@invarn/cibuild 1.3.15 → 1.3.17

package/dist/src/yaml/steps/ios-deps.d.ts

@@ -0,0 +1,43 @@
+/**
+ * iOS dependency management steps: cocoapods-install, carthage
+ */
+import { BaseStepExecutor } from './base.js';
+import type { StepDef, CIConfig } from '../../types.js';
+import type { ValidationRequirement } from '../validation-types.js';
+export interface CocoapodsInstallInputs {
+    /** CocoaPods command: install | update */
+    command?: string;
+    /** Directory containing Podfile (and optionally Gemfile) */
+    source_root_path?: string;
+    /** Explicit path to Podfile (overrides source_root_path) */
+    podfile_path?: string;
+    /** Enable verbose CocoaPods logging */
+    verbose?: boolean;
+}
+/**
+ * Runs `pod install` or `pod update`.
+ * Auto-detects Gemfile and uses `bundle exec pod` when appropriate.
+ * Determines CocoaPods version from Podfile.lock or Gemfile.lock.
+ */
+export declare class CocoapodsInstallStepExecutor extends BaseStepExecutor {
+    getValidationRequirements(_inputs: CocoapodsInstallInputs, _env: Record<string, string>, _config: CIConfig): ValidationRequirement[];
+    execute(inputs: CocoapodsInstallInputs, _env: Record<string, string>, _config: CIConfig): Promise<StepDef>;
+}
+export interface CarthageInputs {
+    /** Carthage command: bootstrap | update | build */
+    carthage_command?: string;
+    /** Additional options for the carthage command */
+    carthage_options?: string;
+    /** GitHub personal access token (avoids rate limits) */
+    github_access_token?: string;
+    /** Enable verbose logging */
+    verbose?: boolean;
+}
+/**
+ * Runs a Carthage command (bootstrap/update/build) to manage dependencies.
+ */
+export declare class CarthageStepExecutor extends BaseStepExecutor {
+    getValidationRequirements(_inputs: CarthageInputs, _env: Record<string, string>, _config: CIConfig): ValidationRequirement[];
+    execute(inputs: CarthageInputs, _env: Record<string, string>, _config: CIConfig): Promise<StepDef>;
+}
+//# sourceMappingURL=ios-deps.d.ts.map

package/dist/src/yaml/steps/ios-deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ios-deps.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/ios-deps.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAc,MAAM,wBAAwB,CAAC;AAMhF,MAAM,WAAW,sBAAsB;IACrC,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,qBAAa,4BAA6B,SAAQ,gBAAgB;IAChE,yBAAyB,CACvB,OAAO,EAAE,sBAAsB,EAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAUpB,OAAO,CACX,MAAM,EAAE,sBAAsB,EAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,OAAO,CAAC,OAAO,CAAC;CAuEpB;AAMD,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kDAAkD;IAClD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,gBAAgB;IACxD,yBAAyB,CACvB,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAUpB,OAAO,CACX,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,OAAO,CAAC,OAAO,CAAC;CAyDpB"}

package/dist/src/yaml/steps/ios-deps.js

@@ -0,0 +1,141 @@
+/**
+ * iOS dependency management steps: cocoapods-install, carthage
+ */
+import { BaseStepExecutor } from './base.js';
+/**
+ * Runs `pod install` or `pod update`.
+ * Auto-detects Gemfile and uses `bundle exec pod` when appropriate.
+ * Determines CocoaPods version from Podfile.lock or Gemfile.lock.
+ */
+export class CocoapodsInstallStepExecutor extends BaseStepExecutor {
+    getValidationRequirements(_inputs, _env, _config) {
+        return [
+            this.requireCommand('pod', 'CocoaPods is required', 'Install: gem install cocoapods (or use Gemfile)'),
+        ];
+    }
+    async execute(inputs, _env, _config) {
+        const stepName = 'cocoapods-install';
+        const command = this.getInput(inputs, 'command', 'install');
+        const sourceRootPath = this.getInput(inputs, 'source_root_path', '');
+        const podfilePath = this.getInput(inputs, 'podfile_path', '');
+        const verbose = this.getInput(inputs, 'verbose', false);
+        const commands = [];
+        commands.push('# cocoapods-install');
+        commands.push('echo "🔧 Running CocoaPods..."');
+        commands.push('');
+        // Determine working directory
+        if (podfilePath) {
+            commands.push(`# Use directory from explicit Podfile path`);
+            commands.push(`WORK_DIR="$(dirname '${this.escapeBash(podfilePath)}')""`);
+            commands.push(`cd "$WORK_DIR"`);
+        }
+        else if (sourceRootPath) {
+            commands.push(`cd '${this.escapeBash(sourceRootPath)}'`);
+        }
+        else {
+            commands.push('# Use CIBUILD_SOURCE_DIR if set, otherwise current directory');
+            commands.push('if [ -n "$CIBUILD_SOURCE_DIR" ]; then');
+            commands.push('  cd "$CIBUILD_SOURCE_DIR"');
+            commands.push('fi');
+        }
+        commands.push('');
+        // Check for Podfile
+        commands.push('if [ ! -f "Podfile" ]; then');
+        commands.push('  echo "❌ Error: Podfile not found in $(pwd)"');
+        commands.push('  exit 1');
+        commands.push('fi');
+        commands.push('');
+        // Determine whether to use bundle exec
+        commands.push('# Detect Gemfile with cocoapods gem → use bundle exec');
+        commands.push('USE_BUNDLE_EXEC="false"');
+        commands.push('if [ -f "Gemfile.lock" ] && grep -q "cocoapods" "Gemfile.lock" 2>/dev/null; then');
+        commands.push('  if command -v bundle &>/dev/null; then');
+        commands.push('    USE_BUNDLE_EXEC="true"');
+        commands.push('    echo "Detected cocoapods in Gemfile.lock — using bundle exec"');
+        commands.push('    bundle install --quiet');
+        commands.push('  fi');
+        commands.push('elif [ -f "Gemfile" ] && grep -q "cocoapods" "Gemfile" 2>/dev/null; then');
+        commands.push('  if command -v bundle &>/dev/null; then');
+        commands.push('    USE_BUNDLE_EXEC="true"');
+        commands.push('    echo "Detected cocoapods in Gemfile — using bundle exec"');
+        commands.push('    bundle install --quiet');
+        commands.push('  fi');
+        commands.push('fi');
+        commands.push('');
+        // Build pod command
+        const verboseFlag = verbose ? ' --verbose' : '';
+        commands.push(`POD_CMD="${this.escapeBash(command)}${verboseFlag}"`);
+        commands.push('');
+        commands.push('if [ "$USE_BUNDLE_EXEC" = "true" ]; then');
+        commands.push('  echo "Running: bundle exec pod $POD_CMD"');
+        commands.push('  bundle exec pod $POD_CMD');
+        commands.push('else');
+        commands.push('  echo "Running: pod $POD_CMD"');
+        commands.push('  pod $POD_CMD');
+        commands.push('fi');
+        commands.push('');
+        commands.push('echo "✅ CocoaPods ${POD_CMD%% *} completed"');
+        const script = this.createBashScriptFromCommands(commands, stepName);
+        return this.createScriptStep(script, stepName);
+    }
+}
+/**
+ * Runs a Carthage command (bootstrap/update/build) to manage dependencies.
+ */
+export class CarthageStepExecutor extends BaseStepExecutor {
+    getValidationRequirements(_inputs, _env, _config) {
+        return [
+            this.requireCommand('carthage', 'Carthage is required', 'Install: brew install carthage'),
+        ];
+    }
+    async execute(inputs, _env, _config) {
+        const stepName = 'carthage';
+        const carthageCommand = this.getInput(inputs, 'carthage_command', 'bootstrap');
+        const carthageOptions = this.getInput(inputs, 'carthage_options', '');
+        const githubAccessToken = this.getInput(inputs, 'github_access_token', '');
+        const verbose = this.getInput(inputs, 'verbose', false);
+        const commands = [];
+        commands.push('# carthage');
+        commands.push(`echo "🔧 Running Carthage ${this.escapeBash(carthageCommand)}..."`);
+        commands.push('');
+        // Navigate to source dir if available
+        commands.push('if [ -n "$CIBUILD_SOURCE_DIR" ]; then');
+        commands.push('  cd "$CIBUILD_SOURCE_DIR"');
+        commands.push('fi');
+        commands.push('');
+        // Check for Cartfile
+        commands.push('if [ ! -f "Cartfile" ]; then');
+        commands.push('  echo "❌ Error: Cartfile not found in $(pwd)"');
+        commands.push('  exit 1');
+        commands.push('fi');
+        commands.push('');
+        // Set GitHub access token if provided
+        if (githubAccessToken) {
+            commands.push('# Set GitHub access token to avoid rate limiting');
+            commands.push(`export GITHUB_ACCESS_TOKEN='${this.escapeBash(githubAccessToken)}'`);
+            commands.push('');
+        }
+        else {
+            commands.push('# Use GITHUB_ACCESS_TOKEN from env if available');
+            commands.push('if [ -n "$GITHUB_ACCESS_TOKEN" ]; then');
+            commands.push('  echo "Using GitHub access token from environment"');
+            commands.push('fi');
+            commands.push('');
+        }
+        // Build command
+        let cmd = `carthage ${this.escapeBash(carthageCommand)}`;
+        if (carthageOptions) {
+            cmd += ` ${carthageOptions}`;
+        }
+        if (verbose) {
+            cmd += ' --verbose';
+        }
+        commands.push(`echo "Running: ${cmd}"`);
+        commands.push(cmd);
+        commands.push('');
+        commands.push(`echo "✅ Carthage ${this.escapeBash(carthageCommand)} completed"`);
+        const script = this.createBashScriptFromCommands(commands, stepName);
+        return this.createScriptStep(script, stepName);
+    }
+}
+//# sourceMappingURL=ios-deps.js.map

package/dist/src/yaml/steps/ios-deps.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for iOS dependency management steps: cocoapods-install, carthage
+ */
+export {};
+//# sourceMappingURL=ios-deps.test.d.ts.map

package/dist/src/yaml/steps/ios-deps.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ios-deps.test.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/ios-deps.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/src/yaml/steps/ios-deps.test.js

@@ -0,0 +1,90 @@
+/**
+ * Tests for iOS dependency management steps: cocoapods-install, carthage
+ */
+import { describe, test, expect } from '@jest/globals';
+import { CocoapodsInstallStepExecutor, CarthageStepExecutor } from './ios-deps.js';
+import { testConfig } from './test-config.js';
+describe('CocoapodsInstallStepExecutor', () => {
+    test('should generate pod install script', async () => {
+        const executor = new CocoapodsInstallStepExecutor();
+        const result = await executor.execute({}, {}, testConfig);
+        expect(result.kind).toBe('script');
+        expect(result.name).toBe('cocoapods-install');
+        expect(result.script).toContain('pod');
+        expect(result.script).toContain('install');
+        expect(result.script).toContain('Podfile');
+    });
+    test('should support pod update command', async () => {
+        const executor = new CocoapodsInstallStepExecutor();
+        const result = await executor.execute({ command: 'update' }, {}, testConfig);
+        expect(result.script).toContain('update');
+    });
+    test('should support verbose mode', async () => {
+        const executor = new CocoapodsInstallStepExecutor();
+        const result = await executor.execute({ verbose: true }, {}, testConfig);
+        expect(result.script).toContain('--verbose');
+    });
+    test('should detect Gemfile and use bundle exec', async () => {
+        const executor = new CocoapodsInstallStepExecutor();
+        const result = await executor.execute({}, {}, testConfig);
+        expect(result.script).toContain('bundle exec');
+        expect(result.script).toContain('Gemfile');
+    });
+    test('should support custom source root path', async () => {
+        const executor = new CocoapodsInstallStepExecutor();
+        const result = await executor.execute({ source_root_path: '/path/to/project' }, {}, testConfig);
+        expect(result.script).toContain('/path/to/project');
+    });
+    test('should support explicit podfile path', async () => {
+        const executor = new CocoapodsInstallStepExecutor();
+        const result = await executor.execute({ podfile_path: '/path/to/Podfile' }, {}, testConfig);
+        expect(result.script).toContain('/path/to/Podfile');
+    });
+    test('should check for Podfile existence', async () => {
+        const executor = new CocoapodsInstallStepExecutor();
+        const result = await executor.execute({}, {}, testConfig);
+        expect(result.script).toContain('Podfile not found');
+        expect(result.script).toContain('exit 1');
+    });
+});
+describe('CarthageStepExecutor', () => {
+    test('should generate carthage bootstrap script', async () => {
+        const executor = new CarthageStepExecutor();
+        const result = await executor.execute({}, {}, testConfig);
+        expect(result.kind).toBe('script');
+        expect(result.name).toBe('carthage');
+        expect(result.script).toContain('carthage bootstrap');
+    });
+    test('should support update command', async () => {
+        const executor = new CarthageStepExecutor();
+        const result = await executor.execute({ carthage_command: 'update' }, {}, testConfig);
+        expect(result.script).toContain('carthage update');
+    });
+    test('should support build command', async () => {
+        const executor = new CarthageStepExecutor();
+        const result = await executor.execute({ carthage_command: 'build' }, {}, testConfig);
+        expect(result.script).toContain('carthage build');
+    });
+    test('should support additional options', async () => {
+        const executor = new CarthageStepExecutor();
+        const result = await executor.execute({ carthage_options: '--platform ios --use-xcframeworks' }, {}, testConfig);
+        expect(result.script).toContain('--platform ios --use-xcframeworks');
+    });
+    test('should support verbose mode', async () => {
+        const executor = new CarthageStepExecutor();
+        const result = await executor.execute({ verbose: true }, {}, testConfig);
+        expect(result.script).toContain('--verbose');
+    });
+    test('should support GitHub access token', async () => {
+        const executor = new CarthageStepExecutor();
+        const result = await executor.execute({ github_access_token: 'ghp_test123' }, {}, testConfig);
+        expect(result.script).toContain('GITHUB_ACCESS_TOKEN');
+    });
+    test('should check for Cartfile existence', async () => {
+        const executor = new CarthageStepExecutor();
+        const result = await executor.execute({}, {}, testConfig);
+        expect(result.script).toContain('Cartfile not found');
+        expect(result.script).toContain('exit 1');
+    });
+});
+//# sourceMappingURL=ios-deps.test.js.map

package/dist/src/yaml/steps/ios-signing.d.ts

@@ -0,0 +1,31 @@
+/**
+ * iOS code signing step: certificate-installer
+ * Installs .p12 certificates and provisioning profiles into the macOS keychain.
+ */
+import { BaseStepExecutor } from './base.js';
+import type { StepDef, CIConfig } from '../../types.js';
+import type { ValidationRequirement, StepOutput } from '../validation-types.js';
+export interface CertificateInstallerInputs {
+    /** URL(s) to .p12 certificate files (pipe-separated). Supports file:// */
+    certificate_url?: string;
+    /** Certificate passphrase(s), pipe-separated to match certificate_url count */
+    certificate_passphrase?: string;
+    /** URL(s) to provisioning profile files (pipe-separated). Supports file:// */
+    provisioning_profile_url?: string;
+    /** Path to the keychain to use */
+    keychain_path?: string;
+    /** Password for the keychain */
+    keychain_password?: string;
+    /** Enable verbose logging */
+    verbose?: string;
+}
+/**
+ * Installs Apple code signing certificates (.p12) and provisioning profiles
+ * into the macOS keychain for Xcode builds.
+ */
+export declare class CertificateInstallerStepExecutor extends BaseStepExecutor {
+    getValidationRequirements(_inputs: CertificateInstallerInputs, _env: Record<string, string>, _config: CIConfig): ValidationRequirement[];
+    getOutputs(): StepOutput[];
+    execute(inputs: CertificateInstallerInputs, _env: Record<string, string>, _config: CIConfig): Promise<StepDef>;
+}
+//# sourceMappingURL=ios-signing.d.ts.map

package/dist/src/yaml/steps/ios-signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ios-signing.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/ios-signing.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEhF,MAAM,WAAW,0BAA0B;IACzC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,8EAA8E;IAC9E,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gCAAgC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,qBAAa,gCAAiC,SAAQ,gBAAgB;IACpE,yBAAyB,CACvB,OAAO,EAAE,0BAA0B,EACnC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAM1B,UAAU,IAAI,UAAU,EAAE;IAIpB,OAAO,CAAC,MAAM,EAAE,0BAA0B,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAwIrH"}

package/dist/src/yaml/steps/ios-signing.js

@@ -0,0 +1,144 @@
+/**
+ * iOS code signing step: certificate-installer
+ * Installs .p12 certificates and provisioning profiles into the macOS keychain.
+ */
+import { BaseStepExecutor } from './base.js';
+/**
+ * Installs Apple code signing certificates (.p12) and provisioning profiles
+ * into the macOS keychain for Xcode builds.
+ */
+export class CertificateInstallerStepExecutor extends BaseStepExecutor {
+    getValidationRequirements(_inputs, _env, _config) {
+        return [
+            this.requireCommand('security', 'macOS security command is required for keychain operations'),
+        ];
+    }
+    getOutputs() {
+        return [];
+    }
+    async execute(inputs, _env, _config) {
+        const stepName = 'certificate-installer';
+        const certificateUrl = this.getInput(inputs, 'certificate_url', '$CIBUILD_CERTIFICATE_URL');
+        const certificatePassphrase = this.getInput(inputs, 'certificate_passphrase', '$CIBUILD_CERTIFICATE_PASSPHRASE');
+        const provisioningProfileUrl = this.getInput(inputs, 'provisioning_profile_url', '$CIBUILD_PROVISION_URL');
+        const keychainPath = this.getInput(inputs, 'keychain_path', '$HOME/Library/Keychains/login.keychain');
+        const keychainPassword = this.getInput(inputs, 'keychain_password', '$CIBUILD_KEYCHAIN_PASSWORD');
+        const verbose = this.getInput(inputs, 'verbose', 'false') === 'true';
+        const commands = [];
+        commands.push('# certificate-installer — install certs & profiles into keychain');
+        commands.push('echo "🔐 Installing certificates and provisioning profiles..."');
+        commands.push('');
+        // Keychain setup
+        commands.push(`KEYCHAIN_PATH='${this.escapeBash(keychainPath)}'`);
+        commands.push(`KEYCHAIN_PASSWORD='${this.escapeBash(keychainPassword)}'`);
+        commands.push('');
+        // Ensure keychain exists and is unlocked
+        commands.push('# Unlock keychain');
+        commands.push('if [ ! -f "$KEYCHAIN_PATH" ]; then');
+        commands.push('  echo "Keychain not found at $KEYCHAIN_PATH — creating..."');
+        commands.push('  security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"');
+        commands.push('fi');
+        commands.push('security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"');
+        commands.push('');
+        // Set keychain settings — keep it unlocked
+        commands.push('# Set keychain settings');
+        commands.push('security set-keychain-settings -lut 7200 "$KEYCHAIN_PATH"');
+        commands.push('');
+        // Add keychain to search list
+        commands.push('# Add keychain to search list');
+        commands.push('EXISTING_KEYCHAINS=$(security list-keychains -d user | tr -d \'"\' | tr \'\\n\' \' \')');
+        commands.push('security list-keychains -d user -s $EXISTING_KEYCHAINS "$KEYCHAIN_PATH"');
+        commands.push('security default-keychain -s "$KEYCHAIN_PATH"');
+        commands.push('');
+        // Install certificates
+        commands.push('# Install certificates');
+        commands.push(`CERT_URLS='${this.escapeBash(certificateUrl)}'`);
+        commands.push(`CERT_PASSPHRASES='${this.escapeBash(certificatePassphrase)}'`);
+        commands.push('');
+        commands.push('if [ -n "$CERT_URLS" ]; then');
+        commands.push('  IFS="|" read -ra URL_ARRAY <<< "$CERT_URLS"');
+        commands.push('  IFS="|" read -ra PASS_ARRAY <<< "$CERT_PASSPHRASES"');
+        commands.push('  CERT_INDEX=0');
+        commands.push('  for CERT_URL in "${URL_ARRAY[@]}"; do');
+        commands.push('    CERT_URL=$(echo "$CERT_URL" | xargs)');
+        commands.push('    [ -z "$CERT_URL" ] && continue');
+        commands.push('    CERT_PASS="${PASS_ARRAY[$CERT_INDEX]:-}"');
+        commands.push('    CERT_FILE=$(mktemp /tmp/cert_XXXXXX.p12)');
+        commands.push('    ');
+        commands.push('    if [[ "$CERT_URL" == file://* ]]; then');
+        commands.push('      LOCAL_PATH="${CERT_URL#file://}"');
+        commands.push('      cp "$LOCAL_PATH" "$CERT_FILE"');
+        commands.push('    else');
+        if (verbose) {
+            commands.push('      echo "Downloading certificate from: $CERT_URL"');
+        }
+        commands.push('      curl -fsSL "$CERT_URL" -o "$CERT_FILE"');
+        commands.push('    fi');
+        commands.push('    ');
+        commands.push('    echo "Installing certificate $((CERT_INDEX + 1))..."');
+        commands.push('    security import "$CERT_FILE" -k "$KEYCHAIN_PATH" -P "$CERT_PASS" -T /usr/bin/codesign -T /usr/bin/security');
+        commands.push('    rm -f "$CERT_FILE"');
+        commands.push('    CERT_INDEX=$((CERT_INDEX + 1))');
+        commands.push('  done');
+        commands.push('  echo "Installed $CERT_INDEX certificate(s)"');
+        commands.push('fi');
+        commands.push('');
+        // Allow codesign to access the keychain without prompt
+        commands.push('# Allow codesign access without prompt');
+        commands.push('security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH" 2>/dev/null || true');
+        commands.push('');
+        // Install provisioning profiles
+        commands.push('# Install provisioning profiles');
+        commands.push(`PROFILE_URLS='${this.escapeBash(provisioningProfileUrl)}'`);
+        commands.push('PROFILES_DIR="$HOME/Library/MobileDevice/Provisioning Profiles"');
+        commands.push('mkdir -p "$PROFILES_DIR"');
+        commands.push('');
+        commands.push('if [ -n "$PROFILE_URLS" ]; then');
+        commands.push('  IFS="|" read -ra PROFILE_URL_ARRAY <<< "$PROFILE_URLS"');
+        commands.push('  PROFILE_INDEX=0');
+        commands.push('  for PROFILE_URL in "${PROFILE_URL_ARRAY[@]}"; do');
+        commands.push('    PROFILE_URL=$(echo "$PROFILE_URL" | xargs)');
+        commands.push('    [ -z "$PROFILE_URL" ] && continue');
+        commands.push('    PROFILE_FILE=$(mktemp /tmp/profile_XXXXXX.mobileprovision)');
+        commands.push('    ');
+        commands.push('    if [[ "$PROFILE_URL" == file://* ]]; then');
+        commands.push('      LOCAL_PATH="${PROFILE_URL#file://}"');
+        commands.push('      cp "$LOCAL_PATH" "$PROFILE_FILE"');
+        commands.push('    else');
+        if (verbose) {
+            commands.push('      echo "Downloading provisioning profile from: $PROFILE_URL"');
+        }
+        commands.push('      curl -fsSL "$PROFILE_URL" -o "$PROFILE_FILE"');
+        commands.push('    fi');
+        commands.push('    ');
+        commands.push('    # Extract UUID from profile and install');
+        commands.push('    PROFILE_UUID=$(/usr/libexec/PlistBuddy -c "Print :UUID" /dev/stdin <<< "$(security cms -D -i "$PROFILE_FILE" 2>/dev/null)" 2>/dev/null || true)');
+        commands.push('    if [ -n "$PROFILE_UUID" ]; then');
+        commands.push('      cp "$PROFILE_FILE" "$PROFILES_DIR/$PROFILE_UUID.mobileprovision"');
+        commands.push('      echo "Installed profile $((PROFILE_INDEX + 1)): $PROFILE_UUID"');
+        commands.push('    else');
+        commands.push('      echo "⚠️  Warning: Could not extract UUID from profile $((PROFILE_INDEX + 1))"');
+        commands.push('      # Install with original name as fallback');
+        commands.push('      cp "$PROFILE_FILE" "$PROFILES_DIR/"');
+        commands.push('    fi');
+        commands.push('    rm -f "$PROFILE_FILE"');
+        commands.push('    PROFILE_INDEX=$((PROFILE_INDEX + 1))');
+        commands.push('  done');
+        commands.push('  echo "Installed $PROFILE_INDEX provisioning profile(s)"');
+        commands.push('fi');
+        commands.push('');
+        // Verify
+        if (verbose) {
+            commands.push('# List installed identities');
+            commands.push('echo "Installed signing identities:"');
+            commands.push('security find-identity -v -p codesigning "$KEYCHAIN_PATH"');
+            commands.push('');
+            commands.push('echo "Installed provisioning profiles:"');
+            commands.push('ls -la "$PROFILES_DIR/"');
+        }
+        commands.push('echo "✅ Certificate and profile installation complete"');
+        const script = this.createBashScriptFromCommands(commands, stepName);
+        return this.createScriptStep(script, stepName);
+    }
+}
+//# sourceMappingURL=ios-signing.js.map

package/dist/src/yaml/steps/ios-version.d.ts

@@ -0,0 +1,47 @@
+/**
+ * iOS version management steps: set-xcode-build-number, set-ios-version
+ */
+import { BaseStepExecutor } from './base.js';
+import type { StepDef, CIConfig } from '../../types.js';
+import type { ValidationRequirement, StepOutput } from '../validation-types.js';
+export interface SetXcodeBuildNumberInputs {
+    /** Path to .xcodeproj or .xcworkspace */
+    project_path?: string;
+    /** Xcode scheme name */
+    scheme?: string;
+    /** Target name (optional — uses scheme's default target if empty) */
+    target?: string;
+    /** Build number value (CFBundleVersion / CURRENT_PROJECT_VERSION) */
+    build_version?: string;
+    /** Offset added to build_version */
+    build_version_offset?: string;
+    /** Marketing version (CFBundleShortVersionString / MARKETING_VERSION) */
+    build_short_version_string?: string;
+}
+/**
+ * Updates the Xcode project's build number (CFBundleVersion) and optionally
+ * the marketing version (CFBundleShortVersionString) using agvtool and PlistBuddy.
+ */
+export declare class SetXcodeBuildNumberStepExecutor extends BaseStepExecutor {
+    getValidationRequirements(inputs: SetXcodeBuildNumberInputs, _env: Record<string, string>, _config: CIConfig): ValidationRequirement[];
+    getOutputs(): StepOutput[];
+    execute(inputs: SetXcodeBuildNumberInputs, _env: Record<string, string>, _config: CIConfig): Promise<StepDef>;
+}
+export interface SetIosVersionInputs {
+    /** Path to Info.plist file */
+    info_plist_file?: string;
+    /** CFBundleVersion (build number) */
+    bundle_version?: string;
+    /** CFBundleShortVersionString (marketing version) */
+    bundle_version_short?: string;
+}
+/**
+ * Directly edits an Info.plist file to set CFBundleVersion and/or
+ * CFBundleShortVersionString using PlistBuddy.
+ */
+export declare class SetIosVersionStepExecutor extends BaseStepExecutor {
+    getValidationRequirements(inputs: SetIosVersionInputs, _env: Record<string, string>, _config: CIConfig): ValidationRequirement[];
+    getOutputs(): StepOutput[];
+    execute(inputs: SetIosVersionInputs, _env: Record<string, string>, _config: CIConfig): Promise<StepDef>;
+}
+//# sourceMappingURL=ios-version.d.ts.map

package/dist/src/yaml/steps/ios-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ios-version.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/ios-version.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAMhF,MAAM,WAAW,yBAAyB;IACxC,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wBAAwB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yEAAyE;IACzE,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;GAGG;AACH,qBAAa,+BAAgC,SAAQ,gBAAgB;IACnE,yBAAyB,CACvB,MAAM,EAAE,yBAAyB,EACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAM1B,UAAU,IAAI,UAAU,EAAE;IAMpB,OAAO,CAAC,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAqFpH;AAMD,MAAM,WAAW,mBAAmB;IAClC,8BAA8B;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qCAAqC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,gBAAgB;IAC7D,yBAAyB,CACvB,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAM1B,UAAU,IAAI,UAAU,EAAE;IAOpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CA0C9G"}