@kungfu-tech/buildchain 3.0.9-alpha.10 → 3.0.9-alpha.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/actions/promote-buildchain-ref/README.md +4 -0
- package/bin/internal/trust-release-release-handlers.mjs +1 -0
- package/dist/site/buildchain-contract.json +26 -21
- package/dist/site/buildchain-site.json +30 -15
- package/dist/site/capability-registry.json +1 -1
- package/dist/site/cli-registry.json +2 -1
- package/dist/site/controller-registry.json +6 -2
- package/dist/site/kfd-claims.json +33 -6
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +3 -3
- package/dist/site/node-api-registry.json +266 -14
- package/dist/site/page-registry.json +23 -8
- package/dist/site/public-surface-audit.json +9 -6
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/release-provenance.json +2 -0
- package/dist/site/site-manifest.json +7 -7
- package/dist/site/workflow-registry.json +10 -7
- package/docs/cli-reference.md +2 -2
- package/docs/node-api-reference.md +45 -24
- package/docs/release-passport.md +10 -0
- package/package.json +3 -1
- package/packages/core/buildchain-delivery-self-dogfood.js +395 -0
- package/packages/core/dev-delivery-warrant.js +1 -0
- package/packages/core/published-delivery-authority.js +247 -0
- package/packages/core/release-passport.js +8 -1
- package/scripts/buildchain-cli-help.mjs +1 -0
- package/scripts/check-inventory.mjs +1 -1
- package/scripts/dev-delivery-warrant.mjs +1 -1
- package/scripts/site-capability-metadata.mjs +2 -0
- package/scripts/workflow-call-contract.mjs +1 -1
|
@@ -1042,6 +1042,7 @@
|
|
|
1042
1042
|
"release-candidate-workflow-file",
|
|
1043
1043
|
"release-candidate-workflow-name",
|
|
1044
1044
|
"release-passport",
|
|
1045
|
+
"release-passport-adopter-delivery-json",
|
|
1045
1046
|
"release-passport-attachment-command",
|
|
1046
1047
|
"release-passport-buildchain-self-kfd",
|
|
1047
1048
|
"release-passport-evidence-command",
|
|
@@ -1079,7 +1080,7 @@
|
|
|
1079
1080
|
"target-sha",
|
|
1080
1081
|
"trusted-publishing"
|
|
1081
1082
|
],
|
|
1082
|
-
"inputCount":
|
|
1083
|
+
"inputCount": 112,
|
|
1083
1084
|
"secrets": [
|
|
1084
1085
|
"BUILDCHAIN_ISSUE_APP_ID",
|
|
1085
1086
|
"BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
|
|
@@ -2564,6 +2565,7 @@
|
|
|
2564
2565
|
"release-candidate-workflow-file",
|
|
2565
2566
|
"release-candidate-workflow-name",
|
|
2566
2567
|
"release-passport",
|
|
2568
|
+
"release-passport-adopter-delivery-json",
|
|
2567
2569
|
"release-passport-attachment-command",
|
|
2568
2570
|
"release-passport-buildchain-self-kfd",
|
|
2569
2571
|
"release-passport-evidence-command",
|
|
@@ -2601,7 +2603,7 @@
|
|
|
2601
2603
|
"target-sha",
|
|
2602
2604
|
"trusted-publishing"
|
|
2603
2605
|
],
|
|
2604
|
-
"inputCount":
|
|
2606
|
+
"inputCount": 103,
|
|
2605
2607
|
"secrets": [
|
|
2606
2608
|
"BUILDCHAIN_ISSUE_APP_ID",
|
|
2607
2609
|
"BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
|
|
@@ -2957,6 +2959,7 @@
|
|
|
2957
2959
|
"release-candidate-version",
|
|
2958
2960
|
"release-material-sha",
|
|
2959
2961
|
"release-passport",
|
|
2962
|
+
"release-passport-adopter-delivery-json",
|
|
2960
2963
|
"release-passport-attachment-command",
|
|
2961
2964
|
"release-passport-build-summary-path",
|
|
2962
2965
|
"release-passport-buildchain-self-kfd",
|
|
@@ -2991,7 +2994,7 @@
|
|
|
2991
2994
|
"transaction-state-path",
|
|
2992
2995
|
"verification-command"
|
|
2993
2996
|
],
|
|
2994
|
-
"inputCount":
|
|
2997
|
+
"inputCount": 82
|
|
2995
2998
|
},
|
|
2996
2999
|
{
|
|
2997
3000
|
"id": "release-tail",
|
|
@@ -8347,9 +8350,9 @@
|
|
|
8347
8350
|
"cliRegistryPath": "dist/site/cli-registry.json",
|
|
8348
8351
|
"workflowRegistryPath": "dist/site/workflow-registry.json",
|
|
8349
8352
|
"pageRegistryPath": "dist/site/page-registry.json",
|
|
8350
|
-
"cliRegistryDigest": "
|
|
8351
|
-
"workflowRegistryDigest": "
|
|
8352
|
-
"pageRegistryDigest": "
|
|
8353
|
+
"cliRegistryDigest": "613ca42d3fe36e953603221d1cf16478ba84e6cf27dd6d11ddb2c1caea42ec3b",
|
|
8354
|
+
"workflowRegistryDigest": "e50967a318b5d2c8b41ea6a059d116057cf9fc3628cae037a3bb05a73ffec7b0",
|
|
8355
|
+
"pageRegistryDigest": "7fcb0964f575151e6c0722a83bf0ac859923994a83369754ed1d47ffffc6fd33"
|
|
8353
8356
|
},
|
|
8354
8357
|
"comparison": {
|
|
8355
8358
|
"missingCliRegistry": [],
|
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"contract": "kungfu-buildchain-publication-release-registry",
|
|
4
|
-
"generatedAt": "2026-08-
|
|
5
|
-
"publishedAt": "2026-08-
|
|
4
|
+
"generatedAt": "2026-08-13T05:56:34.000Z",
|
|
5
|
+
"publishedAt": "2026-08-13T05:56:34.000Z",
|
|
6
6
|
"reproducible": true,
|
|
7
7
|
"timestampPolicy": "ci-injected",
|
|
8
8
|
"deterministicInputs": [
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
"declared Buildchain surface manifest contract"
|
|
20
20
|
],
|
|
21
21
|
"sourceDateEpoch": "0",
|
|
22
|
-
"sourceRevision": "
|
|
22
|
+
"sourceRevision": "98c2ab8a2242ad52117f5823ac1508572bc83353",
|
|
23
23
|
"timestampPolicyDetails": {
|
|
24
24
|
"contract": "kungfu-buildchain-surface-timestamp-policy",
|
|
25
25
|
"timestampFields": [
|
|
@@ -32,7 +32,7 @@
|
|
|
32
32
|
},
|
|
33
33
|
"package": {
|
|
34
34
|
"name": "@kungfu-tech/buildchain",
|
|
35
|
-
"version": "3.0.9-alpha.
|
|
35
|
+
"version": "3.0.9-alpha.11",
|
|
36
36
|
"versionSource": "package.json#version"
|
|
37
37
|
},
|
|
38
38
|
"sourceKind": "package-site-bundle",
|
|
@@ -36,6 +36,8 @@
|
|
|
36
36
|
"./kfd-adopter-category-driver": "./packages/core/kfd-adopter-category-driver.js",
|
|
37
37
|
"./buildchain-delivery-infrastructure": "./packages/core/buildchain-delivery-infrastructure.js",
|
|
38
38
|
"./buildchain-delivery-bootstrap": "./packages/core/buildchain-delivery-bootstrap.js",
|
|
39
|
+
"./buildchain-delivery-self-dogfood": "./packages/core/buildchain-delivery-self-dogfood.js",
|
|
40
|
+
"./published-delivery-authority": "./packages/core/published-delivery-authority.js",
|
|
39
41
|
"./legacy-kfd-adopter-driver": "./packages/core/legacy-kfd-adopter-driver.js",
|
|
40
42
|
"./adopter-delivery-passport": "./packages/core/adopter-delivery-passport.js",
|
|
41
43
|
"./adopter-delivery-vectors": "./packages/core/adopter-delivery-vectors.js",
|
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"contract": "kungfu-buildchain-site-manifest",
|
|
4
|
-
"generatedAt": "2026-08-
|
|
5
|
-
"publishedAt": "2026-08-
|
|
4
|
+
"generatedAt": "2026-08-13T05:56:34.000Z",
|
|
5
|
+
"publishedAt": "2026-08-13T05:56:34.000Z",
|
|
6
6
|
"reproducible": true,
|
|
7
7
|
"timestampPolicy": "ci-injected",
|
|
8
8
|
"deterministicInputs": [
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
"declared Buildchain surface manifest contract"
|
|
20
20
|
],
|
|
21
21
|
"sourceDateEpoch": "0",
|
|
22
|
-
"sourceRevision": "
|
|
22
|
+
"sourceRevision": "98c2ab8a2242ad52117f5823ac1508572bc83353",
|
|
23
23
|
"timestampPolicyDetails": {
|
|
24
24
|
"contract": "kungfu-buildchain-surface-timestamp-policy",
|
|
25
25
|
"timestampFields": [
|
|
@@ -37,7 +37,7 @@
|
|
|
37
37
|
},
|
|
38
38
|
"package": {
|
|
39
39
|
"name": "@kungfu-tech/buildchain",
|
|
40
|
-
"version": "3.0.9-alpha.
|
|
40
|
+
"version": "3.0.9-alpha.11",
|
|
41
41
|
"versionSource": "package.json#version"
|
|
42
42
|
},
|
|
43
43
|
"entrypoint": "buildchain-site.json",
|
|
@@ -85,7 +85,7 @@
|
|
|
85
85
|
"path": "docs/release-passport.md",
|
|
86
86
|
"plane": "verify",
|
|
87
87
|
"exists": true,
|
|
88
|
-
"digest": "sha256:
|
|
88
|
+
"digest": "sha256:99df84336b7e1cf7a645ea4bc5c0cdfbb6a3495eb01517d65efaca734407c9e7"
|
|
89
89
|
},
|
|
90
90
|
{
|
|
91
91
|
"id": "github-artifact-attestation",
|
|
@@ -245,7 +245,7 @@
|
|
|
245
245
|
"path": "docs/cli-reference.md",
|
|
246
246
|
"plane": "use",
|
|
247
247
|
"exists": true,
|
|
248
|
-
"digest": "sha256:
|
|
248
|
+
"digest": "sha256:079a9e3309e7948f7794426ffce2b5922a874464394b5ec9d3a90c37f410a3b7"
|
|
249
249
|
},
|
|
250
250
|
{
|
|
251
251
|
"id": "node-api-reference",
|
|
@@ -253,7 +253,7 @@
|
|
|
253
253
|
"path": "docs/node-api-reference.md",
|
|
254
254
|
"plane": "use",
|
|
255
255
|
"exists": true,
|
|
256
|
-
"digest": "sha256:
|
|
256
|
+
"digest": "sha256:aaf6b568170bb7083935b622a628ef67e269892727ce083f46e7b02be6b2cd0b"
|
|
257
257
|
},
|
|
258
258
|
{
|
|
259
259
|
"id": "build-facts",
|
|
@@ -531,6 +531,7 @@
|
|
|
531
531
|
"release-candidate-workflow-file",
|
|
532
532
|
"release-candidate-workflow-name",
|
|
533
533
|
"release-passport",
|
|
534
|
+
"release-passport-adopter-delivery-json",
|
|
534
535
|
"release-passport-attachment-command",
|
|
535
536
|
"release-passport-buildchain-self-kfd",
|
|
536
537
|
"release-passport-evidence-command",
|
|
@@ -568,7 +569,7 @@
|
|
|
568
569
|
"target-sha",
|
|
569
570
|
"trusted-publishing"
|
|
570
571
|
],
|
|
571
|
-
"inputCount":
|
|
572
|
+
"inputCount": 112,
|
|
572
573
|
"secrets": [
|
|
573
574
|
"BUILDCHAIN_ISSUE_APP_ID",
|
|
574
575
|
"BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
|
|
@@ -1969,7 +1970,7 @@
|
|
|
1969
1970
|
"status": "preview",
|
|
1970
1971
|
"owner": "buildchain-workflows",
|
|
1971
1972
|
"maturity": "preview",
|
|
1972
|
-
"introducedVersion": "3.0.9-alpha.
|
|
1973
|
+
"introducedVersion": "3.0.9-alpha.11",
|
|
1973
1974
|
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
1974
1975
|
"deprecationReplacement": "",
|
|
1975
1976
|
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
@@ -1990,7 +1991,7 @@
|
|
|
1990
1991
|
"status": "preview",
|
|
1991
1992
|
"owner": "buildchain-workflows",
|
|
1992
1993
|
"maturity": "preview",
|
|
1993
|
-
"introducedVersion": "3.0.9-alpha.
|
|
1994
|
+
"introducedVersion": "3.0.9-alpha.11",
|
|
1994
1995
|
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
1995
1996
|
"deprecationReplacement": "",
|
|
1996
1997
|
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
@@ -2011,7 +2012,7 @@
|
|
|
2011
2012
|
"status": "preview",
|
|
2012
2013
|
"owner": "buildchain-workflows",
|
|
2013
2014
|
"maturity": "preview",
|
|
2014
|
-
"introducedVersion": "3.0.9-alpha.
|
|
2015
|
+
"introducedVersion": "3.0.9-alpha.11",
|
|
2015
2016
|
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
2016
2017
|
"deprecationReplacement": "",
|
|
2017
2018
|
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
@@ -2061,7 +2062,7 @@
|
|
|
2061
2062
|
"status": "preview",
|
|
2062
2063
|
"owner": "buildchain-workflows",
|
|
2063
2064
|
"maturity": "preview",
|
|
2064
|
-
"introducedVersion": "3.0.9-alpha.
|
|
2065
|
+
"introducedVersion": "3.0.9-alpha.11",
|
|
2065
2066
|
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
2066
2067
|
"deprecationReplacement": "",
|
|
2067
2068
|
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
@@ -2563,6 +2564,7 @@
|
|
|
2563
2564
|
"release-candidate-workflow-file",
|
|
2564
2565
|
"release-candidate-workflow-name",
|
|
2565
2566
|
"release-passport",
|
|
2567
|
+
"release-passport-adopter-delivery-json",
|
|
2566
2568
|
"release-passport-attachment-command",
|
|
2567
2569
|
"release-passport-buildchain-self-kfd",
|
|
2568
2570
|
"release-passport-evidence-command",
|
|
@@ -2600,7 +2602,7 @@
|
|
|
2600
2602
|
"target-sha",
|
|
2601
2603
|
"trusted-publishing"
|
|
2602
2604
|
],
|
|
2603
|
-
"inputCount":
|
|
2605
|
+
"inputCount": 103,
|
|
2604
2606
|
"secrets": [
|
|
2605
2607
|
"BUILDCHAIN_ISSUE_APP_ID",
|
|
2606
2608
|
"BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
|
|
@@ -3085,6 +3087,7 @@
|
|
|
3085
3087
|
"release-candidate-version",
|
|
3086
3088
|
"release-material-sha",
|
|
3087
3089
|
"release-passport",
|
|
3090
|
+
"release-passport-adopter-delivery-json",
|
|
3088
3091
|
"release-passport-attachment-command",
|
|
3089
3092
|
"release-passport-build-summary-path",
|
|
3090
3093
|
"release-passport-buildchain-self-kfd",
|
|
@@ -3119,7 +3122,7 @@
|
|
|
3119
3122
|
"transaction-state-path",
|
|
3120
3123
|
"verification-command"
|
|
3121
3124
|
],
|
|
3122
|
-
"inputCount":
|
|
3125
|
+
"inputCount": 82,
|
|
3123
3126
|
"capabilityGroup": "release-passport-trust",
|
|
3124
3127
|
"status": "active",
|
|
3125
3128
|
"owner": "buildchain-actions",
|
package/docs/cli-reference.md
CHANGED
|
@@ -203,11 +203,11 @@ buildchain collect
|
|
|
203
203
|
|
|
204
204
|
- Help: `buildchain collect github-release --help`
|
|
205
205
|
- Canonical id: `collect-github-release`
|
|
206
|
-
- Options: `--anchor-manifest-json`, `--assets-dir`, `--assets-json`, `--base-passport-json`, `--build-facts-json`, `--build-summary-json`, `--dist-tag-evidence-json`, `--github-artifact-attestation-policy-json`, `--impact-json`, `--invariant-passport-cmd`, `--invariant-passport-json`, `--json`, `--kfd-1-witness-json`, `--kfd-2-claim-json`, `--kfd-3-artifact-verify-cmd`, `--kfd-3-artifact-witness-json`, `--kfd-3-prebuild-witness-json`, `--kfd-adopter-manifest-json`, `--kfd-agent-hub-evidence-json`, `--kfd-product-gate-json`, `--kfd-support-matrix-json`, `--output-dir`, `--package-set-json`, `--platform-manifest-json`, `--product-name`, `--publish-evidence-json`, `--publish-json`, `--release-evidence-json`, `--release-extra-json`, `--release-json`, `--repository`, `--require-base-kfd`, `--tag`, `--transaction-json`, `--trusted-publishing-json`
|
|
206
|
+
- Options: `--adopter-delivery-json`, `--anchor-manifest-json`, `--assets-dir`, `--assets-json`, `--base-passport-json`, `--build-facts-json`, `--build-summary-json`, `--dist-tag-evidence-json`, `--github-artifact-attestation-policy-json`, `--impact-json`, `--invariant-passport-cmd`, `--invariant-passport-json`, `--json`, `--kfd-1-witness-json`, `--kfd-2-claim-json`, `--kfd-3-artifact-verify-cmd`, `--kfd-3-artifact-witness-json`, `--kfd-3-prebuild-witness-json`, `--kfd-adopter-manifest-json`, `--kfd-agent-hub-evidence-json`, `--kfd-product-gate-json`, `--kfd-support-matrix-json`, `--output-dir`, `--package-set-json`, `--platform-manifest-json`, `--product-name`, `--publish-evidence-json`, `--publish-json`, `--release-evidence-json`, `--release-extra-json`, `--release-json`, `--repository`, `--require-base-kfd`, `--tag`, `--transaction-json`, `--trusted-publishing-json`
|
|
207
207
|
- Syntax:
|
|
208
208
|
|
|
209
209
|
```text
|
|
210
|
-
buildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--kfd-adopter-manifest-json <json-or-path>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]
|
|
210
|
+
buildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--adopter-delivery-json <json-or-path>] [--kfd-adopter-manifest-json <json-or-path>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]
|
|
211
211
|
```
|
|
212
212
|
|
|
213
213
|
## `create`
|