@kungfu-tech/buildchain 4.0.2-alpha.40 → 4.0.2-alpha.41

package/architecture/v4-publication-facade-patches.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "sourceRevision": "a41c00a0c0b2dbd57c238cd9b326b167a1d27ca8",
-  "purpose": "Retain completed v4 publication receipt independently of next-development and preserve immutable binary publication assets.",
+  "purpose": "Retain completed v4 publication receipt independently of next-development and preserve immutable binary publication assets. Scope publication checks to governed Paper repositories without changing generic report lifecycle contracts.",
   "facades": [
     {
       "workflow": ".github/workflows/.binary-release-assets.yml",
@@ -48,6 +48,17 @@
           "after": "            .buildchain/evidence/release-tail/release-invocation.json\n            .buildchain/evidence/release-tail/release-transaction.json\n            .buildchain/evidence/release-tail/release-receipt.json\n            .buildchain/evidence/release-tail/delivery-summary.json\n            .buildchain/evidence/release-tail/buildchain-publication-settlement.json\n          if-no-files-found: error\n"
         }
       ]
+    },
+    {
+      "workflow": ".github/workflows/check.yml",
+      "beforeSha256": "44797c1b64e54806e19cf401300a27e587d6a2f0730ee7509eb84aefb9b60f74",
+      "afterSha256": "fbf3549e4f4987733f53ff362bf49d2001d56ae5842bbd1ed343c0fba40d9429",
+      "replacements": [
+        {
+          "before": "          config=\"${BUILDCHAIN_WORKING_DIRECTORY}/.buildchain/buildchain.toml\"\n          if [ -f \"$config\" ] && grep -Eq '^[[:space:]]*type[[:space:]]*=[[:space:]]*\"publication-artifact\"[[:space:]]*$' \"$config\"; then\n            node .buildchain/runtime/bin/buildchain.mjs paper preflight \\\n              --cwd \"$BUILDCHAIN_WORKING_DIRECTORY\" \\\n              --offline \\\n              --ci \\\n              --json\n          else\n            echo \"Buildchain Paper policy: not applicable\"\n          fi\n",
+          "after": "          node --input-type=module <<'NODE'\n          import fs from \"node:fs\";\n          import path from \"node:path\";\n          import { loadBuildchainConfig } from \"./.buildchain/runtime/packages/core/buildchain-config.js\";\n          import { spawnSyncCommand } from \"./.buildchain/runtime/packages/core/spawn-command.js\";\n          const cwd = path.resolve(process.env.BUILDCHAIN_WORKING_DIRECTORY || \".\");\n          // Validate before deciding applicability; malformed config never skips policy.\n          const config = loadBuildchainConfig(cwd)?.config;\n          const governedPaper = fs.existsSync(path.join(cwd, \".buildchain/paper\"))\n            || config?.publish?.kind === \"npm-paper-package\"\n            || (config?.project?.type === \"publication-artifact\"\n              && (!config.publication || config.publication.kind === \"paper\"));\n          if (governedPaper) {\n            const result = spawnSyncCommand(process.execPath, [\n              \".buildchain/runtime/bin/buildchain.mjs\", \"paper\", \"preflight\",\n              \"--cwd\", cwd, \"--offline\", \"--ci\", \"--json\",\n            ], { stdio: \"inherit\" });\n            if (result.error) throw result.error;\n            process.exitCode = result.status ?? 1;\n          } else {\n            console.log(\"Buildchain Paper policy: not applicable\");\n          }\n          NODE\n"
+        }
+      ]
     }
   ]
 }

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.40",
+    "version": "4.0.2-alpha.41",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v4",
@@ -2399,7 +2399,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:d4bd0f2a1921bfed71a4d9104d45934555bde74a5c189f93ad79f37074c02b87",
-      "auditDigest": "sha256:44797c1b64e54806e19cf401300a27e587d6a2f0730ee7509eb84aefb9b60f74"
+      "auditDigest": "sha256:fbf3549e4f4987733f53ff362bf49d2001d56ae5842bbd1ed343c0fba40d9429"
     },
     {
       "contractVersion": 1,
@@ -5444,5 +5444,5 @@
   "compatibilityFactCutRoot": "sha256:f61b975d4a96c921cc4bd37fb3ed9a0596b47004fe34dc7219979d697e3707f9",
   "compatibilityProofRegistryRoot": "sha256:b7194b811e4d3af2df4390bc4d1731e16a86215bd64ee18cb630dd5492f4fb63",
   "compatibilityDigest": "sha256:20411029d83211dff426fb6535a608902129844a5ccb4788db77d3f81becb839",
-  "contractDigest": "sha256:d255326bba602066d36fe883834521278f08da64de01849dbf5fe47a6ac43530"
+  "contractDigest": "sha256:39e53fdd55e9917c4ae31644eef10d9782c135e04e285ca54446092e0c410a34"
 }

package/dist/site/buildchain-site.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-bundle",
-  "generatedAt": "2026-09-06T06:41:17.000Z",
-  "publishedAt": "2026-09-06T06:41:17.000Z",
+  "generatedAt": "2026-09-06T10:28:10.000Z",
+  "publishedAt": "2026-09-06T10:28:10.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "89ab54a52311f442b988647fc97ffc292dbceba2",
+  "sourceRevision": "582817dd310dd602d843776e3a6121b1e467c83e",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.40",
+    "version": "4.0.2-alpha.41",
     "versionSource": "package.json#version"
   },
   "source": {

package/dist/site/kfd-claims.json

@@ -21,7 +21,7 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "6db59a4c0acdd8d063bec9be6a766419f6fe7b9c8e2936730849f28b2535efc6",
+    "sha256": "d1d428fe86c94a710930781061ffee3726c09800a929e053ac02dff6fa4c4acc",
     "summary": {
       "cliCommandCount": 117,
       "workflowCount": 114,
@@ -246,7 +246,7 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "6db59a4c0acdd8d063bec9be6a766419f6fe7b9c8e2936730849f28b2535efc6",
+      "sha256": "d1d428fe86c94a710930781061ffee3726c09800a929e053ac02dff6fa4c4acc",
       "summary": {
         "cliCommandCount": 117,
         "workflowCount": 114,

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.40",
+    "version": "4.0.2-alpha.41",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/public-surface-audit.json

@@ -10929,7 +10929,7 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "fbc23073bbae240489a2f826b2c26daadc58e704050c5f8df366509f5c5a1c3e",
-    "workflowRegistryDigest": "da116382d57fad02e09e5e846f808560f731fc56a814bc385b156bed28cc46f8",
+    "workflowRegistryDigest": "93a0729cc5283630085af66e719b0157fcd843df76b2b57c7fa767427adfa05c",
     "pageRegistryDigest": "3be2a3d02eeb4d4561022fd81de41c9853c9e196c3ced7466d88ce6766b24456"
   },
   "comparison": {

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-09-06T06:41:17.000Z",
-  "publishedAt": "2026-09-06T06:41:17.000Z",
+  "generatedAt": "2026-09-06T10:28:10.000Z",
+  "publishedAt": "2026-09-06T10:28:10.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "89ab54a52311f442b988647fc97ffc292dbceba2",
+  "sourceRevision": "582817dd310dd602d843776e3a6121b1e467c83e",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.40",
+    "version": "4.0.2-alpha.41",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-09-06T06:41:17.000Z",
-  "publishedAt": "2026-09-06T06:41:17.000Z",
+  "generatedAt": "2026-09-06T10:28:10.000Z",
+  "publishedAt": "2026-09-06T10:28:10.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "89ab54a52311f442b988647fc97ffc292dbceba2",
+  "sourceRevision": "582817dd310dd602d843776e3a6121b1e467c83e",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.40",
+    "version": "4.0.2-alpha.41",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",

package/dist/site/workflow-registry.json

@@ -2746,7 +2746,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.40",
+      "introducedVersion": "4.0.2-alpha.41",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -3943,7 +3943,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.40",
+      "introducedVersion": "4.0.2-alpha.41",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -5970,7 +5970,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.40",
+      "introducedVersion": "4.0.2-alpha.41",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -6001,7 +6001,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.40",
+      "introducedVersion": "4.0.2-alpha.41",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -6032,7 +6032,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.40",
+      "introducedVersion": "4.0.2-alpha.41",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "4.0.2-alpha.40",
+  "version": "4.0.2-alpha.41",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",