@kungfu-tech/buildchain 2.14.2 → 2.14.3-alpha.0

package/scripts/check-inventory.mjs

@@ -270,6 +270,9 @@ if (rootPackage.exports?.["./kfd-gate"] !== "./packages/core/kfd-gate.js") {
 if (rootPackage.exports?.["./release-passport"] !== "./packages/core/release-passport.js") {
   throw new Error("root package must export @kungfu-tech/buildchain/release-passport");
 }
+if (rootPackage.exports?.["./release-passport-contract"] !== "./packages/core/release-passport-contract.js") {
+  throw new Error("root package must export @kungfu-tech/buildchain/release-passport-contract");
+}
 if (rootPackage.exports?.["./release-propagation"] !== "./packages/core/release-propagation.js") {
   throw new Error("root package must export @kungfu-tech/buildchain/release-propagation");
 }
@@ -627,6 +630,9 @@ for (const requiredSnippet of [
   "--kfd-3-artifact-verify-cmd",
   "currently named `kfd-3`",
   "KFD-3 collaboration-interface release gate",
+  "release-passport-v1.schema.json",
+  "release-passport-check-manifest.json",
+  "Buildchain owns envelope aggregation",
 ]) {
   if (!releasePassportDoc.includes(requiredSnippet)) {
     throw new Error(`release passport doc missing KFD-1 gate snippet: ${requiredSnippet}`);
@@ -1071,7 +1077,7 @@ if (!badgeEndpointRegistry.badges?.some((entry) => entry.id === "buildchain-rele
   throw new Error("badge endpoint registry must include Buildchain Release Passport badge");
 }
 
-for (const siteFile of ["buildchain-site.json", "site-manifest.json", "badge-endpoint-registry.json", "publication-registry.json", "page-registry.json", "capability-registry.json", "cli-registry.json", "manual-registry.json", "node-api-registry.json", "workflow-registry.json", "controller-registry.json", "public-surface-audit.json", "release-model.json", "buildchain-contract.json"]) {
+for (const siteFile of ["buildchain-site.json", "site-manifest.json", "badge-endpoint-registry.json", "publication-registry.json", "page-registry.json", "capability-registry.json", "cli-registry.json", "manual-registry.json", "node-api-registry.json", "workflow-registry.json", "controller-registry.json", "public-surface-audit.json", "release-model.json", "release-passport-check-manifest.json", "schemas/release-passport-v1.schema.json", "buildchain-contract.json"]) {
   if (!fs.existsSync(path.join(root, "dist", "site", siteFile))) {
     throw new Error(`site bundle missing ${siteFile}`);
   }

package/scripts/generate-site-bundle.mjs

@@ -17,6 +17,10 @@ import {
 import {
   createReadmeBadgeEndpointRegistry,
 } from "../packages/core/readme-badges.js";
+import {
+  RELEASE_PASSPORT_SCHEMA,
+  createReleasePassportCheckManifest,
+} from "../packages/core/release-passport-contract.js";
 import {
   collectPublicSurfaceReverseAudit,
   enumerateActionInputs,
@@ -496,6 +500,7 @@ function nodeApiMeta(exportName) {
     "./artifact-passport": { group: "release-passport-trust", summary: "Artifact passport digest and evidence helper APIs." },
     "./artifact-verification-envelope": { group: "release-passport-trust", summary: "Sealed exact-root, lifecycle, identity, and existing KFD assessment inputs for KFX admission." },
     "./release-passport": { group: "release-passport-trust", summary: "Release passport collection, verification, explanation, and evidence APIs." },
+    "./release-passport-contract": { group: "release-passport-trust", summary: "Standalone release passport JSON Schema, ownership/check manifest, and structural validation APIs." },
     "./release-candidate": { group: "reusable-build", summary: "PR-stage release-candidate artifact, passport, and promote-only resolver APIs." },
     "./stable-candidate-ledger": { group: "governance-versioning", summary: "Immutable alpha candidate ledger, qualification, revocation, selection, and exact stable source-lock APIs." },
     "./release-propagation": { group: "site-and-propagation", summary: "Release propagation graph, plan, and exact upstream lock APIs." },
@@ -915,6 +920,8 @@ function buildSiteBundle() {
       entrypoint: "buildchain.release.json",
       bundle: "buildchain-release-bundle.tar.gz",
       contract: "kungfu-buildchain-release-passport",
+      schema: "schemas/release-passport-v1.schema.json",
+      checkManifest: "release-passport-check-manifest.json",
     },
     releasePropagation: {
       graphContract: "kungfu-buildchain-release-propagation-graph",
@@ -956,6 +963,8 @@ function buildSiteBundle() {
     contract: "kungfu-buildchain-artifact-schema-index",
     releasePassport: [
       "buildchain.release.json",
+      "release-passport-check-manifest.json",
+      "schemas/release-passport-v1.schema.json",
       "artifact-evidence.json",
       "product-mechanism.json",
       "impact.json",
@@ -981,6 +990,8 @@ function buildSiteBundle() {
       "public-surface-audit.json",
       "release-model.json",
       "artifact-schemas.json",
+      "release-passport-check-manifest.json",
+      "schemas/release-passport-v1.schema.json",
       "buildchain-contract.json",
       "kfd-claims.json",
       "product-mechanism.json",
@@ -1090,6 +1101,8 @@ function buildSiteBundle() {
       "publication-authority-registry.json",
       "public-surface-audit.json",
       "artifact-schemas.json",
+      "release-passport-check-manifest.json",
+      "schemas/release-passport-v1.schema.json",
       "buildchain-contract.json",
       "kfd-upstream-aggregate.json",
       "kfd-claims.json",
@@ -1260,6 +1273,8 @@ function buildSiteBundle() {
     "public-surface-audit.json": publicSurfaceAudit,
     "release-model.json": releaseModel,
     "artifact-schemas.json": artifactSchemas,
+    "release-passport-check-manifest.json": createReleasePassportCheckManifest(),
+    "schemas/release-passport-v1.schema.json": RELEASE_PASSPORT_SCHEMA,
     "badge-endpoint-registry.json": badgeEndpointRegistry,
     "publication-registry.json": publicationRegistry,
     "buildchain-contract.json": createBuildchainContractWorld({ root, controllerRegistry }),

package/scripts/validate-package-manager-contract.mjs

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+
+import fs from "node:fs";
+import path from "node:path";
+import { validatePackageManagerContract } from "../packages/core/package-manager.js";
+
+const cwd = path.resolve(
+  process.env.BUILDCHAIN_PACKAGE_MANAGER_CWD || process.argv[2] || process.cwd(),
+);
+const expectedManager = process.env.BUILDCHAIN_EXPECTED_PACKAGE_MANAGER || "";
+const contract = validatePackageManagerContract({ cwd, expectedManager });
+
+if (process.env.GITHUB_OUTPUT) {
+  fs.appendFileSync(
+    process.env.GITHUB_OUTPUT,
+    `name=${contract.name}\ndeclared-spec=${contract.declaredSpec}\ndeclared-version=${contract.declaredVersion}\n`,
+  );
+}
+
+console.log(JSON.stringify({
+  schemaVersion: 1,
+  contract: "kungfu-buildchain-consumer-package-manager",
+  ...contract,
+}, null, 2));