@kungfu-tech/buildchain 3.0.1 → 3.0.2-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (64) hide show
  1. package/README.md +5 -3
  2. package/actions/promote-buildchain-ref/README.md +7 -0
  3. package/bin/buildchain.mjs +173 -513
  4. package/bin/internal/cli-options.mjs +79 -0
  5. package/bin/internal/trust-release-cli.mjs +469 -0
  6. package/dist/site/agent-index.json +2 -0
  7. package/dist/site/artifact-schemas.json +5 -0
  8. package/dist/site/badge-endpoint-registry.json +18 -18
  9. package/dist/site/badges/v1/kfd-12/aligned.json +1 -1
  10. package/dist/site/badges/v1/kfd-12/declared.json +1 -1
  11. package/dist/site/badges/v1/kfd-12/downgraded.json +1 -1
  12. package/dist/site/badges/v1/kfd-12/draft.json +1 -1
  13. package/dist/site/badges/v1/kfd-12/failed.json +1 -1
  14. package/dist/site/badges/v1/kfd-12/missing.json +1 -1
  15. package/dist/site/badges/v1/kfd-12/passed.json +1 -1
  16. package/dist/site/badges/v1/kfd-12/planned.json +1 -1
  17. package/dist/site/badges/v1/kfd-13/aligned.json +1 -1
  18. package/dist/site/badges/v1/kfd-13/declared.json +1 -1
  19. package/dist/site/badges/v1/kfd-13/downgraded.json +1 -1
  20. package/dist/site/badges/v1/kfd-13/draft.json +1 -1
  21. package/dist/site/badges/v1/kfd-13/failed.json +1 -1
  22. package/dist/site/badges/v1/kfd-13/missing.json +1 -1
  23. package/dist/site/badges/v1/kfd-13/passed.json +1 -1
  24. package/dist/site/badges/v1/kfd-13/planned.json +1 -1
  25. package/dist/site/buildchain-contract.json +68 -28
  26. package/dist/site/buildchain-site.json +28 -18
  27. package/dist/site/capability-registry.json +3 -3
  28. package/dist/site/cli-registry.json +108 -0
  29. package/dist/site/controller-registry.json +36 -4
  30. package/dist/site/kfd-claims.json +156 -12
  31. package/dist/site/kfd-upstream-aggregate.json +20 -11
  32. package/dist/site/manual-registry.json +3 -3
  33. package/dist/site/node-api-registry.json +36 -10
  34. package/dist/site/page-registry.json +20 -10
  35. package/dist/site/public-surface-audit.json +122 -10
  36. package/dist/site/publication-registry.json +4 -4
  37. package/dist/site/release-passport-check-manifest.json +11 -0
  38. package/dist/site/release-provenance.json +4 -0
  39. package/dist/site/schemas/kfd-product-gate-input-v1.schema.json +164 -0
  40. package/dist/site/schemas/kfd-support-projection-v1.schema.json +106 -0
  41. package/dist/site/schemas/release-passport-v1.schema.json +3 -0
  42. package/dist/site/site-manifest.json +7 -7
  43. package/dist/site/workflow-registry.json +17 -5
  44. package/docs/cli.md +9 -2
  45. package/docs/kfd-support.md +43 -7
  46. package/docs/release-passport.md +15 -0
  47. package/package.json +7 -3
  48. package/packages/core/cache-evidence.js +288 -0
  49. package/packages/core/diagnostics.js +276 -10
  50. package/packages/core/github-governance-authority.js +71 -16
  51. package/packages/core/index.js +27 -0
  52. package/packages/core/kfd-product-gates.js +865 -0
  53. package/packages/core/kfd.js +16 -7
  54. package/packages/core/kfd3-surface-register.js +105 -1
  55. package/packages/core/public-surface-audit.js +6 -1
  56. package/packages/core/release-passport-contract.js +13 -0
  57. package/packages/core/release-passport.js +87 -3
  58. package/scripts/check-internal-architecture.mjs +171 -0
  59. package/scripts/check-inventory.mjs +4 -0
  60. package/scripts/generate-site-bundle.mjs +24 -0
  61. package/scripts/locked-source-checkout.mjs +48 -0
  62. package/scripts/promotion-routing-evidence.mjs +73 -0
  63. package/scripts/reconcile-github-governance.mjs +158 -25
  64. package/scripts/shifu-gate-profile.mjs +26 -20
package/dist/site/node-api-registry.json CHANGED
@@ -8,7 +8,7 @@
8
8
  "specifier": "@kungfu-tech/buildchain",
9
9
  "export": ".",
10
10
  "target": "./packages/core/index.js",
11
- "digest": "sha256:7f1f3ce6c862e556dc73a0b3b7fe96b8c6772b96de3e677a77eed87c8a03047f",
11
+ "digest": "sha256:3274ea5fc0ce782bcaa29db5de5111b71198c7bee893e477c49dcceb61ee59cd",
12
12
  "summary": "Root toolkit export for Buildchain's public Node API.",
13
13
  "capabilityGroup": "api-cli-reference",
14
14
  "audience": [
@@ -47,7 +47,7 @@
47
47
  "specifier": "@kungfu-tech/buildchain/core",
48
48
  "export": "./core",
49
49
  "target": "./packages/core/index.js",
50
- "digest": "sha256:7f1f3ce6c862e556dc73a0b3b7fe96b8c6772b96de3e677a77eed87c8a03047f",
50
+ "digest": "sha256:3274ea5fc0ce782bcaa29db5de5111b71198c7bee893e477c49dcceb61ee59cd",
51
51
  "summary": "Alias for the root public toolkit export.",
52
52
  "capabilityGroup": "api-cli-reference",
53
53
  "audience": [
@@ -121,6 +121,19 @@
121
121
  ],
122
122
  "maturity": "stable"
123
123
  },
124
+ {
125
+ "specifier": "@kungfu-tech/buildchain/cache-evidence",
126
+ "export": "./cache-evidence",
127
+ "target": "./packages/core/cache-evidence.js",
128
+ "digest": "sha256:9f8453c53d7f31bccbfc9cdf5c5e62578d531c08fd213416845f753f92ee1d2e",
129
+ "summary": "Content-addressed cache operation receipts and source/platform-bound evidence-set verification APIs.",
130
+ "capabilityGroup": "observability-diagnostics",
131
+ "audience": [
132
+ "developer",
133
+ "agent"
134
+ ],
135
+ "maturity": "stable"
136
+ },
124
137
  {
125
138
  "specifier": "@kungfu-tech/buildchain/controller-evidence",
126
139
  "export": "./controller-evidence",
@@ -138,7 +151,7 @@
138
151
  "specifier": "@kungfu-tech/buildchain/diagnostics",
139
152
  "export": "./diagnostics",
140
153
  "target": "./packages/core/diagnostics.js",
141
- "digest": "sha256:a0e54f60ec24d9c15529a8dbad33129c8ec537e9f34203119d876d1e2fb26fe7",
154
+ "digest": "sha256:be62d59d4a6e18e8fe96a98539012cd8db82976eea2593540db80a8522d52e73",
142
155
  "summary": "Native diagnostics collection, summarization, cache, compiler, and process-sampler APIs.",
143
156
  "capabilityGroup": "observability-diagnostics",
144
157
  "audience": [
@@ -177,7 +190,7 @@
177
190
  "specifier": "@kungfu-tech/buildchain/kfd",
178
191
  "export": "./kfd",
179
192
  "target": "./packages/core/kfd.js",
180
- "digest": "sha256:7b4c15c375e19f5e558476cd0e17c6ea86372bb04a08e80cdf268f8ad8077fc4",
193
+ "digest": "sha256:d9e72c8220cf09a4d92ac995a7ddef8b4b0ff17e97440cb87363480eef0b8c8c",
181
194
  "summary": "Unified KFD standards, schema discovery, KFD-1/KFD-2/KFD-3 grouped APIs, KFD-4 schema discovery, upstream KFD aggregate facts, and Buildchain KFD claim helpers.",
182
195
  "capabilityGroup": "kfd-trust",
183
196
  "audience": [
@@ -186,6 +199,19 @@
186
199
  ],
187
200
  "maturity": "stable"
188
201
  },
202
+ {
203
+ "specifier": "@kungfu-tech/buildchain/kfd-product-gates",
204
+ "export": "./kfd-product-gates",
205
+ "target": "./packages/core/kfd-product-gates.js",
206
+ "digest": "sha256:42c393d2d3adc7223d6d8784428556b036c29707e8a3e6becd07b72683f800fb",
207
+ "summary": "Fail-closed KFD-4, KFD-5, and KFD-7 product evidence gates plus non-widening KFD support-matrix release projections.",
208
+ "capabilityGroup": "kfd-trust",
209
+ "audience": [
210
+ "developer",
211
+ "agent"
212
+ ],
213
+ "maturity": "stable"
214
+ },
189
215
  {
190
216
  "specifier": "@kungfu-tech/buildchain/kfd-agent-hub",
191
217
  "export": "./kfd-agent-hub",
@@ -242,7 +268,7 @@
242
268
  "specifier": "@kungfu-tech/buildchain/public-surface-audit",
243
269
  "export": "./public-surface-audit",
244
270
  "target": "./packages/core/public-surface-audit.js",
245
- "digest": "sha256:1a7ab71556fa0c42a9d2c3b4a8613903ee830035a385d487aaa751c4c81b2809",
271
+ "digest": "sha256:680a821f732f3da344c0ecc7a6c8f4178ac268694c43890f677e4c05ad5c3a7e",
246
272
  "summary": "Reverse audit APIs for CLI, workflow, action, site page, and documentation command surfaces.",
247
273
  "capabilityGroup": "kfd-trust",
248
274
  "audience": [
@@ -346,7 +372,7 @@
346
372
  "specifier": "@kungfu-tech/buildchain/github-governance-authority",
347
373
  "export": "./github-governance-authority",
348
374
  "target": "./packages/core/github-governance-authority.js",
349
- "digest": "sha256:63f3ce1520edf99e4f877b1dd28afa33d85150266940cd60f82c2aadba38c50d",
375
+ "digest": "sha256:68f1bca0873f715f4909994c81a97bdc0559879972b1f2026d4e5bbdaf304251",
350
376
  "summary": "Fail-closed GitHub ownership, effective-policy, managed-zone admission, rollout-plan, and immutable receipt APIs.",
351
377
  "capabilityGroup": "governance-versioning",
352
378
  "audience": [
@@ -398,7 +424,7 @@
398
424
  "specifier": "@kungfu-tech/buildchain/release-passport",
399
425
  "export": "./release-passport",
400
426
  "target": "./packages/core/release-passport.js",
401
- "digest": "sha256:6d30420aa771b3504473cabd5d53c16868cfe267b817cfa446b20eabc153f886",
427
+ "digest": "sha256:842f7f1e60a8de253225ada03cf238948ce527481eb640bc6f14c6cc0ef38880",
402
428
  "summary": "Release passport collection, verification, explanation, and evidence APIs.",
403
429
  "capabilityGroup": "release-passport-trust",
404
430
  "audience": [
@@ -411,7 +437,7 @@
411
437
  "specifier": "@kungfu-tech/buildchain/release-passport-contract",
412
438
  "export": "./release-passport-contract",
413
439
  "target": "./packages/core/release-passport-contract.js",
414
- "digest": "sha256:b91d4fd2d830b91445c56f72d75e4dc4e7e69094181154a32a2780f86d81d317",
440
+ "digest": "sha256:5623da00b6355cfafc7564deb9206d36f7b2dafb24e29fec77c35deee5de5f6b",
415
441
  "summary": "Standalone release passport JSON Schema, ownership/check manifest, and structural validation APIs.",
416
442
  "capabilityGroup": "release-passport-trust",
417
443
  "audience": [
@@ -477,7 +503,7 @@
477
503
  {
478
504
  "id": "cli-and-node-package",
479
505
  "path": "docs/cli.md",
480
- "digest": "sha256:f4518193026571d1e84bc245725a9f83e842b2e4b4dfaa072c8207021fa89cd1"
506
+ "digest": "sha256:47be88f5e5fd14124d03510b807722215034d34eefcebdfe2599a310350b7697"
481
507
  },
482
508
  {
483
509
  "id": "build-facts",
@@ -487,7 +513,7 @@
487
513
  {
488
514
  "id": "kfd-support",
489
515
  "path": "docs/kfd-support.md",
490
- "digest": "sha256:58a60b3e54bc47d4bc9b6e08a432ba4ff75ed2275ef056d04c44cc2bc25046da"
516
+ "digest": "sha256:3a6143e450ab7976a50788fee48ec4d7313706774ff5cf8f71075a7b9e196e01"
491
517
  },
492
518
  {
493
519
  "id": "readme-badges",