@kungfu-tech/buildchain 2.14.18-alpha.0 → 2.14.18-alpha.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (44) hide show
  1. package/README.md +1 -0
  2. package/actions/promote-buildchain-ref/README.md +33 -30
  3. package/bin/buildchain.mjs +16 -4
  4. package/dist/site/buildchain-contract.json +86 -31
  5. package/dist/site/buildchain-site.json +88 -27
  6. package/dist/site/capability-registry.json +6 -5
  7. package/dist/site/cli-registry.json +12 -0
  8. package/dist/site/controller-registry.json +50 -6
  9. package/dist/site/kfd-claims.json +110 -21
  10. package/dist/site/kfd-upstream-aggregate.json +1 -1
  11. package/dist/site/manual-registry.json +21 -6
  12. package/dist/site/node-api-registry.json +19 -6
  13. package/dist/site/page-registry.json +70 -17
  14. package/dist/site/public-surface-audit.json +130 -23
  15. package/dist/site/publication-authority-registry.json +21 -1
  16. package/dist/site/publication-registry.json +4 -4
  17. package/dist/site/release-provenance.json +1 -0
  18. package/dist/site/site-manifest.json +18 -10
  19. package/dist/site/workflow-registry.json +62 -16
  20. package/docs/MAP.md +3 -1
  21. package/docs/github-governance-authority.md +267 -0
  22. package/docs/lifecycle-protocol.md +10 -10
  23. package/docs/publish-transaction.md +73 -4
  24. package/docs/release-governance.md +38 -24
  25. package/docs/reusable-build-surface.md +29 -11
  26. package/docs/web-surface-deployments.md +46 -0
  27. package/package.json +2 -1
  28. package/packages/core/buildchain-kfd-claims.js +2 -0
  29. package/packages/core/buildchain-publication-authority.js +1 -0
  30. package/packages/core/controller-evidence.js +1 -1
  31. package/packages/core/github-governance-authority.js +1312 -0
  32. package/packages/core/index.js +22 -0
  33. package/packages/core/publication-control-plane-audit.js +4 -1
  34. package/scripts/artifact-relay-s3.mjs +11 -1
  35. package/scripts/audit-github-governance.mjs +474 -0
  36. package/scripts/audit-publication-control-plane.mjs +41 -5
  37. package/scripts/check-inventory.mjs +8 -0
  38. package/scripts/generate-channel-promotion-workflow.mjs +3 -0
  39. package/scripts/generate-site-bundle.mjs +5 -0
  40. package/scripts/installer-publication.mjs +351 -0
  41. package/scripts/publication-commit-evidence.mjs +158 -0
  42. package/scripts/reconcile-github-governance.mjs +549 -0
  43. package/scripts/release-candidate-resolver.mjs +53 -0
  44. package/scripts/web-surface-core.mjs +127 -14
package/dist/site/node-api-registry.json CHANGED
@@ -8,7 +8,7 @@
8
8
  "specifier": "@kungfu-tech/buildchain",
9
9
  "export": ".",
10
10
  "target": "./packages/core/index.js",
11
- "digest": "sha256:1e02f99f2424f2850c0f264ad6a0bb75973144bc1099dba82d06ba0434c2b406",
11
+ "digest": "sha256:b1cccdca930eb1ab2be006b8fabc795966f61fafdb4933758a42a7bf3c3bf6cd",
12
12
  "summary": "Root toolkit export for Buildchain's public Node API.",
13
13
  "capabilityGroup": "api-cli-reference",
14
14
  "audience": [
@@ -47,7 +47,7 @@
47
47
  "specifier": "@kungfu-tech/buildchain/core",
48
48
  "export": "./core",
49
49
  "target": "./packages/core/index.js",
50
- "digest": "sha256:1e02f99f2424f2850c0f264ad6a0bb75973144bc1099dba82d06ba0434c2b406",
50
+ "digest": "sha256:b1cccdca930eb1ab2be006b8fabc795966f61fafdb4933758a42a7bf3c3bf6cd",
51
51
  "summary": "Alias for the root public toolkit export.",
52
52
  "capabilityGroup": "api-cli-reference",
53
53
  "audience": [
@@ -125,7 +125,7 @@
125
125
  "specifier": "@kungfu-tech/buildchain/controller-evidence",
126
126
  "export": "./controller-evidence",
127
127
  "target": "./packages/core/controller-evidence.js",
128
- "digest": "sha256:5a4d6d9f2180f60de2eaab5eeb5a0deb79cde688d6047719c3748eaefdd31940",
128
+ "digest": "sha256:6169f625ab2bd8a21ddcbb1c72529df481a4eeadd2b37a4c5e8e0dee9668a435",
129
129
  "summary": "Project-independent controller descriptors, source/runtime-bound plans, receipts, aggregates, and validation APIs.",
130
130
  "capabilityGroup": "reusable-build",
131
131
  "audience": [
@@ -320,7 +320,7 @@
320
320
  "specifier": "@kungfu-tech/buildchain/publication-control-plane-audit",
321
321
  "export": "./publication-control-plane-audit",
322
322
  "target": "./packages/core/publication-control-plane-audit.js",
323
- "digest": "sha256:0f16457858b95d504e2a9e53558356a8f509f6ca8b011f550efd60bd8db469a4",
323
+ "digest": "sha256:3817d243ef01490be7375d7ed8bb0d00326f528b1fe0681bfd0d003c9932cc96",
324
324
  "summary": "Read-only publication control-plane snapshot evaluation APIs.",
325
325
  "capabilityGroup": "release-passport-trust",
326
326
  "audience": [
@@ -333,7 +333,7 @@
333
333
  "specifier": "@kungfu-tech/buildchain/buildchain-publication-authority",
334
334
  "export": "./buildchain-publication-authority",
335
335
  "target": "./packages/core/buildchain-publication-authority.js",
336
- "digest": "sha256:994218d8ca1474f4d58f637124a9e9393b832c68fbb0d90cfbe1dbeae8a1e2e2",
336
+ "digest": "sha256:46484b94389d78a2092c9ae60399020930d879abc847234ffe7cb69ec4f61161",
337
337
  "summary": "Buildchain-owned closed-world publication authority descriptor registry.",
338
338
  "capabilityGroup": "release-passport-trust",
339
339
  "audience": [
@@ -342,6 +342,19 @@
342
342
  ],
343
343
  "maturity": "stable"
344
344
  },
345
+ {
346
+ "specifier": "@kungfu-tech/buildchain/github-governance-authority",
347
+ "export": "./github-governance-authority",
348
+ "target": "./packages/core/github-governance-authority.js",
349
+ "digest": "sha256:045e129994f654fabb87bdc594c9fcd09b837fdf26cac8b90403bc2fd5074f91",
350
+ "summary": "Fail-closed GitHub ownership, effective-policy, managed-zone admission, rollout-plan, and immutable receipt APIs.",
351
+ "capabilityGroup": "governance-versioning",
352
+ "audience": [
353
+ "developer",
354
+ "agent"
355
+ ],
356
+ "maturity": "stable"
357
+ },
345
358
  {
346
359
  "specifier": "@kungfu-tech/buildchain/kfd-gate",
347
360
  "export": "./kfd-gate",
@@ -437,7 +450,7 @@
437
450
  "specifier": "@kungfu-tech/buildchain/buildchain-kfd-claims",
438
451
  "export": "./buildchain-kfd-claims",
439
452
  "target": "./packages/core/buildchain-kfd-claims.js",
440
- "digest": "sha256:c61f4ce244fae5030afc308661f95a87b72dcab00d1edb11c17a8d734d2fb5c6",
453
+ "digest": "sha256:fc916f55d366db8eb7270389fdaf6ac02e18bcd4fe5f1fdbdb1283e5fc4c9929",
441
454
  "summary": "Buildchain self KFD claim registry, witnesses, and public claim APIs.",
442
455
  "capabilityGroup": "kfd-trust",
443
456
  "audience": [