@kungfu-tech/buildchain 4.0.8 → 4.0.9-alpha.0

package/dist/site/public-surface-audit.json

@@ -5,9 +5,9 @@
   "summary": {
     "cliCommandCount": 117,
     "workflowCount": 115,
-    "actionCount": 8,
+    "actionCount": 14,
     "sitePageCount": 88,
-    "docCommandRefCount": 1050,
+    "docCommandRefCount": 1048,
     "failureCount": 0
   },
   "enumerated": {
@@ -708,102 +708,9 @@
         "path": ".github/workflows/.build-engine.yml",
         "reusable": true,
         "inputs": [
-          "artifact-compression-level",
-          "artifact-finalization-command",
-          "artifact-finalization-on-platform",
-          "artifact-name",
-          "artifact-name-template",
-          "artifact-paths",
-          "artifact-relay-s3-bucket",
-          "artifact-relay-s3-download-role-arn",
-          "artifact-relay-s3-oidc-audience",
-          "artifact-relay-s3-prefix",
-          "artifact-relay-s3-region",
-          "artifact-relay-s3-role-arn",
-          "artifact-relay-s3-upload-role-arn",
-          "artifact-retention-days",
-          "artifact-signing-request-upload-no-proxy",
-          "artifact-transfer-mode",
-          "aws-codebuild-project",
-          "aws-ec2-macos-runner-label",
-          "aws-ec2-windows-runner-label",
-          "build-command",
-          "buildchain-contract-compatibility-policy",
-          "buildchain-contract-drift-issue-mode",
-          "buildchain-contract-expected-channel",
-          "buildchain-contract-expected-major",
-          "buildchain-contract-lock-path",
-          "buildchain-expected-channel",
-          "buildchain-expected-major",
-          "buildchain-ref",
-          "buildchain-repository",
-          "buildchain-visible-workflow",
-          "cache-dependency-lock-root",
-          "cache-policy-root",
-          "cache-toolchain-root",
-          "cargo-registry-index",
-          "checkout-cache-fallback",
-          "checkout-cache-fetch-attempts",
-          "checkout-cache-github-timeout-seconds",
-          "checkout-cache-mirror-url-template",
-          "checkout-cache-mode",
-          "checkout-cache-reference-repository-template",
-          "checkout-cache-timeout-seconds",
-          "checkout-history-mode",
-          "compiler-cache-platforms-json",
-          "compiler-cache-provider",
-          "compiler-cache-required",
-          "control-runner-json",
-          "credential-island-caller-owned",
-          "credential-island-environment",
-          "credential-island-macos-app-path",
-          "credential-island-macos-platform-id",
-          "expected-artifacts-json",
-          "fail-fast",
-          "gate-profile-aggregate-json",
-          "github-artifact-attestation-platform-id",
-          "github-artifact-attestation-signer-sha",
-          "github-artifact-attestation-subject-path",
-          "install-command",
-          "kfd-agent-hub",
-          "lifecycle-timeout-minutes",
-          "linux-container-image",
-          "linux-container-preset",
-          "node-version",
-          "platforms-json",
-          "pre-upload-transport-smoke-artifact-root",
-          "pre-upload-transport-smoke-scenario-path",
-          "process-sample-interval-ms",
-          "process-summary-path",
-          "publish-anchor-request-json",
-          "publish-channel",
-          "publish-refs-json",
-          "publish-registry",
-          "publish-source-ref",
-          "release-candidate",
-          "release-candidate-family-evidence-json",
-          "requested-parallelism",
-          "require-build",
-          "require-install",
-          "require-trusted-event",
-          "require-verify",
-          "runner-preset",
-          "rust-toolchain",
-          "rustup-dist-server",
-          "rustup-update-root",
-          "sample-process-tree",
-          "self-hosted-offline-fallback",
-          "setup-node",
-          "setup-rust",
-          "shifu-cache-profile-digest",
-          "shifu-cache-profile-ref",
-          "universal-request-json",
-          "untrusted-policy",
-          "verify-command",
-          "verify-substage-evidence-path",
-          "working-directory"
+          "config-path"
         ],
-        "inputCount": 94,
+        "inputCount": 1,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -1036,102 +943,9 @@
         "path": ".github/workflows/.build.yml",
         "reusable": true,
         "inputs": [
-          "artifact-compression-level",
-          "artifact-finalization-command",
-          "artifact-finalization-on-platform",
-          "artifact-name",
-          "artifact-name-template",
-          "artifact-paths",
-          "artifact-relay-s3-bucket",
-          "artifact-relay-s3-download-role-arn",
-          "artifact-relay-s3-oidc-audience",
-          "artifact-relay-s3-prefix",
-          "artifact-relay-s3-region",
-          "artifact-relay-s3-role-arn",
-          "artifact-relay-s3-upload-role-arn",
-          "artifact-retention-days",
-          "artifact-signing-request-upload-no-proxy",
-          "artifact-transfer-mode",
-          "aws-codebuild-project",
-          "aws-ec2-macos-runner-label",
-          "aws-ec2-windows-runner-label",
-          "build-command",
-          "buildchain-contract-compatibility-policy",
-          "buildchain-contract-drift-issue-mode",
-          "buildchain-contract-expected-channel",
-          "buildchain-contract-expected-major",
-          "buildchain-contract-lock-path",
-          "buildchain-expected-channel",
-          "buildchain-expected-major",
-          "buildchain-ref",
-          "buildchain-repository",
-          "buildchain-visible-workflow",
-          "cache-dependency-lock-root",
-          "cache-policy-root",
-          "cache-toolchain-root",
-          "cargo-registry-index",
-          "checkout-cache-fallback",
-          "checkout-cache-fetch-attempts",
-          "checkout-cache-github-timeout-seconds",
-          "checkout-cache-mirror-url-template",
-          "checkout-cache-mode",
-          "checkout-cache-reference-repository-template",
-          "checkout-cache-timeout-seconds",
-          "checkout-history-mode",
-          "compiler-cache-platforms-json",
-          "compiler-cache-provider",
-          "compiler-cache-required",
-          "control-runner-json",
-          "credential-island-caller-owned",
-          "credential-island-environment",
-          "credential-island-macos-app-path",
-          "credential-island-macos-platform-id",
-          "expected-artifacts-json",
-          "fail-fast",
-          "gate-profile-aggregate-json",
-          "github-artifact-attestation-platform-id",
-          "github-artifact-attestation-signer-sha",
-          "github-artifact-attestation-subject-path",
-          "install-command",
-          "kfd-agent-hub",
-          "lifecycle-timeout-minutes",
-          "linux-container-image",
-          "linux-container-preset",
-          "node-version",
-          "platforms-json",
-          "pre-upload-transport-smoke-artifact-root",
-          "pre-upload-transport-smoke-scenario-path",
-          "process-sample-interval-ms",
-          "process-summary-path",
-          "publish-anchor-request-json",
-          "publish-channel",
-          "publish-refs-json",
-          "publish-registry",
-          "publish-source-ref",
-          "release-candidate",
-          "release-candidate-family-evidence-json",
-          "requested-parallelism",
-          "require-build",
-          "require-install",
-          "require-trusted-event",
-          "require-verify",
-          "runner-preset",
-          "rust-toolchain",
-          "rustup-dist-server",
-          "rustup-update-root",
-          "sample-process-tree",
-          "self-hosted-offline-fallback",
-          "setup-node",
-          "setup-rust",
-          "shifu-cache-profile-digest",
-          "shifu-cache-profile-ref",
-          "universal-request-json",
-          "untrusted-policy",
-          "verify-command",
-          "verify-substage-evidence-path",
-          "working-directory"
+          "config-path"
         ],
-        "inputCount": 94,
+        "inputCount": 1,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -2142,105 +1956,9 @@
         "path": ".github/workflows/build.yml",
         "reusable": true,
         "inputs": [
-          "artifact-compression-level",
-          "artifact-finalization-command",
-          "artifact-finalization-on-platform",
-          "artifact-name",
-          "artifact-name-template",
-          "artifact-paths",
-          "artifact-relay-s3-bucket",
-          "artifact-relay-s3-download-role-arn",
-          "artifact-relay-s3-oidc-audience",
-          "artifact-relay-s3-prefix",
-          "artifact-relay-s3-region",
-          "artifact-relay-s3-role-arn",
-          "artifact-relay-s3-upload-role-arn",
-          "artifact-retention-days",
-          "artifact-signing-request-upload-no-proxy",
-          "artifact-transfer-mode",
-          "aws-codebuild-project",
-          "aws-ec2-macos-runner-label",
-          "aws-ec2-windows-runner-label",
-          "build-command",
-          "buildchain-alpha-contract-lock-path",
-          "buildchain-channel",
-          "buildchain-contract-compatibility-policy",
-          "buildchain-contract-drift-issue-mode",
-          "buildchain-contract-expected-channel",
-          "buildchain-contract-expected-major",
-          "buildchain-contract-lock-path",
-          "buildchain-expected-channel",
-          "buildchain-expected-major",
-          "buildchain-ref",
-          "buildchain-repository",
-          "buildchain-stable-contract-lock-path",
-          "buildchain-visible-workflow",
-          "cache-dependency-lock-root",
-          "cache-policy-root",
-          "cache-toolchain-root",
-          "cargo-registry-index",
-          "checkout-cache-fallback",
-          "checkout-cache-fetch-attempts",
-          "checkout-cache-github-timeout-seconds",
-          "checkout-cache-mirror-url-template",
-          "checkout-cache-mode",
-          "checkout-cache-reference-repository-template",
-          "checkout-cache-timeout-seconds",
-          "checkout-history-mode",
-          "compiler-cache-platforms-json",
-          "compiler-cache-provider",
-          "compiler-cache-required",
-          "control-runner-json",
-          "credential-island-caller-owned",
-          "credential-island-environment",
-          "credential-island-macos-app-path",
-          "credential-island-macos-platform-id",
-          "expected-artifacts-json",
-          "fail-fast",
-          "gate-profile-aggregate-json",
-          "github-artifact-attestation-platform-id",
-          "github-artifact-attestation-signer-sha",
-          "github-artifact-attestation-subject-path",
-          "install-command",
-          "kfd-agent-hub",
-          "lifecycle-timeout-minutes",
-          "linux-container-image",
-          "linux-container-preset",
-          "node-version",
-          "platforms-json",
-          "pre-upload-transport-smoke-artifact-root",
-          "pre-upload-transport-smoke-scenario-path",
-          "process-sample-interval-ms",
-          "process-summary-path",
-          "publish-anchor-request-json",
-          "publish-channel",
-          "publish-refs-json",
-          "publish-registry",
-          "publish-source-ref",
-          "release-candidate",
-          "release-candidate-family-evidence-json",
-          "requested-parallelism",
-          "require-build",
-          "require-install",
-          "require-trusted-event",
-          "require-verify",
-          "runner-preset",
-          "rust-toolchain",
-          "rustup-dist-server",
-          "rustup-update-root",
-          "sample-process-tree",
-          "self-hosted-offline-fallback",
-          "setup-node",
-          "setup-rust",
-          "shifu-cache-profile-digest",
-          "shifu-cache-profile-ref",
-          "universal-request-json",
-          "untrusted-policy",
-          "verify-command",
-          "verify-substage-evidence-path",
-          "working-directory"
+          "config-path"
         ],
-        "inputCount": 97,
+        "inputCount": 1,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -2931,105 +2649,9 @@
         "path": ".github/workflows/public-build-candidate.yml",
         "reusable": true,
         "inputs": [
-          "artifact-compression-level",
-          "artifact-finalization-command",
-          "artifact-finalization-on-platform",
-          "artifact-name",
-          "artifact-name-template",
-          "artifact-paths",
-          "artifact-relay-s3-bucket",
-          "artifact-relay-s3-download-role-arn",
-          "artifact-relay-s3-oidc-audience",
-          "artifact-relay-s3-prefix",
-          "artifact-relay-s3-region",
-          "artifact-relay-s3-role-arn",
-          "artifact-relay-s3-upload-role-arn",
-          "artifact-retention-days",
-          "artifact-signing-request-upload-no-proxy",
-          "artifact-transfer-mode",
-          "aws-codebuild-project",
-          "aws-ec2-macos-runner-label",
-          "aws-ec2-windows-runner-label",
-          "build-command",
-          "buildchain-alpha-contract-lock-path",
-          "buildchain-channel",
-          "buildchain-contract-compatibility-policy",
-          "buildchain-contract-drift-issue-mode",
-          "buildchain-contract-expected-channel",
-          "buildchain-contract-expected-major",
-          "buildchain-contract-lock-path",
-          "buildchain-expected-channel",
-          "buildchain-expected-major",
-          "buildchain-ref",
-          "buildchain-repository",
-          "buildchain-stable-contract-lock-path",
-          "buildchain-visible-workflow",
-          "cache-dependency-lock-root",
-          "cache-policy-root",
-          "cache-toolchain-root",
-          "cargo-registry-index",
-          "checkout-cache-fallback",
-          "checkout-cache-fetch-attempts",
-          "checkout-cache-github-timeout-seconds",
-          "checkout-cache-mirror-url-template",
-          "checkout-cache-mode",
-          "checkout-cache-reference-repository-template",
-          "checkout-cache-timeout-seconds",
-          "checkout-history-mode",
-          "compiler-cache-platforms-json",
-          "compiler-cache-provider",
-          "compiler-cache-required",
-          "control-runner-json",
-          "credential-island-caller-owned",
-          "credential-island-environment",
-          "credential-island-macos-app-path",
-          "credential-island-macos-platform-id",
-          "expected-artifacts-json",
-          "fail-fast",
-          "gate-profile-aggregate-json",
-          "github-artifact-attestation-platform-id",
-          "github-artifact-attestation-signer-sha",
-          "github-artifact-attestation-subject-path",
-          "install-command",
-          "kfd-agent-hub",
-          "lifecycle-timeout-minutes",
-          "linux-container-image",
-          "linux-container-preset",
-          "node-version",
-          "platforms-json",
-          "pre-upload-transport-smoke-artifact-root",
-          "pre-upload-transport-smoke-scenario-path",
-          "process-sample-interval-ms",
-          "process-summary-path",
-          "publish-anchor-request-json",
-          "publish-channel",
-          "publish-refs-json",
-          "publish-registry",
-          "publish-source-ref",
-          "release-candidate",
-          "release-candidate-family-evidence-json",
-          "requested-parallelism",
-          "require-build",
-          "require-install",
-          "require-trusted-event",
-          "require-verify",
-          "runner-preset",
-          "rust-toolchain",
-          "rustup-dist-server",
-          "rustup-update-root",
-          "sample-process-tree",
-          "self-hosted-offline-fallback",
-          "setup-node",
-          "setup-rust",
-          "shifu-cache-profile-digest",
-          "shifu-cache-profile-ref",
-          "universal-request-json",
-          "untrusted-policy",
-          "verify-command",
-          "verify-substage-evidence-path",
-          "working-directory"
+          "config-path"
         ],
-        "inputCount": 97,
+        "inputCount": 1,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -5044,6 +4666,74 @@
       }
     ],
     "actionInputs": [
+      {
+        "id": "build-agent-hub-evidence",
+        "path": "actions/build-agent-hub-evidence/action.yml",
+        "inputs": [
+          "plan-json",
+          "platform-json",
+          "source-json"
+        ],
+        "inputCount": 3
+      },
+      {
+        "id": "build-artifact-transfer",
+        "path": "actions/build-artifact-transfer/action.yml",
+        "inputs": [
+          "artifact-name",
+          "plan-json",
+          "platform-json",
+          "relay-role",
+          "relay-upload-role",
+          "source-json",
+          "transfer-json"
+        ],
+        "inputCount": 7
+      },
+      {
+        "id": "build-attestation-policy",
+        "path": "actions/build-attestation-policy/action.yml",
+        "inputs": [
+          "plan-json",
+          "platform-json",
+          "source-json"
+        ],
+        "inputCount": 3
+      },
+      {
+        "id": "build-lifecycle-stage",
+        "path": "actions/build-lifecycle-stage/action.yml",
+        "inputs": [
+          "artifact-name",
+          "plan-json",
+          "platform-json",
+          "source-json",
+          "stage"
+        ],
+        "inputCount": 5
+      },
+      {
+        "id": "build-signing-request",
+        "path": "actions/build-signing-request/action.yml",
+        "inputs": [
+          "artifact-name",
+          "plan-json",
+          "platform-json",
+          "source-json"
+        ],
+        "inputCount": 4
+      },
+      {
+        "id": "build-verification-evidence",
+        "path": "actions/build-verification-evidence/action.yml",
+        "inputs": [
+          "plan-json",
+          "platform-json",
+          "source-json",
+          "verify-outcome"
+        ],
+        "inputCount": 4
+      },
       {
         "id": "github-artifact-attestation",
         "path": "actions/github-artifact-attestation/action.yml",
@@ -9781,11 +9471,6 @@
         "path": "docs/cli.md",
         "command": "buildchain publish-source"
       },
-      {
-        "id": "publish-source",
-        "path": "docs/reusable-build-surface.md",
-        "command": "buildchain publish-source validate-anchored-release --json"
-      },
       {
         "id": "release-dry-run",
         "path": "actions/promote-buildchain-ref/README.md",
@@ -10341,11 +10026,6 @@
         "path": "docs/cli.md",
         "command": "buildchain sample process-tree"
       },
-      {
-        "id": "sample-process-tree",
-        "path": "docs/reusable-build-surface.md",
-        "command": "buildchain sample process-tree"
-      },
       {
         "id": "sample-process-tree",
         "path": "docs/toolkit-observability.md",
@@ -10947,9 +10627,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "fbc23073bbae240489a2f826b2c26daadc58e704050c5f8df366509f5c5a1c3e",
-    "workflowRegistryDigest": "ce257746e210703f21692f724c4e02ef3c86a431930d921d6e17eb33dabee62e",
-    "pageRegistryDigest": "a303f98d4abb6e02e4ddb5510d9c4794642391c5a2f6b274b49d823461991b4c"
+    "cliRegistryDigest": "547dde42a349a047f2aadcfc3ee9e3e31b6a7f6bfc75b7d37e5dcff7abd15308",
+    "workflowRegistryDigest": "82c2a0ad3ca59d91cd71987c968ae5c0f5fe16d2cdb2a37dcfce440cb41777be",
+    "pageRegistryDigest": "a28101c7e678dbdd499b0b263f809884381d7ddecd9d8ba7820c6912bc4f8c4c"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-registry.json

@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "27a4cdab51cf0e55760f89f8f75214dbc1c07f80",
+  "sourceRevision": "a9e25fd5b7d5dac1b0be1099d8651f7c6b0d7321",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.8",
+    "version": "4.0.9-alpha.0",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "27a4cdab51cf0e55760f89f8f75214dbc1c07f80",
+  "sourceRevision": "a9e25fd5b7d5dac1b0be1099d8651f7c6b0d7321",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.8",
+    "version": "4.0.9-alpha.0",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -53,7 +53,7 @@
       "path": "docs/MAP.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:93128b060fe11f0c14451966aa2ac467c47248946c577a16daed124344824282"
+      "digest": "sha256:1de05d2ed89f816e23c8cab285c2bdc9a427d07ea1446e2bb56565a21b6ff113"
     },
     {
       "id": "getting-started",
@@ -61,7 +61,7 @@
       "path": "docs/getting-started.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:72adec660d001a3fb77cd990f2bacdb6f46c8eb4927533d408c3755dab02a94e"
+      "digest": "sha256:8cadc5f2bb4ec8d8aea3bd7e05936da197ce3dfbae39c432a0fe9edf6d2b36fa"
     },
     {
       "id": "auditable-demo",
@@ -245,7 +245,7 @@
       "path": "docs/cli-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:1be0e552967733d9d6e5bf460c84b866fdfb60966ac16177b43370c1367de321"
+      "digest": "sha256:f8c1d64d8087819b6496b21878ad1457ecba52c0b5e74793c35ddb9bd838497c"
     },
     {
       "id": "node-api-reference",
@@ -253,7 +253,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:7ead263fccd68f471a4e3fee4b9ffe39b2ef0cbbea3c961605f8a13f66f09328"
+      "digest": "sha256:29b6f9cfccefae36ce402485b8c4e4c86bfd7cab18a8dcdfab7c1369b2301b4e"
     },
     {
       "id": "build-facts",
@@ -293,7 +293,7 @@
       "path": "docs/reusable-build-surface.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:71a327274f18445d3e26392d24a707b887650603c574354009243164dbc59cdc"
+      "digest": "sha256:42eda071001e232c0d4f6236c362c862fe7d63cd7b123db9780e0a3b468bc09f"
     },
     {
       "id": "v4-adopter-delivery",
@@ -357,7 +357,7 @@
       "path": "docs/runtime-train-validation.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:7df1e85785a1bd8d87c22359d63bcd1caf3fc6c4924d04b6802584b189f75a08"
+      "digest": "sha256:6f362a7ad276acfe34b2faa74b3e1212c5cdc451f137b65002975e642540fa5b"
     },
     {
       "id": "versioning",