@invarn/cibuild 1.3.16 → 1.3.18

package/dist/src/yaml/steps/bitrise-ssh.test.js

@@ -0,0 +1,205 @@
+/**
+ * Unit tests for Bitrise activate-ssh-key step
+ */
+import { describe, test, expect } from '@jest/globals';
+import { BitriseSSHStepExecutor } from './bitrise-ssh.js';
+describe('BitriseSSHStepExecutor', () => {
+    const mockConfig = {
+        artifactsDir: '/ci/artifacts',
+        interpreters: {
+            python: '/usr/bin/python3',
+            ruby: '/usr/bin/ruby',
+            node: '/usr/bin/node',
+            bash: '/bin/bash',
+        },
+        maxConcurrentJobs: 4,
+        paths: {
+            buildsDir: '/ci/builds',
+            cacheDir: '/ci/cache',
+            derivedDataDir: '/ci/derived_data',
+        },
+    };
+    describe('Basic functionality', () => {
+        test('should create SSH activation script with default values', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: '-----BEGIN RSA PRIVATE KEY-----\ntest-key-content\n-----END RSA PRIVATE KEY-----',
+            };
+            const result = await executor.execute({}, env, mockConfig);
+            expect(result.kind).toBe('script');
+            expect(result.name).toBe('activate-ssh-key');
+            expect(result.script).toContain('mkdir -p ~/.ssh');
+            expect(result.script).toContain('chmod 700 ~/.ssh');
+            expect(result.script).toContain('echo "${SSH_RSA_PRIVATE_KEY}" | tr \'\\r\' \'\\n\' > ~/.ssh/default.pem');
+            expect(result.script).toContain('chmod 600 ~/.ssh/default.pem');
+        });
+        test('should include SSH agent commands', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: '-----BEGIN RSA PRIVATE KEY-----\ntest-key\n-----END RSA PRIVATE KEY-----',
+            };
+            const result = await executor.execute({}, env, mockConfig);
+            expect(result.script).toContain('eval "$(ssh-agent -s)"');
+            expect(result.script).toContain('ssh-add ~/.ssh/default.pem');
+        });
+        test('should configure SSH client settings', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'test-key',
+            };
+            const result = await executor.execute({}, env, mockConfig);
+            expect(result.script).toContain('cat >> ~/.ssh/config');
+            expect(result.script).toContain('StrictHostKeyChecking no');
+            expect(result.script).toContain('UserKnownHostsFile=/dev/null');
+            expect(result.script).toContain('chmod 600 ~/.ssh/config');
+        });
+    });
+    describe('Custom SSH key path', () => {
+        test('should use custom ssh_key_save_path when provided', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'test-key',
+            };
+            const inputs = {
+                ssh_key_save_path: '~/.ssh/custom_key',
+            };
+            const result = await executor.execute(inputs, env, mockConfig);
+            expect(result.script).toContain('echo "${SSH_RSA_PRIVATE_KEY}" | tr \'\\r\' \'\\n\' > ~/.ssh/custom_key');
+            expect(result.script).toContain('chmod 600 ~/.ssh/custom_key');
+            expect(result.script).toContain('ssh-add ~/.ssh/custom_key');
+        });
+    });
+    describe('Remove other identities', () => {
+        test('should remove other SSH identities when is_remove_other_identities is true', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'test-key',
+            };
+            const inputs = {
+                is_remove_other_identities: 'true',
+            };
+            const result = await executor.execute(inputs, env, mockConfig);
+            expect(result.script).toContain('ssh-add -D');
+        });
+        test('should remove other SSH identities when is_remove_other_identities is yes', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'test-key',
+            };
+            const inputs = {
+                is_remove_other_identities: 'yes',
+            };
+            const result = await executor.execute(inputs, env, mockConfig);
+            expect(result.script).toContain('ssh-add -D');
+        });
+        test('should not remove other identities when is_remove_other_identities is false', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'test-key',
+            };
+            const inputs = {
+                is_remove_other_identities: 'false',
+            };
+            const result = await executor.execute(inputs, env, mockConfig);
+            expect(result.script).not.toContain('ssh-add -D');
+        });
+        test('should remove other identities by default', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'test-key',
+            };
+            const result = await executor.execute({}, env, mockConfig);
+            // Default is 'true'
+            expect(result.script).toContain('ssh-add -D');
+        });
+    });
+    describe('Error handling', () => {
+        test('should throw error when SSH_RSA_PRIVATE_KEY is missing', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {}; // No SSH key
+            await expect(executor.execute({}, env, mockConfig)).rejects.toThrow(/Missing environment variable: 'SSH_RSA_PRIVATE_KEY'/);
+        });
+        test('should include helpful error message for missing SSH key', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {};
+            await expect(executor.execute({}, env, mockConfig)).rejects.toThrow(/SSH private key used for Git authentication/);
+        });
+        test('should suggest how to configure SSH key in error message', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {};
+            await expect(executor.execute({}, env, mockConfig)).rejects.toThrow(/Store private key in CI secrets/);
+        });
+    });
+    describe('Script structure', () => {
+        test('should include bash error handling directives', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'test-key',
+            };
+            const result = await executor.execute({}, env, mockConfig);
+            expect(result.script).toContain('#!/bin/bash');
+            expect(result.script).toContain('set -e');
+            expect(result.script).toContain('set -o pipefail');
+        });
+        test('should include informative messages', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'test-key',
+            };
+            const result = await executor.execute({}, env, mockConfig);
+            expect(result.script).toContain('Bitrise activate-ssh-key step → CI Build SSH activation');
+            expect(result.script).toContain('Setting up SSH key for Git operations');
+            expect(result.script).toContain('SSH key activated successfully');
+        });
+    });
+    describe('Integration scenarios', () => {
+        test('should handle complex SSH key with newlines', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: `-----BEGIN RSA PRIVATE KEY-----
+MIIEpAIBAAKCAQEA1234567890abcdef
+ghijklmnopqrstuvwxyz0123456789
+-----END RSA PRIVATE KEY-----`,
+            };
+            const result = await executor.execute({}, env, mockConfig);
+            expect(result.script).toContain('echo "${SSH_RSA_PRIVATE_KEY}"');
+            expect(result.kind).toBe('script');
+        });
+        test('should work with custom path and remove identities disabled', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'custom-key-content',
+            };
+            const inputs = {
+                ssh_key_save_path: '~/.ssh/my_ssh_key',
+                is_remove_other_identities: 'false',
+            };
+            const result = await executor.execute(inputs, env, mockConfig);
+            expect(result.script).toContain('echo "${SSH_RSA_PRIVATE_KEY}" | tr \'\\r\' \'\\n\' > ~/.ssh/my_ssh_key');
+            expect(result.script).toContain('chmod 600 ~/.ssh/my_ssh_key');
+            expect(result.script).toContain('ssh-add ~/.ssh/my_ssh_key');
+            expect(result.script).not.toContain('ssh-add -D');
+        });
+    });
+    describe('Bitrise compatibility', () => {
+        test('should support Bitrise environment variable naming', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'bitrise-compatible-key',
+            };
+            const result = await executor.execute({}, env, mockConfig);
+            // Should reference the exact environment variable name
+            expect(result.script).toContain('${SSH_RSA_PRIVATE_KEY}');
+        });
+        test('should map to CI Build SSH activation pattern', async () => {
+            const executor = new BitriseSSHStepExecutor();
+            const env = {
+                SSH_RSA_PRIVATE_KEY: 'test-key',
+            };
+            const result = await executor.execute({}, env, mockConfig);
+            // Should include CI Build branding
+            expect(result.script).toContain('CI Build SSH activation');
+        });
+    });
+});
+//# sourceMappingURL=bitrise-ssh.test.js.map

package/dist/src/yaml/steps/cache.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Cache step implementations (cache-pull and cache-push)
+ */
+import { BaseStepExecutor } from './base.js';
+import type { StepDef, CIConfig } from '../../types.js';
+/**
+ * Built-in cache presets per technology.
+ * When `technology` is set on a cache step, the lockfile is checksummed
+ * at runtime to produce the cache key, and the listed paths are cached/restored.
+ */
+export interface CachePreset {
+    lockfile: string;
+    keyPrefix: string;
+    paths: string[];
+}
+export declare const CACHE_PRESETS: Record<string, CachePreset>;
+/**
+ * Inputs for cache-pull step
+ */
+export interface CachePullInputs {
+    technology?: string;
+    cache_paths?: string[];
+    cache_key?: string;
+    is_debug_mode?: boolean;
+}
+/**
+ * Inputs for cache-push step
+ */
+export interface CachePushInputs {
+    technology?: string;
+    cache_paths?: string[];
+    cache_key?: string;
+    is_debug_mode?: boolean;
+    ignore_check_on_paths?: boolean;
+}
+/**
+ * Cache pull step executor
+ * Restores cached files from cache directory
+ */
+export declare class CachePullStepExecutor extends BaseStepExecutor {
+    execute(inputs: CachePullInputs, env: Record<string, string>, config: CIConfig): Promise<StepDef>;
+    private executeWithPreset;
+}
+/**
+ * Cache push step executor
+ * Saves files to cache directory
+ */
+export declare class CachePushStepExecutor extends BaseStepExecutor {
+    execute(inputs: CachePushInputs, env: Record<string, string>, config: CIConfig): Promise<StepDef>;
+    private executeWithPreset;
+}
+//# sourceMappingURL=cache.d.ts.map

package/dist/src/yaml/steps/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/cache.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAExD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CASrD,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,gBAAgB;IACnD,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;YAoGzF,iBAAiB;CAoEhC;AAED;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,gBAAgB;IACnD,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;YAwJzF,iBAAiB;CA0EhC"}

package/dist/src/yaml/steps/cache.js

@@ -0,0 +1,352 @@
+/**
+ * Cache step implementations (cache-pull and cache-push)
+ */
+import { BaseStepExecutor } from './base.js';
+export const CACHE_PRESETS = {
+    cocoapods: { lockfile: 'Podfile.lock', keyPrefix: 'pods', paths: ['Pods'] },
+    carthage: { lockfile: 'Cartfile.resolved', keyPrefix: 'carthage', paths: ['Carthage'] },
+    spm: { lockfile: 'Package.resolved', keyPrefix: 'spm', paths: ['~/Library/Developer/Xcode/DerivedData/*/SourcePackages'] },
+    gradle: { lockfile: 'gradle/wrapper/gradle-wrapper.properties', keyPrefix: 'gradle', paths: ['~/.gradle/caches', '~/.gradle/wrapper/dists'] },
+    kmm: { lockfile: 'gradle/wrapper/gradle-wrapper.properties', keyPrefix: 'kmm', paths: ['~/.gradle/caches', '~/.gradle/wrapper/dists', '~/.konan'] },
+    npm: { lockfile: 'package-lock.json', keyPrefix: 'npm', paths: ['node_modules'] },
+    yarn: { lockfile: 'yarn.lock', keyPrefix: 'yarn', paths: ['node_modules'] },
+    dart: { lockfile: 'pubspec.lock', keyPrefix: 'dart', paths: ['.dart_tool', '.pub-cache'] },
+};
+/**
+ * Cache pull step executor
+ * Restores cached files from cache directory
+ */
+export class CachePullStepExecutor extends BaseStepExecutor {
+    async execute(inputs, env, config) {
+        const stepName = 'cache-pull';
+        if (config.local) {
+            const script = this.createBashScriptFromCommands(['echo "⏭️  Cache pull skipped (local mode)"'], stepName);
+            return this.createScriptStep(script, stepName);
+        }
+        // Check for technology preset
+        const technology = this.getInput(inputs, 'technology', '').trim();
+        if (technology) {
+            return this.executeWithPreset(technology, inputs, config);
+        }
+        // Get cache key - optional (skip if not provided)
+        const cacheKey = this.getInput(inputs, 'cache_key', '');
+        // Skip if no cache key provided
+        if (!cacheKey || cacheKey.trim() === '') {
+            const commands = [];
+            commands.push('# Cache Pull - Skipped');
+            commands.push('echo "⏭️  Cache pull skipped: no cache_key configured"');
+            const script = this.createBashScriptFromCommands(commands, stepName);
+            return this.createScriptStep(script, stepName);
+        }
+        // Get cache paths - defaults to empty array (can be string or array)
+        const cachePathsInput = this.getInput(inputs, 'cache_paths', []);
+        // Normalize to array (handle single string input)
+        const cachePaths = Array.isArray(cachePathsInput)
+            ? cachePathsInput
+            : (typeof cachePathsInput === 'string' && cachePathsInput.trim() !== '')
+                ? [cachePathsInput]
+                : [];
+        // Get debug mode flag
+        const isDebugMode = this.getInput(inputs, 'is_debug_mode', false);
+        const commands = [];
+        commands.push('# Cache Pull');
+        commands.push(`echo "Cache key: ${this.escapeBash(cacheKey)}"`);
+        // Create cache directory if it doesn't exist
+        commands.push('');
+        commands.push('# Ensure cache directory exists');
+        commands.push(`CACHE_DIR="${this.escapeBash(config.paths.cacheDir)}"`);
+        commands.push('mkdir -p "$CACHE_DIR"');
+        // Generate cache file name based on cache key
+        commands.push('');
+        commands.push('# Generate cache file path');
+        commands.push(`CACHE_FILE="$CACHE_DIR/${this.escapeBash(cacheKey)}.tar.zst"`);
+        if (isDebugMode) {
+            commands.push('echo "Debug mode enabled"');
+            commands.push('echo "Cache file: $CACHE_FILE"');
+        }
+        // Check if cache file exists
+        commands.push('');
+        commands.push('# Check if cache exists');
+        commands.push('if [ -f "$CACHE_FILE" ]; then');
+        commands.push('  echo "Cache found, extracting..."');
+        if (isDebugMode) {
+            commands.push('  echo "Cache file size: $(du -h "$CACHE_FILE" | cut -f1)"');
+        }
+        // Extract cache
+        commands.push('  zstd -dc "$CACHE_FILE" | tar -xf - -C /');
+        commands.push('  echo "Cache restored successfully"');
+        // List restored paths if debug mode
+        if (isDebugMode && Array.isArray(cachePaths) && cachePaths.length > 0) {
+            commands.push('  echo "Restored paths:"');
+            for (const path of cachePaths) {
+                commands.push(`  EXPANDED_PATH="${this.escapeBash(path)}"`);
+                commands.push('  EXPANDED_PATH="${EXPANDED_PATH/#~/$HOME}"');
+                commands.push('  if [ -e "$EXPANDED_PATH" ]; then');
+                commands.push('    echo "  ✓ $EXPANDED_PATH"');
+                commands.push('  else');
+                commands.push('    echo "  ✗ $EXPANDED_PATH (not found)"');
+                commands.push('  fi');
+            }
+        }
+        commands.push('else');
+        commands.push(`  echo "No cache found for key: ${this.escapeBash(cacheKey)}"`);
+        commands.push('  echo "This is normal for the first build or after cache expiration"');
+        commands.push('fi');
+        const script = this.createBashScriptFromCommands(commands, stepName);
+        return this.createScriptStep(script, stepName);
+    }
+    async executeWithPreset(technology, inputs, config) {
+        const stepName = 'cache-pull';
+        const preset = CACHE_PRESETS[technology];
+        if (!preset) {
+            const supported = Object.keys(CACHE_PRESETS).join(', ');
+            throw new Error(`Unknown cache technology '${technology}'. Supported: ${supported}`);
+        }
+        const isDebugMode = this.getInput(inputs, 'is_debug_mode', false);
+        const commands = [];
+        commands.push(`# Cache Pull (${technology})`);
+        commands.push(`echo "Restoring ${technology} cache..."`);
+        commands.push('');
+        // Compute cache key from lockfile checksum at runtime
+        commands.push(`CACHE_DIR="${this.escapeBash(config.paths.cacheDir)}"`);
+        commands.push('mkdir -p "$CACHE_DIR"');
+        commands.push('');
+        commands.push(`LOCKFILE="${this.escapeBash(preset.lockfile)}"`);
+        commands.push('if [ -f "$LOCKFILE" ]; then');
+        commands.push(`  CHECKSUM=$(shasum -a 256 "$LOCKFILE" | cut -d ' ' -f1 | head -c 16)`);
+        commands.push(`  CACHE_KEY="${this.escapeBash(preset.keyPrefix)}-\${CHECKSUM}"`);
+        commands.push('else');
+        commands.push(`  echo "Warning: $LOCKFILE not found, using fallback cache key"`);
+        commands.push(`  CACHE_KEY="${this.escapeBash(preset.keyPrefix)}-no-lockfile"`);
+        commands.push('fi');
+        commands.push('');
+        if (isDebugMode) {
+            commands.push('echo "Lockfile: $LOCKFILE"');
+            commands.push('echo "Cache key: $CACHE_KEY"');
+        }
+        commands.push('CACHE_FILE="$CACHE_DIR/$CACHE_KEY.tar.zst"');
+        commands.push('');
+        commands.push('if [ -f "$CACHE_FILE" ]; then');
+        commands.push('  echo "Cache found, extracting..."');
+        if (isDebugMode) {
+            commands.push('  echo "Cache file size: $(du -h "$CACHE_FILE" | cut -f1)"');
+        }
+        commands.push('  zstd -dc "$CACHE_FILE" | tar -xf - -C /');
+        commands.push('  echo "Cache restored successfully"');
+        if (isDebugMode) {
+            commands.push('  echo "Restored paths:"');
+            for (const p of preset.paths) {
+                commands.push(`  EXPANDED="${this.escapeBash(p)}"`);
+                commands.push('  EXPANDED="${EXPANDED/#~/$HOME}"');
+                commands.push('  if [ -e "$EXPANDED" ]; then');
+                commands.push('    echo "  ✓ $EXPANDED"');
+                commands.push('  else');
+                commands.push('    echo "  ✗ $EXPANDED (not found)"');
+                commands.push('  fi');
+            }
+        }
+        commands.push('else');
+        commands.push('  echo "No cache found for key: $CACHE_KEY"');
+        commands.push('  echo "This is normal for the first build or after cache expiration"');
+        commands.push('fi');
+        const script = this.createBashScriptFromCommands(commands, stepName);
+        return this.createScriptStep(script, stepName);
+    }
+}
+/**
+ * Cache push step executor
+ * Saves files to cache directory
+ */
+export class CachePushStepExecutor extends BaseStepExecutor {
+    async execute(inputs, env, config) {
+        const stepName = 'cache-push';
+        if (config.local) {
+            const script = this.createBashScriptFromCommands(['echo "⏭️  Cache push skipped (local mode)"'], stepName);
+            return this.createScriptStep(script, stepName);
+        }
+        // Check for technology preset
+        const technology = this.getInput(inputs, 'technology', '').trim();
+        if (technology) {
+            return this.executeWithPreset(technology, inputs, config);
+        }
+        // Get cache key - optional (skip if not provided)
+        const cacheKey = this.getInput(inputs, 'cache_key', '');
+        // Skip if no cache key provided
+        if (!cacheKey || cacheKey.trim() === '') {
+            const commands = [];
+            commands.push('# Cache Push - Skipped');
+            commands.push('echo "⏭️  Cache push skipped: no cache_key configured"');
+            const script = this.createBashScriptFromCommands(commands, stepName);
+            return this.createScriptStep(script, stepName);
+        }
+        // Get cache paths - required (can be string or array)
+        const cachePathsInput = this.getInput(inputs, 'cache_paths', []);
+        // Normalize to array (handle single string input)
+        const cachePaths = Array.isArray(cachePathsInput)
+            ? cachePathsInput
+            : (typeof cachePathsInput === 'string' && cachePathsInput.trim() !== '')
+                ? [cachePathsInput]
+                : [];
+        if (cachePaths.length === 0) {
+            throw new Error(`Missing or empty 'cache_paths' for step '${stepName}'`);
+        }
+        // Get debug mode flag
+        const isDebugMode = this.getInput(inputs, 'is_debug_mode', false);
+        // Get ignore check flag
+        const ignoreCheckOnPaths = this.getInput(inputs, 'ignore_check_on_paths', false);
+        const commands = [];
+        commands.push('# Cache Push');
+        commands.push(`echo "Cache key: ${this.escapeBash(cacheKey)}"`);
+        // Create cache directory if it doesn't exist
+        commands.push('');
+        commands.push('# Ensure cache directory exists');
+        commands.push(`CACHE_DIR="${this.escapeBash(config.paths.cacheDir)}"`);
+        commands.push('mkdir -p "$CACHE_DIR"');
+        // Generate cache file name based on cache key
+        commands.push('');
+        commands.push('# Generate cache file path');
+        commands.push(`CACHE_FILE="$CACHE_DIR/${this.escapeBash(cacheKey)}.tar.zst"`);
+        if (isDebugMode) {
+            commands.push('echo "Debug mode enabled"');
+            commands.push('echo "Cache file: $CACHE_FILE"');
+        }
+        // Check which paths exist
+        commands.push('');
+        commands.push('# Check which paths exist');
+        commands.push('PATHS_TO_CACHE=()');
+        for (const path of cachePaths) {
+            // Resolve path identifiers (e.g., "derived_data:pattern" -> "~/Library/.../DerivedData/pattern")
+            let resolvedPath = path;
+            // Check if path uses identifier format (identifier:pattern)
+            if (path.includes(':')) {
+                const [identifier, pattern] = path.split(':', 2);
+                switch (identifier) {
+                    case 'derived_data':
+                        resolvedPath = `${config.paths.derivedDataDir}/${pattern}`;
+                        break;
+                    case 'builds':
+                        resolvedPath = `${config.paths.buildsDir}/${pattern}`;
+                        break;
+                    default:
+                        // Unknown identifier, use as-is
+                        resolvedPath = path;
+                }
+            }
+            // Expand tilde by using parameter expansion
+            commands.push(`EXPANDED_PATH="${this.escapeBash(resolvedPath)}"`);
+            commands.push('EXPANDED_PATH="${EXPANDED_PATH/#~/$HOME}"');
+            commands.push('');
+            commands.push('# Expand glob patterns and check each match');
+            commands.push('FOUND_MATCH=false');
+            commands.push('shopt -s nullglob');
+            commands.push('for path_match in $EXPANDED_PATH; do');
+            commands.push('  if [ -e "$path_match" ]; then');
+            commands.push('    PATHS_TO_CACHE+=("$path_match")');
+            commands.push('    FOUND_MATCH=true');
+            if (isDebugMode) {
+                commands.push('    echo "Found: $path_match"');
+            }
+            commands.push('  fi');
+            commands.push('done');
+            commands.push('shopt -u nullglob');
+            commands.push('');
+            commands.push('if [ "$FOUND_MATCH" = false ]; then');
+            if (isDebugMode) {
+                commands.push(`  echo "Not found: $EXPANDED_PATH"`);
+            }
+            if (!ignoreCheckOnPaths) {
+                commands.push(`  echo "Warning: Path does not exist: $EXPANDED_PATH"`);
+            }
+            commands.push('fi');
+        }
+        // Create cache if we have paths
+        commands.push('');
+        commands.push('# Create cache archive');
+        commands.push('if [ ${#PATHS_TO_CACHE[@]} -gt 0 ]; then');
+        commands.push('  echo "Caching ${#PATHS_TO_CACHE[@]} path(s)..."');
+        if (isDebugMode) {
+            commands.push('  echo "Paths to cache:"');
+            commands.push('  printf "  %s\\n" "${PATHS_TO_CACHE[@]}"');
+        }
+        commands.push('  tar -cf - "${PATHS_TO_CACHE[@]}" 2>/dev/null | zstd -3 > "$CACHE_FILE.tmp" && mv "$CACHE_FILE.tmp" "$CACHE_FILE" || true');
+        commands.push('  if [ -f "$CACHE_FILE" ]; then');
+        commands.push('    echo "Cache created successfully"');
+        if (isDebugMode) {
+            commands.push('    echo "Cache size: $(du -h "$CACHE_FILE" | cut -f1)"');
+        }
+        commands.push('  else');
+        commands.push('    echo "Warning: Failed to create cache file"');
+        commands.push('  fi');
+        commands.push('else');
+        commands.push('  echo "No paths to cache"');
+        commands.push('fi');
+        const script = this.createBashScriptFromCommands(commands, stepName);
+        return this.createScriptStep(script, stepName);
+    }
+    async executeWithPreset(technology, inputs, config) {
+        const stepName = 'cache-push';
+        const preset = CACHE_PRESETS[technology];
+        if (!preset) {
+            const supported = Object.keys(CACHE_PRESETS).join(', ');
+            throw new Error(`Unknown cache technology '${technology}'. Supported: ${supported}`);
+        }
+        const isDebugMode = this.getInput(inputs, 'is_debug_mode', false);
+        const commands = [];
+        commands.push(`# Cache Push (${technology})`);
+        commands.push(`echo "Saving ${technology} cache..."`);
+        commands.push('');
+        // Compute cache key from lockfile checksum at runtime
+        commands.push(`CACHE_DIR="${this.escapeBash(config.paths.cacheDir)}"`);
+        commands.push('mkdir -p "$CACHE_DIR"');
+        commands.push('');
+        commands.push(`LOCKFILE="${this.escapeBash(preset.lockfile)}"`);
+        commands.push('if [ -f "$LOCKFILE" ]; then');
+        commands.push(`  CHECKSUM=$(shasum -a 256 "$LOCKFILE" | cut -d ' ' -f1 | head -c 16)`);
+        commands.push(`  CACHE_KEY="${this.escapeBash(preset.keyPrefix)}-\${CHECKSUM}"`);
+        commands.push('else');
+        commands.push(`  echo "Warning: $LOCKFILE not found, using fallback cache key"`);
+        commands.push(`  CACHE_KEY="${this.escapeBash(preset.keyPrefix)}-no-lockfile"`);
+        commands.push('fi');
+        commands.push('');
+        if (isDebugMode) {
+            commands.push('echo "Lockfile: $LOCKFILE"');
+            commands.push('echo "Cache key: $CACHE_KEY"');
+        }
+        commands.push('CACHE_FILE="$CACHE_DIR/$CACHE_KEY.tar.zst"');
+        commands.push('');
+        // Collect paths to cache
+        commands.push('# Collect paths to cache');
+        commands.push('PATHS_TO_CACHE=()');
+        for (const p of preset.paths) {
+            commands.push(`EXPANDED="${this.escapeBash(p)}"`);
+            commands.push('EXPANDED="${EXPANDED/#~/$HOME}"');
+            commands.push('if [ -e "$EXPANDED" ]; then');
+            commands.push('  PATHS_TO_CACHE+=("$EXPANDED")');
+            if (isDebugMode) {
+                commands.push('  echo "Found: $EXPANDED"');
+            }
+            commands.push('else');
+            commands.push(`  echo "Warning: Path does not exist: $EXPANDED"`);
+            commands.push('fi');
+        }
+        commands.push('');
+        // Create cache archive
+        commands.push('if [ ${#PATHS_TO_CACHE[@]} -gt 0 ]; then');
+        commands.push('  echo "Caching ${#PATHS_TO_CACHE[@]} path(s)..."');
+        commands.push('  tar -cf - "${PATHS_TO_CACHE[@]}" 2>/dev/null | zstd -3 > "$CACHE_FILE.tmp" && mv "$CACHE_FILE.tmp" "$CACHE_FILE" || true');
+        commands.push('  if [ -f "$CACHE_FILE" ]; then');
+        commands.push('    echo "Cache created successfully"');
+        if (isDebugMode) {
+            commands.push('    echo "Cache size: $(du -h "$CACHE_FILE" | cut -f1)"');
+        }
+        commands.push('  else');
+        commands.push('    echo "Warning: Failed to create cache file"');
+        commands.push('  fi');
+        commands.push('else');
+        commands.push('  echo "No paths to cache"');
+        commands.push('fi');
+        const script = this.createBashScriptFromCommands(commands, stepName);
+        return this.createScriptStep(script, stepName);
+    }
+}
+//# sourceMappingURL=cache.js.map

package/dist/src/yaml/steps/fastlane.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Fastlane step: run a fastlane lane
+ */
+import { BaseStepExecutor } from './base.js';
+import type { StepDef, CIConfig } from '../../types.js';
+import type { ValidationRequirement, StepOutput } from '../validation-types.js';
+export interface FastlaneInputs {
+    /** Fastlane lane to run (required) */
+    lane?: string;
+    /** Working directory (parent of fastlane directory) */
+    work_dir?: string;
+    /** Update fastlane gem before run (true/false) */
+    update_fastlane?: string;
+    /** Enable verbose logging (yes/no) */
+    verbose_log?: string;
+    /** Enable collecting cache files (yes/no) */
+    enable_cache?: string;
+}
+/**
+ * Runs a fastlane lane with Gemfile detection and optional gem update.
+ */
+export declare class FastlaneStepExecutor extends BaseStepExecutor {
+    getValidationRequirements(_inputs: FastlaneInputs, _env: Record<string, string>, _config: CIConfig): ValidationRequirement[];
+    getOutputs(): StepOutput[];
+    execute(inputs: FastlaneInputs, _env: Record<string, string>, _config: CIConfig): Promise<StepDef>;
+}
+//# sourceMappingURL=fastlane.d.ts.map

package/dist/src/yaml/steps/fastlane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fastlane.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/fastlane.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEhF,MAAM,WAAW,cAAc;IAC7B,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,gBAAgB;IACxD,yBAAyB,CACvB,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAM1B,UAAU,IAAI,UAAU,EAAE;IAIpB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAuEzG"}