@invarn/cibuild 1.3.15 → 1.3.17

package/dist/src/yaml/types.d.ts

@@ -0,0 +1,68 @@
+/**
+ * TypeScript interfaces for Bitrise-compatible YAML pipeline structure
+ */
+export type Platform = 'macos' | 'linux' | 'windows';
+export type MachineType = 'standard' | 'performance';
+export interface YAMLEnvVar {
+    [key: string]: string;
+}
+export interface YAMLCIBuildMeta {
+    stack?: string;
+    machine_type?: MachineType;
+    machine_type_id?: string;
+    platform?: 'ios' | 'android';
+}
+export interface YAMLMeta {
+    'cibuild.io'?: YAMLCIBuildMeta;
+    'bitrise.io'?: YAMLCIBuildMeta;
+    platform?: Platform;
+}
+export interface YAMLStepInputs {
+    [key: string]: any;
+}
+export interface YAMLStep {
+    [stepNameWithVersion: string]: {
+        title?: string;
+        inputs?: YAMLStepInputs;
+        run_if?: string;
+        is_always_run?: boolean;
+        is_skippable?: boolean;
+    };
+}
+export interface YAMLWorkflow {
+    description?: string;
+    envs?: YAMLEnvVar[];
+    steps: YAMLStep[];
+}
+export interface YAMLApp {
+    envs?: YAMLEnvVar[];
+}
+export interface YAMLTrigger {
+    push_branch?: string;
+    pull_request_source_branch?: string;
+    workflow?: string;
+}
+export interface YAMLPipeline {
+    format_version: string;
+    meta?: YAMLMeta;
+    app?: YAMLApp;
+    workflows: {
+        [name: string]: YAMLWorkflow;
+    };
+    trigger_map?: YAMLTrigger[];
+}
+export interface ParsedStep {
+    name: string;
+    version?: string;
+    title?: string;
+    inputs: YAMLStepInputs;
+    run_if?: string;
+    is_always_run?: boolean;
+    is_skippable?: boolean;
+}
+export interface PlatformInfo {
+    platform: Platform;
+    stack?: string;
+    machineType?: MachineType;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/yaml/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/yaml/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AACrD,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;AAGrD,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CACvB;AAGD,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,YAAY,CAAC,EAAE,eAAe,CAAC;IAC/B,YAAY,CAAC,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAGD,MAAM,WAAW,cAAc;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAGD,MAAM,WAAW,QAAQ;IACvB,CAAC,mBAAmB,EAAE,MAAM,GAAG;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;CACH;AAGD,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AAGD,MAAM,WAAW,OAAO;IACtB,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;CACrB;AAGD,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,SAAS,EAAE;QAAE,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAAA;KAAE,CAAC;IAC5C,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;CAC7B;AAGD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAGD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B"}

package/dist/src/yaml/types.js

@@ -0,0 +1,5 @@
+/**
+ * TypeScript interfaces for Bitrise-compatible YAML pipeline structure
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/yaml/validation-types.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Types for step pre-execution validation
+ *
+ * This module defines types for validating pipeline steps BEFORE execution.
+ * All validation checks are read-only and safe to run on the user's machine.
+ */
+/**
+ * When a validation check should run
+ * - 'pre-execution': Check can run before pipeline starts (commands, env vars)
+ * - 'runtime': Check must wait until step executes (files created by earlier steps)
+ */
+export type ValidationTiming = 'pre-execution' | 'runtime';
+/**
+ * Severity levels for validation issues
+ */
+export type ValidationSeverity = 'error' | 'warning' | 'info';
+/**
+ * Category of validation requirement
+ */
+export type ValidationCategory = 'command' | 'environment' | 'file' | 'directory' | 'input' | 'dependency' | 'platform';
+/**
+ * Result of a single validation check
+ */
+export interface ValidationCheckResult {
+    passed: boolean;
+    message?: string;
+    details?: string;
+}
+/**
+ * A single validation requirement
+ */
+export interface ValidationRequirement {
+    /** Category of requirement */
+    category: ValidationCategory;
+    /** Name of the requirement (e.g., 'xcodebuild', 'JAVA_HOME', 'gradlew') */
+    name: string;
+    /** Human-readable description */
+    description: string;
+    /** When should this be validated */
+    timing: ValidationTiming;
+    /** Is this a hard requirement or a warning? */
+    severity: ValidationSeverity;
+    /**
+     * How to check this requirement (only for 'pre-execution' timing)
+     * This function must be READ-ONLY and not modify any state
+     */
+    check?: () => Promise<ValidationCheckResult>;
+    /** Hint on how to fix if validation fails */
+    hint?: string;
+    /** If this is a dependency, which step provides it? */
+    providedBy?: string;
+}
+/**
+ * A validation issue found during pre-execution checks
+ */
+export interface ValidationIssue {
+    /** Step that has the issue */
+    stepName: string;
+    /** Step index in the workflow */
+    stepIndex: number;
+    /** The requirement that failed */
+    requirement: ValidationRequirement;
+    /** Result of the check */
+    result: ValidationCheckResult;
+}
+/**
+ * Complete validation result for a workflow
+ */
+export interface WorkflowValidationResult {
+    /** Did all validations pass? */
+    valid: boolean;
+    /** All issues found (empty if valid) */
+    issues: ValidationIssue[];
+    /** Issues grouped by step */
+    issuesByStep: Map<string, ValidationIssue[]>;
+    /** Issues grouped by category */
+    issuesByCategory: Map<ValidationCategory, ValidationIssue[]>;
+    /** Count of errors/warnings/info */
+    counts: {
+        errors: number;
+        warnings: number;
+        info: number;
+    };
+}
+/**
+ * Output that a step provides to subsequent steps
+ */
+export interface StepOutput {
+    /** Name of the output (e.g., 'CIBUILD_SOURCE_DIR') */
+    name: string;
+    /** Type of output */
+    type: 'environment' | 'file' | 'directory';
+    /** Description */
+    description: string;
+}
+//# sourceMappingURL=validation-types.d.ts.map

package/dist/src/yaml/validation-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-types.d.ts","sourceRoot":"","sources":["../../../src/yaml/validation-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,eAAe,GAAG,SAAS,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,SAAS,GACT,aAAa,GACb,MAAM,GACN,WAAW,GACX,OAAO,GACP,YAAY,GACZ,UAAU,CAAC;AAEf;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,8BAA8B;IAC9B,QAAQ,EAAE,kBAAkB,CAAC;IAE7B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IAEpB,oCAAoC;IACpC,MAAM,EAAE,gBAAgB,CAAC;IAEzB,+CAA+C;IAC/C,QAAQ,EAAE,kBAAkB,CAAC;IAE7B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAE7C,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IAEjB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAElB,kCAAkC;IAClC,WAAW,EAAE,qBAAqB,CAAC;IAEnC,0BAA0B;IAC1B,MAAM,EAAE,qBAAqB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,gCAAgC;IAChC,KAAK,EAAE,OAAO,CAAC;IAEf,wCAAwC;IACxC,MAAM,EAAE,eAAe,EAAE,CAAC;IAE1B,6BAA6B;IAC7B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7C,iCAAiC;IACjC,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,oCAAoC;IACpC,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IAEb,qBAAqB;IACrB,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,WAAW,CAAC;IAE3C,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/src/yaml/validation-types.js

@@ -0,0 +1,8 @@
+/**
+ * Types for step pre-execution validation
+ *
+ * This module defines types for validating pipeline steps BEFORE execution.
+ * All validation checks are read-only and safe to run on the user's machine.
+ */
+export {};
+//# sourceMappingURL=validation-types.js.map

package/dist/src/yaml/yaml-updater.d.ts

@@ -0,0 +1,24 @@
+/**
+ * YAML file updater for adding secret references
+ * Automatically updates YAML files with secret references after user input
+ */
+/**
+ * YAML updater for adding environment variable secret references
+ */
+export declare class YAMLUpdater {
+    private yamlFilePath;
+    constructor(yamlFilePath: string);
+    /**
+     * Add a secret reference to the YAML file's app.envs section
+     * @param varName Environment variable name
+     * @param secretId Secret ID from secrets manager
+     * @returns True if updated successfully
+     */
+    addSecretReference(varName: string, secretId: string): boolean;
+    /**
+     * Get all secret references in the YAML file
+     * @returns Map of variable names to secret IDs
+     */
+    getSecretReferences(): Map<string, string>;
+}
+//# sourceMappingURL=yaml-updater.d.ts.map

package/dist/src/yaml/yaml-updater.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml-updater.d.ts","sourceRoot":"","sources":["../../../src/yaml/yaml-updater.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,YAAY,CAAS;gBAEjB,YAAY,EAAE,MAAM;IAIhC;;;;;OAKG;IACH,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAoE9D;;;OAGG;IACH,mBAAmB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;CAiD3C"}

package/dist/src/yaml/yaml-updater.js

@@ -0,0 +1,128 @@
+/**
+ * YAML file updater for adding secret references
+ * Automatically updates YAML files with secret references after user input
+ */
+import * as fs from 'fs';
+import * as yaml from 'js-yaml';
+/**
+ * YAML updater for adding environment variable secret references
+ */
+export class YAMLUpdater {
+    yamlFilePath;
+    constructor(yamlFilePath) {
+        this.yamlFilePath = yamlFilePath;
+    }
+    /**
+     * Add a secret reference to the YAML file's app.envs section
+     * @param varName Environment variable name
+     * @param secretId Secret ID from secrets manager
+     * @returns True if updated successfully
+     */
+    addSecretReference(varName, secretId) {
+        try {
+            // Read the YAML file
+            const content = fs.readFileSync(this.yamlFilePath, 'utf-8');
+            const doc = yaml.load(content);
+            // Get or create the app.envs section
+            if (!doc.app) {
+                doc.app = { envs: [] };
+            }
+            if (!doc.app.envs) {
+                doc.app.envs = [];
+            }
+            // Check if this variable already exists in envs
+            let variableExists = false;
+            if (Array.isArray(doc.app.envs)) {
+                for (let i = 0; i < doc.app.envs.length; i++) {
+                    const item = doc.app.envs[i];
+                    if (typeof item === 'object' && item !== null) {
+                        const keys = Object.keys(item);
+                        if (keys.includes(varName)) {
+                            // Update existing variable with secret reference
+                            doc.app.envs[i] = { [varName]: `$SECRET{${secretId}}` };
+                            variableExists = true;
+                            break;
+                        }
+                    }
+                }
+            }
+            // If variable doesn't exist, add it
+            if (!variableExists) {
+                doc.app.envs.push({ [varName]: `$SECRET{${secretId}}` });
+            }
+            // Add a comment at the beginning of the file if not present
+            let updatedContent = yaml.dump(doc, {
+                indent: 2,
+                lineWidth: -1, // Don't wrap lines
+                noRefs: true,
+            });
+            // Add helpful comment about secret references if not present
+            if (!content.includes('Secret references use the format')) {
+                const comment = `# Secret references use the format $SECRET{secret_id}
+# Values are stored in .cibuild-secrets.json (gitignored)
+
+`;
+                // Insert comment before the YAML content
+                updatedContent = comment + updatedContent;
+            }
+            // Write the updated YAML back to file
+            fs.writeFileSync(this.yamlFilePath, updatedContent, 'utf-8');
+            console.log(`\n✅ Updated ${this.yamlFilePath} with secret reference for ${varName}`);
+            console.log(`   Reference: $SECRET{${secretId}}`);
+            return true;
+        }
+        catch (error) {
+            console.error(`❌ Error updating YAML file: ${error instanceof Error ? error.message : String(error)}`);
+            return false;
+        }
+    }
+    /**
+     * Get all secret references in the YAML file
+     * @returns Map of variable names to secret IDs
+     */
+    getSecretReferences() {
+        const references = new Map();
+        try {
+            const content = fs.readFileSync(this.yamlFilePath, 'utf-8');
+            const doc = yaml.load(content);
+            // Look for secret references in app.envs
+            if (doc.app?.envs && Array.isArray(doc.app.envs)) {
+                for (const item of doc.app.envs) {
+                    if (typeof item === 'object' && item !== null) {
+                        for (const [key, value] of Object.entries(item)) {
+                            if (typeof value === 'string' && value.startsWith('$SECRET{') && value.endsWith('}')) {
+                                const secretId = value.slice(8, -1); // Extract ID from $SECRET{...}
+                                references.set(key, secretId);
+                            }
+                        }
+                    }
+                }
+            }
+            // Also look in workflow-specific envs
+            if (doc.workflows && typeof doc.workflows === 'object') {
+                for (const workflow of Object.values(doc.workflows)) {
+                    if (typeof workflow === 'object' && workflow !== null && 'envs' in workflow) {
+                        const workflowEnvs = workflow.envs;
+                        if (Array.isArray(workflowEnvs)) {
+                            for (const item of workflowEnvs) {
+                                if (typeof item === 'object' && item !== null) {
+                                    for (const [key, value] of Object.entries(item)) {
+                                        if (typeof value === 'string' && value.startsWith('$SECRET{') && value.endsWith('}')) {
+                                            const secretId = value.slice(8, -1);
+                                            references.set(key, secretId);
+                                        }
+                                    }
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+        }
+        catch (error) {
+            console.warn(`Warning: Could not read secret references from YAML: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        return references;
+    }
+}
+//# sourceMappingURL=yaml-updater.js.map

package/package.json

@@ -1,21 +1,31 @@
 {
   "name": "@invarn/cibuild",
-  "version": "1.3.15",
+  "version": "1.3.17",
   "description": "CI Build CLI — local pipeline orchestration and validation",
   "type": "module",
   "main": "dist/cli.cjs",
+  "exports": {
+    ".": "./dist/cli.cjs",
+    "./lib": {
+      "import": "./dist/src/lib.js",
+      "types": "./dist/src/lib.d.ts"
+    }
+  },
   "bin": {
     "ci": "dist/cli.cjs",
     "cibuild": "dist/cli.cjs"
   },
   "files": [
-    "dist/cli.cjs"
+    "dist/cli.cjs",
+    "dist/src/**/*.js",
+    "dist/src/**/*.d.ts",
+    "dist/src/**/*.d.ts.map"
   ],
   "scripts": {
     "build": "./build.sh",
     "build:npm": "node bundle.mjs",
     "release": "node release.mjs",
-    "prepublishOnly": "node bundle.mjs",
+    "prepublishOnly": "./build.sh && node bundle.mjs",
     "dev": "tsc --watch",
     "clean": "rm -rf dist output artifacts",
     "run": "./run.sh",
@@ -37,6 +47,9 @@
     "url": "https://github.com/invarnhq/cibuild"
   },
   "homepage": "https://github.com/invarnhq/cibuild",
+  "dependencies": {
+    "js-yaml": "^4.1.0"
+  },
   "devDependencies": {
     "@types/jest": "^29.5.14",
     "@types/js-yaml": "^4.0.9",
@@ -46,7 +59,6 @@
     "esbuild": "^0.27.3",
     "javascript-obfuscator": "^5.3.0",
     "jest": "^29.7.0",
-    "js-yaml": "^4.1.0",
     "prompts": "^2.4.2",
     "ts-jest": "^29.4.6",
     "typescript": "^5.7.2"