@kungfu-tech/buildchain 4.1.0-alpha.0 → 4.1.0-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (295) hide show
  1. package/AGENTS.md +30 -41
  2. package/CONTRIBUTING.md +6 -7
  3. package/architecture/action-taxonomy.json +5 -21
  4. package/architecture/agent-change-map.md +74 -56
  5. package/architecture/build-orchestration.json +8 -1
  6. package/architecture/ci-lane-change-budget.json +179 -69
  7. package/architecture/floating-consumer-policy.json +7 -17
  8. package/architecture/internal-capabilities.json +58 -72
  9. package/architecture/maintainability-debt.json +138 -52
  10. package/architecture/maintainability-policy.json +6 -15
  11. package/architecture/promotion-job-topology.json +39 -20
  12. package/architecture/release-topology.json +26 -37
  13. package/architecture/runtime-entry.json +26 -0
  14. package/architecture/runtime-resume-lineage.json +23 -0
  15. package/architecture/stage-capsule-qualification.json +2 -2
  16. package/architecture/universal-workflow-bootstrap.json +10 -25
  17. package/architecture/universal-workflow-capability-policy.json +61 -0
  18. package/architecture/universal-workflow-fault-campaign.json +18 -24
  19. package/architecture/workflow-taxonomy.json +0 -11
  20. package/contracts/fixtures/{v4-runtime-ref-resume-authority-v1 → runtime-resume-lineage-v2}/scenario.json +2 -3
  21. package/contracts/fixtures/v4-floating-consumer-policy-v1/cases.json +2 -2
  22. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  23. package/contracts/promotion-invocation-v1.schema.json +0 -44
  24. package/contracts/promotion-request-v1.schema.json +0 -39
  25. package/contracts/runtime-resume-lineage-v2.schema.json +182 -0
  26. package/dist/site/buildchain-contract.json +472 -361
  27. package/dist/site/buildchain-site.json +99 -99
  28. package/dist/site/capability-registry.json +3 -3
  29. package/dist/site/cli-registry.json +4 -4
  30. package/dist/site/controller-registry.json +94 -78
  31. package/dist/site/kfd-claims.json +224 -343
  32. package/dist/site/kfd-upstream-aggregate.json +1 -1
  33. package/dist/site/manual-registry.json +15 -15
  34. package/dist/site/node-api-registry.json +239 -354
  35. package/dist/site/page-registry.json +80 -80
  36. package/dist/site/public-surface-audit.json +203 -254
  37. package/dist/site/publication-authority-registry.json +1 -24
  38. package/dist/site/publication-registry.json +4 -4
  39. package/dist/site/release-provenance.json +1 -1
  40. package/dist/site/site-manifest.json +19 -19
  41. package/dist/site/workflow-registry.json +197 -357
  42. package/docs/MAP.md +3 -3
  43. package/docs/auditable-demo.md +4 -4
  44. package/docs/cli-reference.md +2 -2
  45. package/docs/code-organization.md +5 -4
  46. package/docs/controller-evidence.md +2 -2
  47. package/docs/dev-alpha-candidate-patrol.md +5 -5
  48. package/docs/dev-delivery-warrant.md +14 -24
  49. package/docs/engineering-housekeeper.md +3 -3
  50. package/docs/github-artifact-attestation.md +9 -12
  51. package/docs/github-governance-authority.md +4 -4
  52. package/docs/node-api-reference.md +153 -167
  53. package/docs/publication-artifacts.md +3 -4
  54. package/docs/publication-authority.md +2 -2
  55. package/docs/release-candidate.md +21 -27
  56. package/docs/release-governance.md +10 -10
  57. package/docs/release-promotion-request.md +11 -18
  58. package/docs/release-propagation.md +5 -6
  59. package/docs/release-tail-provider-plane.md +2 -3
  60. package/docs/reusable-build-surface.md +13 -7
  61. package/docs/runtime-entry.md +122 -0
  62. package/docs/runtime-train-validation.md +30 -41
  63. package/docs/v4-publication-rehearsal.md +5 -5
  64. package/docs/v4-stage-capsule.md +9 -10
  65. package/docs/web-surface-deployments.md +16 -20
  66. package/docs/workflow-catalog.md +0 -1
  67. package/package.json +6 -6
  68. package/packages/core/adoption/commands/init-repo.mjs +2 -2
  69. package/packages/core/adoption/cross-platform-adopter-qualification.js +2 -13
  70. package/packages/core/adoption/qualification/actions.js +3 -5
  71. package/packages/core/adoption/qualification/admission.js +2 -3
  72. package/packages/core/build/artifact/attestation.js +0 -1
  73. package/packages/core/build/artifact/contracts.js +1 -4
  74. package/packages/core/build/artifact/store.js +6 -5
  75. package/packages/core/build/artifact-signing.js +4 -10
  76. package/packages/core/build/binary/actions.js +15 -9
  77. package/packages/core/build/binary-publication-dispatch.js +2 -6
  78. package/packages/core/build/demo/action-context.js +2 -11
  79. package/packages/core/build/demo/binary-action.js +8 -10
  80. package/packages/core/build/gate/controller.js +0 -2
  81. package/packages/core/build/github-attestation/action.js +2 -7
  82. package/packages/core/build/github-attestation/admission.js +0 -8
  83. package/packages/core/build/github-attestation/transaction.js +1 -2
  84. package/packages/core/build/lifecycle/stage-action.js +2 -0
  85. package/packages/core/build/lifecycle/stage.js +6 -3
  86. package/packages/core/build/macos-credential-island/dmg-assembly.js +0 -2
  87. package/packages/core/build/macos-credential-island/lib.js +2 -6
  88. package/packages/core/build/plan/action-context.js +0 -7
  89. package/packages/core/build/plan/action.js +7 -11
  90. package/packages/core/build/plan/admission.js +6 -73
  91. package/packages/core/build/plan/configuration.js +1 -1
  92. package/packages/core/build/plan/environment.js +1 -1
  93. package/packages/core/build/plan/identity.js +1 -5
  94. package/packages/core/build/plan/resolve.js +7 -1
  95. package/packages/core/build/recovery/checkpoint.js +158 -0
  96. package/packages/core/build/recovery/transaction.js +51 -0
  97. package/packages/core/build/signing/authority-actions.js +2 -11
  98. package/packages/core/build/signing/control.js +0 -5
  99. package/packages/core/build/signing/controller-transaction.js +0 -1
  100. package/packages/core/build/signing/delegation.js +2 -4
  101. package/packages/core/build/signing/dispatch.js +10 -56
  102. package/packages/core/build/signing/intake.js +0 -4
  103. package/packages/core/build/signing/prepare.js +1 -1
  104. package/packages/core/build/signing/request.js +3 -8
  105. package/packages/core/build/source/checkout-action.js +6 -10
  106. package/packages/core/build/source/controller.js +1 -4
  107. package/packages/core/build/source/lifecycle.js +3 -13
  108. package/packages/core/build/stage-capsule/actions.js +3 -13
  109. package/packages/core/build/stage-capsule/campaign/resume.js +10 -5
  110. package/packages/core/build/stage-capsule/rehearsal/verify.js +3 -4
  111. package/packages/core/build/stage-capsule-resume-planner.js +0 -1
  112. package/packages/core/build/summary/aggregation.js +5 -5
  113. package/packages/core/build/summary/finalization.js +1 -1
  114. package/packages/core/build/verification/actions.js +3 -12
  115. package/packages/core/build/verification/runner.js +22 -20
  116. package/packages/core/consumer/floating-consumer-evidence.js +3 -21
  117. package/packages/core/consumer/floating-consumer-policy.js +2 -93
  118. package/packages/core/consumer/floating-consumer-release-passport.js +1 -34
  119. package/packages/core/consumer/policy-admission.js +1 -3
  120. package/packages/core/contracts/buildchain-contract.js +12 -146
  121. package/packages/core/contracts/workflow-yaml-contract.js +11 -1
  122. package/packages/core/dev-delivery/candidate/admission.js +3 -4
  123. package/packages/core/dev-delivery/candidate/coordinates.js +0 -8
  124. package/packages/core/dev-delivery/commands/dev-delivery-request.sh +5 -13
  125. package/packages/core/dev-delivery/commands/dev-delivery-source-proof-reuse.mjs +0 -3
  126. package/packages/core/dev-delivery/dev-delivery-contract-surface.js +4 -52
  127. package/packages/core/dev-delivery/dev-delivery-execution-transfer.js +2 -15
  128. package/packages/core/dev-delivery/native/action-context.js +4 -32
  129. package/packages/core/dev-delivery/native/provider-boundary.js +0 -2
  130. package/packages/core/dev-delivery/native/transactions.js +1 -2
  131. package/packages/core/dev-delivery/queue/reconciliation-action.js +6 -10
  132. package/packages/core/dev-delivery/source-proof/predicates.js +0 -6
  133. package/packages/core/dev-delivery/source-proof/reuse.js +0 -2
  134. package/packages/core/dev-delivery/source-proof/seal.js +0 -2
  135. package/packages/core/governance/alpha-candidate/action.js +1 -10
  136. package/packages/core/governance/audit/actions.js +1 -3
  137. package/packages/core/governance/audit/collection.js +1 -3
  138. package/packages/core/governance/audit/identity.js +3 -31
  139. package/packages/core/governance/audit/transactions.js +2 -4
  140. package/packages/core/governance/buildchain-publication-authority.js +0 -1
  141. package/packages/core/governance/commands/audit-github-governance.mjs +3 -2
  142. package/packages/core/governance/github-governance-authority.js +0 -5
  143. package/packages/core/governance/receipt-admission.js +0 -15
  144. package/packages/core/index.js +1 -1
  145. package/packages/core/observability/controller/identity.js +4 -5
  146. package/packages/core/observability/controller-evidence.js +5 -10
  147. package/packages/core/paper/commands/paper.mjs +6 -6
  148. package/packages/core/paper/operations/plans.js +2 -2
  149. package/packages/core/paper/operations/provisioning-validation.js +1 -1
  150. package/packages/core/paper/operations/scaffold-workflows.js +29 -12
  151. package/packages/core/paper/operations/scaffold.js +97 -69
  152. package/packages/core/paper/paper-agent-entry.js +0 -11
  153. package/packages/core/paper/paper-runtime-channels.js +21 -66
  154. package/packages/core/paper/paper-scaffold-content.js +1 -1
  155. package/packages/core/paper/paper.js +9 -5
  156. package/packages/core/paper/publication/candidate.js +0 -9
  157. package/packages/core/paper/publication-controller.js +2 -4
  158. package/packages/core/providers/github/artifact-attestation.js +1 -1
  159. package/packages/core/publication/authority/actions.js +9 -8
  160. package/packages/core/publication/authority/admission.js +0 -11
  161. package/packages/core/publication/authority/assembly.js +2 -7
  162. package/packages/core/publication/authority/control-plane.js +2 -2
  163. package/packages/core/publication/authority/governance.js +2 -9
  164. package/packages/core/publication/authority/request.js +7 -2
  165. package/packages/core/publication/authority/verification.js +3 -18
  166. package/packages/core/publication/binary/action.js +5 -7
  167. package/packages/core/publication/candidate/qualification-action.js +1 -6
  168. package/packages/core/publication/candidate/stage-capsules.js +1 -1
  169. package/packages/core/publication/npm/preview-action.js +9 -15
  170. package/packages/core/publication/oci/preview-actions.js +1 -10
  171. package/packages/core/publication/publication-artifact-candidate.js +2 -2
  172. package/packages/core/publication/publication-authority.js +2 -2
  173. package/packages/core/publication/publication-rehearsal-projection.js +3 -3
  174. package/packages/core/publication/settlement/actions.js +2 -11
  175. package/packages/core/release/binary/coordinates-action.js +0 -13
  176. package/packages/core/release/binary/coordinates.js +2 -19
  177. package/packages/core/release/commands/promotion-channel-router.mjs +12 -56
  178. package/packages/core/release/commands/resume-from-candidate-run.mjs +2 -3
  179. package/packages/core/release/dev-alpha-active-release-train.js +0 -5
  180. package/packages/core/release/line/action.js +2 -13
  181. package/packages/core/release/next-development/actions.js +2 -5
  182. package/packages/core/release/passport/consumer-validation.js +1 -28
  183. package/packages/core/release/promote-candidate/development-source.js +7 -8
  184. package/packages/core/release/promotion/actions.js +7 -38
  185. package/packages/core/release/promotion/admission.js +3 -50
  186. package/packages/core/release/promotion/candidate.js +2 -4
  187. package/packages/core/release/promotion/channel.js +13 -101
  188. package/packages/core/release/promotion/qualification-action.js +2 -13
  189. package/packages/core/release/promotion/routing.js +16 -81
  190. package/packages/core/release/promotion/selection.js +1 -9
  191. package/packages/core/release/promotion-request.js +1 -40
  192. package/packages/core/release/qualification/actions.js +0 -8
  193. package/packages/core/release/qualification/public-build.js +1 -1
  194. package/packages/core/release/recovery/candidate.js +15 -21
  195. package/packages/core/release/recovery/capsules.js +2 -10
  196. package/packages/core/release/recovery/lineage.js +305 -0
  197. package/packages/core/release/recovery/provenance.js +1 -2
  198. package/packages/core/release/recovery/publication.js +4 -14
  199. package/packages/core/release/recovery/readback.js +19 -32
  200. package/packages/core/release/recovery/runtime.js +4 -95
  201. package/packages/core/release/release-candidate-recovery.js +4 -9
  202. package/packages/core/release/release-candidate.js +2 -5
  203. package/packages/core/release/reseal/actions.js +3 -22
  204. package/packages/core/release/reseal/admission.js +0 -2
  205. package/packages/core/release/reseal/finalize-platform.js +0 -2
  206. package/packages/core/release/tail-reseal-github.js +1 -2
  207. package/packages/core/release/tail-reseal-receipt.js +0 -1
  208. package/packages/core/release/tail-reseal.js +2 -20
  209. package/packages/core/release/version-state.js +16 -13
  210. package/packages/core/runtime/buildchain-domain.wasm +0 -0
  211. package/packages/core/runtime/checkout-identity.js +0 -13
  212. package/packages/core/runtime/domain-wasm-artifact.js +2 -2
  213. package/packages/core/runtime/entry/actions.js +121 -0
  214. package/packages/core/runtime/entry/activation.js +86 -0
  215. package/packages/core/runtime/entry/github.js +55 -0
  216. package/packages/core/runtime/entry/recovery.js +37 -0
  217. package/packages/core/runtime/entry/selection.js +110 -0
  218. package/packages/core/web/controller.js +1 -1
  219. package/packages/core/web/publication-admission-action.js +1 -8
  220. package/packages/core/web/web-surface-publication-candidate.js +2 -5
  221. package/packages/core/workflow/admission/actions.js +6 -26
  222. package/packages/core/workflow/admission/recovery.js +3 -43
  223. package/packages/core/workflow/admission/transactions.js +8 -24
  224. package/packages/core/workflow/commands/buildchain-cli-help.mjs +1 -1
  225. package/packages/core/workflow/commands/universal-workflow-engine.mjs +2 -7
  226. package/packages/core/workflow/dogfood/actions.js +0 -17
  227. package/packages/core/workflow/engine/action.js +0 -5
  228. package/packages/core/workflow/engine/conformance.js +1 -1
  229. package/packages/core/workflow/engine/execution.js +2 -6
  230. package/packages/core/workflow/engine/identity.js +1 -6
  231. package/packages/core/workflow/engine/release-environment.js +11 -35
  232. package/packages/core/workflow/engine/release-promotion.js +2 -2
  233. package/packages/core/workflow/settlement/actions.js +0 -12
  234. package/packages/core/workflow/universal-self-dogfood.js +2 -16
  235. package/packages/core/workflow/universal-workflow-bootstrap.js +16 -241
  236. package/packages/core/workflow/workflow-taxonomy.mjs +2 -2
  237. package/scripts/check-dev-delivery-actions.mjs +17 -8
  238. package/scripts/check-floating-consumer-policy-contract.mjs +6 -6
  239. package/scripts/check-inventory.mjs +1 -10
  240. package/scripts/check-public-dogfood-contract.mjs +34 -21
  241. package/scripts/check-release-topology.mjs +2 -6
  242. package/scripts/check-runtime-entry.mjs +133 -0
  243. package/scripts/check-universal-workflow-bootstrap.mjs +45 -281
  244. package/scripts/check-workflows.sh +0 -7
  245. package/scripts/generate-bootstrap-admission.mjs +1 -1
  246. package/scripts/generate-channel-promotion-workflow.mjs +4 -4
  247. package/scripts/inventory/binary.mjs +4 -4
  248. package/scripts/inventory/promotion.mjs +5 -3
  249. package/scripts/runtime-source-boundaries.mjs +70 -0
  250. package/scripts/site-capability-metadata.mjs +2 -2
  251. package/scripts/workflow-action-graph.mjs +5 -18
  252. package/scripts/workflow-self-reference.mjs +20 -0
  253. package/templates/native-dev-delivery.yml +4 -4
  254. package/templates/universal-buildchain-bootstrap.yml +12 -2
  255. package/architecture/runtime-ref-resume-authority.json +0 -64
  256. package/architecture/universal-workflow-train-admission.json +0 -76
  257. package/contracts/v4-runtime-ref-resume-authority-v1.schema.json +0 -235
  258. package/docs/v4-runtime-ref-resume-authority.md +0 -69
  259. package/packages/core/consumer/channel-selection.js +0 -211
  260. package/packages/core/consumer/commands/buildchain-channel-router.mjs +0 -81
  261. package/packages/core/consumer/invocation-selector.js +0 -4
  262. package/packages/core/consumer/runtime-ref-resume-authority.js +0 -621
  263. package/packages/core/consumer/workflow-definition-authority.js +0 -64
  264. package/packages/core/contracts/runtime-contract-action.js +0 -48
  265. package/packages/core/release/commands/promotion-identity-resolver.mjs +0 -77
  266. package/packages/core/release/commands/verify-promotion-router-binding.sh +0 -36
  267. package/packages/core/release/promotion/identities.js +0 -56
  268. package/packages/core/release/runtime-override-authorization.js +0 -242
  269. package/packages/core/runtime/commands/runtime-ref-core.mjs +0 -171
  270. package/packages/core/runtime/provider-closure.js +0 -60
  271. package/packages/core/runtime/runtime-selection-action.js +0 -34
  272. package/packages/core/runtime/runtime-selection.js +0 -136
  273. package/packages/core/runtime/workflow-runtime.js +0 -11
  274. package/packages/core/workflow/admission/review.js +0 -188
  275. package/packages/core/workflow/commands/universal-workflow-backflow.mjs +0 -26
  276. package/packages/core/workflow/installation.js +0 -33
  277. package/packages/core/workflow/settlement/backflow.js +0 -187
  278. package/scripts/generate-bootstrap-recovery.mjs +0 -94
  279. package/templates/bootstrap-recovery/actions/build/source/admit/action.yml +0 -17
  280. package/templates/bootstrap-recovery/actions/build/source/admit/dist/index.js +0 -63
  281. package/templates/bootstrap-recovery/actions/runtime/dependencies/install/action.yml +0 -18
  282. package/templates/bootstrap-recovery/actions/runtime/dependencies/install/dist/index.js +0 -63
  283. package/templates/bootstrap-recovery/actions/runtime/environment/prepare/action.yml +0 -21
  284. package/templates/bootstrap-recovery/actions/workflow/admission/inspect/action.yml +0 -27
  285. package/templates/bootstrap-recovery/actions/workflow/admission/inspect/dist/index.js +0 -64
  286. package/templates/bootstrap-recovery/actions/workflow/admission/review/action.yml +0 -15
  287. package/templates/bootstrap-recovery/actions/workflow/admission/review/dist/index.js +0 -65
  288. package/templates/bootstrap-recovery/actions/workflow/recovery/admit/action.yml +0 -47
  289. package/templates/bootstrap-recovery/actions/workflow/recovery/execute/action.yml +0 -48
  290. package/templates/bootstrap-recovery/actions/workflow/recovery/settle/action.yml +0 -54
  291. package/templates/bootstrap-recovery/actions/workflow/settlement/seal/action.yml +0 -17
  292. package/templates/bootstrap-recovery/actions/workflow/settlement/seal/dist/index.js +0 -65
  293. package/templates/bootstrap-recovery/manifest.json +0 -68
  294. package/templates/bootstrap-recovery/package.json +0 -9
  295. package/templates/universal-buildchain-bootstrap-recovery.yml +0 -115
@@ -1,68 +0,0 @@
1
- {
2
- "schema": "buildchain.bootstrap-recovery-distribution/v1",
3
- "installDirectory": ".buildchain/bootstrap-recovery",
4
- "workflowDestination": ".github/workflows/buildchain-bootstrap-recovery.yml",
5
- "workflowRoot": "sha256:b52498f2a86052cc9c7589c75c959f579ff709cdb1f35511837c791a6038dca0",
6
- "files": [
7
- {
8
- "path": "actions/build/source/admit/action.yml",
9
- "root": "sha256:86dd10edca069ca053e00e6ac888ea580fa2ebfda2ba7bd309fbe06f5d3e5389"
10
- },
11
- {
12
- "path": "actions/build/source/admit/dist/index.js",
13
- "root": "sha256:e82cf972c46ec0dd73429310f7f172c72ccd08268dcc9da8fe691279c00af4b3"
14
- },
15
- {
16
- "path": "actions/runtime/dependencies/install/action.yml",
17
- "root": "sha256:c4b1ddbed043ea4e908b0f96279567a9a66ec797ab50573a1317cba83d389865"
18
- },
19
- {
20
- "path": "actions/runtime/dependencies/install/dist/index.js",
21
- "root": "sha256:d77f7debd78dad1a86b655844d0a17177d5955a75566ef0eb4336f660cb81f67"
22
- },
23
- {
24
- "path": "actions/runtime/environment/prepare/action.yml",
25
- "root": "sha256:99ed4fda1a54482c2f4488ec560a57c315ef8394872c1ffb9fa53dc1cb21a676"
26
- },
27
- {
28
- "path": "actions/workflow/admission/inspect/action.yml",
29
- "root": "sha256:66539fe1e38717c194d81e9138aaf5be6c7a2d20dcee69e1f39a52d385f14eaa"
30
- },
31
- {
32
- "path": "actions/workflow/admission/inspect/dist/index.js",
33
- "root": "sha256:c3bd4f3f6e2c031c0bb7ada8397b75498f97dafbf5de090137258a0208dee024"
34
- },
35
- {
36
- "path": "actions/workflow/admission/review/action.yml",
37
- "root": "sha256:b78450f4e0204ba2a51b0cf0dbca8b6e9cf46950666b3377ec80c9501750f91b"
38
- },
39
- {
40
- "path": "actions/workflow/admission/review/dist/index.js",
41
- "root": "sha256:d826e866a9698b2004ef4ccde8b1510df99e22734aafaf46672025f5d441d211"
42
- },
43
- {
44
- "path": "actions/workflow/recovery/admit/action.yml",
45
- "root": "sha256:b349c05a577e88aba12bdeda9e0ef6f068c3931e2cae93f9df0f20a6eb87c24e"
46
- },
47
- {
48
- "path": "actions/workflow/recovery/execute/action.yml",
49
- "root": "sha256:4e1c67dcdb90254fcd493654a2211b2d24d782ab9affdd2341450e3450c7a948"
50
- },
51
- {
52
- "path": "actions/workflow/recovery/settle/action.yml",
53
- "root": "sha256:e999e5e5c4b6b86c83a0262b696e29c4b766699f02f2a82ab5b205ab2a93e61a"
54
- },
55
- {
56
- "path": "actions/workflow/settlement/seal/action.yml",
57
- "root": "sha256:caabf071cfb0f5d151d46c9c8557f0bb3c237e64043e907f1d8e2294e40b965e"
58
- },
59
- {
60
- "path": "actions/workflow/settlement/seal/dist/index.js",
61
- "root": "sha256:29e4d0fd09221e859c229e60e30be71cd1c4636c7644a63bf3fc095b3267d253"
62
- },
63
- {
64
- "path": "package.json",
65
- "root": "sha256:528dac2d4ea33c2b6855754a247eb690683cbde7d887acae457d3c67f17bfe36"
66
- }
67
- ]
68
- }
@@ -1,9 +0,0 @@
1
- {
2
- "name": "buildchain-consumer-recovery",
3
- "private": true,
4
- "type": "module",
5
- "version": "4.1.0-alpha.0",
6
- "engines": {
7
- "node": ">=24"
8
- }
9
- }
@@ -1,115 +0,0 @@
1
- name: Universal Buildchain Bootstrap Recovery
2
- on:
3
- workflow_call:
4
- inputs:
5
- request-json:
6
- description: Versioned exact-candidate request envelope
7
- required: true
8
- type: string
9
- outputs:
10
- runtime-sha:
11
- value: ${{ jobs.recovery-admit.outputs.runtime-sha }}
12
- result-json:
13
- value: ${{ jobs.recovery-execute.outputs.result-json }}
14
- terminal-receipt-json:
15
- value: ${{ jobs.recovery-settle.outputs.terminal-receipt-json }}
16
- terminal-receipt-root:
17
- value: ${{ jobs.recovery-settle.outputs.terminal-receipt-root }}
18
- backflow-root:
19
- value: ${{ jobs.recovery-settle.outputs.backflow-root }}
20
- permissions:
21
- contents: read
22
- jobs:
23
- recovery-admit:
24
- runs-on: ubuntu-24.04
25
- permissions:
26
- checks: read
27
- contents: read
28
- pull-requests: read
29
- outputs:
30
- runtime-sha: ${{ steps.node.outputs.runtime-sha }}
31
- admission-json: ${{ steps.node.outputs.admission-json }}
32
- steps:
33
- - name: Check out workflow implementation
34
- uses: actions/checkout@v7.0.0
35
- with:
36
- repository: ${{ job.workflow_repository }}
37
- ref: ${{ job.workflow_sha }}
38
- path: .buildchain/workflow-shell
39
- persist-credentials: false
40
- - name: Execute bootstrap-recovery-admit
41
- id: node
42
- uses: ./.buildchain/workflow-shell/.buildchain/bootstrap-recovery/actions/workflow/recovery/admit
43
- with:
44
- request-json: ${{ toJSON(inputs) }}
45
- recovery-execute:
46
- needs: recovery-admit
47
- runs-on: ubuntu-24.04
48
- permissions:
49
- actions: write
50
- artifact-metadata: write
51
- attestations: write
52
- checks: write
53
- contents: write
54
- deployments: write
55
- id-token: write
56
- issues: write
57
- packages: write
58
- pages: write
59
- pull-requests: write
60
- security-events: write
61
- statuses: write
62
- outputs:
63
- result-json: ${{ steps.node.outputs.result-json }}
64
- steps:
65
- - name: Checkout unchanged consumer source
66
- uses: actions/checkout@v7.0.0
67
- with:
68
- persist-credentials: false
69
- id: source-checkout
70
- - name: Check out workflow implementation
71
- uses: actions/checkout@v7.0.0
72
- with:
73
- repository: ${{ job.workflow_repository }}
74
- ref: ${{ job.workflow_sha }}
75
- path: .buildchain/workflow-shell
76
- persist-credentials: false
77
- if: ${{ always() }}
78
- - name: Execute bootstrap-recovery-execute
79
- id: node
80
- uses: ./.buildchain/workflow-shell/.buildchain/bootstrap-recovery/actions/workflow/recovery/execute
81
- with:
82
- needs-recovery-admit-outputs-runtime-sha: ${{ toJSON(needs.recovery-admit.outputs.runtime-sha) }}
83
- request-json: ${{ toJSON(inputs) }}
84
- needs-recovery-admit-outputs-admission-json: ${{ toJSON(needs.recovery-admit.outputs.admission-json) }}
85
- source-checkout-outcome: ${{ steps.source-checkout.outcome }}
86
- if: ${{ always() }}
87
- recovery-settle:
88
- needs:
89
- - recovery-admit
90
- - recovery-execute
91
- runs-on: ubuntu-24.04
92
- permissions:
93
- contents: read
94
- issues: write
95
- pull-requests: read
96
- outputs:
97
- terminal-receipt-json: ${{ steps.node.outputs.terminal-receipt-json }}
98
- terminal-receipt-root: ${{ steps.node.outputs.terminal-receipt-root }}
99
- backflow-root: ${{ steps.node.outputs.backflow-root }}
100
- steps:
101
- - name: Check out workflow implementation
102
- uses: actions/checkout@v7.0.0
103
- with:
104
- repository: ${{ job.workflow_repository }}
105
- ref: ${{ job.workflow_sha }}
106
- path: .buildchain/workflow-shell
107
- persist-credentials: false
108
- - name: Execute bootstrap-recovery-settle
109
- id: node
110
- uses: ./.buildchain/workflow-shell/.buildchain/bootstrap-recovery/actions/workflow/recovery/settle
111
- with:
112
- needs-recovery-admit-outputs-admission-json: ${{ toJSON(needs.recovery-admit.outputs.admission-json) }}
113
- needs-recovery-execute-outputs-result-json: ${{ toJSON(needs.recovery-execute.outputs.result-json) }}
114
- needs-recovery-admit-outputs-runtime-sha: ${{ toJSON(needs.recovery-admit.outputs.runtime-sha) }}
115
- request-json: ${{ toJSON(inputs) }}