@kungfu-tech/buildchain 2.8.2-alpha.1 → 2.8.2

package/actions/promote-buildchain-ref/README.md

@@ -203,6 +203,14 @@ The action outputs `transaction-id`, `transaction-state`,
 `release-passport/*` files have been uploaded into that recovery ref.
 `finalization-needed=true` means publish evidence is valid, but protected branch
 or ref finalization needs a later promotion run.
+Set `github-release: "true"` when the semver promotion should also publish the
+exact-tag GitHub Release. After the release transaction reaches `complete` and
+`finalization-needed` is false, the action creates or updates the GitHub Release
+for `transaction-exact-tag`, applies deterministic semver metadata
+(`prerelease=true` and `make_latest=false` for prerelease tags, latest for stable
+tags), and uploads the publish evidence file plus generated release passport
+assets. If the transaction is not complete yet, the action defers GitHub Release
+publication to the next idempotent promotion run.
 
 After a publish transaction reaches `complete`, the action generates the unified
 `buildchain-release-passport` in `.buildchain/release-passport` by default and

package/dist/site/agent-index.json

@@ -6,9 +6,12 @@
     "product-mechanism.json",
     "release-model.json",
     "cli-registry.json",
+    "manual-registry.json",
+    "node-api-registry.json",
     "workflow-registry.json",
     "artifact-schemas.json",
-    "buildchain-contract.json"
+    "buildchain-contract.json",
+    "kfd-claims.json"
   ],
   "instruction": "Use this bundle as the package-owned fact source for Buildchain pages. Do not infer current release mechanics from prose alone."
 }

package/dist/site/artifact-schemas.json

@@ -16,10 +16,13 @@
     "buildchain-site.json",
     "site-manifest.json",
     "cli-registry.json",
+    "manual-registry.json",
+    "node-api-registry.json",
     "workflow-registry.json",
     "release-model.json",
     "artifact-schemas.json",
     "buildchain-contract.json",
+    "kfd-claims.json",
     "product-mechanism.json",
     "release-provenance.json",
     "agent-index.json"

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "2.8.2-alpha.1",
+    "version": "2.8.2",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v2",
@@ -78,17 +78,21 @@
         "release-passport-kfd-3-artifact-witness-jsons",
         "release-passport-kfd-3-artifact-verify-command",
         "buildchain-contract-lock-path",
-        "buildchain-contract-drift-issue-mode"
+        "buildchain-contract-drift-issue-mode",
+        "github-release",
+        "github-release-title",
+        "github-release-notes"
       ],
       "guarantees": [
         "promotion reuses PR-stage release-candidate artifacts",
         "promotion does not run the heavy native build matrix",
         "built source and promotion channel SHA are recorded separately",
         "contract drift is checked before release-candidate resolution and publish",
-        "publish-gate source locks are created by the wrapper and enforced by promote-buildchain-ref before publish side effects"
+        "publish-gate source locks are created by the wrapper and enforced by promote-buildchain-ref before publish side effects",
+        "GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
       ],
-      "breakingDigest": "sha256:1c27595adaa8fbc334b3f7f66605e4544cb8c60ce81a9bb7ee94d6ede93c65ac",
-      "auditDigest": "sha256:4fddfd83cd8a90c45c1356561f38985b5a29f1cdb04ca969639867b6ee6869d0"
+      "breakingDigest": "sha256:403d2fcdb0c5eabe749e89102defad69745f70a1556707bec7831fcc2e9fa8f8",
+      "auditDigest": "sha256:b6dd734ffe4dbd705ab4cfbc209e169400c89158b52eab594f6bf6738b0b47ec"
     },
     {
       "contractVersion": 1,
@@ -118,15 +122,19 @@
         "release-passport-kfd-2-claim-jsons",
         "release-passport-kfd-3-prebuild-witness-jsons",
         "release-passport-kfd-3-artifact-witness-jsons",
-        "release-passport-kfd-3-artifact-verify-command"
+        "release-passport-kfd-3-artifact-verify-command",
+        "github-release",
+        "github-release-title",
+        "github-release-notes"
       ],
       "guarantees": [
         "protected release refs and durable release-state are finalized by Buildchain",
         "release passport finalization is idempotent after publish side effects",
-        "publish transactions can require a resolved publish-gate source lock to prevent floating-ref drift"
+        "publish transactions can require a resolved publish-gate source lock to prevent floating-ref drift",
+        "semver GitHub Releases are created or updated only after transaction completion, with prerelease/latest metadata derived from the exact tag"
       ],
-      "breakingDigest": "sha256:fca97ba00248ed436695f12f8fc44404458af462e666aa7b69b4315b32705bdd",
-      "auditDigest": "sha256:014233a4add8a01fbccc40c86821c54d3aa12cd3b1158423ac88cb0e45a352a8"
+      "breakingDigest": "sha256:347b65aecd38bc671d8f697eabd15254f905b6f745389d7b26d7595a904a720c",
+      "auditDigest": "sha256:47c7c68b1c81cbe0a6cedb3da2841c33472e25e29b2353267a09e470667bcb93"
     },
     {
       "contractVersion": 1,
@@ -291,8 +299,52 @@
       ],
       "breakingDigest": "sha256:097db3e67509bedda8c6548bf1edfbfcf57f7b5510520b6a7b7e078d7ec087c8",
       "auditDigest": "sha256:478e656104272675d3be3391158251472e0c2515b3113376ef0e52757b47ace0"
+    },
+    {
+      "contractVersion": 1,
+      "stability": "stable",
+      "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
+      "id": "agent-manual-registry",
+      "kind": "site-contract",
+      "path": "dist/site/manual-registry.json",
+      "requiredInputs": [],
+      "requiredOutputs": [
+        "manuals",
+        "requiredAgentManuals"
+      ],
+      "breakingDefaults": {
+        "contract": "kungfu-buildchain-agent-manual-registry"
+      },
+      "guarantees": [
+        "agent-facing packaged docs are enumerable from the npm package site bundle",
+        "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
+      ],
+      "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
+      "auditDigest": "sha256:7fbde28193df754afda019e218defb5d08aa2c64298382d277927faba5468240"
+    },
+    {
+      "contractVersion": 1,
+      "stability": "stable",
+      "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
+      "id": "node-api-registry",
+      "kind": "site-contract",
+      "path": "dist/site/node-api-registry.json",
+      "requiredInputs": [],
+      "requiredOutputs": [
+        "exports"
+      ],
+      "breakingDefaults": {
+        "contract": "kungfu-buildchain-node-api-registry",
+        "moduleSystem": "module"
+      },
+      "guarantees": [
+        "public Node import surfaces are derived from package.json exports",
+        "agents can discover supported Node APIs without importing internal file paths"
+      ],
+      "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
+      "auditDigest": "sha256:f3ba17b4a48e7d0f2996fb9f39d5ff7f16f1e2de1958fc07718b04bdf8af5533"
     }
   ],
-  "compatibilityDigest": "sha256:ca668f3f73ab0d84db0d489efccf6cd556704b069990a37a0c6c77a6519f754b",
-  "contractDigest": "sha256:315ea2dcc1d77b75b04475cfef85c627b31186edca1e4ddb929bb758c9de9576"
+  "compatibilityDigest": "sha256:36421b592a782decbfe31a7d8d42d70ce1100a56a2c4f4a0ccc21f0617dc72bf",
+  "contractDigest": "sha256:12d39a2256bc4b93c81aa3ba1ce62ccc35fbb5054fca395815d77d8902aa42fe"
 }

package/dist/site/buildchain-site.json

@@ -15,11 +15,14 @@
   "agentFirst": true,
   "entrypoints": [
     "cli-registry.json",
+    "manual-registry.json",
+    "node-api-registry.json",
     "workflow-registry.json",
     "release-model.json",
     "artifact-schemas.json",
     "product-mechanism.json",
     "release-provenance.json",
+    "kfd-claims.json",
     "agent-index.json",
     "site-manifest.json"
   ],
@@ -29,112 +32,128 @@
       "title": "Install and verify Buildchain",
       "path": "docs/install.md",
       "plane": "use",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:34bc161a26595f95684694d341616e47bfd65b0c51a63225e68a575179636175"
     },
     {
       "id": "release-passport",
       "title": "Release Passport protocol",
       "path": "docs/release-passport.md",
       "plane": "verify",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:4d69798646adb84c6d193b1f32e7dc50e389db8932e63e9cb71489b6015e0333"
     },
     {
       "id": "release-propagation",
       "title": "Release propagation",
       "path": "docs/release-propagation.md",
       "plane": "use",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:10c2bb3bc4ebd692c49fa55f286b77ed3e8caa1526298ad910c00fc80251a893"
     },
     {
       "id": "binary-distribution",
       "title": "Binary distribution contract",
       "path": "docs/binary-distribution.md",
       "plane": "verify",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:36899140a9b2e9ce1565ed41f3d64f73a8829fad3d59a04b9498d9479c85c4be"
     },
     {
       "id": "toolkit-observability",
       "title": "Toolkit observability",
       "path": "docs/toolkit-observability.md",
       "plane": "use",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:239949a75ca81b6002a2e148f7028402dbd98c00e246acd8d0955855781206a1"
     },
     {
       "id": "site-bundle-contract",
       "title": "Site bundle contract",
       "path": "docs/site-bundle-contract.md",
       "plane": "use",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:e6b4f2e76c713063ff750b0a8d6d96595addae2fd48f913744dc86559add0641"
     },
     {
       "id": "product-mechanism",
       "title": "Product mechanism",
       "path": "docs/product-mechanism.md",
       "plane": "why",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:da50022f96f8876bb275a7832190cb1f6ab0fa6aab9d045dda924a7abddc3edf"
     },
     {
       "id": "cli",
       "title": "CLI and npm package",
       "path": "docs/cli.md",
       "plane": "use",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:a8a348181d6419b746e863d1cacc9d6a91aa6ac5cc2b60819843d44487957c49"
     },
     {
       "id": "lifecycle-protocol",
       "title": "Lifecycle protocol",
       "path": "docs/lifecycle-protocol.md",
       "plane": "use",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:02e1be97935c0d9520ea22e8ef0dc61d9b860c347f07127074600cdca02713ce"
     },
     {
       "id": "reusable-build-surface",
       "title": "Reusable build surface",
       "path": "docs/reusable-build-surface.md",
       "plane": "use",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:e5b2222fddd0624b6aff1c999bb156df26eebbd7b365ec65ef3622611dc055ea"
     },
     {
       "id": "publish-transaction",
       "title": "Publish transaction",
       "path": "docs/publish-transaction.md",
       "plane": "verify",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:dd45cf98f0847e3968f150a09bed84aa1f59cb2687ac988e9519f08dc9c91877"
     },
     {
       "id": "release-governance",
       "title": "Release governance",
       "path": "docs/release-governance.md",
       "plane": "why",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:8aab1af617e511011974cb63f04240463fc99c427cb3b29e5f5d385c88620464"
     },
     {
       "id": "release-flow",
       "title": "Release flow",
       "path": "docs/release-flow.md",
       "plane": "verify",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:0a2f46501a64905067cc5872b45ac4824f9e632d59bfdfb2f6a794dfc5f959ea"
     },
     {
       "id": "versioning",
       "title": "Versioning",
       "path": "docs/versioning.md",
       "plane": "why",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:77b92fc979cc100beab3f8a13cd791dea992737b986ace505104edff4810a296"
     },
     {
       "id": "web-surface-deployments",
       "title": "Web surface deployments",
       "path": "docs/web-surface-deployments.md",
       "plane": "use",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:614aea65d745e8978d8329545753adf13b8914f84fe35b0148abbd1aff0c0dc2"
     },
     {
       "id": "infra-contract",
       "title": "Infra Contract",
       "path": "docs/infra-contract.md",
       "plane": "use",
-      "exists": true
+      "exists": true,
+      "digest": "sha256:7826e8c70ac2d90ddd8d4e38bcdd1bcfa36eef5106431d7ad94b2fe9c8d3d5dc"
     }
   ],
   "releaseModel": {
@@ -172,6 +191,17 @@
       "versionSource": "package.json#version",
       "alphaDistTag": "alpha",
       "stableDistTag": "latest"
+    },
+    "githubRelease": {
+      "exactTagRelease": true,
+      "prereleaseTags": "semver prerelease tags set prerelease=true and make_latest=false",
+      "stableTags": "stable semver tags set make_latest=true",
+      "evidenceAssets": [
+        "publish evidence JSON",
+        "buildchain.release.json",
+        "release passport assets"
+      ],
+      "owner": "promote-buildchain-ref"
     }
   }
 }