@kungfu-tech/buildchain 4.0.2-alpha.0 → 4.0.2-alpha.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (82) hide show
  1. package/architecture/agent-change-map.md +52 -5
  2. package/architecture/ci-lane-change-budget.json +408 -8
  3. package/architecture/internal-capabilities.json +44 -1
  4. package/architecture/maintainability-debt.json +65 -133
  5. package/architecture/maintainability-policy.json +20 -15
  6. package/architecture/release-tail-contract-inventory.json +4 -4
  7. package/architecture/v3-core-mechanism-inventory.json +1 -0
  8. package/architecture/v3-v4-live-capability-inventory.json +17 -17
  9. package/architecture/v4-delivery-warrant-shadow-fixtures.json +5 -5
  10. package/architecture/v4-release-invocation-fixtures.json +139 -0
  11. package/architecture/v4-release-topology.json +317 -0
  12. package/architecture/v4-runtime-semantic-closure.json +4 -1
  13. package/architecture/v4-universal-workflow-bootstrap.json +181 -0
  14. package/architecture/v4-universal-workflow-fault-campaign.json +72 -0
  15. package/architecture/v4-universal-workflow-train-admission.json +40 -0
  16. package/contracts/buildchain-v2-residuals-v1.json +0 -9
  17. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  18. package/contracts/v4-release-invocation-v1.schema.json +134 -0
  19. package/dist/site/buildchain-contract.json +87 -42
  20. package/dist/site/buildchain-site.json +15 -10
  21. package/dist/site/capability-registry.json +1 -1
  22. package/dist/site/controller-registry.json +46 -10
  23. package/dist/site/kfd-claims.json +176 -69
  24. package/dist/site/kfd-upstream-aggregate.json +1 -1
  25. package/dist/site/manual-registry.json +2 -2
  26. package/dist/site/node-api-registry.json +97 -22
  27. package/dist/site/page-registry.json +9 -4
  28. package/dist/site/public-surface-audit.json +190 -71
  29. package/dist/site/publication-authority-registry.json +68 -3
  30. package/dist/site/publication-registry.json +4 -4
  31. package/dist/site/site-manifest.json +6 -6
  32. package/dist/site/workflow-registry.json +221 -72
  33. package/docs/node-api-reference.md +28 -25
  34. package/docs/reusable-build-surface.md +16 -0
  35. package/package.json +2 -2
  36. package/packages/core/buildchain-publication-authority.js +3 -0
  37. package/packages/core/ci-lane-change-budget.js +14 -1
  38. package/packages/core/dev-delivery-candidate-identity.js +45 -17
  39. package/packages/core/dev-delivery-execution-transfer.js +6 -7
  40. package/packages/core/dev-delivery-provider-heartbeat.js +22 -6
  41. package/packages/core/dev-delivery-warrant-legacy-recovery.js +4 -2
  42. package/packages/core/dev-delivery-warrant-native-compatibility.js +33 -0
  43. package/packages/core/dev-delivery-warrant-state.js +54 -54
  44. package/packages/core/dev-delivery-warrant.js +8 -0
  45. package/packages/core/dev-delivery-writer-protocol-transition.js +72 -0
  46. package/packages/core/release-tail-product-capabilities.js +29 -0
  47. package/packages/core/release-tail-provider-plane.js +3 -3
  48. package/packages/core/v4-canonical-contracts.js +14 -0
  49. package/packages/core/v4-floating-consumer-policy.js +4 -1
  50. package/packages/core/v4-product-publication.js +387 -0
  51. package/packages/core/v4-protected-publication-source.js +93 -0
  52. package/packages/core/v4-publication-qualification.js +1 -0
  53. package/packages/core/v4-release-invocation.js +425 -0
  54. package/packages/core/v4-universal-workflow-bootstrap.js +596 -0
  55. package/scripts/audit-publication-control-plane.mjs +0 -1
  56. package/scripts/check-inventory.mjs +27 -59
  57. package/scripts/check-maintainability.mjs +29 -118
  58. package/scripts/check-v3-v4-capability-inventory.mjs +3 -61
  59. package/scripts/check-v4-floating-consumer-policy-contract.mjs +10 -20
  60. package/scripts/check-v4-release-topology.mjs +493 -0
  61. package/scripts/check-v4-universal-workflow-bootstrap.mjs +257 -0
  62. package/scripts/dev-delivery-warrant.mjs +26 -5
  63. package/scripts/generate-channel-build-workflow.mjs +5 -1
  64. package/scripts/generate-channel-promotion-workflow.mjs +17 -57
  65. package/scripts/generate-v4-universal-workflow-facades.mjs +415 -0
  66. package/scripts/maintainability-public-surface.mjs +115 -0
  67. package/scripts/release-candidate-resolver.mjs +23 -24
  68. package/scripts/resume-from-candidate-run.mjs +16 -17
  69. package/scripts/universal-facade-maintainability.mjs +82 -0
  70. package/scripts/v3-v4-capability-catalog.mjs +107 -0
  71. package/scripts/v4-declarative-promotion-admission.mjs +4 -1
  72. package/scripts/v4-product-publication-intent.mjs +114 -0
  73. package/scripts/v4-release-candidate-adapter.mjs +41 -0
  74. package/scripts/v4-universal-workflow-backflow.mjs +212 -0
  75. package/scripts/v4-universal-workflow-engine.mjs +586 -0
  76. package/scripts/v4-universal-workflow-self-dogfood.mjs +205 -0
  77. package/templates/universal-buildchain-bootstrap-recovery.yml +282 -0
  78. package/templates/universal-buildchain-bootstrap.yml +28 -0
  79. package/scripts/capture-package-release-propagation.mjs +0 -263
  80. package/scripts/publication-commit-evidence.mjs +0 -444
  81. package/scripts/publish-github-artifact-attestation-evidence.mjs +0 -201
  82. package/scripts/stage-github-artifact-attestation-inputs.mjs +0 -65
package/dist/site/kfd-claims.json CHANGED
@@ -21,10 +21,10 @@
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "3ba4e7c9bdccd207be8b168f85704ee0fe0403c64fa06deb27ecf6910407646e",
24
+ "sha256": "1cad80fe47700d775ca40e02480e6bf1549329230ad32650825063520ace76c1",
25
25
  "summary": {
26
26
  "cliCommandCount": 117,
27
- "workflowCount": 77,
27
+ "workflowCount": 80,
28
28
  "actionCount": 8,
29
29
  "sitePageCount": 84,
30
30
  "docCommandRefCount": 1050,
@@ -246,10 +246,10 @@
246
246
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
247
247
  "path": "dist/site/public-surface-audit.json",
248
248
  "status": "passed",
249
- "sha256": "3ba4e7c9bdccd207be8b168f85704ee0fe0403c64fa06deb27ecf6910407646e",
249
+ "sha256": "1cad80fe47700d775ca40e02480e6bf1549329230ad32650825063520ace76c1",
250
250
  "summary": {
251
251
  "cliCommandCount": 117,
252
- "workflowCount": 77,
252
+ "workflowCount": 80,
253
253
  "actionCount": 8,
254
254
  "sitePageCount": 84,
255
255
  "docCommandRefCount": 1050,
@@ -3854,7 +3854,7 @@
3854
3854
  "visibility": "public",
3855
3855
  "participantFacing": true,
3856
3856
  "public": true,
3857
- "inputCount": 11,
3857
+ "inputCount": 12,
3858
3858
  "inputs": [
3859
3859
  "adapter-arguments-json",
3860
3860
  "adapter-path",
@@ -3866,7 +3866,8 @@
3866
3866
  "require-trusted-event",
3867
3867
  "source-artifact-digest",
3868
3868
  "source-artifact-name",
3869
- "source-ref"
3869
+ "source-ref",
3870
+ "universal-request-json"
3870
3871
  ],
3871
3872
  "reverseAuditSource": ".github/workflows"
3872
3873
  },
@@ -3880,7 +3881,7 @@
3880
3881
  "visibility": "public",
3881
3882
  "participantFacing": true,
3882
3883
  "public": true,
3883
- "inputCount": 15,
3884
+ "inputCount": 16,
3884
3885
  "inputs": [
3885
3886
  "auto-admission",
3886
3887
  "buildchain-ref",
@@ -3896,7 +3897,8 @@
3896
3897
  "publication-version",
3897
3898
  "release-tag",
3898
3899
  "source-sha",
3899
- "target-ref"
3900
+ "target-ref",
3901
+ "universal-request-json"
3900
3902
  ],
3901
3903
  "reverseAuditSource": ".github/workflows"
3902
3904
  },
@@ -3910,7 +3912,7 @@
3910
3912
  "visibility": "public",
3911
3913
  "participantFacing": true,
3912
3914
  "public": true,
3913
- "inputCount": 93,
3915
+ "inputCount": 94,
3914
3916
  "inputs": [
3915
3917
  "artifact-compression-level",
3916
3918
  "artifact-finalization-command",
@@ -4001,6 +4003,7 @@
4001
4003
  "setup-rust",
4002
4004
  "shifu-cache-profile-digest",
4003
4005
  "shifu-cache-profile-ref",
4006
+ "universal-request-json",
4004
4007
  "untrusted-policy",
4005
4008
  "verify-command",
4006
4009
  "verify-substage-evidence-path",
@@ -4018,8 +4021,10 @@
4018
4021
  "visibility": "public",
4019
4022
  "participantFacing": true,
4020
4023
  "public": true,
4021
- "inputCount": 0,
4022
- "inputs": [],
4024
+ "inputCount": 1,
4025
+ "inputs": [
4026
+ "universal-request-json"
4027
+ ],
4023
4028
  "reverseAuditSource": ".github/workflows"
4024
4029
  },
4025
4030
  {
@@ -4032,7 +4037,7 @@
4032
4037
  "visibility": "public",
4033
4038
  "participantFacing": true,
4034
4039
  "public": true,
4035
- "inputCount": 12,
4040
+ "inputCount": 13,
4036
4041
  "inputs": [
4037
4042
  "artifact-retention-days",
4038
4043
  "binary-artifact-digest",
@@ -4045,7 +4050,8 @@
4045
4050
  "render-media",
4046
4051
  "renderer-image",
4047
4052
  "scenario-path",
4048
- "source-ref"
4053
+ "source-ref",
4054
+ "universal-request-json"
4049
4055
  ],
4050
4056
  "reverseAuditSource": ".github/workflows"
4051
4057
  },
@@ -4059,7 +4065,7 @@
4059
4065
  "visibility": "public",
4060
4066
  "participantFacing": true,
4061
4067
  "public": true,
4062
- "inputCount": 30,
4068
+ "inputCount": 31,
4063
4069
  "inputs": [
4064
4070
  "artifact-name",
4065
4071
  "artifact-retention-days",
@@ -4089,6 +4095,7 @@
4089
4095
  "shifu-cache-profile-digest",
4090
4096
  "shifu-cache-profile-ref",
4091
4097
  "source-ref",
4098
+ "universal-request-json",
4092
4099
  "untrusted-policy",
4093
4100
  "working-directory"
4094
4101
  ],
@@ -4107,7 +4114,6 @@
4107
4114
  "inputCount": 38,
4108
4115
  "inputs": [
4109
4116
  "admission-json",
4110
- "authority-job-id",
4111
4117
  "authority-workflow-path",
4112
4118
  "auto-admission",
4113
4119
  "auto-admission-kind",
@@ -4143,6 +4149,7 @@
4143
4149
  "runner-provenance-json",
4144
4150
  "source-sha",
4145
4151
  "target-ref",
4152
+ "universal-request-json",
4146
4153
  "used-nonces-json"
4147
4154
  ],
4148
4155
  "reverseAuditSource": ".github/workflows"
@@ -4157,7 +4164,7 @@
4157
4164
  "visibility": "public",
4158
4165
  "participantFacing": true,
4159
4166
  "public": true,
4160
- "inputCount": 121,
4167
+ "inputCount": 122,
4161
4168
  "inputs": [
4162
4169
  "allow-repository",
4163
4170
  "artifact-name",
@@ -4279,7 +4286,8 @@
4279
4286
  "standalone-binary-distribution",
4280
4287
  "target-ref",
4281
4288
  "target-sha",
4282
- "trusted-publishing"
4289
+ "trusted-publishing",
4290
+ "universal-request-json"
4283
4291
  ],
4284
4292
  "reverseAuditSource": ".github/workflows"
4285
4293
  },
@@ -4369,7 +4377,7 @@
4369
4377
  "visibility": "public",
4370
4378
  "participantFacing": true,
4371
4379
  "public": true,
4372
- "inputCount": 41,
4380
+ "inputCount": 42,
4373
4381
  "inputs": [
4374
4382
  "auto-approve-enabled",
4375
4383
  "aws-ci-region",
@@ -4410,6 +4418,7 @@
4410
4418
  "python-version",
4411
4419
  "setup-env-timeout-minutes",
4412
4420
  "setup-python-enabled",
4421
+ "universal-request-json",
4413
4422
  "use-pipenv",
4414
4423
  "use-poetry"
4415
4424
  ],
@@ -4444,12 +4453,13 @@
4444
4453
  "visibility": "public",
4445
4454
  "participantFacing": true,
4446
4455
  "public": true,
4447
- "inputCount": 4,
4456
+ "inputCount": 5,
4448
4457
  "inputs": [
4449
4458
  "aws-region",
4450
4459
  "aws-role",
4451
4460
  "aws-root",
4452
- "manager"
4461
+ "manager",
4462
+ "universal-request-json"
4453
4463
  ],
4454
4464
  "reverseAuditSource": ".github/workflows"
4455
4465
  },
@@ -4463,7 +4473,7 @@
4463
4473
  "visibility": "public",
4464
4474
  "participantFacing": true,
4465
4475
  "public": true,
4466
- "inputCount": 13,
4476
+ "inputCount": 14,
4467
4477
  "inputs": [
4468
4478
  "aws-region",
4469
4479
  "aws-role-arn",
@@ -4477,6 +4487,7 @@
4477
4487
  "release-path",
4478
4488
  "release-url",
4479
4489
  "repo",
4490
+ "universal-request-json",
4480
4491
  "upper-edge"
4481
4492
  ],
4482
4493
  "reverseAuditSource": ".github/workflows"
@@ -4491,12 +4502,13 @@
4491
4502
  "visibility": "public",
4492
4503
  "participantFacing": true,
4493
4504
  "public": true,
4494
- "inputCount": 4,
4505
+ "inputCount": 5,
4495
4506
  "inputs": [
4496
4507
  "force",
4497
4508
  "remote-host",
4498
4509
  "remote-path",
4499
- "remote-repo"
4510
+ "remote-repo",
4511
+ "universal-request-json"
4500
4512
  ],
4501
4513
  "reverseAuditSource": ".github/workflows"
4502
4514
  },
@@ -4510,7 +4522,7 @@
4510
4522
  "visibility": "public",
4511
4523
  "participantFacing": true,
4512
4524
  "public": true,
4513
- "inputCount": 43,
4525
+ "inputCount": 44,
4514
4526
  "inputs": [
4515
4527
  "artifact-path",
4516
4528
  "aws-region",
@@ -4553,6 +4565,7 @@
4553
4565
  "staging-apply",
4554
4566
  "staging-aws-role-arn",
4555
4567
  "staging-environment",
4568
+ "universal-request-json",
4556
4569
  "verify-command",
4557
4570
  "working-directory"
4558
4571
  ],
@@ -4586,13 +4599,14 @@
4586
4599
  "visibility": "public",
4587
4600
  "participantFacing": true,
4588
4601
  "public": true,
4589
- "inputCount": 5,
4602
+ "inputCount": 6,
4590
4603
  "inputs": [
4591
4604
  "aws-user-region",
4592
4605
  "bucket-release",
4593
4606
  "max-preview-links",
4594
4607
  "node-version",
4595
- "preview-files"
4608
+ "preview-files",
4609
+ "universal-request-json"
4596
4610
  ],
4597
4611
  "reverseAuditSource": ".github/workflows"
4598
4612
  },
@@ -4666,6 +4680,22 @@
4666
4680
  "inputs": [],
4667
4681
  "reverseAuditSource": ".github/workflows"
4668
4682
  },
4683
+ {
4684
+ "id": "workflow:bootstrap",
4685
+ "name": "workflow:bootstrap",
4686
+ "kind": "workflow",
4687
+ "sourcePath": ".github/workflows/bootstrap.yml",
4688
+ "evidencePath": ".github/workflows/bootstrap.yml",
4689
+ "availability": "shipped",
4690
+ "visibility": "public",
4691
+ "participantFacing": true,
4692
+ "public": true,
4693
+ "inputCount": 1,
4694
+ "inputs": [
4695
+ "request-json"
4696
+ ],
4697
+ "reverseAuditSource": ".github/workflows"
4698
+ },
4669
4699
  {
4670
4700
  "id": "workflow:build-surface-fixture",
4671
4701
  "name": "workflow:build-surface-fixture",
@@ -4690,7 +4720,7 @@
4690
4720
  "visibility": "public",
4691
4721
  "participantFacing": true,
4692
4722
  "public": true,
4693
- "inputCount": 96,
4723
+ "inputCount": 97,
4694
4724
  "inputs": [
4695
4725
  "artifact-compression-level",
4696
4726
  "artifact-finalization-command",
@@ -4784,6 +4814,7 @@
4784
4814
  "setup-rust",
4785
4815
  "shifu-cache-profile-digest",
4786
4816
  "shifu-cache-profile-ref",
4817
+ "universal-request-json",
4787
4818
  "untrusted-policy",
4788
4819
  "verify-command",
4789
4820
  "verify-substage-evidence-path",
@@ -4885,7 +4916,7 @@
4885
4916
  "visibility": "public",
4886
4917
  "participantFacing": true,
4887
4918
  "public": true,
4888
- "inputCount": 16,
4919
+ "inputCount": 17,
4889
4920
  "inputs": [
4890
4921
  "allowed-head-prefixes",
4891
4922
  "block-labels",
@@ -4902,7 +4933,8 @@
4902
4933
  "require-approval",
4903
4934
  "required-status-checks",
4904
4935
  "same-repository-only",
4905
- "target-branch"
4936
+ "target-branch",
4937
+ "universal-request-json"
4906
4938
  ],
4907
4939
  "reverseAuditSource": ".github/workflows"
4908
4940
  },
@@ -4986,7 +5018,7 @@
4986
5018
  "visibility": "public",
4987
5019
  "participantFacing": true,
4988
5020
  "public": true,
4989
- "inputCount": 12,
5021
+ "inputCount": 13,
4990
5022
  "inputs": [
4991
5023
  "buildchain-ref",
4992
5024
  "buildchain-repository",
@@ -4998,6 +5030,7 @@
4998
5030
  "source-proof-policy-paths-json",
4999
5031
  "source-proof-required-contexts-json",
5000
5032
  "source-proof-reuse",
5033
+ "universal-request-json",
5001
5034
  "upload-artifacts",
5002
5035
  "working-directory"
5003
5036
  ],
@@ -5013,7 +5046,7 @@
5013
5046
  "visibility": "public",
5014
5047
  "participantFacing": true,
5015
5048
  "public": true,
5016
- "inputCount": 15,
5049
+ "inputCount": 16,
5017
5050
  "inputs": [
5018
5051
  "alpha-workflow-path",
5019
5052
  "auto-merge",
@@ -5029,7 +5062,8 @@
5029
5062
  "reactivation-authorized",
5030
5063
  "settlement-authorized",
5031
5064
  "source-branch",
5032
- "target-branch"
5065
+ "target-branch",
5066
+ "universal-request-json"
5033
5067
  ],
5034
5068
  "reverseAuditSource": ".github/workflows"
5035
5069
  },
@@ -5043,7 +5077,7 @@
5043
5077
  "visibility": "public",
5044
5078
  "participantFacing": true,
5045
5079
  "public": true,
5046
- "inputCount": 12,
5080
+ "inputCount": 13,
5047
5081
  "inputs": [
5048
5082
  "buildchain-ref",
5049
5083
  "buildchain-repository",
@@ -5056,7 +5090,8 @@
5056
5090
  "outcome",
5057
5091
  "reason",
5058
5092
  "target-branch",
5059
- "terminal-evidence-root"
5093
+ "terminal-evidence-root",
5094
+ "universal-request-json"
5060
5095
  ],
5061
5096
  "reverseAuditSource": ".github/workflows"
5062
5097
  },
@@ -5070,7 +5105,7 @@
5070
5105
  "visibility": "public",
5071
5106
  "participantFacing": true,
5072
5107
  "public": true,
5073
- "inputCount": 13,
5108
+ "inputCount": 14,
5074
5109
  "inputs": [
5075
5110
  "buildchain-ref",
5076
5111
  "buildchain-repository",
@@ -5084,7 +5119,8 @@
5084
5119
  "replay-tree-sha",
5085
5120
  "required-context-roots-json",
5086
5121
  "target-branch",
5087
- "terminal-evidence-root"
5122
+ "terminal-evidence-root",
5123
+ "universal-request-json"
5088
5124
  ],
5089
5125
  "reverseAuditSource": ".github/workflows"
5090
5126
  },
@@ -5112,7 +5148,7 @@
5112
5148
  "visibility": "public",
5113
5149
  "participantFacing": true,
5114
5150
  "public": true,
5115
- "inputCount": 44,
5151
+ "inputCount": 45,
5116
5152
  "inputs": [
5117
5153
  "active-lease-context",
5118
5154
  "affected-paths-json",
@@ -5157,6 +5193,7 @@
5157
5193
  "source-workflow-run-id",
5158
5194
  "target-branch",
5159
5195
  "toolchain-root",
5196
+ "universal-request-json",
5160
5197
  "warrant-lease-seconds"
5161
5198
  ],
5162
5199
  "reverseAuditSource": ".github/workflows"
@@ -5171,7 +5208,7 @@
5171
5208
  "visibility": "public",
5172
5209
  "participantFacing": true,
5173
5210
  "public": true,
5174
- "inputCount": 10,
5211
+ "inputCount": 11,
5175
5212
  "inputs": [
5176
5213
  "buildchain-ref",
5177
5214
  "buildchain-repository",
@@ -5182,7 +5219,8 @@
5182
5219
  "mutation-authorized",
5183
5220
  "preflight-workflow-path",
5184
5221
  "priority-workflows-json",
5185
- "source-branch"
5222
+ "source-branch",
5223
+ "universal-request-json"
5186
5224
  ],
5187
5225
  "reverseAuditSource": ".github/workflows"
5188
5226
  },
@@ -5238,7 +5276,7 @@
5238
5276
  "visibility": "public",
5239
5277
  "participantFacing": true,
5240
5278
  "public": true,
5241
- "inputCount": 14,
5279
+ "inputCount": 15,
5242
5280
  "inputs": [
5243
5281
  "apply-enabled",
5244
5282
  "artifact-prefix",
@@ -5253,7 +5291,8 @@
5253
5291
  "stale-days",
5254
5292
  "stale-pull-request-label",
5255
5293
  "target-branch",
5256
- "temporary-branch-patterns"
5294
+ "temporary-branch-patterns",
5295
+ "universal-request-json"
5257
5296
  ],
5258
5297
  "reverseAuditSource": ".github/workflows"
5259
5298
  },
@@ -5267,7 +5306,7 @@
5267
5306
  "visibility": "public",
5268
5307
  "participantFacing": true,
5269
5308
  "public": true,
5270
- "inputCount": 13,
5309
+ "inputCount": 14,
5271
5310
  "inputs": [
5272
5311
  "buildchain-ref",
5273
5312
  "environment",
@@ -5281,7 +5320,8 @@
5281
5320
  "retention-days",
5282
5321
  "source-sha",
5283
5322
  "subject-artifact-name",
5284
- "subject-relative-path"
5323
+ "subject-relative-path",
5324
+ "universal-request-json"
5285
5325
  ],
5286
5326
  "reverseAuditSource": ".github/workflows"
5287
5327
  },
@@ -5323,7 +5363,7 @@
5323
5363
  "visibility": "public",
5324
5364
  "participantFacing": true,
5325
5365
  "public": true,
5326
- "inputCount": 26,
5366
+ "inputCount": 27,
5327
5367
  "inputs": [
5328
5368
  "artifact-name",
5329
5369
  "artifact-paths",
@@ -5349,6 +5389,7 @@
5349
5389
  "target-ref",
5350
5390
  "target-sha",
5351
5391
  "toolchain-type",
5392
+ "universal-request-json",
5352
5393
  "verify-command",
5353
5394
  "working-directory"
5354
5395
  ],
@@ -5364,7 +5405,7 @@
5364
5405
  "visibility": "public",
5365
5406
  "participantFacing": true,
5366
5407
  "public": true,
5367
- "inputCount": 38,
5408
+ "inputCount": 39,
5368
5409
  "inputs": [
5369
5410
  "artifact-name",
5370
5411
  "artifact-retention-days",
@@ -5402,6 +5443,7 @@
5402
5443
  "toolchain-digest",
5403
5444
  "toolchain-image",
5404
5445
  "toolchain-type",
5446
+ "universal-request-json",
5405
5447
  "verify-command",
5406
5448
  "working-directory"
5407
5449
  ],
@@ -5417,7 +5459,7 @@
5417
5459
  "visibility": "public",
5418
5460
  "participantFacing": true,
5419
5461
  "public": true,
5420
- "inputCount": 13,
5462
+ "inputCount": 14,
5421
5463
  "inputs": [
5422
5464
  "allowed-head-prefixes",
5423
5465
  "block-labels",
@@ -5431,7 +5473,8 @@
5431
5473
  "require-approval",
5432
5474
  "required-status-checks",
5433
5475
  "same-repository-only",
5434
- "target-branch"
5476
+ "target-branch",
5477
+ "universal-request-json"
5435
5478
  ],
5436
5479
  "reverseAuditSource": ".github/workflows"
5437
5480
  },
@@ -5445,12 +5488,13 @@
5445
5488
  "visibility": "public",
5446
5489
  "participantFacing": true,
5447
5490
  "public": true,
5448
- "inputCount": 4,
5491
+ "inputCount": 5,
5449
5492
  "inputs": [
5450
5493
  "buildchain-ref",
5451
5494
  "buildchain-repository",
5452
5495
  "dry-run",
5453
- "target-branch"
5496
+ "target-branch",
5497
+ "universal-request-json"
5454
5498
  ],
5455
5499
  "reverseAuditSource": ".github/workflows"
5456
5500
  },
@@ -5464,7 +5508,7 @@
5464
5508
  "visibility": "public",
5465
5509
  "participantFacing": true,
5466
5510
  "public": true,
5467
- "inputCount": 12,
5511
+ "inputCount": 13,
5468
5512
  "inputs": [
5469
5513
  "artifact-path",
5470
5514
  "build-command",
@@ -5477,6 +5521,7 @@
5477
5521
  "production-aws-role-arn",
5478
5522
  "production-bucket",
5479
5523
  "production-environment",
5524
+ "universal-request-json",
5480
5525
  "verify-command"
5481
5526
  ],
5482
5527
  "reverseAuditSource": ".github/workflows"
@@ -5491,12 +5536,13 @@
5491
5536
  "visibility": "public",
5492
5537
  "participantFacing": true,
5493
5538
  "public": true,
5494
- "inputCount": 4,
5539
+ "inputCount": 5,
5495
5540
  "inputs": [
5496
5541
  "buildchain-ref",
5497
5542
  "buildchain-repository",
5498
5543
  "dry-run",
5499
- "target-branch"
5544
+ "target-branch",
5545
+ "universal-request-json"
5500
5546
  ],
5501
5547
  "reverseAuditSource": ".github/workflows"
5502
5548
  },
@@ -5510,7 +5556,7 @@
5510
5556
  "visibility": "public",
5511
5557
  "participantFacing": true,
5512
5558
  "public": true,
5513
- "inputCount": 23,
5559
+ "inputCount": 24,
5514
5560
  "inputs": [
5515
5561
  "artifact-name",
5516
5562
  "artifact-paths",
@@ -5533,6 +5579,7 @@
5533
5579
  "toolchain-digest",
5534
5580
  "toolchain-image",
5535
5581
  "toolchain-type",
5582
+ "universal-request-json",
5536
5583
  "verify-command",
5537
5584
  "working-directory"
5538
5585
  ],
@@ -5548,7 +5595,7 @@
5548
5595
  "visibility": "public",
5549
5596
  "participantFacing": true,
5550
5597
  "public": true,
5551
- "inputCount": 106,
5598
+ "inputCount": 107,
5552
5599
  "inputs": [
5553
5600
  "allow-repository",
5554
5601
  "artifact-name",
@@ -5655,7 +5702,8 @@
5655
5702
  "standalone-binary-distribution",
5656
5703
  "target-ref",
5657
5704
  "target-sha",
5658
- "trusted-publishing"
5705
+ "trusted-publishing",
5706
+ "universal-request-json"
5659
5707
  ],
5660
5708
  "reverseAuditSource": ".github/workflows"
5661
5709
  },
@@ -5669,12 +5717,13 @@
5669
5717
  "visibility": "public",
5670
5718
  "participantFacing": true,
5671
5719
  "public": true,
5672
- "inputCount": 4,
5720
+ "inputCount": 5,
5673
5721
  "inputs": [
5674
5722
  "apply",
5675
5723
  "branch",
5676
5724
  "buildchain-ref",
5677
- "candidate-sha"
5725
+ "candidate-sha",
5726
+ "universal-request-json"
5678
5727
  ],
5679
5728
  "reverseAuditSource": ".github/workflows"
5680
5729
  },
@@ -5716,7 +5765,7 @@
5716
5765
  "visibility": "public",
5717
5766
  "participantFacing": true,
5718
5767
  "public": true,
5719
- "inputCount": 19,
5768
+ "inputCount": 20,
5720
5769
  "inputs": [
5721
5770
  "agent-work-context-json",
5722
5771
  "agent-work-mode",
@@ -5736,6 +5785,7 @@
5736
5785
  "pr-title",
5737
5786
  "refresh-managed-readme-badges",
5738
5787
  "source-node",
5788
+ "universal-request-json",
5739
5789
  "upstream-release-json"
5740
5790
  ],
5741
5791
  "reverseAuditSource": ".github/workflows"
@@ -5750,7 +5800,7 @@
5750
5800
  "visibility": "public",
5751
5801
  "participantFacing": true,
5752
5802
  "public": true,
5753
- "inputCount": 14,
5803
+ "inputCount": 15,
5754
5804
  "inputs": [
5755
5805
  "buildchain-ref",
5756
5806
  "candidate-root",
@@ -5765,7 +5815,8 @@
5765
5815
  "rehearsal-capsule-path",
5766
5816
  "rehearsal-evidence-path",
5767
5817
  "rehearsal-mode",
5768
- "state-path"
5818
+ "state-path",
5819
+ "universal-request-json"
5769
5820
  ],
5770
5821
  "reverseAuditSource": ".github/workflows"
5771
5822
  },
@@ -5821,7 +5872,7 @@
5821
5872
  "visibility": "public",
5822
5873
  "participantFacing": true,
5823
5874
  "public": true,
5824
- "inputCount": 16,
5875
+ "inputCount": 17,
5825
5876
  "inputs": [
5826
5877
  "auto-approve",
5827
5878
  "auto-merge",
@@ -5838,7 +5889,38 @@
5838
5889
  "required-checks",
5839
5890
  "revoke-reason",
5840
5891
  "revoked-versions",
5841
- "target-branch"
5892
+ "target-branch",
5893
+ "universal-request-json"
5894
+ ],
5895
+ "reverseAuditSource": ".github/workflows"
5896
+ },
5897
+ {
5898
+ "id": "workflow:universal-bootstrap-dogfood",
5899
+ "name": "workflow:universal-bootstrap-dogfood",
5900
+ "kind": "workflow",
5901
+ "sourcePath": ".github/workflows/universal-bootstrap-dogfood.yml",
5902
+ "evidencePath": ".github/workflows/universal-bootstrap-dogfood.yml",
5903
+ "availability": "shipped",
5904
+ "visibility": "public",
5905
+ "participantFacing": true,
5906
+ "public": true,
5907
+ "inputCount": 0,
5908
+ "inputs": [],
5909
+ "reverseAuditSource": ".github/workflows"
5910
+ },
5911
+ {
5912
+ "id": "workflow:universal-bootstrap-recovery",
5913
+ "name": "workflow:universal-bootstrap-recovery",
5914
+ "kind": "workflow",
5915
+ "sourcePath": ".github/workflows/universal-bootstrap-recovery.yml",
5916
+ "evidencePath": ".github/workflows/universal-bootstrap-recovery.yml",
5917
+ "availability": "shipped",
5918
+ "visibility": "public",
5919
+ "participantFacing": true,
5920
+ "public": true,
5921
+ "inputCount": 1,
5922
+ "inputs": [
5923
+ "request-json"
5842
5924
  ],
5843
5925
  "reverseAuditSource": ".github/workflows"
5844
5926
  },
@@ -5866,7 +5948,7 @@
5866
5948
  "visibility": "public",
5867
5949
  "participantFacing": true,
5868
5950
  "public": true,
5869
- "inputCount": 8,
5951
+ "inputCount": 9,
5870
5952
  "inputs": [
5871
5953
  "archive-path",
5872
5954
  "bootstrap-path",
@@ -5875,7 +5957,8 @@
5875
5957
  "consumer-repository",
5876
5958
  "input-path",
5877
5959
  "invocation-source-path",
5878
- "node-version"
5960
+ "node-version",
5961
+ "universal-request-json"
5879
5962
  ],
5880
5963
  "reverseAuditSource": ".github/workflows"
5881
5964
  },
@@ -5931,13 +6014,14 @@
5931
6014
  "visibility": "public",
5932
6015
  "participantFacing": true,
5933
6016
  "public": true,
5934
- "inputCount": 6,
6017
+ "inputCount": 7,
5935
6018
  "inputs": [
5936
6019
  "build-artifact-path",
5937
6020
  "consumer",
5938
6021
  "go-version",
5939
6022
  "install-artifact-path",
5940
6023
  "node-version",
6024
+ "universal-request-json",
5941
6025
  "verify-artifact-path"
5942
6026
  ],
5943
6027
  "reverseAuditSource": ".github/workflows"
@@ -5952,12 +6036,13 @@
5952
6036
  "visibility": "public",
5953
6037
  "participantFacing": true,
5954
6038
  "public": true,
5955
- "inputCount": 4,
6039
+ "inputCount": 5,
5956
6040
  "inputs": [
5957
6041
  "artifact-retention-days",
5958
6042
  "consumer-policy-receipt-json",
5959
6043
  "macos-finalization-command",
5960
- "request-json"
6044
+ "request-json",
6045
+ "universal-request-json"
5961
6046
  ],
5962
6047
  "reverseAuditSource": ".github/workflows"
5963
6048
  },
@@ -6276,15 +6361,37 @@
6276
6361
  "visibility": "public",
6277
6362
  "participantFacing": true,
6278
6363
  "public": true,
6279
- "inputCount": 8,
6364
+ "inputCount": 30,
6280
6365
  "inputs": [
6281
6366
  "artifact-paths",
6367
+ "candidate-build-summary-path",
6282
6368
  "candidate-passport-path",
6283
6369
  "failure-after-capability",
6370
+ "mutation-token",
6371
+ "product-publication-intent-path",
6284
6372
  "publication-qualification-path",
6373
+ "publish-auth",
6374
+ "publish-command",
6375
+ "publish-dist-tag",
6376
+ "publish-mode",
6377
+ "publish-package-main",
6378
+ "publish-package-set-order",
6379
+ "publish-rematerialize-on-resume",
6380
+ "publish-transaction-override",
6381
+ "publisher-workflow-sha",
6285
6382
  "repository",
6383
+ "required-artifacts-path",
6384
+ "required-status-check",
6385
+ "resume-transaction-id",
6386
+ "runtime-commit",
6387
+ "runtime-tree",
6388
+ "sealed-bundle-manifest",
6389
+ "sealed-bundle-root",
6390
+ "source-sha",
6286
6391
  "stage-capsules-path",
6287
6392
  "state-path",
6393
+ "target-ref",
6394
+ "target-sha",
6288
6395
  "token"
6289
6396
  ],
6290
6397
  "reverseAuditSource": "actions/*/action.yml"
@@ -7486,6 +7593,6 @@
7486
7593
  }
7487
7594
  }
7488
7595
  ],
7489
- "publicSurfaceCount": 481
7596
+ "publicSurfaceCount": 484
7490
7597
  }
7491
7598
  }