@kungfu-tech/buildchain 2.14.3-alpha.0 → 2.14.3-alpha.1

package/dist/site/capability-registry.json

@@ -287,7 +287,7 @@
         "pageCount": 6,
         "cliCommandCount": 0,
         "nodeApiCount": 2,
-        "workflowCount": 31,
+        "workflowCount": 32,
         "actionCount": 0
       },
       "manuals": [

package/dist/site/controller-registry.json

@@ -1345,8 +1345,8 @@
       "id": "release-candidate-promotion",
       "version": 1,
       "workflow": {
-        "id": "release-candidate-promote",
-        "path": ".github/workflows/release-candidate-promote.yml"
+        "id": ".release-candidate-promote",
+        "path": ".github/workflows/.release-candidate-promote.yml"
       },
       "inputs": {
         "BUILDCHAIN_ISSUE_APP_ID": {
@@ -1445,6 +1445,50 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "promotion-contract-lock-digest": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-contract-lock-path": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
+        "promotion-override-used": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-publication-channel": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-router-ref": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-router-sha": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-runtime-ref": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-runtime-sha": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-shell-ref": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-shell-sha": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-target-ref": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "publication-admission-json": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -1655,7 +1699,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:2507d132710f66d3ae6ffdb18f5e66172707b8e0f9ad9e888f7422fdacc99133"
+      "digest": "sha256:6a531c572b59eb3b8aa5d47df3658f8f438a0d026468dd13b1a6642a3ea8c425"
     },
     {
       "schemaVersion": 1,
@@ -1773,5 +1817,5 @@
       "digest": "sha256:ede9eba43b87cf19330d5f8203a1585bf066aa9affc9cac0f43230ac76b8580d"
     }
   ],
-  "digest": "sha256:2c6a3a4dce27e0d76baae1c9aeb4d3428866fe8b4c4022a8c582b054dace02fd"
+  "digest": "sha256:5f771d5b2f481a28afc48f516685f50985c1d51391857cdf04e3238c271fecc8"
 }

package/dist/site/kfd-claims.json

@@ -14,17 +14,17 @@
   },
   "runtimeContract": {
     "contract": "kungfu-buildchain-runtime-contract-world",
-    "compatibilityDigest": "sha256:af162b86ab4506e9b5f1d3c59b41f3fd57fbad79ff4d749a7f12ff16460517f8",
+    "compatibilityDigest": "sha256:edc3653e5cb34efd97065a6941db16140bbf375a565bbcf329d9d795bb07676f",
     "majorLine": "v2"
   },
   "publicSurfaceReverseAudit": {
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "056a3d5e87f0813bbddb47cf4f3c8db43458b23bcf9fbe4b3d0ca8b80c38bbdc",
+    "sha256": "01e8843cfb9848464fdc5402afb1760f3b6f7c5a79b4a9251cfd91010217c665",
     "summary": {
       "cliCommandCount": 83,
-      "workflowCount": 48,
+      "workflowCount": 49,
       "actionCount": 4,
       "sitePageCount": 50,
       "docCommandRefCount": 258,
@@ -166,6 +166,7 @@
         "packages/core/buildchain-contract.js",
         "scripts/buildchain-contract-lock.mjs",
         ".github/workflows/.build.yml",
+        ".github/workflows/.release-candidate-promote.yml",
         ".github/workflows/release-candidate-promote.yml",
         "docs/reusable-build-surface.md"
       ],
@@ -181,6 +182,7 @@
         "actions/promote-buildchain-ref/index.js",
         "actions/promote-buildchain-ref/action.yml",
         "scripts/ensure-github-release.mjs",
+        ".github/workflows/.release-candidate-promote.yml",
         ".github/workflows/release-candidate-promote.yml",
         "docs/release-governance.md"
       ],
@@ -209,6 +211,7 @@
       "sourcePaths": [
         "scripts/npm-publish-transaction.mjs",
         "actions/promote-buildchain-ref/index.js",
+        ".github/workflows/.release-candidate-promote.yml",
         ".github/workflows/release-candidate-promote.yml",
         "docs/publish-transaction.md"
       ],
@@ -225,10 +228,10 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "056a3d5e87f0813bbddb47cf4f3c8db43458b23bcf9fbe4b3d0ca8b80c38bbdc",
+      "sha256": "01e8843cfb9848464fdc5402afb1760f3b6f7c5a79b4a9251cfd91010217c665",
       "summary": {
         "cliCommandCount": 83,
-        "workflowCount": 48,
+        "workflowCount": 49,
         "actionCount": 4,
         "sitePageCount": 50,
         "docCommandRefCount": 258,
@@ -2764,6 +2767,91 @@
           ],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:.release-candidate-promote",
+          "name": "workflow:.release-candidate-promote",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/.release-candidate-promote.yml",
+          "evidencePath": ".github/workflows/.release-candidate-promote.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 70,
+          "inputs": [
+            "allow-repository",
+            "artifact-name",
+            "artifact-patterns",
+            "branch-protection-bypass-apps",
+            "branch-protection-bypass-teams",
+            "branch-protection-bypass-users",
+            "buildchain-contract-compatibility-policy",
+            "buildchain-contract-drift-issue-mode",
+            "buildchain-contract-lock-path",
+            "buildchain-ref",
+            "buildchain-repository",
+            "channel",
+            "dry-run",
+            "github-release",
+            "github-release-notes",
+            "github-release-title",
+            "package-manager",
+            "promotion-contract-lock-digest",
+            "promotion-contract-lock-path",
+            "promotion-override-used",
+            "promotion-publication-channel",
+            "promotion-router-ref",
+            "promotion-router-sha",
+            "promotion-runtime-ref",
+            "promotion-runtime-sha",
+            "promotion-shell-ref",
+            "promotion-shell-sha",
+            "promotion-target-ref",
+            "publication-admission-json",
+            "publication-auto-admission",
+            "publication-auto-no-gate",
+            "publication-consumer-predicate-id",
+            "publication-consumer-qualification-command",
+            "publication-control-plane-audit-json",
+            "publication-expected-json",
+            "publication-gate-aggregate-json",
+            "publication-package-name",
+            "publication-product",
+            "publication-publisher-workflow-path",
+            "publication-runner-provenance-json",
+            "publication-target",
+            "publication-used-nonces-json",
+            "publication-used-qualification-nonces-json",
+            "publish-artifact-kind",
+            "publish-command",
+            "publish-dist-tag",
+            "publish-mode",
+            "publish-package-main",
+            "publish-package-set-order",
+            "publish-required-artifacts-json",
+            "publish-target",
+            "release-candidate-workflow-file",
+            "release-candidate-workflow-name",
+            "release-passport",
+            "release-passport-buildchain-self-kfd",
+            "release-passport-impact-json",
+            "release-passport-kfd-1-witness-jsons",
+            "release-passport-kfd-2-claim-jsons",
+            "release-passport-kfd-3-artifact-verify-command",
+            "release-passport-kfd-3-artifact-witness-jsons",
+            "release-passport-kfd-3-prebuild-witness-jsons",
+            "release-passport-output-dir",
+            "release-passport-platform-manifest-paths",
+            "release-passport-product-name",
+            "required-artifact-count",
+            "required-status-check",
+            "runner-preset",
+            "target-ref",
+            "target-sha",
+            "trusted-publishing"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:.release-docker",
           "name": "workflow:.release-docker",
@@ -3617,7 +3705,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 59,
+          "inputCount": 62,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -3625,11 +3713,14 @@
             "branch-protection-bypass-apps",
             "branch-protection-bypass-teams",
             "branch-protection-bypass-users",
+            "buildchain-alpha-contract-lock-path",
+            "buildchain-channel",
             "buildchain-contract-compatibility-policy",
             "buildchain-contract-drift-issue-mode",
             "buildchain-contract-lock-path",
             "buildchain-ref",
             "buildchain-repository",
+            "buildchain-stable-contract-lock-path",
             "channel",
             "dry-run",
             "github-release",
@@ -3836,7 +3927,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 59,
+          "inputCount": 60,
           "inputs": [
             "allow-repository",
             "branch-protection-bypass-apps",
@@ -3886,6 +3977,7 @@
             "release-passport-output-dir",
             "release-passport-platform-manifest-paths",
             "release-passport-product-name",
+            "release-passport-promotion-routing-json",
             "require-governance",
             "require-publication-qualification",
             "require-publish-source-lock",
@@ -4626,6 +4718,17 @@
         "participantFacing": true,
         "public": true
       },
+      {
+        "id": "control:.github/workflows/.release-candidate-promote.yml",
+        "name": "control:.github/workflows/.release-candidate-promote.yml",
+        "kind": "workflow",
+        "sourcePath": ".github/workflows/.release-candidate-promote.yml",
+        "evidencePath": ".github/workflows/.release-candidate-promote.yml",
+        "availability": "shipped",
+        "visibility": "public",
+        "participantFacing": true,
+        "public": true
+      },
       {
         "id": "control:.github/workflows/release-candidate-promote.yml",
         "name": "control:.github/workflows/release-candidate-promote.yml",
@@ -4717,6 +4820,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 305
+    "publicSurfaceCount": 307
   }
 }

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "2.14.3-alpha.0",
+    "version": "2.14.3-alpha.1",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/manual-registry.json

@@ -79,7 +79,7 @@
       "title": "Release Candidate Passport",
       "path": "docs/release-candidate.md",
       "plane": "verify",
-      "digest": "sha256:1fc581cf1b4e4a202464c8d6671b3bff12d0b349760246a951e88ef524f99e6b",
+      "digest": "sha256:81463a74dfe3d337768797b5b47f8cb3a22389312a917447f9b0e6096ab4f90a",
       "capabilityGroup": "reusable-build",
       "audience": [
         "release-operator",
@@ -205,7 +205,7 @@
       "title": "Migration inventory",
       "path": "docs/migration-inventory.md",
       "plane": "verify",
-      "digest": "sha256:80018cf78785431e67bbc5278d82dda80d0baa320cdb5e4abda26a0b05e5c0bc",
+      "digest": "sha256:08daa7d0b42543c1d1dacf1f56f461f0e7a7ca9e25d0859e39599ceb97054ee0",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer",
@@ -302,7 +302,7 @@
       "title": "Reusable build surface",
       "path": "docs/reusable-build-surface.md",
       "plane": "use",
-      "digest": "sha256:a2092c8064332cec9a4be852b24d94f90625cb45f885c4c3208f7068a643a3f0",
+      "digest": "sha256:7b745037fedafa1bc2f8ce65f32bb7e887988df2bfe2439694da418d482f6929",
       "capabilityGroup": "reusable-build",
       "audience": [
         "consumer",
@@ -329,7 +329,7 @@
       "title": "Release governance",
       "path": "docs/release-governance.md",
       "plane": "why",
-      "digest": "sha256:e64ffd6183eaa7b73f8c0c133a645ced22212bca70c9609ad5f667cf3830aaae",
+      "digest": "sha256:d25a2ceb6cdc1a1db321e7d2a6aa8a454fb4d7a10560177604f8ecb5801a6e66",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer",

package/dist/site/node-api-registry.json

@@ -86,7 +86,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-contract",
       "export": "./buildchain-contract",
       "target": "./packages/core/buildchain-contract.js",
-      "digest": "sha256:a7af059ca8fd80a3e12485d3f756276326a1593edc40e3e1518ff709c47399fe",
+      "digest": "sha256:f5959c9260e04c9779396c50bd352956012da9ddb6d55532efc64a4536236dfa",
       "summary": "Runtime contract world and compatibility digest APIs for floating-ref drift checks.",
       "capabilityGroup": "governance-versioning",
       "audience": [
@@ -99,7 +99,7 @@
       "specifier": "@kungfu-tech/buildchain/controller-evidence",
       "export": "./controller-evidence",
       "target": "./packages/core/controller-evidence.js",
-      "digest": "sha256:3c9cf557ee0e2e4376335bb7d0e61b6e8c9a1d8699962dd8a1e7adc529e13f89",
+      "digest": "sha256:074c9bd73addbd33e03a4fd251ad27e7fe4bac51c25d0747d66561d31d738bab",
       "summary": "Project-independent controller descriptors, source/runtime-bound plans, receipts, aggregates, and validation APIs.",
       "capabilityGroup": "reusable-build",
       "audience": [
@@ -294,7 +294,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-publication-authority",
       "export": "./buildchain-publication-authority",
       "target": "./packages/core/buildchain-publication-authority.js",
-      "digest": "sha256:5c1c4ec0ef4cbda07ae4dead6423f800ecad6d45f02f19745aef23513fae45d4",
+      "digest": "sha256:2c999f7b237e532aceb2221ce504144aac26357ed3057b47f853b15f4eb76298",
       "summary": "Buildchain-owned closed-world publication authority descriptor registry.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -346,7 +346,7 @@
       "specifier": "@kungfu-tech/buildchain/release-passport",
       "export": "./release-passport",
       "target": "./packages/core/release-passport.js",
-      "digest": "sha256:af307129d9df51a1a0d5f7cfff742b0db7d9f8f04dd810cf97a62c79e2d3a726",
+      "digest": "sha256:05abae7c71444b0c48c097a4363218ed3ae7d652677588f1cf2c457a358cc4c1",
       "summary": "Release passport collection, verification, explanation, and evidence APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -398,7 +398,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-kfd-claims",
       "export": "./buildchain-kfd-claims",
       "target": "./packages/core/buildchain-kfd-claims.js",
-      "digest": "sha256:e9178d4fa1d5aba1063aacf3f0b4fa0d9523c2379824386ac65a21c8262ac0b4",
+      "digest": "sha256:316ca2f86a3934ccacd13b2321e2c10701337638266793d230c687c2fe963e84",
       "summary": "Buildchain self KFD claim registry, witnesses, and public claim APIs.",
       "capabilityGroup": "kfd-trust",
       "audience": [