@kungfu-tech/buildchain 2.14.3-alpha.2 → 2.14.3-alpha.3

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "2.14.3-alpha.2",
+    "version": "2.14.3-alpha.3",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v2",
@@ -168,7 +168,7 @@
         "GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
       ],
       "breakingDigest": "sha256:1f476fb9a4854b362c4b24cef89a3c7675d7d63baf3bc828d7b8ae7d2787cead",
-      "auditDigest": "sha256:b083a71f80052c013468d48473ec0f8f919161e38a3607feebe99edcd3b32460"
+      "auditDigest": "sha256:1cdf90721ff2432378b5628347627824affb25fed3372573969cd16603858864"
     },
     {
       "contractVersion": 1,
@@ -2830,5 +2830,5 @@
     }
   ],
   "compatibilityDigest": "sha256:edc3653e5cb34efd97065a6941db16140bbf375a565bbcf329d9d795bb07676f",
-  "contractDigest": "sha256:5ee3923ae7dc5e6633b0ef0be62a4f28611946f5333bb28c9c8229e88c149599"
+  "contractDigest": "sha256:abebb2fdfa6e3fe924f4fbf09992ce30005fd5fc6430e84d9d0eb553b809564c"
 }

package/dist/site/buildchain-site.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-bundle",
-  "generatedAt": "2026-07-19T01:05:14.449Z",
-  "publishedAt": "2026-07-19T01:05:14.449Z",
+  "generatedAt": "2026-07-19T02:01:22.383Z",
+  "publishedAt": "2026-07-19T02:01:22.383Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "2a19346a43d0a6be49ca4d6e76fda6c7d3b63c9d",
+  "sourceRevision": "5903af839d5a3de2bce5c6231d6180181540f3d8",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "2.14.3-alpha.2",
+    "version": "2.14.3-alpha.3",
     "versionSource": "package.json#version"
   },
   "source": {

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "2.14.3-alpha.2",
+    "version": "2.14.3-alpha.3",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-07-19T01:05:14.449Z",
-  "publishedAt": "2026-07-19T01:05:14.449Z",
+  "generatedAt": "2026-07-19T02:01:22.383Z",
+  "publishedAt": "2026-07-19T02:01:22.383Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "2a19346a43d0a6be49ca4d6e76fda6c7d3b63c9d",
+  "sourceRevision": "5903af839d5a3de2bce5c6231d6180181540f3d8",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "2.14.3-alpha.2",
+    "version": "2.14.3-alpha.3",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-07-19T01:05:14.449Z",
-  "publishedAt": "2026-07-19T01:05:14.449Z",
+  "generatedAt": "2026-07-19T02:01:22.383Z",
+  "publishedAt": "2026-07-19T02:01:22.383Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "2a19346a43d0a6be49ca4d6e76fda6c7d3b63c9d",
+  "sourceRevision": "5903af839d5a3de2bce5c6231d6180181540f3d8",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "2.14.3-alpha.2",
+    "version": "2.14.3-alpha.3",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "2.14.3-alpha.2",
+  "version": "2.14.3-alpha.3",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",

package/scripts/generate-channel-promotion-workflow.mjs

@@ -90,29 +90,31 @@ function publicOutputs(outputBlock) {
   return [...routed, ...forwarded].join("\n");
 }
 
-function forwardedInputs(inputNames) {
-  return inputNames.map((name) => {
-    const routed = {
-      "buildchain-ref": "runtime-ref",
-      "buildchain-contract-lock-path": "contract-lock-path",
-      channel: "publication-channel",
-      "target-ref": "target-ref",
-      "promotion-router-ref": "router-ref",
-      "promotion-router-sha": "router-sha",
-      "promotion-shell-ref": "shell-ref",
-      "promotion-shell-sha": "shell-sha",
-      "promotion-runtime-ref": "runtime-ref",
-      "promotion-runtime-sha": "runtime-sha",
-      "promotion-contract-lock-path": "contract-lock-path",
-      "promotion-contract-lock-digest": "contract-lock-digest",
-      "promotion-publication-channel": "publication-channel",
-      "promotion-target-ref": "target-ref",
-      "promotion-override-used": "override-used",
-    }[name];
-    return routed
-      ? `      ${name}: \${{ needs.resolve-promotion.outputs.${routed} }}`
-      : `      ${name}: \${{ inputs.${name} }}`;
-  }).join("\n");
+function forwardedInputs(inputNames, { includeInternal = true } = {}) {
+  return inputNames
+    .filter((name) => includeInternal || !internalInputs.has(name))
+    .map((name) => {
+      const routed = {
+        "buildchain-ref": "runtime-ref",
+        "buildchain-contract-lock-path": "contract-lock-path",
+        channel: "publication-channel",
+        "target-ref": "target-ref",
+        "promotion-router-ref": "router-ref",
+        "promotion-router-sha": "router-sha",
+        "promotion-shell-ref": "shell-ref",
+        "promotion-shell-sha": "shell-sha",
+        "promotion-runtime-ref": "runtime-ref",
+        "promotion-runtime-sha": "runtime-sha",
+        "promotion-contract-lock-path": "contract-lock-path",
+        "promotion-contract-lock-digest": "contract-lock-digest",
+        "promotion-publication-channel": "publication-channel",
+        "promotion-target-ref": "target-ref",
+        "promotion-override-used": "override-used",
+      }[name];
+      return routed
+        ? `      ${name}: \${{ needs.resolve-promotion.outputs.${routed} }}`
+        : `      ${name}: \${{ inputs.${name} }}`;
+    }).join("\n");
 }
 
 function validateWorkflowRoute(name, route, expectedLogicalRef) {
@@ -126,6 +128,9 @@ function validateWorkflowRoute(name, route, expectedLogicalRef) {
   if (!/^(?:v[0-9]+(?:-alpha)?|[0-9a-f]{40})$/.test(route.callRef || "")) {
     throw new Error(`promotion shell ${name} callRef must be an official channel ref or exact SHA`);
   }
+  if (typeof route.forwardInternalInputs !== "boolean") {
+    throw new Error(`promotion shell ${name} forwardInternalInputs must be boolean`);
+  }
   return { ...route };
 }
 
@@ -145,11 +150,13 @@ export function generateChannelPromotionWorkflow(source, { major = 2, shellRouti
       logicalRef: `v${major}-alpha`,
       callRef: `v${major}-alpha`,
       workflowPath: ".github/workflows/.release-candidate-promote.yml",
+      forwardInternalInputs: true,
     },
     stable: {
       logicalRef: `v${major}`,
       callRef: `v${major}`,
       workflowPath: ".github/workflows/.release-candidate-promote.yml",
+      forwardInternalInputs: true,
     },
   };
   const alphaRoute = validateWorkflowRoute("alpha", routes.alpha, `v${major}-alpha`);
@@ -161,7 +168,12 @@ export function generateChannelPromotionWorkflow(source, { major = 2, shellRouti
   for (const required of ["buildchain-ref", "buildchain-contract-lock-path", "channel", "target-ref", ...internalInputs]) {
     if (!inputNames.includes(required)) throw new Error(`advanced promotion workflow missing input: ${required}`);
   }
-  const forwarded = forwardedInputs(inputNames);
+  const alphaForwarded = forwardedInputs(inputNames, {
+    includeInternal: alphaRoute.forwardInternalInputs,
+  });
+  const stableForwarded = forwardedInputs(inputNames, {
+    includeInternal: stableRoute.forwardInternalInputs,
+  });
   return `# Generated by scripts/generate-channel-promotion-workflow.mjs. Do not edit directly.
 name: Release Candidate Promote
 
@@ -356,7 +368,7 @@ jobs:
       id-token: write
       issues: write
     with:
-${forwarded}
+${alphaForwarded}
     secrets: inherit
 
   stable:
@@ -371,7 +383,7 @@ ${forwarded}
       id-token: write
       issues: write
     with:
-${forwarded}
+${stableForwarded}
     secrets: inherit
 `;
 }