@kungfu-tech/buildchain 3.0.3-alpha.0 → 3.0.3-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (115) hide show
  1. package/AGENTS.md +1 -1
  2. package/CONTRIBUTING.md +1 -1
  3. package/README.md +32 -1
  4. package/actions/promote-buildchain-ref/README.md +90 -19
  5. package/actions/report-buildchain-issue/README.md +19 -1
  6. package/actions/run-lifecycle/README.md +5 -0
  7. package/actions/validate-config/README.md +19 -1
  8. package/bin/buildchain.mjs +41 -241
  9. package/bin/internal/command-registry.mjs +82 -0
  10. package/bin/internal/trust-release-cli.mjs +1 -0
  11. package/contracts/auditable-demo-media-profiles-v1.json +116 -1
  12. package/contracts/buildchain-v2-residuals-v1.json +0 -45
  13. package/contracts/evidence/auditable-demo-responsive-web-delivery-v1.json +143 -0
  14. package/contracts/evidence/auditable-demo-web-delivery-v1.json +7 -3
  15. package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/complete-transcript.txt +2 -0
  16. package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/public-projection.json +16 -0
  17. package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/scene.json +12 -0
  18. package/dist/site/buildchain-contract.json +161 -42
  19. package/dist/site/buildchain-site.json +180 -84
  20. package/dist/site/capability-registry.json +6 -6
  21. package/dist/site/cli-registry.json +932 -98
  22. package/dist/site/controller-registry.json +97 -5
  23. package/dist/site/kfd-claims.json +316 -23
  24. package/dist/site/kfd-upstream-aggregate.json +1 -1
  25. package/dist/site/manual-registry.json +20 -20
  26. package/dist/site/node-api-registry.json +371 -56
  27. package/dist/site/page-registry.json +155 -59
  28. package/dist/site/public-surface-audit.json +286 -24
  29. package/dist/site/publication-registry.json +4 -4
  30. package/dist/site/release-provenance.json +3 -0
  31. package/dist/site/site-manifest.json +24 -24
  32. package/dist/site/workflow-registry.json +570 -79
  33. package/docs/MAP.md +22 -4
  34. package/docs/auditable-demo.md +35 -12
  35. package/docs/aws-us-elastic-runner-burst-plane.md +381 -0
  36. package/docs/cli.md +143 -12
  37. package/docs/consumer-issue-reporting.md +19 -1
  38. package/docs/github-governance-authority.md +2 -2
  39. package/docs/lifecycle-protocol.md +20 -2
  40. package/docs/migration-inventory.md +24 -5
  41. package/docs/ownership.md +19 -1
  42. package/docs/publication-artifacts.md +185 -18
  43. package/docs/publication-authority.md +4 -4
  44. package/docs/publish-transaction.md +78 -31
  45. package/docs/release-candidate.md +24 -0
  46. package/docs/release-flow.md +50 -32
  47. package/docs/release-governance.md +31 -31
  48. package/docs/release-passport.md +4 -0
  49. package/docs/release-propagation.md +57 -12
  50. package/docs/reusable-build-surface.md +95 -27
  51. package/docs/runtime-train-validation.md +20 -2
  52. package/docs/stable-candidate-patrol.md +6 -6
  53. package/docs/toolkit-observability.md +22 -0
  54. package/docs/versioning.md +6 -4
  55. package/docs/web-surface-deployments.md +62 -0
  56. package/package.json +7 -5
  57. package/packages/core/README.md +61 -4
  58. package/packages/core/buildchain-contract.js +8 -4
  59. package/packages/core/cache-evidence.js +1 -0
  60. package/packages/core/diagnostics.js +105 -30
  61. package/packages/core/github-governance-authority.js +10 -25
  62. package/packages/core/index.js +40 -0
  63. package/packages/core/paper-fleet.js +260 -0
  64. package/packages/core/paper-repository.js +210 -0
  65. package/packages/core/paper-work.js +365 -0
  66. package/packages/core/paper.js +3180 -0
  67. package/packages/core/public-surface-audit.js +26 -75
  68. package/packages/core/public-surface-cli.js +117 -0
  69. package/packages/core/publication-artifact.js +1 -6
  70. package/packages/core/publication-authority.js +1 -0
  71. package/packages/core/publication-reproducibility.js +947 -0
  72. package/packages/core/publication-sealed-bundle.js +190 -0
  73. package/packages/core/publish-transaction.js +147 -17
  74. package/packages/core/release-candidate.js +234 -0
  75. package/packages/core/release-passport.js +483 -201
  76. package/packages/core/release-propagation.js +175 -1
  77. package/scripts/auditable-demo.mjs +119 -5
  78. package/scripts/aws-codebuild-toolchain.mjs +285 -0
  79. package/scripts/aws-macos-jit-core.mjs +378 -0
  80. package/scripts/aws-macos-jit.mjs +123 -0
  81. package/scripts/aws-runner-burst-core.mjs +248 -0
  82. package/scripts/aws-runner-burst.mjs +79 -0
  83. package/scripts/aws-windows-jit-core.mjs +374 -0
  84. package/scripts/aws-windows-jit.mjs +121 -0
  85. package/scripts/build-contract-core.mjs +69 -6
  86. package/scripts/build-standalone-binary.mjs +23 -0
  87. package/scripts/buildchain-cli-help.mjs +256 -0
  88. package/scripts/buildchain-contract-lock.mjs +1 -1
  89. package/scripts/check-internal-architecture.mjs +69 -2
  90. package/scripts/check-inventory.mjs +69 -2
  91. package/scripts/check-javascript-syntax.mjs +31 -0
  92. package/scripts/check-maintainability.mjs +371 -0
  93. package/scripts/compiler-cache-evidence.mjs +221 -0
  94. package/scripts/dev-alpha-candidate-patrol.mjs +268 -43
  95. package/scripts/finalize-native-artifact-signing-result.mjs +75 -4
  96. package/scripts/generate-channel-promotion-workflow.mjs +3 -12
  97. package/scripts/generate-release-candidate-passport.mjs +4 -0
  98. package/scripts/generate-site-bundle.mjs +68 -188
  99. package/scripts/import-artifact-signing-results.mjs +64 -5
  100. package/scripts/inspect-artifact-signing-requests.mjs +7 -0
  101. package/scripts/maintainability-metrics.mjs +339 -0
  102. package/scripts/npm-publish-transaction.mjs +57 -6
  103. package/scripts/paper-work-fleet-cli.mjs +563 -0
  104. package/scripts/paper.mjs +631 -0
  105. package/scripts/promotion-channel-router.mjs +16 -4
  106. package/scripts/publication-reproducibility.mjs +62 -0
  107. package/scripts/release-propagation.mjs +39 -0
  108. package/scripts/resolve-build-contract.mjs +6 -0
  109. package/scripts/route-offline-runners.mjs +236 -0
  110. package/scripts/run-lifecycle-core.mjs +62 -1
  111. package/scripts/runtime-ref-core.mjs +23 -2
  112. package/scripts/seal-artifact-signing-requests.mjs +13 -6
  113. package/scripts/site-capability-metadata.mjs +202 -0
  114. package/scripts/stable-candidate-qualification.mjs +42 -0
  115. package/scripts/web-surface-core.mjs +272 -86
package/dist/site/controller-registry.json CHANGED
@@ -178,6 +178,18 @@
178
178
  "classification": "included",
179
179
  "source": "workflow-call-input"
180
180
  },
181
+ "aws-codebuild-project": {
182
+ "classification": "included",
183
+ "source": "workflow-call-input"
184
+ },
185
+ "aws-ec2-macos-runner-label": {
186
+ "classification": "digest-only",
187
+ "source": "workflow-call-input"
188
+ },
189
+ "aws-ec2-windows-runner-label": {
190
+ "classification": "digest-only",
191
+ "source": "workflow-call-input"
192
+ },
181
193
  "build-command": {
182
194
  "classification": "digest-only",
183
195
  "source": "workflow-call-input"
@@ -246,6 +258,18 @@
246
258
  "classification": "digest-only",
247
259
  "source": "workflow-call-input"
248
260
  },
261
+ "compiler-cache-platforms-json": {
262
+ "classification": "digest-only",
263
+ "source": "workflow-call-input"
264
+ },
265
+ "compiler-cache-provider": {
266
+ "classification": "included",
267
+ "source": "workflow-call-input"
268
+ },
269
+ "compiler-cache-required": {
270
+ "classification": "included",
271
+ "source": "workflow-call-input"
272
+ },
249
273
  "control-runner-json": {
250
274
  "classification": "digest-only",
251
275
  "source": "workflow-call-input"
@@ -350,6 +374,10 @@
350
374
  "classification": "included",
351
375
  "source": "workflow-call-input"
352
376
  },
377
+ "release-candidate-family-evidence-json": {
378
+ "classification": "digest-only",
379
+ "source": "workflow-call-input"
380
+ },
353
381
  "requested-parallelism": {
354
382
  "classification": "included",
355
383
  "source": "workflow-call-input"
@@ -390,6 +418,10 @@
390
418
  "classification": "included",
391
419
  "source": "workflow-call-input"
392
420
  },
421
+ "self-hosted-offline-fallback": {
422
+ "classification": "included",
423
+ "source": "workflow-call-input"
424
+ },
393
425
  "setup-node": {
394
426
  "classification": "included",
395
427
  "source": "workflow-call-input"
@@ -468,7 +500,7 @@
468
500
  "controller-receipt"
469
501
  ]
470
502
  },
471
- "digest": "sha256:c9c8c1493e95aecfc1a2ec092f9490c1e16b9a9cdc1e3673bf6bdd329baac523"
503
+ "digest": "sha256:2e4c9e9af2162de2333c9b57bffcff77a76e9ed384b9f001ab8ef63d527197f9"
472
504
  },
473
505
  {
474
506
  "schemaVersion": 1,
@@ -572,6 +604,18 @@
572
604
  "classification": "included",
573
605
  "source": "workflow-call-input"
574
606
  },
607
+ "aws-codebuild-project": {
608
+ "classification": "included",
609
+ "source": "workflow-call-input"
610
+ },
611
+ "aws-ec2-macos-runner-label": {
612
+ "classification": "digest-only",
613
+ "source": "workflow-call-input"
614
+ },
615
+ "aws-ec2-windows-runner-label": {
616
+ "classification": "digest-only",
617
+ "source": "workflow-call-input"
618
+ },
575
619
  "build-command": {
576
620
  "classification": "digest-only",
577
621
  "source": "workflow-call-input"
@@ -652,6 +696,18 @@
652
696
  "classification": "digest-only",
653
697
  "source": "workflow-call-input"
654
698
  },
699
+ "compiler-cache-platforms-json": {
700
+ "classification": "digest-only",
701
+ "source": "workflow-call-input"
702
+ },
703
+ "compiler-cache-provider": {
704
+ "classification": "included",
705
+ "source": "workflow-call-input"
706
+ },
707
+ "compiler-cache-required": {
708
+ "classification": "included",
709
+ "source": "workflow-call-input"
710
+ },
655
711
  "control-runner-json": {
656
712
  "classification": "digest-only",
657
713
  "source": "workflow-call-input"
@@ -756,6 +812,10 @@
756
812
  "classification": "included",
757
813
  "source": "workflow-call-input"
758
814
  },
815
+ "release-candidate-family-evidence-json": {
816
+ "classification": "digest-only",
817
+ "source": "workflow-call-input"
818
+ },
759
819
  "requested-parallelism": {
760
820
  "classification": "included",
761
821
  "source": "workflow-call-input"
@@ -796,6 +856,10 @@
796
856
  "classification": "included",
797
857
  "source": "workflow-call-input"
798
858
  },
859
+ "self-hosted-offline-fallback": {
860
+ "classification": "included",
861
+ "source": "workflow-call-input"
862
+ },
799
863
  "setup-node": {
800
864
  "classification": "included",
801
865
  "source": "workflow-call-input"
@@ -850,7 +914,7 @@
850
914
  "controller-receipt"
851
915
  ]
852
916
  },
853
- "digest": "sha256:eac228a4746684d61d9664e8bce63e20d4b1e7bea0afd8718c8584cef941a95d"
917
+ "digest": "sha256:105eed3eb8f772d4ed93d43e7da404d849b92eafab1b461c7a9b7cb94a8a6b3b"
854
918
  },
855
919
  {
856
920
  "schemaVersion": 1,
@@ -1875,6 +1939,22 @@
1875
1939
  "classification": "digest-only",
1876
1940
  "source": "workflow-call-input"
1877
1941
  },
1942
+ "release-candidate-family-assignment-id": {
1943
+ "classification": "included",
1944
+ "source": "workflow-call-input"
1945
+ },
1946
+ "release-candidate-family-evidence-required": {
1947
+ "classification": "included",
1948
+ "source": "workflow-call-input"
1949
+ },
1950
+ "release-candidate-family-evidence-root": {
1951
+ "classification": "included",
1952
+ "source": "workflow-call-input"
1953
+ },
1954
+ "release-candidate-family-initiative-id": {
1955
+ "classification": "included",
1956
+ "source": "workflow-call-input"
1957
+ },
1878
1958
  "release-candidate-workflow-file": {
1879
1959
  "classification": "included",
1880
1960
  "source": "workflow-call-input"
@@ -1887,6 +1967,10 @@
1887
1967
  "classification": "included",
1888
1968
  "source": "workflow-call-input"
1889
1969
  },
1970
+ "release-passport-attachment-command": {
1971
+ "classification": "digest-only",
1972
+ "source": "workflow-call-input"
1973
+ },
1890
1974
  "release-passport-buildchain-self-kfd": {
1891
1975
  "classification": "included",
1892
1976
  "source": "workflow-call-input"
@@ -1895,6 +1979,10 @@
1895
1979
  "classification": "digest-only",
1896
1980
  "source": "workflow-call-input"
1897
1981
  },
1982
+ "release-passport-evidence-jsons": {
1983
+ "classification": "digest-only",
1984
+ "source": "workflow-call-input"
1985
+ },
1898
1986
  "release-passport-evidence-path": {
1899
1987
  "classification": "digest-only",
1900
1988
  "source": "workflow-call-input"
@@ -2021,7 +2109,7 @@
2021
2109
  "controller-receipt"
2022
2110
  ]
2023
2111
  },
2024
- "digest": "sha256:00baae93d9ed75129fdaed6fcc33285e515b8c7de84816831a39e660941dd7ae"
2112
+ "digest": "sha256:f54bccee97644d190b450e4ed810b516af64ed5d265ea76cd541a11cbbd51cdb"
2025
2113
  },
2026
2114
  {
2027
2115
  "schemaVersion": 1,
@@ -2061,6 +2149,10 @@
2061
2149
  "classification": "included",
2062
2150
  "source": "workflow-call-input"
2063
2151
  },
2152
+ "downstream-update-command": {
2153
+ "classification": "digest-only",
2154
+ "source": "workflow-call-input"
2155
+ },
2064
2156
  "downstream-verify-command": {
2065
2157
  "classification": "digest-only",
2066
2158
  "source": "workflow-call-input"
@@ -2148,7 +2240,7 @@
2148
2240
  "controller-receipt"
2149
2241
  ]
2150
2242
  },
2151
- "digest": "sha256:f97656a8df0758c8e404d5b7c387529256a1ec45d1748f8efb6847a3256b1216"
2243
+ "digest": "sha256:aff7a9f6bcf96d7a9d406e490868288f3acef104e53eddddc5782b8a2b5b4fa5"
2152
2244
  },
2153
2245
  {
2154
2246
  "schemaVersion": 1,
@@ -2197,5 +2289,5 @@
2197
2289
  "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
2198
2290
  }
2199
2291
  ],
2200
- "digest": "sha256:f18f3b706683ae34168ed582d0b51f2d7d2574d627dda4c7b667d01f86623331"
2292
+ "digest": "sha256:3564f3c38f8c070280ea9cf5dee810d466b40e72ce80104b15776365dfdf9b60"
2201
2293
  }