@kungfu-tech/buildchain 3.0.3-alpha.0 → 3.0.3-alpha.2

package/dist/site/kfd-claims.json

@@ -14,28 +14,46 @@
   },
   "runtimeContract": {
     "contract": "kungfu-buildchain-runtime-contract-world",
-    "compatibilityDigest": "sha256:32a651504c57829085dc8863f0e41dee98eb60708ff6dec958c9c7e4b1010102",
+    "compatibilityDigest": "sha256:61af7d0871220bc0909008bdc571905ad500cccf853e7841bc5d462a34b2d436",
     "majorLine": "v3"
   },
   "publicSurfaceReverseAudit": {
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "136d1f27a3ffa01d9d4581eb9086685a3470a61ce4b6e0897feb2e140aedf577",
+    "sha256": "af5cb9990177c134c9de2a03cd21bba16258e4ead0e8c7d01c94446d8cff8760",
     "summary": {
-      "cliCommandCount": 97,
+      "cliCommandCount": 111,
       "workflowCount": 57,
       "actionCount": 6,
-      "sitePageCount": 59,
-      "docCommandRefCount": 291,
+      "sitePageCount": 60,
+      "docCommandRefCount": 315,
       "failureCount": 0
     },
     "auditBoundary": {
       "mode": "closed-world-enumerable",
       "scope": "Buildchain CLI usage/dispatch, reusable workflow inputs, action inputs, site pages, and documentation command references",
       "residualRisk": [
-        "Shell commands delegated through helper scripts are only counted when exposed through bin/buildchain.mjs usage or docs.",
-        "YAML parsing is limited to first-class action/workflow inputs, not arbitrary step environment variables."
+        {
+          "id": "public-surface-helper-command-enumeration",
+          "definedBy": "https://kfd.libkungfu.dev/schemas/kfd-2/trust-taxonomy.schema.json#/$defs/residualRisk",
+          "riskType": "natural-language-semantic-risk",
+          "trustImpact": "downgrade-warning",
+          "machineProvability": "not-machine-verifiable",
+          "agentAction": "semantic-review-required",
+          "owner": "Buildchain maintainers",
+          "reason": "Shell commands delegated through helper scripts are counted only when exposed through bin/buildchain.mjs usage or documentation."
+        },
+        {
+          "id": "public-surface-yaml-enumeration",
+          "definedBy": "https://kfd.libkungfu.dev/schemas/kfd-2/trust-taxonomy.schema.json#/$defs/residualRisk",
+          "riskType": "natural-language-semantic-risk",
+          "trustImpact": "downgrade-warning",
+          "machineProvability": "not-machine-verifiable",
+          "agentAction": "semantic-review-required",
+          "owner": "Buildchain maintainers",
+          "reason": "YAML enumeration covers first-class action and workflow inputs, not arbitrary step environment variables."
+        }
       ]
     }
   },
@@ -228,21 +246,39 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "136d1f27a3ffa01d9d4581eb9086685a3470a61ce4b6e0897feb2e140aedf577",
+      "sha256": "af5cb9990177c134c9de2a03cd21bba16258e4ead0e8c7d01c94446d8cff8760",
       "summary": {
-        "cliCommandCount": 97,
+        "cliCommandCount": 111,
         "workflowCount": 57,
         "actionCount": 6,
-        "sitePageCount": 59,
-        "docCommandRefCount": 291,
+        "sitePageCount": 60,
+        "docCommandRefCount": 315,
         "failureCount": 0
       },
       "auditBoundary": {
         "mode": "closed-world-enumerable",
         "scope": "Buildchain CLI usage/dispatch, reusable workflow inputs, action inputs, site pages, and documentation command references",
         "residualRisk": [
-          "Shell commands delegated through helper scripts are only counted when exposed through bin/buildchain.mjs usage or docs.",
-          "YAML parsing is limited to first-class action/workflow inputs, not arbitrary step environment variables."
+          {
+            "id": "public-surface-helper-command-enumeration",
+            "definedBy": "https://kfd.libkungfu.dev/schemas/kfd-2/trust-taxonomy.schema.json#/$defs/residualRisk",
+            "riskType": "natural-language-semantic-risk",
+            "trustImpact": "downgrade-warning",
+            "machineProvability": "not-machine-verifiable",
+            "agentAction": "semantic-review-required",
+            "owner": "Buildchain maintainers",
+            "reason": "Shell commands delegated through helper scripts are counted only when exposed through bin/buildchain.mjs usage or documentation."
+          },
+          {
+            "id": "public-surface-yaml-enumeration",
+            "definedBy": "https://kfd.libkungfu.dev/schemas/kfd-2/trust-taxonomy.schema.json#/$defs/residualRisk",
+            "riskType": "natural-language-semantic-risk",
+            "trustImpact": "downgrade-warning",
+            "machineProvability": "not-machine-verifiable",
+            "agentAction": "semantic-review-required",
+            "owner": "Buildchain maintainers",
+            "reason": "YAML enumeration covers first-class action and workflow inputs, not arbitrary step environment variables."
+          }
         ]
       }
     },
@@ -1436,6 +1472,42 @@
           "public": true,
           "packageExport": "./publication-package"
         },
+        {
+          "id": "export:./publication-reproducibility",
+          "name": "@kungfu-tech/buildchain/publication-reproducibility",
+          "kind": "package-export",
+          "sourcePath": "packages/core/publication-reproducibility.js",
+          "evidencePath": "packages/core/publication-reproducibility.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./publication-reproducibility"
+        },
+        {
+          "id": "export:./publication-sealed-bundle",
+          "name": "@kungfu-tech/buildchain/publication-sealed-bundle",
+          "kind": "package-export",
+          "sourcePath": "packages/core/publication-sealed-bundle.js",
+          "evidencePath": "packages/core/publication-sealed-bundle.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./publication-sealed-bundle"
+        },
+        {
+          "id": "export:./paper",
+          "name": "@kungfu-tech/buildchain/paper",
+          "kind": "package-export",
+          "sourcePath": "packages/core/paper.js",
+          "evidencePath": "packages/core/paper.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./paper"
+        },
         {
           "id": "export:./publication-authority",
           "name": "@kungfu-tech/buildchain/publication-authority",
@@ -2668,6 +2740,162 @@
           "public": true,
           "reverseAuditSource": "bin/buildchain.mjs"
         },
+        {
+          "id": "cli:paper",
+          "name": "buildchain paper",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-alpha",
+          "name": "buildchain paper alpha [--cwd <dir>] [--source-ref <ref>] [--target-ref <ref>]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-bootstrap-npm",
+          "name": "buildchain paper bootstrap npm [--cwd <dir>] [--execute]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-build",
+          "name": "buildchain paper build [--cwd <dir>] [--execute] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-fleet-audit",
+          "name": "buildchain paper fleet audit [--root <dir>] [--offline] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-fleet-update",
+          "name": "buildchain paper fleet update [--root <dir>] [--write] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-migrate",
+          "name": "buildchain paper migrate [--cwd <dir>] [--write] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-preflight",
+          "name": "buildchain paper preflight [--cwd <dir>] [--offline] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-resume",
+          "name": "buildchain paper resume [--cwd <dir>] [--buildchain-ref <ref>] [--execute] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-scaffold",
+          "name": "buildchain paper scaffold --package <name> --repository <owner/repo> [--write] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-status",
+          "name": "buildchain paper status [--cwd <dir>] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-work-start",
+          "name": "buildchain paper work start <topic> [--cwd <dir>] [--branch <branch>] [--execute] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:paper-work-submit",
+          "name": "buildchain paper work submit [--cwd <dir>] [--title <title>] [--body <body>] [--execute] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
         {
           "id": "cli:portable-cache",
           "name": "buildchain portable-cache plan --manifest <file-or-json> [--output <file>]",
@@ -2728,6 +2956,18 @@
           "public": true,
           "reverseAuditSource": "bin/buildchain.mjs"
         },
+        {
+          "id": "cli:publication-artifact-reproducibility",
+          "name": "buildchain publication-artifact reproducibility [--cwd <dir>] [--source-sha <sha>]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
         {
           "id": "cli:publish-source",
           "name": "buildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...",
@@ -2990,8 +3230,9 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 10,
+          "inputCount": 11,
           "inputs": [
+            "adapter-arguments-json",
             "adapter-path",
             "artifact-retention-days",
             "buildchain-repository",
@@ -3045,7 +3286,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 74,
+          "inputCount": 82,
           "inputs": [
             "artifact-compression-level",
             "artifact-name",
@@ -3061,6 +3302,9 @@
             "artifact-retention-days",
             "artifact-signing-request-upload-no-proxy",
             "artifact-transfer-mode",
+            "aws-codebuild-project",
+            "aws-ec2-macos-runner-label",
+            "aws-ec2-windows-runner-label",
             "build-command",
             "buildchain-contract-compatibility-policy",
             "buildchain-contract-drift-issue-mode",
@@ -3078,6 +3322,9 @@
             "checkout-cache-mode",
             "checkout-cache-reference-repository-template",
             "checkout-cache-timeout-seconds",
+            "compiler-cache-platforms-json",
+            "compiler-cache-provider",
+            "compiler-cache-required",
             "control-runner-json",
             "credential-island-caller-owned",
             "credential-island-environment",
@@ -3104,6 +3351,7 @@
             "publish-registry",
             "publish-source-ref",
             "release-candidate",
+            "release-candidate-family-evidence-json",
             "requested-parallelism",
             "require-build",
             "require-install",
@@ -3114,6 +3362,7 @@
             "rustup-dist-server",
             "rustup-update-root",
             "sample-process-tree",
+            "self-hosted-offline-fallback",
             "setup-node",
             "setup-rust",
             "shifu-cache-profile-digest",
@@ -3241,7 +3490,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 88,
+          "inputCount": 94,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -3305,11 +3554,17 @@
             "publish-transaction-override",
             "release-activation-command",
             "release-activation-receipt-set-path",
+            "release-candidate-family-assignment-id",
+            "release-candidate-family-evidence-required",
+            "release-candidate-family-evidence-root",
+            "release-candidate-family-initiative-id",
             "release-candidate-workflow-file",
             "release-candidate-workflow-name",
             "release-passport",
+            "release-passport-attachment-command",
             "release-passport-buildchain-self-kfd",
             "release-passport-evidence-command",
+            "release-passport-evidence-jsons",
             "release-passport-evidence-path",
             "release-passport-impact-json",
             "release-passport-invariant-passport-command",
@@ -3725,7 +3980,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 77,
+          "inputCount": 85,
           "inputs": [
             "artifact-compression-level",
             "artifact-name",
@@ -3741,6 +3996,9 @@
             "artifact-retention-days",
             "artifact-signing-request-upload-no-proxy",
             "artifact-transfer-mode",
+            "aws-codebuild-project",
+            "aws-ec2-macos-runner-label",
+            "aws-ec2-windows-runner-label",
             "build-command",
             "buildchain-alpha-contract-lock-path",
             "buildchain-channel",
@@ -3761,6 +4019,9 @@
             "checkout-cache-mode",
             "checkout-cache-reference-repository-template",
             "checkout-cache-timeout-seconds",
+            "compiler-cache-platforms-json",
+            "compiler-cache-provider",
+            "compiler-cache-required",
             "control-runner-json",
             "credential-island-caller-owned",
             "credential-island-environment",
@@ -3787,6 +4048,7 @@
             "publish-registry",
             "publish-source-ref",
             "release-candidate",
+            "release-candidate-family-evidence-json",
             "requested-parallelism",
             "require-build",
             "require-install",
@@ -3797,6 +4059,7 @@
             "rustup-dist-server",
             "rustup-update-root",
             "sample-process-tree",
+            "self-hosted-offline-fallback",
             "setup-node",
             "setup-rust",
             "shifu-cache-profile-digest",
@@ -3982,7 +4245,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 12,
+          "inputCount": 13,
           "inputs": [
             "alpha-workflow-path",
             "buildchain-ref",
@@ -3993,6 +4256,7 @@
             "max-age-seconds",
             "pull-request-body-prefix",
             "pull-request-body-prefix-renderer",
+            "reactivation-authorized",
             "settlement-authorized",
             "source-branch",
             "target-branch"
@@ -4330,7 +4594,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 80,
+          "inputCount": 86,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -4386,11 +4650,17 @@
             "publish-transaction-override",
             "release-activation-command",
             "release-activation-receipt-set-path",
+            "release-candidate-family-assignment-id",
+            "release-candidate-family-evidence-required",
+            "release-candidate-family-evidence-root",
+            "release-candidate-family-initiative-id",
             "release-candidate-workflow-file",
             "release-candidate-workflow-name",
             "release-passport",
+            "release-passport-attachment-command",
             "release-passport-buildchain-self-kfd",
             "release-passport-evidence-command",
+            "release-passport-evidence-jsons",
             "release-passport-evidence-path",
             "release-passport-impact-json",
             "release-passport-invariant-passport-command",
@@ -4472,7 +4742,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 16,
+          "inputCount": 17,
           "inputs": [
             "buildchain-ref",
             "buildchain-repository",
@@ -4481,6 +4751,7 @@
             "downstream-prepare-command",
             "downstream-repository",
             "downstream-target",
+            "downstream-update-command",
             "downstream-verify-command",
             "dry-run",
             "graph-json",
@@ -4617,8 +4888,9 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 20,
+          "inputCount": 21,
           "inputs": [
+            "artifact-id",
             "artifact-name",
             "artifact-relative-output",
             "artifact-stem",
@@ -4652,7 +4924,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 67,
+          "inputCount": 76,
           "inputs": [
             "allow-repository",
             "branch-protection-bypass-apps",
@@ -4681,6 +4953,8 @@
             "publish-package-set-order",
             "publish-rematerialize-on-resume",
             "publish-required-artifacts-json",
+            "publish-sealed-bundle-manifest",
+            "publish-sealed-bundle-root",
             "publish-source-locked",
             "publish-source-ref",
             "publish-source-sha",
@@ -4689,12 +4963,19 @@
             "publish-transaction-override",
             "reconciliation-workspace",
             "release-candidate-build-summary-path",
+            "release-candidate-family-assignment-id",
+            "release-candidate-family-evidence-required",
+            "release-candidate-family-evidence-root",
+            "release-candidate-family-initiative-id",
             "release-candidate-passport-path",
             "release-candidate-version",
             "release-material-sha",
             "release-passport",
+            "release-passport-attachment-command",
             "release-passport-build-summary-path",
             "release-passport-buildchain-self-kfd",
+            "release-passport-evidence-command",
+            "release-passport-evidence-jsons",
             "release-passport-github-artifact-attestation-policy-jsons",
             "release-passport-impact-json",
             "release-passport-invariant-passport-command",
@@ -5088,6 +5369,18 @@
           "public": true,
           "reverseAuditSource": "dist/site/page-registry.json"
         },
+        {
+          "id": "site-page:manual:aws-us-elastic-runner-burst-plane",
+          "name": "site-page:manual:aws-us-elastic-runner-burst-plane",
+          "kind": "site-page",
+          "sourcePath": "dist/site/page-registry.json",
+          "evidencePath": "dist/site/page-registry.json",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "dist/site/page-registry.json"
+        },
         {
           "id": "site-page:manual:binary-distribution",
           "name": "site-page:manual:binary-distribution",
@@ -5715,6 +6008,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 365
+    "publicSurfaceCount": 383
   }
 }

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.3-alpha.0",
+    "version": "3.0.3-alpha.2",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {