@kungfu-tech/buildchain 2.14.14-alpha.0 → 2.14.14-alpha.2

package/dist/site/controller-registry.json

@@ -1839,7 +1839,53 @@
         ]
       },
       "digest": "sha256:f97656a8df0758c8e404d5b7c387529256a1ec45d1748f8efb6847a3256b1216"
+    },
+    {
+      "schemaVersion": 1,
+      "contract": "buildchain.controller-descriptor/v1",
+      "id": "binary-distribution",
+      "version": 1,
+      "workflow": {
+        "id": "binary-distribution",
+        "path": ".github/workflows/binary-distribution.yml"
+      },
+      "inputs": {},
+      "expected": {
+        "stages": [
+          {
+            "id": "resolve-runtime",
+            "required": true
+          },
+          {
+            "id": "build",
+            "required": true
+          },
+          {
+            "id": "verify",
+            "required": true
+          },
+          {
+            "id": "bundle",
+            "required": true
+          },
+          {
+            "id": "aggregate",
+            "required": true
+          }
+        ],
+        "capabilities": [
+          "standalone-binary-build",
+          "release-evidence-bundle",
+          "artifact-admission"
+        ],
+        "evidence": [
+          "release-evidence-bundle",
+          "release-passport",
+          "controller-receipt"
+        ]
+      },
+      "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
     }
   ],
-  "digest": "sha256:89d6ba121382c2ba6c81cf1170e5c2e66256d893ee3fbb131af93a018950b891"
+  "digest": "sha256:dcc7a1c660fa1544357156327b5ca3ab15eaec894393ba62493aed755373d3a8"
 }

package/dist/site/kfd-claims.json

@@ -14,14 +14,14 @@
   },
   "runtimeContract": {
     "contract": "kungfu-buildchain-runtime-contract-world",
-    "compatibilityDigest": "sha256:edc3653e5cb34efd97065a6941db16140bbf375a565bbcf329d9d795bb07676f",
+    "compatibilityDigest": "sha256:cdf588422ec6b460bd6f631400efa6e361a045e052c8967d6c50fadd7aa4dd90",
     "majorLine": "v2"
   },
   "publicSurfaceReverseAudit": {
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "ac513924e66960351732ec1868f957123389d4cbbc300bd4ed0af9bca0b21880",
+    "sha256": "a6750354bb14571c67bd9dea77ee99d4f52e42ec5633dfa2ad860b170b093a45",
     "summary": {
       "cliCommandCount": 84,
       "workflowCount": 51,
@@ -228,7 +228,7 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "ac513924e66960351732ec1868f957123389d4cbbc300bd4ed0af9bca0b21880",
+      "sha256": "a6750354bb14571c67bd9dea77ee99d4f52e42ec5633dfa2ad860b170b093a45",
       "summary": {
         "cliCommandCount": 84,
         "workflowCount": 51,
@@ -2608,17 +2608,22 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 9,
+          "inputCount": 14,
           "inputs": [
+            "auto-admission",
             "buildchain-ref",
             "buildchain-repository",
             "evidence-run-id",
             "publication-admission-json",
             "publication-control-plane-audit-json",
             "publication-expected-json",
+            "publication-gate-aggregate-json",
             "publication-runner-provenance-json",
             "publication-used-nonces-json",
-            "release-tag"
+            "publication-version",
+            "release-tag",
+            "source-sha",
+            "target-ref"
           ],
           "reverseAuditSource": ".github/workflows"
         },

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "2.14.14-alpha.0",
+    "version": "2.14.14-alpha.2",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/manual-registry.json

@@ -79,7 +79,7 @@
       "title": "Release Candidate Passport",
       "path": "docs/release-candidate.md",
       "plane": "verify",
-      "digest": "sha256:5528710ec63dbdf86a34e69a7ea86dbb4194d72522951fc67108f5cfc58fdd99",
+      "digest": "sha256:2127c22b7b567befd05cba7d50ed0ca229b366072506e06fa09a0962ccfc1db7",
       "capabilityGroup": "reusable-build",
       "audience": [
         "release-operator",
@@ -135,7 +135,7 @@
       "title": "Binary distribution contract",
       "path": "docs/binary-distribution.md",
       "plane": "verify",
-      "digest": "sha256:08be4e97e1940a45a2c0aa2506012255888c23c1cbf8f5362b27c2b21089eb58",
+      "digest": "sha256:ae0f8e6cafbb4c39732e6a7252d46b523b0a69e8e05d3ce7ee0b51a916b1b027",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator",
@@ -191,7 +191,7 @@
       "title": "Site bundle contract",
       "path": "docs/site-bundle-contract.md",
       "plane": "use",
-      "digest": "sha256:d67a874b356fbfbee9a5d5ece7021fb52b2848347dc6a14f5562c98570096916",
+      "digest": "sha256:583661a7886bdca7e8352a5325a105a9df5d134b3896dbda13ad9b637697481f",
       "capabilityGroup": "site-and-propagation",
       "audience": [
         "site",
@@ -329,7 +329,7 @@
       "title": "Release governance",
       "path": "docs/release-governance.md",
       "plane": "why",
-      "digest": "sha256:adb3c5d2eb414ffde6e75032c8f795de0c4ad929baa2d1e5d0f8cd7a9af39f1f",
+      "digest": "sha256:4476d9464d29b4ff3951a362607a11c78b7a3b723247af93ded1b15ff8f0b83e",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer",
@@ -384,7 +384,7 @@
       "title": "Web surface deployments",
       "path": "docs/web-surface-deployments.md",
       "plane": "use",
-      "digest": "sha256:856a7602cf1c2d3a0a540cdf0d64566914f79dde24417c92089f0466bee25df1",
+      "digest": "sha256:efbfc97a947978e61c79dac9d67f87050b1bef2297617303340af8aa499703c9",
       "capabilityGroup": "site-and-propagation",
       "audience": [
         "site",

package/dist/site/node-api-registry.json

@@ -99,7 +99,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-contract",
       "export": "./buildchain-contract",
       "target": "./packages/core/buildchain-contract.js",
-      "digest": "sha256:17246bb855b53a2fea713ecc8e372705ec75636527d786e203f6faf445172193",
+      "digest": "sha256:da92e920f6cc00dd5e21405f06580c2fa943eead3b755dc36b6c3a2381e68423",
       "summary": "Runtime contract world and compatibility digest APIs for floating-ref drift checks.",
       "capabilityGroup": "governance-versioning",
       "audience": [
@@ -112,7 +112,7 @@
       "specifier": "@kungfu-tech/buildchain/controller-evidence",
       "export": "./controller-evidence",
       "target": "./packages/core/controller-evidence.js",
-      "digest": "sha256:0ec292215c9bfd755023916375622b6c5e759966fe31cc355404a0bbdd518384",
+      "digest": "sha256:3767d8dce1a18e610d4d1dcad3ef5e5c457d97f01769c9961cb45eb4d682ce59",
       "summary": "Project-independent controller descriptors, source/runtime-bound plans, receipts, aggregates, and validation APIs.",
       "capabilityGroup": "reusable-build",
       "audience": [
@@ -151,7 +151,7 @@
       "specifier": "@kungfu-tech/buildchain/issue-reporting",
       "export": "./issue-reporting",
       "target": "./packages/core/issue-reporting.js",
-      "digest": "sha256:d6e0a450a52b7a4fba84bff855d5370e0cfa2ec3c4be737b3c9099a72f705e2d",
+      "digest": "sha256:2e6fb7f8b3d15b9c93e9bec952fbb70d7dc466311b7d8f94e654e145eb29ec49",
       "summary": "Buildchain-owned issue reporting API for workflow friction feedback.",
       "capabilityGroup": "observability-diagnostics",
       "audience": [
@@ -281,7 +281,7 @@
       "specifier": "@kungfu-tech/buildchain/publication-authority",
       "export": "./publication-authority",
       "target": "./packages/core/publication-authority.js",
-      "digest": "sha256:e1812dd1bd4d8fad6f7cf0ba769462e4785e2d9bb595ab7e74d8c5bbccf23741",
+      "digest": "sha256:90bbbe0105f4c4458fdaa8eb37bf2595a00627724d6d3ac54b9e6634ee749fc4",
       "summary": "Sealed publication authority registry, runner provenance, control-plane audit, admission, and independent verification APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -450,7 +450,7 @@
     {
       "id": "site-bundle-contract",
       "path": "docs/site-bundle-contract.md",
-      "digest": "sha256:d67a874b356fbfbee9a5d5ece7021fb52b2848347dc6a14f5562c98570096916"
+      "digest": "sha256:583661a7886bdca7e8352a5325a105a9df5d134b3896dbda13ad9b637697481f"
     }
   ],
   "guidance": "These are the public Node import surfaces shipped by the npm package. Agents should prefer these exports over internal file paths."