@kungfu-tech/buildchain 4.0.2-alpha.2 → 4.0.2-alpha.20

package/dist/site/public-surface-audit.json

@@ -4,7 +4,7 @@
   "status": "passed",
   "summary": {
     "cliCommandCount": 117,
-    "workflowCount": 77,
+    "workflowCount": 74,
     "actionCount": 8,
     "sitePageCount": 84,
     "docCommandRefCount": 1050,
@@ -614,9 +614,10 @@
           "require-trusted-event",
           "source-artifact-digest",
           "source-artifact-name",
-          "source-ref"
+          "source-ref",
+          "universal-request-json"
         ],
-        "inputCount": 11,
+        "inputCount": 12,
         "secrets": [],
         "secretCount": 0,
         "outputs": [
@@ -655,9 +656,10 @@
           "publication-version",
           "release-tag",
           "source-sha",
-          "target-ref"
+          "target-ref",
+          "universal-request-json"
         ],
-        "inputCount": 15,
+        "inputCount": 16,
         "secrets": [],
         "secretCount": 0,
         "outputs": [],
@@ -757,12 +759,13 @@
           "setup-rust",
           "shifu-cache-profile-digest",
           "shifu-cache-profile-ref",
+          "universal-request-json",
           "untrusted-policy",
           "verify-command",
           "verify-substage-evidence-path",
           "working-directory"
         ],
-        "inputCount": 93,
+        "inputCount": 94,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -828,8 +831,10 @@
         "id": ".bump-minor-version",
         "path": ".github/workflows/.bump-minor-version.yml",
         "reusable": true,
-        "inputs": [],
-        "inputCount": 0,
+        "inputs": [
+          "universal-request-json"
+        ],
+        "inputCount": 1,
         "secrets": [
           "GITHUB_PUSH_TOKEN"
         ],
@@ -853,9 +858,10 @@
           "render-media",
           "renderer-image",
           "scenario-path",
-          "source-ref"
+          "source-ref",
+          "universal-request-json"
         ],
-        "inputCount": 12,
+        "inputCount": 13,
         "secrets": [
           "DEMO_UPDATE_TOKEN"
         ],
@@ -904,10 +910,11 @@
           "shifu-cache-profile-digest",
           "shifu-cache-profile-ref",
           "source-ref",
+          "universal-request-json",
           "untrusted-policy",
           "working-directory"
         ],
-        "inputCount": 30,
+        "inputCount": 31,
         "secrets": [],
         "secretCount": 0,
         "outputs": [
@@ -969,9 +976,10 @@
           "runner-provenance-json",
           "source-sha",
           "target-ref",
+          "universal-request-json",
           "used-nonces-json"
         ],
-        "inputCount": 37,
+        "inputCount": 38,
         "secrets": [
           "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
           "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
@@ -1111,9 +1119,10 @@
           "standalone-binary-distribution",
           "target-ref",
           "target-sha",
-          "trusted-publishing"
+          "trusted-publishing",
+          "universal-request-json"
         ],
-        "inputCount": 121,
+        "inputCount": 122,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -1162,90 +1171,6 @@
         ],
         "outputCount": 31
       },
-      {
-        "id": ".release-docker",
-        "path": ".github/workflows/.release-docker.yml",
-        "reusable": true,
-        "inputs": [
-          "image-name"
-        ],
-        "inputCount": 1,
-        "secrets": [
-          "DOCKER_HUB_PASSWORD",
-          "DOCKER_HUB_USERNAME",
-          "GITHUB_PUSH_TOKEN"
-        ],
-        "secretCount": 3,
-        "outputs": [],
-        "outputCount": 0
-      },
-      {
-        "id": ".release-elastic-beanstalk",
-        "path": ".github/workflows/.release-elastic-beanstalk.yml",
-        "reusable": true,
-        "inputs": [
-          "aws-region",
-          "eb-application-name",
-          "eb-environment-name"
-        ],
-        "inputCount": 3,
-        "secrets": [
-          "AWS_USER_ACCESS_KEY_ID",
-          "AWS_USER_SECRET_ACCESS_KEY",
-          "GITHUB_PUSH_TOKEN"
-        ],
-        "secretCount": 3,
-        "outputs": [],
-        "outputCount": 0
-      },
-      {
-        "id": ".release-new-version",
-        "path": ".github/workflows/.release-new-version.yml",
-        "reusable": true,
-        "inputs": [
-          "action-bump-version-path",
-          "action-bump-version-ref",
-          "action-bump-version-repository",
-          "aws-ci-region",
-          "aws-user-region",
-          "bucket-release-ci",
-          "bucket-release-user",
-          "bucket-staging-ci",
-          "bucket-staging-user",
-          "clean-release-ci",
-          "clean-release-user",
-          "close-issues",
-          "cloudfront-id-ci",
-          "cloudfront-id-user",
-          "cloudfront-paths-ci",
-          "cloudfront-paths-user",
-          "create-release-note",
-          "max-preview-links",
-          "need-qa-automated",
-          "node-version",
-          "protect-dev-branches",
-          "publish-aws-ci",
-          "publish-aws-user",
-          "publish-github-npm",
-          "publish-npmjs",
-          "publish-release-note",
-          "sync-extensions-version"
-        ],
-        "inputCount": 27,
-        "secrets": [
-          "AIRTABLE_API_KEY",
-          "AWS_CI_ACCESS_KEY_ID",
-          "AWS_CI_SECRET_ACCESS_KEY",
-          "AWS_USER_ACCESS_KEY_ID",
-          "AWS_USER_SECRET_ACCESS_KEY",
-          "GITHUB_PUSH_TOKEN",
-          "MONDAY_API_KEY",
-          "NPM_PUSH_TOKEN"
-        ],
-        "secretCount": 8,
-        "outputs": [],
-        "outputCount": 0
-      },
       {
         "id": ".release-verify",
         "path": ".github/workflows/.release-verify.yml",
@@ -1290,10 +1215,11 @@
           "python-version",
           "setup-env-timeout-minutes",
           "setup-python-enabled",
+          "universal-request-json",
           "use-pipenv",
           "use-poetry"
         ],
-        "inputCount": 41,
+        "inputCount": 42,
         "secrets": [
           "APPLE_CSC_KEY",
           "APPLE_CSC_KEY_PASSWORD",
@@ -1311,24 +1237,6 @@
         "outputs": [],
         "outputCount": 0
       },
-      {
-        "id": ".sam-release",
-        "path": ".github/workflows/.sam-release.yml",
-        "reusable": true,
-        "inputs": [
-          "aws-region",
-          "aws-role",
-          "aws-root",
-          "bucket-release"
-        ],
-        "inputCount": 4,
-        "secrets": [
-          "AWS_ACCOUNT_ID"
-        ],
-        "secretCount": 1,
-        "outputs": [],
-        "outputCount": 0
-      },
       {
         "id": ".sam-verify",
         "path": ".github/workflows/.sam-verify.yml",
@@ -1337,9 +1245,10 @@
           "aws-region",
           "aws-role",
           "aws-root",
-          "manager"
+          "manager",
+          "universal-request-json"
         ],
-        "inputCount": 4,
+        "inputCount": 5,
         "secrets": [
           "AWS_ACCOUNT_ID",
           "NODE_AUTH_TOKEN"
@@ -1365,9 +1274,10 @@
           "release-path",
           "release-url",
           "repo",
+          "universal-request-json",
           "upper-edge"
         ],
-        "inputCount": 13,
+        "inputCount": 14,
         "secrets": [
           "AIRTABLE_API_KEY",
           "GITHUB_PUSH_TOKEN"
@@ -1384,9 +1294,10 @@
           "force",
           "remote-host",
           "remote-path",
-          "remote-repo"
+          "remote-repo",
+          "universal-request-json"
         ],
-        "inputCount": 4,
+        "inputCount": 5,
         "secrets": [
           "REMOTE_CREDENTIAL",
           "REMOTE_USER"
@@ -1441,10 +1352,11 @@
           "staging-apply",
           "staging-aws-role-arn",
           "staging-environment",
+          "universal-request-json",
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 43,
+        "inputCount": 44,
         "secrets": [
           "production-release-app-private-key"
         ],
@@ -1476,24 +1388,6 @@
         ],
         "outputCount": 23
       },
-      {
-        "id": ".wheel-release",
-        "path": ".github/workflows/.wheel-release.yml",
-        "reusable": true,
-        "inputs": [
-          "aws-region",
-          "aws-user-region",
-          "bucket-release"
-        ],
-        "inputCount": 3,
-        "secrets": [
-          "AWS_USER_ACCESS_KEY_ID",
-          "AWS_USER_SECRET_ACCESS_KEY"
-        ],
-        "secretCount": 2,
-        "outputs": [],
-        "outputCount": 0
-      },
       {
         "id": ".wheel-verify",
         "path": ".github/workflows/.wheel-verify.yml",
@@ -1503,9 +1397,10 @@
           "bucket-release",
           "max-preview-links",
           "node-version",
-          "preview-files"
+          "preview-files",
+          "universal-request-json"
         ],
-        "inputCount": 5,
+        "inputCount": 6,
         "secrets": [
           "AWS_USER_ACCESS_KEY_ID",
           "AWS_USER_SECRET_ACCESS_KEY",
@@ -1570,6 +1465,28 @@
         "outputs": [],
         "outputCount": 0
       },
+      {
+        "id": "bootstrap",
+        "path": ".github/workflows/bootstrap.yml",
+        "reusable": true,
+        "inputs": [
+          "request-json"
+        ],
+        "inputCount": 1,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [
+          "admission-root",
+          "backflow-root",
+          "request-root",
+          "result-json",
+          "result-root",
+          "runtime-sha",
+          "terminal-receipt-json",
+          "terminal-receipt-root"
+        ],
+        "outputCount": 8
+      },
       {
         "id": "build-surface-fixture",
         "path": ".github/workflows/build-surface-fixture.yml",
@@ -1678,12 +1595,13 @@
           "setup-rust",
           "shifu-cache-profile-digest",
           "shifu-cache-profile-ref",
+          "universal-request-json",
           "untrusted-policy",
           "verify-command",
           "verify-substage-evidence-path",
           "working-directory"
         ],
-        "inputCount": 96,
+        "inputCount": 97,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -1834,9 +1752,10 @@
           "require-approval",
           "required-status-checks",
           "same-repository-only",
-          "target-branch"
+          "target-branch",
+          "universal-request-json"
         ],
-        "inputCount": 16,
+        "inputCount": 17,
         "secrets": [
           "github-token"
         ],
@@ -1920,10 +1839,11 @@
           "source-proof-policy-paths-json",
           "source-proof-required-contexts-json",
           "source-proof-reuse",
+          "universal-request-json",
           "upload-artifacts",
           "working-directory"
         ],
-        "inputCount": 12,
+        "inputCount": 13,
         "secrets": [],
         "secretCount": 0,
         "outputs": [
@@ -1961,9 +1881,10 @@
           "reactivation-authorized",
           "settlement-authorized",
           "source-branch",
-          "target-branch"
+          "target-branch",
+          "universal-request-json"
         ],
-        "inputCount": 15,
+        "inputCount": 16,
         "secrets": [
           "promotion-token"
         ],
@@ -2005,9 +1926,10 @@
           "outcome",
           "reason",
           "target-branch",
-          "terminal-evidence-root"
+          "terminal-evidence-root",
+          "universal-request-json"
         ],
-        "inputCount": 12,
+        "inputCount": 13,
         "secrets": [
           "github-token"
         ],
@@ -2036,9 +1958,10 @@
           "replay-tree-sha",
           "required-context-roots-json",
           "target-branch",
-          "terminal-evidence-root"
+          "terminal-evidence-root",
+          "universal-request-json"
         ],
-        "inputCount": 13,
+        "inputCount": 14,
         "secrets": [
           "github-token"
         ],
@@ -2110,9 +2033,10 @@
           "source-workflow-run-id",
           "target-branch",
           "toolchain-root",
+          "universal-request-json",
           "warrant-lease-seconds"
         ],
-        "inputCount": 44,
+        "inputCount": 45,
         "secrets": [
           "github-token"
         ],
@@ -2154,9 +2078,10 @@
           "mutation-authorized",
           "preflight-workflow-path",
           "priority-workflows-json",
-          "source-branch"
+          "source-branch",
+          "universal-request-json"
         ],
-        "inputCount": 10,
+        "inputCount": 11,
         "secrets": [
           "qualification-token"
         ],
@@ -2223,9 +2148,10 @@
           "stale-days",
           "stale-pull-request-label",
           "target-branch",
-          "temporary-branch-patterns"
+          "temporary-branch-patterns",
+          "universal-request-json"
         ],
-        "inputCount": 14,
+        "inputCount": 15,
         "secrets": [
           "housekeeper_app_id",
           "housekeeper_app_private_key",
@@ -2262,9 +2188,10 @@
           "retention-days",
           "source-sha",
           "subject-artifact-name",
-          "subject-relative-path"
+          "subject-relative-path",
+          "universal-request-json"
         ],
-        "inputCount": 13,
+        "inputCount": 14,
         "secrets": [],
         "secretCount": 0,
         "outputs": [
@@ -2327,10 +2254,11 @@
           "target-ref",
           "target-sha",
           "toolchain-type",
+          "universal-request-json",
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 26,
+        "inputCount": 27,
         "secrets": [
           "BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID",
           "BUILDCHAIN_GENERATED_WRITE_APP_PRIVATE_KEY",
@@ -2391,10 +2319,11 @@
           "toolchain-digest",
           "toolchain-image",
           "toolchain-type",
+          "universal-request-json",
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 38,
+        "inputCount": 39,
         "secrets": [],
         "secretCount": 0,
         "outputs": [
@@ -2430,9 +2359,10 @@
           "require-approval",
           "required-status-checks",
           "same-repository-only",
-          "target-branch"
+          "target-branch",
+          "universal-request-json"
         ],
-        "inputCount": 13,
+        "inputCount": 14,
         "secrets": [
           "github-token"
         ],
@@ -2454,9 +2384,10 @@
           "buildchain-ref",
           "buildchain-repository",
           "dry-run",
-          "target-branch"
+          "target-branch",
+          "universal-request-json"
         ],
-        "inputCount": 4,
+        "inputCount": 5,
         "secrets": [
           "github-token"
         ],
@@ -2486,9 +2417,10 @@
           "production-aws-role-arn",
           "production-bucket",
           "production-environment",
+          "universal-request-json",
           "verify-command"
         ],
-        "inputCount": 12,
+        "inputCount": 13,
         "secrets": [],
         "secretCount": 0,
         "outputs": [
@@ -2504,9 +2436,10 @@
           "buildchain-ref",
           "buildchain-repository",
           "dry-run",
-          "target-branch"
+          "target-branch",
+          "universal-request-json"
         ],
-        "inputCount": 4,
+        "inputCount": 5,
         "secrets": [
           "github-token"
         ],
@@ -2546,10 +2479,11 @@
           "toolchain-digest",
           "toolchain-image",
           "toolchain-type",
+          "universal-request-json",
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 23,
+        "inputCount": 24,
         "secrets": [],
         "secretCount": 0,
         "outputs": [
@@ -2682,9 +2616,10 @@
           "standalone-binary-distribution",
           "target-ref",
           "target-sha",
-          "trusted-publishing"
+          "trusted-publishing",
+          "universal-request-json"
         ],
-        "inputCount": 106,
+        "inputCount": 107,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2753,9 +2688,10 @@
           "apply",
           "branch",
           "buildchain-ref",
-          "candidate-sha"
+          "candidate-sha",
+          "universal-request-json"
         ],
-        "inputCount": 4,
+        "inputCount": 5,
         "secrets": [
           "BUILDCHAIN_PROMOTION_TOKEN",
           "governance-token"
@@ -2809,9 +2745,10 @@
           "pr-title",
           "refresh-managed-readme-badges",
           "source-node",
+          "universal-request-json",
           "upstream-release-json"
         ],
-        "inputCount": 19,
+        "inputCount": 20,
         "secrets": [
           "propagation-token"
         ],
@@ -2851,9 +2788,10 @@
           "rehearsal-capsule-path",
           "rehearsal-evidence-path",
           "rehearsal-mode",
-          "state-path"
+          "state-path",
+          "universal-request-json"
         ],
-        "inputCount": 14,
+        "inputCount": 15,
         "secrets": [
           "http-token"
         ],
@@ -2879,17 +2817,6 @@
         "outputs": [],
         "outputCount": 0
       },
-      {
-        "id": "schedule-purge-artifacts",
-        "path": ".github/workflows/schedule-purge-artifacts.yml",
-        "reusable": false,
-        "inputs": [],
-        "inputCount": 0,
-        "secrets": [],
-        "secretCount": 0,
-        "outputs": [],
-        "outputCount": 0
-      },
       {
         "id": "self-hosted-runner-smoke",
         "path": ".github/workflows/self-hosted-runner-smoke.yml",
@@ -2921,9 +2848,10 @@
           "required-checks",
           "revoke-reason",
           "revoked-versions",
-          "target-branch"
+          "target-branch",
+          "universal-request-json"
         ],
-        "inputCount": 16,
+        "inputCount": 17,
         "secrets": [
           "approval-token",
           "promotion-token"
@@ -2939,6 +2867,36 @@
         ],
         "outputCount": 6
       },
+      {
+        "id": "universal-bootstrap-dogfood",
+        "path": ".github/workflows/universal-bootstrap-dogfood.yml",
+        "reusable": false,
+        "inputs": [],
+        "inputCount": 0,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
+      {
+        "id": "universal-bootstrap-recovery",
+        "path": ".github/workflows/universal-bootstrap-recovery.yml",
+        "reusable": true,
+        "inputs": [
+          "request-json"
+        ],
+        "inputCount": 1,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [
+          "backflow-root",
+          "result-json",
+          "runtime-sha",
+          "terminal-receipt-json",
+          "terminal-receipt-root"
+        ],
+        "outputCount": 5
+      },
       {
         "id": "v4-adopter-delivery-dogfood",
         "path": ".github/workflows/v4-adopter-delivery-dogfood.yml",
@@ -2962,9 +2920,10 @@
           "consumer-repository",
           "input-path",
           "invocation-source-path",
-          "node-version"
+          "node-version",
+          "universal-request-json"
         ],
-        "inputCount": 8,
+        "inputCount": 9,
         "secrets": [],
         "secretCount": 0,
         "outputs": [],
@@ -3013,9 +2972,10 @@
           "go-version",
           "install-artifact-path",
           "node-version",
+          "universal-request-json",
           "verify-artifact-path"
         ],
-        "inputCount": 6,
+        "inputCount": 7,
         "secrets": [],
         "secretCount": 0,
         "outputs": [],
@@ -3029,9 +2989,10 @@
           "artifact-retention-days",
           "consumer-policy-receipt-json",
           "macos-finalization-command",
-          "request-json"
+          "request-json",
+          "universal-request-json"
         ],
-        "inputCount": 4,
+        "inputCount": 5,
         "secrets": [
           "BUILDCHAIN_EVIDENCE_READ_TOKEN",
           "BUILDCHAIN_SIGNING_TOKEN"
@@ -3304,18 +3265,37 @@
         "path": "actions/v4-release-candidate-promote/action.yml",
         "inputs": [
           "artifact-paths",
+          "candidate-build-summary-path",
           "candidate-passport-path",
           "failure-after-capability",
+          "mutation-token",
+          "product-publication-intent-path",
           "publication-qualification-path",
+          "publish-auth",
+          "publish-command",
+          "publish-dist-tag",
+          "publish-mode",
+          "publish-package-main",
+          "publish-package-set-order",
+          "publish-rematerialize-on-resume",
+          "publish-transaction-override",
           "publisher-workflow-sha",
           "repository",
+          "required-artifacts-path",
+          "required-status-check",
+          "resume-transaction-id",
           "runtime-commit",
           "runtime-tree",
+          "sealed-bundle-manifest",
+          "sealed-bundle-root",
+          "source-sha",
           "stage-capsules-path",
           "state-path",
+          "target-ref",
+          "target-sha",
           "token"
         ],
-        "inputCount": 11
+        "inputCount": 30
       },
       {
         "id": "validate-config",
@@ -8924,8 +8904,8 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "fbc23073bbae240489a2f826b2c26daadc58e704050c5f8df366509f5c5a1c3e",
-    "workflowRegistryDigest": "bb86cef4c0a6658ff1bf05aa33cd5ff5f119f8b3c3cee90e5aa2d911247b38e4",
-    "pageRegistryDigest": "3a4b72100125de7e2fb37f2af4f66f131f22f5831db4203f8178e4295c89a1eb"
+    "workflowRegistryDigest": "97dfc457fef0e926e43e014414fbe52507f0edd978287f4e2046200bde9d8587",
+    "pageRegistryDigest": "ae0b1b9c7b883027cf53403221ff2fe2e41ad1aa4d16851d4550e89947d6d6d7"
   },
   "comparison": {
     "missingCliRegistry": [],