@async/pipeline 0.9.4 → 0.9.6

package/dist/internal/node/github.js

@@ -3,9 +3,10 @@ import { existsSync } from "node:fs";
 import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";
 import { dirname, join, relative, resolve } from "node:path";
 import { githubConfigForJob, pipelineError } from "../core/index.js";
+import { sourceImpactPlanForJob } from "./sources.js";
 export const GITHUB_WORKFLOW_PATH = ".github/workflows/async-pipeline.yml";
 export const GITHUB_LOCK_PATH = ".github/async-pipeline.lock.json";
-const GENERATOR_VERSION = 15;
+const GENERATOR_VERSION = 17;
 const DEFAULT_NODE_VERSION = "24";
 const DEFAULT_DENO_VERSION = "2";
 const DEFAULT_PNPM_VERSION = "11.1.0";
@@ -19,8 +20,8 @@ function defineActionRef(id, uses, sha, label) {
         ref: `${uses}@${sha} # ${label}`
     };
 }
-const ASYNC_ACTIONS_SHA = "e91fb515670a66c0694936c079de4061f6306d43";
-const ASYNC_ACTIONS_LABEL = "v0.1.6";
+const ASYNC_ACTIONS_SHA = "1b1a167072f242ed200f8f5ec7cdf10c8a9ae241";
+const ASYNC_ACTIONS_LABEL = "v0.1.8";
 const GENERATED_ACTIONS = [
     defineActionRef("async.actions.setup", "async/actions/setup", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
     defineActionRef("async.actions.run", "async/actions/run", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
@@ -29,8 +30,9 @@ const GENERATED_ACTIONS = [
     defineActionRef("async.actions.publish", "async/actions/publish", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
     defineActionRef("async.actions.dependabot-merge", "async/actions/dependabot-merge", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
     defineActionRef("async.actions.evidence", "async/actions/evidence", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
+    defineActionRef("async.actions.source-impact", "async/actions/source-impact", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
+    defineActionRef("async.actions.cache", "async/actions/cache", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
     defineActionRef("actions.checkout", "actions/checkout", "de0fac2e4500dabe0009e67214ff5f5447ce83dd", "v6.0.2"),
-    defineActionRef("actions.cache", "actions/cache", "0057852bfaa89a56745cba8c7296529d2fc39830", "v4"),
     defineActionRef("pnpm.setup", "pnpm/setup", "cf03a9b516e09bc5a90f041fc26fc930c9dc631b", "v1.0.0"),
     defineActionRef("deno.setup", "denoland/setup-deno", "667a34cdef165d8d2b2e98dde39547c9daac7282", "v2.0.4"),
     defineActionRef("actions.setup-node", "actions/setup-node", "48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e", "v6"),
@@ -46,8 +48,9 @@ const ASYNC_PREVIEW_ACTION = actionRef("async.actions.preview");
 const ASYNC_PUBLISH_ACTION = actionRef("async.actions.publish");
 const ASYNC_DEPENDABOT_MERGE_ACTION = actionRef("async.actions.dependabot-merge");
 const ASYNC_EVIDENCE_ACTION = actionRef("async.actions.evidence");
+const ASYNC_SOURCE_IMPACT_ACTION = actionRef("async.actions.source-impact");
+const ASYNC_CACHE_ACTION = actionRef("async.actions.cache");
 const CHECKOUT_ACTION = actionRef("actions.checkout");
-const CACHE_ACTION = actionRef("actions.cache");
 const PNPM_SETUP_ACTION = actionRef("pnpm.setup");
 const DENO_SETUP_ACTION = actionRef("deno.setup");
 const SETUP_NODE_ACTION = actionRef("actions.setup-node");
@@ -65,6 +68,7 @@ export async function renderGitHubWorkflow(pipeline, options) {
     const packageInfo = await readPackageInfo(options.cwd);
     const renderModel = buildRenderModel(pipeline, {
         ...packageInfo,
+        cwd: options.cwd,
         configPath: relativePath(options.cwd, options.configPath),
         workflowPath
     });
@@ -88,6 +92,7 @@ export async function renderGitHubWorkflow(pipeline, options) {
         dependabotAutoMerge: renderModel.dependabotAutoMerge,
         packagePreviews: renderModel.packagePreviews,
         evidence: renderModel.evidence,
+        sourceImpact: renderModel.sourceImpact,
         bridge: renderModel.bridge,
         pages: renderModel.pages,
         manualDispatchJobs: renderModel.manualDispatchJobs,
@@ -116,6 +121,7 @@ export async function renderGitHubWorkflow(pipeline, options) {
         dependabotAutoMerge: renderModel.dependabotAutoMerge,
         packagePreviews: renderModel.packagePreviews,
         evidence: renderModel.evidence,
+        sourceImpact: renderModel.sourceImpact,
         bridge: renderModel.bridge,
         pages: renderModel.pages,
         manualDispatchJobs: renderModel.manualDispatchJobs
@@ -264,25 +270,38 @@ function buildRenderModel(pipeline, options) {
     const nodeVersion = pipeline.sync.github.nodeVersion ?? DEFAULT_NODE_VERSION;
     const runtime = resolveRuntimeSpecs(pipeline.sync.github.runtime, options.projectKind, nodeVersion);
     const setup = resolveGitHubSetup(pipeline.sync.github.setup, options.packageManager, options.packageManagerVersion);
+    const jobs = Object.values(pipeline.jobs)
+        .map((job) => ({
+        id: job.id,
+        target: [...job.target],
+        trigger: [...job.trigger],
+        env: { ...pipeline.env, ...(job.env ?? {}) },
+        environment: job.environment,
+        requires: job.requires,
+        execution: job.execution,
+        github: githubConfigForJob(pipeline, job),
+        if: renderGitHubJobCondition(job, pipeline.triggers)
+    }))
+        .sort((left, right) => left.id.localeCompare(right.id));
+    const sourceImpactJobs = resolveGitHubSourceImpactJobs(pipeline, options.cwd, jobs);
+    const sourceImpact = {
+        ...pipeline.sync.github.sourceImpact,
+        generatedJobs: sourceImpactJobs.map((job) => ({
+            job: job.job,
+            planJob: job.planJob,
+            matrixJob: job.matrixJob,
+            matrixRows: job.plan.matrix.include.length,
+            sources: Object.keys(job.plan.sources).sort((left, right) => left.localeCompare(right))
+        }))
+    };
     return {
         name: "Async Pipeline",
         configPath: options.configPath,
         workflowPath: options.workflowPath,
         projectKind: options.projectKind,
         triggers,
-        jobs: Object.values(pipeline.jobs)
-            .map((job) => ({
-            id: job.id,
-            target: [...job.target],
-            trigger: [...job.trigger],
-            env: { ...pipeline.env, ...(job.env ?? {}) },
-            environment: job.environment,
-            requires: job.requires,
-            execution: job.execution,
-            github: githubConfigForJob(pipeline, job),
-            if: renderGitHubJobCondition(job, pipeline.triggers)
-        }))
-            .sort((left, right) => left.id.localeCompare(right.id)),
+        jobs,
+        sourceImpactJobs,
         tasks: pipeline.tasks,
         packageManager: options.packageManager,
         packageManagerVersion: options.packageManagerVersion,
@@ -297,6 +316,7 @@ function buildRenderModel(pipeline, options) {
         dependabotAutoMerge: pipeline.sync.github.dependabotAutoMerge,
         packagePreviews,
         evidence,
+        sourceImpact,
         bridge,
         pages,
         manualDispatchJobs
@@ -315,6 +335,63 @@ function resolveGitHubEvidence(pipeline) {
     }
     return config;
 }
+function resolveGitHubSourceImpactJobs(pipeline, cwd, jobs) {
+    const config = pipeline.sync.github.sourceImpact;
+    if (!config.enabled)
+        return [];
+    const jobsById = new Map(jobs.map((job) => [job.id, job]));
+    const explicitJobs = new Set(config.jobs);
+    const selectedJobIds = config.jobs.length > 0 ? config.jobs : jobs.map((job) => job.id);
+    const generatedIds = new Set([
+        "package-preview",
+        "dependabot-auto-merge",
+        "async-bridge",
+        pipeline.sync.github.evidence.job,
+        pipeline.sync.github.pages.job
+    ].map((id) => id.toLowerCase()));
+    const existingJobIds = new Set(Object.keys(pipeline.jobs).map((id) => id.toLowerCase()));
+    const result = [];
+    for (const jobId of selectedJobIds) {
+        const job = jobsById.get(jobId);
+        if (!job) {
+            throw pipelineError("ASYNC_PIPELINE_GITHUB_SOURCE_IMPACT_INVALID", `sync.github.sourceImpact references missing job "${jobId}".`);
+        }
+        if (job.github?.runsOnMatrix) {
+            throw pipelineError("ASYNC_PIPELINE_GITHUB_SOURCE_IMPACT_INVALID", `sync.github.sourceImpact cannot target job "${jobId}" because that job already uses github.runsOnMatrix.`);
+        }
+        const plan = sourceImpactPlanForJob(pipeline, cwd, jobId);
+        if (plan.matrix.include.length === 0) {
+            if (explicitJobs.has(jobId)) {
+                throw pipelineError("ASYNC_PIPELINE_GITHUB_SOURCE_IMPACT_INVALID", `sync.github.sourceImpact job "${jobId}" has no source task refs.`);
+            }
+            continue;
+        }
+        const generatedJobPrefix = safeGeneratedJobId(jobId);
+        const planJob = `${generatedJobPrefix}-source-plan`;
+        const matrixJob = `${generatedJobPrefix}-sources`;
+        for (const generatedJob of [planJob, matrixJob]) {
+            const generatedJobKey = generatedJob.toLowerCase();
+            if (existingJobIds.has(generatedJobKey)) {
+                throw pipelineError("ASYNC_PIPELINE_GITHUB_SOURCE_IMPACT_JOB_CONFLICT", `Generated source-impact job "${generatedJob}" conflicts with an existing pipeline job.`);
+            }
+            if (generatedIds.has(generatedJobKey)) {
+                throw pipelineError("ASYNC_PIPELINE_GITHUB_SOURCE_IMPACT_JOB_CONFLICT", `Generated source-impact job "${generatedJob}" conflicts with another generated GitHub job.`);
+            }
+            generatedIds.add(generatedJobKey);
+        }
+        result.push({
+            job: jobId,
+            planJob,
+            matrixJob,
+            planPath: `.async/actions/source-impact/${safeArtifactPart(jobId)}-source-plan.json`,
+            plan,
+            if: job.if,
+            github: job.github,
+            env: job.env
+        });
+    }
+    return result.sort((left, right) => left.job.localeCompare(right.job));
+}
 function resolveGitHubBridge(pipeline) {
     const config = pipeline.sync.github.bridge;
     const actionsJobEnabled = gitHubBridgeActionsEnabled(config);
@@ -466,6 +543,10 @@ function renderWorkflow(model) {
             renderPagesDeployJob(lines, job);
         }
     }
+    for (const sourceJob of model.sourceImpactJobs) {
+        renderSourceImpactPlanJob(lines, model, sourceJob);
+        renderSourceImpactMatrixJob(lines, model, sourceJob);
+    }
     if (model.pages.enabled) {
         renderGeneratedPagesJob(lines, model);
         renderPagesDeployJob(lines, {
@@ -538,18 +619,7 @@ function renderJob(lines, model, job) {
         if (pullRequests)
             lines.push(`      pull-requests: ${pullRequests}`);
     }
-    lines.push("    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "", ...(model.taskCache
-        ? [
-            "      - name: Restore task cache",
-            `        uses: ${CACHE_ACTION}`,
-            "        with:",
-            "          path: .async/cache",
-            "          key: async-pipeline-${{ runner.os }}-${{ github.sha }}",
-            "          restore-keys: |",
-            "            async-pipeline-${{ runner.os }}-",
-            ""
-        ]
-        : []), ...renderSetupSteps(model), ...(idToken === "write"
+    lines.push("    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "", ...renderSetupSteps(model), ...(idToken === "write"
         ? [
             "      - name: Use current npm",
             "        run: npm install -g npm@11.16.0",
@@ -559,6 +629,7 @@ function renderJob(lines, model, job) {
     if (model.buildCommand) {
         lines.push("", "      - name: Build pipeline CLI", `        run: ${model.buildCommand}`);
     }
+    renderTaskCacheRestoreSteps(lines, model, { kind: "job", id: job.id });
     const lifecyclePlan = resolveLifecycleJobPlan(model, job);
     if (lifecyclePlan) {
         renderLifecycleJobPlan(lines, model, job, lifecyclePlan);
@@ -566,6 +637,7 @@ function renderJob(lines, model, job) {
     else {
         renderRunActionStep(lines, "Run pipeline job", `${model.command} github check && ${model.command} run ${shellWord(job.id)}${job.execution ? ` --execution ${shellWord(job.execution)}` : ""}`, job.env);
     }
+    renderTaskCacheSaveSteps(lines, model, { kind: "job", id: job.id });
     if (job.github?.pages) {
         lines.push("");
         renderPagesBuildSteps(lines, job.github.pages);
@@ -573,26 +645,71 @@ function renderJob(lines, model, job) {
     renderEvidenceCollectStep(lines, model, { matrix: Boolean(runnerMatrix && runnerMatrix.length > 0) });
     lines.push("");
 }
+function renderSourceImpactPlanJob(lines, model, sourceJob) {
+    const runsOn = sourceJob.github?.runsOn ?? "ubuntu-latest";
+    lines.push(`  ${yamlKey(sourceJob.planJob)}:`, `    name: ${sourceJob.planJob}`);
+    if (sourceJob.if) {
+        lines.push(`    if: ${sourceJob.if}`);
+    }
+    lines.push(`    runs-on: ${Array.isArray(runsOn) ? JSON.stringify(runsOn) : runsOn}`, "    permissions:", "      contents: read", "    outputs:", "      matrix: ${{ steps.source-plan.outputs.matrix }}", "    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "", ...renderSetupSteps(model));
+    renderWriteSourceImpactPlanStep(lines, sourceJob);
+    lines.push("", "      - name: Plan source impact matrix", "        id: source-plan", `        uses: ${ASYNC_SOURCE_IMPACT_ACTION}`, "        with:", "          mode: plan", `          source-plan: ${sourceJob.planPath}`, "          output-matrix: true");
+    renderEvidenceCollectStep(lines, model);
+    lines.push("");
+}
+function renderSourceImpactMatrixJob(lines, model, sourceJob) {
+    const runsOn = sourceJob.github?.runsOn ?? "ubuntu-latest";
+    lines.push(`  ${yamlKey(sourceJob.matrixJob)}:`, `    name: ${sourceJob.job} source (\${{ matrix.source }}:\${{ matrix.taskId }})`, `    needs: ${JSON.stringify(sourceJob.planJob)}`, `    if: \${{ always() && needs['${sourceJob.planJob}'].result == 'success' }}`, "    strategy:", "      fail-fast: false", `      matrix: \${{ fromJSON(needs['${sourceJob.planJob}'].outputs.matrix || '{"include":[]}') }}`, `    runs-on: ${Array.isArray(runsOn) ? JSON.stringify(runsOn) : runsOn}`, "    permissions:", "      contents: read", "    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "", ...renderSetupSteps(model), ...renderDependencyInstallSteps(model));
+    if (model.buildCommand) {
+        lines.push("", "      - name: Build pipeline CLI", `        run: ${model.buildCommand}`);
+    }
+    renderWriteSourceImpactPlanStep(lines, sourceJob);
+    lines.push("", "      - name: Validate source checkout", `        uses: ${ASYNC_SOURCE_IMPACT_ACTION}`, "        with:", "          mode: checkout", `          source-plan: ${sourceJob.planPath}`, "          source-id: ${{ matrix.source }}", "          ref: ${{ matrix.ref }}", "          path: ${{ matrix.path }}", "", "      - name: Prepare source checkout", `        uses: ${ASYNC_SOURCE_IMPACT_ACTION}`, "        with:", "          mode: prepare", `          source-plan: ${sourceJob.planPath}`, "          source-id: ${{ matrix.source }}", "          path: ${{ matrix.path }}");
+    renderTaskCacheRestoreSteps(lines, model, {
+        kind: "task",
+        id: "\"${{ matrix.task }}\"",
+        manifestPath: ".async/actions/cache/${{ matrix.source }}-${{ matrix.taskId }}-cache-manifest.json"
+    });
+    renderRunActionStep(lines, "Run source task", `${model.command} github check && ${model.command} run-task "\${{ matrix.task }}"`, scopeActionEnv(sourceJob.env, new Set()), { artifactName: "async-pipeline-${{ github.job }}-${{ matrix.source }}-${{ matrix.taskId }}-runs" });
+    renderTaskCacheSaveSteps(lines, model, {
+        kind: "task",
+        id: "\"${{ matrix.task }}\"",
+        manifestPath: ".async/actions/cache/${{ matrix.source }}-${{ matrix.taskId }}-cache-manifest.json"
+    });
+    renderEvidenceCollectStep(lines, model, { matrix: true });
+    lines.push("");
+}
+function renderTaskCacheRestoreSteps(lines, model, target) {
+    if (!model.taskCache)
+        return;
+    const manifestPath = target.manifestPath ?? `.async/actions/cache/${safeArtifactPart(target.id)}-cache-manifest.json`;
+    lines.push("", "      - name: Write task cache manifest", `        run: ${renderCacheManifestCommand(model, target, manifestPath, "read-only")}`, "", "      - name: Restore Async task cache", "        id: async-cache-restore", `        uses: ${ASYNC_CACHE_ACTION}`, "        with:", "          mode: restore", `          manifest: ${manifestPath}`, "          trust: read-only");
+}
+function renderTaskCacheSaveSteps(lines, model, target) {
+    if (!model.taskCache)
+        return;
+    const manifestPath = target.manifestPath ?? `.async/actions/cache/${safeArtifactPart(target.id)}-cache-manifest.json`;
+    lines.push("", "      - name: Save Async task cache", "        if: ${{ success() && github.event_name != 'pull_request' && steps.async-cache-restore.outputs.cache-hit != 'true' }}", `        uses: ${ASYNC_CACHE_ACTION}`, "        with:", "          mode: save", `          manifest: ${manifestPath}`, "          trust: read-write");
+}
+function renderCacheManifestCommand(model, target, manifestPath, trust) {
+    const targetFlag = target.kind === "job" ? "--job" : "--task";
+    return `${model.command} cache manifest ${targetFlag} ${target.id.startsWith("\"") ? target.id : shellWord(target.id)} --output ${shellWord(manifestPath)} --trust ${trust}`;
+}
+function renderWriteSourceImpactPlanStep(lines, sourceJob) {
+    const planJson = JSON.stringify(sourceJob.plan, null, 2);
+    lines.push("", "      - name: Write generated source plan", "        run: |", `          mkdir -p ${shellWord(dirname(sourceJob.planPath))}`, `          cat > ${shellWord(sourceJob.planPath)} <<'ASYNC_SOURCE_PLAN'`, ...planJson.split("\n").map((line) => `          ${line}`), "          ASYNC_SOURCE_PLAN");
+}
 function renderGeneratedPagesJob(lines, model) {
     const pages = model.pages;
     if (!pages.target)
         return;
-    lines.push(`  ${yamlKey(pages.job)}:`, `    name: ${pages.job}`, `    if: ${renderGeneratedPagesCondition(pages)}`, "    runs-on: ubuntu-latest", "    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "", ...(model.taskCache
-        ? [
-            "      - name: Restore task cache",
-            `        uses: ${CACHE_ACTION}`,
-            "        with:",
-            "          path: .async/cache",
-            "          key: async-pipeline-${{ runner.os }}-${{ github.sha }}",
-            "          restore-keys: |",
-            "            async-pipeline-${{ runner.os }}-",
-            ""
-        ]
-        : []), ...renderSetupSteps(model), ...renderDependencyInstallSteps(model));
+    lines.push(`  ${yamlKey(pages.job)}:`, `    name: ${pages.job}`, `    if: ${renderGeneratedPagesCondition(pages)}`, "    runs-on: ubuntu-latest", "    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "", ...renderSetupSteps(model), ...renderDependencyInstallSteps(model));
     if (model.buildCommand) {
         lines.push("", "      - name: Build pipeline CLI", `        run: ${model.buildCommand}`);
     }
+    renderTaskCacheRestoreSteps(lines, model, { kind: "task", id: pages.target });
     renderRunActionStep(lines, "Run Pages target", `${model.command} github check && ${model.command} run-task ${shellWord(pages.target)}`, {});
+    renderTaskCacheSaveSteps(lines, model, { kind: "task", id: pages.target });
     lines.push("");
     renderPagesBuildSteps(lines, pages);
     renderEvidenceCollectStep(lines, model);
@@ -887,44 +1004,28 @@ function splitShellWords(command) {
 function safeArtifactPart(value) {
     return value.replace(/[^A-Za-z0-9_.-]+/gu, "-");
 }
+function safeGeneratedJobId(value) {
+    const normalized = value.toLowerCase().replace(/[^a-z0-9_-]+/gu, "-").replace(/^-+|-+$/gu, "");
+    return normalized || "job";
+}
 function renderPackagePreviewJob(lines, model) {
     const preview = model.packagePreviews;
     if (!preview.package || !preview.target)
         return;
-    lines.push("  package-preview:", "    name: package-preview", "    if: github.event_name == 'pull_request' && github.event.pull_request.draft == false", "    runs-on: ubuntu-latest", "    permissions:", "      contents: read", "      issues: write", "      packages: write", "      pull-requests: write", "    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "        with:", "          persist-credentials: false", "", ...(model.taskCache
-        ? [
-            "      - name: Restore task cache",
-            `        uses: ${CACHE_ACTION}`,
-            "        with:",
-            "          path: .async/cache",
-            "          key: async-pipeline-${{ runner.os }}-${{ github.sha }}",
-            "          restore-keys: |",
-            "            async-pipeline-${{ runner.os }}-",
-            ""
-        ]
-        : []), ...renderSetupSteps(model), ...renderDependencyInstallSteps(model));
+    lines.push("  package-preview:", "    name: package-preview", "    if: github.event_name == 'pull_request' && github.event.pull_request.draft == false", "    runs-on: ubuntu-latest", "    permissions:", "      contents: read", "      issues: write", "      packages: write", "      pull-requests: write", "    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "        with:", "          persist-credentials: false", "", ...renderSetupSteps(model), ...renderDependencyInstallSteps(model));
     if (model.buildCommand) {
         lines.push("", "      - name: Build pipeline CLI", `        run: ${model.buildCommand}`);
     }
+    renderTaskCacheRestoreSteps(lines, model, { kind: "task", id: preview.target, manifestPath: ".async/actions/cache/package-preview-cache-manifest.json" });
     renderRunActionStep(lines, "Run package preview target", `${model.command} github check && ${model.command} run-task ${shellWord(preview.target)}`, {});
+    renderTaskCacheSaveSteps(lines, model, { kind: "task", id: preview.target, manifestPath: ".async/actions/cache/package-preview-cache-manifest.json" });
     lines.push("", "      - name: Publish package preview", `        uses: ${ASYNC_PREVIEW_ACTION}`, "        with:", `          package-path: ${JSON.stringify(preview.package)}`, `          target-registry: ${JSON.stringify(preview.registry)}`, ...(preview.namespace ? [`          namespace: ${JSON.stringify(preview.namespace)}`] : []), "          mode: pr", `          comment: ${preview.comment ? "true" : "false"}`, `          token-env-name: ${JSON.stringify(preview.tokenEnv)}`, "        env:", "          CI: true", `          ${preview.tokenEnv}: \${{ secrets.${preview.tokenEnv} }}`);
     renderEvidenceCollectStep(lines, model);
     lines.push("");
 }
 function renderBridgeJob(lines, model) {
     const bridge = model.bridge;
-    lines.push(`  ${bridge.job}:`, `    name: ${bridge.job}`, `    if: ${renderBridgeCondition(bridge)}`, "    runs-on: ubuntu-latest", "    permissions:", "      contents: write", "      pull-requests: write", "    concurrency:", "      group: async-bridge-${{ github.repository }}", "      cancel-in-progress: false", "    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "        with:", "          persist-credentials: false", "", ...(model.taskCache
-        ? [
-            "      - name: Restore task cache",
-            `        uses: ${CACHE_ACTION}`,
-            "        with:",
-            "          path: .async/cache",
-            "          key: async-pipeline-${{ runner.os }}-${{ github.sha }}",
-            "          restore-keys: |",
-            "            async-pipeline-${{ runner.os }}-",
-            ""
-        ]
-        : []), ...renderSetupSteps(model), ...renderDependencyInstallSteps(model));
+    lines.push(`  ${bridge.job}:`, `    name: ${bridge.job}`, `    if: ${renderBridgeCondition(bridge)}`, "    runs-on: ubuntu-latest", "    permissions:", "      contents: write", "      pull-requests: write", "    concurrency:", "      group: async-bridge-${{ github.repository }}", "      cancel-in-progress: false", "    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "        with:", "          persist-credentials: false", "", ...renderSetupSteps(model), ...renderDependencyInstallSteps(model));
     if (model.buildCommand) {
         lines.push("", "      - name: Build pipeline CLI", `        run: ${model.buildCommand}`);
     }
@@ -967,6 +1068,10 @@ function renderEvidenceFanInJob(lines, model) {
 }
 function evidenceProducerJobIds(model) {
     const ids = new Set(model.jobs.map((job) => job.id));
+    for (const sourceJob of model.sourceImpactJobs) {
+        ids.add(sourceJob.planJob);
+        ids.add(sourceJob.matrixJob);
+    }
     if (model.pages.enabled)
         ids.add(model.pages.job);
     if (model.packagePreviews.enabled)