@invarn/cibuild 2.3.8 → 2.4.1

package/dist/src/yaml/steps/ui-fidelity-preview-android.test.js

@@ -36,10 +36,11 @@ const FAKE_GRADLEW = [
 // Fake `swift`: only the script-interpreter branch the shared trim stage uses
 // (`swift <Trim.swift> <in> <out> <aligned> <ref>`). Writes trimmed + aligned
 // PNGs and emits a fixed TRIMDIMS line.
-const FAKE_SWIFT = [
+// Fake `ci` covering the shared trim stage's `ci fidelity-trim` invocation.
+const FAKE_CI = [
     '#!/bin/bash',
     'case "$1" in',
-    '  *.swift)',
+    '  fidelity-trim)',
     '    in_png="$2"; out_png="$3"; aligned_png="$4"',
     "    printf '\\x89PNG\\r\\n\\x1a\\n' > \"$out_png\"",
     '    printf \'trimmed:%s\' "$(basename "$in_png")" >> "$out_png"',
@@ -56,7 +57,7 @@ function fakeToolchain() {
     const bin = tempDir('ui-fidelity-android-fakebin-');
     for (const [name, body] of [
         ['java', FAKE_JAVA],
-        ['swift', FAKE_SWIFT],
+        ['ci', FAKE_CI],
     ]) {
         const p = join(bin, name);
         writeFileSync(p, body + '\n');

package/dist/src/yaml/steps/ui-fidelity-preview.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui-fidelity-preview.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/ui-fidelity-preview.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA4BH,+EAA+E;AAC/E,MAAM,WAAW,uBAAuB;IACtC,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChD,iEAAiE;IACjE,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,4DAA4D;IAC5D,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,6DAA6D;IAC7D,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC/C;;;;OAIG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,aAAa,EAAE,QAAQ,CAAC;IACxB,oEAAoE;IACpE,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrD,wDAAwD;IACxD,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACzC,mEAAmE;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,EAAE,EAAE,OAAO,CAAC;CACb;AAED,kEAAkE;AAClE,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChD,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;CACjD;AAuBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,gBAAgB,EACrB,YAAY,EAAE,MAAM,GACnB,6BAA6B,CAgB/B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,wBAAwB,GAChC,uBAAuB,CA8HzB"}
+{"version":3,"file":"ui-fidelity-preview.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/ui-fidelity-preview.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA6BH,+EAA+E;AAC/E,MAAM,WAAW,uBAAuB;IACtC,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChD,iEAAiE;IACjE,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,4DAA4D;IAC5D,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,6DAA6D;IAC7D,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC/C;;;;OAIG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,aAAa,EAAE,QAAQ,CAAC;IACxB,oEAAoE;IACpE,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrD,wDAAwD;IACxD,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACzC,mEAAmE;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,EAAE,EAAE,OAAO,CAAC;CACb;AAED,kEAAkE;AAClE,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChD,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;CACjD;AAuBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,gBAAgB,EACrB,YAAY,EAAE,MAAM,GACnB,6BAA6B,CAgB/B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,wBAAwB,GAChC,uBAAuB,CAqIzB"}

package/dist/src/yaml/steps/ui-fidelity-preview.js

@@ -21,6 +21,7 @@ import { tmpdir } from 'node:os';
 import { basename, join, resolve } from 'node:path';
 import { DEFAULT_RENDER_SIZE, DEFAULT_SCALE, generateRenderScript, parseRenderSize, parseScale, } from './ui-fidelity-render.js';
 import { evaluateAspectRatio, formatAspectRatioWarning, } from './fidelity-aspect-guard.js';
+import { resolveCliJsPath } from './render-post-processor.js';
 function runTar(args, pathPrepend) {
     const env = pathPrepend
         ? { ...process.env, PATH: pathPrepend + ':' + (process.env.PATH ?? '') }
@@ -143,6 +144,14 @@ export function renderUiFidelityPreview(options) {
     if (options.toolchainPath) {
         env.PATH = options.toolchainPath + ':' + (process.env.PATH ?? '');
     }
+    // Hand the script this installation's CLI entrypoint so its trim stage can
+    // spawn `fidelity-trim` without a ci on PATH (library callers like the
+    // Invarn CLI). Never override an explicitly-set entrypoint.
+    if (!env.CIBUILD_CLI_JS) {
+        const cliJs = resolveCliJsPath();
+        if (cliJs !== null)
+            env.CIBUILD_CLI_JS = cliJs;
+    }
     const run = spawnSync('node', ['-e', script], {
         cwd: workDir,
         env,

package/dist/src/yaml/steps/ui-fidelity-preview.test.js

@@ -52,8 +52,16 @@ const FAKE_SWIFT = [
     '    out="${pos[1]}"',
     "    printf '\\x89PNG\\r\\n\\x1a\\n' > \"$out\"; printf 'fake-render' >> \"$out\"",
     '    exit 0 ;;',
-    '  *.swift)',
-    '    out_png="$2"; aligned_png="$3"',
+    '  *) exit 0 ;;',
+    'esac',
+].join('\n');
+const FAKE_XCRUN = ['#!/bin/bash', 'exit 0'].join('\n');
+// Fake `ci` covering the shared trim stage's `ci fidelity-trim` invocation.
+const FAKE_CI = [
+    '#!/bin/bash',
+    'case "$1" in',
+    '  fidelity-trim)',
+    '    out_png="$3"; aligned_png="$4"',
     "    printf '\\x89PNG\\r\\n\\x1a\\n' > \"$out_png\"; printf 'trimmed' >> \"$out_png\"",
     '    if [ -n "$aligned_png" ]; then printf \'\\x89PNG\\r\\n\\x1a\\n\' > "$aligned_png"; printf \'aligned\' >> "$aligned_png"; fi',
     '    echo "TRIMDIMS 320 640 160 320 400 800"',
@@ -61,7 +69,6 @@ const FAKE_SWIFT = [
     '  *) exit 0 ;;',
     'esac',
 ].join('\n');
-const FAKE_XCRUN = ['#!/bin/bash', 'exit 0'].join('\n');
 function fakeToolchain() {
     const bin = tempDir('ui-fidelity-fakebin-');
     const swiftPath = join(bin, 'swift');
@@ -70,6 +77,9 @@ function fakeToolchain() {
     const xcrunPath = join(bin, 'xcrun');
     writeFileSync(xcrunPath, FAKE_XCRUN + '\n');
     chmodSync(xcrunPath, 0o755);
+    const ciPath = join(bin, 'ci');
+    writeFileSync(ciPath, FAKE_CI + '\n');
+    chmodSync(ciPath, 0o755);
     return bin;
 }
 function writeReference() {

package/dist/src/yaml/steps/ui-fidelity-render-android.d.ts

@@ -76,12 +76,16 @@ export interface UiFidelityRenderAndroidInputs {
  */
 export declare const DEFAULT_GRADLE_TASK = "recordRoborazziDebug";
 /** Valid values for the package_source input. */
-export declare const PACKAGE_SOURCES: readonly ["repo", "inputs"];
+export declare const PACKAGE_SOURCES: readonly ["repo", "inputs", "url"];
 export type PackageSource = (typeof PACKAGE_SOURCES)[number];
 /**
  * Default package source: the Gradle project ships as package.tar.gz in the
  * run-inputs directory (the agent-upload path). "repo" instead renders the
  * committed project at package_path, for a triggered (agent-less) run.
+ * "url" (fidelity-linux 03) downloads the same package.tar.gz from a signed
+ * package_url into the run-inputs directory and then proceeds byte-for-byte
+ * like inputs mode — the clone-free delivery for triggered runs, on macOS
+ * and Linux workers alike.
  */
 export declare const DEFAULT_PACKAGE_SOURCE: PackageSource;
 /** Valid values for the reference_source input. */
@@ -107,16 +111,23 @@ export interface AndroidRenderScriptConfig {
     scale: number;
     gradleTask: string;
     /**
-     * Only present (and only ever "repo") when package_source was explicitly set
-     * to "repo". When absent, the project ships as package.tar.gz and is
+     * Only present when package_source was explicitly set to a non-default mode
+     * ("repo" or "url"). When absent, the project ships as package.tar.gz and is
      * extracted/validated exactly as the default, byte-identical script.
      */
     packageSource?: PackageSource;
     /**
      * Repo-relative path to the committed Gradle project. Present (and required)
-     * only with packageSource "repo"; ignored otherwise.
+     * with packageSource "repo" (the checkout dir to render) and "url" (the
+     * prefix committed reference paths are resolved under, inside the extracted
+     * package); ignored otherwise.
      */
     packagePath?: string;
+    /**
+     * Signed download URL for package.tar.gz. Present (and required) only with
+     * packageSource "url"; ignored otherwise.
+     */
+    packageUrl?: string;
     /**
      * Only present (and only ever "repo") when reference_source was explicitly set
      * to "repo". When absent, references are read from `.ci/inputs/<basename>` and
@@ -138,7 +149,7 @@ export declare function generateAndroidRenderScript(config: AndroidRenderScriptC
  * script performs the render at runtime on the macOS runner.
  */
 export declare class UiFidelityRenderAndroidStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(_inputs: UiFidelityRenderAndroidInputs, _env: Record<string, string>, _config: CIConfig): ValidationRequirement[];
+    getValidationRequirements(inputs: UiFidelityRenderAndroidInputs, _env: Record<string, string>, _config: CIConfig): ValidationRequirement[];
     execute(inputs: UiFidelityRenderAndroidInputs, _env: Record<string, string>, _config: CIConfig): Promise<StepDef>;
 }
 //# sourceMappingURL=ui-fidelity-render-android.d.ts.map

package/dist/src/yaml/steps/ui-fidelity-render-android.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui-fidelity-render-android.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/ui-fidelity-render-android.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAMpE,sDAAsD;AACtD,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAE1D,iDAAiD;AACjD,eAAO,MAAM,eAAe,6BAA8B,CAAC;AAC3D,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAAwB,CAAC;AAE9D,mDAAmD;AACnD,eAAO,MAAM,iBAAiB,6BAA8B,CAAC;AAC7D,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,eAA0B,CAAC;AAElE,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD,4DAA4D;AAC5D,eAAO,MAAM,gBAAgB,0BAA0B,CAAC;AAExD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,8EAA8E;AAC9E,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAkiCD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,yBAAyB,GAAG,MAAM,CAqBrF;AAED;;;GAGG;AACH,qBAAa,mCAAoC,SAAQ,gBAAgB;IACvE,yBAAyB,CACvB,OAAO,EAAE,6BAA6B,EACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAepB,OAAO,CACX,MAAM,EAAE,6BAA6B,EACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,OAAO,CAAC,OAAO,CAAC;CA0EpB"}
+{"version":3,"file":"ui-fidelity-render-android.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/ui-fidelity-render-android.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAMpE,sDAAsD;AACtD,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAE1D,iDAAiD;AACjD,eAAO,MAAM,eAAe,oCAAqC,CAAC;AAClE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAAwB,CAAC;AAE9D,mDAAmD;AACnD,eAAO,MAAM,iBAAiB,6BAA8B,CAAC;AAC7D,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,eAA0B,CAAC;AAElE,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD,4DAA4D;AAC5D,eAAO,MAAM,gBAAgB,0BAA0B,CAAC;AAExD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,8EAA8E;AAC9E,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAurCD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,yBAAyB,GAAG,MAAM,CA0BrF;AAED;;;GAGG;AACH,qBAAa,mCAAoC,SAAQ,gBAAgB;IACvE,yBAAyB,CACvB,MAAM,EAAE,6BAA6B,EACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAyBpB,OAAO,CACX,MAAM,EAAE,6BAA6B,EACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,OAAO,CAAC,OAAO,CAAC;CAiGpB"}

package/dist/src/yaml/steps/ui-fidelity-render-android.js

@@ -63,11 +63,15 @@ import { RENDER_SCRIPT_SOURCE_DIGEST_STAGE } from '../fidelity-input-digest.js';
  */
 export const DEFAULT_GRADLE_TASK = 'recordRoborazziDebug';
 /** Valid values for the package_source input. */
-export const PACKAGE_SOURCES = ['repo', 'inputs'];
+export const PACKAGE_SOURCES = ['repo', 'inputs', 'url'];
 /**
  * Default package source: the Gradle project ships as package.tar.gz in the
  * run-inputs directory (the agent-upload path). "repo" instead renders the
  * committed project at package_path, for a triggered (agent-less) run.
+ * "url" (fidelity-linux 03) downloads the same package.tar.gz from a signed
+ * package_url into the run-inputs directory and then proceeds byte-for-byte
+ * like inputs mode — the clone-free delivery for triggered runs, on macOS
+ * and Linux workers alike.
  */
 export const DEFAULT_PACKAGE_SOURCE = 'inputs';
 /** Valid values for the reference_source input. */
@@ -500,20 +504,9 @@ function cleanupShippedProject() {
 
 // ---- render stage ----
 //
-// runSwift drives the shared CoreGraphics trim/align helper in script-
-// interpreter mode (the same helper iOS uses); it is available because the
-// render runs on the macOS runner fleet regardless of the JVM render engine.
-
-function runSwift(args) {
-  var result = cp.spawnSync('swift', args, { encoding: 'utf-8', maxBuffer: 16 * 1024 * 1024 });
-  if (result.stdout) process.stdout.write(result.stdout);
-  if (result.stderr) process.stderr.write(result.stderr);
-  if (result.error) {
-    result.status = result.status == null ? 127 : result.status;
-    result.stderr = (result.stderr || '') + String(result.error.message || result.error);
-  }
-  return result;
-}
+// Trim/align runs through the shared trim stage's runTrimHelper (the pure-JS
+// helper inside the ci binary — the same bytes iOS uses), so this step has no
+// platform-toolchain dependency and runs on macOS and Linux workers alike.
 
 // Runs the project's Roborazzi record task once, from the project root, so
 // Gradle resolves the task in whichever module declares it. Prefers the shipped
@@ -692,7 +685,7 @@ function renderScreens(renderable, projectRoot) {
         entry.source_digest = __fidSourceDigest(packageFiles, referenceBytes);
       }
       log('rendered ' + entry.screen + ' -> ' + relative);
-      trimRenderedImage(entry, outputPath, workDir);
+      trimRenderedImage(entry, outputPath);
       // Signal A: the render emits a per-node layout dump into a roborazzi
       // output dir (named "<Screen>.layout.json" or "...render<Screen>.layout.json").
       // Locate it the same way as the PNG and derive structural facts; absent or
@@ -1125,6 +1118,145 @@ function buildAndroidReferenceRepoMain(base) {
         '    }\n' +
         '    var source = path.resolve(refPath);');
 }
+/**
+ * Builds the runtime main for package_source "url" (fidelity-linux 03) by
+ * patching the default (inputs) runtime text. Three departures from the
+ * default, all forced by the same fact — a clone-free worker has no checkout:
+ *
+ * 1. The package is DOWNLOADED (curl, already a runner requirement in this
+ *    mode) to `.ci/inputs/package.tar.gz` and extracted BEFORE the per-screen
+ *    reference stage, because committed references travel inside it. A failed
+ *    download is one structured per-build error, never per-screen noise.
+ * 2. Each screen's reference is the committed repo-relative path resolved
+ *    INSIDE the extracted package: the path must sit under packagePath, and
+ *    the remainder resolves against the extracted project root.
+ * 3. The render stage reuses the already-extracted root (no second extract);
+ *    cleanup mirrors the inputs path. The result document records
+ *    package_source "url".
+ *
+ * ANDROID_RENDER_SCRIPT_MAIN itself is never modified, so omitting
+ * package_source keeps the generated script byte-identical to the default.
+ */
+function buildAndroidPackageUrlMain(base) {
+    let main = base;
+    // The result document advertises the url package source.
+    main = replaceOnce(main, "package_source: 'inputs',", "package_source: 'url',");
+    // Download + extract FIRST — the reference stage below reads from inside
+    // the extracted package.
+    main = replaceOnce(main, '  // 2. Per-screen validation + reference copies. Each screen gets its OWN copy\n' +
+        '  //    named by screen, even when two screens share a reference basename.\n' +
+        '  currentEntries.forEach(function (entry) {', '  // 2a. Download + extract the shipped package FIRST (URL mode): committed\n' +
+        '  //     references live inside it, so the per-screen reference copies below\n' +
+        '  //     need the extracted project root. A failed download or an invalid\n' +
+        '  //     archive is ONE structured per-build error; per-screen reference\n' +
+        '  //     work then stops cleanly (no bogus REFERENCE_MISSING noise).\n' +
+        '  var urlProjectRoot = null;\n' +
+        '  (function () {\n' +
+        '    try {\n' +
+        '      fs.mkdirSync(inputsDir, { recursive: true });\n' +
+        '    } catch (mkdirError) {\n' +
+        '      // statSync below reports the real failure\n' +
+        '    }\n' +
+        '    var dest = path.join(inputsDir, PACKAGE_ARCHIVE_NAME);\n' +
+        "    log('downloading render package');\n" +
+        '    var download = cp.spawnSync(\n' +
+        "      'curl',\n" +
+        "      ['-fsSL', '--retry', '2', '--max-time', '300', '-o', dest, CONFIG.packageUrl],\n" +
+        "      { encoding: 'utf-8', maxBuffer: 16 * 1024 * 1024 }\n" +
+        '    );\n' +
+        '    if (download.error) {\n' +
+        '      download.status = download.status == null ? 127 : download.status;\n' +
+        "      download.stderr = (download.stderr || '') + String(download.error.message || download.error);\n" +
+        '    }\n' +
+        '    if (download.status !== 0) {\n' +
+        '      setBuildError(\n' +
+        "        'ANDROID_PACKAGE_DOWNLOAD_FAILED',\n" +
+        "        'render package download failed (curl exit ' + download.status + '):\\n' + outputTail(download)\n" +
+        '      );\n' +
+        '      return;\n' +
+        '    }\n' +
+        '    urlProjectRoot = prepareShippedProject();\n' +
+        '  })();\n' +
+        '\n' +
+        '  // 2. Per-screen validation + reference copies. Each screen gets its OWN copy\n' +
+        '  //    named by screen, even when two screens share a reference basename.\n' +
+        '  currentEntries.forEach(function (entry) {');
+    // References resolve INSIDE the extracted package: repo-relative path minus
+    // the packagePath prefix, against the extracted project root.
+    main = replaceOnce(main, 'var basename = params.screens[entry.screen];\n' +
+        '    if (\n' +
+        "      typeof basename !== 'string' || basename === '' ||\n" +
+        "      basename === '.' || basename === '..' ||\n" +
+        '      basename !== path.basename(basename)\n' +
+        '    ) {\n' +
+        '      setError(\n' +
+        '        entry,\n' +
+        "        'REFERENCE_MISSING',\n" +
+        "        'reference for ' + entry.screen + ' must be a plain file basename inside ' +\n" +
+        "          inputsDir + ', got: ' + JSON.stringify(basename)\n" +
+        '      );\n' +
+        '      return;\n' +
+        '    }\n' +
+        '    var source = path.join(inputsDir, basename);', 'var refPath = params.screens[entry.screen];\n' +
+        "    if (typeof refPath !== 'string' || refPath === '') {\n" +
+        '      setError(\n' +
+        '        entry,\n' +
+        "        'REFERENCE_MISSING',\n" +
+        "        'reference for ' + entry.screen + ' must be a non-empty repo-relative path, got: ' +\n" +
+        '          JSON.stringify(refPath)\n' +
+        '      );\n' +
+        '      return;\n' +
+        '    }\n' +
+        '    if (urlProjectRoot === null) {\n' +
+        '      // Package unavailable: the per-build error above carries the cause.\n' +
+        '      return;\n' +
+        '    }\n' +
+        "    var packagePrefix = CONFIG.packagePath.replace(/^\\.\\//, '').replace(/\\/+$/, '');\n" +
+        "    var normalizedRef = refPath.replace(/^\\.\\//, '');\n" +
+        "    if (normalizedRef.indexOf(packagePrefix + '/') !== 0) {\n" +
+        '      setError(\n' +
+        '        entry,\n' +
+        "        'REFERENCE_MISSING',\n" +
+        "        'reference for ' + entry.screen + ' must live inside the shipped package (' +\n" +
+        "          packagePrefix + '), got: ' + JSON.stringify(refPath)\n" +
+        '      );\n' +
+        '      return;\n' +
+        '    }\n' +
+        '    var source = path.join(urlProjectRoot, normalizedRef.slice(packagePrefix.length + 1));');
+    // Render from the package extracted in stage 2a — no second extract.
+    main = replaceOnce(main, '  // 3. Extract + validate the shipped Gradle project, then render the\n' +
+        '  //    renderable screens. The project stage runs even when no screen is\n' +
+        '  //    renderable, so packaging mistakes are always reported.\n' +
+        '  var renderable = currentEntries.filter(function (entry) { return entry.error === null; });\n' +
+        '  try {\n' +
+        '    var projectRoot = prepareShippedProject();\n' +
+        '    if (projectRoot !== null) {\n' +
+        '      if (renderable.length > 0) {\n' +
+        '        renderScreens(renderable, projectRoot);\n' +
+        '      } else if (currentEntries.length > 0) {\n' +
+        "        log('no renderable screens, skipping render');\n" +
+        '      }\n' +
+        '    }\n' +
+        '  } finally {\n' +
+        '    cleanupShippedProject();\n' +
+        '  }', '  // 3. Render from the package downloaded + extracted in stage 2a. The\n' +
+        '  //    extraction already reported packaging mistakes as the per-build\n' +
+        '  //    error, so a null root here just skips the render.\n' +
+        '  var renderable = currentEntries.filter(function (entry) { return entry.error === null; });\n' +
+        '  try {\n' +
+        '    if (urlProjectRoot !== null) {\n' +
+        '      if (renderable.length > 0) {\n' +
+        '        renderScreens(renderable, urlProjectRoot);\n' +
+        '      } else if (currentEntries.length > 0) {\n' +
+        "        log('no renderable screens, skipping render');\n" +
+        '      }\n' +
+        '    }\n' +
+        '  } finally {\n' +
+        '    cleanupShippedProject();\n' +
+        '  }');
+    return main;
+}
+const ANDROID_RENDER_SCRIPT_MAIN_URL = buildAndroidPackageUrlMain(ANDROID_RENDER_SCRIPT_MAIN);
 /**
  * Generates the self-contained runtime node script for the step. Pure function
  * of its config — exported so tests can execute the script directly.
@@ -1134,10 +1266,15 @@ function buildAndroidReferenceRepoMain(base) {
  * runtime is used).
  */
 export function generateAndroidRenderScript(config) {
-    let main = config.packageSource === 'repo' ? ANDROID_RENDER_SCRIPT_MAIN_REPO : ANDROID_RENDER_SCRIPT_MAIN;
+    let main = config.packageSource === 'repo'
+        ? ANDROID_RENDER_SCRIPT_MAIN_REPO
+        : config.packageSource === 'url'
+            ? ANDROID_RENDER_SCRIPT_MAIN_URL
+            : ANDROID_RENDER_SCRIPT_MAIN;
     // Reference-from-repo is an independent dimension layered on top of whichever
     // package base applies. Absent → byte-identical reference block (default
-    // basename behaviour).
+    // basename behaviour). URL mode embeds its own reference sourcing and the
+    // executor rejects the combination before this point.
     if (config.referenceSource === 'repo') {
         main = buildAndroidReferenceRepoMain(main);
     }
@@ -1159,11 +1296,19 @@ export function generateAndroidRenderScript(config) {
  * script performs the render at runtime on the macOS runner.
  */
 export class UiFidelityRenderAndroidStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(_inputs, _env, _config) {
-        return [
-            this.requireCommand('swift', 'Swift toolchain used to run the CoreGraphics trim/align helper', 'Install Xcode (or the Swift toolchain) on the runner'),
+    getValidationRequirements(inputs, _env, _config) {
+        // No platform-toolchain requirement: trim/align is pure JS inside the ci
+        // binary (fidelity-linux 06), so the step validates on macOS and Linux
+        // runners alike.
+        const requirements = [
             this.requireCommand('tar', 'Archive tool used to extract the shipped Gradle project', 'Install tar on the runner'),
         ];
+        // URL mode (fidelity-linux 03) downloads the package at runtime; existing
+        // inputs/repo runs gain no new requirement.
+        if (this.getInput(inputs, 'package_source', undefined) === 'url') {
+            requirements.push(this.requireCommand('curl', 'Downloader used to fetch the render package by signed URL', 'Install curl on the runner'));
+        }
+        return requirements;
     }
     async execute(inputs, _env, _config) {
         const stepName = 'ui-fidelity-render-android';
@@ -1174,9 +1319,11 @@ export class UiFidelityRenderAndroidStepExecutor extends BaseStepExecutor {
                 'expected a Gradle task path (letters, digits, and : - _)');
         }
         // package_source: validate when provided, but only record (and patch the
-        // script for) the non-default "repo" so omitting it — or setting the default
+        // script for) the non-default modes so omitting it — or setting the default
         // "inputs" — keeps the default archive-extract script byte-identical. In
-        // repo mode package_path is required (the committed project to render).
+        // repo mode package_path is required (the committed project to render); in
+        // url mode (fidelity-linux 03) package_url and package_path are required
+        // (the signed download + the prefix committed reference paths sit under).
         const rawPackageSource = this.getInput(inputs, 'package_source', undefined);
         let packageSource;
         if (rawPackageSource !== undefined) {
@@ -1185,14 +1332,21 @@ export class UiFidelityRenderAndroidStepExecutor extends BaseStepExecutor {
                 throw new Error(`Invalid package_source '${value}' for step '${stepName}': ` +
                     `expected one of: ${PACKAGE_SOURCES.join(', ')}`);
             }
-            if (value === 'repo') {
-                packageSource = 'repo';
+            if (value === 'repo' || value === 'url') {
+                packageSource = value;
             }
         }
         let packagePath;
-        if (packageSource === 'repo') {
+        if (packageSource === 'repo' || packageSource === 'url') {
             packagePath = String(this.getRequiredInput(inputs, 'package_path', stepName));
         }
+        let packageUrl;
+        if (packageSource === 'url') {
+            packageUrl = String(this.getRequiredInput(inputs, 'package_url', stepName));
+            if (!/^https?:\/\//.test(packageUrl)) {
+                throw new Error(`Invalid package_url for step '${stepName}': expected an http(s) URL`);
+            }
+        }
         // reference_source: validate when provided, but only record (and patch the
         // script for) the non-default "repo" so omitting it — or setting the default
         // "inputs" — keeps the default basename reference block intact.
@@ -1204,6 +1358,13 @@ export class UiFidelityRenderAndroidStepExecutor extends BaseStepExecutor {
                 throw new Error(`Invalid reference_source '${value}' for step '${stepName}': ` +
                     `expected one of: ${REFERENCE_SOURCES.join(', ')}`);
             }
+            // URL mode owns reference sourcing (inside the extracted package) —
+            // an explicit reference_source alongside it is a contradiction.
+            if (packageSource === 'url') {
+                throw new Error(`Invalid reference_source for step '${stepName}': ` +
+                    "package_source 'url' resolves references inside the downloaded " +
+                    'package; omit reference_source');
+            }
             if (value === 'repo') {
                 referenceSource = 'repo';
             }
@@ -1215,6 +1376,9 @@ export class UiFidelityRenderAndroidStepExecutor extends BaseStepExecutor {
         if (packagePath !== undefined) {
             config.packagePath = packagePath;
         }
+        if (packageUrl !== undefined) {
+            config.packageUrl = packageUrl;
+        }
         if (referenceSource !== undefined) {
             config.referenceSource = referenceSource;
         }