@kungfu-tech/buildchain 3.0.9-alpha.10 → 3.0.9-alpha.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (31) hide show
  1. package/actions/promote-buildchain-ref/README.md +4 -0
  2. package/bin/internal/trust-release-release-handlers.mjs +1 -0
  3. package/dist/site/buildchain-contract.json +211 -26
  4. package/dist/site/buildchain-site.json +30 -15
  5. package/dist/site/capability-registry.json +1 -1
  6. package/dist/site/cli-registry.json +2 -1
  7. package/dist/site/controller-registry.json +6 -2
  8. package/dist/site/kfd-claims.json +34 -7
  9. package/dist/site/kfd-upstream-aggregate.json +1 -1
  10. package/dist/site/manual-registry.json +3 -3
  11. package/dist/site/node-api-registry.json +276 -24
  12. package/dist/site/page-registry.json +23 -8
  13. package/dist/site/public-surface-audit.json +9 -6
  14. package/dist/site/publication-registry.json +4 -4
  15. package/dist/site/release-provenance.json +2 -0
  16. package/dist/site/site-manifest.json +7 -7
  17. package/dist/site/workflow-registry.json +10 -7
  18. package/docs/cli-reference.md +2 -2
  19. package/docs/node-api-reference.md +61 -40
  20. package/docs/release-passport.md +10 -0
  21. package/package.json +3 -1
  22. package/packages/core/buildchain-compatibility-proof.js +66 -0
  23. package/packages/core/buildchain-delivery-self-dogfood.js +395 -0
  24. package/packages/core/dev-delivery-warrant.js +1 -0
  25. package/packages/core/published-delivery-authority.js +247 -0
  26. package/packages/core/release-passport.js +8 -1
  27. package/scripts/buildchain-cli-help.mjs +1 -0
  28. package/scripts/check-inventory.mjs +1 -1
  29. package/scripts/dev-delivery-warrant.mjs +1 -1
  30. package/scripts/site-capability-metadata.mjs +2 -0
  31. package/scripts/workflow-call-contract.mjs +1 -1
@@ -51,7 +51,7 @@
51
51
  "manualCount": 8,
52
52
  "pageCount": 8,
53
53
  "cliCommandCount": 26,
54
- "nodeApiCount": 21,
54
+ "nodeApiCount": 23,
55
55
  "workflowCount": 4,
56
56
  "actionCount": 3
57
57
  },
@@ -354,9 +354,10 @@
354
354
  "collect github-release"
355
355
  ],
356
356
  "syntaxes": [
357
- "buildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--kfd-adopter-manifest-json <json-or-path>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]"
357
+ "buildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--adopter-delivery-json <json-or-path>] [--kfd-adopter-manifest-json <json-or-path>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]"
358
358
  ],
359
359
  "options": [
360
+ "--adopter-delivery-json",
360
361
  "--anchor-manifest-json",
361
362
  "--assets-dir",
362
363
  "--assets-json",
@@ -2031,6 +2031,10 @@
2031
2031
  "classification": "included",
2032
2032
  "source": "workflow-call-input"
2033
2033
  },
2034
+ "release-passport-adopter-delivery-json": {
2035
+ "classification": "digest-only",
2036
+ "source": "workflow-call-input"
2037
+ },
2034
2038
  "release-passport-attachment-command": {
2035
2039
  "classification": "digest-only",
2036
2040
  "source": "workflow-call-input"
@@ -2217,7 +2221,7 @@
2217
2221
  "controller-receipt"
2218
2222
  ]
2219
2223
  },
2220
- "digest": "sha256:4d44d0f729fbc112aa309ed22e74b9f1401b0470b99c1e6061c278babe5e4b8b"
2224
+ "digest": "sha256:127dc1d80dca63e2bb1fb268d2183d0a31ea2a67eb81bce48dae916f698c02be"
2221
2225
  },
2222
2226
  {
2223
2227
  "schemaVersion": 1,
@@ -2410,5 +2414,5 @@
2410
2414
  "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
2411
2415
  }
2412
2416
  ],
2413
- "digest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9"
2417
+ "digest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca"
2414
2418
  }
@@ -14,14 +14,14 @@
14
14
  },
15
15
  "runtimeContract": {
16
16
  "contract": "kungfu-buildchain-runtime-contract-world",
17
- "compatibilityDigest": "sha256:eb2fafb181b33002f81102a966f0a801ab1798101446635703ab6acfea51d9aa",
17
+ "compatibilityDigest": "sha256:57d37609068590238f547a133b6b69ee994b452825030447d20529683ba61fbd",
18
18
  "majorLine": "v3"
19
19
  },
20
20
  "publicSurfaceReverseAudit": {
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "590e4b6d2fcdfb93d898c84a012e67db6d1334358edda8d3dc0c2704fd948af7",
24
+ "sha256": "01b4bbe77fa1f55eb683a370ce39f70cd73c18565e18e9987bd0bb501c8a5d6d",
25
25
  "summary": {
26
26
  "cliCommandCount": 114,
27
27
  "workflowCount": 69,
@@ -246,7 +246,7 @@
246
246
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
247
247
  "path": "dist/site/public-surface-audit.json",
248
248
  "status": "passed",
249
- "sha256": "590e4b6d2fcdfb93d898c84a012e67db6d1334358edda8d3dc0c2704fd948af7",
249
+ "sha256": "01b4bbe77fa1f55eb683a370ce39f70cd73c18565e18e9987bd0bb501c8a5d6d",
250
250
  "summary": {
251
251
  "cliCommandCount": 114,
252
252
  "workflowCount": 69,
@@ -1556,6 +1556,30 @@
1556
1556
  "public": true,
1557
1557
  "packageExport": "./buildchain-delivery-bootstrap"
1558
1558
  },
1559
+ {
1560
+ "id": "export:./buildchain-delivery-self-dogfood",
1561
+ "name": "@kungfu-tech/buildchain/buildchain-delivery-self-dogfood",
1562
+ "kind": "package-export",
1563
+ "sourcePath": "packages/core/buildchain-delivery-self-dogfood.js",
1564
+ "evidencePath": "packages/core/buildchain-delivery-self-dogfood.js",
1565
+ "availability": "shipped",
1566
+ "visibility": "public",
1567
+ "participantFacing": true,
1568
+ "public": true,
1569
+ "packageExport": "./buildchain-delivery-self-dogfood"
1570
+ },
1571
+ {
1572
+ "id": "export:./published-delivery-authority",
1573
+ "name": "@kungfu-tech/buildchain/published-delivery-authority",
1574
+ "kind": "package-export",
1575
+ "sourcePath": "packages/core/published-delivery-authority.js",
1576
+ "evidencePath": "packages/core/published-delivery-authority.js",
1577
+ "availability": "shipped",
1578
+ "visibility": "public",
1579
+ "participantFacing": true,
1580
+ "public": true,
1581
+ "packageExport": "./published-delivery-authority"
1582
+ },
1559
1583
  {
1560
1584
  "id": "export:./legacy-kfd-adopter-driver",
1561
1585
  "name": "@kungfu-tech/buildchain/legacy-kfd-adopter-driver",
@@ -3945,7 +3969,7 @@
3945
3969
  "visibility": "public",
3946
3970
  "participantFacing": true,
3947
3971
  "public": true,
3948
- "inputCount": 111,
3972
+ "inputCount": 112,
3949
3973
  "inputs": [
3950
3974
  "allow-repository",
3951
3975
  "artifact-name",
@@ -4022,6 +4046,7 @@
4022
4046
  "release-candidate-workflow-file",
4023
4047
  "release-candidate-workflow-name",
4024
4048
  "release-passport",
4049
+ "release-passport-adopter-delivery-json",
4025
4050
  "release-passport-attachment-command",
4026
4051
  "release-passport-buildchain-self-kfd",
4027
4052
  "release-passport-evidence-command",
@@ -5292,7 +5317,7 @@
5292
5317
  "visibility": "public",
5293
5318
  "participantFacing": true,
5294
5319
  "public": true,
5295
- "inputCount": 102,
5320
+ "inputCount": 103,
5296
5321
  "inputs": [
5297
5322
  "allow-repository",
5298
5323
  "artifact-name",
@@ -5360,6 +5385,7 @@
5360
5385
  "release-candidate-workflow-file",
5361
5386
  "release-candidate-workflow-name",
5362
5387
  "release-passport",
5388
+ "release-passport-adopter-delivery-json",
5363
5389
  "release-passport-attachment-command",
5364
5390
  "release-passport-buildchain-self-kfd",
5365
5391
  "release-passport-evidence-command",
@@ -5662,7 +5688,7 @@
5662
5688
  "visibility": "public",
5663
5689
  "participantFacing": true,
5664
5690
  "public": true,
5665
- "inputCount": 81,
5691
+ "inputCount": 82,
5666
5692
  "inputs": [
5667
5693
  "allow-repository",
5668
5694
  "branch-protection-bypass-apps",
@@ -5712,6 +5738,7 @@
5712
5738
  "release-candidate-version",
5713
5739
  "release-material-sha",
5714
5740
  "release-passport",
5741
+ "release-passport-adopter-delivery-json",
5715
5742
  "release-passport-attachment-command",
5716
5743
  "release-passport-build-summary-path",
5717
5744
  "release-passport-buildchain-self-kfd",
@@ -6942,6 +6969,6 @@
6942
6969
  }
6943
6970
  }
6944
6971
  ],
6945
- "publicSurfaceCount": 445
6972
+ "publicSurfaceCount": 447
6946
6973
  }
6947
6974
  }
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "3.0.9-alpha.10",
7
+ "version": "3.0.9-alpha.12",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {
@@ -64,7 +64,7 @@
64
64
  "title": "Release Passport protocol",
65
65
  "path": "docs/release-passport.md",
66
66
  "plane": "verify",
67
- "digest": "sha256:70bf29e974b190b249fbbcfd9a5de1e33a9b069de5d7811a25e147b860137629",
67
+ "digest": "sha256:99df84336b7e1cf7a645ea4bc5c0cdfbb6a3495eb01517d65efaca734407c9e7",
68
68
  "capabilityGroup": "release-passport-trust",
69
69
  "audience": [
70
70
  "release-operator",
@@ -347,7 +347,7 @@
347
347
  "title": "Generated CLI reference",
348
348
  "path": "docs/cli-reference.md",
349
349
  "plane": "use",
350
- "digest": "sha256:d6fd9d704376e47a281ce337f6c5d6346e117effe8851d43a9b370955ac07204",
350
+ "digest": "sha256:079a9e3309e7948f7794426ffce2b5922a874464394b5ec9d3a90c37f410a3b7",
351
351
  "capabilityGroup": "api-cli-reference",
352
352
  "audience": [
353
353
  "agent",
@@ -362,7 +362,7 @@
362
362
  "title": "Generated Node API reference",
363
363
  "path": "docs/node-api-reference.md",
364
364
  "plane": "use",
365
- "digest": "sha256:abc275255e38f639b4566df72e4b8b71e4b282d0f17b6a021f036e860cb5c657",
365
+ "digest": "sha256:3694cb4ecd55b79e45f7643d9e29e1f70139092a3a8c8a84280f9100aee6fc7b",
366
366
  "capabilityGroup": "api-cli-reference",
367
367
  "audience": [
368
368
  "agent",