@kungfu-tech/buildchain 2.12.4 → 2.12.5-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/bin/buildchain.mjs +3 -0
  2. package/dist/site/agent-index.json +1 -0
  3. package/dist/site/artifact-schemas.json +1 -0
  4. package/dist/site/buildchain-contract.json +2008 -12
  5. package/dist/site/buildchain-site.json +74 -11
  6. package/dist/site/capability-registry.json +4 -3
  7. package/dist/site/controller-registry.json +1626 -0
  8. package/dist/site/kfd-claims.json +88 -74
  9. package/dist/site/kfd-upstream-aggregate.json +1 -1
  10. package/dist/site/manual-registry.json +18 -2
  11. package/dist/site/node-api-registry.json +20 -7
  12. package/dist/site/page-registry.json +58 -5
  13. package/dist/site/public-surface-audit.json +572 -102
  14. package/dist/site/publication-registry.json +4 -4
  15. package/dist/site/release-provenance.json +2 -0
  16. package/dist/site/site-manifest.json +15 -6
  17. package/dist/site/workflow-registry.json +534 -68
  18. package/docs/MAP.md +2 -1
  19. package/docs/controller-evidence.md +113 -0
  20. package/docs/release-passport.md +6 -0
  21. package/package.json +3 -1
  22. package/packages/core/buildchain-contract.js +62 -1
  23. package/packages/core/buildchain-kfd-claims.js +3 -0
  24. package/packages/core/controller-evidence.js +505 -0
  25. package/packages/core/index.js +17 -0
  26. package/packages/core/public-surface-audit.js +40 -3
  27. package/packages/core/release-candidate.js +26 -0
  28. package/packages/core/release-passport.js +19 -0
  29. package/scripts/check-inventory.mjs +4 -1
  30. package/scripts/controller-evidence.mjs +170 -0
  31. package/scripts/generate-channel-build-workflow.mjs +141 -2
  32. package/scripts/generate-release-candidate-passport.mjs +4 -0
  33. package/scripts/generate-site-bundle.mjs +11 -1
package/dist/site/workflow-registry.json CHANGED
@@ -6,6 +6,7 @@
6
6
  {
7
7
  "id": ".build",
8
8
  "path": ".github/workflows/.build.yml",
9
+ "reusable": true,
9
10
  "inputs": [
10
11
  "artifact-name",
11
12
  "artifact-name-template",
@@ -67,6 +68,54 @@
67
68
  "working-directory"
68
69
  ],
69
70
  "inputCount": 58,
71
+ "secrets": [
72
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
73
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
74
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN"
75
+ ],
76
+ "secretCount": 3,
77
+ "outputs": [
78
+ "build-diagnostics-summary-artifact",
79
+ "build-diagnostics-summary-json",
80
+ "build-summary-artifact",
81
+ "build-summary-json",
82
+ "buildchain-contract-digest",
83
+ "buildchain-contract-lock-drift",
84
+ "buildchain-contract-lock-status",
85
+ "buildchain-runtime-class",
86
+ "buildchain-runtime-override",
87
+ "buildchain-runtime-ref",
88
+ "buildchain-runtime-sha",
89
+ "buildchain-runtime-trust-decision",
90
+ "controller-plan-artifact",
91
+ "controller-plan-digest",
92
+ "controller-plan-json",
93
+ "controller-receipt-artifact",
94
+ "controller-receipt-digest",
95
+ "controller-receipt-json",
96
+ "controller-receipt-status",
97
+ "linux-container-enabled",
98
+ "linux-container-image",
99
+ "platform-count",
100
+ "platforms-json",
101
+ "publish-allowed",
102
+ "publish-channel",
103
+ "publish-reason",
104
+ "publish-source-channel",
105
+ "publish-source-consumer-version",
106
+ "publish-source-line",
107
+ "publish-source-locked",
108
+ "publish-source-ref",
109
+ "publish-source-sha",
110
+ "publish-source-tree-sha",
111
+ "release-candidate-artifact",
112
+ "release-candidate-passport-artifact",
113
+ "release-candidate-passport-json",
114
+ "release-manifest-json",
115
+ "runner-preset",
116
+ "trusted-event"
117
+ ],
118
+ "outputCount": 39,
70
119
  "surface": "reusable-build",
71
120
  "capabilityGroup": "api-cli-reference",
72
121
  "status": "active"
@@ -74,8 +123,15 @@
74
123
  {
75
124
  "id": ".bump-minor-version",
76
125
  "path": ".github/workflows/.bump-minor-version.yml",
126
+ "reusable": true,
77
127
  "inputs": [],
78
128
  "inputCount": 0,
129
+ "secrets": [
130
+ "GITHUB_PUSH_TOKEN"
131
+ ],
132
+ "secretCount": 1,
133
+ "outputs": [],
134
+ "outputCount": 0,
79
135
  "surface": "reusable-workflow",
80
136
  "capabilityGroup": "api-cli-reference",
81
137
  "status": "active"
@@ -83,6 +139,7 @@
83
139
  {
84
140
  "id": ".gate-profile",
85
141
  "path": ".github/workflows/.gate-profile.yml",
142
+ "reusable": true,
86
143
  "inputs": [
87
144
  "artifact-name",
88
145
  "artifact-retention-days",
@@ -105,6 +162,25 @@
105
162
  "working-directory"
106
163
  ],
107
164
  "inputCount": 19,
165
+ "secrets": [],
166
+ "secretCount": 0,
167
+ "outputs": [
168
+ "buildchain-runtime-sha",
169
+ "controller-plan-artifact",
170
+ "controller-plan-digest",
171
+ "controller-plan-json",
172
+ "controller-receipt-artifact",
173
+ "controller-receipt-digest",
174
+ "controller-receipt-json",
175
+ "controller-receipt-status",
176
+ "gate-aggregate-artifact",
177
+ "gate-aggregate-digest",
178
+ "gate-aggregate-json",
179
+ "gate-aggregate-status",
180
+ "gate-matrix-digest",
181
+ "source-sha"
182
+ ],
183
+ "outputCount": 14,
108
184
  "surface": "reusable-workflow",
109
185
  "capabilityGroup": "api-cli-reference",
110
186
  "status": "active"
@@ -112,10 +188,19 @@
112
188
  {
113
189
  "id": ".release-docker",
114
190
  "path": ".github/workflows/.release-docker.yml",
191
+ "reusable": true,
115
192
  "inputs": [
116
193
  "image-name"
117
194
  ],
118
195
  "inputCount": 1,
196
+ "secrets": [
197
+ "DOCKER_HUB_PASSWORD",
198
+ "DOCKER_HUB_USERNAME",
199
+ "GITHUB_PUSH_TOKEN"
200
+ ],
201
+ "secretCount": 3,
202
+ "outputs": [],
203
+ "outputCount": 0,
119
204
  "surface": "reusable-workflow",
120
205
  "capabilityGroup": "api-cli-reference",
121
206
  "status": "active"
@@ -123,12 +208,21 @@
123
208
  {
124
209
  "id": ".release-elastic-beanstalk",
125
210
  "path": ".github/workflows/.release-elastic-beanstalk.yml",
211
+ "reusable": true,
126
212
  "inputs": [
127
213
  "aws-region",
128
214
  "eb-application-name",
129
215
  "eb-environment-name"
130
216
  ],
131
217
  "inputCount": 3,
218
+ "secrets": [
219
+ "AWS_USER_ACCESS_KEY_ID",
220
+ "AWS_USER_SECRET_ACCESS_KEY",
221
+ "GITHUB_PUSH_TOKEN"
222
+ ],
223
+ "secretCount": 3,
224
+ "outputs": [],
225
+ "outputCount": 0,
132
226
  "surface": "reusable-workflow",
133
227
  "capabilityGroup": "api-cli-reference",
134
228
  "status": "active"
@@ -136,6 +230,7 @@
136
230
  {
137
231
  "id": ".release-new-version",
138
232
  "path": ".github/workflows/.release-new-version.yml",
233
+ "reusable": true,
139
234
  "inputs": [
140
235
  "action-bump-version-path",
141
236
  "action-bump-version-ref",
@@ -166,6 +261,19 @@
166
261
  "sync-extensions-version"
167
262
  ],
168
263
  "inputCount": 27,
264
+ "secrets": [
265
+ "AIRTABLE_API_KEY",
266
+ "AWS_CI_ACCESS_KEY_ID",
267
+ "AWS_CI_SECRET_ACCESS_KEY",
268
+ "AWS_USER_ACCESS_KEY_ID",
269
+ "AWS_USER_SECRET_ACCESS_KEY",
270
+ "GITHUB_PUSH_TOKEN",
271
+ "MONDAY_API_KEY",
272
+ "NPM_PUSH_TOKEN"
273
+ ],
274
+ "secretCount": 8,
275
+ "outputs": [],
276
+ "outputCount": 0,
169
277
  "surface": "reusable-workflow",
170
278
  "capabilityGroup": "api-cli-reference",
171
279
  "status": "active"
@@ -173,6 +281,7 @@
173
281
  {
174
282
  "id": ".release-verify",
175
283
  "path": ".github/workflows/.release-verify.yml",
284
+ "reusable": true,
176
285
  "inputs": [
177
286
  "auto-approve-enabled",
178
287
  "aws-ci-region",
@@ -217,6 +326,22 @@
217
326
  "use-poetry"
218
327
  ],
219
328
  "inputCount": 41,
329
+ "secrets": [
330
+ "APPLE_CSC_KEY",
331
+ "APPLE_CSC_KEY_PASSWORD",
332
+ "APPLE_ID",
333
+ "APPLE_ID_PASSWORD",
334
+ "AWS_CI_ACCESS_KEY_ID",
335
+ "AWS_CI_SECRET_ACCESS_KEY",
336
+ "AWS_USER_ACCESS_KEY_ID",
337
+ "AWS_USER_SECRET_ACCESS_KEY",
338
+ "GITHUB_PUSH_TOKEN",
339
+ "NODE_AUTH_TOKEN",
340
+ "WINDOWS_CSC_KEY"
341
+ ],
342
+ "secretCount": 11,
343
+ "outputs": [],
344
+ "outputCount": 0,
220
345
  "surface": "reusable-workflow",
221
346
  "capabilityGroup": "api-cli-reference",
222
347
  "status": "active"
@@ -224,6 +349,7 @@
224
349
  {
225
350
  "id": ".sam-release",
226
351
  "path": ".github/workflows/.sam-release.yml",
352
+ "reusable": true,
227
353
  "inputs": [
228
354
  "aws-region",
229
355
  "aws-role",
@@ -231,6 +357,12 @@
231
357
  "bucket-release"
232
358
  ],
233
359
  "inputCount": 4,
360
+ "secrets": [
361
+ "AWS_ACCOUNT_ID"
362
+ ],
363
+ "secretCount": 1,
364
+ "outputs": [],
365
+ "outputCount": 0,
234
366
  "surface": "reusable-workflow",
235
367
  "capabilityGroup": "api-cli-reference",
236
368
  "status": "active"
@@ -238,6 +370,7 @@
238
370
  {
239
371
  "id": ".sam-verify",
240
372
  "path": ".github/workflows/.sam-verify.yml",
373
+ "reusable": true,
241
374
  "inputs": [
242
375
  "aws-region",
243
376
  "aws-role",
@@ -245,6 +378,13 @@
245
378
  "manager"
246
379
  ],
247
380
  "inputCount": 4,
381
+ "secrets": [
382
+ "AWS_ACCOUNT_ID",
383
+ "NODE_AUTH_TOKEN"
384
+ ],
385
+ "secretCount": 2,
386
+ "outputs": [],
387
+ "outputCount": 0,
248
388
  "surface": "reusable-workflow",
249
389
  "capabilityGroup": "api-cli-reference",
250
390
  "status": "active"
@@ -252,6 +392,7 @@
252
392
  {
253
393
  "id": ".sync-release-page",
254
394
  "path": ".github/workflows/.sync-release-page.yml",
395
+ "reusable": true,
255
396
  "inputs": [
256
397
  "aws-region",
257
398
  "aws-role-arn",
@@ -268,6 +409,13 @@
268
409
  "upper-edge"
269
410
  ],
270
411
  "inputCount": 13,
412
+ "secrets": [
413
+ "AIRTABLE_API_KEY",
414
+ "GITHUB_PUSH_TOKEN"
415
+ ],
416
+ "secretCount": 2,
417
+ "outputs": [],
418
+ "outputCount": 0,
271
419
  "surface": "reusable-workflow",
272
420
  "capabilityGroup": "api-cli-reference",
273
421
  "status": "active"
@@ -275,6 +423,7 @@
275
423
  {
276
424
  "id": ".sync-remote-git",
277
425
  "path": ".github/workflows/.sync-remote-git.yml",
426
+ "reusable": true,
278
427
  "inputs": [
279
428
  "force",
280
429
  "remote-host",
@@ -282,6 +431,13 @@
282
431
  "remote-repo"
283
432
  ],
284
433
  "inputCount": 4,
434
+ "secrets": [
435
+ "REMOTE_CREDENTIAL",
436
+ "REMOTE_USER"
437
+ ],
438
+ "secretCount": 2,
439
+ "outputs": [],
440
+ "outputCount": 0,
285
441
  "surface": "reusable-workflow",
286
442
  "capabilityGroup": "api-cli-reference",
287
443
  "status": "active"
@@ -289,6 +445,7 @@
289
445
  {
290
446
  "id": ".web-surface",
291
447
  "path": ".github/workflows/.web-surface.yml",
448
+ "reusable": true,
292
449
  "inputs": [
293
450
  "artifact-path",
294
451
  "aws-region",
@@ -325,6 +482,36 @@
325
482
  "working-directory"
326
483
  ],
327
484
  "inputCount": 33,
485
+ "secrets": [
486
+ "production-release-app-private-key"
487
+ ],
488
+ "secretCount": 1,
489
+ "outputs": [
490
+ "buildchain-runtime-class",
491
+ "buildchain-runtime-override",
492
+ "buildchain-runtime-ref",
493
+ "buildchain-runtime-sha",
494
+ "controller-plan-artifact",
495
+ "controller-plan-digest",
496
+ "controller-plan-json",
497
+ "controller-receipt-artifact",
498
+ "controller-receipt-digest",
499
+ "controller-receipt-json",
500
+ "controller-receipt-status",
501
+ "preview-apply-result-json",
502
+ "preview-cleanup-result-json",
503
+ "production-apply-result-json",
504
+ "production-release-pr-url",
505
+ "release-pr-status",
506
+ "staging-apply-result-json",
507
+ "web-surface-alias",
508
+ "web-surface-channel",
509
+ "web-surface-cleanup-plan-json",
510
+ "web-surface-manifest-json",
511
+ "web-surface-url",
512
+ "web-surface-urls-json"
513
+ ],
514
+ "outputCount": 23,
328
515
  "surface": "reusable-workflow",
329
516
  "capabilityGroup": "api-cli-reference",
330
517
  "status": "active"
@@ -332,12 +519,20 @@
332
519
  {
333
520
  "id": ".wheel-release",
334
521
  "path": ".github/workflows/.wheel-release.yml",
522
+ "reusable": true,
335
523
  "inputs": [
336
524
  "aws-region",
337
525
  "aws-user-region",
338
526
  "bucket-release"
339
527
  ],
340
528
  "inputCount": 3,
529
+ "secrets": [
530
+ "AWS_USER_ACCESS_KEY_ID",
531
+ "AWS_USER_SECRET_ACCESS_KEY"
532
+ ],
533
+ "secretCount": 2,
534
+ "outputs": [],
535
+ "outputCount": 0,
341
536
  "surface": "reusable-workflow",
342
537
  "capabilityGroup": "api-cli-reference",
343
538
  "status": "active"
@@ -345,6 +540,7 @@
345
540
  {
346
541
  "id": ".wheel-verify",
347
542
  "path": ".github/workflows/.wheel-verify.yml",
543
+ "reusable": true,
348
544
  "inputs": [
349
545
  "aws-user-region",
350
546
  "bucket-release",
@@ -353,6 +549,14 @@
353
549
  "preview-files"
354
550
  ],
355
551
  "inputCount": 5,
552
+ "secrets": [
553
+ "AWS_USER_ACCESS_KEY_ID",
554
+ "AWS_USER_SECRET_ACCESS_KEY",
555
+ "NODE_AUTH_TOKEN"
556
+ ],
557
+ "secretCount": 3,
558
+ "outputs": [],
559
+ "outputCount": 0,
356
560
  "surface": "reusable-workflow",
357
561
  "capabilityGroup": "api-cli-reference",
358
562
  "status": "active"
@@ -360,11 +564,13 @@
360
564
  {
361
565
  "id": "binary-distribution",
362
566
  "path": ".github/workflows/binary-distribution.yml",
363
- "inputs": [
364
- "tag",
365
- "upload-release"
366
- ],
367
- "inputCount": 2,
567
+ "reusable": false,
568
+ "inputs": [],
569
+ "inputCount": 0,
570
+ "secrets": [],
571
+ "secretCount": 0,
572
+ "outputs": [],
573
+ "outputCount": 0,
368
574
  "surface": "release-passport",
369
575
  "capabilityGroup": "api-cli-reference",
370
576
  "status": "active"
@@ -372,10 +578,13 @@
372
578
  {
373
579
  "id": "build-surface-fixture",
374
580
  "path": ".github/workflows/build-surface-fixture.yml",
375
- "inputs": [
376
- "artifact-transfer-mode"
377
- ],
378
- "inputCount": 1,
581
+ "reusable": false,
582
+ "inputs": [],
583
+ "inputCount": 0,
584
+ "secrets": [],
585
+ "secretCount": 0,
586
+ "outputs": [],
587
+ "outputCount": 0,
379
588
  "surface": "repository-workflow",
380
589
  "capabilityGroup": "api-cli-reference",
381
590
  "status": "repository-internal"
@@ -383,6 +592,7 @@
383
592
  {
384
593
  "id": "build",
385
594
  "path": ".github/workflows/build.yml",
595
+ "reusable": true,
386
596
  "inputs": [
387
597
  "artifact-name",
388
598
  "artifact-name-template",
@@ -447,6 +657,57 @@
447
657
  "working-directory"
448
658
  ],
449
659
  "inputCount": 61,
660
+ "secrets": [
661
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
662
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
663
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN"
664
+ ],
665
+ "secretCount": 3,
666
+ "outputs": [
667
+ "build-diagnostics-summary-artifact",
668
+ "build-diagnostics-summary-json",
669
+ "build-summary-artifact",
670
+ "build-summary-json",
671
+ "buildchain-channel",
672
+ "buildchain-channel-reason",
673
+ "buildchain-channel-selection-source",
674
+ "buildchain-contract-digest",
675
+ "buildchain-contract-lock-drift",
676
+ "buildchain-contract-lock-status",
677
+ "buildchain-runtime-class",
678
+ "buildchain-runtime-override",
679
+ "buildchain-runtime-ref",
680
+ "buildchain-runtime-sha",
681
+ "buildchain-runtime-trust-decision",
682
+ "controller-plan-artifact",
683
+ "controller-plan-digest",
684
+ "controller-plan-json",
685
+ "controller-receipt-artifact",
686
+ "controller-receipt-digest",
687
+ "controller-receipt-json",
688
+ "controller-receipt-status",
689
+ "linux-container-enabled",
690
+ "linux-container-image",
691
+ "platform-count",
692
+ "platforms-json",
693
+ "publish-allowed",
694
+ "publish-channel",
695
+ "publish-reason",
696
+ "publish-source-channel",
697
+ "publish-source-consumer-version",
698
+ "publish-source-line",
699
+ "publish-source-locked",
700
+ "publish-source-ref",
701
+ "publish-source-sha",
702
+ "publish-source-tree-sha",
703
+ "release-candidate-artifact",
704
+ "release-candidate-passport-artifact",
705
+ "release-candidate-passport-json",
706
+ "release-manifest-json",
707
+ "runner-preset",
708
+ "trusted-event"
709
+ ],
710
+ "outputCount": 42,
450
711
  "surface": "channel-build-router",
451
712
  "capabilityGroup": "reusable-build",
452
713
  "status": "active"
@@ -454,8 +715,13 @@
454
715
  {
455
716
  "id": "buildchain-alpha-self-dogfood",
456
717
  "path": ".github/workflows/buildchain-alpha-self-dogfood.yml",
718
+ "reusable": false,
457
719
  "inputs": [],
458
720
  "inputCount": 0,
721
+ "secrets": [],
722
+ "secretCount": 0,
723
+ "outputs": [],
724
+ "outputCount": 0,
459
725
  "surface": "repository-workflow",
460
726
  "capabilityGroup": "api-cli-reference",
461
727
  "status": "active"
@@ -463,11 +729,13 @@
463
729
  {
464
730
  "id": "buildchain-patrol-daily",
465
731
  "path": ".github/workflows/buildchain-patrol-daily.yml",
466
- "inputs": [
467
- "buildchain-ref",
468
- "dry-run"
469
- ],
470
- "inputCount": 2,
732
+ "reusable": false,
733
+ "inputs": [],
734
+ "inputCount": 0,
735
+ "secrets": [],
736
+ "secretCount": 0,
737
+ "outputs": [],
738
+ "outputCount": 0,
471
739
  "surface": "repository-patrol",
472
740
  "capabilityGroup": "governance-versioning",
473
741
  "status": "active"
@@ -475,11 +743,13 @@
475
743
  {
476
744
  "id": "buildchain-patrol-monthly",
477
745
  "path": ".github/workflows/buildchain-patrol-monthly.yml",
478
- "inputs": [
479
- "buildchain-ref",
480
- "dry-run"
481
- ],
482
- "inputCount": 2,
746
+ "reusable": false,
747
+ "inputs": [],
748
+ "inputCount": 0,
749
+ "secrets": [],
750
+ "secretCount": 0,
751
+ "outputs": [],
752
+ "outputCount": 0,
483
753
  "surface": "repository-patrol",
484
754
  "capabilityGroup": "governance-versioning",
485
755
  "status": "active"
@@ -487,11 +757,13 @@
487
757
  {
488
758
  "id": "buildchain-patrol-weekly",
489
759
  "path": ".github/workflows/buildchain-patrol-weekly.yml",
490
- "inputs": [
491
- "buildchain-ref",
492
- "dry-run"
493
- ],
494
- "inputCount": 2,
760
+ "reusable": false,
761
+ "inputs": [],
762
+ "inputCount": 0,
763
+ "secrets": [],
764
+ "secretCount": 0,
765
+ "outputs": [],
766
+ "outputCount": 0,
495
767
  "surface": "repository-patrol",
496
768
  "capabilityGroup": "governance-versioning",
497
769
  "status": "active"
@@ -499,6 +771,7 @@
499
771
  {
500
772
  "id": "buildchain-patrol",
501
773
  "path": ".github/workflows/buildchain-patrol.yml",
774
+ "reusable": true,
502
775
  "inputs": [
503
776
  "allowed-head-prefixes",
504
777
  "block-labels",
@@ -517,6 +790,18 @@
517
790
  "target-branch"
518
791
  ],
519
792
  "inputCount": 15,
793
+ "secrets": [
794
+ "github-token"
795
+ ],
796
+ "secretCount": 1,
797
+ "outputs": [
798
+ "action-count",
799
+ "evaluated-count",
800
+ "planned-count",
801
+ "result-path",
802
+ "skipped-count"
803
+ ],
804
+ "outputCount": 5,
520
805
  "surface": "repository-patrol",
521
806
  "capabilityGroup": "governance-versioning",
522
807
  "status": "active"
@@ -524,12 +809,13 @@
524
809
  {
525
810
  "id": "buildchain-ref-promotion",
526
811
  "path": ".github/workflows/buildchain-ref-promotion.yml",
527
- "inputs": [
528
- "dry-run",
529
- "sha",
530
- "target-ref"
531
- ],
532
- "inputCount": 3,
812
+ "reusable": false,
813
+ "inputs": [],
814
+ "inputCount": 0,
815
+ "secrets": [],
816
+ "secretCount": 0,
817
+ "outputs": [],
818
+ "outputCount": 0,
533
819
  "surface": "release-governance",
534
820
  "capabilityGroup": "release-passport-trust",
535
821
  "status": "active"
@@ -537,12 +823,13 @@
537
823
  {
538
824
  "id": "buildchain-stable-candidate-patrol",
539
825
  "path": ".github/workflows/buildchain-stable-candidate-patrol.yml",
540
- "inputs": [
541
- "buildchain-ref",
542
- "dry-run",
543
- "release-now"
544
- ],
545
- "inputCount": 3,
826
+ "reusable": false,
827
+ "inputs": [],
828
+ "inputCount": 0,
829
+ "secrets": [],
830
+ "secretCount": 0,
831
+ "outputs": [],
832
+ "outputCount": 0,
546
833
  "surface": "repository-patrol",
547
834
  "capabilityGroup": "governance-versioning",
548
835
  "status": "active"
@@ -550,11 +837,13 @@
550
837
  {
551
838
  "id": "buildchain-stable-candidate-qualification",
552
839
  "path": ".github/workflows/buildchain-stable-candidate-qualification.yml",
553
- "inputs": [
554
- "candidate-sha",
555
- "dry-run"
556
- ],
557
- "inputCount": 2,
840
+ "reusable": false,
841
+ "inputs": [],
842
+ "inputCount": 0,
843
+ "secrets": [],
844
+ "secretCount": 0,
845
+ "outputs": [],
846
+ "outputCount": 0,
558
847
  "surface": "repository-patrol",
559
848
  "capabilityGroup": "api-cli-reference",
560
849
  "status": "repository-internal"
@@ -562,13 +851,13 @@
562
851
  {
563
852
  "id": "candidate-lab",
564
853
  "path": ".github/workflows/candidate-lab.yml",
565
- "inputs": [
566
- "buildchain_ref",
567
- "legacy_workflows_ref",
568
- "publish",
569
- "target_fixture"
570
- ],
571
- "inputCount": 4,
854
+ "reusable": false,
855
+ "inputs": [],
856
+ "inputCount": 0,
857
+ "secrets": [],
858
+ "secretCount": 0,
859
+ "outputs": [],
860
+ "outputCount": 0,
572
861
  "surface": "repository-workflow",
573
862
  "capabilityGroup": "api-cli-reference",
574
863
  "status": "repository-internal"
@@ -576,6 +865,7 @@
576
865
  {
577
866
  "id": "check",
578
867
  "path": ".github/workflows/check.yml",
868
+ "reusable": true,
579
869
  "inputs": [
580
870
  "buildchain-ref",
581
871
  "buildchain-repository",
@@ -586,6 +876,18 @@
586
876
  "working-directory"
587
877
  ],
588
878
  "inputCount": 7,
879
+ "secrets": [],
880
+ "secretCount": 0,
881
+ "outputs": [
882
+ "controller-plan-artifact",
883
+ "controller-plan-digest",
884
+ "controller-plan-json",
885
+ "controller-receipt-artifact",
886
+ "controller-receipt-digest",
887
+ "controller-receipt-json",
888
+ "controller-receipt-status"
889
+ ],
890
+ "outputCount": 7,
589
891
  "surface": "repository-workflow",
590
892
  "capabilityGroup": "api-cli-reference",
591
893
  "status": "active"
@@ -593,6 +895,7 @@
593
895
  {
594
896
  "id": "dev-pr-auto-merge",
595
897
  "path": ".github/workflows/dev-pr-auto-merge.yml",
898
+ "reusable": true,
596
899
  "inputs": [
597
900
  "allowed-head-prefixes",
598
901
  "block-labels",
@@ -608,6 +911,17 @@
608
911
  "target-branch"
609
912
  ],
610
913
  "inputCount": 12,
914
+ "secrets": [
915
+ "github-token"
916
+ ],
917
+ "secretCount": 1,
918
+ "outputs": [
919
+ "evaluated-count",
920
+ "final-base-sha",
921
+ "merged-count",
922
+ "skipped-count"
923
+ ],
924
+ "outputCount": 4,
611
925
  "surface": "dev-governance",
612
926
  "capabilityGroup": "governance-versioning",
613
927
  "status": "active"
@@ -615,11 +929,13 @@
615
929
  {
616
930
  "id": "npm-publish",
617
931
  "path": ".github/workflows/npm-publish.yml",
618
- "inputs": [
619
- "ref",
620
- "run-check"
621
- ],
622
- "inputCount": 2,
932
+ "reusable": false,
933
+ "inputs": [],
934
+ "inputCount": 0,
935
+ "secrets": [],
936
+ "secretCount": 0,
937
+ "outputs": [],
938
+ "outputCount": 0,
623
939
  "surface": "repository-workflow",
624
940
  "capabilityGroup": "api-cli-reference",
625
941
  "status": "active"
@@ -627,6 +943,7 @@
627
943
  {
628
944
  "id": "paper-release",
629
945
  "path": ".github/workflows/paper-release.yml",
946
+ "reusable": true,
630
947
  "inputs": [
631
948
  "artifact-name",
632
949
  "artifact-retention-days",
@@ -662,6 +979,25 @@
662
979
  "working-directory"
663
980
  ],
664
981
  "inputCount": 32,
982
+ "secrets": [
983
+ "BUILDCHAIN_PROMOTION_TOKEN"
984
+ ],
985
+ "secretCount": 1,
986
+ "outputs": [
987
+ "controller-plan-artifact",
988
+ "controller-plan-digest",
989
+ "controller-plan-json",
990
+ "controller-receipt-artifact",
991
+ "controller-receipt-digest",
992
+ "controller-receipt-json",
993
+ "controller-receipt-status",
994
+ "github-release-url",
995
+ "package-name",
996
+ "package-version",
997
+ "public-release-tag",
998
+ "release-passport-path"
999
+ ],
1000
+ "outputCount": 12,
665
1001
  "surface": "reusable-build",
666
1002
  "capabilityGroup": "reusable-build",
667
1003
  "status": "active"
@@ -669,6 +1005,7 @@
669
1005
  {
670
1006
  "id": "patrol-daily",
671
1007
  "path": ".github/workflows/patrol-daily.yml",
1008
+ "reusable": true,
672
1009
  "inputs": [
673
1010
  "allowed-head-prefixes",
674
1011
  "block-labels",
@@ -684,6 +1021,18 @@
684
1021
  "target-branch"
685
1022
  ],
686
1023
  "inputCount": 12,
1024
+ "secrets": [
1025
+ "github-token"
1026
+ ],
1027
+ "secretCount": 1,
1028
+ "outputs": [
1029
+ "action-count",
1030
+ "evaluated-count",
1031
+ "planned-count",
1032
+ "result-path",
1033
+ "skipped-count"
1034
+ ],
1035
+ "outputCount": 5,
687
1036
  "surface": "repository-patrol",
688
1037
  "capabilityGroup": "governance-versioning",
689
1038
  "status": "active"
@@ -691,6 +1040,7 @@
691
1040
  {
692
1041
  "id": "patrol-monthly",
693
1042
  "path": ".github/workflows/patrol-monthly.yml",
1043
+ "reusable": true,
694
1044
  "inputs": [
695
1045
  "buildchain-ref",
696
1046
  "buildchain-repository",
@@ -698,6 +1048,18 @@
698
1048
  "target-branch"
699
1049
  ],
700
1050
  "inputCount": 4,
1051
+ "secrets": [
1052
+ "github-token"
1053
+ ],
1054
+ "secretCount": 1,
1055
+ "outputs": [
1056
+ "action-count",
1057
+ "evaluated-count",
1058
+ "planned-count",
1059
+ "result-path",
1060
+ "skipped-count"
1061
+ ],
1062
+ "outputCount": 5,
701
1063
  "surface": "repository-patrol",
702
1064
  "capabilityGroup": "governance-versioning",
703
1065
  "status": "active"
@@ -705,6 +1067,7 @@
705
1067
  {
706
1068
  "id": "patrol-weekly",
707
1069
  "path": ".github/workflows/patrol-weekly.yml",
1070
+ "reusable": true,
708
1071
  "inputs": [
709
1072
  "buildchain-ref",
710
1073
  "buildchain-repository",
@@ -712,6 +1075,18 @@
712
1075
  "target-branch"
713
1076
  ],
714
1077
  "inputCount": 4,
1078
+ "secrets": [
1079
+ "github-token"
1080
+ ],
1081
+ "secretCount": 1,
1082
+ "outputs": [
1083
+ "action-count",
1084
+ "evaluated-count",
1085
+ "planned-count",
1086
+ "result-path",
1087
+ "skipped-count"
1088
+ ],
1089
+ "outputCount": 5,
715
1090
  "surface": "repository-patrol",
716
1091
  "capabilityGroup": "governance-versioning",
717
1092
  "status": "active"
@@ -719,6 +1094,7 @@
719
1094
  {
720
1095
  "id": "publication-artifact",
721
1096
  "path": ".github/workflows/publication-artifact.yml",
1097
+ "reusable": true,
722
1098
  "inputs": [
723
1099
  "artifact-name",
724
1100
  "artifact-paths",
@@ -739,6 +1115,23 @@
739
1115
  "working-directory"
740
1116
  ],
741
1117
  "inputCount": 17,
1118
+ "secrets": [],
1119
+ "secretCount": 0,
1120
+ "outputs": [
1121
+ "controller-plan-artifact",
1122
+ "controller-plan-digest",
1123
+ "controller-plan-json",
1124
+ "controller-receipt-artifact",
1125
+ "controller-receipt-digest",
1126
+ "controller-receipt-json",
1127
+ "controller-receipt-status",
1128
+ "publication-artifact-name",
1129
+ "publication-manifest-json",
1130
+ "publication-manifest-path",
1131
+ "publication-passport-path",
1132
+ "publication-registry-path"
1133
+ ],
1134
+ "outputCount": 12,
742
1135
  "surface": "repository-workflow",
743
1136
  "capabilityGroup": "reusable-build",
744
1137
  "status": "active"
@@ -746,6 +1139,7 @@
746
1139
  {
747
1140
  "id": "release-candidate-promote",
748
1141
  "path": ".github/workflows/release-candidate-promote.yml",
1142
+ "reusable": true,
749
1143
  "inputs": [
750
1144
  "allow-repository",
751
1145
  "artifact-name",
@@ -793,6 +1187,29 @@
793
1187
  "trusted-publishing"
794
1188
  ],
795
1189
  "inputCount": 44,
1190
+ "secrets": [
1191
+ "BUILDCHAIN_ISSUE_APP_ID",
1192
+ "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
1193
+ "BUILDCHAIN_ISSUE_TOKEN",
1194
+ "BUILDCHAIN_PROMOTION_TOKEN",
1195
+ "buildchain-issue-app-id",
1196
+ "buildchain-issue-app-private-key",
1197
+ "buildchain-issue-token"
1198
+ ],
1199
+ "secretCount": 7,
1200
+ "outputs": [
1201
+ "built-source-sha",
1202
+ "controller-plan-artifact",
1203
+ "controller-plan-digest",
1204
+ "controller-plan-json",
1205
+ "controller-receipt-artifact",
1206
+ "controller-receipt-digest",
1207
+ "controller-receipt-json",
1208
+ "controller-receipt-status",
1209
+ "promoted-sha",
1210
+ "release-candidate-artifact"
1211
+ ],
1212
+ "outputCount": 10,
796
1213
  "surface": "release-governance",
797
1214
  "capabilityGroup": "reusable-build",
798
1215
  "status": "active"
@@ -800,17 +1217,13 @@
800
1217
  {
801
1218
  "id": "release-line-bootstrap",
802
1219
  "path": ".github/workflows/release-line-bootstrap.yml",
803
- "inputs": [
804
- "apply",
805
- "create-alpha-pr",
806
- "initial-version",
807
- "major",
808
- "minor",
809
- "required-status-check",
810
- "set-default-branch",
811
- "source-ref"
812
- ],
813
- "inputCount": 8,
1220
+ "reusable": false,
1221
+ "inputs": [],
1222
+ "inputCount": 0,
1223
+ "secrets": [],
1224
+ "secretCount": 0,
1225
+ "outputs": [],
1226
+ "outputCount": 0,
814
1227
  "surface": "release-governance",
815
1228
  "capabilityGroup": "release-passport-trust",
816
1229
  "status": "active"
@@ -818,8 +1231,13 @@
818
1231
  {
819
1232
  "id": "release-new-version",
820
1233
  "path": ".github/workflows/release-new-version.yml",
1234
+ "reusable": false,
821
1235
  "inputs": [],
822
1236
  "inputCount": 0,
1237
+ "secrets": [],
1238
+ "secretCount": 0,
1239
+ "outputs": [],
1240
+ "outputCount": 0,
823
1241
  "surface": "repository-workflow",
824
1242
  "capabilityGroup": "api-cli-reference",
825
1243
  "status": "active"
@@ -827,6 +1245,7 @@
827
1245
  {
828
1246
  "id": "release-propagation",
829
1247
  "path": ".github/workflows/release-propagation.yml",
1248
+ "reusable": true,
830
1249
  "inputs": [
831
1250
  "buildchain-ref",
832
1251
  "buildchain-repository",
@@ -843,6 +1262,20 @@
843
1262
  "upstream-release-json"
844
1263
  ],
845
1264
  "inputCount": 13,
1265
+ "secrets": [
1266
+ "propagation-token"
1267
+ ],
1268
+ "secretCount": 1,
1269
+ "outputs": [
1270
+ "controller-plan-artifact",
1271
+ "controller-plan-digest",
1272
+ "controller-plan-json",
1273
+ "controller-receipt-artifact",
1274
+ "controller-receipt-digest",
1275
+ "controller-receipt-json",
1276
+ "controller-receipt-status"
1277
+ ],
1278
+ "outputCount": 7,
846
1279
  "surface": "release-propagation",
847
1280
  "capabilityGroup": "site-and-propagation",
848
1281
  "status": "preview"
@@ -850,8 +1283,13 @@
850
1283
  {
851
1284
  "id": "release-verify",
852
1285
  "path": ".github/workflows/release-verify.yml",
1286
+ "reusable": false,
853
1287
  "inputs": [],
854
1288
  "inputCount": 0,
1289
+ "secrets": [],
1290
+ "secretCount": 0,
1291
+ "outputs": [],
1292
+ "outputCount": 0,
855
1293
  "surface": "repository-workflow",
856
1294
  "capabilityGroup": "api-cli-reference",
857
1295
  "status": "active"
@@ -859,10 +1297,13 @@
859
1297
  {
860
1298
  "id": "schedule-purge-artifacts",
861
1299
  "path": ".github/workflows/schedule-purge-artifacts.yml",
862
- "inputs": [
863
- "enable-legacy-purge"
864
- ],
865
- "inputCount": 1,
1300
+ "reusable": false,
1301
+ "inputs": [],
1302
+ "inputCount": 0,
1303
+ "secrets": [],
1304
+ "secretCount": 0,
1305
+ "outputs": [],
1306
+ "outputCount": 0,
866
1307
  "surface": "repository-workflow",
867
1308
  "capabilityGroup": "api-cli-reference",
868
1309
  "status": "active"
@@ -870,8 +1311,13 @@
870
1311
  {
871
1312
  "id": "self-hosted-runner-smoke",
872
1313
  "path": ".github/workflows/self-hosted-runner-smoke.yml",
1314
+ "reusable": false,
873
1315
  "inputs": [],
874
1316
  "inputCount": 0,
1317
+ "secrets": [],
1318
+ "secretCount": 0,
1319
+ "outputs": [],
1320
+ "outputCount": 0,
875
1321
  "surface": "repository-workflow",
876
1322
  "capabilityGroup": "api-cli-reference",
877
1323
  "status": "compatibility-fixture"
@@ -879,6 +1325,7 @@
879
1325
  {
880
1326
  "id": "stable-candidate-patrol",
881
1327
  "path": ".github/workflows/stable-candidate-patrol.yml",
1328
+ "reusable": true,
882
1329
  "inputs": [
883
1330
  "auto-approve",
884
1331
  "auto-merge",
@@ -897,6 +1344,20 @@
897
1344
  "target-branch"
898
1345
  ],
899
1346
  "inputCount": 15,
1347
+ "secrets": [
1348
+ "approval-token",
1349
+ "promotion-token"
1350
+ ],
1351
+ "secretCount": 2,
1352
+ "outputs": [
1353
+ "promotion-pr",
1354
+ "result-path",
1355
+ "selected",
1356
+ "selected-sha",
1357
+ "selected-version",
1358
+ "stable-version"
1359
+ ],
1360
+ "outputCount": 6,
900
1361
  "surface": "repository-patrol",
901
1362
  "capabilityGroup": "governance-versioning",
902
1363
  "status": "active"
@@ -904,8 +1365,13 @@
904
1365
  {
905
1366
  "id": "verify",
906
1367
  "path": ".github/workflows/verify.yml",
1368
+ "reusable": false,
907
1369
  "inputs": [],
908
1370
  "inputCount": 0,
1371
+ "secrets": [],
1372
+ "secretCount": 0,
1373
+ "outputs": [],
1374
+ "outputCount": 0,
909
1375
  "surface": "repository-workflow",
910
1376
  "capabilityGroup": "api-cli-reference",
911
1377
  "status": "active"