@kungfu-tech/buildchain 4.0.2-alpha.20 → 4.0.2-alpha.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/architecture/v4-universal-workflow-train-admission.json +1 -1
  2. package/dist/site/buildchain-contract.json +2 -2
  3. package/dist/site/buildchain-site.json +4 -4
  4. package/dist/site/kfd-claims.json +2 -2
  5. package/dist/site/kfd-upstream-aggregate.json +1 -1
  6. package/dist/site/public-surface-audit.json +1 -1
  7. package/dist/site/publication-registry.json +4 -4
  8. package/dist/site/site-manifest.json +4 -4
  9. package/dist/site/workflow-registry.json +4 -4
  10. package/package.json +1 -1
  11. package/scripts/check-v4-universal-workflow-bootstrap.mjs +5 -0
package/architecture/v4-universal-workflow-train-admission.json CHANGED
@@ -25,8 +25,8 @@
25
25
  "contractRoots": [
26
26
  "sha256:4563c954e84d34b73e6683981e1e23dd6b8bb9b9551392b4e393efb624cc980e",
27
27
  "sha256:65a0c2fc3faecaddf5076fff086b5d6e12eb9ba27796efc10aed19f2d93b9457",
28
- "sha256:82c1924f4573f35a895361f9134df66a1868dc921d2c1db8707890b8ca06d61e",
29
28
  "sha256:b6737ed958e8f53f7770b1c214c092591573ad63af41e05797117d9b7b212ed8",
29
+ "sha256:b94023c4abe4216765198adcaefb4825874a4d9053be096d35a53d6821128b52",
30
30
  "sha256:ca0592275354f0690756e3f11accdd23615987827c346618c50c2e8a2807ad4d",
31
31
  "sha256:cf3c5a79de580525953e1fc02b2b2937a1d1a50219b4464510dd5b4725ca9ca5",
32
32
  "sha256:d6ad9cf661c0ba3825cabdc7185fd122a60fc1929dfc799cda3352650588663f"
package/dist/site/buildchain-contract.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "name": "Buildchain",
6
6
  "package": "@kungfu-tech/buildchain",
7
- "version": "4.0.2-alpha.20",
7
+ "version": "4.0.2-alpha.21",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "majorLine": "v4",
@@ -5444,5 +5444,5 @@
5444
5444
  "compatibilityFactCutRoot": "sha256:f61b975d4a96c921cc4bd37fb3ed9a0596b47004fe34dc7219979d697e3707f9",
5445
5445
  "compatibilityProofRegistryRoot": "sha256:b7194b811e4d3af2df4390bc4d1731e16a86215bd64ee18cb630dd5492f4fb63",
5446
5446
  "compatibilityDigest": "sha256:20411029d83211dff426fb6535a608902129844a5ccb4788db77d3f81becb839",
5447
- "contractDigest": "sha256:651b0d4c074394d9c8e507698bd3d5a3cdf34b99344b7dd10efbb0af6f16a82f"
5447
+ "contractDigest": "sha256:9a002e34382810cfc7b03fc9ef733b33867f183b56da5ab615d205fc5651adcc"
5448
5448
  }
package/dist/site/buildchain-site.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-bundle",
4
- "generatedAt": "2026-09-02T12:46:29.000Z",
5
- "publishedAt": "2026-09-02T12:46:29.000Z",
4
+ "generatedAt": "2026-09-02T15:23:01.000Z",
5
+ "publishedAt": "2026-09-02T15:23:01.000Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "15b19dc91aebc0496b83e71da156073cce8149ea",
22
+ "sourceRevision": "ecf48b3ce33421a0f219470b42ee8b67c0e6f843",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "4.0.2-alpha.20",
40
+ "version": "4.0.2-alpha.21",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "source": {
package/dist/site/kfd-claims.json CHANGED
@@ -21,7 +21,7 @@
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "9483730a70686fcf4a64829a8d33ec0b471beb8e057f0c24cb0381ee37a61a18",
24
+ "sha256": "b12db25795fc4e8a774cb23d3ad384dc774451c42d208f6e181cbc72491710c1",
25
25
  "summary": {
26
26
  "cliCommandCount": 117,
27
27
  "workflowCount": 74,
@@ -246,7 +246,7 @@
246
246
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
247
247
  "path": "dist/site/public-surface-audit.json",
248
248
  "status": "passed",
249
- "sha256": "9483730a70686fcf4a64829a8d33ec0b471beb8e057f0c24cb0381ee37a61a18",
249
+ "sha256": "b12db25795fc4e8a774cb23d3ad384dc774451c42d208f6e181cbc72491710c1",
250
250
  "summary": {
251
251
  "cliCommandCount": 117,
252
252
  "workflowCount": 74,
package/dist/site/kfd-upstream-aggregate.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "4.0.2-alpha.20",
7
+ "version": "4.0.2-alpha.21",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {
package/dist/site/public-surface-audit.json CHANGED
@@ -8904,7 +8904,7 @@
8904
8904
  "workflowRegistryPath": "dist/site/workflow-registry.json",
8905
8905
  "pageRegistryPath": "dist/site/page-registry.json",
8906
8906
  "cliRegistryDigest": "fbc23073bbae240489a2f826b2c26daadc58e704050c5f8df366509f5c5a1c3e",
8907
- "workflowRegistryDigest": "97dfc457fef0e926e43e014414fbe52507f0edd978287f4e2046200bde9d8587",
8907
+ "workflowRegistryDigest": "404a47a5d81452860a5676e7ff653c68d62a7ed5bca2ad421d51c2e7681eff75",
8908
8908
  "pageRegistryDigest": "ae0b1b9c7b883027cf53403221ff2fe2e41ad1aa4d16851d4550e89947d6d6d7"
8909
8909
  },
8910
8910
  "comparison": {
package/dist/site/publication-registry.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-publication-release-registry",
4
- "generatedAt": "2026-09-02T12:46:29.000Z",
5
- "publishedAt": "2026-09-02T12:46:29.000Z",
4
+ "generatedAt": "2026-09-02T15:23:01.000Z",
5
+ "publishedAt": "2026-09-02T15:23:01.000Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "15b19dc91aebc0496b83e71da156073cce8149ea",
22
+ "sourceRevision": "ecf48b3ce33421a0f219470b42ee8b67c0e6f843",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -32,7 +32,7 @@
32
32
  },
33
33
  "package": {
34
34
  "name": "@kungfu-tech/buildchain",
35
- "version": "4.0.2-alpha.20",
35
+ "version": "4.0.2-alpha.21",
36
36
  "versionSource": "package.json#version"
37
37
  },
38
38
  "sourceKind": "package-site-bundle",
package/dist/site/site-manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-manifest",
4
- "generatedAt": "2026-09-02T12:46:29.000Z",
5
- "publishedAt": "2026-09-02T12:46:29.000Z",
4
+ "generatedAt": "2026-09-02T15:23:01.000Z",
5
+ "publishedAt": "2026-09-02T15:23:01.000Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "15b19dc91aebc0496b83e71da156073cce8149ea",
22
+ "sourceRevision": "ecf48b3ce33421a0f219470b42ee8b67c0e6f843",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "4.0.2-alpha.20",
40
+ "version": "4.0.2-alpha.21",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "entrypoint": "buildchain-site.json",
package/dist/site/workflow-registry.json CHANGED
@@ -1926,7 +1926,7 @@
1926
1926
  "status": "preview",
1927
1927
  "owner": "buildchain-workflows",
1928
1928
  "maturity": "preview",
1929
- "introducedVersion": "4.0.2-alpha.20",
1929
+ "introducedVersion": "4.0.2-alpha.21",
1930
1930
  "compatibilityPromise": "preserved-through-the-v3-major-line",
1931
1931
  "deprecationReplacement": "",
1932
1932
  "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1947,7 +1947,7 @@
1947
1947
  "status": "preview",
1948
1948
  "owner": "buildchain-workflows",
1949
1949
  "maturity": "preview",
1950
- "introducedVersion": "4.0.2-alpha.20",
1950
+ "introducedVersion": "4.0.2-alpha.21",
1951
1951
  "compatibilityPromise": "preserved-through-the-v3-major-line",
1952
1952
  "deprecationReplacement": "",
1953
1953
  "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1968,7 +1968,7 @@
1968
1968
  "status": "preview",
1969
1969
  "owner": "buildchain-workflows",
1970
1970
  "maturity": "preview",
1971
- "introducedVersion": "4.0.2-alpha.20",
1971
+ "introducedVersion": "4.0.2-alpha.21",
1972
1972
  "compatibilityPromise": "preserved-through-the-v3-major-line",
1973
1973
  "deprecationReplacement": "",
1974
1974
  "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2019,7 +2019,7 @@
2019
2019
  "status": "preview",
2020
2020
  "owner": "buildchain-workflows",
2021
2021
  "maturity": "preview",
2022
- "introducedVersion": "4.0.2-alpha.20",
2022
+ "introducedVersion": "4.0.2-alpha.21",
2023
2023
  "compatibilityPromise": "preserved-through-the-v3-major-line",
2024
2024
  "deprecationReplacement": "",
2025
2025
  "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kungfu-tech/buildchain",
3
- "version": "4.0.2-alpha.20",
3
+ "version": "4.0.2-alpha.21",
4
4
  "private": false,
5
5
  "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
6
6
  "repository": "https://github.com/kungfu-systems/buildchain",
package/scripts/check-v4-universal-workflow-bootstrap.mjs CHANGED
@@ -167,6 +167,11 @@ execFileSync(
167
167
  { stdio: "inherit" },
168
168
  );
169
169
  assert.doesNotMatch(bootstrapSource, /^ permissions:/mu);
170
+ assert.match(
171
+ bootstrapSource,
172
+ /execute:[\s\S]*BUILDCHAIN_PROMOTION_TOKEN: \$\{\{ secrets\.BUILDCHAIN_PROMOTION_TOKEN \}\}[\s\S]*GH_TOKEN: \$\{\{ github\.token \}\}/u,
173
+ "the privileged candidate executor must receive the protected-ref mutation token",
174
+ );
170
175
  assert.match(bootstrapSource, /settle:[\s\S]*needs: \[admit, execute\]/u);
171
176
  assert.match(
172
177
  bootstrapSource,