@kungfu-tech/buildchain 2.12.4 → 2.12.5-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/bin/buildchain.mjs +3 -0
  2. package/dist/site/agent-index.json +1 -0
  3. package/dist/site/artifact-schemas.json +1 -0
  4. package/dist/site/buildchain-contract.json +2008 -12
  5. package/dist/site/buildchain-site.json +74 -11
  6. package/dist/site/capability-registry.json +4 -3
  7. package/dist/site/controller-registry.json +1626 -0
  8. package/dist/site/kfd-claims.json +88 -74
  9. package/dist/site/kfd-upstream-aggregate.json +1 -1
  10. package/dist/site/manual-registry.json +18 -2
  11. package/dist/site/node-api-registry.json +20 -7
  12. package/dist/site/page-registry.json +58 -5
  13. package/dist/site/public-surface-audit.json +572 -102
  14. package/dist/site/publication-registry.json +4 -4
  15. package/dist/site/release-provenance.json +2 -0
  16. package/dist/site/site-manifest.json +15 -6
  17. package/dist/site/workflow-registry.json +534 -68
  18. package/docs/MAP.md +2 -1
  19. package/docs/controller-evidence.md +113 -0
  20. package/docs/release-passport.md +6 -0
  21. package/package.json +3 -1
  22. package/packages/core/buildchain-contract.js +62 -1
  23. package/packages/core/buildchain-kfd-claims.js +3 -0
  24. package/packages/core/controller-evidence.js +505 -0
  25. package/packages/core/index.js +17 -0
  26. package/packages/core/public-surface-audit.js +40 -3
  27. package/packages/core/release-candidate.js +26 -0
  28. package/packages/core/release-passport.js +19 -0
  29. package/scripts/check-inventory.mjs +4 -1
  30. package/scripts/controller-evidence.mjs +170 -0
  31. package/scripts/generate-channel-build-workflow.mjs +141 -2
  32. package/scripts/generate-release-candidate-passport.mjs +4 -0
  33. package/scripts/generate-site-bundle.mjs +11 -1
package/dist/site/public-surface-audit.json CHANGED
@@ -6,7 +6,7 @@
6
6
  "cliCommandCount": 76,
7
7
  "workflowCount": 43,
8
8
  "actionCount": 4,
9
- "sitePageCount": 47,
9
+ "sitePageCount": 48,
10
10
  "docCommandRefCount": 241,
11
11
  "failureCount": 0
12
12
  },
@@ -397,6 +397,7 @@
397
397
  {
398
398
  "id": ".build",
399
399
  "path": ".github/workflows/.build.yml",
400
+ "reusable": true,
400
401
  "inputs": [
401
402
  "artifact-name",
402
403
  "artifact-name-template",
@@ -457,17 +458,73 @@
457
458
  "verify-command",
458
459
  "working-directory"
459
460
  ],
460
- "inputCount": 58
461
+ "inputCount": 58,
462
+ "secrets": [
463
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
464
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
465
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN"
466
+ ],
467
+ "secretCount": 3,
468
+ "outputs": [
469
+ "build-diagnostics-summary-artifact",
470
+ "build-diagnostics-summary-json",
471
+ "build-summary-artifact",
472
+ "build-summary-json",
473
+ "buildchain-contract-digest",
474
+ "buildchain-contract-lock-drift",
475
+ "buildchain-contract-lock-status",
476
+ "buildchain-runtime-class",
477
+ "buildchain-runtime-override",
478
+ "buildchain-runtime-ref",
479
+ "buildchain-runtime-sha",
480
+ "buildchain-runtime-trust-decision",
481
+ "controller-plan-artifact",
482
+ "controller-plan-digest",
483
+ "controller-plan-json",
484
+ "controller-receipt-artifact",
485
+ "controller-receipt-digest",
486
+ "controller-receipt-json",
487
+ "controller-receipt-status",
488
+ "linux-container-enabled",
489
+ "linux-container-image",
490
+ "platform-count",
491
+ "platforms-json",
492
+ "publish-allowed",
493
+ "publish-channel",
494
+ "publish-reason",
495
+ "publish-source-channel",
496
+ "publish-source-consumer-version",
497
+ "publish-source-line",
498
+ "publish-source-locked",
499
+ "publish-source-ref",
500
+ "publish-source-sha",
501
+ "publish-source-tree-sha",
502
+ "release-candidate-artifact",
503
+ "release-candidate-passport-artifact",
504
+ "release-candidate-passport-json",
505
+ "release-manifest-json",
506
+ "runner-preset",
507
+ "trusted-event"
508
+ ],
509
+ "outputCount": 39
461
510
  },
462
511
  {
463
512
  "id": ".bump-minor-version",
464
513
  "path": ".github/workflows/.bump-minor-version.yml",
514
+ "reusable": true,
465
515
  "inputs": [],
466
- "inputCount": 0
516
+ "inputCount": 0,
517
+ "secrets": [
518
+ "GITHUB_PUSH_TOKEN"
519
+ ],
520
+ "secretCount": 1,
521
+ "outputs": [],
522
+ "outputCount": 0
467
523
  },
468
524
  {
469
525
  "id": ".gate-profile",
470
526
  "path": ".github/workflows/.gate-profile.yml",
527
+ "reusable": true,
471
528
  "inputs": [
472
529
  "artifact-name",
473
530
  "artifact-retention-days",
@@ -489,29 +546,67 @@
489
546
  "untrusted-policy",
490
547
  "working-directory"
491
548
  ],
492
- "inputCount": 19
549
+ "inputCount": 19,
550
+ "secrets": [],
551
+ "secretCount": 0,
552
+ "outputs": [
553
+ "buildchain-runtime-sha",
554
+ "controller-plan-artifact",
555
+ "controller-plan-digest",
556
+ "controller-plan-json",
557
+ "controller-receipt-artifact",
558
+ "controller-receipt-digest",
559
+ "controller-receipt-json",
560
+ "controller-receipt-status",
561
+ "gate-aggregate-artifact",
562
+ "gate-aggregate-digest",
563
+ "gate-aggregate-json",
564
+ "gate-aggregate-status",
565
+ "gate-matrix-digest",
566
+ "source-sha"
567
+ ],
568
+ "outputCount": 14
493
569
  },
494
570
  {
495
571
  "id": ".release-docker",
496
572
  "path": ".github/workflows/.release-docker.yml",
573
+ "reusable": true,
497
574
  "inputs": [
498
575
  "image-name"
499
576
  ],
500
- "inputCount": 1
577
+ "inputCount": 1,
578
+ "secrets": [
579
+ "DOCKER_HUB_PASSWORD",
580
+ "DOCKER_HUB_USERNAME",
581
+ "GITHUB_PUSH_TOKEN"
582
+ ],
583
+ "secretCount": 3,
584
+ "outputs": [],
585
+ "outputCount": 0
501
586
  },
502
587
  {
503
588
  "id": ".release-elastic-beanstalk",
504
589
  "path": ".github/workflows/.release-elastic-beanstalk.yml",
590
+ "reusable": true,
505
591
  "inputs": [
506
592
  "aws-region",
507
593
  "eb-application-name",
508
594
  "eb-environment-name"
509
595
  ],
510
- "inputCount": 3
596
+ "inputCount": 3,
597
+ "secrets": [
598
+ "AWS_USER_ACCESS_KEY_ID",
599
+ "AWS_USER_SECRET_ACCESS_KEY",
600
+ "GITHUB_PUSH_TOKEN"
601
+ ],
602
+ "secretCount": 3,
603
+ "outputs": [],
604
+ "outputCount": 0
511
605
  },
512
606
  {
513
607
  "id": ".release-new-version",
514
608
  "path": ".github/workflows/.release-new-version.yml",
609
+ "reusable": true,
515
610
  "inputs": [
516
611
  "action-bump-version-path",
517
612
  "action-bump-version-ref",
@@ -541,11 +636,25 @@
541
636
  "publish-release-note",
542
637
  "sync-extensions-version"
543
638
  ],
544
- "inputCount": 27
639
+ "inputCount": 27,
640
+ "secrets": [
641
+ "AIRTABLE_API_KEY",
642
+ "AWS_CI_ACCESS_KEY_ID",
643
+ "AWS_CI_SECRET_ACCESS_KEY",
644
+ "AWS_USER_ACCESS_KEY_ID",
645
+ "AWS_USER_SECRET_ACCESS_KEY",
646
+ "GITHUB_PUSH_TOKEN",
647
+ "MONDAY_API_KEY",
648
+ "NPM_PUSH_TOKEN"
649
+ ],
650
+ "secretCount": 8,
651
+ "outputs": [],
652
+ "outputCount": 0
545
653
  },
546
654
  {
547
655
  "id": ".release-verify",
548
656
  "path": ".github/workflows/.release-verify.yml",
657
+ "reusable": true,
549
658
  "inputs": [
550
659
  "auto-approve-enabled",
551
660
  "aws-ci-region",
@@ -589,33 +698,65 @@
589
698
  "use-pipenv",
590
699
  "use-poetry"
591
700
  ],
592
- "inputCount": 41
701
+ "inputCount": 41,
702
+ "secrets": [
703
+ "APPLE_CSC_KEY",
704
+ "APPLE_CSC_KEY_PASSWORD",
705
+ "APPLE_ID",
706
+ "APPLE_ID_PASSWORD",
707
+ "AWS_CI_ACCESS_KEY_ID",
708
+ "AWS_CI_SECRET_ACCESS_KEY",
709
+ "AWS_USER_ACCESS_KEY_ID",
710
+ "AWS_USER_SECRET_ACCESS_KEY",
711
+ "GITHUB_PUSH_TOKEN",
712
+ "NODE_AUTH_TOKEN",
713
+ "WINDOWS_CSC_KEY"
714
+ ],
715
+ "secretCount": 11,
716
+ "outputs": [],
717
+ "outputCount": 0
593
718
  },
594
719
  {
595
720
  "id": ".sam-release",
596
721
  "path": ".github/workflows/.sam-release.yml",
722
+ "reusable": true,
597
723
  "inputs": [
598
724
  "aws-region",
599
725
  "aws-role",
600
726
  "aws-root",
601
727
  "bucket-release"
602
728
  ],
603
- "inputCount": 4
729
+ "inputCount": 4,
730
+ "secrets": [
731
+ "AWS_ACCOUNT_ID"
732
+ ],
733
+ "secretCount": 1,
734
+ "outputs": [],
735
+ "outputCount": 0
604
736
  },
605
737
  {
606
738
  "id": ".sam-verify",
607
739
  "path": ".github/workflows/.sam-verify.yml",
740
+ "reusable": true,
608
741
  "inputs": [
609
742
  "aws-region",
610
743
  "aws-role",
611
744
  "aws-root",
612
745
  "manager"
613
746
  ],
614
- "inputCount": 4
747
+ "inputCount": 4,
748
+ "secrets": [
749
+ "AWS_ACCOUNT_ID",
750
+ "NODE_AUTH_TOKEN"
751
+ ],
752
+ "secretCount": 2,
753
+ "outputs": [],
754
+ "outputCount": 0
615
755
  },
616
756
  {
617
757
  "id": ".sync-release-page",
618
758
  "path": ".github/workflows/.sync-release-page.yml",
759
+ "reusable": true,
619
760
  "inputs": [
620
761
  "aws-region",
621
762
  "aws-role-arn",
@@ -631,22 +772,38 @@
631
772
  "repo",
632
773
  "upper-edge"
633
774
  ],
634
- "inputCount": 13
775
+ "inputCount": 13,
776
+ "secrets": [
777
+ "AIRTABLE_API_KEY",
778
+ "GITHUB_PUSH_TOKEN"
779
+ ],
780
+ "secretCount": 2,
781
+ "outputs": [],
782
+ "outputCount": 0
635
783
  },
636
784
  {
637
785
  "id": ".sync-remote-git",
638
786
  "path": ".github/workflows/.sync-remote-git.yml",
787
+ "reusable": true,
639
788
  "inputs": [
640
789
  "force",
641
790
  "remote-host",
642
791
  "remote-path",
643
792
  "remote-repo"
644
793
  ],
645
- "inputCount": 4
794
+ "inputCount": 4,
795
+ "secrets": [
796
+ "REMOTE_CREDENTIAL",
797
+ "REMOTE_USER"
798
+ ],
799
+ "secretCount": 2,
800
+ "outputs": [],
801
+ "outputCount": 0
646
802
  },
647
803
  {
648
804
  "id": ".web-surface",
649
805
  "path": ".github/workflows/.web-surface.yml",
806
+ "reusable": true,
650
807
  "inputs": [
651
808
  "artifact-path",
652
809
  "aws-region",
@@ -682,21 +839,60 @@
682
839
  "verify-command",
683
840
  "working-directory"
684
841
  ],
685
- "inputCount": 33
842
+ "inputCount": 33,
843
+ "secrets": [
844
+ "production-release-app-private-key"
845
+ ],
846
+ "secretCount": 1,
847
+ "outputs": [
848
+ "buildchain-runtime-class",
849
+ "buildchain-runtime-override",
850
+ "buildchain-runtime-ref",
851
+ "buildchain-runtime-sha",
852
+ "controller-plan-artifact",
853
+ "controller-plan-digest",
854
+ "controller-plan-json",
855
+ "controller-receipt-artifact",
856
+ "controller-receipt-digest",
857
+ "controller-receipt-json",
858
+ "controller-receipt-status",
859
+ "preview-apply-result-json",
860
+ "preview-cleanup-result-json",
861
+ "production-apply-result-json",
862
+ "production-release-pr-url",
863
+ "release-pr-status",
864
+ "staging-apply-result-json",
865
+ "web-surface-alias",
866
+ "web-surface-channel",
867
+ "web-surface-cleanup-plan-json",
868
+ "web-surface-manifest-json",
869
+ "web-surface-url",
870
+ "web-surface-urls-json"
871
+ ],
872
+ "outputCount": 23
686
873
  },
687
874
  {
688
875
  "id": ".wheel-release",
689
876
  "path": ".github/workflows/.wheel-release.yml",
877
+ "reusable": true,
690
878
  "inputs": [
691
879
  "aws-region",
692
880
  "aws-user-region",
693
881
  "bucket-release"
694
882
  ],
695
- "inputCount": 3
883
+ "inputCount": 3,
884
+ "secrets": [
885
+ "AWS_USER_ACCESS_KEY_ID",
886
+ "AWS_USER_SECRET_ACCESS_KEY"
887
+ ],
888
+ "secretCount": 2,
889
+ "outputs": [],
890
+ "outputCount": 0
696
891
  },
697
892
  {
698
893
  "id": ".wheel-verify",
699
894
  "path": ".github/workflows/.wheel-verify.yml",
895
+ "reusable": true,
700
896
  "inputs": [
701
897
  "aws-user-region",
702
898
  "bucket-release",
@@ -704,28 +900,42 @@
704
900
  "node-version",
705
901
  "preview-files"
706
902
  ],
707
- "inputCount": 5
903
+ "inputCount": 5,
904
+ "secrets": [
905
+ "AWS_USER_ACCESS_KEY_ID",
906
+ "AWS_USER_SECRET_ACCESS_KEY",
907
+ "NODE_AUTH_TOKEN"
908
+ ],
909
+ "secretCount": 3,
910
+ "outputs": [],
911
+ "outputCount": 0
708
912
  },
709
913
  {
710
914
  "id": "binary-distribution",
711
915
  "path": ".github/workflows/binary-distribution.yml",
712
- "inputs": [
713
- "tag",
714
- "upload-release"
715
- ],
716
- "inputCount": 2
916
+ "reusable": false,
917
+ "inputs": [],
918
+ "inputCount": 0,
919
+ "secrets": [],
920
+ "secretCount": 0,
921
+ "outputs": [],
922
+ "outputCount": 0
717
923
  },
718
924
  {
719
925
  "id": "build-surface-fixture",
720
926
  "path": ".github/workflows/build-surface-fixture.yml",
721
- "inputs": [
722
- "artifact-transfer-mode"
723
- ],
724
- "inputCount": 1
927
+ "reusable": false,
928
+ "inputs": [],
929
+ "inputCount": 0,
930
+ "secrets": [],
931
+ "secretCount": 0,
932
+ "outputs": [],
933
+ "outputCount": 0
725
934
  },
726
935
  {
727
936
  "id": "build",
728
937
  "path": ".github/workflows/build.yml",
938
+ "reusable": true,
729
939
  "inputs": [
730
940
  "artifact-name",
731
941
  "artifact-name-template",
@@ -789,44 +999,107 @@
789
999
  "verify-command",
790
1000
  "working-directory"
791
1001
  ],
792
- "inputCount": 61
1002
+ "inputCount": 61,
1003
+ "secrets": [
1004
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
1005
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
1006
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN"
1007
+ ],
1008
+ "secretCount": 3,
1009
+ "outputs": [
1010
+ "build-diagnostics-summary-artifact",
1011
+ "build-diagnostics-summary-json",
1012
+ "build-summary-artifact",
1013
+ "build-summary-json",
1014
+ "buildchain-channel",
1015
+ "buildchain-channel-reason",
1016
+ "buildchain-channel-selection-source",
1017
+ "buildchain-contract-digest",
1018
+ "buildchain-contract-lock-drift",
1019
+ "buildchain-contract-lock-status",
1020
+ "buildchain-runtime-class",
1021
+ "buildchain-runtime-override",
1022
+ "buildchain-runtime-ref",
1023
+ "buildchain-runtime-sha",
1024
+ "buildchain-runtime-trust-decision",
1025
+ "controller-plan-artifact",
1026
+ "controller-plan-digest",
1027
+ "controller-plan-json",
1028
+ "controller-receipt-artifact",
1029
+ "controller-receipt-digest",
1030
+ "controller-receipt-json",
1031
+ "controller-receipt-status",
1032
+ "linux-container-enabled",
1033
+ "linux-container-image",
1034
+ "platform-count",
1035
+ "platforms-json",
1036
+ "publish-allowed",
1037
+ "publish-channel",
1038
+ "publish-reason",
1039
+ "publish-source-channel",
1040
+ "publish-source-consumer-version",
1041
+ "publish-source-line",
1042
+ "publish-source-locked",
1043
+ "publish-source-ref",
1044
+ "publish-source-sha",
1045
+ "publish-source-tree-sha",
1046
+ "release-candidate-artifact",
1047
+ "release-candidate-passport-artifact",
1048
+ "release-candidate-passport-json",
1049
+ "release-manifest-json",
1050
+ "runner-preset",
1051
+ "trusted-event"
1052
+ ],
1053
+ "outputCount": 42
793
1054
  },
794
1055
  {
795
1056
  "id": "buildchain-alpha-self-dogfood",
796
1057
  "path": ".github/workflows/buildchain-alpha-self-dogfood.yml",
1058
+ "reusable": false,
797
1059
  "inputs": [],
798
- "inputCount": 0
1060
+ "inputCount": 0,
1061
+ "secrets": [],
1062
+ "secretCount": 0,
1063
+ "outputs": [],
1064
+ "outputCount": 0
799
1065
  },
800
1066
  {
801
1067
  "id": "buildchain-patrol-daily",
802
1068
  "path": ".github/workflows/buildchain-patrol-daily.yml",
803
- "inputs": [
804
- "buildchain-ref",
805
- "dry-run"
806
- ],
807
- "inputCount": 2
1069
+ "reusable": false,
1070
+ "inputs": [],
1071
+ "inputCount": 0,
1072
+ "secrets": [],
1073
+ "secretCount": 0,
1074
+ "outputs": [],
1075
+ "outputCount": 0
808
1076
  },
809
1077
  {
810
1078
  "id": "buildchain-patrol-monthly",
811
1079
  "path": ".github/workflows/buildchain-patrol-monthly.yml",
812
- "inputs": [
813
- "buildchain-ref",
814
- "dry-run"
815
- ],
816
- "inputCount": 2
1080
+ "reusable": false,
1081
+ "inputs": [],
1082
+ "inputCount": 0,
1083
+ "secrets": [],
1084
+ "secretCount": 0,
1085
+ "outputs": [],
1086
+ "outputCount": 0
817
1087
  },
818
1088
  {
819
1089
  "id": "buildchain-patrol-weekly",
820
1090
  "path": ".github/workflows/buildchain-patrol-weekly.yml",
821
- "inputs": [
822
- "buildchain-ref",
823
- "dry-run"
824
- ],
825
- "inputCount": 2
1091
+ "reusable": false,
1092
+ "inputs": [],
1093
+ "inputCount": 0,
1094
+ "secrets": [],
1095
+ "secretCount": 0,
1096
+ "outputs": [],
1097
+ "outputCount": 0
826
1098
  },
827
1099
  {
828
1100
  "id": "buildchain-patrol",
829
1101
  "path": ".github/workflows/buildchain-patrol.yml",
1102
+ "reusable": true,
830
1103
  "inputs": [
831
1104
  "allowed-head-prefixes",
832
1105
  "block-labels",
@@ -844,51 +1117,68 @@
844
1117
  "same-repository-only",
845
1118
  "target-branch"
846
1119
  ],
847
- "inputCount": 15
1120
+ "inputCount": 15,
1121
+ "secrets": [
1122
+ "github-token"
1123
+ ],
1124
+ "secretCount": 1,
1125
+ "outputs": [
1126
+ "action-count",
1127
+ "evaluated-count",
1128
+ "planned-count",
1129
+ "result-path",
1130
+ "skipped-count"
1131
+ ],
1132
+ "outputCount": 5
848
1133
  },
849
1134
  {
850
1135
  "id": "buildchain-ref-promotion",
851
1136
  "path": ".github/workflows/buildchain-ref-promotion.yml",
852
- "inputs": [
853
- "dry-run",
854
- "sha",
855
- "target-ref"
856
- ],
857
- "inputCount": 3
1137
+ "reusable": false,
1138
+ "inputs": [],
1139
+ "inputCount": 0,
1140
+ "secrets": [],
1141
+ "secretCount": 0,
1142
+ "outputs": [],
1143
+ "outputCount": 0
858
1144
  },
859
1145
  {
860
1146
  "id": "buildchain-stable-candidate-patrol",
861
1147
  "path": ".github/workflows/buildchain-stable-candidate-patrol.yml",
862
- "inputs": [
863
- "buildchain-ref",
864
- "dry-run",
865
- "release-now"
866
- ],
867
- "inputCount": 3
1148
+ "reusable": false,
1149
+ "inputs": [],
1150
+ "inputCount": 0,
1151
+ "secrets": [],
1152
+ "secretCount": 0,
1153
+ "outputs": [],
1154
+ "outputCount": 0
868
1155
  },
869
1156
  {
870
1157
  "id": "buildchain-stable-candidate-qualification",
871
1158
  "path": ".github/workflows/buildchain-stable-candidate-qualification.yml",
872
- "inputs": [
873
- "candidate-sha",
874
- "dry-run"
875
- ],
876
- "inputCount": 2
1159
+ "reusable": false,
1160
+ "inputs": [],
1161
+ "inputCount": 0,
1162
+ "secrets": [],
1163
+ "secretCount": 0,
1164
+ "outputs": [],
1165
+ "outputCount": 0
877
1166
  },
878
1167
  {
879
1168
  "id": "candidate-lab",
880
1169
  "path": ".github/workflows/candidate-lab.yml",
881
- "inputs": [
882
- "buildchain_ref",
883
- "legacy_workflows_ref",
884
- "publish",
885
- "target_fixture"
886
- ],
887
- "inputCount": 4
1170
+ "reusable": false,
1171
+ "inputs": [],
1172
+ "inputCount": 0,
1173
+ "secrets": [],
1174
+ "secretCount": 0,
1175
+ "outputs": [],
1176
+ "outputCount": 0
888
1177
  },
889
1178
  {
890
1179
  "id": "check",
891
1180
  "path": ".github/workflows/check.yml",
1181
+ "reusable": true,
892
1182
  "inputs": [
893
1183
  "buildchain-ref",
894
1184
  "buildchain-repository",
@@ -898,11 +1188,24 @@
898
1188
  "upload-artifacts",
899
1189
  "working-directory"
900
1190
  ],
901
- "inputCount": 7
1191
+ "inputCount": 7,
1192
+ "secrets": [],
1193
+ "secretCount": 0,
1194
+ "outputs": [
1195
+ "controller-plan-artifact",
1196
+ "controller-plan-digest",
1197
+ "controller-plan-json",
1198
+ "controller-receipt-artifact",
1199
+ "controller-receipt-digest",
1200
+ "controller-receipt-json",
1201
+ "controller-receipt-status"
1202
+ ],
1203
+ "outputCount": 7
902
1204
  },
903
1205
  {
904
1206
  "id": "dev-pr-auto-merge",
905
1207
  "path": ".github/workflows/dev-pr-auto-merge.yml",
1208
+ "reusable": true,
906
1209
  "inputs": [
907
1210
  "allowed-head-prefixes",
908
1211
  "block-labels",
@@ -917,20 +1220,34 @@
917
1220
  "same-repository-only",
918
1221
  "target-branch"
919
1222
  ],
920
- "inputCount": 12
1223
+ "inputCount": 12,
1224
+ "secrets": [
1225
+ "github-token"
1226
+ ],
1227
+ "secretCount": 1,
1228
+ "outputs": [
1229
+ "evaluated-count",
1230
+ "final-base-sha",
1231
+ "merged-count",
1232
+ "skipped-count"
1233
+ ],
1234
+ "outputCount": 4
921
1235
  },
922
1236
  {
923
1237
  "id": "npm-publish",
924
1238
  "path": ".github/workflows/npm-publish.yml",
925
- "inputs": [
926
- "ref",
927
- "run-check"
928
- ],
929
- "inputCount": 2
1239
+ "reusable": false,
1240
+ "inputs": [],
1241
+ "inputCount": 0,
1242
+ "secrets": [],
1243
+ "secretCount": 0,
1244
+ "outputs": [],
1245
+ "outputCount": 0
930
1246
  },
931
1247
  {
932
1248
  "id": "paper-release",
933
1249
  "path": ".github/workflows/paper-release.yml",
1250
+ "reusable": true,
934
1251
  "inputs": [
935
1252
  "artifact-name",
936
1253
  "artifact-retention-days",
@@ -965,11 +1282,31 @@
965
1282
  "verify-command",
966
1283
  "working-directory"
967
1284
  ],
968
- "inputCount": 32
1285
+ "inputCount": 32,
1286
+ "secrets": [
1287
+ "BUILDCHAIN_PROMOTION_TOKEN"
1288
+ ],
1289
+ "secretCount": 1,
1290
+ "outputs": [
1291
+ "controller-plan-artifact",
1292
+ "controller-plan-digest",
1293
+ "controller-plan-json",
1294
+ "controller-receipt-artifact",
1295
+ "controller-receipt-digest",
1296
+ "controller-receipt-json",
1297
+ "controller-receipt-status",
1298
+ "github-release-url",
1299
+ "package-name",
1300
+ "package-version",
1301
+ "public-release-tag",
1302
+ "release-passport-path"
1303
+ ],
1304
+ "outputCount": 12
969
1305
  },
970
1306
  {
971
1307
  "id": "patrol-daily",
972
1308
  "path": ".github/workflows/patrol-daily.yml",
1309
+ "reusable": true,
973
1310
  "inputs": [
974
1311
  "allowed-head-prefixes",
975
1312
  "block-labels",
@@ -984,33 +1321,72 @@
984
1321
  "same-repository-only",
985
1322
  "target-branch"
986
1323
  ],
987
- "inputCount": 12
1324
+ "inputCount": 12,
1325
+ "secrets": [
1326
+ "github-token"
1327
+ ],
1328
+ "secretCount": 1,
1329
+ "outputs": [
1330
+ "action-count",
1331
+ "evaluated-count",
1332
+ "planned-count",
1333
+ "result-path",
1334
+ "skipped-count"
1335
+ ],
1336
+ "outputCount": 5
988
1337
  },
989
1338
  {
990
1339
  "id": "patrol-monthly",
991
1340
  "path": ".github/workflows/patrol-monthly.yml",
1341
+ "reusable": true,
992
1342
  "inputs": [
993
1343
  "buildchain-ref",
994
1344
  "buildchain-repository",
995
1345
  "dry-run",
996
1346
  "target-branch"
997
1347
  ],
998
- "inputCount": 4
1348
+ "inputCount": 4,
1349
+ "secrets": [
1350
+ "github-token"
1351
+ ],
1352
+ "secretCount": 1,
1353
+ "outputs": [
1354
+ "action-count",
1355
+ "evaluated-count",
1356
+ "planned-count",
1357
+ "result-path",
1358
+ "skipped-count"
1359
+ ],
1360
+ "outputCount": 5
999
1361
  },
1000
1362
  {
1001
1363
  "id": "patrol-weekly",
1002
1364
  "path": ".github/workflows/patrol-weekly.yml",
1365
+ "reusable": true,
1003
1366
  "inputs": [
1004
1367
  "buildchain-ref",
1005
1368
  "buildchain-repository",
1006
1369
  "dry-run",
1007
1370
  "target-branch"
1008
1371
  ],
1009
- "inputCount": 4
1372
+ "inputCount": 4,
1373
+ "secrets": [
1374
+ "github-token"
1375
+ ],
1376
+ "secretCount": 1,
1377
+ "outputs": [
1378
+ "action-count",
1379
+ "evaluated-count",
1380
+ "planned-count",
1381
+ "result-path",
1382
+ "skipped-count"
1383
+ ],
1384
+ "outputCount": 5
1010
1385
  },
1011
1386
  {
1012
1387
  "id": "publication-artifact",
1013
1388
  "path": ".github/workflows/publication-artifact.yml",
1389
+ "reusable": true,
1014
1390
  "inputs": [
1015
1391
  "artifact-name",
1016
1392
  "artifact-paths",
@@ -1030,11 +1406,29 @@
1030
1406
  "verify-command",
1031
1407
  "working-directory"
1032
1408
  ],
1033
- "inputCount": 17
1409
+ "inputCount": 17,
1410
+ "secrets": [],
1411
+ "secretCount": 0,
1412
+ "outputs": [
1413
+ "controller-plan-artifact",
1414
+ "controller-plan-digest",
1415
+ "controller-plan-json",
1416
+ "controller-receipt-artifact",
1417
+ "controller-receipt-digest",
1418
+ "controller-receipt-json",
1419
+ "controller-receipt-status",
1420
+ "publication-artifact-name",
1421
+ "publication-manifest-json",
1422
+ "publication-manifest-path",
1423
+ "publication-passport-path",
1424
+ "publication-registry-path"
1425
+ ],
1426
+ "outputCount": 12
1034
1427
  },
1035
1428
  {
1036
1429
  "id": "release-candidate-promote",
1037
1430
  "path": ".github/workflows/release-candidate-promote.yml",
1431
+ "reusable": true,
1038
1432
  "inputs": [
1039
1433
  "allow-repository",
1040
1434
  "artifact-name",
@@ -1081,32 +1475,57 @@
1081
1475
  "target-sha",
1082
1476
  "trusted-publishing"
1083
1477
  ],
1084
- "inputCount": 44
1478
+ "inputCount": 44,
1479
+ "secrets": [
1480
+ "BUILDCHAIN_ISSUE_APP_ID",
1481
+ "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
1482
+ "BUILDCHAIN_ISSUE_TOKEN",
1483
+ "BUILDCHAIN_PROMOTION_TOKEN",
1484
+ "buildchain-issue-app-id",
1485
+ "buildchain-issue-app-private-key",
1486
+ "buildchain-issue-token"
1487
+ ],
1488
+ "secretCount": 7,
1489
+ "outputs": [
1490
+ "built-source-sha",
1491
+ "controller-plan-artifact",
1492
+ "controller-plan-digest",
1493
+ "controller-plan-json",
1494
+ "controller-receipt-artifact",
1495
+ "controller-receipt-digest",
1496
+ "controller-receipt-json",
1497
+ "controller-receipt-status",
1498
+ "promoted-sha",
1499
+ "release-candidate-artifact"
1500
+ ],
1501
+ "outputCount": 10
1085
1502
  },
1086
1503
  {
1087
1504
  "id": "release-line-bootstrap",
1088
1505
  "path": ".github/workflows/release-line-bootstrap.yml",
1089
- "inputs": [
1090
- "apply",
1091
- "create-alpha-pr",
1092
- "initial-version",
1093
- "major",
1094
- "minor",
1095
- "required-status-check",
1096
- "set-default-branch",
1097
- "source-ref"
1098
- ],
1099
- "inputCount": 8
1506
+ "reusable": false,
1507
+ "inputs": [],
1508
+ "inputCount": 0,
1509
+ "secrets": [],
1510
+ "secretCount": 0,
1511
+ "outputs": [],
1512
+ "outputCount": 0
1100
1513
  },
1101
1514
  {
1102
1515
  "id": "release-new-version",
1103
1516
  "path": ".github/workflows/release-new-version.yml",
1517
+ "reusable": false,
1104
1518
  "inputs": [],
1105
- "inputCount": 0
1519
+ "inputCount": 0,
1520
+ "secrets": [],
1521
+ "secretCount": 0,
1522
+ "outputs": [],
1523
+ "outputCount": 0
1106
1524
  },
1107
1525
  {
1108
1526
  "id": "release-propagation",
1109
1527
  "path": ".github/workflows/release-propagation.yml",
1528
+ "reusable": true,
1110
1529
  "inputs": [
1111
1530
  "buildchain-ref",
1112
1531
  "buildchain-repository",
@@ -1122,31 +1541,59 @@
1122
1541
  "source-node",
1123
1542
  "upstream-release-json"
1124
1543
  ],
1125
- "inputCount": 13
1544
+ "inputCount": 13,
1545
+ "secrets": [
1546
+ "propagation-token"
1547
+ ],
1548
+ "secretCount": 1,
1549
+ "outputs": [
1550
+ "controller-plan-artifact",
1551
+ "controller-plan-digest",
1552
+ "controller-plan-json",
1553
+ "controller-receipt-artifact",
1554
+ "controller-receipt-digest",
1555
+ "controller-receipt-json",
1556
+ "controller-receipt-status"
1557
+ ],
1558
+ "outputCount": 7
1126
1559
  },
1127
1560
  {
1128
1561
  "id": "release-verify",
1129
1562
  "path": ".github/workflows/release-verify.yml",
1563
+ "reusable": false,
1130
1564
  "inputs": [],
1131
- "inputCount": 0
1565
+ "inputCount": 0,
1566
+ "secrets": [],
1567
+ "secretCount": 0,
1568
+ "outputs": [],
1569
+ "outputCount": 0
1132
1570
  },
1133
1571
  {
1134
1572
  "id": "schedule-purge-artifacts",
1135
1573
  "path": ".github/workflows/schedule-purge-artifacts.yml",
1136
- "inputs": [
1137
- "enable-legacy-purge"
1138
- ],
1139
- "inputCount": 1
1574
+ "reusable": false,
1575
+ "inputs": [],
1576
+ "inputCount": 0,
1577
+ "secrets": [],
1578
+ "secretCount": 0,
1579
+ "outputs": [],
1580
+ "outputCount": 0
1140
1581
  },
1141
1582
  {
1142
1583
  "id": "self-hosted-runner-smoke",
1143
1584
  "path": ".github/workflows/self-hosted-runner-smoke.yml",
1585
+ "reusable": false,
1144
1586
  "inputs": [],
1145
- "inputCount": 0
1587
+ "inputCount": 0,
1588
+ "secrets": [],
1589
+ "secretCount": 0,
1590
+ "outputs": [],
1591
+ "outputCount": 0
1146
1592
  },
1147
1593
  {
1148
1594
  "id": "stable-candidate-patrol",
1149
1595
  "path": ".github/workflows/stable-candidate-patrol.yml",
1596
+ "reusable": true,
1150
1597
  "inputs": [
1151
1598
  "auto-approve",
1152
1599
  "auto-merge",
@@ -1164,13 +1611,32 @@
1164
1611
  "revoked-versions",
1165
1612
  "target-branch"
1166
1613
  ],
1167
- "inputCount": 15
1614
+ "inputCount": 15,
1615
+ "secrets": [
1616
+ "approval-token",
1617
+ "promotion-token"
1618
+ ],
1619
+ "secretCount": 2,
1620
+ "outputs": [
1621
+ "promotion-pr",
1622
+ "result-path",
1623
+ "selected",
1624
+ "selected-sha",
1625
+ "selected-version",
1626
+ "stable-version"
1627
+ ],
1628
+ "outputCount": 6
1168
1629
  },
1169
1630
  {
1170
1631
  "id": "verify",
1171
1632
  "path": ".github/workflows/verify.yml",
1633
+ "reusable": false,
1172
1634
  "inputs": [],
1173
- "inputCount": 0
1635
+ "inputCount": 0,
1636
+ "secrets": [],
1637
+ "secretCount": 0,
1638
+ "outputs": [],
1639
+ "outputCount": 0
1174
1640
  }
1175
1641
  ],
1176
1642
  "actionInputs": [
@@ -1406,6 +1872,10 @@
1406
1872
  "id": "manual:consumer-issue-reporting",
1407
1873
  "category": "manual"
1408
1874
  },
1875
+ {
1876
+ "id": "manual:controller-evidence",
1877
+ "category": "manual"
1878
+ },
1409
1879
  {
1410
1880
  "id": "manual:homebrew",
1411
1881
  "category": "manual"
@@ -2724,8 +3194,8 @@
2724
3194
  "workflowRegistryPath": "dist/site/workflow-registry.json",
2725
3195
  "pageRegistryPath": "dist/site/page-registry.json",
2726
3196
  "cliRegistryDigest": "ab57fec294efb9dde1612787bfd0d532b5bb95298b5da14a2b51a5e71b9c7dcc",
2727
- "workflowRegistryDigest": "967e63f8539a9d0c35473efba0538990304d00c14d0bbeba58783072855ec540",
2728
- "pageRegistryDigest": "a14e95f2f81cd81c07541f0d7da75d40fdd62e3ce69e0a861f7558ae23d73af4"
3197
+ "workflowRegistryDigest": "1da5cf730fa6a4816bc3d15a457b34dba28d9dfdcdc3146e9b35cb7e0e6c7abf",
3198
+ "pageRegistryDigest": "0319f1af7e6241d1cf41d063b4b2870d2b405f475133cbfef05cfd8f435d0584"
2729
3199
  },
2730
3200
  "comparison": {
2731
3201
  "missingCliRegistry": [],