@kungfu-tech/buildchain 2.14.9 → 2.14.10-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -3690,7 +3690,7 @@
3690
3690
  "pageRegistryPath": "dist/site/page-registry.json",
3691
3691
  "cliRegistryDigest": "90c8650f870c350ca187c612c37f2459dcbfe265aa9b1d5b375ee5c4fb31fab6",
3692
3692
  "workflowRegistryDigest": "02950eef2769b1bd2d899099ef23c7b9ae716b18d602e25aef169d788bc6ece0",
3693
- "pageRegistryDigest": "ba33a665dd4e62a02720dda7c509aef3a42b13ce38848436778c52932478d46f"
3693
+ "pageRegistryDigest": "521d9058bd09749feb667de49c137b22059a1676909d9264faf19c27121a1d5a"
3694
3694
  },
3695
3695
  "comparison": {
3696
3696
  "missingCliRegistry": [],
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-publication-release-registry",
4
- "generatedAt": "2026-07-21T16:28:43.184Z",
5
- "publishedAt": "2026-07-21T16:28:43.184Z",
4
+ "generatedAt": "2026-07-21T17:31:59.856Z",
5
+ "publishedAt": "2026-07-21T17:31:59.856Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "f4bd946a9a6cd078fc35beb8ef9ff03d5791a0d8",
22
+ "sourceRevision": "35ed4637b21d843edacf0c981f18c7e7405ef4e7",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -32,7 +32,7 @@
32
32
  },
33
33
  "package": {
34
34
  "name": "@kungfu-tech/buildchain",
35
- "version": "2.14.9",
35
+ "version": "2.14.10-alpha.1",
36
36
  "versionSource": "package.json#version"
37
37
  },
38
38
  "sourceKind": "package-site-bundle",
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-manifest",
4
- "generatedAt": "2026-07-21T16:28:43.184Z",
5
- "publishedAt": "2026-07-21T16:28:43.184Z",
4
+ "generatedAt": "2026-07-21T17:31:59.856Z",
5
+ "publishedAt": "2026-07-21T17:31:59.856Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "f4bd946a9a6cd078fc35beb8ef9ff03d5791a0d8",
22
+ "sourceRevision": "35ed4637b21d843edacf0c981f18c7e7405ef4e7",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "2.14.9",
40
+ "version": "2.14.10-alpha.1",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "entrypoint": "buildchain-site.json",
@@ -165,7 +165,7 @@
165
165
  "path": "docs/migration-inventory.md",
166
166
  "plane": "verify",
167
167
  "exists": true,
168
- "digest": "sha256:92ea0214d0eed7f88bc7df133e1929aa8bce681851e3e374a2a289a3b3233deb"
168
+ "digest": "sha256:023f7a0c35336f6cf9a77f263b163d588ef7561f443578ea9b9a76a31a7d10d9"
169
169
  },
170
170
  {
171
171
  "id": "ownership",
@@ -221,7 +221,7 @@
221
221
  "path": "docs/reusable-build-surface.md",
222
222
  "plane": "use",
223
223
  "exists": true,
224
- "digest": "sha256:6c473ae69534e61c724026feb753f48325d08bf1174707b65bf8179c4159ed8a"
224
+ "digest": "sha256:2d3d34f0a5bb92e7f6bfed2aaf547e1a90e885228d00ab34e3df05a32b751676"
225
225
  },
226
226
  {
227
227
  "id": "publish-transaction",
@@ -237,7 +237,7 @@
237
237
  "path": "docs/release-governance.md",
238
238
  "plane": "why",
239
239
  "exists": true,
240
- "digest": "sha256:32825b9d248cf0415aec5a8c6eda742ab32d9f16b21963762c4a3794f3968c10"
240
+ "digest": "sha256:6b7776b2a036c91d5c50ec625fb5b3becbd8f3b26b72f05896d89f72db6e7d39"
241
241
  },
242
242
  {
243
243
  "id": "release-flow",
@@ -46,7 +46,7 @@ do not duplicate alpha and stable jobs or call
46
46
  `.release-candidate-promote.yml` directly.
47
47
 
48
48
  Buildchain also keeps the workflow-file layout transition declarative in
49
- `.buildchain/promotion-shell-routing.json`. Stable `v2.14.8` contains the hidden
49
+ `.buildchain/promotion-shell-routing.json`. Stable `v2.14.9` contains the hidden
50
50
  advanced workflow, so the stable lane is pinned to that implementation's
51
51
  immutable release SHA and forwards the full internal identity surface. This is
52
52
  provider-owned compatibility state; consumers still keep the same single public
@@ -303,6 +303,16 @@ Buildchain then:
303
303
  commit.
304
304
  11. Moves `vX-alpha` to that next alpha only when this remains the highest published alpha minor.
305
305
 
306
+ The historical alpha tree comparison remains the default stable source gate.
307
+ A promote-only stable run may accept a broader reviewed release PR only when
308
+ the downloaded RC passport proves that the PR's exact target tree is the tree
309
+ that completed the PR-stage build. Buildchain also requires the target commit
310
+ to belong to a merged same-repository PR into the selected release branch and
311
+ records the accepted commit, tree, RC source, alpha source, and PR as promotion
312
+ evidence. A stale passport, a different target tree, a generated final release
313
+ commit, or an unreviewed target commit still falls through to the normal
314
+ alpha-tree and declared version-state checks.
315
+
306
316
  The production channel and the test channel therefore intentionally diverge
307
317
  after release: production stays on the release commit, while alpha/dev continue
308
318
  at the next prerelease commit.
@@ -754,7 +754,7 @@ promotion starts:
754
754
  `vN`, and `buildchain-stable-contract-lock-path`.
755
755
 
756
756
  The generated router also owns the stable-shell layout transition through
757
- `.buildchain/promotion-shell-routing.json`. Stable `v2.14.8` contains the hidden
757
+ `.buildchain/promotion-shell-routing.json`. Stable `v2.14.9` contains the hidden
758
758
  advanced workflow, so the stable lane calls that workflow at the exact immutable
759
759
  SHA behind the released `v2` state and forwards the complete internal promotion
760
760
  identity surface. The logical shell identity remains `vN`, and the router
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kungfu-tech/buildchain",
3
- "version": "2.14.9",
3
+ "version": "2.14.10-alpha.1",
4
4
  "private": false,
5
5
  "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
6
6
  "repository": "https://github.com/kungfu-systems/buildchain",