@kungfu-tech/buildchain 3.0.1 → 3.0.2-alpha.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -3
- package/actions/promote-buildchain-ref/README.md +7 -0
- package/bin/buildchain.mjs +173 -513
- package/bin/internal/cli-options.mjs +79 -0
- package/bin/internal/trust-release-cli.mjs +469 -0
- package/dist/site/agent-index.json +2 -0
- package/dist/site/artifact-schemas.json +5 -0
- package/dist/site/badge-endpoint-registry.json +18 -18
- package/dist/site/badges/v1/kfd-12/aligned.json +1 -1
- package/dist/site/badges/v1/kfd-12/declared.json +1 -1
- package/dist/site/badges/v1/kfd-12/downgraded.json +1 -1
- package/dist/site/badges/v1/kfd-12/draft.json +1 -1
- package/dist/site/badges/v1/kfd-12/failed.json +1 -1
- package/dist/site/badges/v1/kfd-12/missing.json +1 -1
- package/dist/site/badges/v1/kfd-12/passed.json +1 -1
- package/dist/site/badges/v1/kfd-12/planned.json +1 -1
- package/dist/site/badges/v1/kfd-13/aligned.json +1 -1
- package/dist/site/badges/v1/kfd-13/declared.json +1 -1
- package/dist/site/badges/v1/kfd-13/downgraded.json +1 -1
- package/dist/site/badges/v1/kfd-13/draft.json +1 -1
- package/dist/site/badges/v1/kfd-13/failed.json +1 -1
- package/dist/site/badges/v1/kfd-13/missing.json +1 -1
- package/dist/site/badges/v1/kfd-13/passed.json +1 -1
- package/dist/site/badges/v1/kfd-13/planned.json +1 -1
- package/dist/site/buildchain-contract.json +68 -28
- package/dist/site/buildchain-site.json +28 -18
- package/dist/site/capability-registry.json +3 -3
- package/dist/site/cli-registry.json +108 -0
- package/dist/site/controller-registry.json +36 -4
- package/dist/site/kfd-claims.json +156 -12
- package/dist/site/kfd-upstream-aggregate.json +20 -11
- package/dist/site/manual-registry.json +3 -3
- package/dist/site/node-api-registry.json +36 -10
- package/dist/site/page-registry.json +20 -10
- package/dist/site/public-surface-audit.json +122 -10
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/release-passport-check-manifest.json +11 -0
- package/dist/site/release-provenance.json +4 -0
- package/dist/site/schemas/kfd-product-gate-input-v1.schema.json +164 -0
- package/dist/site/schemas/kfd-support-projection-v1.schema.json +106 -0
- package/dist/site/schemas/release-passport-v1.schema.json +3 -0
- package/dist/site/site-manifest.json +7 -7
- package/dist/site/workflow-registry.json +17 -5
- package/docs/cli.md +9 -2
- package/docs/kfd-support.md +43 -7
- package/docs/release-passport.md +15 -0
- package/package.json +7 -3
- package/packages/core/cache-evidence.js +288 -0
- package/packages/core/diagnostics.js +276 -10
- package/packages/core/github-governance-authority.js +71 -16
- package/packages/core/index.js +27 -0
- package/packages/core/kfd-product-gates.js +865 -0
- package/packages/core/kfd.js +16 -7
- package/packages/core/kfd3-surface-register.js +105 -1
- package/packages/core/public-surface-audit.js +6 -1
- package/packages/core/release-passport-contract.js +13 -0
- package/packages/core/release-passport.js +87 -3
- package/scripts/check-internal-architecture.mjs +171 -0
- package/scripts/check-inventory.mjs +4 -0
- package/scripts/generate-site-bundle.mjs +24 -0
- package/scripts/locked-source-checkout.mjs +48 -0
- package/scripts/promotion-routing-evidence.mjs +73 -0
- package/scripts/reconcile-github-governance.mjs +158 -25
- package/scripts/shifu-gate-profile.mjs +26 -20
|
@@ -118,8 +118,8 @@
|
|
|
118
118
|
"counts": {
|
|
119
119
|
"manualCount": 2,
|
|
120
120
|
"pageCount": 2,
|
|
121
|
-
"cliCommandCount":
|
|
122
|
-
"nodeApiCount":
|
|
121
|
+
"cliCommandCount": 37,
|
|
122
|
+
"nodeApiCount": 7,
|
|
123
123
|
"workflowCount": 0,
|
|
124
124
|
"actionCount": 0
|
|
125
125
|
},
|
|
@@ -218,7 +218,7 @@
|
|
|
218
218
|
"manualCount": 3,
|
|
219
219
|
"pageCount": 3,
|
|
220
220
|
"cliCommandCount": 13,
|
|
221
|
-
"nodeApiCount":
|
|
221
|
+
"nodeApiCount": 7,
|
|
222
222
|
"workflowCount": 0,
|
|
223
223
|
"actionCount": 1
|
|
224
224
|
},
|
|
@@ -545,6 +545,18 @@
|
|
|
545
545
|
],
|
|
546
546
|
"maturity": "stable"
|
|
547
547
|
},
|
|
548
|
+
{
|
|
549
|
+
"id": "kfd-4-gate",
|
|
550
|
+
"source": "bin/buildchain.mjs",
|
|
551
|
+
"usage": "buildchain kfd 4 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
|
|
552
|
+
"purpose": "Evaluate source-bound KFD-4 observer-perspective and contrastive-replay product evidence.",
|
|
553
|
+
"capabilityGroup": "kfd-trust",
|
|
554
|
+
"audience": [
|
|
555
|
+
"agent",
|
|
556
|
+
"operator"
|
|
557
|
+
],
|
|
558
|
+
"maturity": "stable"
|
|
559
|
+
},
|
|
548
560
|
{
|
|
549
561
|
"id": "kfd-4-schema",
|
|
550
562
|
"source": "bin/buildchain.mjs",
|
|
@@ -557,6 +569,90 @@
|
|
|
557
569
|
],
|
|
558
570
|
"maturity": "stable"
|
|
559
571
|
},
|
|
572
|
+
{
|
|
573
|
+
"id": "kfd-4-verify",
|
|
574
|
+
"source": "bin/buildchain.mjs",
|
|
575
|
+
"usage": "buildchain kfd 4 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
|
|
576
|
+
"purpose": "Verify a retained KFD-4 product-gate result without widening product support.",
|
|
577
|
+
"capabilityGroup": "kfd-trust",
|
|
578
|
+
"audience": [
|
|
579
|
+
"agent",
|
|
580
|
+
"operator"
|
|
581
|
+
],
|
|
582
|
+
"maturity": "stable"
|
|
583
|
+
},
|
|
584
|
+
{
|
|
585
|
+
"id": "kfd-5-gate",
|
|
586
|
+
"source": "bin/buildchain.mjs",
|
|
587
|
+
"usage": "buildchain kfd 5 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
|
|
588
|
+
"purpose": "Evaluate source-bound KFD-5 Primitive discovery qualification evidence.",
|
|
589
|
+
"capabilityGroup": "kfd-trust",
|
|
590
|
+
"audience": [
|
|
591
|
+
"agent",
|
|
592
|
+
"operator"
|
|
593
|
+
],
|
|
594
|
+
"maturity": "stable"
|
|
595
|
+
},
|
|
596
|
+
{
|
|
597
|
+
"id": "kfd-5-schema",
|
|
598
|
+
"source": "bin/buildchain.mjs",
|
|
599
|
+
"usage": "buildchain kfd 5 schema [--schema <name>] [--json]",
|
|
600
|
+
"purpose": "Print the default KFD-5 schema exposed by the KFD package standards metadata.",
|
|
601
|
+
"capabilityGroup": "kfd-trust",
|
|
602
|
+
"audience": [
|
|
603
|
+
"agent",
|
|
604
|
+
"operator"
|
|
605
|
+
],
|
|
606
|
+
"maturity": "stable"
|
|
607
|
+
},
|
|
608
|
+
{
|
|
609
|
+
"id": "kfd-5-verify",
|
|
610
|
+
"source": "bin/buildchain.mjs",
|
|
611
|
+
"usage": "buildchain kfd 5 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
|
|
612
|
+
"purpose": "Verify a retained KFD-5 product-gate result without widening product support.",
|
|
613
|
+
"capabilityGroup": "kfd-trust",
|
|
614
|
+
"audience": [
|
|
615
|
+
"agent",
|
|
616
|
+
"operator"
|
|
617
|
+
],
|
|
618
|
+
"maturity": "stable"
|
|
619
|
+
},
|
|
620
|
+
{
|
|
621
|
+
"id": "kfd-7-gate",
|
|
622
|
+
"source": "bin/buildchain.mjs",
|
|
623
|
+
"usage": "buildchain kfd 7 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
|
|
624
|
+
"purpose": "Evaluate a source-bound KFD-7 Domain Profile, evidence obligations, and independent review.",
|
|
625
|
+
"capabilityGroup": "kfd-trust",
|
|
626
|
+
"audience": [
|
|
627
|
+
"agent",
|
|
628
|
+
"operator"
|
|
629
|
+
],
|
|
630
|
+
"maturity": "stable"
|
|
631
|
+
},
|
|
632
|
+
{
|
|
633
|
+
"id": "kfd-7-schema",
|
|
634
|
+
"source": "bin/buildchain.mjs",
|
|
635
|
+
"usage": "buildchain kfd 7 schema [--schema <name>] [--json]",
|
|
636
|
+
"purpose": "Print the default KFD-7 schema exposed by the KFD package standards metadata.",
|
|
637
|
+
"capabilityGroup": "kfd-trust",
|
|
638
|
+
"audience": [
|
|
639
|
+
"agent",
|
|
640
|
+
"operator"
|
|
641
|
+
],
|
|
642
|
+
"maturity": "stable"
|
|
643
|
+
},
|
|
644
|
+
{
|
|
645
|
+
"id": "kfd-7-verify",
|
|
646
|
+
"source": "bin/buildchain.mjs",
|
|
647
|
+
"usage": "buildchain kfd 7 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
|
|
648
|
+
"purpose": "Verify a retained KFD-7 product-gate result without widening product support.",
|
|
649
|
+
"capabilityGroup": "kfd-trust",
|
|
650
|
+
"audience": [
|
|
651
|
+
"agent",
|
|
652
|
+
"operator"
|
|
653
|
+
],
|
|
654
|
+
"maturity": "stable"
|
|
655
|
+
},
|
|
560
656
|
{
|
|
561
657
|
"id": "kfd-aggregate",
|
|
562
658
|
"source": "bin/buildchain.mjs",
|
|
@@ -629,6 +725,18 @@
|
|
|
629
725
|
],
|
|
630
726
|
"maturity": "stable"
|
|
631
727
|
},
|
|
728
|
+
{
|
|
729
|
+
"id": "kfd-support",
|
|
730
|
+
"source": "bin/buildchain.mjs",
|
|
731
|
+
"usage": "buildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>...",
|
|
732
|
+
"purpose": "Project and verify a product-owned KFD-1 through KFD-13 support matrix against KFD-4/5/7 gates.",
|
|
733
|
+
"capabilityGroup": "kfd-trust",
|
|
734
|
+
"audience": [
|
|
735
|
+
"agent",
|
|
736
|
+
"operator"
|
|
737
|
+
],
|
|
738
|
+
"maturity": "stable"
|
|
739
|
+
},
|
|
632
740
|
{
|
|
633
741
|
"id": "kfd-upstream-check",
|
|
634
742
|
"source": "bin/buildchain.mjs",
|
|
@@ -190,6 +190,18 @@
|
|
|
190
190
|
"classification": "included",
|
|
191
191
|
"source": "workflow-call-input"
|
|
192
192
|
},
|
|
193
|
+
"cache-dependency-lock-root": {
|
|
194
|
+
"classification": "included",
|
|
195
|
+
"source": "workflow-call-input"
|
|
196
|
+
},
|
|
197
|
+
"cache-policy-root": {
|
|
198
|
+
"classification": "included",
|
|
199
|
+
"source": "workflow-call-input"
|
|
200
|
+
},
|
|
201
|
+
"cache-toolchain-root": {
|
|
202
|
+
"classification": "included",
|
|
203
|
+
"source": "workflow-call-input"
|
|
204
|
+
},
|
|
193
205
|
"cargo-registry-index": {
|
|
194
206
|
"classification": "digest-only",
|
|
195
207
|
"source": "workflow-call-input"
|
|
@@ -427,7 +439,7 @@
|
|
|
427
439
|
"controller-receipt"
|
|
428
440
|
]
|
|
429
441
|
},
|
|
430
|
-
"digest": "sha256:
|
|
442
|
+
"digest": "sha256:7ab36c233a4a448f3894e19c3e6a3b5f765095d2a8628cbbe421e4b82fe3e4b9"
|
|
431
443
|
},
|
|
432
444
|
{
|
|
433
445
|
"schemaVersion": 1,
|
|
@@ -555,6 +567,18 @@
|
|
|
555
567
|
"classification": "digest-only",
|
|
556
568
|
"source": "workflow-call-input"
|
|
557
569
|
},
|
|
570
|
+
"cache-dependency-lock-root": {
|
|
571
|
+
"classification": "included",
|
|
572
|
+
"source": "workflow-call-input"
|
|
573
|
+
},
|
|
574
|
+
"cache-policy-root": {
|
|
575
|
+
"classification": "included",
|
|
576
|
+
"source": "workflow-call-input"
|
|
577
|
+
},
|
|
578
|
+
"cache-toolchain-root": {
|
|
579
|
+
"classification": "included",
|
|
580
|
+
"source": "workflow-call-input"
|
|
581
|
+
},
|
|
558
582
|
"cargo-registry-index": {
|
|
559
583
|
"classification": "digest-only",
|
|
560
584
|
"source": "workflow-call-input"
|
|
@@ -773,7 +797,7 @@
|
|
|
773
797
|
"controller-receipt"
|
|
774
798
|
]
|
|
775
799
|
},
|
|
776
|
-
"digest": "sha256:
|
|
800
|
+
"digest": "sha256:9e5d5244c54d6613024beb43613afcae8d9cfb5cae7799c7a83a2799034ad64f"
|
|
777
801
|
},
|
|
778
802
|
{
|
|
779
803
|
"schemaVersion": 1,
|
|
@@ -1842,6 +1866,14 @@
|
|
|
1842
1866
|
"classification": "digest-only",
|
|
1843
1867
|
"source": "workflow-call-input"
|
|
1844
1868
|
},
|
|
1869
|
+
"release-passport-kfd-product-gate-jsons": {
|
|
1870
|
+
"classification": "digest-only",
|
|
1871
|
+
"source": "workflow-call-input"
|
|
1872
|
+
},
|
|
1873
|
+
"release-passport-kfd-support-matrix-json": {
|
|
1874
|
+
"classification": "digest-only",
|
|
1875
|
+
"source": "workflow-call-input"
|
|
1876
|
+
},
|
|
1845
1877
|
"release-passport-output-dir": {
|
|
1846
1878
|
"classification": "included",
|
|
1847
1879
|
"source": "workflow-call-input"
|
|
@@ -1924,7 +1956,7 @@
|
|
|
1924
1956
|
"controller-receipt"
|
|
1925
1957
|
]
|
|
1926
1958
|
},
|
|
1927
|
-
"digest": "sha256:
|
|
1959
|
+
"digest": "sha256:4bd94f0bb1790c87af758b71aa592a3e22fdcd84a9851931d252e3f60cba8d40"
|
|
1928
1960
|
},
|
|
1929
1961
|
{
|
|
1930
1962
|
"schemaVersion": 1,
|
|
@@ -2100,5 +2132,5 @@
|
|
|
2100
2132
|
"digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
|
|
2101
2133
|
}
|
|
2102
2134
|
],
|
|
2103
|
-
"digest": "sha256:
|
|
2135
|
+
"digest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4"
|
|
2104
2136
|
}
|
|
@@ -21,13 +21,13 @@
|
|
|
21
21
|
"contract": "kungfu-buildchain-public-surface-reverse-audit",
|
|
22
22
|
"path": "dist/site/public-surface-audit.json",
|
|
23
23
|
"status": "passed",
|
|
24
|
-
"sha256": "
|
|
24
|
+
"sha256": "08eb47b0eeab5cf1a11b63314b9572115ba71feb20843adf3e6cef0536dd5f47",
|
|
25
25
|
"summary": {
|
|
26
|
-
"cliCommandCount":
|
|
26
|
+
"cliCommandCount": 96,
|
|
27
27
|
"workflowCount": 53,
|
|
28
28
|
"actionCount": 5,
|
|
29
29
|
"sitePageCount": 56,
|
|
30
|
-
"docCommandRefCount":
|
|
30
|
+
"docCommandRefCount": 286,
|
|
31
31
|
"failureCount": 0
|
|
32
32
|
},
|
|
33
33
|
"auditBoundary": {
|
|
@@ -228,13 +228,13 @@
|
|
|
228
228
|
"contract": "kungfu-buildchain-public-surface-reverse-audit",
|
|
229
229
|
"path": "dist/site/public-surface-audit.json",
|
|
230
230
|
"status": "passed",
|
|
231
|
-
"sha256": "
|
|
231
|
+
"sha256": "08eb47b0eeab5cf1a11b63314b9572115ba71feb20843adf3e6cef0536dd5f47",
|
|
232
232
|
"summary": {
|
|
233
|
-
"cliCommandCount":
|
|
233
|
+
"cliCommandCount": 96,
|
|
234
234
|
"workflowCount": 53,
|
|
235
235
|
"actionCount": 5,
|
|
236
236
|
"sitePageCount": 56,
|
|
237
|
-
"docCommandRefCount":
|
|
237
|
+
"docCommandRefCount": 286,
|
|
238
238
|
"failureCount": 0
|
|
239
239
|
},
|
|
240
240
|
"auditBoundary": {
|
|
@@ -1149,6 +1149,18 @@
|
|
|
1149
1149
|
"public": true,
|
|
1150
1150
|
"packageExport": "./candidate-timeline"
|
|
1151
1151
|
},
|
|
1152
|
+
{
|
|
1153
|
+
"id": "export:./cache-evidence",
|
|
1154
|
+
"name": "@kungfu-tech/buildchain/cache-evidence",
|
|
1155
|
+
"kind": "package-export",
|
|
1156
|
+
"sourcePath": "packages/core/cache-evidence.js",
|
|
1157
|
+
"evidencePath": "packages/core/cache-evidence.js",
|
|
1158
|
+
"availability": "shipped",
|
|
1159
|
+
"visibility": "public",
|
|
1160
|
+
"participantFacing": true,
|
|
1161
|
+
"public": true,
|
|
1162
|
+
"packageExport": "./cache-evidence"
|
|
1163
|
+
},
|
|
1152
1164
|
{
|
|
1153
1165
|
"id": "export:./controller-evidence",
|
|
1154
1166
|
"name": "@kungfu-tech/buildchain/controller-evidence",
|
|
@@ -1209,6 +1221,18 @@
|
|
|
1209
1221
|
"public": true,
|
|
1210
1222
|
"packageExport": "./kfd"
|
|
1211
1223
|
},
|
|
1224
|
+
{
|
|
1225
|
+
"id": "export:./kfd-product-gates",
|
|
1226
|
+
"name": "@kungfu-tech/buildchain/kfd-product-gates",
|
|
1227
|
+
"kind": "package-export",
|
|
1228
|
+
"sourcePath": "packages/core/kfd-product-gates.js",
|
|
1229
|
+
"evidencePath": "packages/core/kfd-product-gates.js",
|
|
1230
|
+
"availability": "shipped",
|
|
1231
|
+
"visibility": "public",
|
|
1232
|
+
"participantFacing": true,
|
|
1233
|
+
"public": true,
|
|
1234
|
+
"packageExport": "./kfd-product-gates"
|
|
1235
|
+
},
|
|
1212
1236
|
{
|
|
1213
1237
|
"id": "export:./kfd-agent-hub",
|
|
1214
1238
|
"name": "@kungfu-tech/buildchain/kfd-agent-hub",
|
|
@@ -2237,6 +2261,18 @@
|
|
|
2237
2261
|
"public": true,
|
|
2238
2262
|
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2239
2263
|
},
|
|
2264
|
+
{
|
|
2265
|
+
"id": "cli:kfd-4-gate",
|
|
2266
|
+
"name": "buildchain kfd 4 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
|
|
2267
|
+
"kind": "cli-command",
|
|
2268
|
+
"sourcePath": "bin/buildchain.mjs",
|
|
2269
|
+
"evidencePath": "bin/buildchain.mjs",
|
|
2270
|
+
"availability": "shipped",
|
|
2271
|
+
"visibility": "public",
|
|
2272
|
+
"participantFacing": true,
|
|
2273
|
+
"public": true,
|
|
2274
|
+
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2275
|
+
},
|
|
2240
2276
|
{
|
|
2241
2277
|
"id": "cli:kfd-4-schema",
|
|
2242
2278
|
"name": "buildchain kfd 4 schema [--schema <name>] [--json]",
|
|
@@ -2249,6 +2285,90 @@
|
|
|
2249
2285
|
"public": true,
|
|
2250
2286
|
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2251
2287
|
},
|
|
2288
|
+
{
|
|
2289
|
+
"id": "cli:kfd-4-verify",
|
|
2290
|
+
"name": "buildchain kfd 4 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
|
|
2291
|
+
"kind": "cli-command",
|
|
2292
|
+
"sourcePath": "bin/buildchain.mjs",
|
|
2293
|
+
"evidencePath": "bin/buildchain.mjs",
|
|
2294
|
+
"availability": "shipped",
|
|
2295
|
+
"visibility": "public",
|
|
2296
|
+
"participantFacing": true,
|
|
2297
|
+
"public": true,
|
|
2298
|
+
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2299
|
+
},
|
|
2300
|
+
{
|
|
2301
|
+
"id": "cli:kfd-5-gate",
|
|
2302
|
+
"name": "buildchain kfd 5 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
|
|
2303
|
+
"kind": "cli-command",
|
|
2304
|
+
"sourcePath": "bin/buildchain.mjs",
|
|
2305
|
+
"evidencePath": "bin/buildchain.mjs",
|
|
2306
|
+
"availability": "shipped",
|
|
2307
|
+
"visibility": "public",
|
|
2308
|
+
"participantFacing": true,
|
|
2309
|
+
"public": true,
|
|
2310
|
+
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2311
|
+
},
|
|
2312
|
+
{
|
|
2313
|
+
"id": "cli:kfd-5-schema",
|
|
2314
|
+
"name": "buildchain kfd 5 schema [--schema <name>] [--json]",
|
|
2315
|
+
"kind": "cli-command",
|
|
2316
|
+
"sourcePath": "bin/buildchain.mjs",
|
|
2317
|
+
"evidencePath": "bin/buildchain.mjs",
|
|
2318
|
+
"availability": "shipped",
|
|
2319
|
+
"visibility": "public",
|
|
2320
|
+
"participantFacing": true,
|
|
2321
|
+
"public": true,
|
|
2322
|
+
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2323
|
+
},
|
|
2324
|
+
{
|
|
2325
|
+
"id": "cli:kfd-5-verify",
|
|
2326
|
+
"name": "buildchain kfd 5 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
|
|
2327
|
+
"kind": "cli-command",
|
|
2328
|
+
"sourcePath": "bin/buildchain.mjs",
|
|
2329
|
+
"evidencePath": "bin/buildchain.mjs",
|
|
2330
|
+
"availability": "shipped",
|
|
2331
|
+
"visibility": "public",
|
|
2332
|
+
"participantFacing": true,
|
|
2333
|
+
"public": true,
|
|
2334
|
+
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2335
|
+
},
|
|
2336
|
+
{
|
|
2337
|
+
"id": "cli:kfd-7-gate",
|
|
2338
|
+
"name": "buildchain kfd 7 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
|
|
2339
|
+
"kind": "cli-command",
|
|
2340
|
+
"sourcePath": "bin/buildchain.mjs",
|
|
2341
|
+
"evidencePath": "bin/buildchain.mjs",
|
|
2342
|
+
"availability": "shipped",
|
|
2343
|
+
"visibility": "public",
|
|
2344
|
+
"participantFacing": true,
|
|
2345
|
+
"public": true,
|
|
2346
|
+
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2347
|
+
},
|
|
2348
|
+
{
|
|
2349
|
+
"id": "cli:kfd-7-schema",
|
|
2350
|
+
"name": "buildchain kfd 7 schema [--schema <name>] [--json]",
|
|
2351
|
+
"kind": "cli-command",
|
|
2352
|
+
"sourcePath": "bin/buildchain.mjs",
|
|
2353
|
+
"evidencePath": "bin/buildchain.mjs",
|
|
2354
|
+
"availability": "shipped",
|
|
2355
|
+
"visibility": "public",
|
|
2356
|
+
"participantFacing": true,
|
|
2357
|
+
"public": true,
|
|
2358
|
+
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2359
|
+
},
|
|
2360
|
+
{
|
|
2361
|
+
"id": "cli:kfd-7-verify",
|
|
2362
|
+
"name": "buildchain kfd 7 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
|
|
2363
|
+
"kind": "cli-command",
|
|
2364
|
+
"sourcePath": "bin/buildchain.mjs",
|
|
2365
|
+
"evidencePath": "bin/buildchain.mjs",
|
|
2366
|
+
"availability": "shipped",
|
|
2367
|
+
"visibility": "public",
|
|
2368
|
+
"participantFacing": true,
|
|
2369
|
+
"public": true,
|
|
2370
|
+
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2371
|
+
},
|
|
2252
2372
|
{
|
|
2253
2373
|
"id": "cli:kfd-aggregate",
|
|
2254
2374
|
"name": "buildchain kfd aggregate [--cwd <dir>] [--json]",
|
|
@@ -2321,6 +2441,18 @@
|
|
|
2321
2441
|
"public": true,
|
|
2322
2442
|
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2323
2443
|
},
|
|
2444
|
+
{
|
|
2445
|
+
"id": "cli:kfd-support",
|
|
2446
|
+
"name": "buildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>...",
|
|
2447
|
+
"kind": "cli-command",
|
|
2448
|
+
"sourcePath": "bin/buildchain.mjs",
|
|
2449
|
+
"evidencePath": "bin/buildchain.mjs",
|
|
2450
|
+
"availability": "shipped",
|
|
2451
|
+
"visibility": "public",
|
|
2452
|
+
"participantFacing": true,
|
|
2453
|
+
"public": true,
|
|
2454
|
+
"reverseAuditSource": "bin/buildchain.mjs"
|
|
2455
|
+
},
|
|
2324
2456
|
{
|
|
2325
2457
|
"id": "cli:kfd-upstream-check",
|
|
2326
2458
|
"name": "buildchain kfd upstream check [--cwd <dir>] [--aggregate-json <file-or-json>] [--json]",
|
|
@@ -2805,7 +2937,7 @@
|
|
|
2805
2937
|
"visibility": "public",
|
|
2806
2938
|
"participantFacing": true,
|
|
2807
2939
|
"public": true,
|
|
2808
|
-
"inputCount":
|
|
2940
|
+
"inputCount": 69,
|
|
2809
2941
|
"inputs": [
|
|
2810
2942
|
"artifact-name",
|
|
2811
2943
|
"artifact-name-template",
|
|
@@ -2825,6 +2957,9 @@
|
|
|
2825
2957
|
"buildchain-contract-lock-path",
|
|
2826
2958
|
"buildchain-ref",
|
|
2827
2959
|
"buildchain-repository",
|
|
2960
|
+
"cache-dependency-lock-root",
|
|
2961
|
+
"cache-policy-root",
|
|
2962
|
+
"cache-toolchain-root",
|
|
2828
2963
|
"cargo-registry-index",
|
|
2829
2964
|
"checkout-cache-fallback",
|
|
2830
2965
|
"checkout-cache-fetch-attempts",
|
|
@@ -2993,7 +3128,7 @@
|
|
|
2993
3128
|
"visibility": "public",
|
|
2994
3129
|
"participantFacing": true,
|
|
2995
3130
|
"public": true,
|
|
2996
|
-
"inputCount":
|
|
3131
|
+
"inputCount": 85,
|
|
2997
3132
|
"inputs": [
|
|
2998
3133
|
"allow-repository",
|
|
2999
3134
|
"artifact-name",
|
|
@@ -3068,6 +3203,8 @@
|
|
|
3068
3203
|
"release-passport-kfd-3-artifact-verify-command",
|
|
3069
3204
|
"release-passport-kfd-3-artifact-witness-jsons",
|
|
3070
3205
|
"release-passport-kfd-3-prebuild-witness-jsons",
|
|
3206
|
+
"release-passport-kfd-product-gate-jsons",
|
|
3207
|
+
"release-passport-kfd-support-matrix-json",
|
|
3071
3208
|
"release-passport-output-dir",
|
|
3072
3209
|
"release-passport-platform-manifest-paths",
|
|
3073
3210
|
"release-passport-product-name",
|
|
@@ -3444,7 +3581,7 @@
|
|
|
3444
3581
|
"visibility": "public",
|
|
3445
3582
|
"participantFacing": true,
|
|
3446
3583
|
"public": true,
|
|
3447
|
-
"inputCount":
|
|
3584
|
+
"inputCount": 72,
|
|
3448
3585
|
"inputs": [
|
|
3449
3586
|
"artifact-name",
|
|
3450
3587
|
"artifact-name-template",
|
|
@@ -3467,6 +3604,9 @@
|
|
|
3467
3604
|
"buildchain-ref",
|
|
3468
3605
|
"buildchain-repository",
|
|
3469
3606
|
"buildchain-stable-contract-lock-path",
|
|
3607
|
+
"cache-dependency-lock-root",
|
|
3608
|
+
"cache-policy-root",
|
|
3609
|
+
"cache-toolchain-root",
|
|
3470
3610
|
"cargo-registry-index",
|
|
3471
3611
|
"checkout-cache-fallback",
|
|
3472
3612
|
"checkout-cache-fetch-attempts",
|
|
@@ -3986,7 +4126,7 @@
|
|
|
3986
4126
|
"visibility": "public",
|
|
3987
4127
|
"participantFacing": true,
|
|
3988
4128
|
"public": true,
|
|
3989
|
-
"inputCount":
|
|
4129
|
+
"inputCount": 77,
|
|
3990
4130
|
"inputs": [
|
|
3991
4131
|
"allow-repository",
|
|
3992
4132
|
"artifact-name",
|
|
@@ -4053,6 +4193,8 @@
|
|
|
4053
4193
|
"release-passport-kfd-3-artifact-verify-command",
|
|
4054
4194
|
"release-passport-kfd-3-artifact-witness-jsons",
|
|
4055
4195
|
"release-passport-kfd-3-prebuild-witness-jsons",
|
|
4196
|
+
"release-passport-kfd-product-gate-jsons",
|
|
4197
|
+
"release-passport-kfd-support-matrix-json",
|
|
4056
4198
|
"release-passport-output-dir",
|
|
4057
4199
|
"release-passport-platform-manifest-paths",
|
|
4058
4200
|
"release-passport-product-name",
|
|
@@ -4275,7 +4417,7 @@
|
|
|
4275
4417
|
"visibility": "public",
|
|
4276
4418
|
"participantFacing": true,
|
|
4277
4419
|
"public": true,
|
|
4278
|
-
"inputCount":
|
|
4420
|
+
"inputCount": 66,
|
|
4279
4421
|
"inputs": [
|
|
4280
4422
|
"allow-repository",
|
|
4281
4423
|
"branch-protection-bypass-apps",
|
|
@@ -4326,6 +4468,8 @@
|
|
|
4326
4468
|
"release-passport-kfd-3-artifact-verify-command",
|
|
4327
4469
|
"release-passport-kfd-3-artifact-witness-jsons",
|
|
4328
4470
|
"release-passport-kfd-3-prebuild-witness-jsons",
|
|
4471
|
+
"release-passport-kfd-product-gate-jsons",
|
|
4472
|
+
"release-passport-kfd-support-matrix-json",
|
|
4329
4473
|
"release-passport-output-dir",
|
|
4330
4474
|
"release-passport-platform-manifest-paths",
|
|
4331
4475
|
"release-passport-product-name",
|
|
@@ -5266,6 +5410,6 @@
|
|
|
5266
5410
|
}
|
|
5267
5411
|
}
|
|
5268
5412
|
],
|
|
5269
|
-
"publicSurfaceCount":
|
|
5413
|
+
"publicSurfaceCount": 345
|
|
5270
5414
|
}
|
|
5271
5415
|
}
|
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"id": "kungfu-tech-buildchain",
|
|
6
6
|
"name": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "3.0.1",
|
|
7
|
+
"version": "3.0.2-alpha.1",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"source": {
|
|
@@ -21,14 +21,23 @@
|
|
|
21
21
|
"roleValid": true,
|
|
22
22
|
"package": {
|
|
23
23
|
"name": "@kungfu-tech/kfd",
|
|
24
|
-
"version": "1.0.0-alpha.
|
|
24
|
+
"version": "1.0.0-alpha.47"
|
|
25
25
|
},
|
|
26
26
|
"repository": "kungfu-systems/kfd",
|
|
27
27
|
"kfd": {
|
|
28
28
|
"kfd1": "exported-witness",
|
|
29
29
|
"kfd2": "exported-claim",
|
|
30
30
|
"kfd3": "exported-collaboration-interface",
|
|
31
|
-
"kfd4": "schema-metadata"
|
|
31
|
+
"kfd4": "schema-metadata",
|
|
32
|
+
"kfd5": "declared",
|
|
33
|
+
"kfd6": "declared",
|
|
34
|
+
"kfd7": "declared",
|
|
35
|
+
"kfd8": "declared",
|
|
36
|
+
"kfd9": "declared",
|
|
37
|
+
"kfd10": "declared",
|
|
38
|
+
"kfd11": "declared",
|
|
39
|
+
"kfd12": "declared",
|
|
40
|
+
"kfd13": "declared"
|
|
32
41
|
},
|
|
33
42
|
"releasePassport": "",
|
|
34
43
|
"releaseAnchor": {
|
|
@@ -37,7 +46,7 @@
|
|
|
37
46
|
"line": "v1.0",
|
|
38
47
|
"channel": "alpha",
|
|
39
48
|
"npmPackage": "@kungfu-tech/kfd",
|
|
40
|
-
"npmVersion": "1.0.0-alpha.
|
|
49
|
+
"npmVersion": "1.0.0-alpha.47",
|
|
41
50
|
"source": {
|
|
42
51
|
"repository": "kungfu-systems/kfd",
|
|
43
52
|
"branch": "alpha/v1/v1.0"
|
|
@@ -49,7 +58,7 @@
|
|
|
49
58
|
{
|
|
50
59
|
"path": "kfd.release.json",
|
|
51
60
|
"kind": "package",
|
|
52
|
-
"sha256": "sha256:
|
|
61
|
+
"sha256": "sha256:c4e0ca30c47b3cfca1b6d2d00c6277d62dd71423fd367e355f0f231c8a0b445d",
|
|
53
62
|
"contract": "kfd-release-anchor",
|
|
54
63
|
"role": "",
|
|
55
64
|
"directory": false
|
|
@@ -57,7 +66,7 @@
|
|
|
57
66
|
{
|
|
58
67
|
"path": ".buildchain/kfd-1/contract-world.witness.json",
|
|
59
68
|
"kind": "package",
|
|
60
|
-
"sha256": "sha256:
|
|
69
|
+
"sha256": "sha256:fdd2d250fbac2246671f2444067234df5b6c519612196d1631c93e9da6de19b2",
|
|
61
70
|
"contract": "",
|
|
62
71
|
"role": "",
|
|
63
72
|
"directory": false
|
|
@@ -65,7 +74,7 @@
|
|
|
65
74
|
{
|
|
66
75
|
"path": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
67
76
|
"kind": "package",
|
|
68
|
-
"sha256": "sha256:
|
|
77
|
+
"sha256": "sha256:4886e6052a56ba0d8527cdb73443614a1b79f98a4fb3ab7f0a37f0c7bf0e5ece",
|
|
69
78
|
"contract": "",
|
|
70
79
|
"role": "",
|
|
71
80
|
"directory": false
|
|
@@ -73,7 +82,7 @@
|
|
|
73
82
|
{
|
|
74
83
|
"path": ".buildchain/kfd-2/kfd-foundation.trust-claims.json",
|
|
75
84
|
"kind": "package",
|
|
76
|
-
"sha256": "sha256:
|
|
85
|
+
"sha256": "sha256:24c21ac663190183c60e1dd56437b0b427f107abe9ded0da73491f0b515eea7e",
|
|
77
86
|
"contract": "kfd-2-trust-claims",
|
|
78
87
|
"role": "",
|
|
79
88
|
"directory": false
|
|
@@ -81,7 +90,7 @@
|
|
|
81
90
|
{
|
|
82
91
|
"path": ".buildchain/kfd-2/kfd-foundation.trust-assessment.json",
|
|
83
92
|
"kind": "package",
|
|
84
|
-
"sha256": "sha256:
|
|
93
|
+
"sha256": "sha256:11421752a2b6dc376a7006de288ed33115235be229c954bde95901b44b001cdb",
|
|
85
94
|
"contract": "kfd-2-trust-assessment",
|
|
86
95
|
"role": "",
|
|
87
96
|
"directory": false
|
|
@@ -97,7 +106,7 @@
|
|
|
97
106
|
{
|
|
98
107
|
"path": "standards.json",
|
|
99
108
|
"kind": "package",
|
|
100
|
-
"sha256": "sha256:
|
|
109
|
+
"sha256": "sha256:65899780779a8e933f1f3a298bfdf2311104ccde84b773a0828ee4c23dd19d5b",
|
|
101
110
|
"contract": "kfd-standards-metadata",
|
|
102
111
|
"role": "",
|
|
103
112
|
"directory": false
|
|
@@ -113,7 +122,7 @@
|
|
|
113
122
|
"kfd"
|
|
114
123
|
],
|
|
115
124
|
"packageVersions": {
|
|
116
|
-
"kfd": "1.0.0-alpha.
|
|
125
|
+
"kfd": "1.0.0-alpha.47"
|
|
117
126
|
},
|
|
118
127
|
"status": "collected"
|
|
119
128
|
}
|
|
@@ -50,7 +50,7 @@
|
|
|
50
50
|
"title": "Release Passport protocol",
|
|
51
51
|
"path": "docs/release-passport.md",
|
|
52
52
|
"plane": "verify",
|
|
53
|
-
"digest": "sha256:
|
|
53
|
+
"digest": "sha256:ed29d25882cbf4ec062abc21e7d069a6377eaf7e3171c24642dfe08da2e4c05b",
|
|
54
54
|
"capabilityGroup": "release-passport-trust",
|
|
55
55
|
"audience": [
|
|
56
56
|
"release-operator",
|
|
@@ -275,7 +275,7 @@
|
|
|
275
275
|
"title": "CLI and npm package",
|
|
276
276
|
"path": "docs/cli.md",
|
|
277
277
|
"plane": "use",
|
|
278
|
-
"digest": "sha256:
|
|
278
|
+
"digest": "sha256:47be88f5e5fd14124d03510b807722215034d34eefcebdfe2599a310350b7697",
|
|
279
279
|
"capabilityGroup": "api-cli-reference",
|
|
280
280
|
"audience": [
|
|
281
281
|
"agent",
|
|
@@ -303,7 +303,7 @@
|
|
|
303
303
|
"title": "KFD support and KFD-3 surface registration",
|
|
304
304
|
"path": "docs/kfd-support.md",
|
|
305
305
|
"plane": "verify",
|
|
306
|
-
"digest": "sha256:
|
|
306
|
+
"digest": "sha256:3a6143e450ab7976a50788fee48ec4d7313706774ff5cf8f71075a7b9e196e01",
|
|
307
307
|
"capabilityGroup": "kfd-trust",
|
|
308
308
|
"audience": [
|
|
309
309
|
"agent",
|