@kungfu-tech/buildchain 4.1.3-alpha.0 → 4.1.3-alpha.2

package/dist/site/public-surface-audit.json

@@ -4,8 +4,8 @@
   "status": "passed",
   "summary": {
     "cliCommandCount": 117,
-    "workflowCount": 67,
-    "actionCount": 268,
+    "workflowCount": 72,
+    "actionCount": 280,
     "sitePageCount": 94,
     "docCommandRefCount": 1036,
     "failureCount": 0
@@ -744,6 +744,38 @@
         "outputs": [],
         "outputCount": 0
       },
+      {
+        "id": ".ops-pipeline-delivery",
+        "path": ".github/workflows/.ops-pipeline-delivery.yml",
+        "reusable": true,
+        "inputs": [
+          "request",
+          "runtime-selection"
+        ],
+        "inputCount": 2,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
+      {
+        "id": ".ops-pipeline-execute",
+        "path": ".github/workflows/.ops-pipeline-execute.yml",
+        "reusable": true,
+        "inputs": [
+          "attempt",
+          "context",
+          "matrix",
+          "operation",
+          "request",
+          "runtime-selection"
+        ],
+        "inputCount": 6,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
       {
         "id": ".release-authority",
         "path": ".github/workflows/.release-authority.yml",
@@ -831,6 +863,24 @@
         "outputs": [],
         "outputCount": 0
       },
+      {
+        "id": ".release-pipeline-products",
+        "path": ".github/workflows/.release-pipeline-products.yml",
+        "reusable": true,
+        "inputs": [
+          "attempt",
+          "runtime-selection"
+        ],
+        "inputCount": 2,
+        "secrets": [
+          "BUILDCHAIN_APP_PRIVATE_KEY",
+          "BUILDCHAIN_AUTOMATION_TOKEN",
+          "BUILDCHAIN_NPM_TOKEN"
+        ],
+        "secretCount": 3,
+        "outputs": [],
+        "outputCount": 0
+      },
       {
         "id": ".release-promote",
         "path": ".github/workflows/.release-promote.yml",
@@ -1184,7 +1234,9 @@
           "native-command",
           "native-command-root",
           "native-heartbeat-seconds",
+          "native-platform",
           "native-proof-json",
+          "pipeline-attempt",
           "plan-root",
           "project-cut-proof-json",
           "queue-admission-context",
@@ -1204,7 +1256,7 @@
           "toolchain-root",
           "warrant-lease-seconds"
         ],
-        "inputCount": 42,
+        "inputCount": 44,
         "secrets": [
           "github-token"
         ],
@@ -1455,6 +1507,33 @@
         ],
         "outputCount": 5
       },
+      {
+        "id": "public-ops-pipeline",
+        "path": ".github/workflows/public-ops-pipeline.yml",
+        "reusable": true,
+        "inputs": [
+          "config-path"
+        ],
+        "inputCount": 1,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
+      {
+        "id": "public-ops-recover",
+        "path": ".github/workflows/public-ops-recover.yml",
+        "reusable": true,
+        "inputs": [
+          "attempt",
+          "runtime-ref"
+        ],
+        "inputCount": 2,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
       {
         "id": "public-ops-release-governance",
         "path": ".github/workflows/public-ops-release-governance.yml",
@@ -3301,10 +3380,11 @@
           "branch",
           "heartbeat-seconds",
           "lease-seconds",
+          "pipeline-attempt",
           "runtime-sha",
           "token"
         ],
-        "inputCount": 5
+        "inputCount": 6
       },
       {
         "id": "dev-delivery/native/qualify-proof",
@@ -4218,6 +4298,72 @@
         ],
         "inputCount": 2
       },
+      {
+        "id": "publication/pipeline/apply",
+        "path": "actions/publication/pipeline/apply/action.yml",
+        "inputs": [
+          "context",
+          "token"
+        ],
+        "inputCount": 2
+      },
+      {
+        "id": "publication/pipeline/build",
+        "path": "actions/publication/pipeline/build/action.yml",
+        "inputs": [
+          "context",
+          "platform"
+        ],
+        "inputCount": 2
+      },
+      {
+        "id": "publication/pipeline/prepare",
+        "path": "actions/publication/pipeline/prepare/action.yml",
+        "inputs": [
+          "attempt",
+          "definition-sha",
+          "token"
+        ],
+        "inputCount": 3
+      },
+      {
+        "id": "publication/pipeline/prepare-qualification",
+        "path": "actions/publication/pipeline/prepare-qualification/action.yml",
+        "inputs": [
+          "context",
+          "token"
+        ],
+        "inputCount": 2
+      },
+      {
+        "id": "publication/pipeline/qualify",
+        "path": "actions/publication/pipeline/qualify/action.yml",
+        "inputs": [
+          "context",
+          "token"
+        ],
+        "inputCount": 2
+      },
+      {
+        "id": "publication/pipeline/seal-qualification",
+        "path": "actions/publication/pipeline/seal-qualification/action.yml",
+        "inputs": [
+          "bundle-path",
+          "context",
+          "token"
+        ],
+        "inputCount": 3
+      },
+      {
+        "id": "publication/pipeline/settle",
+        "path": "actions/publication/pipeline/settle/action.yml",
+        "inputs": [
+          "context",
+          "pr-token",
+          "token"
+        ],
+        "inputCount": 3
+      },
       {
         "id": "publication/settlement/retain",
         "path": "actions/publication/settlement/retain/action.yml",
@@ -4911,6 +5057,8 @@
         "path": "actions/runtime/selection/resolve/action.yml",
         "inputs": [
           "contract-lock",
+          "pipeline-attempt",
+          "recovery-attempt",
           "resume-run-id",
           "runtime-ref",
           "selection",
@@ -4920,7 +5068,7 @@
           "workflow-ref",
           "workflow-sha"
         ],
-        "inputCount": 9
+        "inputCount": 11
       },
       {
         "id": "runtime/toolchain/user-paths",
@@ -5301,6 +5449,52 @@
         ],
         "inputCount": 3
       },
+      {
+        "id": "workflow/pipeline/build",
+        "path": "actions/workflow/pipeline/build/action.yml",
+        "inputs": [
+          "context",
+          "platform"
+        ],
+        "inputCount": 2
+      },
+      {
+        "id": "workflow/pipeline/control",
+        "path": "actions/workflow/pipeline/control/action.yml",
+        "inputs": [
+          "config-path",
+          "token"
+        ],
+        "inputCount": 2
+      },
+      {
+        "id": "workflow/pipeline/record-build",
+        "path": "actions/workflow/pipeline/record-build/action.yml",
+        "inputs": [
+          "context",
+          "token"
+        ],
+        "inputCount": 2
+      },
+      {
+        "id": "workflow/pipeline/recover",
+        "path": "actions/workflow/pipeline/recover/action.yml",
+        "inputs": [
+          "attempt",
+          "definition-sha",
+          "token"
+        ],
+        "inputCount": 3
+      },
+      {
+        "id": "workflow/pipeline/wake",
+        "path": "actions/workflow/pipeline/wake/action.yml",
+        "inputs": [
+          "attempt",
+          "token"
+        ],
+        "inputCount": 2
+      },
       {
         "id": "workflow/settlement/seal",
         "path": "actions/workflow/settlement/seal/action.yml",
@@ -10877,8 +11071,8 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "e43fdb0289df88871f3f0febbe04dcb9311a252a2b1df9b3a83a2d10c9d4a70f",
-    "workflowRegistryDigest": "cb8d12101109a846a0aeba5c5bf82078df437118e3cccbe9ab0d173112a6f88a",
-    "pageRegistryDigest": "6783dccba5aeb2044b6e2f7c7d78a3e47997a3163f7328a77ebdd0f4fdb087d4"
+    "workflowRegistryDigest": "1a7df19b7f6fb4f7955bd2cfd1cc2a4e938d80f32e2ab2bca45f7bed29aed104",
+    "pageRegistryDigest": "1ed4d2d9e29138620c27644ab92954ccc0d564ffd4c4b426a759a76724a54d4f"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-authority-registry.json

@@ -81,6 +81,36 @@
       "runnerPolicy": "unqualified",
       "notes": ""
     },
+    {
+      "workflowPath": ".github/workflows/.ops-pipeline-delivery.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.ops-pipeline-delivery.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.ops-pipeline-execute.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
     {
       "workflowPath": ".github/workflows/.release-authority.yml",
       "authorityClass": "evidence-publication",
@@ -109,6 +139,23 @@
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
+    {
+      "workflowPath": ".github/workflows/.release-pipeline-products.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
     {
       "workflowPath": ".github/workflows/.release-promote.yml",
       "authorityClass": "product-publication",
@@ -299,6 +346,40 @@
       "runnerPolicy": "unqualified",
       "notes": ""
     },
+    {
+      "workflowPath": ".github/workflows/public-ops-pipeline.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-recover.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
     {
       "workflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
       "authorityClass": "governance-write",
@@ -792,6 +873,21 @@
       "signals": [],
       "classified": true
     },
+    {
+      "path": ".github/workflows/.ops-pipeline-delivery.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.ops-pipeline-execute.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
     {
       "path": ".github/workflows/.release-authority.yml",
       "signals": [],
@@ -805,6 +901,14 @@
       ],
       "classified": true
     },
+    {
+      "path": ".github/workflows/.release-pipeline-products.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
     {
       "path": ".github/workflows/.release-promote.yml",
       "signals": [],
@@ -914,6 +1018,22 @@
       ],
       "classified": true
     },
+    {
+      "path": ".github/workflows/public-ops-pipeline.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/public-ops-recover.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
     {
       "path": ".github/workflows/public-ops-release-governance.yml",
       "signals": [],
@@ -1207,5 +1327,5 @@
       "classified": true
     }
   ],
-  "registryDigest": "536dca8dab8dd8e28018a6fd9ac023d0d116e0fdb612ecda870a0a2225a3f77b"
+  "registryDigest": "6dda3a3bc77be67600fe57c42cd6abe3d05744a6b3f3a49719b1a0395cba75b8"
 }

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-09-11T23:17:50.000Z",
-  "publishedAt": "2026-09-11T23:17:50.000Z",
+  "generatedAt": "2026-09-12T10:11:23.000Z",
+  "publishedAt": "2026-09-12T10:11:23.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "8e1dcc5aba732fd253dbb50dc910a3187c1e688a",
+  "sourceRevision": "11bec9f5220deefc640145fca8a9073707ebc2ab",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.3-alpha.0",
+    "version": "4.1.3-alpha.2",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-09-11T23:17:50.000Z",
-  "publishedAt": "2026-09-11T23:17:50.000Z",
+  "generatedAt": "2026-09-12T10:11:23.000Z",
+  "publishedAt": "2026-09-12T10:11:23.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "8e1dcc5aba732fd253dbb50dc910a3187c1e688a",
+  "sourceRevision": "11bec9f5220deefc640145fca8a9073707ebc2ab",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.3-alpha.0",
+    "version": "4.1.3-alpha.2",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -253,7 +253,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:b37478c7c5f6a4c09a89bb7f4dfe70c3ebcfa4cae21f25e09d16f499bf526afb"
+      "digest": "sha256:23782a5348b073974490eee5e79e4fe0d614d75c1a884d5899730f75a9da01f2"
     },
     {
       "id": "build-facts",