@kungfu-tech/buildchain 3.0.3-alpha.0 → 3.0.3-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +1 -1
- package/CONTRIBUTING.md +1 -1
- package/README.md +32 -1
- package/actions/promote-buildchain-ref/README.md +90 -19
- package/actions/report-buildchain-issue/README.md +19 -1
- package/actions/run-lifecycle/README.md +5 -0
- package/actions/validate-config/README.md +19 -1
- package/bin/buildchain.mjs +41 -241
- package/bin/internal/command-registry.mjs +82 -0
- package/bin/internal/trust-release-cli.mjs +1 -0
- package/contracts/auditable-demo-media-profiles-v1.json +116 -1
- package/contracts/buildchain-v2-residuals-v1.json +0 -45
- package/contracts/evidence/auditable-demo-responsive-web-delivery-v1.json +143 -0
- package/contracts/evidence/auditable-demo-web-delivery-v1.json +7 -3
- package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/complete-transcript.txt +2 -0
- package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/public-projection.json +16 -0
- package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/scene.json +12 -0
- package/dist/site/buildchain-contract.json +161 -42
- package/dist/site/buildchain-site.json +180 -84
- package/dist/site/capability-registry.json +6 -6
- package/dist/site/cli-registry.json +932 -98
- package/dist/site/controller-registry.json +97 -5
- package/dist/site/kfd-claims.json +316 -23
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +20 -20
- package/dist/site/node-api-registry.json +371 -56
- package/dist/site/page-registry.json +155 -59
- package/dist/site/public-surface-audit.json +286 -24
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/release-provenance.json +3 -0
- package/dist/site/site-manifest.json +24 -24
- package/dist/site/workflow-registry.json +570 -79
- package/docs/MAP.md +22 -4
- package/docs/auditable-demo.md +35 -12
- package/docs/aws-us-elastic-runner-burst-plane.md +381 -0
- package/docs/cli.md +143 -12
- package/docs/consumer-issue-reporting.md +19 -1
- package/docs/github-governance-authority.md +2 -2
- package/docs/lifecycle-protocol.md +20 -2
- package/docs/migration-inventory.md +24 -5
- package/docs/ownership.md +19 -1
- package/docs/publication-artifacts.md +185 -18
- package/docs/publication-authority.md +4 -4
- package/docs/publish-transaction.md +78 -31
- package/docs/release-candidate.md +24 -0
- package/docs/release-flow.md +50 -32
- package/docs/release-governance.md +31 -31
- package/docs/release-passport.md +4 -0
- package/docs/release-propagation.md +57 -12
- package/docs/reusable-build-surface.md +95 -27
- package/docs/runtime-train-validation.md +20 -2
- package/docs/stable-candidate-patrol.md +6 -6
- package/docs/toolkit-observability.md +22 -0
- package/docs/versioning.md +6 -4
- package/docs/web-surface-deployments.md +62 -0
- package/package.json +7 -5
- package/packages/core/README.md +61 -4
- package/packages/core/buildchain-contract.js +8 -4
- package/packages/core/cache-evidence.js +1 -0
- package/packages/core/diagnostics.js +105 -30
- package/packages/core/github-governance-authority.js +10 -25
- package/packages/core/index.js +40 -0
- package/packages/core/paper-fleet.js +260 -0
- package/packages/core/paper-repository.js +210 -0
- package/packages/core/paper-work.js +365 -0
- package/packages/core/paper.js +3180 -0
- package/packages/core/public-surface-audit.js +26 -75
- package/packages/core/public-surface-cli.js +117 -0
- package/packages/core/publication-artifact.js +1 -6
- package/packages/core/publication-authority.js +1 -0
- package/packages/core/publication-reproducibility.js +947 -0
- package/packages/core/publication-sealed-bundle.js +190 -0
- package/packages/core/publish-transaction.js +147 -17
- package/packages/core/release-candidate.js +234 -0
- package/packages/core/release-passport.js +483 -201
- package/packages/core/release-propagation.js +175 -1
- package/scripts/auditable-demo.mjs +119 -5
- package/scripts/aws-codebuild-toolchain.mjs +285 -0
- package/scripts/aws-macos-jit-core.mjs +378 -0
- package/scripts/aws-macos-jit.mjs +123 -0
- package/scripts/aws-runner-burst-core.mjs +248 -0
- package/scripts/aws-runner-burst.mjs +79 -0
- package/scripts/aws-windows-jit-core.mjs +374 -0
- package/scripts/aws-windows-jit.mjs +121 -0
- package/scripts/build-contract-core.mjs +69 -6
- package/scripts/build-standalone-binary.mjs +23 -0
- package/scripts/buildchain-cli-help.mjs +256 -0
- package/scripts/buildchain-contract-lock.mjs +1 -1
- package/scripts/check-internal-architecture.mjs +69 -2
- package/scripts/check-inventory.mjs +69 -2
- package/scripts/check-javascript-syntax.mjs +31 -0
- package/scripts/check-maintainability.mjs +371 -0
- package/scripts/compiler-cache-evidence.mjs +221 -0
- package/scripts/dev-alpha-candidate-patrol.mjs +268 -43
- package/scripts/finalize-native-artifact-signing-result.mjs +75 -4
- package/scripts/generate-channel-promotion-workflow.mjs +3 -12
- package/scripts/generate-release-candidate-passport.mjs +4 -0
- package/scripts/generate-site-bundle.mjs +68 -188
- package/scripts/import-artifact-signing-results.mjs +64 -5
- package/scripts/inspect-artifact-signing-requests.mjs +7 -0
- package/scripts/maintainability-metrics.mjs +339 -0
- package/scripts/npm-publish-transaction.mjs +57 -6
- package/scripts/paper-work-fleet-cli.mjs +563 -0
- package/scripts/paper.mjs +631 -0
- package/scripts/promotion-channel-router.mjs +16 -4
- package/scripts/publication-reproducibility.mjs +62 -0
- package/scripts/release-propagation.mjs +39 -0
- package/scripts/resolve-build-contract.mjs +6 -0
- package/scripts/route-offline-runners.mjs +236 -0
- package/scripts/run-lifecycle-core.mjs +62 -1
- package/scripts/runtime-ref-core.mjs +23 -2
- package/scripts/seal-artifact-signing-requests.mjs +13 -6
- package/scripts/site-capability-metadata.mjs +202 -0
- package/scripts/stable-candidate-qualification.mjs +42 -0
- package/scripts/web-surface-core.mjs +272 -86
|
@@ -3,11 +3,11 @@
|
|
|
3
3
|
"contract": "kungfu-buildchain-public-surface-reverse-audit",
|
|
4
4
|
"status": "passed",
|
|
5
5
|
"summary": {
|
|
6
|
-
"cliCommandCount":
|
|
6
|
+
"cliCommandCount": 111,
|
|
7
7
|
"workflowCount": 57,
|
|
8
8
|
"actionCount": 6,
|
|
9
|
-
"sitePageCount":
|
|
10
|
-
"docCommandRefCount":
|
|
9
|
+
"sitePageCount": 60,
|
|
10
|
+
"docCommandRefCount": 315,
|
|
11
11
|
"failureCount": 0
|
|
12
12
|
},
|
|
13
13
|
"enumerated": {
|
|
@@ -367,6 +367,71 @@
|
|
|
367
367
|
"source": "bin/buildchain.mjs",
|
|
368
368
|
"usage": "buildchain npm dry-run [--cwd <dir>] [--expected-tag <tag>] [--registry <url>]"
|
|
369
369
|
},
|
|
370
|
+
{
|
|
371
|
+
"id": "paper",
|
|
372
|
+
"source": "bin/buildchain.mjs",
|
|
373
|
+
"usage": "buildchain paper"
|
|
374
|
+
},
|
|
375
|
+
{
|
|
376
|
+
"id": "paper-alpha",
|
|
377
|
+
"source": "bin/buildchain.mjs",
|
|
378
|
+
"usage": "buildchain paper alpha [--cwd <dir>] [--source-ref <ref>] [--target-ref <ref>]"
|
|
379
|
+
},
|
|
380
|
+
{
|
|
381
|
+
"id": "paper-bootstrap-npm",
|
|
382
|
+
"source": "bin/buildchain.mjs",
|
|
383
|
+
"usage": "buildchain paper bootstrap npm [--cwd <dir>] [--execute]"
|
|
384
|
+
},
|
|
385
|
+
{
|
|
386
|
+
"id": "paper-build",
|
|
387
|
+
"source": "bin/buildchain.mjs",
|
|
388
|
+
"usage": "buildchain paper build [--cwd <dir>] [--execute] [--json]"
|
|
389
|
+
},
|
|
390
|
+
{
|
|
391
|
+
"id": "paper-fleet-audit",
|
|
392
|
+
"source": "bin/buildchain.mjs",
|
|
393
|
+
"usage": "buildchain paper fleet audit [--root <dir>] [--offline] [--json]"
|
|
394
|
+
},
|
|
395
|
+
{
|
|
396
|
+
"id": "paper-fleet-update",
|
|
397
|
+
"source": "bin/buildchain.mjs",
|
|
398
|
+
"usage": "buildchain paper fleet update [--root <dir>] [--write] [--json]"
|
|
399
|
+
},
|
|
400
|
+
{
|
|
401
|
+
"id": "paper-migrate",
|
|
402
|
+
"source": "bin/buildchain.mjs",
|
|
403
|
+
"usage": "buildchain paper migrate [--cwd <dir>] [--write] [--json]"
|
|
404
|
+
},
|
|
405
|
+
{
|
|
406
|
+
"id": "paper-preflight",
|
|
407
|
+
"source": "bin/buildchain.mjs",
|
|
408
|
+
"usage": "buildchain paper preflight [--cwd <dir>] [--offline] [--json]"
|
|
409
|
+
},
|
|
410
|
+
{
|
|
411
|
+
"id": "paper-resume",
|
|
412
|
+
"source": "bin/buildchain.mjs",
|
|
413
|
+
"usage": "buildchain paper resume [--cwd <dir>] [--buildchain-ref <ref>] [--execute] [--json]"
|
|
414
|
+
},
|
|
415
|
+
{
|
|
416
|
+
"id": "paper-scaffold",
|
|
417
|
+
"source": "bin/buildchain.mjs",
|
|
418
|
+
"usage": "buildchain paper scaffold --package <name> --repository <owner/repo> [--write] [--json]"
|
|
419
|
+
},
|
|
420
|
+
{
|
|
421
|
+
"id": "paper-status",
|
|
422
|
+
"source": "bin/buildchain.mjs",
|
|
423
|
+
"usage": "buildchain paper status [--cwd <dir>] [--json]"
|
|
424
|
+
},
|
|
425
|
+
{
|
|
426
|
+
"id": "paper-work-start",
|
|
427
|
+
"source": "bin/buildchain.mjs",
|
|
428
|
+
"usage": "buildchain paper work start <topic> [--cwd <dir>] [--branch <branch>] [--execute] [--json]"
|
|
429
|
+
},
|
|
430
|
+
{
|
|
431
|
+
"id": "paper-work-submit",
|
|
432
|
+
"source": "bin/buildchain.mjs",
|
|
433
|
+
"usage": "buildchain paper work submit [--cwd <dir>] [--title <title>] [--body <body>] [--execute] [--json]"
|
|
434
|
+
},
|
|
370
435
|
{
|
|
371
436
|
"id": "portable-cache",
|
|
372
437
|
"source": "bin/buildchain.mjs",
|
|
@@ -392,6 +457,11 @@
|
|
|
392
457
|
"source": "bin/buildchain.mjs",
|
|
393
458
|
"usage": "buildchain publication-artifact npm-package [--cwd <dir>] [--output-dir <dir>] [--package-name <name>] [--json]"
|
|
394
459
|
},
|
|
460
|
+
{
|
|
461
|
+
"id": "publication-artifact-reproducibility",
|
|
462
|
+
"source": "bin/buildchain.mjs",
|
|
463
|
+
"usage": "buildchain publication-artifact reproducibility [--cwd <dir>] [--source-sha <sha>]"
|
|
464
|
+
},
|
|
395
465
|
{
|
|
396
466
|
"id": "publish-source",
|
|
397
467
|
"source": "bin/buildchain.mjs",
|
|
@@ -504,6 +574,7 @@
|
|
|
504
574
|
"path": ".github/workflows/.auditable-demo.yml",
|
|
505
575
|
"reusable": true,
|
|
506
576
|
"inputs": [
|
|
577
|
+
"adapter-arguments-json",
|
|
507
578
|
"adapter-path",
|
|
508
579
|
"artifact-retention-days",
|
|
509
580
|
"buildchain-repository",
|
|
@@ -515,7 +586,7 @@
|
|
|
515
586
|
"source-artifact-name",
|
|
516
587
|
"source-ref"
|
|
517
588
|
],
|
|
518
|
-
"inputCount":
|
|
589
|
+
"inputCount": 11,
|
|
519
590
|
"secrets": [],
|
|
520
591
|
"secretCount": 0,
|
|
521
592
|
"outputs": [
|
|
@@ -581,6 +652,9 @@
|
|
|
581
652
|
"artifact-retention-days",
|
|
582
653
|
"artifact-signing-request-upload-no-proxy",
|
|
583
654
|
"artifact-transfer-mode",
|
|
655
|
+
"aws-codebuild-project",
|
|
656
|
+
"aws-ec2-macos-runner-label",
|
|
657
|
+
"aws-ec2-windows-runner-label",
|
|
584
658
|
"build-command",
|
|
585
659
|
"buildchain-contract-compatibility-policy",
|
|
586
660
|
"buildchain-contract-drift-issue-mode",
|
|
@@ -598,6 +672,9 @@
|
|
|
598
672
|
"checkout-cache-mode",
|
|
599
673
|
"checkout-cache-reference-repository-template",
|
|
600
674
|
"checkout-cache-timeout-seconds",
|
|
675
|
+
"compiler-cache-platforms-json",
|
|
676
|
+
"compiler-cache-provider",
|
|
677
|
+
"compiler-cache-required",
|
|
601
678
|
"control-runner-json",
|
|
602
679
|
"credential-island-caller-owned",
|
|
603
680
|
"credential-island-environment",
|
|
@@ -624,6 +701,7 @@
|
|
|
624
701
|
"publish-registry",
|
|
625
702
|
"publish-source-ref",
|
|
626
703
|
"release-candidate",
|
|
704
|
+
"release-candidate-family-evidence-json",
|
|
627
705
|
"requested-parallelism",
|
|
628
706
|
"require-build",
|
|
629
707
|
"require-install",
|
|
@@ -634,6 +712,7 @@
|
|
|
634
712
|
"rustup-dist-server",
|
|
635
713
|
"rustup-update-root",
|
|
636
714
|
"sample-process-tree",
|
|
715
|
+
"self-hosted-offline-fallback",
|
|
637
716
|
"setup-node",
|
|
638
717
|
"setup-rust",
|
|
639
718
|
"shifu-cache-profile-digest",
|
|
@@ -642,7 +721,7 @@
|
|
|
642
721
|
"verify-command",
|
|
643
722
|
"working-directory"
|
|
644
723
|
],
|
|
645
|
-
"inputCount":
|
|
724
|
+
"inputCount": 82,
|
|
646
725
|
"secrets": [
|
|
647
726
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
|
|
648
727
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
|
|
@@ -697,9 +776,10 @@
|
|
|
697
776
|
"release-candidate-passport-json",
|
|
698
777
|
"release-manifest-json",
|
|
699
778
|
"runner-preset",
|
|
779
|
+
"runner-routing-json",
|
|
700
780
|
"trusted-event"
|
|
701
781
|
],
|
|
702
|
-
"outputCount":
|
|
782
|
+
"outputCount": 43
|
|
703
783
|
},
|
|
704
784
|
{
|
|
705
785
|
"id": ".bump-minor-version",
|
|
@@ -891,11 +971,17 @@
|
|
|
891
971
|
"publish-transaction-override",
|
|
892
972
|
"release-activation-command",
|
|
893
973
|
"release-activation-receipt-set-path",
|
|
974
|
+
"release-candidate-family-assignment-id",
|
|
975
|
+
"release-candidate-family-evidence-required",
|
|
976
|
+
"release-candidate-family-evidence-root",
|
|
977
|
+
"release-candidate-family-initiative-id",
|
|
894
978
|
"release-candidate-workflow-file",
|
|
895
979
|
"release-candidate-workflow-name",
|
|
896
980
|
"release-passport",
|
|
981
|
+
"release-passport-attachment-command",
|
|
897
982
|
"release-passport-buildchain-self-kfd",
|
|
898
983
|
"release-passport-evidence-command",
|
|
984
|
+
"release-passport-evidence-jsons",
|
|
899
985
|
"release-passport-evidence-path",
|
|
900
986
|
"release-passport-impact-json",
|
|
901
987
|
"release-passport-invariant-passport-command",
|
|
@@ -918,7 +1004,7 @@
|
|
|
918
1004
|
"target-sha",
|
|
919
1005
|
"trusted-publishing"
|
|
920
1006
|
],
|
|
921
|
-
"inputCount":
|
|
1007
|
+
"inputCount": 94,
|
|
922
1008
|
"secrets": [
|
|
923
1009
|
"BUILDCHAIN_ISSUE_APP_ID",
|
|
924
1010
|
"BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
|
|
@@ -1380,6 +1466,9 @@
|
|
|
1380
1466
|
"artifact-retention-days",
|
|
1381
1467
|
"artifact-signing-request-upload-no-proxy",
|
|
1382
1468
|
"artifact-transfer-mode",
|
|
1469
|
+
"aws-codebuild-project",
|
|
1470
|
+
"aws-ec2-macos-runner-label",
|
|
1471
|
+
"aws-ec2-windows-runner-label",
|
|
1383
1472
|
"build-command",
|
|
1384
1473
|
"buildchain-alpha-contract-lock-path",
|
|
1385
1474
|
"buildchain-channel",
|
|
@@ -1400,6 +1489,9 @@
|
|
|
1400
1489
|
"checkout-cache-mode",
|
|
1401
1490
|
"checkout-cache-reference-repository-template",
|
|
1402
1491
|
"checkout-cache-timeout-seconds",
|
|
1492
|
+
"compiler-cache-platforms-json",
|
|
1493
|
+
"compiler-cache-provider",
|
|
1494
|
+
"compiler-cache-required",
|
|
1403
1495
|
"control-runner-json",
|
|
1404
1496
|
"credential-island-caller-owned",
|
|
1405
1497
|
"credential-island-environment",
|
|
@@ -1426,6 +1518,7 @@
|
|
|
1426
1518
|
"publish-registry",
|
|
1427
1519
|
"publish-source-ref",
|
|
1428
1520
|
"release-candidate",
|
|
1521
|
+
"release-candidate-family-evidence-json",
|
|
1429
1522
|
"requested-parallelism",
|
|
1430
1523
|
"require-build",
|
|
1431
1524
|
"require-install",
|
|
@@ -1436,6 +1529,7 @@
|
|
|
1436
1529
|
"rustup-dist-server",
|
|
1437
1530
|
"rustup-update-root",
|
|
1438
1531
|
"sample-process-tree",
|
|
1532
|
+
"self-hosted-offline-fallback",
|
|
1439
1533
|
"setup-node",
|
|
1440
1534
|
"setup-rust",
|
|
1441
1535
|
"shifu-cache-profile-digest",
|
|
@@ -1444,7 +1538,7 @@
|
|
|
1444
1538
|
"verify-command",
|
|
1445
1539
|
"working-directory"
|
|
1446
1540
|
],
|
|
1447
|
-
"inputCount":
|
|
1541
|
+
"inputCount": 85,
|
|
1448
1542
|
"secrets": [
|
|
1449
1543
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
|
|
1450
1544
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
|
|
@@ -1502,9 +1596,10 @@
|
|
|
1502
1596
|
"release-candidate-passport-json",
|
|
1503
1597
|
"release-manifest-json",
|
|
1504
1598
|
"runner-preset",
|
|
1599
|
+
"runner-routing-json",
|
|
1505
1600
|
"trusted-event"
|
|
1506
1601
|
],
|
|
1507
|
-
"outputCount":
|
|
1602
|
+
"outputCount": 46
|
|
1508
1603
|
},
|
|
1509
1604
|
{
|
|
1510
1605
|
"id": "buildchain-alpha-self-dogfood",
|
|
@@ -1671,11 +1766,12 @@
|
|
|
1671
1766
|
"max-age-seconds",
|
|
1672
1767
|
"pull-request-body-prefix",
|
|
1673
1768
|
"pull-request-body-prefix-renderer",
|
|
1769
|
+
"reactivation-authorized",
|
|
1674
1770
|
"settlement-authorized",
|
|
1675
1771
|
"source-branch",
|
|
1676
1772
|
"target-branch"
|
|
1677
1773
|
],
|
|
1678
|
-
"inputCount":
|
|
1774
|
+
"inputCount": 13,
|
|
1679
1775
|
"secrets": [
|
|
1680
1776
|
"promotion-token"
|
|
1681
1777
|
],
|
|
@@ -1685,13 +1781,14 @@
|
|
|
1685
1781
|
"controller-state",
|
|
1686
1782
|
"eligible",
|
|
1687
1783
|
"next-candidate-sha",
|
|
1784
|
+
"prior-state-root",
|
|
1688
1785
|
"promotion-pr",
|
|
1689
1786
|
"result-path",
|
|
1690
1787
|
"selected-sha",
|
|
1691
1788
|
"settlement-action",
|
|
1692
1789
|
"source-lock-ref"
|
|
1693
1790
|
],
|
|
1694
|
-
"outputCount":
|
|
1791
|
+
"outputCount": 10
|
|
1695
1792
|
},
|
|
1696
1793
|
{
|
|
1697
1794
|
"id": "dev-merge-queue-governance",
|
|
@@ -1825,9 +1922,13 @@
|
|
|
1825
1922
|
],
|
|
1826
1923
|
"inputCount": 26,
|
|
1827
1924
|
"secrets": [
|
|
1828
|
-
"
|
|
1925
|
+
"BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID",
|
|
1926
|
+
"BUILDCHAIN_GENERATED_WRITE_APP_PRIVATE_KEY",
|
|
1927
|
+
"BUILDCHAIN_GENERATED_WRITE_TOKEN",
|
|
1928
|
+
"BUILDCHAIN_PROMOTION_TOKEN",
|
|
1929
|
+
"KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
|
|
1829
1930
|
],
|
|
1830
|
-
"secretCount":
|
|
1931
|
+
"secretCount": 5,
|
|
1831
1932
|
"outputs": [
|
|
1832
1933
|
"github-release-url",
|
|
1833
1934
|
"package-name",
|
|
@@ -2116,11 +2217,17 @@
|
|
|
2116
2217
|
"publish-transaction-override",
|
|
2117
2218
|
"release-activation-command",
|
|
2118
2219
|
"release-activation-receipt-set-path",
|
|
2220
|
+
"release-candidate-family-assignment-id",
|
|
2221
|
+
"release-candidate-family-evidence-required",
|
|
2222
|
+
"release-candidate-family-evidence-root",
|
|
2223
|
+
"release-candidate-family-initiative-id",
|
|
2119
2224
|
"release-candidate-workflow-file",
|
|
2120
2225
|
"release-candidate-workflow-name",
|
|
2121
2226
|
"release-passport",
|
|
2227
|
+
"release-passport-attachment-command",
|
|
2122
2228
|
"release-passport-buildchain-self-kfd",
|
|
2123
2229
|
"release-passport-evidence-command",
|
|
2230
|
+
"release-passport-evidence-jsons",
|
|
2124
2231
|
"release-passport-evidence-path",
|
|
2125
2232
|
"release-passport-impact-json",
|
|
2126
2233
|
"release-passport-invariant-passport-command",
|
|
@@ -2143,7 +2250,7 @@
|
|
|
2143
2250
|
"target-sha",
|
|
2144
2251
|
"trusted-publishing"
|
|
2145
2252
|
],
|
|
2146
|
-
"inputCount":
|
|
2253
|
+
"inputCount": 86,
|
|
2147
2254
|
"secrets": [
|
|
2148
2255
|
"BUILDCHAIN_ISSUE_APP_ID",
|
|
2149
2256
|
"BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
|
|
@@ -2245,6 +2352,7 @@
|
|
|
2245
2352
|
"downstream-prepare-command",
|
|
2246
2353
|
"downstream-repository",
|
|
2247
2354
|
"downstream-target",
|
|
2355
|
+
"downstream-update-command",
|
|
2248
2356
|
"downstream-verify-command",
|
|
2249
2357
|
"dry-run",
|
|
2250
2358
|
"graph-json",
|
|
@@ -2255,7 +2363,7 @@
|
|
|
2255
2363
|
"source-node",
|
|
2256
2364
|
"upstream-release-json"
|
|
2257
2365
|
],
|
|
2258
|
-
"inputCount":
|
|
2366
|
+
"inputCount": 17,
|
|
2259
2367
|
"secrets": [
|
|
2260
2368
|
"propagation-token"
|
|
2261
2369
|
],
|
|
@@ -2267,9 +2375,11 @@
|
|
|
2267
2375
|
"controller-receipt-artifact",
|
|
2268
2376
|
"controller-receipt-digest",
|
|
2269
2377
|
"controller-receipt-json",
|
|
2270
|
-
"controller-receipt-status"
|
|
2378
|
+
"controller-receipt-status",
|
|
2379
|
+
"propagation-receipt-digest",
|
|
2380
|
+
"propagation-receipt-json"
|
|
2271
2381
|
],
|
|
2272
|
-
"outputCount":
|
|
2382
|
+
"outputCount": 9
|
|
2273
2383
|
},
|
|
2274
2384
|
{
|
|
2275
2385
|
"id": "release-verify",
|
|
@@ -2378,6 +2488,7 @@
|
|
|
2378
2488
|
"id": "macos-credential-island",
|
|
2379
2489
|
"path": "actions/macos-credential-island/action.yml",
|
|
2380
2490
|
"inputs": [
|
|
2491
|
+
"artifact-id",
|
|
2381
2492
|
"artifact-name",
|
|
2382
2493
|
"artifact-relative-output",
|
|
2383
2494
|
"artifact-stem",
|
|
@@ -2399,7 +2510,7 @@
|
|
|
2399
2510
|
"source-sha",
|
|
2400
2511
|
"source-tree-sha"
|
|
2401
2512
|
],
|
|
2402
|
-
"inputCount":
|
|
2513
|
+
"inputCount": 21
|
|
2403
2514
|
},
|
|
2404
2515
|
{
|
|
2405
2516
|
"id": "promote-buildchain-ref",
|
|
@@ -2432,6 +2543,8 @@
|
|
|
2432
2543
|
"publish-package-set-order",
|
|
2433
2544
|
"publish-rematerialize-on-resume",
|
|
2434
2545
|
"publish-required-artifacts-json",
|
|
2546
|
+
"publish-sealed-bundle-manifest",
|
|
2547
|
+
"publish-sealed-bundle-root",
|
|
2435
2548
|
"publish-source-locked",
|
|
2436
2549
|
"publish-source-ref",
|
|
2437
2550
|
"publish-source-sha",
|
|
@@ -2440,12 +2553,19 @@
|
|
|
2440
2553
|
"publish-transaction-override",
|
|
2441
2554
|
"reconciliation-workspace",
|
|
2442
2555
|
"release-candidate-build-summary-path",
|
|
2556
|
+
"release-candidate-family-assignment-id",
|
|
2557
|
+
"release-candidate-family-evidence-required",
|
|
2558
|
+
"release-candidate-family-evidence-root",
|
|
2559
|
+
"release-candidate-family-initiative-id",
|
|
2443
2560
|
"release-candidate-passport-path",
|
|
2444
2561
|
"release-candidate-version",
|
|
2445
2562
|
"release-material-sha",
|
|
2446
2563
|
"release-passport",
|
|
2564
|
+
"release-passport-attachment-command",
|
|
2447
2565
|
"release-passport-build-summary-path",
|
|
2448
2566
|
"release-passport-buildchain-self-kfd",
|
|
2567
|
+
"release-passport-evidence-command",
|
|
2568
|
+
"release-passport-evidence-jsons",
|
|
2449
2569
|
"release-passport-github-artifact-attestation-policy-jsons",
|
|
2450
2570
|
"release-passport-impact-json",
|
|
2451
2571
|
"release-passport-invariant-passport-command",
|
|
@@ -2473,7 +2593,7 @@
|
|
|
2473
2593
|
"transaction-state-path",
|
|
2474
2594
|
"verification-command"
|
|
2475
2595
|
],
|
|
2476
|
-
"inputCount":
|
|
2596
|
+
"inputCount": 76
|
|
2477
2597
|
},
|
|
2478
2598
|
{
|
|
2479
2599
|
"id": "report-buildchain-issue",
|
|
@@ -2649,6 +2769,10 @@
|
|
|
2649
2769
|
"id": "manual:auditable-demo",
|
|
2650
2770
|
"category": "manual"
|
|
2651
2771
|
},
|
|
2772
|
+
{
|
|
2773
|
+
"id": "manual:aws-us-elastic-runner-burst-plane",
|
|
2774
|
+
"category": "manual"
|
|
2775
|
+
},
|
|
2652
2776
|
{
|
|
2653
2777
|
"id": "manual:binary-distribution",
|
|
2654
2778
|
"category": "manual"
|
|
@@ -3883,6 +4007,111 @@
|
|
|
3883
4007
|
"path": "docs/cli.md",
|
|
3884
4008
|
"command": "buildchain npm dry-run"
|
|
3885
4009
|
},
|
|
4010
|
+
{
|
|
4011
|
+
"id": "paper-alpha",
|
|
4012
|
+
"path": "docs/cli.md",
|
|
4013
|
+
"command": "buildchain paper alpha --json"
|
|
4014
|
+
},
|
|
4015
|
+
{
|
|
4016
|
+
"id": "paper-bootstrap-npm",
|
|
4017
|
+
"path": "docs/cli.md",
|
|
4018
|
+
"command": "buildchain paper bootstrap npm"
|
|
4019
|
+
},
|
|
4020
|
+
{
|
|
4021
|
+
"id": "paper-bootstrap-npm",
|
|
4022
|
+
"path": "docs/publication-artifacts.md",
|
|
4023
|
+
"command": "buildchain paper bootstrap npm"
|
|
4024
|
+
},
|
|
4025
|
+
{
|
|
4026
|
+
"id": "paper-bootstrap-npm",
|
|
4027
|
+
"path": "docs/publication-artifacts.md",
|
|
4028
|
+
"command": "buildchain paper bootstrap npm"
|
|
4029
|
+
},
|
|
4030
|
+
{
|
|
4031
|
+
"id": "paper-build",
|
|
4032
|
+
"path": "docs/cli.md",
|
|
4033
|
+
"command": "buildchain paper build --json"
|
|
4034
|
+
},
|
|
4035
|
+
{
|
|
4036
|
+
"id": "paper-fleet-audit",
|
|
4037
|
+
"path": "docs/cli.md",
|
|
4038
|
+
"command": "buildchain paper fleet audit"
|
|
4039
|
+
},
|
|
4040
|
+
{
|
|
4041
|
+
"id": "paper-fleet-audit",
|
|
4042
|
+
"path": "docs/publication-artifacts.md",
|
|
4043
|
+
"command": "buildchain paper fleet audit"
|
|
4044
|
+
},
|
|
4045
|
+
{
|
|
4046
|
+
"id": "paper-fleet-update",
|
|
4047
|
+
"path": "docs/cli.md",
|
|
4048
|
+
"command": "buildchain paper fleet update"
|
|
4049
|
+
},
|
|
4050
|
+
{
|
|
4051
|
+
"id": "paper-fleet-update",
|
|
4052
|
+
"path": "docs/publication-artifacts.md",
|
|
4053
|
+
"command": "buildchain paper fleet update"
|
|
4054
|
+
},
|
|
4055
|
+
{
|
|
4056
|
+
"id": "paper-migrate",
|
|
4057
|
+
"path": "docs/cli.md",
|
|
4058
|
+
"command": "buildchain paper migrate --json"
|
|
4059
|
+
},
|
|
4060
|
+
{
|
|
4061
|
+
"id": "paper-preflight",
|
|
4062
|
+
"path": "docs/cli.md",
|
|
4063
|
+
"command": "buildchain paper preflight --offline"
|
|
4064
|
+
},
|
|
4065
|
+
{
|
|
4066
|
+
"id": "paper-preflight",
|
|
4067
|
+
"path": "docs/publication-artifacts.md",
|
|
4068
|
+
"command": "buildchain paper preflight --offline"
|
|
4069
|
+
},
|
|
4070
|
+
{
|
|
4071
|
+
"id": "paper-resume",
|
|
4072
|
+
"path": "docs/cli.md",
|
|
4073
|
+
"command": "buildchain paper resume --json"
|
|
4074
|
+
},
|
|
4075
|
+
{
|
|
4076
|
+
"id": "paper-scaffold",
|
|
4077
|
+
"path": "docs/cli.md",
|
|
4078
|
+
"command": "buildchain paper scaffold --package"
|
|
4079
|
+
},
|
|
4080
|
+
{
|
|
4081
|
+
"id": "paper-scaffold",
|
|
4082
|
+
"path": "README.md",
|
|
4083
|
+
"command": "buildchain paper scaffold"
|
|
4084
|
+
},
|
|
4085
|
+
{
|
|
4086
|
+
"id": "paper-status",
|
|
4087
|
+
"path": "docs/cli.md",
|
|
4088
|
+
"command": "buildchain paper status --json"
|
|
4089
|
+
},
|
|
4090
|
+
{
|
|
4091
|
+
"id": "paper-status",
|
|
4092
|
+
"path": "docs/publication-artifacts.md",
|
|
4093
|
+
"command": "buildchain paper status --json"
|
|
4094
|
+
},
|
|
4095
|
+
{
|
|
4096
|
+
"id": "paper-work-start",
|
|
4097
|
+
"path": "docs/cli.md",
|
|
4098
|
+
"command": "buildchain paper work start"
|
|
4099
|
+
},
|
|
4100
|
+
{
|
|
4101
|
+
"id": "paper-work-submit",
|
|
4102
|
+
"path": "docs/cli.md",
|
|
4103
|
+
"command": "buildchain paper work submit"
|
|
4104
|
+
},
|
|
4105
|
+
{
|
|
4106
|
+
"id": "paper",
|
|
4107
|
+
"path": "docs/cli.md",
|
|
4108
|
+
"command": "buildchain paper"
|
|
4109
|
+
},
|
|
4110
|
+
{
|
|
4111
|
+
"id": "paper",
|
|
4112
|
+
"path": "docs/publication-artifacts.md",
|
|
4113
|
+
"command": "buildchain paper"
|
|
4114
|
+
},
|
|
3886
4115
|
{
|
|
3887
4116
|
"id": "portable-cache",
|
|
3888
4117
|
"path": "docs/cli.md",
|
|
@@ -3928,6 +4157,16 @@
|
|
|
3928
4157
|
"path": "docs/publication-artifacts.md",
|
|
3929
4158
|
"command": "buildchain publication-artifact npm-package --json"
|
|
3930
4159
|
},
|
|
4160
|
+
{
|
|
4161
|
+
"id": "publication-artifact-reproducibility",
|
|
4162
|
+
"path": "docs/cli.md",
|
|
4163
|
+
"command": "buildchain publication-artifact reproducibility"
|
|
4164
|
+
},
|
|
4165
|
+
{
|
|
4166
|
+
"id": "publication-artifact-reproducibility",
|
|
4167
|
+
"path": "docs/publication-artifacts.md",
|
|
4168
|
+
"command": "buildchain publication-artifact reproducibility"
|
|
4169
|
+
},
|
|
3931
4170
|
{
|
|
3932
4171
|
"id": "publication-artifact",
|
|
3933
4172
|
"path": "docs/cli.md",
|
|
@@ -4008,6 +4247,11 @@
|
|
|
4008
4247
|
"path": "docs/release-propagation.md",
|
|
4009
4248
|
"command": "buildchain release-propagation write-lock"
|
|
4010
4249
|
},
|
|
4250
|
+
{
|
|
4251
|
+
"id": "release-propagation",
|
|
4252
|
+
"path": "docs/release-propagation.md",
|
|
4253
|
+
"command": "buildchain release-propagation receipt"
|
|
4254
|
+
},
|
|
4011
4255
|
{
|
|
4012
4256
|
"id": "release-transaction",
|
|
4013
4257
|
"path": "docs/cli.md",
|
|
@@ -4264,9 +4508,9 @@
|
|
|
4264
4508
|
"cliRegistryPath": "dist/site/cli-registry.json",
|
|
4265
4509
|
"workflowRegistryPath": "dist/site/workflow-registry.json",
|
|
4266
4510
|
"pageRegistryPath": "dist/site/page-registry.json",
|
|
4267
|
-
"cliRegistryDigest": "
|
|
4268
|
-
"workflowRegistryDigest": "
|
|
4269
|
-
"pageRegistryDigest": "
|
|
4511
|
+
"cliRegistryDigest": "48cb548303c6773a09257bca5699f0d5e84639a083c85e566446efb740d34578",
|
|
4512
|
+
"workflowRegistryDigest": "9500a8099e10c5328b6e051445dba3c18cf0eb31eec3655b6554b111417f9abd",
|
|
4513
|
+
"pageRegistryDigest": "76d2cc04d6bff33c9e8842eedee7e0a78506ba8a99f4c89a429c1c4e5042e90c"
|
|
4270
4514
|
},
|
|
4271
4515
|
"comparison": {
|
|
4272
4516
|
"missingCliRegistry": [],
|
|
@@ -4279,8 +4523,26 @@
|
|
|
4279
4523
|
"mode": "closed-world-enumerable",
|
|
4280
4524
|
"scope": "Buildchain CLI usage/dispatch, reusable workflow inputs, action inputs, site pages, and documentation command references",
|
|
4281
4525
|
"residualRisk": [
|
|
4282
|
-
|
|
4283
|
-
|
|
4526
|
+
{
|
|
4527
|
+
"id": "public-surface-helper-command-enumeration",
|
|
4528
|
+
"definedBy": "https://kfd.libkungfu.dev/schemas/kfd-2/trust-taxonomy.schema.json#/$defs/residualRisk",
|
|
4529
|
+
"riskType": "natural-language-semantic-risk",
|
|
4530
|
+
"trustImpact": "downgrade-warning",
|
|
4531
|
+
"machineProvability": "not-machine-verifiable",
|
|
4532
|
+
"agentAction": "semantic-review-required",
|
|
4533
|
+
"owner": "Buildchain maintainers",
|
|
4534
|
+
"reason": "Shell commands delegated through helper scripts are counted only when exposed through bin/buildchain.mjs usage or documentation."
|
|
4535
|
+
},
|
|
4536
|
+
{
|
|
4537
|
+
"id": "public-surface-yaml-enumeration",
|
|
4538
|
+
"definedBy": "https://kfd.libkungfu.dev/schemas/kfd-2/trust-taxonomy.schema.json#/$defs/residualRisk",
|
|
4539
|
+
"riskType": "natural-language-semantic-risk",
|
|
4540
|
+
"trustImpact": "downgrade-warning",
|
|
4541
|
+
"machineProvability": "not-machine-verifiable",
|
|
4542
|
+
"agentAction": "semantic-review-required",
|
|
4543
|
+
"owner": "Buildchain maintainers",
|
|
4544
|
+
"reason": "YAML enumeration covers first-class action and workflow inputs, not arbitrary step environment variables."
|
|
4545
|
+
}
|
|
4284
4546
|
]
|
|
4285
4547
|
}
|
|
4286
4548
|
}
|
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"contract": "kungfu-buildchain-publication-release-registry",
|
|
4
|
-
"generatedAt": "2026-07-
|
|
5
|
-
"publishedAt": "2026-07-
|
|
4
|
+
"generatedAt": "2026-07-31T15:25:20.771Z",
|
|
5
|
+
"publishedAt": "2026-07-31T15:25:20.771Z",
|
|
6
6
|
"reproducible": true,
|
|
7
7
|
"timestampPolicy": "ci-injected",
|
|
8
8
|
"deterministicInputs": [
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
"declared Buildchain surface manifest contract"
|
|
20
20
|
],
|
|
21
21
|
"sourceDateEpoch": "0",
|
|
22
|
-
"sourceRevision": "
|
|
22
|
+
"sourceRevision": "00a07a9a2eb0e4839727cf455fa209066166abbf",
|
|
23
23
|
"timestampPolicyDetails": {
|
|
24
24
|
"contract": "kungfu-buildchain-surface-timestamp-policy",
|
|
25
25
|
"timestampFields": [
|
|
@@ -32,7 +32,7 @@
|
|
|
32
32
|
},
|
|
33
33
|
"package": {
|
|
34
34
|
"name": "@kungfu-tech/buildchain",
|
|
35
|
-
"version": "3.0.3-alpha.
|
|
35
|
+
"version": "3.0.3-alpha.2",
|
|
36
36
|
"versionSource": "package.json#version"
|
|
37
37
|
},
|
|
38
38
|
"sourceKind": "package-site-bundle",
|
|
@@ -38,6 +38,9 @@
|
|
|
38
38
|
"./portable-dev-cache": "./packages/core/portable-dev-cache.js",
|
|
39
39
|
"./publication-artifact": "./packages/core/publication-artifact.js",
|
|
40
40
|
"./publication-package": "./packages/core/publication-package.js",
|
|
41
|
+
"./publication-reproducibility": "./packages/core/publication-reproducibility.js",
|
|
42
|
+
"./publication-sealed-bundle": "./packages/core/publication-sealed-bundle.js",
|
|
43
|
+
"./paper": "./packages/core/paper.js",
|
|
41
44
|
"./publication-authority": "./packages/core/publication-authority.js",
|
|
42
45
|
"./publication-control-plane-audit": "./packages/core/publication-control-plane-audit.js",
|
|
43
46
|
"./buildchain-publication-authority": "./packages/core/buildchain-publication-authority.js",
|