@kungfu-tech/buildchain 3.0.3-alpha.0 → 3.0.3-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (115) hide show
  1. package/AGENTS.md +1 -1
  2. package/CONTRIBUTING.md +1 -1
  3. package/README.md +32 -1
  4. package/actions/promote-buildchain-ref/README.md +90 -19
  5. package/actions/report-buildchain-issue/README.md +19 -1
  6. package/actions/run-lifecycle/README.md +5 -0
  7. package/actions/validate-config/README.md +19 -1
  8. package/bin/buildchain.mjs +41 -241
  9. package/bin/internal/command-registry.mjs +82 -0
  10. package/bin/internal/trust-release-cli.mjs +1 -0
  11. package/contracts/auditable-demo-media-profiles-v1.json +116 -1
  12. package/contracts/buildchain-v2-residuals-v1.json +0 -45
  13. package/contracts/evidence/auditable-demo-responsive-web-delivery-v1.json +143 -0
  14. package/contracts/evidence/auditable-demo-web-delivery-v1.json +7 -3
  15. package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/complete-transcript.txt +2 -0
  16. package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/public-projection.json +16 -0
  17. package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/scene.json +12 -0
  18. package/dist/site/buildchain-contract.json +161 -42
  19. package/dist/site/buildchain-site.json +180 -84
  20. package/dist/site/capability-registry.json +6 -6
  21. package/dist/site/cli-registry.json +932 -98
  22. package/dist/site/controller-registry.json +97 -5
  23. package/dist/site/kfd-claims.json +316 -23
  24. package/dist/site/kfd-upstream-aggregate.json +1 -1
  25. package/dist/site/manual-registry.json +20 -20
  26. package/dist/site/node-api-registry.json +371 -56
  27. package/dist/site/page-registry.json +155 -59
  28. package/dist/site/public-surface-audit.json +286 -24
  29. package/dist/site/publication-registry.json +4 -4
  30. package/dist/site/release-provenance.json +3 -0
  31. package/dist/site/site-manifest.json +24 -24
  32. package/dist/site/workflow-registry.json +570 -79
  33. package/docs/MAP.md +22 -4
  34. package/docs/auditable-demo.md +35 -12
  35. package/docs/aws-us-elastic-runner-burst-plane.md +381 -0
  36. package/docs/cli.md +143 -12
  37. package/docs/consumer-issue-reporting.md +19 -1
  38. package/docs/github-governance-authority.md +2 -2
  39. package/docs/lifecycle-protocol.md +20 -2
  40. package/docs/migration-inventory.md +24 -5
  41. package/docs/ownership.md +19 -1
  42. package/docs/publication-artifacts.md +185 -18
  43. package/docs/publication-authority.md +4 -4
  44. package/docs/publish-transaction.md +78 -31
  45. package/docs/release-candidate.md +24 -0
  46. package/docs/release-flow.md +50 -32
  47. package/docs/release-governance.md +31 -31
  48. package/docs/release-passport.md +4 -0
  49. package/docs/release-propagation.md +57 -12
  50. package/docs/reusable-build-surface.md +95 -27
  51. package/docs/runtime-train-validation.md +20 -2
  52. package/docs/stable-candidate-patrol.md +6 -6
  53. package/docs/toolkit-observability.md +22 -0
  54. package/docs/versioning.md +6 -4
  55. package/docs/web-surface-deployments.md +62 -0
  56. package/package.json +7 -5
  57. package/packages/core/README.md +61 -4
  58. package/packages/core/buildchain-contract.js +8 -4
  59. package/packages/core/cache-evidence.js +1 -0
  60. package/packages/core/diagnostics.js +105 -30
  61. package/packages/core/github-governance-authority.js +10 -25
  62. package/packages/core/index.js +40 -0
  63. package/packages/core/paper-fleet.js +260 -0
  64. package/packages/core/paper-repository.js +210 -0
  65. package/packages/core/paper-work.js +365 -0
  66. package/packages/core/paper.js +3180 -0
  67. package/packages/core/public-surface-audit.js +26 -75
  68. package/packages/core/public-surface-cli.js +117 -0
  69. package/packages/core/publication-artifact.js +1 -6
  70. package/packages/core/publication-authority.js +1 -0
  71. package/packages/core/publication-reproducibility.js +947 -0
  72. package/packages/core/publication-sealed-bundle.js +190 -0
  73. package/packages/core/publish-transaction.js +147 -17
  74. package/packages/core/release-candidate.js +234 -0
  75. package/packages/core/release-passport.js +483 -201
  76. package/packages/core/release-propagation.js +175 -1
  77. package/scripts/auditable-demo.mjs +119 -5
  78. package/scripts/aws-codebuild-toolchain.mjs +285 -0
  79. package/scripts/aws-macos-jit-core.mjs +378 -0
  80. package/scripts/aws-macos-jit.mjs +123 -0
  81. package/scripts/aws-runner-burst-core.mjs +248 -0
  82. package/scripts/aws-runner-burst.mjs +79 -0
  83. package/scripts/aws-windows-jit-core.mjs +374 -0
  84. package/scripts/aws-windows-jit.mjs +121 -0
  85. package/scripts/build-contract-core.mjs +69 -6
  86. package/scripts/build-standalone-binary.mjs +23 -0
  87. package/scripts/buildchain-cli-help.mjs +256 -0
  88. package/scripts/buildchain-contract-lock.mjs +1 -1
  89. package/scripts/check-internal-architecture.mjs +69 -2
  90. package/scripts/check-inventory.mjs +69 -2
  91. package/scripts/check-javascript-syntax.mjs +31 -0
  92. package/scripts/check-maintainability.mjs +371 -0
  93. package/scripts/compiler-cache-evidence.mjs +221 -0
  94. package/scripts/dev-alpha-candidate-patrol.mjs +268 -43
  95. package/scripts/finalize-native-artifact-signing-result.mjs +75 -4
  96. package/scripts/generate-channel-promotion-workflow.mjs +3 -12
  97. package/scripts/generate-release-candidate-passport.mjs +4 -0
  98. package/scripts/generate-site-bundle.mjs +68 -188
  99. package/scripts/import-artifact-signing-results.mjs +64 -5
  100. package/scripts/inspect-artifact-signing-requests.mjs +7 -0
  101. package/scripts/maintainability-metrics.mjs +339 -0
  102. package/scripts/npm-publish-transaction.mjs +57 -6
  103. package/scripts/paper-work-fleet-cli.mjs +563 -0
  104. package/scripts/paper.mjs +631 -0
  105. package/scripts/promotion-channel-router.mjs +16 -4
  106. package/scripts/publication-reproducibility.mjs +62 -0
  107. package/scripts/release-propagation.mjs +39 -0
  108. package/scripts/resolve-build-contract.mjs +6 -0
  109. package/scripts/route-offline-runners.mjs +236 -0
  110. package/scripts/run-lifecycle-core.mjs +62 -1
  111. package/scripts/runtime-ref-core.mjs +23 -2
  112. package/scripts/seal-artifact-signing-requests.mjs +13 -6
  113. package/scripts/site-capability-metadata.mjs +202 -0
  114. package/scripts/stable-candidate-qualification.mjs +42 -0
  115. package/scripts/web-surface-core.mjs +272 -86
package/dist/site/manual-registry.json CHANGED
@@ -9,7 +9,7 @@
9
9
  "title": "Buildchain documentation map",
10
10
  "path": "docs/MAP.md",
11
11
  "plane": "use",
12
- "digest": "sha256:cc32692e8d04816e8de94f208e43c2d5c5c7a8425cec8b32edc73ab78591fbbf",
12
+ "digest": "sha256:430eed733bfcbebd853da9c60a687822dab73689d7fb9ad2e9a760af279415e5",
13
13
  "capabilityGroup": "getting-started",
14
14
  "audience": [
15
15
  "agent",
@@ -23,7 +23,7 @@
23
23
  "title": "Auditable demo artifact pipeline",
24
24
  "path": "docs/auditable-demo.md",
25
25
  "plane": "verify",
26
- "digest": "sha256:6af21e489bc3d2e9e2d01838926f1fbab6d74d92446d1f9cfc5eb08e090dd3a5",
26
+ "digest": "sha256:4b3e529060ba54a439a86159a4dc0fc7fb43c8456a90e4b32579c86b20bc6bab",
27
27
  "capabilityGroup": "reusable-build",
28
28
  "audience": [
29
29
  "consumer",
@@ -50,7 +50,7 @@
50
50
  "title": "Release Passport protocol",
51
51
  "path": "docs/release-passport.md",
52
52
  "plane": "verify",
53
- "digest": "sha256:d698078075700e60bafb9677bc4c35d49970136b98caaecfc51d38344285cdd5",
53
+ "digest": "sha256:e1ca1d470de4faeb9f7f0a57228aebbc166d0c96d03a5603fc576ad955c497a4",
54
54
  "capabilityGroup": "release-passport-trust",
55
55
  "audience": [
56
56
  "release-operator",
@@ -93,7 +93,7 @@
93
93
  "title": "Sealed publication authority",
94
94
  "path": "docs/publication-authority.md",
95
95
  "plane": "verify",
96
- "digest": "sha256:118dc751fa3c37b4b20f4b909534458148c0f42c2c9d69f13e2fa5373dbfe244",
96
+ "digest": "sha256:6c91ee89d1ed5c0c570806684738916876556b2f1bcbf4be4f73f30ff89e98a4",
97
97
  "capabilityGroup": "release-passport-trust",
98
98
  "audience": [
99
99
  "release-operator",
@@ -107,7 +107,7 @@
107
107
  "title": "GitHub governance authority",
108
108
  "path": "docs/github-governance-authority.md",
109
109
  "plane": "verify",
110
- "digest": "sha256:304d0246d21bdd0f6a77183ac6839a5d1234d08d98bd5da9728c85a65b1ff7b7",
110
+ "digest": "sha256:197ae7a949817f60f46b67b060731df14d0343d9daecd7d6eacfae9a526b6a12",
111
111
  "capabilityGroup": "governance-versioning",
112
112
  "audience": [
113
113
  "maintainer",
@@ -122,7 +122,7 @@
122
122
  "title": "Release Candidate Passport",
123
123
  "path": "docs/release-candidate.md",
124
124
  "plane": "verify",
125
- "digest": "sha256:887bc3c041c3231d8e6dd403964d04d28a9eb13081bc4154dc2a6ebd56697ecd",
125
+ "digest": "sha256:fbcffddf1e2c50502186b7ba557e29f96be59a1da6d438aabd4d1f9ce32b5915",
126
126
  "capabilityGroup": "reusable-build",
127
127
  "audience": [
128
128
  "release-operator",
@@ -136,7 +136,7 @@
136
136
  "title": "Release propagation",
137
137
  "path": "docs/release-propagation.md",
138
138
  "plane": "use",
139
- "digest": "sha256:b7d2deef7d50fc412aa21c7ef1019c4c2bd8b0392b9b323356b1c0b1fc2596b6",
139
+ "digest": "sha256:aea013d923a8d419fc76e99a81765f281640dd95141d32ae415b8572604e9d32",
140
140
  "capabilityGroup": "site-and-propagation",
141
141
  "audience": [
142
142
  "release-operator",
@@ -192,7 +192,7 @@
192
192
  "title": "Consumer issue reporting",
193
193
  "path": "docs/consumer-issue-reporting.md",
194
194
  "plane": "use",
195
- "digest": "sha256:20c33ab68e91227837626d1289d6c5540a318c8ff484d9a1f0ebe7dbe8626d02",
195
+ "digest": "sha256:324342b10e69ca5ce6d04a267fb5fc2a6b52e674f6252eec2121557c5542f729",
196
196
  "capabilityGroup": "observability-diagnostics",
197
197
  "audience": [
198
198
  "consumer",
@@ -220,7 +220,7 @@
220
220
  "title": "Toolkit observability",
221
221
  "path": "docs/toolkit-observability.md",
222
222
  "plane": "use",
223
- "digest": "sha256:d7f4179c3912d7bbc5940bfba69e674fb03d020a740063c0b877a171bd5789e3",
223
+ "digest": "sha256:1a08331cdca2b48e622ecbb799a7465a59cc4a779dd73d36f559f9bc1b98578c",
224
224
  "capabilityGroup": "observability-diagnostics",
225
225
  "audience": [
226
226
  "developer",
@@ -248,7 +248,7 @@
248
248
  "title": "Migration inventory",
249
249
  "path": "docs/migration-inventory.md",
250
250
  "plane": "verify",
251
- "digest": "sha256:bb73731a3b747d02b9453537109754f194c58dba92c260ac84c632b0d58607af",
251
+ "digest": "sha256:25d896711f4efebffa9a8960b7eb97438d9fd4892aa08bef0339026e83a53bdf",
252
252
  "capabilityGroup": "governance-versioning",
253
253
  "audience": [
254
254
  "maintainer",
@@ -262,7 +262,7 @@
262
262
  "title": "Ownership",
263
263
  "path": "docs/ownership.md",
264
264
  "plane": "why",
265
- "digest": "sha256:a9f54f211b55da6464d890b0ebfe046dbf564aabdfee3aadf457723f9aae398a",
265
+ "digest": "sha256:91a1b59f0f71067c58ffd685a23b29e14a4d6fe33c1a44f8708b7d0512e4baa5",
266
266
  "capabilityGroup": "governance-versioning",
267
267
  "audience": [
268
268
  "maintainer"
@@ -289,7 +289,7 @@
289
289
  "title": "CLI and npm package",
290
290
  "path": "docs/cli.md",
291
291
  "plane": "use",
292
- "digest": "sha256:49da688f9f8b726a9169a3e4b246cb6ef07c6c626ea15c22f0b26ba1a37a58b4",
292
+ "digest": "sha256:9afe80ef29fb5cce140ffc7980c41172495878726e5504e47914b8dc7af8fc1f",
293
293
  "capabilityGroup": "api-cli-reference",
294
294
  "audience": [
295
295
  "agent",
@@ -346,7 +346,7 @@
346
346
  "title": "Lifecycle protocol",
347
347
  "path": "docs/lifecycle-protocol.md",
348
348
  "plane": "use",
349
- "digest": "sha256:55425241363da6105a6b36a46bf8c9d7edd5b0e0f9dbcebe1452327642eb2af9",
349
+ "digest": "sha256:4b7a8efe1d22751ded069f46a23490db70cda9e9e14641acab600ab781245b19",
350
350
  "capabilityGroup": "reusable-build",
351
351
  "audience": [
352
352
  "consumer",
@@ -360,7 +360,7 @@
360
360
  "title": "Reusable build surface",
361
361
  "path": "docs/reusable-build-surface.md",
362
362
  "plane": "use",
363
- "digest": "sha256:4409c8259c3613b51a1db809493e73d9b85a0d16d292a491046fd36770d98fb0",
363
+ "digest": "sha256:8908e1f1589537ac8ef82ee1dacdd24072ca871e3e245825669e7cfbdebd2e3d",
364
364
  "capabilityGroup": "reusable-build",
365
365
  "audience": [
366
366
  "consumer",
@@ -374,7 +374,7 @@
374
374
  "title": "Publish transaction",
375
375
  "path": "docs/publish-transaction.md",
376
376
  "plane": "verify",
377
- "digest": "sha256:cde5256d5f6443a6d32b47783900a0677e973855266af5a360db8d4d112bb677",
377
+ "digest": "sha256:9b830727e5b0d2192c937f19106c11ea5064dde77e30d290825f343df47f291b",
378
378
  "capabilityGroup": "release-passport-trust",
379
379
  "audience": [
380
380
  "release-operator"
@@ -387,7 +387,7 @@
387
387
  "title": "Release governance",
388
388
  "path": "docs/release-governance.md",
389
389
  "plane": "why",
390
- "digest": "sha256:8c31e6daccd40ea4e7cb08e8fa3eb2f238006e331621aed45eddcb80aee5532f",
390
+ "digest": "sha256:60ec90d3294818d3c53e403312801a8ab47be7c0f34810002676fbfcdbceaa60",
391
391
  "capabilityGroup": "governance-versioning",
392
392
  "audience": [
393
393
  "maintainer",
@@ -401,7 +401,7 @@
401
401
  "title": "Release flow",
402
402
  "path": "docs/release-flow.md",
403
403
  "plane": "verify",
404
- "digest": "sha256:fc6495a7b5124c17c880777e16fc98e60ed7766ec9a958abfca3030bdc2c321e",
404
+ "digest": "sha256:bac959565c36cf39c3cd30dfce00dbbb59b73ed21b852a8f24a6cae281cb5f05",
405
405
  "capabilityGroup": "governance-versioning",
406
406
  "audience": [
407
407
  "release-operator",
@@ -415,7 +415,7 @@
415
415
  "title": "Runtime train validation",
416
416
  "path": "docs/runtime-train-validation.md",
417
417
  "plane": "verify",
418
- "digest": "sha256:c9ebf451294f92a2be3aa2ac4b2ec7afb3cc17bbeae2ece7879b800c0f274a40",
418
+ "digest": "sha256:1a4ce3fc2c150f88bc4d32123a108478ba5d73d0d69b8a95bf0d6670e32618a0",
419
419
  "capabilityGroup": "governance-versioning",
420
420
  "audience": [
421
421
  "maintainer",
@@ -429,7 +429,7 @@
429
429
  "title": "Versioning",
430
430
  "path": "docs/versioning.md",
431
431
  "plane": "why",
432
- "digest": "sha256:52f58a1a69ea924cb1fae11bb6a8def2b0c66cc4ab08416553cf680c213b5ded",
432
+ "digest": "sha256:5dd27f3c4a412a23093e5d33746a5d5d40353625c8ffe89a961978fc5de9c03e",
433
433
  "capabilityGroup": "governance-versioning",
434
434
  "audience": [
435
435
  "maintainer"
@@ -442,7 +442,7 @@
442
442
  "title": "Web surface deployments",
443
443
  "path": "docs/web-surface-deployments.md",
444
444
  "plane": "use",
445
- "digest": "sha256:6b907af93c55ffd8274cd83ad87a45dd48eb9a01938cf419aafebb5557be5821",
445
+ "digest": "sha256:484e896746d2f4cca4f9f18d29c14784ec20143c12affc3dbb9ccfbf8f221b55",
446
446
  "capabilityGroup": "site-and-propagation",
447
447
  "audience": [
448
448
  "site",