech/buildchain",
7
- "version": "2.12.7-alpha.7",
7
+ "version": "2.12.7-alpha.8",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "majorLine": "v2",
@@ -549,7 +549,7 @@
549
549
  "agents can discover supported Node APIs without importing internal file paths"
550
550
  ],
551
551
  "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
552
- "auditDigest": "sha256:c90df3cf1ba9451509659d755c8f85808bf8878ccf9acce63c1408ce30538479"
552
+ "auditDigest": "sha256:4af45bd66f45b92607ed69840834c57ff157f57c66fe65d1645a5e83eaca8108"
553
553
  },
554
554
  {
555
555
  "contractVersion": 1,
@@ -2674,5 +2674,5 @@
2674
2674
  }
2675
2675
  ],
2676
2676
  "compatibilityDigest": "sha256:af162b86ab4506e9b5f1d3c59b41f3fd57fbad79ff4d749a7f12ff16460517f8",
2677
- "contractDigest": "sha256:2a46d02c760b2475ac6690971b0ad02cd87d889624a143eba3f8af8acbb76b4d"
2677
+ "contractDigest": "sha256:95e8044b7a42060dd0476f6a4957e810431d57e7982abbc4000c1693396498c7"
2678
2678
  }
package/dist/site/buildchain-site.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-bundle",
4
- "generatedAt": "2026-07-15T01:01:29.454Z",
5
- "publishedAt": "2026-07-15T01:01:29.454Z",
4
+ "generatedAt": "2026-07-15T01:31:56.311Z",
5
+ "publishedAt": "2026-07-15T01:31:56.311Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "f0f922906c80f4096d2ef9871a4ad831be12f46e",
22
+ "sourceRevision": "a2f11bfd2bae6539f0196ef8fd9571130a809918",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "2.12.7-alpha.7",
40
+ "version": "2.12.7-alpha.8",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "source": {
package/dist/site/kfd-claims.json CHANGED
@@ -21,7 +21,7 @@
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "f59e5378e61fdcb31b27d64b4883590bc21dde5c9db2170838f2bce8a212de74",
24
+ "sha256": "0201832d7d360c5549c51841e7b3f953743166369e84b53b40755db0cb2452fd",
25
25
  "summary": {
26
26
  "cliCommandCount": 79,
27
27
  "workflowCount": 47,
@@ -225,7 +225,7 @@
225
225
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
226
226
  "path": "dist/site/public-surface-audit.json",
227
227
  "status": "passed",
228
- "sha256": "f59e5378e61fdcb31b27d64b4883590bc21dde5c9db2170838f2bce8a212de74",
228
+ "sha256": "0201832d7d360c5549c51841e7b3f953743166369e84b53b40755db0cb2452fd",
229
229
  "summary": {
230
230
  "cliCommandCount": 79,
231
231
  "workflowCount": 47,
@@ -2642,7 +2642,7 @@
2642
2642
  "visibility": "public",
2643
2643
  "participantFacing": true,
2644
2644
  "public": true,
2645
- "inputCount": 27,
2645
+ "inputCount": 28,
2646
2646
  "inputs": [
2647
2647
  "admission-json",
2648
2648
  "authority-workflow-path",
@@ -2667,6 +2667,7 @@
2667
2667
  "publication-target",
2668
2668
  "publication-version",
2669
2669
  "publisher-workflow-path",
2670
+ "required-status-check",
2670
2671
  "runner-provenance-json",
2671
2672
  "source-sha",
2672
2673
  "target-ref",
package/dist/site/kfd-upstream-aggregate.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "2.12.7-alpha.7",
7
+ "version": "2.12.7-alpha.8",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {
package/dist/site/node-api-registry.json CHANGED
@@ -255,7 +255,7 @@
255
255
  "specifier": "@kungfu-tech/buildchain/publication-control-plane-audit",
256
256
  "export": "./publication-control-plane-audit",
257
257
  "target": "./packages/core/publication-control-plane-audit.js",
258
- "digest": "sha256:9e34235fe4a07631b617f3325bb7a983053699c47a1263e3917175d8f1c51758",
258
+ "digest": "sha256:58baa05440b86259812f370aa9645ba26a4df8e986dd57598412b479589286dc",
259
259
  "summary": "Read-only publication control-plane snapshot evaluation APIs.",
260
260
  "capabilityGroup": "release-passport-trust",
261
261
  "audience": [
package/dist/site/public-surface-audit.json CHANGED
@@ -631,12 +631,13 @@
631
631
  "publication-target",
632
632
  "publication-version",
633
633
  "publisher-workflow-path",
634
+ "required-status-check",
634
635
  "runner-provenance-json",
635
636
  "source-sha",
636
637
  "target-ref",
637
638
  "used-nonces-json"
638
639
  ],
639
- "inputCount": 27,
640
+ "inputCount": 28,
640
641
  "secrets": [],
641
642
  "secretCount": 0,
642
643
  "outputs": [
@@ -3386,7 +3387,7 @@
3386
3387
  "workflowRegistryPath": "dist/site/workflow-registry.json",
3387
3388
  "pageRegistryPath": "dist/site/page-registry.json",
3388
3389
  "cliRegistryDigest": "a6daf4822365bf576425777230246046ebca67b3f8dcfea61fc7a61773776185",
3389
- "workflowRegistryDigest": "89b7907718c8b4a7b22c3d36a971510a918f113b245bb7fe1d8982dbaf707c66",
3390
+ "workflowRegistryDigest": "a61b85b07185e02e340c27d50f77a6710968db87dd42d1b1f4dd81260779a0ed",
3390
3391
  "pageRegistryDigest": "3a4779e3d85d0a175e33c7d2a8bee30ede3931cc721a7d8c422ab321f0dec723"
3391
3392
  },
3392
3393
  "comparison": {
package/dist/site/publication-registry.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-publication-release-registry",
4
- "generatedAt": "2026-07-15T01:01:29.454Z",
5
- "publishedAt": "2026-07-15T01:01:29.454Z",
4
+ "generatedAt": "2026-07-15T01:31:56.311Z",
5
+ "publishedAt": "2026-07-15T01:31:56.311Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "f0f922906c80f4096d2ef9871a4ad831be12f46e",
22
+ "sourceRevision": "a2f11bfd2bae6539f0196ef8fd9571130a809918",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -32,7 +32,7 @@
32
32
  },
33
33
  "package": {
34
34
  "name": "@kungfu-tech/buildchain",
35
- "version": "2.12.7-alpha.7",
35
+ "version": "2.12.7-alpha.8",
36
36
  "versionSource": "package.json#version"
37
37
  },
38
38
  "sourceKind": "package-site-bundle",
package/dist/site/site-manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-manifest",
4
- "generatedAt": "2026-07-15T01:01:29.454Z",
5
- "publishedAt": "2026-07-15T01:01:29.454Z",
4
+ "generatedAt": "2026-07-15T01:31:56.311Z",
5
+ "publishedAt": "2026-07-15T01:31:56.311Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "f0f922906c80f4096d2ef9871a4ad831be12f46e",
22
+ "sourceRevision": "a2f11bfd2bae6539f0196ef8fd9571130a809918",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "2.12.7-alpha.7",
40
+ "version": "2.12.7-alpha.8",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "entrypoint": "buildchain-site.json",
package/dist/site/workflow-registry.json CHANGED
@@ -237,12 +237,13 @@
237
237
  "publication-target",
238
238
  "publication-version",
239
239
  "publisher-workflow-path",
240
+ "required-status-check",
240
241
  "runner-provenance-json",
241
242
  "source-sha",
242
243
  "target-ref",
243
244
  "used-nonces-json"
244
245
  ],
245
- "inputCount": 27,
246
+ "inputCount": 28,
246
247
  "secrets": [],
247
248
  "secretCount": 0,
248
249
  "outputs": [
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kungfu-tech/buildchain",
3
- "version": "2.12.7-alpha.7",
3
+ "version": "2.12.7-alpha.8",
4
4
  "private": false,
5
5
  "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
6
6
  "repository": "https://github.com/kungfu-systems/buildchain",
package/packages/core/publication-control-plane-audit.js CHANGED
@@ -16,6 +16,7 @@ export function evaluatePublicationControlPlaneSnapshot({
16
16
  branch,
17
17
  packageName,
18
18
  publisherMode = "npm-trusted-publisher",
19
+ requiredStatusCheck = "check",
19
20
  snapshot,
20
21
  observedAt,
21
22
  expiresAt,
@@ -72,7 +73,8 @@ export function evaluatePublicationControlPlaneSnapshot({
72
73
  branchPolicy.protected === true &&
73
74
  branchPolicy.enforcementLevel === "everyone" &&
74
75
  Array.isArray(branchPolicy.requiredStatusChecks) &&
75
- branchPolicy.requiredStatusChecks.includes("check") &&
76
+ branchPolicy.requiredStatusCheck === requiredStatusCheck &&
77
+ branchPolicy.requiredStatusChecks.includes(requiredStatusCheck) &&
76
78
  branchPolicy.requiredCheckPassed === true &&
77
79
  branchPolicy.sourceSha === branchPolicy.headSha &&
78
80
  branchPolicy.mergedPullRequest === true &&
package/scripts/audit-publication-control-plane.mjs CHANGED
@@ -191,6 +191,7 @@ function main() {
191
191
  const workflowPath = flag("workflow", ".github/workflows/release-candidate-promote.yml");
192
192
  const workflowRef = flag("workflow-ref");
193
193
  const publisherWorkflowPath = flag("publisher-workflow", workflowPath);
194
+ const requiredStatusCheck = flag("required-status-check", "check");
194
195
  const jobId = flag("job", "promote");
195
196
  const environment = flag("environment", "none");
196
197
  const providerEnvironment = environment === "none" ? "" : environment;
@@ -280,15 +281,16 @@ function main() {
280
281
  const checkRuns = githubJson(`repos/${repository}/commits/${sourceSha}/check-runs?per_page=100`, "source check runs");
281
282
  const requiredStatusCheckPolicy = branchState.protection?.required_status_checks || {};
282
283
  const requiredStatusChecks = requiredStatusCheckPolicy.contexts || [];
283
- const requiredCheckSource = (requiredStatusCheckPolicy.checks || []).find((entry) => entry.context === "check");
284
+ const requiredCheckSource = (requiredStatusCheckPolicy.checks || []).find((entry) => entry.context === requiredStatusCheck);
284
285
  branchPolicy = {
285
286
  ref: branch,
286
287
  policyMode: "provider-enforced-transaction",
287
288
  protected: branchState.protected === true,
288
289
  enforcementLevel: branchState.protection?.required_status_checks?.enforcement_level || "",
289
290
  requiredStatusChecks,
291
+ requiredStatusCheck,
290
292
  requiredCheckPassed: (checkRuns.check_runs || []).some((entry) =>
291
- entry.name === "check" &&
293
+ entry.name === requiredStatusCheck &&
292
294
  entry.conclusion === "success" &&
293
295
  (!requiredCheckSource?.app_id || entry.app?.id === requiredCheckSource.app_id)
294
296
  ),
@@ -350,6 +352,7 @@ function main() {
350
352
  branch,
351
353
  packageName,
352
354
  publisherMode,
355
+ requiredStatusCheck,
353
356
  observedAt: observedAt.toISOString(),
354
357
  expiresAt: expiresAt.toISOString(),
355
358
  snapshot: {