@kungfu-tech/buildchain 3.0.5-alpha.8 → 3.0.6-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. package/contracts/auditable-demo-scenario-v1.schema.json +11 -0
  2. package/dist/site/buildchain-contract.json +42 -22
  3. package/dist/site/buildchain-site.json +73 -27
  4. package/dist/site/capability-registry.json +2 -2
  5. package/dist/site/cli-registry.json +5 -3
  6. package/dist/site/controller-registry.json +19 -3
  7. package/dist/site/kfd-claims.json +58 -14
  8. package/dist/site/kfd-upstream-aggregate.json +1 -1
  9. package/dist/site/manual-registry.json +7 -6
  10. package/dist/site/node-api-registry.json +335 -8
  11. package/dist/site/page-registry.json +63 -17
  12. package/dist/site/public-surface-audit.json +94 -11
  13. package/dist/site/publication-authority-registry.json +21 -1
  14. package/dist/site/publication-registry.json +4 -4
  15. package/dist/site/site-manifest.json +10 -10
  16. package/dist/site/workflow-registry.json +53 -4
  17. package/docs/MAP.md +4 -1
  18. package/docs/auditable-demo.md +19 -3
  19. package/docs/cli-reference.md +15 -4
  20. package/docs/dev-alpha-candidate-patrol.md +14 -5
  21. package/docs/dev-qualification-patrol.md +108 -0
  22. package/docs/node-api-reference.md +42 -9
  23. package/docs/release-propagation.md +93 -0
  24. package/docs/reusable-build-surface.md +44 -12
  25. package/docs/stable-candidate-patrol.md +5 -2
  26. package/package.json +1 -1
  27. package/packages/core/buildchain-publication-authority.js +1 -0
  28. package/packages/core/release-propagation-agent-entry.js +185 -0
  29. package/packages/core/release-propagation-push.js +293 -0
  30. package/packages/core/release-propagation-stage-evidence.js +36 -0
  31. package/packages/core/release-propagation-work.js +1 -1
  32. package/packages/core/release-propagation.js +15 -0
  33. package/scripts/artifact-signing-controller-core.mjs +525 -0
  34. package/scripts/artifact-signing-controller.mjs +302 -0
  35. package/scripts/artifact-signing-delegation.mjs +51 -3
  36. package/scripts/auditable-demo-platform.mjs +59 -1
  37. package/scripts/auditable-demo-transport-smoke.mjs +176 -0
  38. package/scripts/build-standalone-binary.mjs +3 -1
  39. package/scripts/buildchain-cli-help.mjs +1 -1
  40. package/scripts/check-inventory.mjs +1 -0
  41. package/scripts/compiler-cache-evidence.mjs +90 -7
  42. package/scripts/dev-alpha-candidate-patrol.mjs +80 -5
  43. package/scripts/dev-pr-auto-merge.mjs +4 -4
  44. package/scripts/dev-qualification-patrol.mjs +594 -0
  45. package/scripts/dispatch-artifact-signing-authority.mjs +312 -61
  46. package/scripts/generate-site-bundle.mjs +3 -0
  47. package/scripts/inspect-artifact-signing-requests.mjs +12 -0
  48. package/scripts/release-propagation.mjs +73 -0
  49. package/scripts/run-lifecycle-core.mjs +25 -0
  50. package/scripts/site-capability-metadata.mjs +1 -1
  51. package/scripts/stable-candidate-patrol.mjs +30 -4
@@ -46,6 +46,17 @@
46
46
  }
47
47
  }
48
48
  },
49
+ "transportSmoke": {
50
+ "type": "object",
51
+ "additionalProperties": false,
52
+ "required": ["argv", "timeoutSeconds", "expectedExitCodes", "stdoutIncludes"],
53
+ "properties": {
54
+ "argv": {"type": "array", "minItems": 1, "maxItems": 64, "items": {"type": "string", "maxLength": 512}},
55
+ "timeoutSeconds": {"type": "integer", "minimum": 1, "maximum": 60},
56
+ "expectedExitCodes": {"type": "array", "minItems": 1, "maxItems": 4, "items": {"type": "integer", "minimum": 0, "maximum": 255}},
57
+ "stdoutIncludes": {"type": "array", "maxItems": 32, "items": {"type": "string", "minLength": 1, "maxLength": 256}}
58
+ }
59
+ },
49
60
  "renditions": {
50
61
  "const": [
51
62
  {"id": "1080p", "role": "primary", "columns": 150, "rows": 36, "width": 1920, "height": 1080},
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "name": "Buildchain",
6
6
  "package": "@kungfu-tech/buildchain",
7
- "version": "3.0.5-alpha.8",
7
+ "version": "3.0.6-alpha.0",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "majorLine": "v3",
@@ -52,7 +52,7 @@
52
52
  "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
53
53
  ],
54
54
  "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
55
- "auditDigest": "sha256:a604814e212e399e4908f7cd9393bcbc790a596ed12f16c0937deff49f8fc067"
55
+ "auditDigest": "sha256:ca0c1a541903015852be934f01d68c248c438a7ae2ac4727fd7fce3b861d9997"
56
56
  },
57
57
  {
58
58
  "contractVersion": 1,
@@ -91,7 +91,7 @@
91
91
  "alpha and stable channel selections use separate consumer contract locks by default"
92
92
  ],
93
93
  "breakingDigest": "sha256:c4597dfa89e1a58f1023905092b849644f5c080abf150aeba9c7e1cd5ed43962",
94
- "auditDigest": "sha256:f5301f867cb3101e76fd00a294c722d81ce914e35ca57c75f7912f925d3d07a7"
94
+ "auditDigest": "sha256:e67bec5b6e49f69a79f652ea7d7452d0dbd1a59f53ab1e9603e929ecf1a305f4"
95
95
  },
96
96
  {
97
97
  "contractVersion": 1,
@@ -372,7 +372,7 @@
372
372
  "identity, compliance, Product System metadata, package metadata, registry history, scans, and generation grant no authority"
373
373
  ],
374
374
  "breakingDigest": "sha256:0bcba689ab5060e12230db4118895242ecb48677ff581ea0360b1833bdac558c",
375
- "auditDigest": "sha256:49051fc60effa1d4077f461c841927b5a1ab411956e94b305cbf06d2895ab5d0"
375
+ "auditDigest": "sha256:e7e67b9d7bf9cee6103d3cf65686fa428f1d364109c95342cd20c4801a646e02"
376
376
  },
377
377
  {
378
378
  "contractVersion": 1,
@@ -760,7 +760,7 @@
760
760
  "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
761
761
  ],
762
762
  "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
763
- "auditDigest": "sha256:800be7473754e81c51606eb24161d4ed26437717b71bdecc7d0843e9007fded1"
763
+ "auditDigest": "sha256:b0f8aab2e5f92242e5538ea75733113249e61f2e4eec22812267712007be4c15"
764
764
  },
765
765
  {
766
766
  "contractVersion": 1,
@@ -782,7 +782,7 @@
782
782
  "agents can discover supported Node APIs without importing internal file paths"
783
783
  ],
784
784
  "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
785
- "auditDigest": "sha256:39cdb026e5185ff0a11a1563b32d2d74b1801d6967544ba0bd76714a118a59d1"
785
+ "auditDigest": "sha256:2a9cedc7a6cceacb5a9864c97b87b825329ffe5115bb580c90b3e2127f813ad1"
786
786
  },
787
787
  {
788
788
  "contractVersion": 1,
@@ -833,7 +833,7 @@
833
833
  "controllerDescriptor": {
834
834
  "contract": "buildchain.controller-descriptor/v1",
835
835
  "digest": "sha256:373723a73d188194d389dee04c394d3b79cb0c016a370f2f5d0f60979a02ed48",
836
- "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
836
+ "registryDigest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1",
837
837
  "inputClassifications": {
838
838
  "buildchain-ref": {
839
839
  "classification": "included",
@@ -982,6 +982,8 @@
982
982
  "linux-container-preset",
983
983
  "node-version",
984
984
  "platforms-json",
985
+ "pre-upload-transport-smoke-artifact-root",
986
+ "pre-upload-transport-smoke-scenario-path",
985
987
  "process-sample-interval-ms",
986
988
  "process-summary-path",
987
989
  "publish-anchor-request-json",
@@ -1012,8 +1014,8 @@
1012
1014
  ],
1013
1015
  "controllerDescriptor": {
1014
1016
  "contract": "buildchain.controller-descriptor/v1",
1015
- "digest": "sha256:6088b850d18b276fccb71564a2afc7fbc1a3343036635b4fe2de960b99965498",
1016
- "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
1017
+ "digest": "sha256:ba530907e57984abd47974cf3a9bab124f04629563676a4e37cfa302549789d6",
1018
+ "registryDigest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1",
1017
1019
  "inputClassifications": {
1018
1020
  "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
1019
1021
  "classification": "redacted",
@@ -1275,6 +1277,14 @@
1275
1277
  "classification": "digest-only",
1276
1278
  "source": "workflow-call-input"
1277
1279
  },
1280
+ "pre-upload-transport-smoke-artifact-root": {
1281
+ "classification": "included",
1282
+ "source": "workflow-call-input"
1283
+ },
1284
+ "pre-upload-transport-smoke-scenario-path": {
1285
+ "classification": "digest-only",
1286
+ "source": "workflow-call-input"
1287
+ },
1278
1288
  "process-sample-interval-ms": {
1279
1289
  "classification": "included",
1280
1290
  "source": "workflow-call-input"
@@ -1396,7 +1406,7 @@
1396
1406
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
1397
1407
  ],
1398
1408
  "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
1399
- "auditDigest": "sha256:a604814e212e399e4908f7cd9393bcbc790a596ed12f16c0937deff49f8fc067"
1409
+ "auditDigest": "sha256:ca0c1a541903015852be934f01d68c248c438a7ae2ac4727fd7fce3b861d9997"
1400
1410
  },
1401
1411
  {
1402
1412
  "contractVersion": 1,
@@ -1502,6 +1512,8 @@
1502
1512
  "linux-container-preset",
1503
1513
  "node-version",
1504
1514
  "platforms-json",
1515
+ "pre-upload-transport-smoke-artifact-root",
1516
+ "pre-upload-transport-smoke-scenario-path",
1505
1517
  "process-sample-interval-ms",
1506
1518
  "process-summary-path",
1507
1519
  "publish-anchor-request-json",
@@ -1532,8 +1544,8 @@
1532
1544
  ],
1533
1545
  "controllerDescriptor": {
1534
1546
  "contract": "buildchain.controller-descriptor/v1",
1535
- "digest": "sha256:7668105652e29bf41bbdaf73288cc285c78a7beaa287bf8502b8abc107837372",
1536
- "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
1547
+ "digest": "sha256:0e0888527d7319a7603620520cdd76eb3e4434f80dbc92fffa0eb0d90f88b3e4",
1548
+ "registryDigest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1",
1537
1549
  "inputClassifications": {
1538
1550
  "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
1539
1551
  "classification": "redacted",
@@ -1807,6 +1819,14 @@
1807
1819
  "classification": "digest-only",
1808
1820
  "source": "workflow-call-input"
1809
1821
  },
1822
+ "pre-upload-transport-smoke-artifact-root": {
1823
+ "classification": "included",
1824
+ "source": "workflow-call-input"
1825
+ },
1826
+ "pre-upload-transport-smoke-scenario-path": {
1827
+ "classification": "digest-only",
1828
+ "source": "workflow-call-input"
1829
+ },
1810
1830
  "process-sample-interval-ms": {
1811
1831
  "classification": "included",
1812
1832
  "source": "workflow-call-input"
@@ -1924,7 +1944,7 @@
1924
1944
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
1925
1945
  ],
1926
1946
  "breakingDigest": "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273",
1927
- "auditDigest": "sha256:f5301f867cb3101e76fd00a294c722d81ce914e35ca57c75f7912f925d3d07a7"
1947
+ "auditDigest": "sha256:e67bec5b6e49f69a79f652ea7d7452d0dbd1a59f53ab1e9603e929ecf1a305f4"
1928
1948
  },
1929
1949
  {
1930
1950
  "contractVersion": 1,
@@ -1994,7 +2014,7 @@
1994
2014
  "controllerDescriptor": {
1995
2015
  "contract": "buildchain.controller-descriptor/v1",
1996
2016
  "digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
1997
- "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
2017
+ "registryDigest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1",
1998
2018
  "inputClassifications": {
1999
2019
  "artifact-name": {
2000
2020
  "classification": "included",
@@ -2125,7 +2145,7 @@
2125
2145
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
2126
2146
  ],
2127
2147
  "breakingDigest": "sha256:5f1868478b7ccd9fb79aea76bc771289d2ca6bd2dccd1abf57575426f1eae5fb",
2128
- "auditDigest": "sha256:b1da0c381cfa2d9ed8d39857b2ef12b1652f9c6be43e76a6944122de9b3f7481"
2148
+ "auditDigest": "sha256:81ecbba803625efc00fba9aadd98c0baa3f6477a105db29f1db366853a464028"
2129
2149
  },
2130
2150
  {
2131
2151
  "contractVersion": 1,
@@ -2211,7 +2231,7 @@
2211
2231
  "controllerDescriptor": {
2212
2232
  "contract": "buildchain.controller-descriptor/v1",
2213
2233
  "digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
2214
- "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
2234
+ "registryDigest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1",
2215
2235
  "inputClassifications": {
2216
2236
  "artifact-path": {
2217
2237
  "classification": "digest-only",
@@ -2455,7 +2475,7 @@
2455
2475
  "controllerDescriptor": {
2456
2476
  "contract": "buildchain.controller-descriptor/v1",
2457
2477
  "digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd",
2458
- "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
2478
+ "registryDigest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1",
2459
2479
  "inputClassifications": {
2460
2480
  "artifact-name": {
2461
2481
  "classification": "included",
@@ -2637,7 +2657,7 @@
2637
2657
  "controllerDescriptor": {
2638
2658
  "contract": "buildchain.controller-descriptor/v1",
2639
2659
  "digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
2640
- "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
2660
+ "registryDigest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1",
2641
2661
  "inputClassifications": {
2642
2662
  "artifact-name": {
2643
2663
  "classification": "included",
@@ -2954,7 +2974,7 @@
2954
2974
  "controllerDescriptor": {
2955
2975
  "contract": "buildchain.controller-descriptor/v1",
2956
2976
  "digest": "sha256:220710d81a41b50edb4dc65cea3e1e5d20805406eaaced65bc006718700696b9",
2957
- "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
2977
+ "registryDigest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1",
2958
2978
  "inputClassifications": {
2959
2979
  "BUILDCHAIN_ISSUE_APP_ID": {
2960
2980
  "classification": "redacted",
@@ -3450,7 +3470,7 @@
3450
3470
  "controllerDescriptor": {
3451
3471
  "contract": "buildchain.controller-descriptor/v1",
3452
3472
  "digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12",
3453
- "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
3473
+ "registryDigest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1",
3454
3474
  "inputClassifications": {
3455
3475
  "agent-work-context-json": {
3456
3476
  "classification": "digest-only",
@@ -3585,7 +3605,7 @@
3585
3605
  "controllerDescriptor": {
3586
3606
  "contract": "buildchain.controller-descriptor/v1",
3587
3607
  "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
3588
- "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
3608
+ "registryDigest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1",
3589
3609
  "inputClassifications": {}
3590
3610
  },
3591
3611
  "guarantees": [
@@ -3599,5 +3619,5 @@
3599
3619
  }
3600
3620
  ],
3601
3621
  "compatibilityDigest": "sha256:76c3dd58a02887ecd6af33d63e749fef0a988a820fea99bdf4cb078cc48caa83",
3602
- "contractDigest": "sha256:bbeb16c4ce1fc30024764e22ffd345852428dd39cb85731242ae4d797bbec783"
3622
+ "contractDigest": "sha256:a431132a3c7e5ce0c45f16c42d5b9e3e0670a76fa74c9aa78e39a063f51b104f"
3603
3623
  }