@kungfu-tech/buildchain 3.0.5-alpha.7 → 3.0.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +0 -31
- package/actions/macos-credential-island/README.md +0 -8
- package/bin/buildchain.mjs +1 -1
- package/contracts/auditable-demo-media-profiles-v1.json +0 -61
- package/contracts/evidence/auditable-demo-responsive-web-delivery-v1.json +3 -3
- package/contracts/evidence/auditable-demo-web-delivery-v1.json +3 -3
- package/dist/site/buildchain-contract.json +25 -86
- package/dist/site/buildchain-site.json +38 -64
- package/dist/site/capability-registry.json +1 -1
- package/dist/site/cli-registry.json +2 -6
- package/dist/site/controller-registry.json +3 -11
- package/dist/site/kfd-claims.json +11 -53
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +7 -7
- package/dist/site/node-api-registry.json +31 -213
- package/dist/site/page-registry.json +20 -50
- package/dist/site/public-surface-audit.json +8 -98
- package/dist/site/publication-authority-registry.json +1 -42
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/site-manifest.json +11 -11
- package/dist/site/workflow-registry.json +2 -67
- package/docs/auditable-demo.md +7 -74
- package/docs/aws-us-elastic-runner-burst-plane.md +16 -151
- package/docs/cli-reference.md +2 -24
- package/docs/node-api-reference.md +72 -90
- package/docs/publish-transaction.md +5 -7
- package/docs/release-flow.md +0 -4
- package/docs/release-governance.md +0 -39
- package/docs/reusable-build-surface.md +0 -9
- package/package.json +1 -1
- package/packages/core/buildchain-contract.js +1 -36
- package/packages/core/buildchain-publication-authority.js +0 -2
- package/packages/core/public-surface-audit.js +35 -4
- package/packages/core/release-propagation-release.js +18 -61
- package/packages/core/release-propagation-work.js +3 -7
- package/packages/core/release-propagation.js +2 -12
- package/scripts/auditable-demo-renditions.mjs +2 -7
- package/scripts/auditable-demo.mjs +21 -27
- package/scripts/aws-windows-jit-controller-core.mjs +2 -20
- package/scripts/aws-windows-jit-controller.mjs +109 -184
- package/scripts/aws-windows-jit-core.mjs +3 -21
- package/scripts/aws-windows-jit.mjs +0 -2
- package/scripts/build-standalone-binary.mjs +0 -4
- package/scripts/buildchain-cli-help.mjs +1 -2
- package/scripts/capture-package-release-propagation.mjs +1 -24
- package/scripts/check-inventory.mjs +0 -5
- package/scripts/finalize-native-artifact-signing-result.mjs +15 -37
- package/scripts/generate-site-bundle.mjs +0 -2
- package/scripts/locked-source-checkout.mjs +3 -17
- package/scripts/release-propagation.mjs +2 -77
- package/contracts/auditable-demo-scenario-v1.schema.json +0 -153
- package/packages/core/release-propagation-pickup.js +0 -386
- package/packages/core/workflow-call-contract.js +0 -308
- package/packages/core/workflow-yaml-contract.js +0 -272
- package/scripts/auditable-demo-platform.mjs +0 -506
- package/scripts/aws-macos-jit-controller-core.mjs +0 -389
- package/scripts/aws-macos-jit-controller-runtime.mjs +0 -82
- package/scripts/aws-macos-jit-controller.mjs +0 -558
- package/scripts/aws-macos-jit-job-controller.mjs +0 -401
- package/scripts/aws-windows-jit-campaign-core.mjs +0 -296
- package/scripts/aws-windows-jit-campaign.mjs +0 -202
- package/scripts/workflow-call-contract.mjs +0 -133
|
@@ -3315,25 +3315,21 @@
|
|
|
3315
3315
|
{
|
|
3316
3316
|
"id": "release-propagation",
|
|
3317
3317
|
"source": "bin/buildchain.mjs",
|
|
3318
|
-
"usage": "buildchain release-propagation <plan|write-lock
|
|
3318
|
+
"usage": "buildchain release-propagation <plan|write-lock> ...",
|
|
3319
3319
|
"paths": [
|
|
3320
3320
|
"release-propagation",
|
|
3321
|
-
"release-propagation pickup",
|
|
3322
3321
|
"release-propagation plan",
|
|
3323
|
-
"release-propagation work",
|
|
3324
3322
|
"release-propagation write-lock"
|
|
3325
3323
|
],
|
|
3326
3324
|
"syntaxes": [
|
|
3327
3325
|
"buildchain release-propagation",
|
|
3328
|
-
"buildchain release-propagation <plan|write-lock
|
|
3326
|
+
"buildchain release-propagation <plan|write-lock> ..."
|
|
3329
3327
|
],
|
|
3330
3328
|
"options": [],
|
|
3331
3329
|
"aliases": [],
|
|
3332
3330
|
"helpCommands": [
|
|
3333
3331
|
"buildchain release-propagation --help",
|
|
3334
|
-
"buildchain release-propagation pickup --help",
|
|
3335
3332
|
"buildchain release-propagation plan --help",
|
|
3336
|
-
"buildchain release-propagation work --help",
|
|
3337
3333
|
"buildchain release-propagation write-lock --help"
|
|
3338
3334
|
],
|
|
3339
3335
|
"purpose": "Plan channel-preserving downstream release PRs and write exact upstream release locks.",
|
|
@@ -258,10 +258,6 @@
|
|
|
258
258
|
"classification": "digest-only",
|
|
259
259
|
"source": "workflow-call-input"
|
|
260
260
|
},
|
|
261
|
-
"checkout-history-mode": {
|
|
262
|
-
"classification": "included",
|
|
263
|
-
"source": "workflow-call-input"
|
|
264
|
-
},
|
|
265
261
|
"compiler-cache-platforms-json": {
|
|
266
262
|
"classification": "digest-only",
|
|
267
263
|
"source": "workflow-call-input"
|
|
@@ -504,7 +500,7 @@
|
|
|
504
500
|
"controller-receipt"
|
|
505
501
|
]
|
|
506
502
|
},
|
|
507
|
-
"digest": "sha256:
|
|
503
|
+
"digest": "sha256:2e4c9e9af2162de2333c9b57bffcff77a76e9ed384b9f001ab8ef63d527197f9"
|
|
508
504
|
},
|
|
509
505
|
{
|
|
510
506
|
"schemaVersion": 1,
|
|
@@ -700,10 +696,6 @@
|
|
|
700
696
|
"classification": "digest-only",
|
|
701
697
|
"source": "workflow-call-input"
|
|
702
698
|
},
|
|
703
|
-
"checkout-history-mode": {
|
|
704
|
-
"classification": "included",
|
|
705
|
-
"source": "workflow-call-input"
|
|
706
|
-
},
|
|
707
699
|
"compiler-cache-platforms-json": {
|
|
708
700
|
"classification": "digest-only",
|
|
709
701
|
"source": "workflow-call-input"
|
|
@@ -922,7 +914,7 @@
|
|
|
922
914
|
"controller-receipt"
|
|
923
915
|
]
|
|
924
916
|
},
|
|
925
|
-
"digest": "sha256:
|
|
917
|
+
"digest": "sha256:105eed3eb8f772d4ed93d43e7da404d849b92eafab1b461c7a9b7cb94a8a6b3b"
|
|
926
918
|
},
|
|
927
919
|
{
|
|
928
920
|
"schemaVersion": 1,
|
|
@@ -2314,5 +2306,5 @@
|
|
|
2314
2306
|
"digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
|
|
2315
2307
|
}
|
|
2316
2308
|
],
|
|
2317
|
-
"digest": "sha256:
|
|
2309
|
+
"digest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d"
|
|
2318
2310
|
}
|
|
@@ -14,20 +14,20 @@
|
|
|
14
14
|
},
|
|
15
15
|
"runtimeContract": {
|
|
16
16
|
"contract": "kungfu-buildchain-runtime-contract-world",
|
|
17
|
-
"compatibilityDigest": "sha256:
|
|
17
|
+
"compatibilityDigest": "sha256:3bbcaf835844260ed98414d3bd176667245d12131e13fc748e4c2fae12399691",
|
|
18
18
|
"majorLine": "v3"
|
|
19
19
|
},
|
|
20
20
|
"publicSurfaceReverseAudit": {
|
|
21
21
|
"contract": "kungfu-buildchain-public-surface-reverse-audit",
|
|
22
22
|
"path": "dist/site/public-surface-audit.json",
|
|
23
23
|
"status": "passed",
|
|
24
|
-
"sha256": "
|
|
24
|
+
"sha256": "b668f282a60ba1e9737cbe17319dbc633e1fd2e3156436d5bafcb78bc35dda67",
|
|
25
25
|
"summary": {
|
|
26
26
|
"cliCommandCount": 112,
|
|
27
|
-
"workflowCount":
|
|
27
|
+
"workflowCount": 57,
|
|
28
28
|
"actionCount": 6,
|
|
29
29
|
"sitePageCount": 63,
|
|
30
|
-
"docCommandRefCount":
|
|
30
|
+
"docCommandRefCount": 813,
|
|
31
31
|
"failureCount": 0
|
|
32
32
|
},
|
|
33
33
|
"auditBoundary": {
|
|
@@ -246,13 +246,13 @@
|
|
|
246
246
|
"contract": "kungfu-buildchain-public-surface-reverse-audit",
|
|
247
247
|
"path": "dist/site/public-surface-audit.json",
|
|
248
248
|
"status": "passed",
|
|
249
|
-
"sha256": "
|
|
249
|
+
"sha256": "b668f282a60ba1e9737cbe17319dbc633e1fd2e3156436d5bafcb78bc35dda67",
|
|
250
250
|
"summary": {
|
|
251
251
|
"cliCommandCount": 112,
|
|
252
|
-
"workflowCount":
|
|
252
|
+
"workflowCount": 57,
|
|
253
253
|
"actionCount": 6,
|
|
254
254
|
"sitePageCount": 63,
|
|
255
|
-
"docCommandRefCount":
|
|
255
|
+
"docCommandRefCount": 813,
|
|
256
256
|
"failureCount": 0
|
|
257
257
|
},
|
|
258
258
|
"auditBoundary": {
|
|
@@ -3066,7 +3066,7 @@
|
|
|
3066
3066
|
},
|
|
3067
3067
|
{
|
|
3068
3068
|
"id": "cli:release-propagation",
|
|
3069
|
-
"name": "buildchain release-propagation <plan|write-lock
|
|
3069
|
+
"name": "buildchain release-propagation <plan|write-lock> ...",
|
|
3070
3070
|
"kind": "cli-command",
|
|
3071
3071
|
"sourcePath": "bin/buildchain.mjs",
|
|
3072
3072
|
"evidencePath": "bin/buildchain.mjs",
|
|
@@ -3334,7 +3334,7 @@
|
|
|
3334
3334
|
"visibility": "public",
|
|
3335
3335
|
"participantFacing": true,
|
|
3336
3336
|
"public": true,
|
|
3337
|
-
"inputCount":
|
|
3337
|
+
"inputCount": 82,
|
|
3338
3338
|
"inputs": [
|
|
3339
3339
|
"artifact-compression-level",
|
|
3340
3340
|
"artifact-name",
|
|
@@ -3370,7 +3370,6 @@
|
|
|
3370
3370
|
"checkout-cache-mode",
|
|
3371
3371
|
"checkout-cache-reference-repository-template",
|
|
3372
3372
|
"checkout-cache-timeout-seconds",
|
|
3373
|
-
"checkout-history-mode",
|
|
3374
3373
|
"compiler-cache-platforms-json",
|
|
3375
3374
|
"compiler-cache-provider",
|
|
3376
3375
|
"compiler-cache-required",
|
|
@@ -3436,32 +3435,6 @@
|
|
|
3436
3435
|
"inputs": [],
|
|
3437
3436
|
"reverseAuditSource": ".github/workflows"
|
|
3438
3437
|
},
|
|
3439
|
-
{
|
|
3440
|
-
"id": "workflow:.declarative-auditable-demo",
|
|
3441
|
-
"name": "workflow:.declarative-auditable-demo",
|
|
3442
|
-
"kind": "workflow",
|
|
3443
|
-
"sourcePath": ".github/workflows/.declarative-auditable-demo.yml",
|
|
3444
|
-
"evidencePath": ".github/workflows/.declarative-auditable-demo.yml",
|
|
3445
|
-
"availability": "shipped",
|
|
3446
|
-
"visibility": "public",
|
|
3447
|
-
"participantFacing": true,
|
|
3448
|
-
"public": true,
|
|
3449
|
-
"inputCount": 11,
|
|
3450
|
-
"inputs": [
|
|
3451
|
-
"artifact-retention-days",
|
|
3452
|
-
"binary-artifact-digest",
|
|
3453
|
-
"binary-artifact-name",
|
|
3454
|
-
"buildchain-repository",
|
|
3455
|
-
"materialize",
|
|
3456
|
-
"materialize-base-ref",
|
|
3457
|
-
"media-profile",
|
|
3458
|
-
"render-media",
|
|
3459
|
-
"renderer-image",
|
|
3460
|
-
"scenario-path",
|
|
3461
|
-
"source-ref"
|
|
3462
|
-
],
|
|
3463
|
-
"reverseAuditSource": ".github/workflows"
|
|
3464
|
-
},
|
|
3465
3438
|
{
|
|
3466
3439
|
"id": "workflow:.gate-profile",
|
|
3467
3440
|
"name": "workflow:.gate-profile",
|
|
@@ -4004,20 +3977,6 @@
|
|
|
4004
3977
|
"inputs": [],
|
|
4005
3978
|
"reverseAuditSource": ".github/workflows"
|
|
4006
3979
|
},
|
|
4007
|
-
{
|
|
4008
|
-
"id": "workflow:auditable-demo",
|
|
4009
|
-
"name": "workflow:auditable-demo",
|
|
4010
|
-
"kind": "workflow",
|
|
4011
|
-
"sourcePath": ".github/workflows/auditable-demo.yml",
|
|
4012
|
-
"evidencePath": ".github/workflows/auditable-demo.yml",
|
|
4013
|
-
"availability": "shipped",
|
|
4014
|
-
"visibility": "public",
|
|
4015
|
-
"participantFacing": true,
|
|
4016
|
-
"public": true,
|
|
4017
|
-
"inputCount": 0,
|
|
4018
|
-
"inputs": [],
|
|
4019
|
-
"reverseAuditSource": ".github/workflows"
|
|
4020
|
-
},
|
|
4021
3980
|
{
|
|
4022
3981
|
"id": "workflow:binary-distribution",
|
|
4023
3982
|
"name": "workflow:binary-distribution",
|
|
@@ -4070,7 +4029,7 @@
|
|
|
4070
4029
|
"visibility": "public",
|
|
4071
4030
|
"participantFacing": true,
|
|
4072
4031
|
"public": true,
|
|
4073
|
-
"inputCount":
|
|
4032
|
+
"inputCount": 85,
|
|
4074
4033
|
"inputs": [
|
|
4075
4034
|
"artifact-compression-level",
|
|
4076
4035
|
"artifact-name",
|
|
@@ -4109,7 +4068,6 @@
|
|
|
4109
4068
|
"checkout-cache-mode",
|
|
4110
4069
|
"checkout-cache-reference-repository-template",
|
|
4111
4070
|
"checkout-cache-timeout-seconds",
|
|
4112
|
-
"checkout-history-mode",
|
|
4113
4071
|
"compiler-cache-platforms-json",
|
|
4114
4072
|
"compiler-cache-provider",
|
|
4115
4073
|
"compiler-cache-required",
|
|
@@ -6138,6 +6096,6 @@
|
|
|
6138
6096
|
}
|
|
6139
6097
|
}
|
|
6140
6098
|
],
|
|
6141
|
-
"publicSurfaceCount":
|
|
6099
|
+
"publicSurfaceCount": 390
|
|
6142
6100
|
}
|
|
6143
6101
|
}
|
|
@@ -37,7 +37,7 @@
|
|
|
37
37
|
"title": "Auditable demo artifact pipeline",
|
|
38
38
|
"path": "docs/auditable-demo.md",
|
|
39
39
|
"plane": "verify",
|
|
40
|
-
"digest": "sha256:
|
|
40
|
+
"digest": "sha256:4d32c82b652decfbb26b441c203fe34e70daa86022bb4baed9da02a5d6cf5831",
|
|
41
41
|
"capabilityGroup": "reusable-build",
|
|
42
42
|
"audience": [
|
|
43
43
|
"consumer",
|
|
@@ -317,7 +317,7 @@
|
|
|
317
317
|
"title": "Generated CLI reference",
|
|
318
318
|
"path": "docs/cli-reference.md",
|
|
319
319
|
"plane": "use",
|
|
320
|
-
"digest": "sha256:
|
|
320
|
+
"digest": "sha256:c728fe693ab591ab5b52f4276a817ec5a013c79833f0d20ca2cc137e85ae51ca",
|
|
321
321
|
"capabilityGroup": "api-cli-reference",
|
|
322
322
|
"audience": [
|
|
323
323
|
"agent",
|
|
@@ -332,7 +332,7 @@
|
|
|
332
332
|
"title": "Generated Node API reference",
|
|
333
333
|
"path": "docs/node-api-reference.md",
|
|
334
334
|
"plane": "use",
|
|
335
|
-
"digest": "sha256:
|
|
335
|
+
"digest": "sha256:38f051f579fb93dc7d8b4f2c70acd622c020e867394344b5e932568cd8d2ad83",
|
|
336
336
|
"capabilityGroup": "api-cli-reference",
|
|
337
337
|
"audience": [
|
|
338
338
|
"agent",
|
|
@@ -403,7 +403,7 @@
|
|
|
403
403
|
"title": "Reusable build surface",
|
|
404
404
|
"path": "docs/reusable-build-surface.md",
|
|
405
405
|
"plane": "use",
|
|
406
|
-
"digest": "sha256:
|
|
406
|
+
"digest": "sha256:8908e1f1589537ac8ef82ee1dacdd24072ca871e3e245825669e7cfbdebd2e3d",
|
|
407
407
|
"capabilityGroup": "reusable-build",
|
|
408
408
|
"audience": [
|
|
409
409
|
"consumer",
|
|
@@ -417,7 +417,7 @@
|
|
|
417
417
|
"title": "Publish transaction",
|
|
418
418
|
"path": "docs/publish-transaction.md",
|
|
419
419
|
"plane": "verify",
|
|
420
|
-
"digest": "sha256:
|
|
420
|
+
"digest": "sha256:9b830727e5b0d2192c937f19106c11ea5064dde77e30d290825f343df47f291b",
|
|
421
421
|
"capabilityGroup": "release-passport-trust",
|
|
422
422
|
"audience": [
|
|
423
423
|
"release-operator"
|
|
@@ -430,7 +430,7 @@
|
|
|
430
430
|
"title": "Release governance",
|
|
431
431
|
"path": "docs/release-governance.md",
|
|
432
432
|
"plane": "why",
|
|
433
|
-
"digest": "sha256:
|
|
433
|
+
"digest": "sha256:60ec90d3294818d3c53e403312801a8ab47be7c0f34810002676fbfcdbceaa60",
|
|
434
434
|
"capabilityGroup": "governance-versioning",
|
|
435
435
|
"audience": [
|
|
436
436
|
"maintainer",
|
|
@@ -444,7 +444,7 @@
|
|
|
444
444
|
"title": "Release flow",
|
|
445
445
|
"path": "docs/release-flow.md",
|
|
446
446
|
"plane": "verify",
|
|
447
|
-
"digest": "sha256:
|
|
447
|
+
"digest": "sha256:bac959565c36cf39c3cd30dfce00dbbb59b73ed21b852a8f24a6cae281cb5f05",
|
|
448
448
|
"capabilityGroup": "governance-versioning",
|
|
449
449
|
"audience": [
|
|
450
450
|
"release-operator",
|