@kungfu-tech/buildchain 4.0.2-alpha.0 → 4.0.2-alpha.11

package/dist/site/workflow-registry.json

@@ -18,9 +18,10 @@
         "require-trusted-event",
         "source-artifact-digest",
         "source-artifact-name",
-        "source-ref"
+        "source-ref",
+        "universal-request-json"
       ],
-      "inputCount": 11,
+      "inputCount": 12,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -69,9 +70,10 @@
         "publication-version",
         "release-tag",
         "source-sha",
-        "target-ref"
+        "target-ref",
+        "universal-request-json"
       ],
-      "inputCount": 15,
+      "inputCount": 16,
       "secrets": [],
       "secretCount": 0,
       "outputs": [],
@@ -181,12 +183,13 @@
         "setup-rust",
         "shifu-cache-profile-digest",
         "shifu-cache-profile-ref",
+        "universal-request-json",
         "untrusted-policy",
         "verify-command",
         "verify-substage-evidence-path",
         "working-directory"
       ],
-      "inputCount": 93,
+      "inputCount": 94,
       "secrets": [
         "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
         "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -262,8 +265,10 @@
       "id": ".bump-minor-version",
       "path": ".github/workflows/.bump-minor-version.yml",
       "reusable": true,
-      "inputs": [],
-      "inputCount": 0,
+      "inputs": [
+        "universal-request-json"
+      ],
+      "inputCount": 1,
       "secrets": [
         "GITHUB_PUSH_TOKEN"
       ],
@@ -297,9 +302,10 @@
         "render-media",
         "renderer-image",
         "scenario-path",
-        "source-ref"
+        "source-ref",
+        "universal-request-json"
       ],
-      "inputCount": 12,
+      "inputCount": 13,
       "secrets": [
         "DEMO_UPDATE_TOKEN"
       ],
@@ -358,10 +364,11 @@
         "shifu-cache-profile-digest",
         "shifu-cache-profile-ref",
         "source-ref",
+        "universal-request-json",
         "untrusted-policy",
         "working-directory"
       ],
-      "inputCount": 30,
+      "inputCount": 31,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -398,7 +405,6 @@
       "reusable": true,
       "inputs": [
         "admission-json",
-        "authority-job-id",
         "authority-workflow-path",
         "auto-admission",
         "auto-admission-kind",
@@ -434,6 +440,7 @@
         "runner-provenance-json",
         "source-sha",
         "target-ref",
+        "universal-request-json",
         "used-nonces-json"
       ],
       "inputCount": 38,
@@ -586,9 +593,10 @@
         "standalone-binary-distribution",
         "target-ref",
         "target-sha",
-        "trusted-publishing"
+        "trusted-publishing",
+        "universal-request-json"
       ],
-      "inputCount": 121,
+      "inputCount": 122,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -625,14 +633,17 @@
         "release-candidate-artifact",
         "release-candidate-recovery-receipt-artifact",
         "release-candidate-recovery-root",
+        "release-invocation-root",
         "release-propagation-work-artifact",
+        "release-receipt-root",
         "release-tail-declaration-root",
         "release-tail-receipt-roots-json",
         "release-tail-state-root",
         "release-tail-transaction-root",
-        "release-tail-transaction-state"
+        "release-tail-transaction-state",
+        "release-transaction-root"
       ],
-      "outputCount": 28,
+      "outputCount": 31,
       "surface": "reusable-workflow",
       "capabilityGroup": "api-cli-reference",
       "status": "active",
@@ -802,10 +813,11 @@
         "python-version",
         "setup-env-timeout-minutes",
         "setup-python-enabled",
+        "universal-request-json",
         "use-pipenv",
         "use-poetry"
       ],
-      "inputCount": 41,
+      "inputCount": 42,
       "secrets": [
         "APPLE_CSC_KEY",
         "APPLE_CSC_KEY_PASSWORD",
@@ -869,9 +881,10 @@
         "aws-region",
         "aws-role",
         "aws-root",
-        "manager"
+        "manager",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "AWS_ACCOUNT_ID",
         "NODE_AUTH_TOKEN"
@@ -907,9 +920,10 @@
         "release-path",
         "release-url",
         "repo",
+        "universal-request-json",
         "upper-edge"
       ],
-      "inputCount": 13,
+      "inputCount": 14,
       "secrets": [
         "AIRTABLE_API_KEY",
         "GITHUB_PUSH_TOKEN"
@@ -936,9 +950,10 @@
         "force",
         "remote-host",
         "remote-path",
-        "remote-repo"
+        "remote-repo",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "REMOTE_CREDENTIAL",
         "REMOTE_USER"
@@ -1003,10 +1018,11 @@
         "staging-apply",
         "staging-aws-role-arn",
         "staging-environment",
+        "universal-request-json",
         "verify-command",
         "working-directory"
       ],
-      "inputCount": 43,
+      "inputCount": 44,
       "secrets": [
         "production-release-app-private-key"
       ],
@@ -1085,9 +1101,10 @@
         "bucket-release",
         "max-preview-links",
         "node-version",
-        "preview-files"
+        "preview-files",
+        "universal-request-json"
       ],
-      "inputCount": 5,
+      "inputCount": 6,
       "secrets": [
         "AWS_USER_ACCESS_KEY_ID",
         "AWS_USER_SECRET_ACCESS_KEY",
@@ -1212,6 +1229,38 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
     },
+    {
+      "id": "bootstrap",
+      "path": ".github/workflows/bootstrap.yml",
+      "reusable": true,
+      "inputs": [
+        "request-json"
+      ],
+      "inputCount": 1,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [
+        "admission-root",
+        "backflow-root",
+        "request-root",
+        "result-json",
+        "result-root",
+        "runtime-sha",
+        "terminal-receipt-json",
+        "terminal-receipt-root"
+      ],
+      "outputCount": 8,
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
+    },
     {
       "id": "build-surface-fixture",
       "path": ".github/workflows/build-surface-fixture.yml",
@@ -1330,12 +1379,13 @@
         "setup-rust",
         "shifu-cache-profile-digest",
         "shifu-cache-profile-ref",
+        "universal-request-json",
         "untrusted-policy",
         "verify-command",
         "verify-substage-evidence-path",
         "working-directory"
       ],
-      "inputCount": 96,
+      "inputCount": 97,
       "secrets": [
         "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
         "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -1556,9 +1606,10 @@
         "require-approval",
         "required-status-checks",
         "same-repository-only",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 16,
+      "inputCount": 17,
       "secrets": [
         "github-token"
       ],
@@ -1702,10 +1753,11 @@
         "source-proof-policy-paths-json",
         "source-proof-required-contexts-json",
         "source-proof-reuse",
+        "universal-request-json",
         "upload-artifacts",
         "working-directory"
       ],
-      "inputCount": 12,
+      "inputCount": 13,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -1753,9 +1805,10 @@
         "reactivation-authorized",
         "settlement-authorized",
         "source-branch",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 15,
+      "inputCount": 16,
       "secrets": [
         "promotion-token"
       ],
@@ -1807,9 +1860,10 @@
         "outcome",
         "reason",
         "target-branch",
-        "terminal-evidence-root"
+        "terminal-evidence-root",
+        "universal-request-json"
       ],
-      "inputCount": 12,
+      "inputCount": 13,
       "secrets": [
         "github-token"
       ],
@@ -1848,9 +1902,10 @@
         "replay-tree-sha",
         "required-context-roots-json",
         "target-branch",
-        "terminal-evidence-root"
+        "terminal-evidence-root",
+        "universal-request-json"
       ],
-      "inputCount": 13,
+      "inputCount": 14,
       "secrets": [
         "github-token"
       ],
@@ -1942,9 +1997,10 @@
         "source-workflow-run-id",
         "target-branch",
         "toolchain-root",
+        "universal-request-json",
         "warrant-lease-seconds"
       ],
-      "inputCount": 44,
+      "inputCount": 45,
       "secrets": [
         "github-token"
       ],
@@ -1996,9 +2052,10 @@
         "mutation-authorized",
         "preflight-workflow-path",
         "priority-workflows-json",
-        "source-branch"
+        "source-branch",
+        "universal-request-json"
       ],
-      "inputCount": 10,
+      "inputCount": 11,
       "secrets": [
         "qualification-token"
       ],
@@ -2039,7 +2096,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.0",
+      "introducedVersion": "4.0.2-alpha.11",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2060,7 +2117,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.0",
+      "introducedVersion": "4.0.2-alpha.11",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2081,7 +2138,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.0",
+      "introducedVersion": "4.0.2-alpha.11",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2105,9 +2162,10 @@
         "stale-days",
         "stale-pull-request-label",
         "target-branch",
-        "temporary-branch-patterns"
+        "temporary-branch-patterns",
+        "universal-request-json"
       ],
-      "inputCount": 14,
+      "inputCount": 15,
       "secrets": [
         "housekeeper_app_id",
         "housekeeper_app_private_key",
@@ -2131,7 +2189,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.0",
+      "introducedVersion": "4.0.2-alpha.11",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2154,9 +2212,10 @@
         "retention-days",
         "source-sha",
         "subject-artifact-name",
-        "subject-relative-path"
+        "subject-relative-path",
+        "universal-request-json"
       ],
-      "inputCount": 13,
+      "inputCount": 14,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -2249,10 +2308,11 @@
         "target-ref",
         "target-sha",
         "toolchain-type",
+        "universal-request-json",
         "verify-command",
         "working-directory"
       ],
-      "inputCount": 26,
+      "inputCount": 27,
       "secrets": [
         "BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID",
         "BUILDCHAIN_GENERATED_WRITE_APP_PRIVATE_KEY",
@@ -2323,10 +2383,11 @@
         "toolchain-digest",
         "toolchain-image",
         "toolchain-type",
+        "universal-request-json",
         "verify-command",
         "working-directory"
       ],
-      "inputCount": 38,
+      "inputCount": 39,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -2372,9 +2433,10 @@
         "require-approval",
         "required-status-checks",
         "same-repository-only",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 13,
+      "inputCount": 14,
       "secrets": [
         "github-token"
       ],
@@ -2406,9 +2468,10 @@
         "buildchain-ref",
         "buildchain-repository",
         "dry-run",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "github-token"
       ],
@@ -2448,9 +2511,10 @@
         "production-aws-role-arn",
         "production-bucket",
         "production-environment",
+        "universal-request-json",
         "verify-command"
       ],
-      "inputCount": 12,
+      "inputCount": 13,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -2476,9 +2540,10 @@
         "buildchain-ref",
         "buildchain-repository",
         "dry-run",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "github-token"
       ],
@@ -2528,10 +2593,11 @@
         "toolchain-digest",
         "toolchain-image",
         "toolchain-type",
+        "universal-request-json",
         "verify-command",
         "working-directory"
       ],
-      "inputCount": 23,
+      "inputCount": 24,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -2674,9 +2740,10 @@
         "standalone-binary-distribution",
         "target-ref",
         "target-sha",
-        "trusted-publishing"
+        "trusted-publishing",
+        "universal-request-json"
       ],
-      "inputCount": 106,
+      "inputCount": 107,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2725,14 +2792,17 @@
         "release-candidate-artifact",
         "release-candidate-recovery-receipt-artifact",
         "release-candidate-recovery-root",
+        "release-invocation-root",
         "release-propagation-work-artifact",
+        "release-receipt-root",
         "release-tail-declaration-root",
         "release-tail-receipt-roots-json",
         "release-tail-state-root",
         "release-tail-transaction-root",
-        "release-tail-transaction-state"
+        "release-tail-transaction-state",
+        "release-transaction-root"
       ],
-      "outputCount": 40,
+      "outputCount": 43,
       "surface": "release-governance",
       "capabilityGroup": "reusable-build",
       "status": "active",
@@ -2752,9 +2822,10 @@
         "apply",
         "branch",
         "buildchain-ref",
-        "candidate-sha"
+        "candidate-sha",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "BUILDCHAIN_PROMOTION_TOKEN",
         "governance-token"
@@ -2838,9 +2909,10 @@
         "pr-title",
         "refresh-managed-readme-badges",
         "source-node",
+        "universal-request-json",
         "upstream-release-json"
       ],
-      "inputCount": 19,
+      "inputCount": 20,
       "secrets": [
         "propagation-token"
       ],
@@ -2890,9 +2962,10 @@
         "rehearsal-capsule-path",
         "rehearsal-evidence-path",
         "rehearsal-mode",
-        "state-path"
+        "state-path",
+        "universal-request-json"
       ],
-      "inputCount": 14,
+      "inputCount": 15,
       "secrets": [
         "http-token"
       ],
@@ -3000,9 +3073,10 @@
         "required-checks",
         "revoke-reason",
         "revoked-versions",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 16,
+      "inputCount": 17,
       "secrets": [
         "approval-token",
         "promotion-token"
@@ -3028,6 +3102,56 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
     },
+    {
+      "id": "universal-bootstrap-dogfood",
+      "path": ".github/workflows/universal-bootstrap-dogfood.yml",
+      "reusable": false,
+      "inputs": [],
+      "inputCount": 0,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [],
+      "outputCount": 0,
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
+    },
+    {
+      "id": "universal-bootstrap-recovery",
+      "path": ".github/workflows/universal-bootstrap-recovery.yml",
+      "reusable": true,
+      "inputs": [
+        "request-json"
+      ],
+      "inputCount": 1,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [
+        "backflow-root",
+        "result-json",
+        "runtime-sha",
+        "terminal-receipt-json",
+        "terminal-receipt-root"
+      ],
+      "outputCount": 5,
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
+    },
     {
       "id": "v4-adopter-delivery-dogfood",
       "path": ".github/workflows/v4-adopter-delivery-dogfood.yml",
@@ -3061,9 +3185,10 @@
         "consumer-repository",
         "input-path",
         "invocation-source-path",
-        "node-version"
+        "node-version",
+        "universal-request-json"
       ],
-      "inputCount": 8,
+      "inputCount": 9,
       "secrets": [],
       "secretCount": 0,
       "outputs": [],
@@ -3152,9 +3277,10 @@
         "go-version",
         "install-artifact-path",
         "node-version",
+        "universal-request-json",
         "verify-artifact-path"
       ],
-      "inputCount": 6,
+      "inputCount": 7,
       "secrets": [],
       "secretCount": 0,
       "outputs": [],
@@ -3178,9 +3304,10 @@
         "artifact-retention-days",
         "consumer-policy-receipt-json",
         "macos-finalization-command",
-        "request-json"
+        "request-json",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "BUILDCHAIN_EVIDENCE_READ_TOKEN",
         "BUILDCHAIN_SIGNING_TOKEN"
@@ -3528,15 +3655,37 @@
       "path": "actions/v4-release-candidate-promote/action.yml",
       "inputs": [
         "artifact-paths",
+        "candidate-build-summary-path",
         "candidate-passport-path",
         "failure-after-capability",
+        "mutation-token",
+        "product-publication-intent-path",
         "publication-qualification-path",
+        "publish-auth",
+        "publish-command",
+        "publish-dist-tag",
+        "publish-mode",
+        "publish-package-main",
+        "publish-package-set-order",
+        "publish-rematerialize-on-resume",
+        "publish-transaction-override",
+        "publisher-workflow-sha",
         "repository",
+        "required-artifacts-path",
+        "required-status-check",
+        "resume-transaction-id",
+        "runtime-commit",
+        "runtime-tree",
+        "sealed-bundle-manifest",
+        "sealed-bundle-root",
+        "source-sha",
         "stage-capsules-path",
         "state-path",
+        "target-ref",
+        "target-sha",
         "token"
       ],
-      "inputCount": 8,
+      "inputCount": 30,
       "capabilityGroup": "api-cli-reference",
       "status": "active",
       "owner": "buildchain-actions",