@kungfu-tech/buildchain 2.13.0-alpha.0 → 2.13.0-alpha.2

package/dist/site/controller-registry.json

@@ -1453,6 +1453,14 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "publication-consumer-predicate-id": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "publication-consumer-qualification-command": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "publication-control-plane-audit-json": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -1489,6 +1497,10 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
+        "publication-used-qualification-nonces-json": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "publish-artifact-kind": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1639,7 +1651,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:c5dfeb63bbe3507e3c58f74e2a5792e6558002e3aafab6453cc8b8837db2a729"
+      "digest": "sha256:2507d132710f66d3ae6ffdb18f5e66172707b8e0f9ad9e888f7422fdacc99133"
     },
     {
       "schemaVersion": 1,
@@ -1745,5 +1757,5 @@
       "digest": "sha256:9b9f9a2320c4349903d72ee46e329211b5538ed5ebebaa93559df4eafb835997"
     }
   ],
-  "digest": "sha256:710205201c2f18c442bdda7247d70e34da81c9bdb151658af93be73b29f1d90f"
+  "digest": "sha256:1a8a2ace3d97dce074ccea44cfbd88d27e466e4bb8f87fb8ce129397256c2b51"
 }

package/dist/site/kfd-claims.json

@@ -21,7 +21,7 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "14a69740f5eea38b4de319d7da09b58cfca185fa767493b8d1850fbf3be50f1d",
+    "sha256": "c96852b69afe7c6f8a42824d03d877d988a4bf5908aafc4f07ec5e79193daf3f",
     "summary": {
       "cliCommandCount": 81,
       "workflowCount": 47,
@@ -225,7 +225,7 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "14a69740f5eea38b4de319d7da09b58cfca185fa767493b8d1850fbf3be50f1d",
+      "sha256": "c96852b69afe7c6f8a42824d03d877d988a4bf5908aafc4f07ec5e79193daf3f",
       "summary": {
         "cliCommandCount": 81,
         "workflowCount": 47,
@@ -2679,7 +2679,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 29,
+          "inputCount": 32,
           "inputs": [
             "admission-json",
             "authority-workflow-path",
@@ -2688,6 +2688,9 @@
             "auto-no-gate",
             "buildchain-ref",
             "buildchain-repository",
+            "consumer-predicate-digest",
+            "consumer-predicate-id",
+            "consumer-qualification-required",
             "control-plane-audit-json",
             "dry-run",
             "evidence-controller-artifact",
@@ -3548,7 +3551,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 56,
+          "inputCount": 59,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -3570,6 +3573,8 @@
             "publication-admission-json",
             "publication-auto-admission",
             "publication-auto-no-gate",
+            "publication-consumer-predicate-id",
+            "publication-consumer-qualification-command",
             "publication-control-plane-audit-json",
             "publication-expected-json",
             "publication-gate-aggregate-json",
@@ -3579,6 +3584,7 @@
             "publication-runner-provenance-json",
             "publication-target",
             "publication-used-nonces-json",
+            "publication-used-qualification-nonces-json",
             "publish-artifact-kind",
             "publish-command",
             "publish-dist-tag",
@@ -3761,7 +3767,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 54,
+          "inputCount": 59,
           "inputs": [
             "allow-repository",
             "branch-protection-bypass-apps",
@@ -3776,6 +3782,10 @@
             "github-release-notes",
             "github-release-title",
             "promote-only-release-candidate",
+            "publication-capability-json",
+            "publication-gate-aggregate-json",
+            "publication-qualification-receipt-json",
+            "publication-used-qualification-nonces-json",
             "publish-auth",
             "publish-command",
             "publish-dist-tag",
@@ -3808,6 +3818,7 @@
             "release-passport-platform-manifest-paths",
             "release-passport-product-name",
             "require-governance",
+            "require-publication-qualification",
             "require-publish-source-lock",
             "require-version-state",
             "required-status-check",

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "2.13.0-alpha.0",
+    "version": "2.13.0-alpha.2",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/manual-registry.json

@@ -23,7 +23,7 @@
       "title": "Install and verify Buildchain",
       "path": "docs/install.md",
       "plane": "use",
-      "digest": "sha256:2600738a92b5853bc26d4e01211f0c07b8b36a21d4d72ca809bc6032dff5dc5f",
+      "digest": "sha256:1879849c01f82b8820f2d9aeb09faed0931954cb7fe6939176a5eb69110cee59",
       "capabilityGroup": "getting-started",
       "audience": [
         "consumer"
@@ -65,7 +65,7 @@
       "title": "Sealed publication authority",
       "path": "docs/publication-authority.md",
       "plane": "verify",
-      "digest": "sha256:05bc22c7e5885e591bc121fc43f588e5d49ccf0a8de6a642811c1d0d03dcee1e",
+      "digest": "sha256:920d4f14902ded1999f46d39f6d02db8cb5be6f22e376f6f2d456b3a1cc0c674",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator",
@@ -79,7 +79,7 @@
       "title": "Release Candidate Passport",
       "path": "docs/release-candidate.md",
       "plane": "verify",
-      "digest": "sha256:554613c963f57cc391acbd072bf73e1a2543d9bd1371087d4411577cccbf817c",
+      "digest": "sha256:1fc581cf1b4e4a202464c8d6671b3bff12d0b349760246a951e88ef524f99e6b",
       "capabilityGroup": "reusable-build",
       "audience": [
         "release-operator",
@@ -316,7 +316,7 @@
       "title": "Publish transaction",
       "path": "docs/publish-transaction.md",
       "plane": "verify",
-      "digest": "sha256:8d5d7075cf8b4280a4c5097726f5c51ae40db83e2652eafefe4fa5e487794f57",
+      "digest": "sha256:9e77030dbd69e27c2402d855980f7560a465270cac1f3225c0470523ab4a8ddf",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator"
@@ -329,7 +329,7 @@
       "title": "Release governance",
       "path": "docs/release-governance.md",
       "plane": "why",
-      "digest": "sha256:03108f05a608cb0849e7a668fe23671b62863907ce02a70bc6522eb8074f3e63",
+      "digest": "sha256:cb6aafc3410c0e72da3d9c3ba330421005af27c3c67665a2f3356603f02da84a",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer",

package/dist/site/node-api-registry.json

@@ -8,7 +8,7 @@
       "specifier": "@kungfu-tech/buildchain",
       "export": ".",
       "target": "./packages/core/index.js",
-      "digest": "sha256:68a42e62f5204170bea16640febf52d5f3cefac3b95aa8c36eb0410725a39e34",
+      "digest": "sha256:a5c904aad95b55a3a83f9753c291418ee7cfa16a0455598d4a0c5c7e57fc19eb",
       "summary": "Root toolkit export for Buildchain's public Node API.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -47,7 +47,7 @@
       "specifier": "@kungfu-tech/buildchain/core",
       "export": "./core",
       "target": "./packages/core/index.js",
-      "digest": "sha256:68a42e62f5204170bea16640febf52d5f3cefac3b95aa8c36eb0410725a39e34",
+      "digest": "sha256:a5c904aad95b55a3a83f9753c291418ee7cfa16a0455598d4a0c5c7e57fc19eb",
       "summary": "Alias for the root public toolkit export.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -255,7 +255,7 @@
       "specifier": "@kungfu-tech/buildchain/publication-authority",
       "export": "./publication-authority",
       "target": "./packages/core/publication-authority.js",
-      "digest": "sha256:3c95bd9d7abc5048fb7b456e411c08f2875fe1cf65940fa3e50689acb6781a0c",
+      "digest": "sha256:2563676499d75f637a47a56b7c98756c7886a327e8d539a4638446e6c4396d1a",
       "summary": "Sealed publication authority registry, runner provenance, control-plane audit, admission, and independent verification APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [