@kungfu-tech/buildchain 4.0.2-alpha.32 → 4.0.2-alpha.33

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.32",
+    "version": "4.0.2-alpha.33",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v4",
@@ -1361,7 +1361,7 @@
         "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
       ],
       "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
-      "auditDigest": "sha256:ce4fbf96de5b45c8b9e64645401175bef6f0d2dc96dc3d656615e6e44b92f1c0",
+      "auditDigest": "sha256:20549663f5459414dcfb00aa9a3a549003bbc09159eeab6cea211db96ed0eab2",
       "compatibleBreakingDigests": [
         "sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650"
       ],
@@ -2974,7 +2974,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
-      "auditDigest": "sha256:ce4fbf96de5b45c8b9e64645401175bef6f0d2dc96dc3d656615e6e44b92f1c0",
+      "auditDigest": "sha256:20549663f5459414dcfb00aa9a3a549003bbc09159eeab6cea211db96ed0eab2",
       "compatibleBreakingDigests": [
         "sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1",
         "sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
@@ -5444,5 +5444,5 @@
   "compatibilityFactCutRoot": "sha256:f61b975d4a96c921cc4bd37fb3ed9a0596b47004fe34dc7219979d697e3707f9",
   "compatibilityProofRegistryRoot": "sha256:b7194b811e4d3af2df4390bc4d1731e16a86215bd64ee18cb630dd5492f4fb63",
   "compatibilityDigest": "sha256:20411029d83211dff426fb6535a608902129844a5ccb4788db77d3f81becb839",
-  "contractDigest": "sha256:6edf61e0fbeedd006d7dba1f4e495da34596ebc84e3f8aee682174182beb7282"
+  "contractDigest": "sha256:5627d46646cf2a5cfdbe86604e16938b108edb9a37a23b289695daa8d6a86fca"
 }

package/dist/site/buildchain-site.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-bundle",
-  "generatedAt": "2026-09-04T16:47:36.000Z",
-  "publishedAt": "2026-09-04T16:47:36.000Z",
+  "generatedAt": "2026-09-04T16:23:19.000Z",
+  "publishedAt": "2026-09-04T16:23:19.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "1fee4b59f8769bafec005c6b21b45ace7557c281",
+  "sourceRevision": "9f0b4f9c0a56408616be8f66abddf3e7ce813c60",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.32",
+    "version": "4.0.2-alpha.33",
     "versionSource": "package.json#version"
   },
   "source": {

package/dist/site/kfd-claims.json

@@ -21,7 +21,7 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "b19ba1c31a33cb31b8fc9138f3016301ab98b8a64d7cc75d735e480c52cc074e",
+    "sha256": "b97a39b10f3cdcdad5e272d7a3bca8d31596eb8f6912bbd655bdfcc3d0f79ed4",
     "summary": {
       "cliCommandCount": 117,
       "workflowCount": 74,
@@ -246,7 +246,7 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "b19ba1c31a33cb31b8fc9138f3016301ab98b8a64d7cc75d735e480c52cc074e",
+      "sha256": "b97a39b10f3cdcdad5e272d7a3bca8d31596eb8f6912bbd655bdfcc3d0f79ed4",
       "summary": {
         "cliCommandCount": 117,
         "workflowCount": 74,

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.32",
+    "version": "4.0.2-alpha.33",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/public-surface-audit.json

@@ -8909,7 +8909,7 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "fbc23073bbae240489a2f826b2c26daadc58e704050c5f8df366509f5c5a1c3e",
-    "workflowRegistryDigest": "7eeeef60120444b9f129306d895a4c8746988396549ec388e8c9ce0d68bc82b0",
+    "workflowRegistryDigest": "4f4e8c643c53526b7ab336c92bbf62fbce553a4df0631384e69a5ac948eec84c",
     "pageRegistryDigest": "4b5eeaee910e192ec173c6678a16656c90ec9400508f087dc0b8593a932b8019"
   },
   "comparison": {

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-09-04T16:47:36.000Z",
-  "publishedAt": "2026-09-04T16:47:36.000Z",
+  "generatedAt": "2026-09-04T16:23:19.000Z",
+  "publishedAt": "2026-09-04T16:23:19.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "1fee4b59f8769bafec005c6b21b45ace7557c281",
+  "sourceRevision": "9f0b4f9c0a56408616be8f66abddf3e7ce813c60",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.32",
+    "version": "4.0.2-alpha.33",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-09-04T16:47:36.000Z",
-  "publishedAt": "2026-09-04T16:47:36.000Z",
+  "generatedAt": "2026-09-04T16:23:19.000Z",
+  "publishedAt": "2026-09-04T16:23:19.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "1fee4b59f8769bafec005c6b21b45ace7557c281",
+  "sourceRevision": "9f0b4f9c0a56408616be8f66abddf3e7ce813c60",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.32",
+    "version": "4.0.2-alpha.33",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",

package/dist/site/workflow-registry.json

@@ -1926,7 +1926,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.32",
+      "introducedVersion": "4.0.2-alpha.33",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1947,7 +1947,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.32",
+      "introducedVersion": "4.0.2-alpha.33",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1968,7 +1968,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.32",
+      "introducedVersion": "4.0.2-alpha.33",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2019,7 +2019,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.32",
+      "introducedVersion": "4.0.2-alpha.33",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "4.0.2-alpha.32",
+  "version": "4.0.2-alpha.33",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",

package/scripts/generate-v4-universal-workflow-facades.mjs

@@ -182,8 +182,27 @@ function guardCompatibilityJobs(source, relative) {
     : `${withGuards.slice(0, bodyStart)}${bootstrapJob}${withGuards.slice(bodyStart)}`;
 }
 
+function addRuntimeBootstrapDependencies(source, relative) {
+  if (
+    relative !== ".github/workflows/.build.yml" ||
+    source.includes(
+      ".buildchain/workflow-shell/scripts/github-output.mjs\n",
+    )
+  )
+    return source;
+  const anchor =
+    "            .buildchain/workflow-shell/scripts/build-contract-core.mjs\n";
+  return source.replace(
+    anchor,
+    `${anchor}            .buildchain/workflow-shell/scripts/github-output.mjs\n`,
+  );
+}
+
 export function migrateV4UniversalWorkflowFacade(source, relative) {
-  return guardCompatibilityJobs(addUniversalInput(source, relative), relative);
+  return guardCompatibilityJobs(
+    addUniversalInput(addRuntimeBootstrapDependencies(source, relative), relative),
+    relative,
+  );
 }
 
 function verify(source, relative) {