@kungfu-tech/buildchain 2.14.10 → 2.14.11-alpha.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/site/buildchain-contract.json +4 -4
- package/dist/site/buildchain-site.json +13 -13
- package/dist/site/kfd-claims.json +2 -2
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +3 -3
- package/dist/site/page-registry.json +6 -6
- package/dist/site/public-surface-audit.json +1 -1
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/site-manifest.json +7 -7
- package/docs/migration-inventory.md +1 -1
- package/docs/release-governance.md +6 -0
- package/docs/reusable-build-surface.md +1 -1
- package/package.json +1 -1
|
@@ -3690,7 +3690,7 @@
|
|
|
3690
3690
|
"pageRegistryPath": "dist/site/page-registry.json",
|
|
3691
3691
|
"cliRegistryDigest": "90c8650f870c350ca187c612c37f2459dcbfe265aa9b1d5b375ee5c4fb31fab6",
|
|
3692
3692
|
"workflowRegistryDigest": "02950eef2769b1bd2d899099ef23c7b9ae716b18d602e25aef169d788bc6ece0",
|
|
3693
|
-
"pageRegistryDigest": "
|
|
3693
|
+
"pageRegistryDigest": "b15e01e788b07c5fef86e9bfe7fd2defd7d639e68924ab5aba46e0e111b3f2a4"
|
|
3694
3694
|
},
|
|
3695
3695
|
"comparison": {
|
|
3696
3696
|
"missingCliRegistry": [],
|
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"contract": "kungfu-buildchain-publication-release-registry",
|
|
4
|
-
"generatedAt": "2026-07-
|
|
5
|
-
"publishedAt": "2026-07-
|
|
4
|
+
"generatedAt": "2026-07-21T18:27:00.954Z",
|
|
5
|
+
"publishedAt": "2026-07-21T18:27:00.954Z",
|
|
6
6
|
"reproducible": true,
|
|
7
7
|
"timestampPolicy": "ci-injected",
|
|
8
8
|
"deterministicInputs": [
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
"declared Buildchain surface manifest contract"
|
|
20
20
|
],
|
|
21
21
|
"sourceDateEpoch": "0",
|
|
22
|
-
"sourceRevision": "
|
|
22
|
+
"sourceRevision": "2cb8f20ce1d3d1989b29a1643726942cc1e39e91",
|
|
23
23
|
"timestampPolicyDetails": {
|
|
24
24
|
"contract": "kungfu-buildchain-surface-timestamp-policy",
|
|
25
25
|
"timestampFields": [
|
|
@@ -32,7 +32,7 @@
|
|
|
32
32
|
},
|
|
33
33
|
"package": {
|
|
34
34
|
"name": "@kungfu-tech/buildchain",
|
|
35
|
-
"version": "2.14.
|
|
35
|
+
"version": "2.14.11-alpha.1",
|
|
36
36
|
"versionSource": "package.json#version"
|
|
37
37
|
},
|
|
38
38
|
"sourceKind": "package-site-bundle",
|
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"contract": "kungfu-buildchain-site-manifest",
|
|
4
|
-
"generatedAt": "2026-07-
|
|
5
|
-
"publishedAt": "2026-07-
|
|
4
|
+
"generatedAt": "2026-07-21T18:27:00.954Z",
|
|
5
|
+
"publishedAt": "2026-07-21T18:27:00.954Z",
|
|
6
6
|
"reproducible": true,
|
|
7
7
|
"timestampPolicy": "ci-injected",
|
|
8
8
|
"deterministicInputs": [
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
"declared Buildchain surface manifest contract"
|
|
20
20
|
],
|
|
21
21
|
"sourceDateEpoch": "0",
|
|
22
|
-
"sourceRevision": "
|
|
22
|
+
"sourceRevision": "2cb8f20ce1d3d1989b29a1643726942cc1e39e91",
|
|
23
23
|
"timestampPolicyDetails": {
|
|
24
24
|
"contract": "kungfu-buildchain-surface-timestamp-policy",
|
|
25
25
|
"timestampFields": [
|
|
@@ -37,7 +37,7 @@
|
|
|
37
37
|
},
|
|
38
38
|
"package": {
|
|
39
39
|
"name": "@kungfu-tech/buildchain",
|
|
40
|
-
"version": "2.14.
|
|
40
|
+
"version": "2.14.11-alpha.1",
|
|
41
41
|
"versionSource": "package.json#version"
|
|
42
42
|
},
|
|
43
43
|
"entrypoint": "buildchain-site.json",
|
|
@@ -165,7 +165,7 @@
|
|
|
165
165
|
"path": "docs/migration-inventory.md",
|
|
166
166
|
"plane": "verify",
|
|
167
167
|
"exists": true,
|
|
168
|
-
"digest": "sha256:
|
|
168
|
+
"digest": "sha256:dd4b7e2aefef64d62c0a7d53b7c96ed0a1be963b2b7210962bd6e73560f2fbc5"
|
|
169
169
|
},
|
|
170
170
|
{
|
|
171
171
|
"id": "ownership",
|
|
@@ -221,7 +221,7 @@
|
|
|
221
221
|
"path": "docs/reusable-build-surface.md",
|
|
222
222
|
"plane": "use",
|
|
223
223
|
"exists": true,
|
|
224
|
-
"digest": "sha256:
|
|
224
|
+
"digest": "sha256:9b615d68390ace8f870ef2e6fd481ae077e28514fc2f34d8efa089ca2f11a8c8"
|
|
225
225
|
},
|
|
226
226
|
{
|
|
227
227
|
"id": "publish-transaction",
|
|
@@ -237,7 +237,7 @@
|
|
|
237
237
|
"path": "docs/release-governance.md",
|
|
238
238
|
"plane": "why",
|
|
239
239
|
"exists": true,
|
|
240
|
-
"digest": "sha256:
|
|
240
|
+
"digest": "sha256:e5d6b527ee6d5674b91e4287f52c7f03134c82876bc96fc4e9085834e4e4ce89"
|
|
241
241
|
},
|
|
242
242
|
{
|
|
243
243
|
"id": "release-flow",
|
|
@@ -46,7 +46,7 @@ do not duplicate alpha and stable jobs or call
|
|
|
46
46
|
`.release-candidate-promote.yml` directly.
|
|
47
47
|
|
|
48
48
|
Buildchain also keeps the workflow-file layout transition declarative in
|
|
49
|
-
`.buildchain/promotion-shell-routing.json`. Stable `v2.14.
|
|
49
|
+
`.buildchain/promotion-shell-routing.json`. Stable `v2.14.10` contains the hidden
|
|
50
50
|
advanced workflow, so the stable lane is pinned to that implementation's
|
|
51
51
|
immutable release SHA and forwards the full internal identity surface. This is
|
|
52
52
|
provider-owned compatibility state; consumers still keep the same single public
|
|
@@ -779,6 +779,12 @@ consumer repository still owns registry truth: npm, PyPI, OCI, S3, Conan, CMake
|
|
|
779
779
|
packaging, download pages, dist-tags, and similar side effects must be
|
|
780
780
|
implemented by project lifecycle commands that emit Buildchain publish evidence.
|
|
781
781
|
|
|
782
|
+
Durable transaction recovery is also bound to the exact publication version
|
|
783
|
+
planned for the current run. An unfinished transaction may be resumed from the
|
|
784
|
+
current source or its history only when its recorded version matches that plan;
|
|
785
|
+
an older failed transaction that happens to be an ancestor cannot reserve its
|
|
786
|
+
old exact tag for a newer package publication.
|
|
787
|
+
|
|
782
788
|
Every Buildchain publish model that can run registry side effects must bind the
|
|
783
789
|
publish entrypoint to an immutable `publish-gate/*` source lock. The reusable
|
|
784
790
|
`release-candidate-promote.yml@v2` wrapper creates or updates that gate ref and
|
|
@@ -754,7 +754,7 @@ promotion starts:
|
|
|
754
754
|
`vN`, and `buildchain-stable-contract-lock-path`.
|
|
755
755
|
|
|
756
756
|
The generated router also owns the stable-shell layout transition through
|
|
757
|
-
`.buildchain/promotion-shell-routing.json`. Stable `v2.14.
|
|
757
|
+
`.buildchain/promotion-shell-routing.json`. Stable `v2.14.10` contains the hidden
|
|
758
758
|
advanced workflow, so the stable lane calls that workflow at the exact immutable
|
|
759
759
|
SHA behind the released `v2` state and forwards the complete internal promotion
|
|
760
760
|
identity surface. The logical shell identity remains `vN`, and the router
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@kungfu-tech/buildchain",
|
|
3
|
-
"version": "2.14.
|
|
3
|
+
"version": "2.14.11-alpha.1",
|
|
4
4
|
"private": false,
|
|
5
5
|
"description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
|
|
6
6
|
"repository": "https://github.com/kungfu-systems/buildchain",
|