@kungfu-tech/buildchain 3.0.2 → 3.0.3-alpha.1

package/dist/site/public-surface-audit.json

@@ -3,11 +3,11 @@
   "contract": "kungfu-buildchain-public-surface-reverse-audit",
   "status": "passed",
   "summary": {
-    "cliCommandCount": 97,
+    "cliCommandCount": 107,
     "workflowCount": 57,
     "actionCount": 6,
-    "sitePageCount": 59,
-    "docCommandRefCount": 291,
+    "sitePageCount": 60,
+    "docCommandRefCount": 311,
     "failureCount": 0
   },
   "enumerated": {
@@ -367,6 +367,51 @@
         "source": "bin/buildchain.mjs",
         "usage": "buildchain npm dry-run [--cwd <dir>] [--expected-tag <tag>] [--registry <url>]"
       },
+      {
+        "id": "paper",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain paper"
+      },
+      {
+        "id": "paper-alpha",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain paper alpha [--cwd <dir>] [--source-ref <ref>] [--target-ref <ref>]"
+      },
+      {
+        "id": "paper-bootstrap-npm",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain paper bootstrap npm [--cwd <dir>] [--execute]"
+      },
+      {
+        "id": "paper-build",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain paper build [--cwd <dir>] [--execute] [--json]"
+      },
+      {
+        "id": "paper-migrate",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain paper migrate [--cwd <dir>] [--write] [--json]"
+      },
+      {
+        "id": "paper-preflight",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain paper preflight [--cwd <dir>] [--offline] [--json]"
+      },
+      {
+        "id": "paper-resume",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain paper resume [--cwd <dir>] [--buildchain-ref <ref>] [--execute] [--json]"
+      },
+      {
+        "id": "paper-scaffold",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain paper scaffold --package <name> --repository <owner/repo> [--write] [--json]"
+      },
+      {
+        "id": "paper-status",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain paper status [--cwd <dir>] [--json]"
+      },
       {
         "id": "portable-cache",
         "source": "bin/buildchain.mjs",
@@ -392,6 +437,11 @@
         "source": "bin/buildchain.mjs",
         "usage": "buildchain publication-artifact npm-package [--cwd <dir>] [--output-dir <dir>] [--package-name <name>] [--json]"
       },
+      {
+        "id": "publication-artifact-reproducibility",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain publication-artifact reproducibility [--cwd <dir>] [--source-sha <sha>]"
+      },
       {
         "id": "publish-source",
         "source": "bin/buildchain.mjs",
@@ -504,6 +554,7 @@
         "path": ".github/workflows/.auditable-demo.yml",
         "reusable": true,
         "inputs": [
+          "adapter-arguments-json",
           "adapter-path",
           "artifact-retention-days",
           "buildchain-repository",
@@ -515,7 +566,7 @@
           "source-artifact-name",
           "source-ref"
         ],
-        "inputCount": 10,
+        "inputCount": 11,
         "secrets": [],
         "secretCount": 0,
         "outputs": [
@@ -567,6 +618,7 @@
         "path": ".github/workflows/.build.yml",
         "reusable": true,
         "inputs": [
+          "artifact-compression-level",
           "artifact-name",
           "artifact-name-template",
           "artifact-paths",
@@ -578,7 +630,11 @@
           "artifact-relay-s3-role-arn",
           "artifact-relay-s3-upload-role-arn",
           "artifact-retention-days",
+          "artifact-signing-request-upload-no-proxy",
           "artifact-transfer-mode",
+          "aws-codebuild-project",
+          "aws-ec2-macos-runner-label",
+          "aws-ec2-windows-runner-label",
           "build-command",
           "buildchain-contract-compatibility-policy",
           "buildchain-contract-drift-issue-mode",
@@ -596,6 +652,9 @@
           "checkout-cache-mode",
           "checkout-cache-reference-repository-template",
           "checkout-cache-timeout-seconds",
+          "compiler-cache-platforms-json",
+          "compiler-cache-provider",
+          "compiler-cache-required",
           "control-runner-json",
           "credential-island-caller-owned",
           "credential-island-environment",
@@ -622,6 +681,7 @@
           "publish-registry",
           "publish-source-ref",
           "release-candidate",
+          "release-candidate-family-evidence-json",
           "requested-parallelism",
           "require-build",
           "require-install",
@@ -632,6 +692,7 @@
           "rustup-dist-server",
           "rustup-update-root",
           "sample-process-tree",
+          "self-hosted-offline-fallback",
           "setup-node",
           "setup-rust",
           "shifu-cache-profile-digest",
@@ -640,7 +701,7 @@
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 72,
+        "inputCount": 82,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -695,9 +756,10 @@
           "release-candidate-passport-json",
           "release-manifest-json",
           "runner-preset",
+          "runner-routing-json",
           "trusted-event"
         ],
-        "outputCount": 42
+        "outputCount": 43
       },
       {
         "id": ".bump-minor-version",
@@ -889,11 +951,17 @@
           "publish-transaction-override",
           "release-activation-command",
           "release-activation-receipt-set-path",
+          "release-candidate-family-assignment-id",
+          "release-candidate-family-evidence-required",
+          "release-candidate-family-evidence-root",
+          "release-candidate-family-initiative-id",
           "release-candidate-workflow-file",
           "release-candidate-workflow-name",
           "release-passport",
+          "release-passport-attachment-command",
           "release-passport-buildchain-self-kfd",
           "release-passport-evidence-command",
+          "release-passport-evidence-jsons",
           "release-passport-evidence-path",
           "release-passport-impact-json",
           "release-passport-invariant-passport-command",
@@ -916,7 +984,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 88,
+        "inputCount": 94,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -1364,6 +1432,7 @@
         "path": ".github/workflows/build.yml",
         "reusable": true,
         "inputs": [
+          "artifact-compression-level",
           "artifact-name",
           "artifact-name-template",
           "artifact-paths",
@@ -1375,7 +1444,11 @@
           "artifact-relay-s3-role-arn",
           "artifact-relay-s3-upload-role-arn",
           "artifact-retention-days",
+          "artifact-signing-request-upload-no-proxy",
           "artifact-transfer-mode",
+          "aws-codebuild-project",
+          "aws-ec2-macos-runner-label",
+          "aws-ec2-windows-runner-label",
           "build-command",
           "buildchain-alpha-contract-lock-path",
           "buildchain-channel",
@@ -1396,6 +1469,9 @@
           "checkout-cache-mode",
           "checkout-cache-reference-repository-template",
           "checkout-cache-timeout-seconds",
+          "compiler-cache-platforms-json",
+          "compiler-cache-provider",
+          "compiler-cache-required",
           "control-runner-json",
           "credential-island-caller-owned",
           "credential-island-environment",
@@ -1422,6 +1498,7 @@
           "publish-registry",
           "publish-source-ref",
           "release-candidate",
+          "release-candidate-family-evidence-json",
           "requested-parallelism",
           "require-build",
           "require-install",
@@ -1432,6 +1509,7 @@
           "rustup-dist-server",
           "rustup-update-root",
           "sample-process-tree",
+          "self-hosted-offline-fallback",
           "setup-node",
           "setup-rust",
           "shifu-cache-profile-digest",
@@ -1440,7 +1518,7 @@
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 75,
+        "inputCount": 85,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -1498,9 +1576,10 @@
           "release-candidate-passport-json",
           "release-manifest-json",
           "runner-preset",
+          "runner-routing-json",
           "trusted-event"
         ],
-        "outputCount": 45
+        "outputCount": 46
       },
       {
         "id": "buildchain-alpha-self-dogfood",
@@ -1666,11 +1745,13 @@
           "dry-run",
           "max-age-seconds",
           "pull-request-body-prefix",
+          "pull-request-body-prefix-renderer",
+          "reactivation-authorized",
           "settlement-authorized",
           "source-branch",
           "target-branch"
         ],
-        "inputCount": 11,
+        "inputCount": 13,
         "secrets": [
           "promotion-token"
         ],
@@ -1680,13 +1761,14 @@
           "controller-state",
           "eligible",
           "next-candidate-sha",
+          "prior-state-root",
           "promotion-pr",
           "result-path",
           "selected-sha",
           "settlement-action",
           "source-lock-ref"
         ],
-        "outputCount": 9
+        "outputCount": 10
       },
       {
         "id": "dev-merge-queue-governance",
@@ -1820,9 +1902,13 @@
         ],
         "inputCount": 26,
         "secrets": [
-          "BUILDCHAIN_PROMOTION_TOKEN"
+          "BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID",
+          "BUILDCHAIN_GENERATED_WRITE_APP_PRIVATE_KEY",
+          "BUILDCHAIN_GENERATED_WRITE_TOKEN",
+          "BUILDCHAIN_PROMOTION_TOKEN",
+          "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
         ],
-        "secretCount": 1,
+        "secretCount": 5,
         "outputs": [
           "github-release-url",
           "package-name",
@@ -2111,11 +2197,17 @@
           "publish-transaction-override",
           "release-activation-command",
           "release-activation-receipt-set-path",
+          "release-candidate-family-assignment-id",
+          "release-candidate-family-evidence-required",
+          "release-candidate-family-evidence-root",
+          "release-candidate-family-initiative-id",
           "release-candidate-workflow-file",
           "release-candidate-workflow-name",
           "release-passport",
+          "release-passport-attachment-command",
           "release-passport-buildchain-self-kfd",
           "release-passport-evidence-command",
+          "release-passport-evidence-jsons",
           "release-passport-evidence-path",
           "release-passport-impact-json",
           "release-passport-invariant-passport-command",
@@ -2138,7 +2230,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 80,
+        "inputCount": 86,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2240,6 +2332,7 @@
           "downstream-prepare-command",
           "downstream-repository",
           "downstream-target",
+          "downstream-update-command",
           "downstream-verify-command",
           "dry-run",
           "graph-json",
@@ -2250,7 +2343,7 @@
           "source-node",
           "upstream-release-json"
         ],
-        "inputCount": 16,
+        "inputCount": 17,
         "secrets": [
           "propagation-token"
         ],
@@ -2262,9 +2355,11 @@
           "controller-receipt-artifact",
           "controller-receipt-digest",
           "controller-receipt-json",
-          "controller-receipt-status"
+          "controller-receipt-status",
+          "propagation-receipt-digest",
+          "propagation-receipt-json"
         ],
-        "outputCount": 7
+        "outputCount": 9
       },
       {
         "id": "release-verify",
@@ -2373,6 +2468,7 @@
         "id": "macos-credential-island",
         "path": "actions/macos-credential-island/action.yml",
         "inputs": [
+          "artifact-id",
           "artifact-name",
           "artifact-relative-output",
           "artifact-stem",
@@ -2394,7 +2490,7 @@
           "source-sha",
           "source-tree-sha"
         ],
-        "inputCount": 20
+        "inputCount": 21
       },
       {
         "id": "promote-buildchain-ref",
@@ -2427,6 +2523,8 @@
           "publish-package-set-order",
           "publish-rematerialize-on-resume",
           "publish-required-artifacts-json",
+          "publish-sealed-bundle-manifest",
+          "publish-sealed-bundle-root",
           "publish-source-locked",
           "publish-source-ref",
           "publish-source-sha",
@@ -2435,12 +2533,19 @@
           "publish-transaction-override",
           "reconciliation-workspace",
           "release-candidate-build-summary-path",
+          "release-candidate-family-assignment-id",
+          "release-candidate-family-evidence-required",
+          "release-candidate-family-evidence-root",
+          "release-candidate-family-initiative-id",
           "release-candidate-passport-path",
           "release-candidate-version",
           "release-material-sha",
           "release-passport",
+          "release-passport-attachment-command",
           "release-passport-build-summary-path",
           "release-passport-buildchain-self-kfd",
+          "release-passport-evidence-command",
+          "release-passport-evidence-jsons",
           "release-passport-github-artifact-attestation-policy-jsons",
           "release-passport-impact-json",
           "release-passport-invariant-passport-command",
@@ -2468,7 +2573,7 @@
           "transaction-state-path",
           "verification-command"
         ],
-        "inputCount": 67
+        "inputCount": 76
       },
       {
         "id": "report-buildchain-issue",
@@ -2644,6 +2749,10 @@
         "id": "manual:auditable-demo",
         "category": "manual"
       },
+      {
+        "id": "manual:aws-us-elastic-runner-burst-plane",
+        "category": "manual"
+      },
       {
         "id": "manual:binary-distribution",
         "category": "manual"
@@ -3878,6 +3987,91 @@
         "path": "docs/cli.md",
         "command": "buildchain npm dry-run"
       },
+      {
+        "id": "paper-alpha",
+        "path": "docs/cli.md",
+        "command": "buildchain paper alpha --json"
+      },
+      {
+        "id": "paper-bootstrap-npm",
+        "path": "docs/cli.md",
+        "command": "buildchain paper bootstrap npm"
+      },
+      {
+        "id": "paper-bootstrap-npm",
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain paper bootstrap npm"
+      },
+      {
+        "id": "paper-bootstrap-npm",
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain paper bootstrap npm"
+      },
+      {
+        "id": "paper-build",
+        "path": "docs/cli.md",
+        "command": "buildchain paper build --json"
+      },
+      {
+        "id": "paper-migrate",
+        "path": "docs/cli.md",
+        "command": "buildchain paper migrate --json"
+      },
+      {
+        "id": "paper-preflight",
+        "path": "docs/cli.md",
+        "command": "buildchain paper preflight --offline"
+      },
+      {
+        "id": "paper-preflight",
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain paper preflight --offline"
+      },
+      {
+        "id": "paper-preflight",
+        "path": "README.md",
+        "command": "buildchain paper preflight --offline"
+      },
+      {
+        "id": "paper-resume",
+        "path": "docs/cli.md",
+        "command": "buildchain paper resume --json"
+      },
+      {
+        "id": "paper-scaffold",
+        "path": "docs/cli.md",
+        "command": "buildchain paper scaffold --package"
+      },
+      {
+        "id": "paper-scaffold",
+        "path": "README.md",
+        "command": "buildchain paper scaffold"
+      },
+      {
+        "id": "paper-status",
+        "path": "docs/cli.md",
+        "command": "buildchain paper status --json"
+      },
+      {
+        "id": "paper-status",
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain paper status --json"
+      },
+      {
+        "id": "paper-status",
+        "path": "README.md",
+        "command": "buildchain paper status"
+      },
+      {
+        "id": "paper",
+        "path": "docs/cli.md",
+        "command": "buildchain paper"
+      },
+      {
+        "id": "paper",
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain paper"
+      },
       {
         "id": "portable-cache",
         "path": "docs/cli.md",
@@ -3923,6 +4117,16 @@
         "path": "docs/publication-artifacts.md",
         "command": "buildchain publication-artifact npm-package --json"
       },
+      {
+        "id": "publication-artifact-reproducibility",
+        "path": "docs/cli.md",
+        "command": "buildchain publication-artifact reproducibility"
+      },
+      {
+        "id": "publication-artifact-reproducibility",
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain publication-artifact reproducibility"
+      },
       {
         "id": "publication-artifact",
         "path": "docs/cli.md",
@@ -4003,6 +4207,11 @@
         "path": "docs/release-propagation.md",
         "command": "buildchain release-propagation write-lock"
       },
+      {
+        "id": "release-propagation",
+        "path": "docs/release-propagation.md",
+        "command": "buildchain release-propagation receipt"
+      },
       {
         "id": "release-transaction",
         "path": "docs/cli.md",
@@ -4259,9 +4468,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "0be723caa314a36a1a36b03522527eb5b13e9b741e6566ff7f6ee06958df02ca",
-    "workflowRegistryDigest": "01792ad09bcdcd3c12d018e6ee9613a09b5a1b87525d6f643a18f963f0d973a1",
-    "pageRegistryDigest": "56583b14046754bc0c02c512602c4e1c4e9ecdf68e6e639fcab8d550c3e082b4"
+    "cliRegistryDigest": "d7e8b86baa70f65617f2cafe24bb448d1ce56c3221c8b5a96217fe892b080520",
+    "workflowRegistryDigest": "9500a8099e10c5328b6e051445dba3c18cf0eb31eec3655b6554b111417f9abd",
+    "pageRegistryDigest": "02f8a3c24c8fbb9840e04d0d5605d662a72c174e2f355078af8d8b24d9fe5fc9"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-07-30T07:24:06.316Z",
-  "publishedAt": "2026-07-30T07:24:06.316Z",
+  "generatedAt": "2026-07-31T13:41:52.861Z",
+  "publishedAt": "2026-07-31T13:41:52.861Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "1aeb9191f607a7223f8ab63c96427b605ecda9be",
+  "sourceRevision": "b8e84bcb51e131207896c426fb8e79fd0f46b5ac",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.2",
+    "version": "3.0.3-alpha.1",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/release-provenance.json

@@ -38,6 +38,9 @@
       "./portable-dev-cache": "./packages/core/portable-dev-cache.js",
       "./publication-artifact": "./packages/core/publication-artifact.js",
       "./publication-package": "./packages/core/publication-package.js",
+      "./publication-reproducibility": "./packages/core/publication-reproducibility.js",
+      "./publication-sealed-bundle": "./packages/core/publication-sealed-bundle.js",
+      "./paper": "./packages/core/paper.js",
       "./publication-authority": "./packages/core/publication-authority.js",
       "./publication-control-plane-audit": "./packages/core/publication-control-plane-audit.js",
       "./buildchain-publication-authority": "./packages/core/buildchain-publication-authority.js",