@kungfu-tech/buildchain 4.0.8 → 4.0.9-alpha.1

package/dist/site/public-surface-audit.json

@@ -4,10 +4,10 @@
   "status": "passed",
   "summary": {
     "cliCommandCount": 117,
-    "workflowCount": 115,
-    "actionCount": 8,
+    "workflowCount": 116,
+    "actionCount": 14,
     "sitePageCount": 88,
-    "docCommandRefCount": 1050,
+    "docCommandRefCount": 1048,
     "failureCount": 0
   },
   "enumerated": {
@@ -708,102 +708,9 @@
         "path": ".github/workflows/.build-engine.yml",
         "reusable": true,
         "inputs": [
-          "artifact-compression-level",
-          "artifact-finalization-command",
-          "artifact-finalization-on-platform",
-          "artifact-name",
-          "artifact-name-template",
-          "artifact-paths",
-          "artifact-relay-s3-bucket",
-          "artifact-relay-s3-download-role-arn",
-          "artifact-relay-s3-oidc-audience",
-          "artifact-relay-s3-prefix",
-          "artifact-relay-s3-region",
-          "artifact-relay-s3-role-arn",
-          "artifact-relay-s3-upload-role-arn",
-          "artifact-retention-days",
-          "artifact-signing-request-upload-no-proxy",
-          "artifact-transfer-mode",
-          "aws-codebuild-project",
-          "aws-ec2-macos-runner-label",
-          "aws-ec2-windows-runner-label",
-          "build-command",
-          "buildchain-contract-compatibility-policy",
-          "buildchain-contract-drift-issue-mode",
-          "buildchain-contract-expected-channel",
-          "buildchain-contract-expected-major",
-          "buildchain-contract-lock-path",
-          "buildchain-expected-channel",
-          "buildchain-expected-major",
-          "buildchain-ref",
-          "buildchain-repository",
-          "buildchain-visible-workflow",
-          "cache-dependency-lock-root",
-          "cache-policy-root",
-          "cache-toolchain-root",
-          "cargo-registry-index",
-          "checkout-cache-fallback",
-          "checkout-cache-fetch-attempts",
-          "checkout-cache-github-timeout-seconds",
-          "checkout-cache-mirror-url-template",
-          "checkout-cache-mode",
-          "checkout-cache-reference-repository-template",
-          "checkout-cache-timeout-seconds",
-          "checkout-history-mode",
-          "compiler-cache-platforms-json",
-          "compiler-cache-provider",
-          "compiler-cache-required",
-          "control-runner-json",
-          "credential-island-caller-owned",
-          "credential-island-environment",
-          "credential-island-macos-app-path",
-          "credential-island-macos-platform-id",
-          "expected-artifacts-json",
-          "fail-fast",
-          "gate-profile-aggregate-json",
-          "github-artifact-attestation-platform-id",
-          "github-artifact-attestation-signer-sha",
-          "github-artifact-attestation-subject-path",
-          "install-command",
-          "kfd-agent-hub",
-          "lifecycle-timeout-minutes",
-          "linux-container-image",
-          "linux-container-preset",
-          "node-version",
-          "platforms-json",
-          "pre-upload-transport-smoke-artifact-root",
-          "pre-upload-transport-smoke-scenario-path",
-          "process-sample-interval-ms",
-          "process-summary-path",
-          "publish-anchor-request-json",
-          "publish-channel",
-          "publish-refs-json",
-          "publish-registry",
-          "publish-source-ref",
-          "release-candidate",
-          "release-candidate-family-evidence-json",
-          "requested-parallelism",
-          "require-build",
-          "require-install",
-          "require-trusted-event",
-          "require-verify",
-          "runner-preset",
-          "rust-toolchain",
-          "rustup-dist-server",
-          "rustup-update-root",
-          "sample-process-tree",
-          "self-hosted-offline-fallback",
-          "setup-node",
-          "setup-rust",
-          "shifu-cache-profile-digest",
-          "shifu-cache-profile-ref",
-          "universal-request-json",
-          "untrusted-policy",
-          "verify-command",
-          "verify-substage-evidence-path",
-          "working-directory"
+          "config-path"
         ],
-        "inputCount": 94,
+        "inputCount": 1,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -1036,102 +943,9 @@
         "path": ".github/workflows/.build.yml",
         "reusable": true,
         "inputs": [
-          "artifact-compression-level",
-          "artifact-finalization-command",
-          "artifact-finalization-on-platform",
-          "artifact-name",
-          "artifact-name-template",
-          "artifact-paths",
-          "artifact-relay-s3-bucket",
-          "artifact-relay-s3-download-role-arn",
-          "artifact-relay-s3-oidc-audience",
-          "artifact-relay-s3-prefix",
-          "artifact-relay-s3-region",
-          "artifact-relay-s3-role-arn",
-          "artifact-relay-s3-upload-role-arn",
-          "artifact-retention-days",
-          "artifact-signing-request-upload-no-proxy",
-          "artifact-transfer-mode",
-          "aws-codebuild-project",
-          "aws-ec2-macos-runner-label",
-          "aws-ec2-windows-runner-label",
-          "build-command",
-          "buildchain-contract-compatibility-policy",
-          "buildchain-contract-drift-issue-mode",
-          "buildchain-contract-expected-channel",
-          "buildchain-contract-expected-major",
-          "buildchain-contract-lock-path",
-          "buildchain-expected-channel",
-          "buildchain-expected-major",
-          "buildchain-ref",
-          "buildchain-repository",
-          "buildchain-visible-workflow",
-          "cache-dependency-lock-root",
-          "cache-policy-root",
-          "cache-toolchain-root",
-          "cargo-registry-index",
-          "checkout-cache-fallback",
-          "checkout-cache-fetch-attempts",
-          "checkout-cache-github-timeout-seconds",
-          "checkout-cache-mirror-url-template",
-          "checkout-cache-mode",
-          "checkout-cache-reference-repository-template",
-          "checkout-cache-timeout-seconds",
-          "checkout-history-mode",
-          "compiler-cache-platforms-json",
-          "compiler-cache-provider",
-          "compiler-cache-required",
-          "control-runner-json",
-          "credential-island-caller-owned",
-          "credential-island-environment",
-          "credential-island-macos-app-path",
-          "credential-island-macos-platform-id",
-          "expected-artifacts-json",
-          "fail-fast",
-          "gate-profile-aggregate-json",
-          "github-artifact-attestation-platform-id",
-          "github-artifact-attestation-signer-sha",
-          "github-artifact-attestation-subject-path",
-          "install-command",
-          "kfd-agent-hub",
-          "lifecycle-timeout-minutes",
-          "linux-container-image",
-          "linux-container-preset",
-          "node-version",
-          "platforms-json",
-          "pre-upload-transport-smoke-artifact-root",
-          "pre-upload-transport-smoke-scenario-path",
-          "process-sample-interval-ms",
-          "process-summary-path",
-          "publish-anchor-request-json",
-          "publish-channel",
-          "publish-refs-json",
-          "publish-registry",
-          "publish-source-ref",
-          "release-candidate",
-          "release-candidate-family-evidence-json",
-          "requested-parallelism",
-          "require-build",
-          "require-install",
-          "require-trusted-event",
-          "require-verify",
-          "runner-preset",
-          "rust-toolchain",
-          "rustup-dist-server",
-          "rustup-update-root",
-          "sample-process-tree",
-          "self-hosted-offline-fallback",
-          "setup-node",
-          "setup-rust",
-          "shifu-cache-profile-digest",
-          "shifu-cache-profile-ref",
-          "universal-request-json",
-          "untrusted-policy",
-          "verify-command",
-          "verify-substage-evidence-path",
-          "working-directory"
+          "config-path"
         ],
-        "inputCount": 94,
+        "inputCount": 1,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -2142,105 +1956,9 @@
         "path": ".github/workflows/build.yml",
         "reusable": true,
         "inputs": [
-          "artifact-compression-level",
-          "artifact-finalization-command",
-          "artifact-finalization-on-platform",
-          "artifact-name",
-          "artifact-name-template",
-          "artifact-paths",
-          "artifact-relay-s3-bucket",
-          "artifact-relay-s3-download-role-arn",
-          "artifact-relay-s3-oidc-audience",
-          "artifact-relay-s3-prefix",
-          "artifact-relay-s3-region",
-          "artifact-relay-s3-role-arn",
-          "artifact-relay-s3-upload-role-arn",
-          "artifact-retention-days",
-          "artifact-signing-request-upload-no-proxy",
-          "artifact-transfer-mode",
-          "aws-codebuild-project",
-          "aws-ec2-macos-runner-label",
-          "aws-ec2-windows-runner-label",
-          "build-command",
-          "buildchain-alpha-contract-lock-path",
-          "buildchain-channel",
-          "buildchain-contract-compatibility-policy",
-          "buildchain-contract-drift-issue-mode",
-          "buildchain-contract-expected-channel",
-          "buildchain-contract-expected-major",
-          "buildchain-contract-lock-path",
-          "buildchain-expected-channel",
-          "buildchain-expected-major",
-          "buildchain-ref",
-          "buildchain-repository",
-          "buildchain-stable-contract-lock-path",
-          "buildchain-visible-workflow",
-          "cache-dependency-lock-root",
-          "cache-policy-root",
-          "cache-toolchain-root",
-          "cargo-registry-index",
-          "checkout-cache-fallback",
-          "checkout-cache-fetch-attempts",
-          "checkout-cache-github-timeout-seconds",
-          "checkout-cache-mirror-url-template",
-          "checkout-cache-mode",
-          "checkout-cache-reference-repository-template",
-          "checkout-cache-timeout-seconds",
-          "checkout-history-mode",
-          "compiler-cache-platforms-json",
-          "compiler-cache-provider",
-          "compiler-cache-required",
-          "control-runner-json",
-          "credential-island-caller-owned",
-          "credential-island-environment",
-          "credential-island-macos-app-path",
-          "credential-island-macos-platform-id",
-          "expected-artifacts-json",
-          "fail-fast",
-          "gate-profile-aggregate-json",
-          "github-artifact-attestation-platform-id",
-          "github-artifact-attestation-signer-sha",
-          "github-artifact-attestation-subject-path",
-          "install-command",
-          "kfd-agent-hub",
-          "lifecycle-timeout-minutes",
-          "linux-container-image",
-          "linux-container-preset",
-          "node-version",
-          "platforms-json",
-          "pre-upload-transport-smoke-artifact-root",
-          "pre-upload-transport-smoke-scenario-path",
-          "process-sample-interval-ms",
-          "process-summary-path",
-          "publish-anchor-request-json",
-          "publish-channel",
-          "publish-refs-json",
-          "publish-registry",
-          "publish-source-ref",
-          "release-candidate",
-          "release-candidate-family-evidence-json",
-          "requested-parallelism",
-          "require-build",
-          "require-install",
-          "require-trusted-event",
-          "require-verify",
-          "runner-preset",
-          "rust-toolchain",
-          "rustup-dist-server",
-          "rustup-update-root",
-          "sample-process-tree",
-          "self-hosted-offline-fallback",
-          "setup-node",
-          "setup-rust",
-          "shifu-cache-profile-digest",
-          "shifu-cache-profile-ref",
-          "universal-request-json",
-          "untrusted-policy",
-          "verify-command",
-          "verify-substage-evidence-path",
-          "working-directory"
+          "config-path"
         ],
-        "inputCount": 97,
+        "inputCount": 1,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -2931,105 +2649,9 @@
         "path": ".github/workflows/public-build-candidate.yml",
         "reusable": true,
         "inputs": [
-          "artifact-compression-level",
-          "artifact-finalization-command",
-          "artifact-finalization-on-platform",
-          "artifact-name",
-          "artifact-name-template",
-          "artifact-paths",
-          "artifact-relay-s3-bucket",
-          "artifact-relay-s3-download-role-arn",
-          "artifact-relay-s3-oidc-audience",
-          "artifact-relay-s3-prefix",
-          "artifact-relay-s3-region",
-          "artifact-relay-s3-role-arn",
-          "artifact-relay-s3-upload-role-arn",
-          "artifact-retention-days",
-          "artifact-signing-request-upload-no-proxy",
-          "artifact-transfer-mode",
-          "aws-codebuild-project",
-          "aws-ec2-macos-runner-label",
-          "aws-ec2-windows-runner-label",
-          "build-command",
-          "buildchain-alpha-contract-lock-path",
-          "buildchain-channel",
-          "buildchain-contract-compatibility-policy",
-          "buildchain-contract-drift-issue-mode",
-          "buildchain-contract-expected-channel",
-          "buildchain-contract-expected-major",
-          "buildchain-contract-lock-path",
-          "buildchain-expected-channel",
-          "buildchain-expected-major",
-          "buildchain-ref",
-          "buildchain-repository",
-          "buildchain-stable-contract-lock-path",
-          "buildchain-visible-workflow",
-          "cache-dependency-lock-root",
-          "cache-policy-root",
-          "cache-toolchain-root",
-          "cargo-registry-index",
-          "checkout-cache-fallback",
-          "checkout-cache-fetch-attempts",
-          "checkout-cache-github-timeout-seconds",
-          "checkout-cache-mirror-url-template",
-          "checkout-cache-mode",
-          "checkout-cache-reference-repository-template",
-          "checkout-cache-timeout-seconds",
-          "checkout-history-mode",
-          "compiler-cache-platforms-json",
-          "compiler-cache-provider",
-          "compiler-cache-required",
-          "control-runner-json",
-          "credential-island-caller-owned",
-          "credential-island-environment",
-          "credential-island-macos-app-path",
-          "credential-island-macos-platform-id",
-          "expected-artifacts-json",
-          "fail-fast",
-          "gate-profile-aggregate-json",
-          "github-artifact-attestation-platform-id",
-          "github-artifact-attestation-signer-sha",
-          "github-artifact-attestation-subject-path",
-          "install-command",
-          "kfd-agent-hub",
-          "lifecycle-timeout-minutes",
-          "linux-container-image",
-          "linux-container-preset",
-          "node-version",
-          "platforms-json",
-          "pre-upload-transport-smoke-artifact-root",
-          "pre-upload-transport-smoke-scenario-path",
-          "process-sample-interval-ms",
-          "process-summary-path",
-          "publish-anchor-request-json",
-          "publish-channel",
-          "publish-refs-json",
-          "publish-registry",
-          "publish-source-ref",
-          "release-candidate",
-          "release-candidate-family-evidence-json",
-          "requested-parallelism",
-          "require-build",
-          "require-install",
-          "require-trusted-event",
-          "require-verify",
-          "runner-preset",
-          "rust-toolchain",
-          "rustup-dist-server",
-          "rustup-update-root",
-          "sample-process-tree",
-          "self-hosted-offline-fallback",
-          "setup-node",
-          "setup-rust",
-          "shifu-cache-profile-digest",
-          "shifu-cache-profile-ref",
-          "universal-request-json",
-          "untrusted-policy",
-          "verify-command",
-          "verify-substage-evidence-path",
-          "working-directory"
+          "config-path"
         ],
-        "inputCount": 97,
+        "inputCount": 1,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -4731,6 +4353,17 @@
         "outputs": [],
         "outputCount": 0
       },
+      {
+        "id": "self-build-stable-dogfood",
+        "path": ".github/workflows/self-build-stable-dogfood.yml",
+        "reusable": false,
+        "inputs": [],
+        "inputCount": 0,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
       {
         "id": "self-build-verify",
         "path": ".github/workflows/self-build-verify.yml",
@@ -5044,6 +4677,74 @@
       }
     ],
     "actionInputs": [
+      {
+        "id": "build-agent-hub-evidence",
+        "path": "actions/build-agent-hub-evidence/action.yml",
+        "inputs": [
+          "plan-json",
+          "platform-json",
+          "source-json"
+        ],
+        "inputCount": 3
+      },
+      {
+        "id": "build-artifact-transfer",
+        "path": "actions/build-artifact-transfer/action.yml",
+        "inputs": [
+          "artifact-name",
+          "plan-json",
+          "platform-json",
+          "relay-role",
+          "relay-upload-role",
+          "source-json",
+          "transfer-json"
+        ],
+        "inputCount": 7
+      },
+      {
+        "id": "build-attestation-policy",
+        "path": "actions/build-attestation-policy/action.yml",
+        "inputs": [
+          "plan-json",
+          "platform-json",
+          "source-json"
+        ],
+        "inputCount": 3
+      },
+      {
+        "id": "build-lifecycle-stage",
+        "path": "actions/build-lifecycle-stage/action.yml",
+        "inputs": [
+          "artifact-name",
+          "plan-json",
+          "platform-json",
+          "source-json",
+          "stage"
+        ],
+        "inputCount": 5
+      },
+      {
+        "id": "build-signing-request",
+        "path": "actions/build-signing-request/action.yml",
+        "inputs": [
+          "artifact-name",
+          "plan-json",
+          "platform-json",
+          "source-json"
+        ],
+        "inputCount": 4
+      },
+      {
+        "id": "build-verification-evidence",
+        "path": "actions/build-verification-evidence/action.yml",
+        "inputs": [
+          "plan-json",
+          "platform-json",
+          "source-json",
+          "verify-outcome"
+        ],
+        "inputCount": 4
+      },
       {
         "id": "github-artifact-attestation",
         "path": "actions/github-artifact-attestation/action.yml",
@@ -9781,11 +9482,6 @@
         "path": "docs/cli.md",
         "command": "buildchain publish-source"
       },
-      {
-        "id": "publish-source",
-        "path": "docs/reusable-build-surface.md",
-        "command": "buildchain publish-source validate-anchored-release --json"
-      },
       {
         "id": "release-dry-run",
         "path": "actions/promote-buildchain-ref/README.md",
@@ -10341,11 +10037,6 @@
         "path": "docs/cli.md",
         "command": "buildchain sample process-tree"
       },
-      {
-        "id": "sample-process-tree",
-        "path": "docs/reusable-build-surface.md",
-        "command": "buildchain sample process-tree"
-      },
       {
         "id": "sample-process-tree",
         "path": "docs/toolkit-observability.md",
@@ -10947,9 +10638,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "fbc23073bbae240489a2f826b2c26daadc58e704050c5f8df366509f5c5a1c3e",
-    "workflowRegistryDigest": "ce257746e210703f21692f724c4e02ef3c86a431930d921d6e17eb33dabee62e",
-    "pageRegistryDigest": "a303f98d4abb6e02e4ddb5510d9c4794642391c5a2f6b274b49d823461991b4c"
+    "cliRegistryDigest": "547dde42a349a047f2aadcfc3ee9e3e31b6a7f6bfc75b7d37e5dcff7abd15308",
+    "workflowRegistryDigest": "e5784fc8daadf6d2acb79f6e0662b7ae6b516022a57ee3f31a3997c7b60a15e2",
+    "pageRegistryDigest": "57de14408acbd57b5665078b2ff5a644c8ac8b0a43b4acd69d98b73724e03706"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-authority-registry.json

@@ -1001,6 +1001,19 @@
       "runnerPolicy": "unqualified",
       "notes": ""
     },
+    {
+      "workflowPath": ".github/workflows/self-build-stable-dogfood.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-build-stable-dogfood.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
     {
       "workflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
       "authorityClass": "product-publication",
@@ -1861,6 +1874,14 @@
       "signals": [],
       "classified": false
     },
+    {
+      "path": ".github/workflows/self-build-stable-dogfood.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
     {
       "path": ".github/workflows/self-build-verify.yml",
       "signals": [],
@@ -2031,5 +2052,5 @@
       "classified": true
     }
   ],
-  "registryDigest": "e5eb0d7ee3cce4a25674909154f6bd0bf736d5b93df41c1d435c468aad50c32a"
+  "registryDigest": "40ae53e5bf87b44395bd7bf04b19effb2cae1ada5f9864c02dbef4220fc92106"
 }

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-09-08T08:25:09.000Z",
-  "publishedAt": "2026-09-08T08:25:09.000Z",
+  "generatedAt": "2026-09-08T13:03:18.000Z",
+  "publishedAt": "2026-09-08T13:03:18.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "27a4cdab51cf0e55760f89f8f75214dbc1c07f80",
+  "sourceRevision": "e5b7450f81e4019c1d58b44de3689baad9347ace",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.8",
+    "version": "4.0.9-alpha.1",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",