@kungfu-tech/buildchain 3.0.1-alpha.2 → 3.0.1-alpha.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. package/AGENTS.md +5 -5
  2. package/README.md +15 -17
  3. package/actions/promote-buildchain-ref/README.md +8 -8
  4. package/actions/report-buildchain-issue/README.md +2 -2
  5. package/actions/run-lifecycle/README.md +1 -1
  6. package/actions/validate-config/README.md +1 -1
  7. package/bin/buildchain.mjs +11 -4
  8. package/dist/site/buildchain-contract.json +59 -24
  9. package/dist/site/buildchain-site.json +78 -83
  10. package/dist/site/controller-registry.json +30 -2
  11. package/dist/site/kfd-claims.json +12 -5
  12. package/dist/site/kfd-upstream-aggregate.json +1 -1
  13. package/dist/site/manual-registry.json +18 -18
  14. package/dist/site/node-api-registry.json +5 -5
  15. package/dist/site/page-registry.json +54 -59
  16. package/dist/site/public-surface-audit.json +11 -9
  17. package/dist/site/publication-registry.json +4 -4
  18. package/dist/site/release-provenance.json +2 -2
  19. package/dist/site/site-manifest.json +22 -22
  20. package/dist/site/workflow-registry.json +8 -1
  21. package/docs/MAP.md +5 -5
  22. package/docs/cli.md +20 -14
  23. package/docs/consumer-issue-reporting.md +1 -1
  24. package/docs/homebrew.md +7 -5
  25. package/docs/install.md +7 -3
  26. package/docs/kfd-agent-hub.md +1 -1
  27. package/docs/lifecycle-protocol.md +3 -3
  28. package/docs/migration-inventory.md +4 -4
  29. package/docs/ownership.md +4 -4
  30. package/docs/publication-artifacts.md +2 -2
  31. package/docs/release-candidate.md +4 -4
  32. package/docs/release-governance.md +13 -13
  33. package/docs/release-passport.md +6 -6
  34. package/docs/release-propagation.md +5 -5
  35. package/docs/reusable-build-surface.md +23 -23
  36. package/docs/runtime-train-validation.md +13 -13
  37. package/docs/shifu-gate-profiles.md +2 -2
  38. package/docs/site-bundle-contract.md +1 -1
  39. package/docs/stable-candidate-patrol.md +2 -2
  40. package/docs/toolkit-observability.md +14 -0
  41. package/docs/web-surface-deployments.md +7 -7
  42. package/fixtures/libnode-shaped/README.md +1 -1
  43. package/package.json +1 -1
  44. package/packages/core/issue-reporting.js +8 -3
  45. package/packages/core/logging.js +101 -0
  46. package/scripts/auditable-demo.mjs +1 -1
  47. package/scripts/check-inventory.mjs +36 -17
  48. package/scripts/init-repo.mjs +2 -2
  49. package/scripts/web-surface-production-release-pr.mjs +99 -0
  50. package/scripts/workflow-friction-report.mjs +10 -0
@@ -793,6 +793,34 @@
793
793
  "classification": "included",
794
794
  "source": "workflow-call-input"
795
795
  },
796
+ "checkout-cache-fallback": {
797
+ "classification": "digest-only",
798
+ "source": "workflow-call-input"
799
+ },
800
+ "checkout-cache-fetch-attempts": {
801
+ "classification": "digest-only",
802
+ "source": "workflow-call-input"
803
+ },
804
+ "checkout-cache-github-timeout-seconds": {
805
+ "classification": "digest-only",
806
+ "source": "workflow-call-input"
807
+ },
808
+ "checkout-cache-mirror-url-template": {
809
+ "classification": "digest-only",
810
+ "source": "workflow-call-input"
811
+ },
812
+ "checkout-cache-mode": {
813
+ "classification": "digest-only",
814
+ "source": "workflow-call-input"
815
+ },
816
+ "checkout-cache-reference-repository-template": {
817
+ "classification": "digest-only",
818
+ "source": "workflow-call-input"
819
+ },
820
+ "checkout-cache-timeout-seconds": {
821
+ "classification": "digest-only",
822
+ "source": "workflow-call-input"
823
+ },
796
824
  "gate-command-json": {
797
825
  "classification": "digest-only",
798
826
  "source": "workflow-call-input"
@@ -878,7 +906,7 @@
878
906
  ]
879
907
  },
880
908
  "semanticBoundary": "References the Shifu aggregate digest and status without copying project Gate identifiers or Gate policy.",
881
- "digest": "sha256:29569f4b754595792a16742d1c4c63838b54601674a2cb6c96261a72c962dece"
909
+ "digest": "sha256:bd2d12e2cda0802ab00d8964b4bd36f1630442b8d1bff83865840acd2d74f428"
882
910
  },
883
911
  {
884
912
  "schemaVersion": 1,
@@ -2048,5 +2076,5 @@
2048
2076
  "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
2049
2077
  }
2050
2078
  ],
2051
- "digest": "sha256:4b5425a3111fa55d3c9244c4af08effa9045362680bd0833a30d718aba256600"
2079
+ "digest": "sha256:282fc61919afefc041c020fdf2ef10f5c00e504fd459fa5bf588867b5a81ed4e"
2052
2080
  }
@@ -21,13 +21,13 @@
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "b95d6937fa884cbb0f69c64b8361e3e862a87bd659f793c3d8e7a145d0a0c2dc",
24
+ "sha256": "d1585c2a494c31fa42115aec77fde7ac3351f65ed2d65e130f90edbae488c551",
25
25
  "summary": {
26
26
  "cliCommandCount": 87,
27
27
  "workflowCount": 53,
28
28
  "actionCount": 5,
29
29
  "sitePageCount": 56,
30
- "docCommandRefCount": 276,
30
+ "docCommandRefCount": 275,
31
31
  "failureCount": 0
32
32
  },
33
33
  "auditBoundary": {
@@ -228,13 +228,13 @@
228
228
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
229
229
  "path": "dist/site/public-surface-audit.json",
230
230
  "status": "passed",
231
- "sha256": "b95d6937fa884cbb0f69c64b8361e3e862a87bd659f793c3d8e7a145d0a0c2dc",
231
+ "sha256": "d1585c2a494c31fa42115aec77fde7ac3351f65ed2d65e130f90edbae488c551",
232
232
  "summary": {
233
233
  "cliCommandCount": 87,
234
234
  "workflowCount": 53,
235
235
  "actionCount": 5,
236
236
  "sitePageCount": 56,
237
- "docCommandRefCount": 276,
237
+ "docCommandRefCount": 275,
238
238
  "failureCount": 0
239
239
  },
240
240
  "auditBoundary": {
@@ -2899,12 +2899,19 @@
2899
2899
  "visibility": "public",
2900
2900
  "participantFacing": true,
2901
2901
  "public": true,
2902
- "inputCount": 19,
2902
+ "inputCount": 26,
2903
2903
  "inputs": [
2904
2904
  "artifact-name",
2905
2905
  "artifact-retention-days",
2906
2906
  "buildchain-ref",
2907
2907
  "buildchain-repository",
2908
+ "checkout-cache-fallback",
2909
+ "checkout-cache-fetch-attempts",
2910
+ "checkout-cache-github-timeout-seconds",
2911
+ "checkout-cache-mirror-url-template",
2912
+ "checkout-cache-mode",
2913
+ "checkout-cache-reference-repository-template",
2914
+ "checkout-cache-timeout-seconds",
2908
2915
  "gate-command-json",
2909
2916
  "gate-environment-json",
2910
2917
  "gate-plan-command-json",
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "3.0.1-alpha.2",
7
+ "version": "3.0.1-alpha.4",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {
@@ -9,7 +9,7 @@
9
9
  "title": "Buildchain documentation map",
10
10
  "path": "docs/MAP.md",
11
11
  "plane": "use",
12
- "digest": "sha256:11ccb0a90cc0583a1a67da36609a8b07207f259815ac9ac0926c2ec8d7a8764a",
12
+ "digest": "sha256:fc8f7c63b8427e513f9524b8e22e4b0dcd8981fcc724417a29b942fe237fc0a9",
13
13
  "capabilityGroup": "getting-started",
14
14
  "audience": [
15
15
  "agent",
@@ -37,7 +37,7 @@
37
37
  "title": "Install and verify Buildchain",
38
38
  "path": "docs/install.md",
39
39
  "plane": "use",
40
- "digest": "sha256:1879849c01f82b8820f2d9aeb09faed0931954cb7fe6939176a5eb69110cee59",
40
+ "digest": "sha256:570bf79189925ae0dfc040a83804a71149cda122c033d5aa763672b2a137072a",
41
41
  "capabilityGroup": "getting-started",
42
42
  "audience": [
43
43
  "consumer"
@@ -50,7 +50,7 @@
50
50
  "title": "Release Passport protocol",
51
51
  "path": "docs/release-passport.md",
52
52
  "plane": "verify",
53
- "digest": "sha256:f10d2f0f9cc694976b2a1d2a61195ed155c1bc24c964de1551475882e8197c92",
53
+ "digest": "sha256:c7f096af40224efb53b2e0e8b7e1ceedc3aafeb341c476a7cce7e5974004a775",
54
54
  "capabilityGroup": "release-passport-trust",
55
55
  "audience": [
56
56
  "release-operator",
@@ -108,7 +108,7 @@
108
108
  "title": "Release Candidate Passport",
109
109
  "path": "docs/release-candidate.md",
110
110
  "plane": "verify",
111
- "digest": "sha256:e933241bc138661a73cf1b419690cad629ba328ce05ecbd85841199a337d37c1",
111
+ "digest": "sha256:887bc3c041c3231d8e6dd403964d04d28a9eb13081bc4154dc2a6ebd56697ecd",
112
112
  "capabilityGroup": "reusable-build",
113
113
  "audience": [
114
114
  "release-operator",
@@ -122,7 +122,7 @@
122
122
  "title": "Release propagation",
123
123
  "path": "docs/release-propagation.md",
124
124
  "plane": "use",
125
- "digest": "sha256:fc2b743e3d76c4f90cdd8c6560cf9d619ad25d74c15c074be96db7bcb6cc2a29",
125
+ "digest": "sha256:b7d2deef7d50fc412aa21c7ef1019c4c2bd8b0392b9b323356b1c0b1fc2596b6",
126
126
  "capabilityGroup": "site-and-propagation",
127
127
  "audience": [
128
128
  "release-operator",
@@ -150,7 +150,7 @@
150
150
  "title": "Homebrew distribution indexes",
151
151
  "path": "docs/homebrew.md",
152
152
  "plane": "use",
153
- "digest": "sha256:2fc4e8411f35ca86d19d61c7843b9a1fa440f7afea25df13d3aa03342f09f90c",
153
+ "digest": "sha256:e690ea465d4289f2246d93765776b057c6aca1c68dc290abcee94c947e5d5c47",
154
154
  "capabilityGroup": "distribution-indexes",
155
155
  "audience": [
156
156
  "consumer",
@@ -178,7 +178,7 @@
178
178
  "title": "Consumer issue reporting",
179
179
  "path": "docs/consumer-issue-reporting.md",
180
180
  "plane": "use",
181
- "digest": "sha256:8e2159312e47b42ab0bb644cb195362150acc8872e6ac0e7380ece0c5cf36955",
181
+ "digest": "sha256:96804310360c02f408fee9d540385d875a40d09bef046c3df369228d311a1cdd",
182
182
  "capabilityGroup": "observability-diagnostics",
183
183
  "audience": [
184
184
  "consumer",
@@ -206,7 +206,7 @@
206
206
  "title": "Toolkit observability",
207
207
  "path": "docs/toolkit-observability.md",
208
208
  "plane": "use",
209
- "digest": "sha256:b2ffc3b2520ca7879309b7607b2eaa1aceb647503e893887159a6916de14e2d7",
209
+ "digest": "sha256:d7f4179c3912d7bbc5940bfba69e674fb03d020a740063c0b877a171bd5789e3",
210
210
  "capabilityGroup": "observability-diagnostics",
211
211
  "audience": [
212
212
  "developer",
@@ -220,7 +220,7 @@
220
220
  "title": "Site bundle contract",
221
221
  "path": "docs/site-bundle-contract.md",
222
222
  "plane": "use",
223
- "digest": "sha256:583661a7886bdca7e8352a5325a105a9df5d134b3896dbda13ad9b637697481f",
223
+ "digest": "sha256:40831ce35dca6ac2a3a81d54a83fb0e5ab064137829a4f7844e5d80ba61aa65c",
224
224
  "capabilityGroup": "site-and-propagation",
225
225
  "audience": [
226
226
  "site",
@@ -234,7 +234,7 @@
234
234
  "title": "Migration inventory",
235
235
  "path": "docs/migration-inventory.md",
236
236
  "plane": "verify",
237
- "digest": "sha256:18f98635bb16a4e43cac2d46443b3e812c305f708f071929dc6a46a8cd5dccd5",
237
+ "digest": "sha256:bb73731a3b747d02b9453537109754f194c58dba92c260ac84c632b0d58607af",
238
238
  "capabilityGroup": "governance-versioning",
239
239
  "audience": [
240
240
  "maintainer",
@@ -248,7 +248,7 @@
248
248
  "title": "Ownership",
249
249
  "path": "docs/ownership.md",
250
250
  "plane": "why",
251
- "digest": "sha256:49074fb520c404d3c9f5b49b33562d4bdc4e3ed407cf22543fa8e19e312a6b8e",
251
+ "digest": "sha256:a9f54f211b55da6464d890b0ebfe046dbf564aabdfee3aadf457723f9aae398a",
252
252
  "capabilityGroup": "governance-versioning",
253
253
  "audience": [
254
254
  "maintainer"
@@ -275,7 +275,7 @@
275
275
  "title": "CLI and npm package",
276
276
  "path": "docs/cli.md",
277
277
  "plane": "use",
278
- "digest": "sha256:758625143a51d0fe66871220c52273ceaf5c7a47fc1a99bda4608e3ad587ae81",
278
+ "digest": "sha256:f4518193026571d1e84bc245725a9f83e842b2e4b4dfaa072c8207021fa89cd1",
279
279
  "capabilityGroup": "api-cli-reference",
280
280
  "audience": [
281
281
  "agent",
@@ -317,7 +317,7 @@
317
317
  "title": "KFD Agent Hub Builder flow",
318
318
  "path": "docs/kfd-agent-hub.md",
319
319
  "plane": "use",
320
- "digest": "sha256:7528f8a11c7fe67b350c0dd380b77d724c2d9e0001b4427949ee1c6012735d49",
320
+ "digest": "sha256:9bfba0a872590bb1b4f260ddbe71b54572ef291f3fc11d32bcd04e79f5e740ff",
321
321
  "capabilityGroup": "kfd-trust",
322
322
  "audience": [
323
323
  "agent",
@@ -332,7 +332,7 @@
332
332
  "title": "Lifecycle protocol",
333
333
  "path": "docs/lifecycle-protocol.md",
334
334
  "plane": "use",
335
- "digest": "sha256:9c669d3d2d1926dc5b421207089cca85bac0a6dcdb5544c28a7e1659ba9ed5ee",
335
+ "digest": "sha256:55425241363da6105a6b36a46bf8c9d7edd5b0e0f9dbcebe1452327642eb2af9",
336
336
  "capabilityGroup": "reusable-build",
337
337
  "audience": [
338
338
  "consumer",
@@ -346,7 +346,7 @@
346
346
  "title": "Reusable build surface",
347
347
  "path": "docs/reusable-build-surface.md",
348
348
  "plane": "use",
349
- "digest": "sha256:ff6f36e1db2be12df37ef076935b5583493742528d98403297678a0682b67dc2",
349
+ "digest": "sha256:fe73561e8f038e73624bc776f7c527efe59bab105e1208bbaa5af6ebeade6216",
350
350
  "capabilityGroup": "reusable-build",
351
351
  "audience": [
352
352
  "consumer",
@@ -373,7 +373,7 @@
373
373
  "title": "Release governance",
374
374
  "path": "docs/release-governance.md",
375
375
  "plane": "why",
376
- "digest": "sha256:5aa7fef2c831d14b4d1df4cddb45c6ce97929d8530eb14e3b3dfa3dee5e0d651",
376
+ "digest": "sha256:a77c2bb1d2245e1ee2318f650ad64ada6c8cdd3292a62a028e3ccc7517fb4e12",
377
377
  "capabilityGroup": "governance-versioning",
378
378
  "audience": [
379
379
  "maintainer",
@@ -401,7 +401,7 @@
401
401
  "title": "Runtime train validation",
402
402
  "path": "docs/runtime-train-validation.md",
403
403
  "plane": "verify",
404
- "digest": "sha256:1872e511b31c04ba75fc3a005c7a4f857c8b06ecadfedb75bc35b2ce70e7764a",
404
+ "digest": "sha256:1315fe264d0e22215183122fc05e287be974751a78268642076898b689e435e6",
405
405
  "capabilityGroup": "governance-versioning",
406
406
  "audience": [
407
407
  "maintainer",
@@ -428,7 +428,7 @@
428
428
  "title": "Web surface deployments",
429
429
  "path": "docs/web-surface-deployments.md",
430
430
  "plane": "use",
431
- "digest": "sha256:809d765d89277320d710ecfdc2287029530b74fe38f36dd04d057076dded9a0d",
431
+ "digest": "sha256:ed4ff02dcb6f66118a29084784f25d8008ca472f59005b2e014133524706a9c5",
432
432
  "capabilityGroup": "site-and-propagation",
433
433
  "audience": [
434
434
  "site",
@@ -164,7 +164,7 @@
164
164
  "specifier": "@kungfu-tech/buildchain/issue-reporting",
165
165
  "export": "./issue-reporting",
166
166
  "target": "./packages/core/issue-reporting.js",
167
- "digest": "sha256:2e6fb7f8b3d15b9c93e9bec952fbb70d7dc466311b7d8f94e654e145eb29ec49",
167
+ "digest": "sha256:4e6807067b14db5cf78b7de7596bf27ce23b211ae9b24f5ae36bed4fb568d56b",
168
168
  "summary": "Buildchain-owned issue reporting API for workflow friction feedback.",
169
169
  "capabilityGroup": "observability-diagnostics",
170
170
  "audience": [
@@ -255,7 +255,7 @@
255
255
  "specifier": "@kungfu-tech/buildchain/logging",
256
256
  "export": "./logging",
257
257
  "target": "./packages/core/logging.js",
258
- "digest": "sha256:8cc29b88dc7968de3b43d495b54c0b53f90984beb85883705d764c40d4da1b4e",
258
+ "digest": "sha256:36d8aaea7db446d02fb0a1d7d7e6d5d34cc10cff19156596bb8dfbd1a1ff2382",
259
259
  "summary": "Buildchain JSONL logging, span, summary, and verification APIs.",
260
260
  "capabilityGroup": "observability-diagnostics",
261
261
  "audience": [
@@ -477,7 +477,7 @@
477
477
  {
478
478
  "id": "cli-and-node-package",
479
479
  "path": "docs/cli.md",
480
- "digest": "sha256:758625143a51d0fe66871220c52273ceaf5c7a47fc1a99bda4608e3ad587ae81"
480
+ "digest": "sha256:f4518193026571d1e84bc245725a9f83e842b2e4b4dfaa072c8207021fa89cd1"
481
481
  },
482
482
  {
483
483
  "id": "build-facts",
@@ -497,12 +497,12 @@
497
497
  {
498
498
  "id": "homebrew",
499
499
  "path": "docs/homebrew.md",
500
- "digest": "sha256:2fc4e8411f35ca86d19d61c7843b9a1fa440f7afea25df13d3aa03342f09f90c"
500
+ "digest": "sha256:e690ea465d4289f2246d93765776b057c6aca1c68dc290abcee94c947e5d5c47"
501
501
  },
502
502
  {
503
503
  "id": "site-bundle-contract",
504
504
  "path": "docs/site-bundle-contract.md",
505
- "digest": "sha256:583661a7886bdca7e8352a5325a105a9df5d134b3896dbda13ad9b637697481f"
505
+ "digest": "sha256:40831ce35dca6ac2a3a81d54a83fb0e5ab064137829a4f7844e5d80ba61aa65c"
506
506
  }
507
507
  ],
508
508
  "guidance": "These are the public Node import surfaces shipped by the npm package. Agents should prefer these exports over internal file paths."