@kungfu-tech/buildchain 4.0.8 → 4.0.9-alpha.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +12 -19
- package/CONTRIBUTING.md +6 -9
- package/README.md +11 -1
- package/architecture/agent-change-map.md +11 -4
- package/architecture/build-environments.json +71 -0
- package/architecture/build-orchestration.json +18 -0
- package/architecture/ci-lane-change-budget.json +51 -2
- package/architecture/internal-capabilities.json +17 -4
- package/architecture/maintainability-debt.json +37 -126
- package/architecture/maintainability-policy.json +19 -210
- package/architecture/release-topology.json +9 -7
- package/architecture/universal-workflow-bootstrap.json +5 -4
- package/architecture/universal-workflow-train-admission.json +2 -2
- package/architecture/workflow-taxonomy.json +13 -0
- package/bin/buildchain.mjs +1 -1
- package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
- package/dist/site/buildchain-contract.json +41 -1131
- package/dist/site/buildchain-site.json +48 -153
- package/dist/site/capability-registry.json +2 -2
- package/dist/site/cli-registry.json +1 -1
- package/dist/site/controller-registry.json +30 -868
- package/dist/site/kfd-claims.json +148 -396
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +7 -7
- package/dist/site/node-api-registry.json +37 -37
- package/dist/site/page-registry.json +36 -141
- package/dist/site/public-surface-audit.json +93 -402
- package/dist/site/publication-authority-registry.json +22 -1
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/site-manifest.json +11 -11
- package/dist/site/workflow-registry.json +165 -391
- package/docs/MAP.md +5 -4
- package/docs/cli-reference.md +1 -1
- package/docs/getting-started.md +8 -7
- package/docs/node-api-reference.md +85 -85
- package/docs/release-governance.md +19 -18
- package/docs/reusable-build-surface.md +160 -1430
- package/docs/runtime-train-validation.md +45 -172
- package/docs/workflow-catalog.md +1 -0
- package/package.json +1 -1
- package/packages/core/build-configuration.js +117 -0
- package/packages/core/buildchain-config.js +2 -0
- package/packages/core/buildchain-contract.js +14 -44
- package/packages/core/buildchain-publication-authority.js +1 -0
- package/packages/core/controller-evidence.js +2 -9
- package/scripts/buildchain-cli-help.mjs +1 -1
- package/scripts/check-floating-consumer-policy-contract.mjs +4 -7
- package/scripts/check-inventory.mjs +91 -77
- package/scripts/check-maintainability.mjs +23 -8
- package/scripts/check-universal-workflow-bootstrap.mjs +12 -2
- package/scripts/generate-channel-build-workflow.mjs +50 -410
- package/scripts/generate-site-bundle.mjs +2 -1
- package/scripts/generate-universal-workflow-facades.mjs +1 -0
- package/scripts/init-repo.mjs +25 -26
- package/scripts/resolve-build-configuration.mjs +105 -0
- package/scripts/universal-workflow-self-dogfood.mjs +8 -1
- package/scripts/verify-golden-path.mjs +3 -3
|
@@ -169,102 +169,9 @@
|
|
|
169
169
|
"path": ".github/workflows/.build-engine.yml",
|
|
170
170
|
"reusable": true,
|
|
171
171
|
"inputs": [
|
|
172
|
-
"
|
|
173
|
-
"artifact-finalization-command",
|
|
174
|
-
"artifact-finalization-on-platform",
|
|
175
|
-
"artifact-name",
|
|
176
|
-
"artifact-name-template",
|
|
177
|
-
"artifact-paths",
|
|
178
|
-
"artifact-relay-s3-bucket",
|
|
179
|
-
"artifact-relay-s3-download-role-arn",
|
|
180
|
-
"artifact-relay-s3-oidc-audience",
|
|
181
|
-
"artifact-relay-s3-prefix",
|
|
182
|
-
"artifact-relay-s3-region",
|
|
183
|
-
"artifact-relay-s3-role-arn",
|
|
184
|
-
"artifact-relay-s3-upload-role-arn",
|
|
185
|
-
"artifact-retention-days",
|
|
186
|
-
"artifact-signing-request-upload-no-proxy",
|
|
187
|
-
"artifact-transfer-mode",
|
|
188
|
-
"aws-codebuild-project",
|
|
189
|
-
"aws-ec2-macos-runner-label",
|
|
190
|
-
"aws-ec2-windows-runner-label",
|
|
191
|
-
"build-command",
|
|
192
|
-
"buildchain-contract-compatibility-policy",
|
|
193
|
-
"buildchain-contract-drift-issue-mode",
|
|
194
|
-
"buildchain-contract-expected-channel",
|
|
195
|
-
"buildchain-contract-expected-major",
|
|
196
|
-
"buildchain-contract-lock-path",
|
|
197
|
-
"buildchain-expected-channel",
|
|
198
|
-
"buildchain-expected-major",
|
|
199
|
-
"buildchain-ref",
|
|
200
|
-
"buildchain-repository",
|
|
201
|
-
"buildchain-visible-workflow",
|
|
202
|
-
"cache-dependency-lock-root",
|
|
203
|
-
"cache-policy-root",
|
|
204
|
-
"cache-toolchain-root",
|
|
205
|
-
"cargo-registry-index",
|
|
206
|
-
"checkout-cache-fallback",
|
|
207
|
-
"checkout-cache-fetch-attempts",
|
|
208
|
-
"checkout-cache-github-timeout-seconds",
|
|
209
|
-
"checkout-cache-mirror-url-template",
|
|
210
|
-
"checkout-cache-mode",
|
|
211
|
-
"checkout-cache-reference-repository-template",
|
|
212
|
-
"checkout-cache-timeout-seconds",
|
|
213
|
-
"checkout-history-mode",
|
|
214
|
-
"compiler-cache-platforms-json",
|
|
215
|
-
"compiler-cache-provider",
|
|
216
|
-
"compiler-cache-required",
|
|
217
|
-
"control-runner-json",
|
|
218
|
-
"credential-island-caller-owned",
|
|
219
|
-
"credential-island-environment",
|
|
220
|
-
"credential-island-macos-app-path",
|
|
221
|
-
"credential-island-macos-platform-id",
|
|
222
|
-
"expected-artifacts-json",
|
|
223
|
-
"fail-fast",
|
|
224
|
-
"gate-profile-aggregate-json",
|
|
225
|
-
"github-artifact-attestation-platform-id",
|
|
226
|
-
"github-artifact-attestation-signer-sha",
|
|
227
|
-
"github-artifact-attestation-subject-path",
|
|
228
|
-
"install-command",
|
|
229
|
-
"kfd-agent-hub",
|
|
230
|
-
"lifecycle-timeout-minutes",
|
|
231
|
-
"linux-container-image",
|
|
232
|
-
"linux-container-preset",
|
|
233
|
-
"node-version",
|
|
234
|
-
"platforms-json",
|
|
235
|
-
"pre-upload-transport-smoke-artifact-root",
|
|
236
|
-
"pre-upload-transport-smoke-scenario-path",
|
|
237
|
-
"process-sample-interval-ms",
|
|
238
|
-
"process-summary-path",
|
|
239
|
-
"publish-anchor-request-json",
|
|
240
|
-
"publish-channel",
|
|
241
|
-
"publish-refs-json",
|
|
242
|
-
"publish-registry",
|
|
243
|
-
"publish-source-ref",
|
|
244
|
-
"release-candidate",
|
|
245
|
-
"release-candidate-family-evidence-json",
|
|
246
|
-
"requested-parallelism",
|
|
247
|
-
"require-build",
|
|
248
|
-
"require-install",
|
|
249
|
-
"require-trusted-event",
|
|
250
|
-
"require-verify",
|
|
251
|
-
"runner-preset",
|
|
252
|
-
"rust-toolchain",
|
|
253
|
-
"rustup-dist-server",
|
|
254
|
-
"rustup-update-root",
|
|
255
|
-
"sample-process-tree",
|
|
256
|
-
"self-hosted-offline-fallback",
|
|
257
|
-
"setup-node",
|
|
258
|
-
"setup-rust",
|
|
259
|
-
"shifu-cache-profile-digest",
|
|
260
|
-
"shifu-cache-profile-ref",
|
|
261
|
-
"universal-request-json",
|
|
262
|
-
"untrusted-policy",
|
|
263
|
-
"verify-command",
|
|
264
|
-
"verify-substage-evidence-path",
|
|
265
|
-
"working-directory"
|
|
172
|
+
"config-path"
|
|
266
173
|
],
|
|
267
|
-
"inputCount":
|
|
174
|
+
"inputCount": 1,
|
|
268
175
|
"secrets": [
|
|
269
176
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
|
|
270
177
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
|
|
@@ -592,102 +499,9 @@
|
|
|
592
499
|
"path": ".github/workflows/.build.yml",
|
|
593
500
|
"reusable": true,
|
|
594
501
|
"inputs": [
|
|
595
|
-
"
|
|
596
|
-
"artifact-finalization-command",
|
|
597
|
-
"artifact-finalization-on-platform",
|
|
598
|
-
"artifact-name",
|
|
599
|
-
"artifact-name-template",
|
|
600
|
-
"artifact-paths",
|
|
601
|
-
"artifact-relay-s3-bucket",
|
|
602
|
-
"artifact-relay-s3-download-role-arn",
|
|
603
|
-
"artifact-relay-s3-oidc-audience",
|
|
604
|
-
"artifact-relay-s3-prefix",
|
|
605
|
-
"artifact-relay-s3-region",
|
|
606
|
-
"artifact-relay-s3-role-arn",
|
|
607
|
-
"artifact-relay-s3-upload-role-arn",
|
|
608
|
-
"artifact-retention-days",
|
|
609
|
-
"artifact-signing-request-upload-no-proxy",
|
|
610
|
-
"artifact-transfer-mode",
|
|
611
|
-
"aws-codebuild-project",
|
|
612
|
-
"aws-ec2-macos-runner-label",
|
|
613
|
-
"aws-ec2-windows-runner-label",
|
|
614
|
-
"build-command",
|
|
615
|
-
"buildchain-contract-compatibility-policy",
|
|
616
|
-
"buildchain-contract-drift-issue-mode",
|
|
617
|
-
"buildchain-contract-expected-channel",
|
|
618
|
-
"buildchain-contract-expected-major",
|
|
619
|
-
"buildchain-contract-lock-path",
|
|
620
|
-
"buildchain-expected-channel",
|
|
621
|
-
"buildchain-expected-major",
|
|
622
|
-
"buildchain-ref",
|
|
623
|
-
"buildchain-repository",
|
|
624
|
-
"buildchain-visible-workflow",
|
|
625
|
-
"cache-dependency-lock-root",
|
|
626
|
-
"cache-policy-root",
|
|
627
|
-
"cache-toolchain-root",
|
|
628
|
-
"cargo-registry-index",
|
|
629
|
-
"checkout-cache-fallback",
|
|
630
|
-
"checkout-cache-fetch-attempts",
|
|
631
|
-
"checkout-cache-github-timeout-seconds",
|
|
632
|
-
"checkout-cache-mirror-url-template",
|
|
633
|
-
"checkout-cache-mode",
|
|
634
|
-
"checkout-cache-reference-repository-template",
|
|
635
|
-
"checkout-cache-timeout-seconds",
|
|
636
|
-
"checkout-history-mode",
|
|
637
|
-
"compiler-cache-platforms-json",
|
|
638
|
-
"compiler-cache-provider",
|
|
639
|
-
"compiler-cache-required",
|
|
640
|
-
"control-runner-json",
|
|
641
|
-
"credential-island-caller-owned",
|
|
642
|
-
"credential-island-environment",
|
|
643
|
-
"credential-island-macos-app-path",
|
|
644
|
-
"credential-island-macos-platform-id",
|
|
645
|
-
"expected-artifacts-json",
|
|
646
|
-
"fail-fast",
|
|
647
|
-
"gate-profile-aggregate-json",
|
|
648
|
-
"github-artifact-attestation-platform-id",
|
|
649
|
-
"github-artifact-attestation-signer-sha",
|
|
650
|
-
"github-artifact-attestation-subject-path",
|
|
651
|
-
"install-command",
|
|
652
|
-
"kfd-agent-hub",
|
|
653
|
-
"lifecycle-timeout-minutes",
|
|
654
|
-
"linux-container-image",
|
|
655
|
-
"linux-container-preset",
|
|
656
|
-
"node-version",
|
|
657
|
-
"platforms-json",
|
|
658
|
-
"pre-upload-transport-smoke-artifact-root",
|
|
659
|
-
"pre-upload-transport-smoke-scenario-path",
|
|
660
|
-
"process-sample-interval-ms",
|
|
661
|
-
"process-summary-path",
|
|
662
|
-
"publish-anchor-request-json",
|
|
663
|
-
"publish-channel",
|
|
664
|
-
"publish-refs-json",
|
|
665
|
-
"publish-registry",
|
|
666
|
-
"publish-source-ref",
|
|
667
|
-
"release-candidate",
|
|
668
|
-
"release-candidate-family-evidence-json",
|
|
669
|
-
"requested-parallelism",
|
|
670
|
-
"require-build",
|
|
671
|
-
"require-install",
|
|
672
|
-
"require-trusted-event",
|
|
673
|
-
"require-verify",
|
|
674
|
-
"runner-preset",
|
|
675
|
-
"rust-toolchain",
|
|
676
|
-
"rustup-dist-server",
|
|
677
|
-
"rustup-update-root",
|
|
678
|
-
"sample-process-tree",
|
|
679
|
-
"self-hosted-offline-fallback",
|
|
680
|
-
"setup-node",
|
|
681
|
-
"setup-rust",
|
|
682
|
-
"shifu-cache-profile-digest",
|
|
683
|
-
"shifu-cache-profile-ref",
|
|
684
|
-
"universal-request-json",
|
|
685
|
-
"untrusted-policy",
|
|
686
|
-
"verify-command",
|
|
687
|
-
"verify-substage-evidence-path",
|
|
688
|
-
"working-directory"
|
|
502
|
+
"config-path"
|
|
689
503
|
],
|
|
690
|
-
"inputCount":
|
|
504
|
+
"inputCount": 1,
|
|
691
505
|
"secrets": [
|
|
692
506
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
|
|
693
507
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
|
|
@@ -2078,105 +1892,9 @@
|
|
|
2078
1892
|
"path": ".github/workflows/build.yml",
|
|
2079
1893
|
"reusable": true,
|
|
2080
1894
|
"inputs": [
|
|
2081
|
-
"
|
|
2082
|
-
"artifact-finalization-command",
|
|
2083
|
-
"artifact-finalization-on-platform",
|
|
2084
|
-
"artifact-name",
|
|
2085
|
-
"artifact-name-template",
|
|
2086
|
-
"artifact-paths",
|
|
2087
|
-
"artifact-relay-s3-bucket",
|
|
2088
|
-
"artifact-relay-s3-download-role-arn",
|
|
2089
|
-
"artifact-relay-s3-oidc-audience",
|
|
2090
|
-
"artifact-relay-s3-prefix",
|
|
2091
|
-
"artifact-relay-s3-region",
|
|
2092
|
-
"artifact-relay-s3-role-arn",
|
|
2093
|
-
"artifact-relay-s3-upload-role-arn",
|
|
2094
|
-
"artifact-retention-days",
|
|
2095
|
-
"artifact-signing-request-upload-no-proxy",
|
|
2096
|
-
"artifact-transfer-mode",
|
|
2097
|
-
"aws-codebuild-project",
|
|
2098
|
-
"aws-ec2-macos-runner-label",
|
|
2099
|
-
"aws-ec2-windows-runner-label",
|
|
2100
|
-
"build-command",
|
|
2101
|
-
"buildchain-alpha-contract-lock-path",
|
|
2102
|
-
"buildchain-channel",
|
|
2103
|
-
"buildchain-contract-compatibility-policy",
|
|
2104
|
-
"buildchain-contract-drift-issue-mode",
|
|
2105
|
-
"buildchain-contract-expected-channel",
|
|
2106
|
-
"buildchain-contract-expected-major",
|
|
2107
|
-
"buildchain-contract-lock-path",
|
|
2108
|
-
"buildchain-expected-channel",
|
|
2109
|
-
"buildchain-expected-major",
|
|
2110
|
-
"buildchain-ref",
|
|
2111
|
-
"buildchain-repository",
|
|
2112
|
-
"buildchain-stable-contract-lock-path",
|
|
2113
|
-
"buildchain-visible-workflow",
|
|
2114
|
-
"cache-dependency-lock-root",
|
|
2115
|
-
"cache-policy-root",
|
|
2116
|
-
"cache-toolchain-root",
|
|
2117
|
-
"cargo-registry-index",
|
|
2118
|
-
"checkout-cache-fallback",
|
|
2119
|
-
"checkout-cache-fetch-attempts",
|
|
2120
|
-
"checkout-cache-github-timeout-seconds",
|
|
2121
|
-
"checkout-cache-mirror-url-template",
|
|
2122
|
-
"checkout-cache-mode",
|
|
2123
|
-
"checkout-cache-reference-repository-template",
|
|
2124
|
-
"checkout-cache-timeout-seconds",
|
|
2125
|
-
"checkout-history-mode",
|
|
2126
|
-
"compiler-cache-platforms-json",
|
|
2127
|
-
"compiler-cache-provider",
|
|
2128
|
-
"compiler-cache-required",
|
|
2129
|
-
"control-runner-json",
|
|
2130
|
-
"credential-island-caller-owned",
|
|
2131
|
-
"credential-island-environment",
|
|
2132
|
-
"credential-island-macos-app-path",
|
|
2133
|
-
"credential-island-macos-platform-id",
|
|
2134
|
-
"expected-artifacts-json",
|
|
2135
|
-
"fail-fast",
|
|
2136
|
-
"gate-profile-aggregate-json",
|
|
2137
|
-
"github-artifact-attestation-platform-id",
|
|
2138
|
-
"github-artifact-attestation-signer-sha",
|
|
2139
|
-
"github-artifact-attestation-subject-path",
|
|
2140
|
-
"install-command",
|
|
2141
|
-
"kfd-agent-hub",
|
|
2142
|
-
"lifecycle-timeout-minutes",
|
|
2143
|
-
"linux-container-image",
|
|
2144
|
-
"linux-container-preset",
|
|
2145
|
-
"node-version",
|
|
2146
|
-
"platforms-json",
|
|
2147
|
-
"pre-upload-transport-smoke-artifact-root",
|
|
2148
|
-
"pre-upload-transport-smoke-scenario-path",
|
|
2149
|
-
"process-sample-interval-ms",
|
|
2150
|
-
"process-summary-path",
|
|
2151
|
-
"publish-anchor-request-json",
|
|
2152
|
-
"publish-channel",
|
|
2153
|
-
"publish-refs-json",
|
|
2154
|
-
"publish-registry",
|
|
2155
|
-
"publish-source-ref",
|
|
2156
|
-
"release-candidate",
|
|
2157
|
-
"release-candidate-family-evidence-json",
|
|
2158
|
-
"requested-parallelism",
|
|
2159
|
-
"require-build",
|
|
2160
|
-
"require-install",
|
|
2161
|
-
"require-trusted-event",
|
|
2162
|
-
"require-verify",
|
|
2163
|
-
"runner-preset",
|
|
2164
|
-
"rust-toolchain",
|
|
2165
|
-
"rustup-dist-server",
|
|
2166
|
-
"rustup-update-root",
|
|
2167
|
-
"sample-process-tree",
|
|
2168
|
-
"self-hosted-offline-fallback",
|
|
2169
|
-
"setup-node",
|
|
2170
|
-
"setup-rust",
|
|
2171
|
-
"shifu-cache-profile-digest",
|
|
2172
|
-
"shifu-cache-profile-ref",
|
|
2173
|
-
"universal-request-json",
|
|
2174
|
-
"untrusted-policy",
|
|
2175
|
-
"verify-command",
|
|
2176
|
-
"verify-substage-evidence-path",
|
|
2177
|
-
"working-directory"
|
|
1895
|
+
"config-path"
|
|
2178
1896
|
],
|
|
2179
|
-
"inputCount":
|
|
1897
|
+
"inputCount": 1,
|
|
2180
1898
|
"secrets": [
|
|
2181
1899
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
|
|
2182
1900
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
|
|
@@ -2746,7 +2464,7 @@
|
|
|
2746
2464
|
"status": "preview",
|
|
2747
2465
|
"owner": "buildchain-workflows",
|
|
2748
2466
|
"maturity": "preview",
|
|
2749
|
-
"introducedVersion": "4.0.
|
|
2467
|
+
"introducedVersion": "4.0.9-alpha.1",
|
|
2750
2468
|
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
2751
2469
|
"deprecationReplacement": "",
|
|
2752
2470
|
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
@@ -3190,105 +2908,9 @@
|
|
|
3190
2908
|
"path": ".github/workflows/public-build-candidate.yml",
|
|
3191
2909
|
"reusable": true,
|
|
3192
2910
|
"inputs": [
|
|
3193
|
-
"
|
|
3194
|
-
"artifact-finalization-command",
|
|
3195
|
-
"artifact-finalization-on-platform",
|
|
3196
|
-
"artifact-name",
|
|
3197
|
-
"artifact-name-template",
|
|
3198
|
-
"artifact-paths",
|
|
3199
|
-
"artifact-relay-s3-bucket",
|
|
3200
|
-
"artifact-relay-s3-download-role-arn",
|
|
3201
|
-
"artifact-relay-s3-oidc-audience",
|
|
3202
|
-
"artifact-relay-s3-prefix",
|
|
3203
|
-
"artifact-relay-s3-region",
|
|
3204
|
-
"artifact-relay-s3-role-arn",
|
|
3205
|
-
"artifact-relay-s3-upload-role-arn",
|
|
3206
|
-
"artifact-retention-days",
|
|
3207
|
-
"artifact-signing-request-upload-no-proxy",
|
|
3208
|
-
"artifact-transfer-mode",
|
|
3209
|
-
"aws-codebuild-project",
|
|
3210
|
-
"aws-ec2-macos-runner-label",
|
|
3211
|
-
"aws-ec2-windows-runner-label",
|
|
3212
|
-
"build-command",
|
|
3213
|
-
"buildchain-alpha-contract-lock-path",
|
|
3214
|
-
"buildchain-channel",
|
|
3215
|
-
"buildchain-contract-compatibility-policy",
|
|
3216
|
-
"buildchain-contract-drift-issue-mode",
|
|
3217
|
-
"buildchain-contract-expected-channel",
|
|
3218
|
-
"buildchain-contract-expected-major",
|
|
3219
|
-
"buildchain-contract-lock-path",
|
|
3220
|
-
"buildchain-expected-channel",
|
|
3221
|
-
"buildchain-expected-major",
|
|
3222
|
-
"buildchain-ref",
|
|
3223
|
-
"buildchain-repository",
|
|
3224
|
-
"buildchain-stable-contract-lock-path",
|
|
3225
|
-
"buildchain-visible-workflow",
|
|
3226
|
-
"cache-dependency-lock-root",
|
|
3227
|
-
"cache-policy-root",
|
|
3228
|
-
"cache-toolchain-root",
|
|
3229
|
-
"cargo-registry-index",
|
|
3230
|
-
"checkout-cache-fallback",
|
|
3231
|
-
"checkout-cache-fetch-attempts",
|
|
3232
|
-
"checkout-cache-github-timeout-seconds",
|
|
3233
|
-
"checkout-cache-mirror-url-template",
|
|
3234
|
-
"checkout-cache-mode",
|
|
3235
|
-
"checkout-cache-reference-repository-template",
|
|
3236
|
-
"checkout-cache-timeout-seconds",
|
|
3237
|
-
"checkout-history-mode",
|
|
3238
|
-
"compiler-cache-platforms-json",
|
|
3239
|
-
"compiler-cache-provider",
|
|
3240
|
-
"compiler-cache-required",
|
|
3241
|
-
"control-runner-json",
|
|
3242
|
-
"credential-island-caller-owned",
|
|
3243
|
-
"credential-island-environment",
|
|
3244
|
-
"credential-island-macos-app-path",
|
|
3245
|
-
"credential-island-macos-platform-id",
|
|
3246
|
-
"expected-artifacts-json",
|
|
3247
|
-
"fail-fast",
|
|
3248
|
-
"gate-profile-aggregate-json",
|
|
3249
|
-
"github-artifact-attestation-platform-id",
|
|
3250
|
-
"github-artifact-attestation-signer-sha",
|
|
3251
|
-
"github-artifact-attestation-subject-path",
|
|
3252
|
-
"install-command",
|
|
3253
|
-
"kfd-agent-hub",
|
|
3254
|
-
"lifecycle-timeout-minutes",
|
|
3255
|
-
"linux-container-image",
|
|
3256
|
-
"linux-container-preset",
|
|
3257
|
-
"node-version",
|
|
3258
|
-
"platforms-json",
|
|
3259
|
-
"pre-upload-transport-smoke-artifact-root",
|
|
3260
|
-
"pre-upload-transport-smoke-scenario-path",
|
|
3261
|
-
"process-sample-interval-ms",
|
|
3262
|
-
"process-summary-path",
|
|
3263
|
-
"publish-anchor-request-json",
|
|
3264
|
-
"publish-channel",
|
|
3265
|
-
"publish-refs-json",
|
|
3266
|
-
"publish-registry",
|
|
3267
|
-
"publish-source-ref",
|
|
3268
|
-
"release-candidate",
|
|
3269
|
-
"release-candidate-family-evidence-json",
|
|
3270
|
-
"requested-parallelism",
|
|
3271
|
-
"require-build",
|
|
3272
|
-
"require-install",
|
|
3273
|
-
"require-trusted-event",
|
|
3274
|
-
"require-verify",
|
|
3275
|
-
"runner-preset",
|
|
3276
|
-
"rust-toolchain",
|
|
3277
|
-
"rustup-dist-server",
|
|
3278
|
-
"rustup-update-root",
|
|
3279
|
-
"sample-process-tree",
|
|
3280
|
-
"self-hosted-offline-fallback",
|
|
3281
|
-
"setup-node",
|
|
3282
|
-
"setup-rust",
|
|
3283
|
-
"shifu-cache-profile-digest",
|
|
3284
|
-
"shifu-cache-profile-ref",
|
|
3285
|
-
"universal-request-json",
|
|
3286
|
-
"untrusted-policy",
|
|
3287
|
-
"verify-command",
|
|
3288
|
-
"verify-substage-evidence-path",
|
|
3289
|
-
"working-directory"
|
|
2911
|
+
"config-path"
|
|
3290
2912
|
],
|
|
3291
|
-
"inputCount":
|
|
2913
|
+
"inputCount": 1,
|
|
3292
2914
|
"secrets": [
|
|
3293
2915
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
|
|
3294
2916
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
|
|
@@ -3943,7 +3565,7 @@
|
|
|
3943
3565
|
"status": "preview",
|
|
3944
3566
|
"owner": "buildchain-workflows",
|
|
3945
3567
|
"maturity": "preview",
|
|
3946
|
-
"introducedVersion": "4.0.
|
|
3568
|
+
"introducedVersion": "4.0.9-alpha.1",
|
|
3947
3569
|
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
3948
3570
|
"deprecationReplacement": "",
|
|
3949
3571
|
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
@@ -5855,6 +5477,36 @@
|
|
|
5855
5477
|
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
5856
5478
|
"nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
|
|
5857
5479
|
},
|
|
5480
|
+
{
|
|
5481
|
+
"id": "self-build-stable-dogfood",
|
|
5482
|
+
"path": ".github/workflows/self-build-stable-dogfood.yml",
|
|
5483
|
+
"reusable": false,
|
|
5484
|
+
"inputs": [],
|
|
5485
|
+
"inputCount": 0,
|
|
5486
|
+
"secrets": [],
|
|
5487
|
+
"secretCount": 0,
|
|
5488
|
+
"outputs": [],
|
|
5489
|
+
"outputCount": 0,
|
|
5490
|
+
"taxonomy": {
|
|
5491
|
+
"id": "buildchain-stable-self-dogfood",
|
|
5492
|
+
"role": "self",
|
|
5493
|
+
"category": "build",
|
|
5494
|
+
"purpose": "stable-dogfood",
|
|
5495
|
+
"status": "active",
|
|
5496
|
+
"canonicalPath": ".github/workflows/self-build-stable-dogfood.yml",
|
|
5497
|
+
"compatibilityAlias": false
|
|
5498
|
+
},
|
|
5499
|
+
"surface": "repository-workflow",
|
|
5500
|
+
"capabilityGroup": "api-cli-reference",
|
|
5501
|
+
"status": "active",
|
|
5502
|
+
"owner": "buildchain-workflows",
|
|
5503
|
+
"maturity": "active",
|
|
5504
|
+
"introducedVersion": "pre-3.0.2-alpha.4",
|
|
5505
|
+
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
5506
|
+
"deprecationReplacement": "",
|
|
5507
|
+
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
5508
|
+
"nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
|
|
5509
|
+
},
|
|
5858
5510
|
{
|
|
5859
5511
|
"id": "self-build-verify",
|
|
5860
5512
|
"path": ".github/workflows/self-build-verify.yml",
|
|
@@ -6004,7 +5656,7 @@
|
|
|
6004
5656
|
"status": "preview",
|
|
6005
5657
|
"owner": "buildchain-workflows",
|
|
6006
5658
|
"maturity": "preview",
|
|
6007
|
-
"introducedVersion": "4.0.
|
|
5659
|
+
"introducedVersion": "4.0.9-alpha.1",
|
|
6008
5660
|
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
6009
5661
|
"deprecationReplacement": "",
|
|
6010
5662
|
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
@@ -6035,7 +5687,7 @@
|
|
|
6035
5687
|
"status": "preview",
|
|
6036
5688
|
"owner": "buildchain-workflows",
|
|
6037
5689
|
"maturity": "preview",
|
|
6038
|
-
"introducedVersion": "4.0.
|
|
5690
|
+
"introducedVersion": "4.0.9-alpha.1",
|
|
6039
5691
|
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
6040
5692
|
"deprecationReplacement": "",
|
|
6041
5693
|
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
@@ -6066,7 +5718,7 @@
|
|
|
6066
5718
|
"status": "preview",
|
|
6067
5719
|
"owner": "buildchain-workflows",
|
|
6068
5720
|
"maturity": "preview",
|
|
6069
|
-
"introducedVersion": "4.0.
|
|
5721
|
+
"introducedVersion": "4.0.9-alpha.1",
|
|
6070
5722
|
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
6071
5723
|
"deprecationReplacement": "",
|
|
6072
5724
|
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
@@ -6666,6 +6318,128 @@
|
|
|
6666
6318
|
],
|
|
6667
6319
|
"actionSource": "actions/*/action.yml reverse input enumeration",
|
|
6668
6320
|
"actions": [
|
|
6321
|
+
{
|
|
6322
|
+
"id": "build-agent-hub-evidence",
|
|
6323
|
+
"path": "actions/build-agent-hub-evidence/action.yml",
|
|
6324
|
+
"inputs": [
|
|
6325
|
+
"plan-json",
|
|
6326
|
+
"platform-json",
|
|
6327
|
+
"source-json"
|
|
6328
|
+
],
|
|
6329
|
+
"inputCount": 3,
|
|
6330
|
+
"capabilityGroup": "reusable-build",
|
|
6331
|
+
"status": "active",
|
|
6332
|
+
"owner": "buildchain-actions",
|
|
6333
|
+
"maturity": "stable",
|
|
6334
|
+
"introducedVersion": "4.0.9-alpha.0",
|
|
6335
|
+
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
6336
|
+
"deprecationReplacement": "",
|
|
6337
|
+
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
6338
|
+
"nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
|
|
6339
|
+
},
|
|
6340
|
+
{
|
|
6341
|
+
"id": "build-artifact-transfer",
|
|
6342
|
+
"path": "actions/build-artifact-transfer/action.yml",
|
|
6343
|
+
"inputs": [
|
|
6344
|
+
"artifact-name",
|
|
6345
|
+
"plan-json",
|
|
6346
|
+
"platform-json",
|
|
6347
|
+
"relay-role",
|
|
6348
|
+
"relay-upload-role",
|
|
6349
|
+
"source-json",
|
|
6350
|
+
"transfer-json"
|
|
6351
|
+
],
|
|
6352
|
+
"inputCount": 7,
|
|
6353
|
+
"capabilityGroup": "reusable-build",
|
|
6354
|
+
"status": "active",
|
|
6355
|
+
"owner": "buildchain-actions",
|
|
6356
|
+
"maturity": "stable",
|
|
6357
|
+
"introducedVersion": "4.0.9-alpha.0",
|
|
6358
|
+
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
6359
|
+
"deprecationReplacement": "",
|
|
6360
|
+
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
6361
|
+
"nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
|
|
6362
|
+
},
|
|
6363
|
+
{
|
|
6364
|
+
"id": "build-attestation-policy",
|
|
6365
|
+
"path": "actions/build-attestation-policy/action.yml",
|
|
6366
|
+
"inputs": [
|
|
6367
|
+
"plan-json",
|
|
6368
|
+
"platform-json",
|
|
6369
|
+
"source-json"
|
|
6370
|
+
],
|
|
6371
|
+
"inputCount": 3,
|
|
6372
|
+
"capabilityGroup": "reusable-build",
|
|
6373
|
+
"status": "active",
|
|
6374
|
+
"owner": "buildchain-actions",
|
|
6375
|
+
"maturity": "stable",
|
|
6376
|
+
"introducedVersion": "4.0.9-alpha.0",
|
|
6377
|
+
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
6378
|
+
"deprecationReplacement": "",
|
|
6379
|
+
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
6380
|
+
"nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
|
|
6381
|
+
},
|
|
6382
|
+
{
|
|
6383
|
+
"id": "build-lifecycle-stage",
|
|
6384
|
+
"path": "actions/build-lifecycle-stage/action.yml",
|
|
6385
|
+
"inputs": [
|
|
6386
|
+
"artifact-name",
|
|
6387
|
+
"plan-json",
|
|
6388
|
+
"platform-json",
|
|
6389
|
+
"source-json",
|
|
6390
|
+
"stage"
|
|
6391
|
+
],
|
|
6392
|
+
"inputCount": 5,
|
|
6393
|
+
"capabilityGroup": "reusable-build",
|
|
6394
|
+
"status": "active",
|
|
6395
|
+
"owner": "buildchain-actions",
|
|
6396
|
+
"maturity": "stable",
|
|
6397
|
+
"introducedVersion": "4.0.9-alpha.0",
|
|
6398
|
+
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
6399
|
+
"deprecationReplacement": "",
|
|
6400
|
+
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
6401
|
+
"nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
|
|
6402
|
+
},
|
|
6403
|
+
{
|
|
6404
|
+
"id": "build-signing-request",
|
|
6405
|
+
"path": "actions/build-signing-request/action.yml",
|
|
6406
|
+
"inputs": [
|
|
6407
|
+
"artifact-name",
|
|
6408
|
+
"plan-json",
|
|
6409
|
+
"platform-json",
|
|
6410
|
+
"source-json"
|
|
6411
|
+
],
|
|
6412
|
+
"inputCount": 4,
|
|
6413
|
+
"capabilityGroup": "reusable-build",
|
|
6414
|
+
"status": "active",
|
|
6415
|
+
"owner": "buildchain-actions",
|
|
6416
|
+
"maturity": "stable",
|
|
6417
|
+
"introducedVersion": "4.0.9-alpha.0",
|
|
6418
|
+
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
6419
|
+
"deprecationReplacement": "",
|
|
6420
|
+
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
6421
|
+
"nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
|
|
6422
|
+
},
|
|
6423
|
+
{
|
|
6424
|
+
"id": "build-verification-evidence",
|
|
6425
|
+
"path": "actions/build-verification-evidence/action.yml",
|
|
6426
|
+
"inputs": [
|
|
6427
|
+
"plan-json",
|
|
6428
|
+
"platform-json",
|
|
6429
|
+
"source-json",
|
|
6430
|
+
"verify-outcome"
|
|
6431
|
+
],
|
|
6432
|
+
"inputCount": 4,
|
|
6433
|
+
"capabilityGroup": "reusable-build",
|
|
6434
|
+
"status": "active",
|
|
6435
|
+
"owner": "buildchain-actions",
|
|
6436
|
+
"maturity": "stable",
|
|
6437
|
+
"introducedVersion": "4.0.9-alpha.0",
|
|
6438
|
+
"compatibilityPromise": "preserved-through-the-v3-major-line",
|
|
6439
|
+
"deprecationReplacement": "",
|
|
6440
|
+
"sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
|
|
6441
|
+
"nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
|
|
6442
|
+
},
|
|
6669
6443
|
{
|
|
6670
6444
|
"id": "github-artifact-attestation",
|
|
6671
6445
|
"path": "actions/github-artifact-attestation/action.yml",
|
package/docs/MAP.md
CHANGED
|
@@ -8,11 +8,11 @@ confidence: high
|
|
|
8
8
|
sensitivity: public
|
|
9
9
|
evidence_grade: A
|
|
10
10
|
review_state: unreviewed
|
|
11
|
-
last_reviewed: 2026-
|
|
11
|
+
last_reviewed: 2026-09-08
|
|
12
12
|
ai_provenance:
|
|
13
|
-
model_family: GPT-
|
|
13
|
+
model_family: GPT-6
|
|
14
14
|
product: Codex
|
|
15
|
-
generated_at: 2026-
|
|
15
|
+
generated_at: 2026-09-08
|
|
16
16
|
invisible_context: not asserted
|
|
17
17
|
---
|
|
18
18
|
|
|
@@ -173,7 +173,8 @@ replace them.
|
|
|
173
173
|
| How do I deploy a site/app preview, staging, or production surface? | [`web-surface-deployments.md`](web-surface-deployments.md) | use | stable |
|
|
174
174
|
| How do I publish observed infrastructure contracts for downstream consumers? | [`infra-contract.md`](infra-contract.md) | use | preview |
|
|
175
175
|
| How do I operate a repeatable, disabled-by-default, budget-fail-closed AWS Windows JIT campaign? | [`aws-us-elastic-runner-burst-plane.md`](aws-us-elastic-runner-burst-plane.md#phase-2-operator-workflow) | use/verify | preview |
|
|
176
|
-
| How do I use the active actions directly? | [`../actions/validate-config/README.md`](../actions/validate-config/README.md), [`../actions/run-lifecycle/README.md`](../actions/run-lifecycle/README.md), [`../actions/promote-buildchain-ref/README.md`](../actions/promote-buildchain-ref/README.md), [`../actions/release-candidate-promote/README.md`](../actions/release-candidate-promote/README.md), [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md), [`../actions/github-artifact-attestation/README.md`](../actions/github-artifact-attestation/README.md), [`../actions/macos-credential-island/README.md`](../actions/macos-credential-island/README.md), [`../actions/release-tail/README.md`](../actions/release-tail/README.md); `dist/site/workflow-registry.json#actions` is authoritative for the
|
|
176
|
+
| How do I use the active actions directly? | [`../actions/validate-config/README.md`](../actions/validate-config/README.md), [`../actions/run-lifecycle/README.md`](../actions/run-lifecycle/README.md), [`../actions/promote-buildchain-ref/README.md`](../actions/promote-buildchain-ref/README.md), [`../actions/release-candidate-promote/README.md`](../actions/release-candidate-promote/README.md), [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md), [`../actions/github-artifact-attestation/README.md`](../actions/github-artifact-attestation/README.md), [`../actions/macos-credential-island/README.md`](../actions/macos-credential-island/README.md), [`../actions/release-tail/README.md`](../actions/release-tail/README.md); `dist/site/workflow-registry.json#actions` is authoritative for the action inventory. | use | stable |
|
|
177
|
+
| Where are shared build stages maintained? | [build-lifecycle-stage](../actions/build-lifecycle-stage/action.yml), [build-signing-request](../actions/build-signing-request/action.yml), [build-verification-evidence](../actions/build-verification-evidence/action.yml), [build-attestation-policy](../actions/build-attestation-policy/action.yml), [build-agent-hub-evidence](../actions/build-agent-hub-evidence/action.yml), [build-artifact-transfer](../actions/build-artifact-transfer/action.yml); [ownership](../architecture/build-orchestration.json) | contribute | active |
|
|
177
178
|
| How can a consumer workflow report a Buildchain-owned failure back to Buildchain? | [`consumer-issue-reporting.md`](consumer-issue-reporting.md) + [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md) | use | stable |
|
|
178
179
|
| What do the fixture repositories demonstrate? | [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md), [`../fixtures/publish-transaction-shaped/README.md`](../fixtures/publish-transaction-shaped/README.md), [`../fixtures/web-surface-shaped/README.md`](../fixtures/web-surface-shaped/README.md), [`../fixtures/publication-artifact-shaped/README.md`](../fixtures/publication-artifact-shaped/README.md) | verify | stable |
|
|
179
180
|
| What license and contribution terms apply? | [`../LICENSE`](../LICENSE) + [`../LICENSE-POLICY.md`](../LICENSE-POLICY.md) | use | stable |
|
package/docs/cli-reference.md
CHANGED
|
@@ -990,7 +990,7 @@ buildchain infra-contract ...
|
|
|
990
990
|
- Syntax:
|
|
991
991
|
|
|
992
992
|
```text
|
|
993
|
-
buildchain init [--cwd <dir>] [--type package|native|web-surface|infra-contract|publication-artifact|anchored-package] [--force] [--package-manager pnpm|npm|yarn] [--runner-preset <preset>] [--artifact-name <
|
|
993
|
+
buildchain init [--cwd <dir>] [--type package|native|web-surface|infra-contract|publication-artifact|anchored-package] [--force] [--package-manager pnpm|npm|yarn] [--runner-preset <preset>] [--artifact-name <name>]
|
|
994
994
|
```
|
|
995
995
|
|
|
996
996
|
## `inspect`
|