@kungfu-tech/buildchain 3.0.9-alpha.4 → 3.0.9-alpha.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/buildchain.mjs +5 -1
- package/dist/site/buildchain-contract.json +9 -9
- package/dist/site/buildchain-site.json +56 -26
- package/dist/site/cli-registry.json +18 -2
- package/dist/site/kfd-claims.json +8 -5
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +6 -6
- package/dist/site/node-api-registry.json +290 -49
- package/dist/site/page-registry.json +46 -16
- package/dist/site/public-surface-audit.json +122 -6
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/site-manifest.json +10 -10
- package/dist/site/workflow-registry.json +12 -6
- package/docs/cli-reference.md +79 -13
- package/docs/dev-delivery-warrant.md +53 -19
- package/docs/kfd-support.md +7 -2
- package/docs/node-api-reference.md +59 -51
- package/docs/release-governance.md +5 -4
- package/docs/release-passport.md +8 -2
- package/docs/versioning.md +1 -0
- package/package.json +3 -2
- package/packages/core/artifact-verification-envelope.js +5 -5
- package/packages/core/dev-delivery-native-proof.js +333 -0
- package/packages/core/dev-delivery-warrant-settlement.js +5 -1
- package/packages/core/dev-delivery-warrant.js +40 -6
- package/packages/core/kfd-adopter-manifest.js +46 -47
- package/packages/core/release-passport-contract.js +5 -5
- package/packages/core/release-passport.js +5 -4
- package/scripts/aws-macos-jit-controller-core.mjs +82 -2
- package/scripts/aws-macos-jit-controller.mjs +81 -1
- package/scripts/aws-macos-jit-source-rebind.mjs +147 -24
- package/scripts/buildchain-cli-help.mjs +6 -2
- package/scripts/check-internal-architecture.mjs +1 -0
- package/scripts/dev-delivery-native-run.mjs +187 -0
- package/scripts/dev-delivery-proof.mjs +54 -2
- package/scripts/dev-delivery-two-phase.mjs +598 -0
- package/scripts/dev-delivery-warrant.mjs +38 -3
- package/scripts/dev-pr-delivery-warrant.mjs +6 -1
- package/scripts/generate-channel-build-workflow.mjs +4 -0
- package/scripts/init-repo.mjs +16 -0
- package/scripts/release-candidate-tail-reseal.mjs +426 -0
- package/templates/native-dev-delivery.yml +82 -0
package/bin/buildchain.mjs
CHANGED
|
@@ -1382,8 +1382,12 @@ async function handleDevCommand(args) {
|
|
|
1382
1382
|
runScript("dev-delivery-proof.mjs", devArgs);
|
|
1383
1383
|
return;
|
|
1384
1384
|
}
|
|
1385
|
+
if (subcommand === "two-phase") {
|
|
1386
|
+
runScript("dev-delivery-two-phase.mjs", devArgs);
|
|
1387
|
+
return;
|
|
1388
|
+
}
|
|
1385
1389
|
if (subcommand !== "merge-queue") {
|
|
1386
|
-
throw new Error("usage: buildchain dev <pr-admit|merge-queue|warrant|proof> [options]");
|
|
1390
|
+
throw new Error("usage: buildchain dev <pr-admit|merge-queue|warrant|proof|two-phase> [options]");
|
|
1387
1391
|
}
|
|
1388
1392
|
runScript("dev-merge-queue.mjs", devArgs);
|
|
1389
1393
|
return;
|
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"name": "Buildchain",
|
|
6
6
|
"package": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "3.0.9-alpha.
|
|
7
|
+
"version": "3.0.9-alpha.5",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"majorLine": "v3",
|
|
@@ -324,7 +324,7 @@
|
|
|
324
324
|
"retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
|
|
325
325
|
],
|
|
326
326
|
"breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
|
|
327
|
-
"auditDigest": "sha256:
|
|
327
|
+
"auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3"
|
|
328
328
|
},
|
|
329
329
|
{
|
|
330
330
|
"contractVersion": 1,
|
|
@@ -872,7 +872,7 @@
|
|
|
872
872
|
"release-state SHA is recorded as a durable audit entrance"
|
|
873
873
|
],
|
|
874
874
|
"breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
|
|
875
|
-
"auditDigest": "sha256:
|
|
875
|
+
"auditDigest": "sha256:485c55c362476de980eb35c32c1f58b780520f96c924ac316eb515de60696243"
|
|
876
876
|
},
|
|
877
877
|
{
|
|
878
878
|
"contractVersion": 1,
|
|
@@ -921,7 +921,7 @@
|
|
|
921
921
|
"prose-only public claims downgrade the release trust passport audit"
|
|
922
922
|
],
|
|
923
923
|
"breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
|
|
924
|
-
"auditDigest": "sha256:
|
|
924
|
+
"auditDigest": "sha256:485c55c362476de980eb35c32c1f58b780520f96c924ac316eb515de60696243"
|
|
925
925
|
},
|
|
926
926
|
{
|
|
927
927
|
"contractVersion": 1,
|
|
@@ -981,7 +981,7 @@
|
|
|
981
981
|
"README badge block checks and writes are generated from machine-readable repository facts"
|
|
982
982
|
],
|
|
983
983
|
"breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
|
|
984
|
-
"auditDigest": "sha256:
|
|
984
|
+
"auditDigest": "sha256:eb793611ddb1463f4e9414a6d861d9573f737485b4a57ac6e86cc4ed8a928b35"
|
|
985
985
|
},
|
|
986
986
|
{
|
|
987
987
|
"contractVersion": 1,
|
|
@@ -1071,7 +1071,7 @@
|
|
|
1071
1071
|
"manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
|
|
1072
1072
|
],
|
|
1073
1073
|
"breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
|
|
1074
|
-
"auditDigest": "sha256:
|
|
1074
|
+
"auditDigest": "sha256:204e10fa741672fe33f7077b0be2ca7830693ad0ac8a3fda3473dcfebb00983d"
|
|
1075
1075
|
},
|
|
1076
1076
|
{
|
|
1077
1077
|
"contractVersion": 1,
|
|
@@ -1093,7 +1093,7 @@
|
|
|
1093
1093
|
"agents can discover supported Node APIs without importing internal file paths"
|
|
1094
1094
|
],
|
|
1095
1095
|
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
|
|
1096
|
-
"auditDigest": "sha256:
|
|
1096
|
+
"auditDigest": "sha256:4f6edcefa5d510b6c17c55909161345c6db1337bf4bcc61d6d300c6561a46023"
|
|
1097
1097
|
},
|
|
1098
1098
|
{
|
|
1099
1099
|
"contractVersion": 1,
|
|
@@ -1718,7 +1718,7 @@
|
|
|
1718
1718
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
1719
1719
|
],
|
|
1720
1720
|
"breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
|
|
1721
|
-
"auditDigest": "sha256:
|
|
1721
|
+
"auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3",
|
|
1722
1722
|
"compatibleBreakingDigests": [
|
|
1723
1723
|
"sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1",
|
|
1724
1724
|
"sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
|
|
@@ -4024,5 +4024,5 @@
|
|
|
4024
4024
|
],
|
|
4025
4025
|
"compatibilityProofRegistryRoot": "sha256:f11b62ce69cfb0ff25b66861474b99a75148192c0474c9d1cc2067e347b05abd",
|
|
4026
4026
|
"compatibilityDigest": "sha256:80f65cc191b1f771475184edf8a1bf9c10dd69bb58060aa09313d0e1e57f508a",
|
|
4027
|
-
"contractDigest": "sha256:
|
|
4027
|
+
"contractDigest": "sha256:302bdf6b5d0fafdd613fa3df9fdee04bd341dbdca3b750c3a058350b7b8ae6b2"
|
|
4028
4028
|
}
|