@kungfu-tech/buildchain 3.0.6-alpha.1 → 3.0.6-alpha.2

package/dist/site/capability-registry.json

@@ -15,7 +15,7 @@
       "maturity": "stable",
       "counts": {
         "manualCount": 4,
-        "pageCount": 14,
+        "pageCount": 15,
         "cliCommandCount": 9,
         "nodeApiCount": 0,
         "workflowCount": 0,
@@ -253,8 +253,8 @@
         "manualCount": 8,
         "pageCount": 8,
         "cliCommandCount": 11,
-        "nodeApiCount": 5,
-        "workflowCount": 13,
+        "nodeApiCount": 6,
+        "workflowCount": 16,
         "actionCount": 0
       },
       "manuals": [

package/dist/site/cli-registry.json

@@ -409,29 +409,65 @@
     {
       "id": "dev",
       "source": "bin/buildchain.mjs",
-      "usage": "buildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M>",
+      "usage": "buildchain dev pr-admit --repository <owner/repo> --branch <dev/vN/vN.M>",
       "paths": [
         "dev",
-        "dev merge-queue"
+        "dev merge-queue",
+        "dev pr-admit",
+        "dev proof classify",
+        "dev proof integration",
+        "dev proof replay",
+        "dev proof source",
+        "dev proof verify-integration",
+        "dev proof verify-source",
+        "dev warrant cancel-queued",
+        "dev warrant close",
+        "dev warrant heartbeat",
+        "dev warrant observe",
+        "dev warrant recover",
+        "dev warrant select",
+        "dev warrant submit"
       ],
       "syntaxes": [
         "buildchain dev",
-        "buildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M> [--from-config | --workflow <required-workflow.yml>...] [--cwd <dir>] [--check-response-timeout-minutes <n>] [--max-entries-to-build <n>] [--apply]"
+        "buildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M> [--from-config | --workflow <required-workflow.yml>...] [--cwd <dir>] [--check-response-timeout-minutes <n>] [--max-entries-to-build <n>] [--apply]",
+        "buildchain dev pr-admit --repository <owner/repo> --branch <dev/vN/vN.M> --pull-request <n> --expected-head <sha> [--execute] [--output <file>] [--json]",
+        "buildchain dev proof <source|verify-source|classify|replay|integration|verify-integration> [--output <file>] [--json]",
+        "buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]"
       ],
       "options": [
         "--apply",
         "--branch",
         "--check-response-timeout-minutes",
         "--cwd",
+        "--execute",
+        "--expected-head",
         "--from-config",
+        "--json",
         "--max-entries-to-build",
+        "--output",
+        "--pull-request",
         "--repository",
         "--workflow"
       ],
       "aliases": [],
       "helpCommands": [
         "buildchain dev --help",
-        "buildchain dev merge-queue --help"
+        "buildchain dev merge-queue --help",
+        "buildchain dev pr-admit --help",
+        "buildchain dev proof classify --help",
+        "buildchain dev proof integration --help",
+        "buildchain dev proof replay --help",
+        "buildchain dev proof source --help",
+        "buildchain dev proof verify-integration --help",
+        "buildchain dev proof verify-source --help",
+        "buildchain dev warrant cancel-queued --help",
+        "buildchain dev warrant close --help",
+        "buildchain dev warrant heartbeat --help",
+        "buildchain dev warrant observe --help",
+        "buildchain dev warrant recover --help",
+        "buildchain dev warrant select --help",
+        "buildchain dev warrant submit --help"
       ],
       "purpose": "Inspect protected development-channel governance command families.",
       "capabilityGroup": "governance-versioning",

package/dist/site/controller-registry.json

@@ -458,6 +458,10 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
+        "verify-substage-evidence-path": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "working-directory": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -512,7 +516,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:ba530907e57984abd47974cf3a9bab124f04629563676a4e37cfa302549789d6"
+      "digest": "sha256:9c0aacca910cef4619a797898ff5c24027c1583f84431a93a5efc854925326e7"
     },
     {
       "schemaVersion": 1,
@@ -908,6 +912,10 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
+        "verify-substage-evidence-path": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "working-directory": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -938,7 +946,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:0e0888527d7319a7603620520cdd76eb3e4434f80dbc92fffa0eb0d90f88b3e4"
+      "digest": "sha256:48545554883888862984cdf1b6b4b56341531cdd6192600782a76b92ad22fd36"
     },
     {
       "schemaVersion": 1,
@@ -1887,6 +1895,10 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
+        "publication-gate-command": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "publication-package-name": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1979,6 +1991,10 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "release-candidate-wait-seconds": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "release-candidate-workflow-file": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -2137,7 +2153,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:220710d81a41b50edb4dc65cea3e1e5d20805406eaaced65bc006718700696b9"
+      "digest": "sha256:a13b820669b162ab2f39d213164e7b7ab4e24c65f93cd3265a977fcd667c1303"
     },
     {
       "schemaVersion": 1,
@@ -2330,5 +2346,5 @@
       "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
     }
   ],
-  "digest": "sha256:bbe99942ee5b4f333470525bf9ae7c4c9c66875ab384ba6a05700dac139bf5b1"
+  "digest": "sha256:e7d02924b5f42f513e6f6a3b2cdbccdcd92b594b63ebc7aa8dd8cd3d8376283e"
 }

package/dist/site/kfd-claims.json

@@ -21,13 +21,13 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "7a8d22353a233dae3e99b727de9fef3f3d8b78741155c4f685214227481fd8f9",
+    "sha256": "000be65d0102e56b08a7c98e12836af0b137603e1c438b248f017ac338394271",
     "summary": {
       "cliCommandCount": 112,
-      "workflowCount": 60,
+      "workflowCount": 63,
       "actionCount": 6,
-      "sitePageCount": 64,
-      "docCommandRefCount": 830,
+      "sitePageCount": 65,
+      "docCommandRefCount": 881,
       "failureCount": 0
     },
     "auditBoundary": {
@@ -246,13 +246,13 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "7a8d22353a233dae3e99b727de9fef3f3d8b78741155c4f685214227481fd8f9",
+      "sha256": "000be65d0102e56b08a7c98e12836af0b137603e1c438b248f017ac338394271",
       "summary": {
         "cliCommandCount": 112,
-        "workflowCount": 60,
+        "workflowCount": 63,
         "actionCount": 6,
-        "sitePageCount": 64,
-        "docCommandRefCount": 830,
+        "sitePageCount": 65,
+        "docCommandRefCount": 881,
         "failureCount": 0
       },
       "auditBoundary": {
@@ -1352,6 +1352,18 @@
           "public": true,
           "packageExport": "./diagnostics"
         },
+        {
+          "id": "export:./dev-delivery-warrant",
+          "name": "@kungfu-tech/buildchain/dev-delivery-warrant",
+          "kind": "package-export",
+          "sourcePath": "packages/core/dev-delivery-warrant.js",
+          "evidencePath": "packages/core/dev-delivery-warrant.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./dev-delivery-warrant"
+        },
         {
           "id": "export:./homebrew",
           "name": "@kungfu-tech/buildchain/homebrew",
@@ -2046,7 +2058,7 @@
         },
         {
           "id": "cli:dev",
-          "name": "buildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M>",
+          "name": "buildchain dev pr-admit --repository <owner/repo> --branch <dev/vN/vN.M>",
           "kind": "cli-command",
           "sourcePath": "bin/buildchain.mjs",
           "evidencePath": "bin/buildchain.mjs",
@@ -3334,7 +3346,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 85,
+          "inputCount": 86,
           "inputs": [
             "artifact-compression-level",
             "artifact-name",
@@ -3420,6 +3432,7 @@
             "shifu-cache-profile-ref",
             "untrusted-policy",
             "verify-command",
+            "verify-substage-evidence-path",
             "working-directory"
           ],
           "reverseAuditSource": ".github/workflows"
@@ -3448,7 +3461,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 11,
+          "inputCount": 12,
           "inputs": [
             "artifact-retention-days",
             "binary-artifact-digest",
@@ -3457,6 +3470,7 @@
             "materialize",
             "materialize-base-ref",
             "media-profile",
+            "render-failure-advisory",
             "render-media",
             "renderer-image",
             "scenario-path",
@@ -3519,7 +3533,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 33,
+          "inputCount": 34,
           "inputs": [
             "admission-json",
             "authority-workflow-path",
@@ -3528,6 +3542,7 @@
             "auto-no-gate",
             "buildchain-ref",
             "buildchain-repository",
+            "consumer-gate-command",
             "consumer-predicate-digest",
             "consumer-predicate-id",
             "consumer-qualification-required",
@@ -3567,7 +3582,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 95,
+          "inputCount": 97,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -3612,6 +3627,7 @@
             "publication-control-plane-audit-json",
             "publication-expected-json",
             "publication-gate-aggregate-json",
+            "publication-gate-command",
             "publication-package-name",
             "publication-product",
             "publication-publisher-workflow-path",
@@ -3635,6 +3651,7 @@
             "release-candidate-family-evidence-required",
             "release-candidate-family-evidence-root",
             "release-candidate-family-initiative-id",
+            "release-candidate-wait-seconds",
             "release-candidate-workflow-file",
             "release-candidate-workflow-name",
             "release-passport",
@@ -4072,7 +4089,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 88,
+          "inputCount": 89,
           "inputs": [
             "artifact-compression-level",
             "artifact-name",
@@ -4161,6 +4178,7 @@
             "shifu-cache-profile-ref",
             "untrusted-policy",
             "verify-command",
+            "verify-substage-evidence-path",
             "working-directory"
           ],
           "reverseAuditSource": ".github/workflows"
@@ -4179,6 +4197,20 @@
           "inputs": [],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:buildchain-dev-delivery",
+          "name": "workflow:buildchain-dev-delivery",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/buildchain-dev-delivery.yml",
+          "evidencePath": ".github/workflows/buildchain-dev-delivery.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 0,
+          "inputs": [],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:buildchain-patrol-daily",
           "name": "workflow:buildchain-patrol-daily",
@@ -4360,6 +4392,61 @@
           ],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:dev-delivery-warrant-cancel",
+          "name": "workflow:dev-delivery-warrant-cancel",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/dev-delivery-warrant-cancel.yml",
+          "evidencePath": ".github/workflows/dev-delivery-warrant-cancel.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 12,
+          "inputs": [
+            "buildchain-ref",
+            "buildchain-repository",
+            "event-action",
+            "expected-candidate-id",
+            "expected-old-state-root",
+            "expected-pr-number",
+            "expected-source-head-sha",
+            "observed-source-head-sha",
+            "outcome",
+            "reason",
+            "target-branch",
+            "terminal-evidence-root"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
+        {
+          "id": "workflow:dev-delivery-warrant-close",
+          "name": "workflow:dev-delivery-warrant-close",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/dev-delivery-warrant-close.yml",
+          "evidencePath": ".github/workflows/dev-delivery-warrant-close.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 13,
+          "inputs": [
+            "buildchain-ref",
+            "buildchain-repository",
+            "current-base-sha",
+            "expected-head-sha",
+            "expected-pr-number",
+            "merge-group-head-sha",
+            "merge-group-tree-sha",
+            "outcome",
+            "reason",
+            "replay-tree-sha",
+            "required-context-roots-json",
+            "target-branch",
+            "terminal-evidence-root"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:dev-merge-queue-governance",
           "name": "workflow:dev-merge-queue-governance",
@@ -4384,22 +4471,40 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 14,
+          "inputCount": 32,
           "inputs": [
+            "affected-paths-json",
             "allowed-head-prefixes",
+            "assignment-root",
             "block-labels",
             "buildchain-ref",
             "buildchain-repository",
+            "closure-root",
+            "delivery-class",
+            "delivery-priority",
+            "delivery-warrant-mode",
+            "dependency-root",
+            "diagnostic-context",
             "dry-run",
+            "expected-head-sha",
+            "expected-pr-number",
+            "initiative-root",
             "landing-mode",
             "max-merges",
             "merge-method",
+            "plan-root",
+            "project-cut-proof-json",
             "queue-admission-context",
             "ready-label",
             "require-approval",
             "required-status-checks",
             "same-repository-only",
-            "target-branch"
+            "shard-evidence-roots-json",
+            "source-identity-root",
+            "source-patch-root",
+            "target-branch",
+            "toolchain-root",
+            "warrant-lease-seconds"
           ],
           "reverseAuditSource": ".github/workflows"
         },
@@ -4717,7 +4822,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 87,
+          "inputCount": 89,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -4754,6 +4859,7 @@
             "publication-control-plane-audit-json",
             "publication-expected-json",
             "publication-gate-aggregate-json",
+            "publication-gate-command",
             "publication-package-name",
             "publication-product",
             "publication-publisher-workflow-path",
@@ -4777,6 +4883,7 @@
             "release-candidate-family-evidence-required",
             "release-candidate-family-evidence-root",
             "release-candidate-family-initiative-id",
+            "release-candidate-wait-seconds",
             "release-candidate-workflow-file",
             "release-candidate-workflow-name",
             "release-passport",
@@ -5200,7 +5307,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 21,
+          "inputCount": 22,
           "inputs": [
             "artifact-name",
             "artifact-paths",
@@ -5221,6 +5328,7 @@
             "required",
             "sample-process-tree",
             "stage",
+            "substage-evidence-path",
             "summary-path",
             "timeout-minutes"
           ],
@@ -5592,6 +5700,18 @@
           "public": true,
           "reverseAuditSource": "dist/site/page-registry.json"
         },
+        {
+          "id": "site-page:manual:dev-delivery-warrant",
+          "name": "site-page:manual:dev-delivery-warrant",
+          "kind": "site-page",
+          "sourcePath": "dist/site/page-registry.json",
+          "evidencePath": "dist/site/page-registry.json",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "dist/site/page-registry.json"
+        },
         {
           "id": "site-page:manual:dev-qualification-patrol",
           "name": "site-page:manual:dev-qualification-patrol",
@@ -6183,6 +6303,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 394
+    "publicSurfaceCount": 399
   }
 }

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.6-alpha.1",
+    "version": "3.0.6-alpha.2",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/manual-registry.json

@@ -9,7 +9,7 @@
       "title": "Buildchain documentation map",
       "path": "docs/MAP.md",
       "plane": "use",
-      "digest": "sha256:0ea7f59030e5a087e3ff7e9eb591fec8d92c64399799e554aa1fa7ecb6a263ae",
+      "digest": "sha256:d76416d8cd04dcdb560b7d06fef287fa22d6b186a729cb92cd4cf71cebbac1e9",
       "capabilityGroup": "getting-started",
       "audience": [
         "agent",
@@ -37,7 +37,7 @@
       "title": "Auditable demo artifact pipeline",
       "path": "docs/auditable-demo.md",
       "plane": "verify",
-      "digest": "sha256:7e1426d8200bd4e7a7e6684c872f47075cd37d0bddbb262ea3263eaad846b540",
+      "digest": "sha256:c49e734fdfe3b74d317e23a523e198f1194b2c7cd16cca87e8e3a3ffc7bf589f",
       "capabilityGroup": "reusable-build",
       "audience": [
         "consumer",
@@ -107,7 +107,7 @@
       "title": "Sealed publication authority",
       "path": "docs/publication-authority.md",
       "plane": "verify",
-      "digest": "sha256:6c91ee89d1ed5c0c570806684738916876556b2f1bcbf4be4f73f30ff89e98a4",
+      "digest": "sha256:a1650158943d95b979d164ca98a73d7919fda577d648e4a4a9d04588ec698796",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator",
@@ -136,7 +136,7 @@
       "title": "Release Candidate Passport",
       "path": "docs/release-candidate.md",
       "plane": "verify",
-      "digest": "sha256:fbcffddf1e2c50502186b7ba557e29f96be59a1da6d438aabd4d1f9ce32b5915",
+      "digest": "sha256:48e42e92174b1091e8ff32e876099f092ca12ce886d3382f019f0ccd907f1c9b",
       "capabilityGroup": "reusable-build",
       "audience": [
         "release-operator",
@@ -317,7 +317,7 @@
       "title": "Generated CLI reference",
       "path": "docs/cli-reference.md",
       "plane": "use",
-      "digest": "sha256:73d34a3b46ecfb772b806f0d79754772446fcc13d7f349b508a0c0212e97fcec",
+      "digest": "sha256:2365e125d38e43b68a4af277a91be7aca708a8bf785954ed4589dbd9a5d8db97",
       "capabilityGroup": "api-cli-reference",
       "audience": [
         "agent",
@@ -332,7 +332,7 @@
       "title": "Generated Node API reference",
       "path": "docs/node-api-reference.md",
       "plane": "use",
-      "digest": "sha256:ae49a589091d1ab91d29f2d6ac52cf2551a9d0b1f78350965b408f40fd219e29",
+      "digest": "sha256:e0e720eeacfa61a1ca235142858f544e18d3f7a000e300a4311e246fe738ff81",
       "capabilityGroup": "api-cli-reference",
       "audience": [
         "agent",
@@ -403,7 +403,7 @@
       "title": "Reusable build surface",
       "path": "docs/reusable-build-surface.md",
       "plane": "use",
-      "digest": "sha256:fe06637d604101269b013163be558c1ecc842276e27f2b5abfb6eea39e98feb0",
+      "digest": "sha256:7bc04f658d7e298872756278c60143d8edf5dfb841d0b0d3ea62af8028735b54",
       "capabilityGroup": "reusable-build",
       "audience": [
         "consumer",
@@ -430,7 +430,7 @@
       "title": "Release governance",
       "path": "docs/release-governance.md",
       "plane": "why",
-      "digest": "sha256:fc7f0add1afce775c327d50a1e269a7040865e65ca2441dbeb8d0373c5f8d5aa",
+      "digest": "sha256:481640f398d966dca4f1f2e29a8100f0f479315ee19e65b0e259720f2b61213f",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer",
@@ -472,7 +472,7 @@
       "title": "Versioning",
       "path": "docs/versioning.md",
       "plane": "why",
-      "digest": "sha256:bdb155e873f9c2ea5cd40bdde057d2c2f90322f0d4575de77fe1670bd040e643",
+      "digest": "sha256:793db9414d11aeb314ff2d37a52481826ca5f636d08eaf93772d37962a51484f",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer"