@kungfu-tech/buildchain 2.14.3 → 2.14.4-alpha.1

package/dist/site/capability-registry.json

@@ -84,7 +84,7 @@
         "manualCount": 4,
         "pageCount": 16,
         "cliCommandCount": 4,
-        "nodeApiCount": 4,
+        "nodeApiCount": 5,
         "workflowCount": 4,
         "actionCount": 2
       },

package/dist/site/controller-registry.json

@@ -345,6 +345,10 @@
             "id": "resolve-source",
             "required": true
           },
+          {
+            "id": "anchored-release-preflight",
+            "required": false
+          },
           {
             "id": "build",
             "required": true
@@ -370,7 +374,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:367be236280f2597ffefc49680feb106b4cf9e8f5fb9420713351f075a168c4a"
+      "digest": "sha256:0dd7ebe7b7543ca4f295e0634ed1434bb4571d2ffb2f4b6ab25794eb2ee5c431"
     },
     {
       "schemaVersion": 1,
@@ -1601,6 +1605,14 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
+        "release-passport-invariant-passport-command": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
+        "release-passport-invariant-passport-jsons": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "release-passport-kfd-1-witness-jsons": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -1699,7 +1711,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:6a531c572b59eb3b8aa5d47df3658f8f438a0d026468dd13b1a6642a3ea8c425"
+      "digest": "sha256:fe4bb0bd543e7db7ef38950354764608639f5b11677a4b8e02caa097900d6898"
     },
     {
       "schemaVersion": 1,
@@ -1794,6 +1806,18 @@
             "id": "write-lock",
             "required": true
           },
+          {
+            "id": "prepare-consumer",
+            "required": false
+          },
+          {
+            "id": "refresh-badges",
+            "required": false
+          },
+          {
+            "id": "verify-consumer",
+            "required": false
+          },
           {
             "id": "open-pr",
             "required": false
@@ -1814,8 +1838,8 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:ede9eba43b87cf19330d5f8203a1585bf066aa9affc9cac0f43230ac76b8580d"
+      "digest": "sha256:f97656a8df0758c8e404d5b7c387529256a1ec45d1748f8efb6847a3256b1216"
     }
   ],
-  "digest": "sha256:5f771d5b2f481a28afc48f516685f50985c1d51391857cdf04e3238c271fecc8"
+  "digest": "sha256:89d6ba121382c2ba6c81cf1170e5c2e66256d893ee3fbb131af93a018950b891"
 }

package/dist/site/kfd-claims.json

@@ -21,7 +21,7 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "2475c0ca49560ba9fb686f463a419644ddabd997fdcaaaee206fe6c3a4156ae1",
+    "sha256": "4cecf843157266d233e31c16c94d78ee34e7f965e1aae035b4915836d3a1ed13",
     "summary": {
       "cliCommandCount": 83,
       "workflowCount": 49,
@@ -228,7 +228,7 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "2475c0ca49560ba9fb686f463a419644ddabd997fdcaaaee206fe6c3a4156ae1",
+      "sha256": "4cecf843157266d233e31c16c94d78ee34e7f965e1aae035b4915836d3a1ed13",
       "summary": {
         "cliCommandCount": 83,
         "workflowCount": 49,
@@ -1054,6 +1054,18 @@
           "public": true,
           "packageExport": "./artifact-verification-envelope"
         },
+        {
+          "id": "export:./anchored-version-material",
+          "name": "@kungfu-tech/buildchain/anchored-version-material",
+          "kind": "package-export",
+          "sourcePath": "packages/core/anchored-version-material.js",
+          "evidencePath": "packages/core/anchored-version-material.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./anchored-version-material"
+        },
         {
           "id": "export:./buildchain-contract",
           "name": "@kungfu-tech/buildchain/buildchain-contract",
@@ -2777,7 +2789,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 70,
+          "inputCount": 72,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -2835,6 +2847,8 @@
             "release-passport",
             "release-passport-buildchain-self-kfd",
             "release-passport-impact-json",
+            "release-passport-invariant-passport-command",
+            "release-passport-invariant-passport-jsons",
             "release-passport-kfd-1-witness-jsons",
             "release-passport-kfd-2-claim-jsons",
             "release-passport-kfd-3-artifact-verify-command",
@@ -3705,7 +3719,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 62,
+          "inputCount": 64,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -3755,6 +3769,8 @@
             "release-passport",
             "release-passport-buildchain-self-kfd",
             "release-passport-impact-json",
+            "release-passport-invariant-passport-command",
+            "release-passport-invariant-passport-jsons",
             "release-passport-kfd-1-witness-jsons",
             "release-passport-kfd-2-claim-jsons",
             "release-passport-kfd-3-artifact-verify-command",
@@ -3927,7 +3943,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 60,
+          "inputCount": 62,
           "inputs": [
             "allow-repository",
             "branch-protection-bypass-apps",
@@ -3969,6 +3985,8 @@
             "release-passport-build-summary-path",
             "release-passport-buildchain-self-kfd",
             "release-passport-impact-json",
+            "release-passport-invariant-passport-command",
+            "release-passport-invariant-passport-jsons",
             "release-passport-kfd-1-witness-jsons",
             "release-passport-kfd-2-claim-jsons",
             "release-passport-kfd-3-artifact-verify-command",
@@ -4820,6 +4838,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 307
+    "publicSurfaceCount": 308
   }
 }

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "2.14.3",
+    "version": "2.14.4-alpha.1",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/manual-registry.json

@@ -9,7 +9,7 @@
       "title": "Buildchain documentation map",
       "path": "docs/MAP.md",
       "plane": "use",
-      "digest": "sha256:308bc83b7403f407ac1be13d7c19000fa249f4bedf0c9c90b2f701e5163471a3",
+      "digest": "sha256:fa818a541ee2d70a0cc08caec85bf4c1eb20ff5118be0cc2149062fed50f4620",
       "capabilityGroup": "getting-started",
       "audience": [
         "agent",
@@ -36,7 +36,7 @@
       "title": "Release Passport protocol",
       "path": "docs/release-passport.md",
       "plane": "verify",
-      "digest": "sha256:0029014ffab7d7228a12d8b92326b78cf6757a41f481b661c5997e2cef06d3cc",
+      "digest": "sha256:2dec5e7cd0050815d17c30dbbfd2f5c3c987f55a4558514118538d81a9c562b0",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator",
@@ -246,7 +246,7 @@
       "title": "CLI and npm package",
       "path": "docs/cli.md",
       "plane": "use",
-      "digest": "sha256:1733f9377938a16e6de77511546be7de67c5ab8816220d693fd46f55450a5148",
+      "digest": "sha256:733a43df58e6fa643ef529d8736fbdbea053b5b58e5fbe445b595ea1e25861f6",
       "capabilityGroup": "api-cli-reference",
       "audience": [
         "agent",
@@ -288,7 +288,7 @@
       "title": "Lifecycle protocol",
       "path": "docs/lifecycle-protocol.md",
       "plane": "use",
-      "digest": "sha256:3a03359ec58db04f334303256b02020f6039616e8802c19dfc00e76bbb05bf18",
+      "digest": "sha256:71552baae51146fa790d40af02d5d5b3a1a4aa0d9764af09907bb05d3360b0cc",
       "capabilityGroup": "reusable-build",
       "audience": [
         "consumer",
@@ -329,7 +329,7 @@
       "title": "Release governance",
       "path": "docs/release-governance.md",
       "plane": "why",
-      "digest": "sha256:d25a2ceb6cdc1a1db321e7d2a6aa8a454fb4d7a10560177604f8ecb5801a6e66",
+      "digest": "sha256:cea8921c430b208ec127af1800b58be21812ea07066998eb940ea1ac53738f2f",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer",
@@ -371,7 +371,7 @@
       "title": "Versioning",
       "path": "docs/versioning.md",
       "plane": "why",
-      "digest": "sha256:e856ec8aee11ff4bd2760425a8950538a91245cd5624c22c8768af50d6b1a8ce",
+      "digest": "sha256:10ec868fcb3fd58ae35b54ecd8ccd9a4556516f460c262f0c1ee41c81bdbc264",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer"

package/dist/site/node-api-registry.json

@@ -8,7 +8,7 @@
       "specifier": "@kungfu-tech/buildchain",
       "export": ".",
       "target": "./packages/core/index.js",
-      "digest": "sha256:1863f8af4327bf4d77b46d0646043b6675c0094656edb6ba69f221c7b1b8da82",
+      "digest": "sha256:9c2625a1b7951363c478f83f8b352ef918974f084aadc0bc68945ac43e5852ab",
       "summary": "Root toolkit export for Buildchain's public Node API.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -47,7 +47,7 @@
       "specifier": "@kungfu-tech/buildchain/core",
       "export": "./core",
       "target": "./packages/core/index.js",
-      "digest": "sha256:1863f8af4327bf4d77b46d0646043b6675c0094656edb6ba69f221c7b1b8da82",
+      "digest": "sha256:9c2625a1b7951363c478f83f8b352ef918974f084aadc0bc68945ac43e5852ab",
       "summary": "Alias for the root public toolkit export.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -82,11 +82,24 @@
       ],
       "maturity": "stable"
     },
+    {
+      "specifier": "@kungfu-tech/buildchain/anchored-version-material",
+      "export": "./anchored-version-material",
+      "target": "./packages/core/anchored-version-material.js",
+      "digest": "sha256:932eaf178ba56d4a20eecaaac70e27d094512dcf0557b5106a4e531fe39d19c2",
+      "summary": "Anchored/manual derived version material preflight, exact-tree binding, and digest evidence APIs.",
+      "capabilityGroup": "reusable-build",
+      "audience": [
+        "developer",
+        "agent"
+      ],
+      "maturity": "stable"
+    },
     {
       "specifier": "@kungfu-tech/buildchain/buildchain-contract",
       "export": "./buildchain-contract",
       "target": "./packages/core/buildchain-contract.js",
-      "digest": "sha256:f5959c9260e04c9779396c50bd352956012da9ddb6d55532efc64a4536236dfa",
+      "digest": "sha256:17246bb855b53a2fea713ecc8e372705ec75636527d786e203f6faf445172193",
       "summary": "Runtime contract world and compatibility digest APIs for floating-ref drift checks.",
       "capabilityGroup": "governance-versioning",
       "audience": [
@@ -99,7 +112,7 @@
       "specifier": "@kungfu-tech/buildchain/controller-evidence",
       "export": "./controller-evidence",
       "target": "./packages/core/controller-evidence.js",
-      "digest": "sha256:074c9bd73addbd33e03a4fd251ad27e7fe4bac51c25d0747d66561d31d738bab",
+      "digest": "sha256:0ec292215c9bfd755023916375622b6c5e759966fe31cc355404a0bbdd518384",
       "summary": "Project-independent controller descriptors, source/runtime-bound plans, receipts, aggregates, and validation APIs.",
       "capabilityGroup": "reusable-build",
       "audience": [
@@ -346,7 +359,7 @@
       "specifier": "@kungfu-tech/buildchain/release-passport",
       "export": "./release-passport",
       "target": "./packages/core/release-passport.js",
-      "digest": "sha256:05abae7c71444b0c48c097a4363218ed3ae7d652677588f1cf2c457a358cc4c1",
+      "digest": "sha256:dab5375c40b77245b04a5d86667ea1608a24f4a8ff804d301f05e7345605ce33",
       "summary": "Release passport collection, verification, explanation, and evidence APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -359,7 +372,7 @@
       "specifier": "@kungfu-tech/buildchain/release-passport-contract",
       "export": "./release-passport-contract",
       "target": "./packages/core/release-passport-contract.js",
-      "digest": "sha256:230863e62b63bce897f8ea51859c958a3c8aacf38b87ed9640bdada3c9383da6",
+      "digest": "sha256:b91d4fd2d830b91445c56f72d75e4dc4e7e69094181154a32a2780f86d81d317",
       "summary": "Standalone release passport JSON Schema, ownership/check manifest, and structural validation APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -412,7 +425,7 @@
     {
       "id": "cli-and-node-package",
       "path": "docs/cli.md",
-      "digest": "sha256:1733f9377938a16e6de77511546be7de67c5ab8816220d693fd46f55450a5148"
+      "digest": "sha256:733a43df58e6fa643ef529d8736fbdbea053b5b58e5fbe445b595ea1e25861f6"
     },
     {
       "id": "build-facts",