@kungfu-tech/buildchain 4.0.2-alpha.38 → 4.0.2-alpha.39

package/dist/site/kfd-claims.json

@@ -21,7 +21,7 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "ebe9f7f5397760842567ec9c8b1eec836f54982e001009a9be21ec4ec7086bfa",
+    "sha256": "835f4de92b2901ad73894c302d74d2af6d3a33df3fa090efbaa782424ed4c359",
     "summary": {
       "cliCommandCount": 117,
       "workflowCount": 114,
@@ -246,7 +246,7 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "ebe9f7f5397760842567ec9c8b1eec836f54982e001009a9be21ec4ec7086bfa",
+      "sha256": "835f4de92b2901ad73894c302d74d2af6d3a33df3fa090efbaa782424ed4c359",
       "summary": {
         "cliCommandCount": 117,
         "workflowCount": 114,

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.38",
+    "version": "4.0.2-alpha.39",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/manual-registry.json

@@ -64,7 +64,7 @@
       "title": "Release Passport protocol",
       "path": "docs/release-passport.md",
       "plane": "verify",
-      "digest": "sha256:4ce3c2edb095d7a103b3b1d22033b4ac3709ce709f8990b21995d491898bd051",
+      "digest": "sha256:f87853f9f72b3c365e3f4bc492d78e28441be81f6836a59ac66463adf8e2b4a8",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator",
@@ -362,7 +362,7 @@
       "title": "Generated Node API reference",
       "path": "docs/node-api-reference.md",
       "plane": "use",
-      "digest": "sha256:cc63793fb6b1dfeb7d362d2d29e139f89fa871cc57ff7ed7fe196bbba6e2ee63",
+      "digest": "sha256:1ff8052860e97ca5c34ba2afcfcfa839d3eb45907fa5da0f67148063962fe7a4",
       "capabilityGroup": "api-cli-reference",
       "audience": [
         "agent",
@@ -390,7 +390,7 @@
       "title": "KFD support and KFD-3 surface registration",
       "path": "docs/kfd-support.md",
       "plane": "verify",
-      "digest": "sha256:4efc8fb6f94293b75606aa0631dfa122edccc970c2cfc00c7e35f81817ea8335",
+      "digest": "sha256:e13f0e58a1bd4699ce8d443c0d316d37c9db807e03917bb2a5f8ebd11cdd7153",
       "capabilityGroup": "kfd-trust",
       "audience": [
         "agent",

package/dist/site/node-api-registry.json

@@ -1408,11 +1408,11 @@
       "id": "packages/core/artifact-verification-envelope.js#createKfdAdopterReleaseBinding",
       "name": "createKfdAdopterReleaseBinding",
       "kind": "function",
-      "signature": "function createKfdAdopterReleaseBinding({ manifest, manifestGate, legacyProjection, manifestPath = \"kfd-adopter-manifest.json\", gatePath = \"kfd-adopter-manifest-gate.json\", legacyProjectionPath = \"kfd-support.json\", expectedSourceSha = \"\", } = {})",
+      "signature": "function createKfdAdopterReleaseBinding({ manifest, manifestGate, legacyProjection, manifestPath = \"kfd-adopter-manifest.json\", gatePath = \"kfd-adopter-manifest-gate.json\", legacyProjectionPath = \"kfd-support.json\", expectedAdopterId = \"kungfu-systems/buildchain\", expectedSourceRepository = \"\", expectedSourceSha = \"\", } = {})",
       "parameters": [
         {
           "name": "parameter1",
-          "signature": "{ manifest, manifestGate, legacyProjection, manifestPath = \"kfd-adopter-manifest.json\", gatePath = \"kfd-adopter-manifest-gate.json\", legacyProjectionPath = \"kfd-support.json\", expectedSourceSha = \"\", } = {}"
+          "signature": "{ manifest, manifestGate, legacyProjection, manifestPath = \"kfd-adopter-manifest.json\", gatePath = \"kfd-adopter-manifest-gate.json\", legacyProjectionPath = \"kfd-support.json\", expectedAdopterId = \"kungfu-systems/buildchain\", expectedSourceRepository = \"\", expectedSourceSha = \"\", } = {}"
         }
       ],
       "returns": "unknown",
@@ -1567,7 +1567,7 @@
       "id": "packages/core/artifact-verification-envelope.js#validateKfdAdopterReleaseBinding",
       "name": "validateKfdAdopterReleaseBinding",
       "kind": "function",
-      "signature": "function validateKfdAdopterReleaseBinding(binding, { manifest, manifestGate, legacyProjection, expectedSourceSha = \"\", } = {})",
+      "signature": "function validateKfdAdopterReleaseBinding(binding, { manifest, manifestGate, legacyProjection, expectedAdopterId = \"kungfu-systems/buildchain\", expectedSourceRepository = \"\", expectedSourceSha = \"\", } = {})",
       "parameters": [
         {
           "name": "binding",
@@ -1575,7 +1575,7 @@
         },
         {
           "name": "parameter2",
-          "signature": "{ manifest, manifestGate, legacyProjection, expectedSourceSha = \"\", } = {}"
+          "signature": "{ manifest, manifestGate, legacyProjection, expectedAdopterId = \"kungfu-systems/buildchain\", expectedSourceRepository = \"\", expectedSourceSha = \"\", } = {}"
         }
       ],
       "returns": "unknown",
@@ -12061,11 +12061,11 @@
       "id": "packages/core/kfd-adopter-manifest.js#createKfdAdopterManifestGate",
       "name": "createKfdAdopterManifestGate",
       "kind": "function",
-      "signature": "function createKfdAdopterManifestGate({ manifest, packageArtifactRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/adopter-manifest.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), maxAgeSeconds = 86400, } = {})",
+      "signature": "function createKfdAdopterManifestGate({ manifest, packageArtifactRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/adopter-manifest.json\", expectedAdopterId = BUILDCHAIN_ADOPTER_ID, expectedSourceRepository = \"\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), maxAgeSeconds = 86400, } = {})",
       "parameters": [
         {
           "name": "parameter1",
-          "signature": "{ manifest, packageArtifactRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/adopter-manifest.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), maxAgeSeconds = 86400, } = {}"
+          "signature": "{ manifest, packageArtifactRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/adopter-manifest.json\", expectedAdopterId = BUILDCHAIN_ADOPTER_ID, expectedSourceRepository = \"\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), maxAgeSeconds = 86400, } = {}"
         }
       ],
       "returns": "unknown",
@@ -12077,7 +12077,7 @@
       ],
       "source": {
         "path": "packages/core/kfd-adopter-manifest.js",
-        "line": 209
+        "line": 206
       },
       "example": "import { createKfdAdopterManifestGate } from \"@kungfu-tech/buildchain/kfd-adopter-manifest\";",
       "maturity": "stable",
@@ -12106,7 +12106,7 @@
       ],
       "source": {
         "path": "packages/core/kfd-adopter-manifest.js",
-        "line": 327
+        "line": 325
       },
       "example": "import { createKfdLegacySupportMatrixProjection } from \"@kungfu-tech/buildchain/kfd-adopter-manifest\";",
       "maturity": "stable",
@@ -12167,7 +12167,7 @@
       "id": "packages/core/kfd-adopter-manifest.js#validateKfdAdopterManifestGate",
       "name": "validateKfdAdopterManifestGate",
       "kind": "function",
-      "signature": "function validateKfdAdopterManifestGate(gate, { expectedSourceSha = \"\", checkedAt = gate?.checkedAt || new Date().toISOString(), } = {})",
+      "signature": "function validateKfdAdopterManifestGate(gate, { expectedAdopterId = BUILDCHAIN_ADOPTER_ID, expectedSourceRepository = \"\", expectedSourceSha = \"\", checkedAt = gate?.checkedAt || new Date().toISOString(), } = {})",
       "parameters": [
         {
           "name": "gate",
@@ -12175,7 +12175,7 @@
         },
         {
           "name": "parameter2",
-          "signature": "{ expectedSourceSha = \"\", checkedAt = gate?.checkedAt || new Date().toISOString(), } = {}"
+          "signature": "{ expectedAdopterId = BUILDCHAIN_ADOPTER_ID, expectedSourceRepository = \"\", expectedSourceSha = \"\", checkedAt = gate?.checkedAt || new Date().toISOString(), } = {}"
         }
       ],
       "returns": "unknown",
@@ -12187,7 +12187,7 @@
       ],
       "source": {
         "path": "packages/core/kfd-adopter-manifest.js",
-        "line": 279
+        "line": 277
       },
       "example": "import { validateKfdAdopterManifestGate } from \"@kungfu-tech/buildchain/kfd-adopter-manifest\";",
       "maturity": "stable",
@@ -12220,7 +12220,7 @@
       ],
       "source": {
         "path": "packages/core/kfd-adopter-manifest.js",
-        "line": 381
+        "line": 380
       },
       "example": "import { validateKfdLegacySupportMatrixProjection } from \"@kungfu-tech/buildchain/kfd-adopter-manifest\";",
       "maturity": "stable",
@@ -21153,11 +21153,11 @@
       "id": "packages/core/release-passport-contract.js#collectKfdAdopterReleaseEvidence",
       "name": "collectKfdAdopterReleaseEvidence",
       "kind": "function",
-      "signature": "function collectKfdAdopterReleaseEvidence({ manifest, gateResults = [], comparisonMatrix, sourceSha = \"\", checkedAt } = {})",
+      "signature": "function collectKfdAdopterReleaseEvidence({ manifest, gateResults = [], comparisonMatrix, expectedAdopterId = \"kungfu-systems/buildchain\", expectedSourceRepository = \"\", sourceSha = \"\", checkedAt } = {})",
       "parameters": [
         {
           "name": "parameter1",
-          "signature": "{ manifest, gateResults = [], comparisonMatrix, sourceSha = \"\", checkedAt } = {}"
+          "signature": "{ manifest, gateResults = [], comparisonMatrix, expectedAdopterId = \"kungfu-systems/buildchain\", expectedSourceRepository = \"\", sourceSha = \"\", checkedAt } = {}"
         }
       ],
       "returns": "unknown",
@@ -21505,11 +21505,11 @@
       "id": "packages/core/release-passport-contract.js#validateKfdAdopterReleaseEvidence",
       "name": "validateKfdAdopterReleaseEvidence",
       "kind": "function",
-      "signature": "function validateKfdAdopterReleaseEvidence({ binding, artifactBinding, manifest, manifestGate, legacyProjection, passportLegacyProjection, expectedSourceSha = \"\" } = {})",
+      "signature": "function validateKfdAdopterReleaseEvidence({ binding, artifactBinding, manifest, manifestGate, legacyProjection, passportLegacyProjection, expectedAdopterId = \"kungfu-systems/buildchain\", expectedSourceRepository = \"\", expectedSourceSha = \"\" } = {})",
       "parameters": [
         {
           "name": "parameter1",
-          "signature": "{ binding, artifactBinding, manifest, manifestGate, legacyProjection, passportLegacyProjection, expectedSourceSha = \"\" } = {}"
+          "signature": "{ binding, artifactBinding, manifest, manifestGate, legacyProjection, passportLegacyProjection, expectedAdopterId = \"kungfu-systems/buildchain\", expectedSourceRepository = \"\", expectedSourceSha = \"\" } = {}"
         }
       ],
       "returns": "unknown",
@@ -21714,7 +21714,7 @@
       ],
       "source": {
         "path": "packages/core/release-passport.js",
-        "line": 2607
+        "line": 2608
       },
       "example": "import { createReleaseCheckReport } from \"@kungfu-tech/buildchain\";",
       "maturity": "stable",
@@ -21772,7 +21772,7 @@
       ],
       "source": {
         "path": "packages/core/release-passport.js",
-        "line": 2763
+        "line": 2764
       },
       "example": "import { explainReleasePassport } from \"@kungfu-tech/buildchain\";",
       "maturity": "stable",
@@ -21921,7 +21921,7 @@
       ],
       "source": {
         "path": "packages/core/release-passport.js",
-        "line": 2792
+        "line": 2793
       },
       "example": "import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain\";",
       "maturity": "stable",
@@ -21982,7 +21982,7 @@
       ],
       "source": {
         "path": "packages/core/release-passport.js",
-        "line": 2679
+        "line": 2680
       },
       "example": "import { readJsonFromLocation } from \"@kungfu-tech/buildchain\";",
       "maturity": "stable",
@@ -22137,7 +22137,7 @@
       ],
       "source": {
         "path": "packages/core/release-passport.js",
-        "line": 2804
+        "line": 2805
       },
       "example": "import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain\";",
       "maturity": "stable",
@@ -22166,7 +22166,7 @@
       ],
       "source": {
         "path": "packages/core/release-passport.js",
-        "line": 2728
+        "line": 2729
       },
       "example": "import { verifyReleasePassport } from \"@kungfu-tech/buildchain\";",
       "maturity": "stable",
@@ -28591,7 +28591,7 @@
       "specifier": "@kungfu-tech/buildchain/artifact-verification-envelope",
       "export": "./artifact-verification-envelope",
       "target": "./packages/core/artifact-verification-envelope.js",
-      "digest": "sha256:8e96b81f67c49b3249a0c7e5dab176f01713da896956ee536284db3d509dd67a",
+      "digest": "sha256:c917dac2f636fa7e078500c53639e958b1d94e46eb1a2c1a31f0e4ee57e10416",
       "summary": "Sealed exact-root, lifecycle, identity, and existing KFD assessment inputs for KFX admission.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -29350,7 +29350,7 @@
       "specifier": "@kungfu-tech/buildchain/kfd-adopter-manifest",
       "export": "./kfd-adopter-manifest",
       "target": "./packages/core/kfd-adopter-manifest.js",
-      "digest": "sha256:9300bf0531cd9bb6a0cce50363765cb5dd22cdf1bd0c9075d0eb36b80cea9943",
+      "digest": "sha256:71ab52ffc71e12b0d985daa5e4ef518fbaf0fb5a2cad248fecc361d0eb875626",
       "summary": "Exact-cut KFD adopter manifest verification, Buildchain evidence binding, and one-way legacy support-matrix projection APIs.",
       "capabilityGroup": "kfd-trust",
       "audience": [
@@ -29378,7 +29378,7 @@
       "specifier": "@kungfu-tech/buildchain/kfd-adopter-release-binding",
       "export": "./kfd-adopter-release-binding",
       "target": "./packages/core/artifact-verification-envelope.js",
-      "digest": "sha256:8e96b81f67c49b3249a0c7e5dab176f01713da896956ee536284db3d509dd67a",
+      "digest": "sha256:c917dac2f636fa7e078500c53639e958b1d94e46eb1a2c1a31f0e4ee57e10416",
       "summary": "Release Passport and artifact-evidence binding for one exact standard adopter manifest closure.",
       "capabilityGroup": "kfd-trust",
       "audience": [
@@ -30859,7 +30859,7 @@
       "specifier": "@kungfu-tech/buildchain/release-passport",
       "export": "./release-passport",
       "target": "./packages/core/release-passport.js",
-      "digest": "sha256:4932b0ef2ea1c62101347789ef233c77142630a69762d325688269fe29c230c5",
+      "digest": "sha256:4a095c1931b4e9c4d16455425d27a27f9607b7daffde5548b2a667dbdf41a546",
       "summary": "Release passport collection, verification, explanation, and evidence APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -30905,7 +30905,7 @@
       "specifier": "@kungfu-tech/buildchain/release-passport-contract",
       "export": "./release-passport-contract",
       "target": "./packages/core/release-passport-contract.js",
-      "digest": "sha256:2ab3962c8aea07e0f0e48ff07cb247235a8310344ea750b37e1cf7beb24a8352",
+      "digest": "sha256:e2d0b9b5067d3cb6a05ffee1961b92a469fe6b74a5054345efb769d9c6ff7f9b",
       "summary": "Standalone release passport JSON Schema, ownership/check manifest, and structural validation APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -31199,7 +31199,7 @@
     {
       "id": "node-api-reference",
       "path": "docs/node-api-reference.md",
-      "digest": "sha256:cc63793fb6b1dfeb7d362d2d29e139f89fa871cc57ff7ed7fe196bbba6e2ee63"
+      "digest": "sha256:1ff8052860e97ca5c34ba2afcfcfa839d3eb45907fa5da0f67148063962fe7a4"
     },
     {
       "id": "build-facts",
@@ -31209,7 +31209,7 @@
     {
       "id": "kfd-support",
       "path": "docs/kfd-support.md",
-      "digest": "sha256:4efc8fb6f94293b75606aa0631dfa122edccc970c2cfc00c7e35f81817ea8335"
+      "digest": "sha256:e13f0e58a1bd4699ce8d443c0d316d37c9db807e03917bb2a5f8ebd11cdd7153"
     },
     {
       "id": "readme-badges",