@kungfu-tech/buildchain 3.0.2 → 3.0.3-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (127) hide show
  1. package/AGENTS.md +1 -1
  2. package/CONTRIBUTING.md +1 -1
  3. package/README.md +27 -1
  4. package/actions/promote-buildchain-ref/README.md +90 -19
  5. package/actions/report-buildchain-issue/README.md +20 -2
  6. package/actions/run-lifecycle/README.md +5 -0
  7. package/actions/validate-config/README.md +19 -1
  8. package/bin/buildchain.mjs +56 -2
  9. package/bin/internal/command-registry.mjs +82 -0
  10. package/bin/internal/trust-release-cli.mjs +1 -0
  11. package/contracts/auditable-demo-media-profiles-v1.json +116 -1
  12. package/contracts/buildchain-v2-residuals-v1.json +146 -0
  13. package/contracts/evidence/auditable-demo-responsive-web-delivery-v1.json +143 -0
  14. package/contracts/evidence/auditable-demo-web-delivery-v1.json +7 -3
  15. package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/complete-transcript.txt +2 -0
  16. package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/public-projection.json +16 -0
  17. package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/scene.json +12 -0
  18. package/dist/site/buildchain-contract.json +188 -46
  19. package/dist/site/buildchain-site.json +181 -90
  20. package/dist/site/capability-registry.json +5 -5
  21. package/dist/site/cli-registry.json +860 -98
  22. package/dist/site/controller-registry.json +118 -5
  23. package/dist/site/kfd-claims.json +233 -19
  24. package/dist/site/kfd-upstream-aggregate.json +1 -1
  25. package/dist/site/manual-registry.json +20 -20
  26. package/dist/site/node-api-registry.json +374 -59
  27. package/dist/site/page-registry.json +156 -65
  28. package/dist/site/public-surface-audit.json +231 -22
  29. package/dist/site/publication-registry.json +4 -4
  30. package/dist/site/release-provenance.json +3 -0
  31. package/dist/site/site-manifest.json +24 -24
  32. package/dist/site/workflow-registry.json +575 -79
  33. package/docs/MAP.md +22 -4
  34. package/docs/auditable-demo.md +54 -13
  35. package/docs/aws-us-elastic-runner-burst-plane.md +381 -0
  36. package/docs/cli.md +119 -12
  37. package/docs/consumer-issue-reporting.md +20 -2
  38. package/docs/dev-alpha-candidate-patrol.md +24 -10
  39. package/docs/github-governance-authority.md +24 -31
  40. package/docs/lifecycle-protocol.md +20 -2
  41. package/docs/migration-inventory.md +24 -5
  42. package/docs/observed-evidence-patrol.md +28 -12
  43. package/docs/ownership.md +19 -1
  44. package/docs/publication-artifacts.md +158 -18
  45. package/docs/publication-authority.md +4 -4
  46. package/docs/publish-transaction.md +78 -31
  47. package/docs/release-candidate.md +24 -0
  48. package/docs/release-flow.md +50 -32
  49. package/docs/release-governance.md +39 -32
  50. package/docs/release-passport.md +4 -0
  51. package/docs/release-propagation.md +57 -12
  52. package/docs/reusable-build-surface.md +218 -90
  53. package/docs/runtime-train-validation.md +20 -2
  54. package/docs/shifu-gate-profiles.md +7 -1
  55. package/docs/stable-candidate-patrol.md +6 -6
  56. package/docs/toolkit-observability.md +22 -0
  57. package/docs/versioning.md +46 -24
  58. package/docs/web-surface-deployments.md +82 -1
  59. package/package.json +7 -5
  60. package/packages/core/README.md +60 -4
  61. package/packages/core/artifact-signing.js +1 -0
  62. package/packages/core/buildchain-contract.js +9 -4
  63. package/packages/core/cache-evidence.js +1 -0
  64. package/packages/core/controller-evidence.js +2 -0
  65. package/packages/core/diagnostics.js +105 -30
  66. package/packages/core/github-governance-authority.js +25 -17
  67. package/packages/core/index.js +40 -0
  68. package/packages/core/paper.js +3226 -0
  69. package/packages/core/public-surface-audit.js +3 -0
  70. package/packages/core/publication-artifact.js +1 -6
  71. package/packages/core/publication-authority.js +1 -0
  72. package/packages/core/publication-control-plane-audit.js +28 -0
  73. package/packages/core/publication-reproducibility.js +947 -0
  74. package/packages/core/publication-sealed-bundle.js +190 -0
  75. package/packages/core/publish-transaction.js +147 -17
  76. package/packages/core/release-candidate.js +234 -0
  77. package/packages/core/release-passport.js +519 -228
  78. package/packages/core/release-propagation.js +175 -1
  79. package/packages/core/stable-release-gate.js +4 -1
  80. package/scripts/artifact-signing-delegation.mjs +268 -0
  81. package/scripts/audit-github-governance.mjs +32 -13
  82. package/scripts/audit-publication-control-plane.mjs +17 -8
  83. package/scripts/auditable-demo.mjs +266 -7
  84. package/scripts/aws-codebuild-toolchain.mjs +285 -0
  85. package/scripts/aws-macos-jit-core.mjs +378 -0
  86. package/scripts/aws-macos-jit.mjs +123 -0
  87. package/scripts/aws-runner-burst-core.mjs +248 -0
  88. package/scripts/aws-runner-burst.mjs +79 -0
  89. package/scripts/aws-windows-jit-core.mjs +374 -0
  90. package/scripts/aws-windows-jit.mjs +121 -0
  91. package/scripts/build-contract-core.mjs +69 -6
  92. package/scripts/build-standalone-binary.mjs +23 -0
  93. package/scripts/buildchain-contract-lock.mjs +1 -1
  94. package/scripts/buildchain-patrol.mjs +1 -1
  95. package/scripts/check-internal-architecture.mjs +69 -2
  96. package/scripts/check-inventory.mjs +70 -2
  97. package/scripts/check-javascript-syntax.mjs +31 -0
  98. package/scripts/check-maintainability.mjs +371 -0
  99. package/scripts/compiler-cache-evidence.mjs +221 -0
  100. package/scripts/dev-alpha-candidate-patrol.mjs +288 -43
  101. package/scripts/dispatch-artifact-signing-authority.mjs +7 -1
  102. package/scripts/finalize-native-artifact-signing-result.mjs +185 -31
  103. package/scripts/gate-profile-core.mjs +6 -1
  104. package/scripts/generate-channel-promotion-workflow.mjs +3 -12
  105. package/scripts/generate-release-candidate-passport.mjs +4 -0
  106. package/scripts/generate-site-bundle.mjs +84 -18
  107. package/scripts/import-artifact-signing-results.mjs +64 -5
  108. package/scripts/inspect-artifact-signing-requests.mjs +52 -14
  109. package/scripts/maintainability-metrics.mjs +339 -0
  110. package/scripts/npm-publish-transaction.mjs +57 -6
  111. package/scripts/observed-evidence.mjs +151 -33
  112. package/scripts/paper.mjs +645 -0
  113. package/scripts/promotion-channel-router.mjs +16 -4
  114. package/scripts/publication-reproducibility.mjs +62 -0
  115. package/scripts/reconcile-github-governance.mjs +8 -1
  116. package/scripts/release-propagation.mjs +39 -0
  117. package/scripts/resolve-artifact-signing-upload-route.mjs +55 -0
  118. package/scripts/resolve-build-contract.mjs +6 -0
  119. package/scripts/route-offline-runners.mjs +236 -0
  120. package/scripts/run-candidate-body-prefix-renderer.mjs +187 -0
  121. package/scripts/run-lifecycle-core.mjs +62 -1
  122. package/scripts/runtime-ref-core.mjs +36 -4
  123. package/scripts/seal-artifact-signing-requests.mjs +64 -12
  124. package/scripts/stable-candidate-qualification.mjs +50 -0
  125. package/scripts/verify-artifact-signing-results.mjs +26 -1
  126. package/scripts/web-surface-core.mjs +272 -86
  127. package/scripts/web-surface-production-decision.mjs +19 -3
package/dist/site/controller-registry.json CHANGED
@@ -122,6 +122,10 @@
122
122
  "classification": "redacted",
123
123
  "source": "workflow-call-secret"
124
124
  },
125
+ "artifact-compression-level": {
126
+ "classification": "included",
127
+ "source": "workflow-call-input"
128
+ },
125
129
  "artifact-name": {
126
130
  "classification": "included",
127
131
  "source": "workflow-call-input"
@@ -166,10 +170,26 @@
166
170
  "classification": "included",
167
171
  "source": "workflow-call-input"
168
172
  },
173
+ "artifact-signing-request-upload-no-proxy": {
174
+ "classification": "included",
175
+ "source": "workflow-call-input"
176
+ },
169
177
  "artifact-transfer-mode": {
170
178
  "classification": "included",
171
179
  "source": "workflow-call-input"
172
180
  },
181
+ "aws-codebuild-project": {
182
+ "classification": "included",
183
+ "source": "workflow-call-input"
184
+ },
185
+ "aws-ec2-macos-runner-label": {
186
+ "classification": "digest-only",
187
+ "source": "workflow-call-input"
188
+ },
189
+ "aws-ec2-windows-runner-label": {
190
+ "classification": "digest-only",
191
+ "source": "workflow-call-input"
192
+ },
173
193
  "build-command": {
174
194
  "classification": "digest-only",
175
195
  "source": "workflow-call-input"
@@ -238,6 +258,18 @@
238
258
  "classification": "digest-only",
239
259
  "source": "workflow-call-input"
240
260
  },
261
+ "compiler-cache-platforms-json": {
262
+ "classification": "digest-only",
263
+ "source": "workflow-call-input"
264
+ },
265
+ "compiler-cache-provider": {
266
+ "classification": "included",
267
+ "source": "workflow-call-input"
268
+ },
269
+ "compiler-cache-required": {
270
+ "classification": "included",
271
+ "source": "workflow-call-input"
272
+ },
241
273
  "control-runner-json": {
242
274
  "classification": "digest-only",
243
275
  "source": "workflow-call-input"
@@ -342,6 +374,10 @@
342
374
  "classification": "included",
343
375
  "source": "workflow-call-input"
344
376
  },
377
+ "release-candidate-family-evidence-json": {
378
+ "classification": "digest-only",
379
+ "source": "workflow-call-input"
380
+ },
345
381
  "requested-parallelism": {
346
382
  "classification": "included",
347
383
  "source": "workflow-call-input"
@@ -382,6 +418,10 @@
382
418
  "classification": "included",
383
419
  "source": "workflow-call-input"
384
420
  },
421
+ "self-hosted-offline-fallback": {
422
+ "classification": "included",
423
+ "source": "workflow-call-input"
424
+ },
385
425
  "setup-node": {
386
426
  "classification": "included",
387
427
  "source": "workflow-call-input"
@@ -429,6 +469,10 @@
429
469
  "id": "build",
430
470
  "required": true
431
471
  },
472
+ {
473
+ "id": "signing-finalization",
474
+ "required": true
475
+ },
432
476
  {
433
477
  "id": "credential-island",
434
478
  "required": false
@@ -445,6 +489,7 @@
445
489
  "capabilities": [
446
490
  "source-lock",
447
491
  "lifecycle-build",
492
+ "artifact-signing-finalization",
448
493
  "credential-island",
449
494
  "lifecycle-verify",
450
495
  "artifact-admission"
@@ -455,7 +500,7 @@
455
500
  "controller-receipt"
456
501
  ]
457
502
  },
458
- "digest": "sha256:146718143cc50e48ac57154aade4a4b06a8df4e036708a150233098d3c1cb6f7"
503
+ "digest": "sha256:2e4c9e9af2162de2333c9b57bffcff77a76e9ed384b9f001ab8ef63d527197f9"
459
504
  },
460
505
  {
461
506
  "schemaVersion": 1,
@@ -503,6 +548,10 @@
503
548
  "classification": "redacted",
504
549
  "source": "workflow-call-secret"
505
550
  },
551
+ "artifact-compression-level": {
552
+ "classification": "included",
553
+ "source": "workflow-call-input"
554
+ },
506
555
  "artifact-name": {
507
556
  "classification": "included",
508
557
  "source": "workflow-call-input"
@@ -547,10 +596,26 @@
547
596
  "classification": "included",
548
597
  "source": "workflow-call-input"
549
598
  },
599
+ "artifact-signing-request-upload-no-proxy": {
600
+ "classification": "included",
601
+ "source": "workflow-call-input"
602
+ },
550
603
  "artifact-transfer-mode": {
551
604
  "classification": "included",
552
605
  "source": "workflow-call-input"
553
606
  },
607
+ "aws-codebuild-project": {
608
+ "classification": "included",
609
+ "source": "workflow-call-input"
610
+ },
611
+ "aws-ec2-macos-runner-label": {
612
+ "classification": "digest-only",
613
+ "source": "workflow-call-input"
614
+ },
615
+ "aws-ec2-windows-runner-label": {
616
+ "classification": "digest-only",
617
+ "source": "workflow-call-input"
618
+ },
554
619
  "build-command": {
555
620
  "classification": "digest-only",
556
621
  "source": "workflow-call-input"
@@ -631,6 +696,18 @@
631
696
  "classification": "digest-only",
632
697
  "source": "workflow-call-input"
633
698
  },
699
+ "compiler-cache-platforms-json": {
700
+ "classification": "digest-only",
701
+ "source": "workflow-call-input"
702
+ },
703
+ "compiler-cache-provider": {
704
+ "classification": "included",
705
+ "source": "workflow-call-input"
706
+ },
707
+ "compiler-cache-required": {
708
+ "classification": "included",
709
+ "source": "workflow-call-input"
710
+ },
634
711
  "control-runner-json": {
635
712
  "classification": "digest-only",
636
713
  "source": "workflow-call-input"
@@ -735,6 +812,10 @@
735
812
  "classification": "included",
736
813
  "source": "workflow-call-input"
737
814
  },
815
+ "release-candidate-family-evidence-json": {
816
+ "classification": "digest-only",
817
+ "source": "workflow-call-input"
818
+ },
738
819
  "requested-parallelism": {
739
820
  "classification": "included",
740
821
  "source": "workflow-call-input"
@@ -775,6 +856,10 @@
775
856
  "classification": "included",
776
857
  "source": "workflow-call-input"
777
858
  },
859
+ "self-hosted-offline-fallback": {
860
+ "classification": "included",
861
+ "source": "workflow-call-input"
862
+ },
778
863
  "setup-node": {
779
864
  "classification": "included",
780
865
  "source": "workflow-call-input"
@@ -829,7 +914,7 @@
829
914
  "controller-receipt"
830
915
  ]
831
916
  },
832
- "digest": "sha256:55b3189412e7da7769a8de60bd1ba4cf52d726d8b79c0a720598e49742aa72a0"
917
+ "digest": "sha256:105eed3eb8f772d4ed93d43e7da404d849b92eafab1b461c7a9b7cb94a8a6b3b"
833
918
  },
834
919
  {
835
920
  "schemaVersion": 1,
@@ -1854,6 +1939,22 @@
1854
1939
  "classification": "digest-only",
1855
1940
  "source": "workflow-call-input"
1856
1941
  },
1942
+ "release-candidate-family-assignment-id": {
1943
+ "classification": "included",
1944
+ "source": "workflow-call-input"
1945
+ },
1946
+ "release-candidate-family-evidence-required": {
1947
+ "classification": "included",
1948
+ "source": "workflow-call-input"
1949
+ },
1950
+ "release-candidate-family-evidence-root": {
1951
+ "classification": "included",
1952
+ "source": "workflow-call-input"
1953
+ },
1954
+ "release-candidate-family-initiative-id": {
1955
+ "classification": "included",
1956
+ "source": "workflow-call-input"
1957
+ },
1857
1958
  "release-candidate-workflow-file": {
1858
1959
  "classification": "included",
1859
1960
  "source": "workflow-call-input"
@@ -1866,6 +1967,10 @@
1866
1967
  "classification": "included",
1867
1968
  "source": "workflow-call-input"
1868
1969
  },
1970
+ "release-passport-attachment-command": {
1971
+ "classification": "digest-only",
1972
+ "source": "workflow-call-input"
1973
+ },
1869
1974
  "release-passport-buildchain-self-kfd": {
1870
1975
  "classification": "included",
1871
1976
  "source": "workflow-call-input"
@@ -1874,6 +1979,10 @@
1874
1979
  "classification": "digest-only",
1875
1980
  "source": "workflow-call-input"
1876
1981
  },
1982
+ "release-passport-evidence-jsons": {
1983
+ "classification": "digest-only",
1984
+ "source": "workflow-call-input"
1985
+ },
1877
1986
  "release-passport-evidence-path": {
1878
1987
  "classification": "digest-only",
1879
1988
  "source": "workflow-call-input"
@@ -2000,7 +2109,7 @@
2000
2109
  "controller-receipt"
2001
2110
  ]
2002
2111
  },
2003
- "digest": "sha256:00baae93d9ed75129fdaed6fcc33285e515b8c7de84816831a39e660941dd7ae"
2112
+ "digest": "sha256:f54bccee97644d190b450e4ed810b516af64ed5d265ea76cd541a11cbbd51cdb"
2004
2113
  },
2005
2114
  {
2006
2115
  "schemaVersion": 1,
@@ -2040,6 +2149,10 @@
2040
2149
  "classification": "included",
2041
2150
  "source": "workflow-call-input"
2042
2151
  },
2152
+ "downstream-update-command": {
2153
+ "classification": "digest-only",
2154
+ "source": "workflow-call-input"
2155
+ },
2043
2156
  "downstream-verify-command": {
2044
2157
  "classification": "digest-only",
2045
2158
  "source": "workflow-call-input"
@@ -2127,7 +2240,7 @@
2127
2240
  "controller-receipt"
2128
2241
  ]
2129
2242
  },
2130
- "digest": "sha256:f97656a8df0758c8e404d5b7c387529256a1ec45d1748f8efb6847a3256b1216"
2243
+ "digest": "sha256:aff7a9f6bcf96d7a9d406e490868288f3acef104e53eddddc5782b8a2b5b4fa5"
2131
2244
  },
2132
2245
  {
2133
2246
  "schemaVersion": 1,
@@ -2176,5 +2289,5 @@
2176
2289
  "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
2177
2290
  }
2178
2291
  ],
2179
- "digest": "sha256:c637b908f2be506f3bd56a7e41995450c4d7011f3badc232712884e4fb7039b4"
2292
+ "digest": "sha256:3564f3c38f8c070280ea9cf5dee810d466b40e72ce80104b15776365dfdf9b60"
2180
2293
  }