@invarn/cibuild 2.6.7 → 2.6.9

package/dist/src/yaml/step-validator-self-assigned.test.js

@@ -0,0 +1,129 @@
+/**
+ * A step does not owe itself the variables its own shell sets.
+ *
+ * Pre-execution validation auto-discovers every `$UPPERCASE` in a step's
+ * inputs and treats it as a value the pipeline must supply. For a `script`
+ * step the inputs *are* the shell body, so a variable the script computes was
+ * indistinguishable from one it needed handed to it — and because the check
+ * cannot prompt in a sandbox, the pipeline was refused before step 1 for
+ * values nothing was ever meant to provide.
+ *
+ * A generated multiplatform pipeline hit exactly that. Its prepare step opens
+ * with `INTEGRATION="$KMM_IOS_INTEGRATION"`, `IOS_DIR=$(dirname
+ * "$IOS_PROJECT_PATH")` and `for WORKSPACE in "$IOS_DIR"/*.xcworkspace`, and
+ * the run died on "3 required value(s) missing — INTEGRATION, IOS_DIR,
+ * WORKSPACE" while the two variables it genuinely reads were both declared and
+ * present. The iOS templates do the same thing with `IOS_DIR` alone.
+ *
+ * The load-bearing half of these tests is the second half: only the assignment
+ * *target* is excused, never the right-hand side, so a script cannot exempt
+ * itself from a value it reads by mentioning it.
+ */
+import { describe, test, expect } from '@jest/globals';
+import '../yaml/steps/index.js';
+import { StepValidator, shellAssignedNames } from './step-validator.js';
+import { loadConfig } from '../config.js';
+const config = loadConfig();
+/** A one-script workflow, so the only issues are about its variables. */
+function scriptPipeline(content, envs = {}) {
+    return {
+        format_version: '1',
+        meta: { invarn: { stack: 'macos-xcode-26.4' } },
+        app: { envs: Object.entries(envs).map(([k, v]) => ({ [k]: v })) },
+        workflows: {
+            primary: {
+                steps: [{ 'script@1.0.0': { title: 'Prepare', inputs: { content } } }],
+            },
+        },
+    };
+}
+async function missingEnv(pipeline) {
+    const validator = new StepValidator(pipeline, 'primary', config);
+    const result = await validator.validateWorkflow();
+    return (result.issuesByCategory.get('environment') ?? [])
+        .map((i) => i.requirement.name)
+        .sort();
+}
+describe('shellAssignedNames', () => {
+    test('plain assignment, command substitution and quoted value', () => {
+        const found = shellAssignedNames({
+            content: [
+                'PLAIN=1',
+                'CAPTURED=$(dirname "$SOMEWHERE")',
+                'QUOTED="a b"',
+                'EMPTY=',
+            ].join('\n'),
+        });
+        expect([...found].sort()).toEqual(['CAPTURED', 'EMPTY', 'PLAIN', 'QUOTED']);
+    });
+    test('export, local, readonly, declare, typeset and append', () => {
+        const found = shellAssignedNames({
+            content: [
+                'export EXPORTED=1',
+                '  local SCOPED=2',
+                'readonly FROZEN=3',
+                'declare DECLARED=4',
+                'typeset TYPESET=5',
+                'APPENDED+=6',
+            ].join('\n'),
+        });
+        expect([...found].sort()).toEqual([
+            'APPENDED',
+            'DECLARED',
+            'EXPORTED',
+            'FROZEN',
+            'SCOPED',
+            'TYPESET',
+        ]);
+    });
+    test('loop and read bindings', () => {
+        const found = shellAssignedNames({
+            content: [
+                'for WORKSPACE in "$IOS_DIR"/*.xcworkspace; do echo "$WORKSPACE"; done',
+                'select CHOICE in a b; do break; done',
+                'read -r LINE',
+                'echo x | while read -r KEY VALUE; do echo "$KEY"; done',
+            ].join('\n'),
+        });
+        expect([...found].sort()).toEqual(['CHOICE', 'KEY', 'LINE', 'VALUE', 'WORKSPACE']);
+    });
+    test('a flag that looks like an assignment is not one', () => {
+        const found = shellAssignedNames({
+            content: 'xcodebuild --setting FOO=1 -destination PLATFORM=iOS\ngradlew -PSOME=2',
+        });
+        expect([...found]).toEqual([]);
+    });
+    test('walks nested inputs, not just a top-level string', () => {
+        const found = shellAssignedNames({ inputs: { content: 'NESTED=1' }, other: ['ALSO=2'] });
+        expect([...found].sort()).toEqual(['ALSO', 'NESTED']);
+    });
+});
+describe('pre-execution validation and self-assigned variables', () => {
+    // The shape that was refused, reduced to its first three lines.
+    const PREPARE = [
+        'INTEGRATION="$KMM_IOS_INTEGRATION"',
+        'IOS_DIR=$(dirname "$IOS_PROJECT_PATH")',
+        'for WORKSPACE in "$IOS_DIR"/*.xcworkspace; do echo "$WORKSPACE"; done',
+    ].join('\n');
+    test('asks for nothing when the script sets its own and the rest are declared', async () => {
+        expect(await missingEnv(scriptPipeline(PREPARE, {
+            KMM_IOS_INTEGRATION: 'direct',
+            IOS_PROJECT_PATH: 'iosApp/iosApp.xcodeproj',
+        }))).toEqual([]);
+    });
+    // The regression this relaxation could introduce, and the reason only the
+    // assignment target is excused: a script that READS a variable still needs
+    // it, even where it assigns something else from it on the same line.
+    test('still requires the right-hand side of a self-assignment', async () => {
+        expect(await missingEnv(scriptPipeline(PREPARE))).toEqual([
+            'IOS_PROJECT_PATH',
+            'KMM_IOS_INTEGRATION',
+        ]);
+    });
+    test('still requires a variable the script only reads', async () => {
+        expect(await missingEnv(scriptPipeline('SET_HERE=1\necho "$SET_HERE $NEVER_SET"'))).toEqual([
+            'NEVER_SET',
+        ]);
+    });
+});
+//# sourceMappingURL=step-validator-self-assigned.test.js.map

package/dist/src/yaml/step-validator.d.ts

@@ -8,6 +8,38 @@
 import type { YAMLPipeline } from './types.js';
 import type { CIConfig } from '../types.js';
 import type { WorkflowValidationResult } from './validation-types.js';
+/**
+ * Names a shell snippet assigns to itself, in every form a step script uses.
+ *
+ * The auto-discovery below treats every `$UPPERCASE` it finds in a step's
+ * inputs as a value the pipeline must supply. For a `script` step the inputs
+ * *are* the shell body, so a variable the script computes reads exactly like
+ * one it needs handed to it — and the run is refused for a value nothing was
+ * ever supposed to provide.
+ *
+ * That is not hypothetical. A generated multiplatform pipeline whose prepare
+ * step opens with
+ *
+ *     INTEGRATION="$KMM_IOS_INTEGRATION"
+ *     IOS_DIR=$(dirname "$IOS_PROJECT_PATH")
+ *     for WORKSPACE in "$IOS_DIR"/*.xcworkspace; do …
+ *
+ * was refused before step 1 on "3 required value(s) missing — INTEGRATION,
+ * IOS_DIR, WORKSPACE", while the two variables it genuinely reads were both
+ * declared and present. The shell was correct; the reader was not.
+ *
+ * Only the assignment *target* is collected, never the right-hand side, so
+ * `INTEGRATION="$KMM_IOS_INTEGRATION"` still requires `KMM_IOS_INTEGRATION`.
+ * That is what keeps this from becoming a hole: a script cannot excuse itself
+ * from a value it reads by mentioning it.
+ *
+ * Assignment order is deliberately not modelled. A snippet that reads `$FOO`
+ * before setting it is a bug in the snippet, and guessing about it here would
+ * trade a false refusal for a different false refusal; "the script sets this
+ * somewhere" is the question worth asking, and erring toward letting the build
+ * run is the right direction for a check that cannot prompt.
+ */
+export declare function shellAssignedNames(obj: unknown): Set<string>;
 /**
  * StepValidator orchestrates pre-execution validation for a workflow.
  * It iterates through all steps, collects validation requirements,

package/dist/src/yaml/step-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"step-validator.d.ts","sourceRoot":"","sources":["../../../src/yaml/step-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,KAAK,EAAE,YAAY,EAA4B,MAAM,YAAY,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAGV,wBAAwB,EAGzB,MAAM,uBAAuB,CAAC;AAwB/B;;;;GAIG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,YAAY,CAAC,CAAS;IAG9B,OAAO,CAAC,gBAAgB,CAAoE;IAG5F,OAAO,CAAC,mBAAmB,CAA6B;IAKxD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;gBAGvC,QAAQ,EAAE,YAAY,EACtB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,QAAQ,EAChB,YAAY,CAAC,EAAE,MAAM;IA0BvB;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAkN3D;;OAEG;YACW,mBAAmB;IAmEjC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsBjC;;;;;;;;;OASG;IACH,OAAO,CAAC,mBAAmB;IAoB3B;;OAEG;IACH,OAAO,CAAC,SAAS;CA8BlB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CA4D/E"}
+{"version":3,"file":"step-validator.d.ts","sourceRoot":"","sources":["../../../src/yaml/step-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,KAAK,EAAE,YAAY,EAA4B,MAAM,YAAY,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAGV,wBAAwB,EAGzB,MAAM,uBAAuB,CAAC;AAwB/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CA6B5D;AAED;;;;GAIG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,YAAY,CAAC,CAAS;IAG9B,OAAO,CAAC,gBAAgB,CAAoE;IAG5F,OAAO,CAAC,mBAAmB,CAA6B;IAKxD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;gBAGvC,QAAQ,EAAE,YAAY,EACtB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,QAAQ,EAChB,YAAY,CAAC,EAAE,MAAM;IA0BvB;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAwN3D;;OAEG;YACW,mBAAmB;IAmEjC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsBjC;;;;;;;;;OASG;IACH,OAAO,CAAC,mBAAmB;IAoB3B;;OAEG;IACH,OAAO,CAAC,SAAS;CA8BlB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CA4D/E"}

package/dist/src/yaml/step-validator.js

@@ -30,6 +30,71 @@ const POSIX_ENV_ALLOWLIST = new Set([
     'CIBUILD_SCRATCH',
     'JAVA_HOME',
 ]);
+/**
+ * Names a shell snippet assigns to itself, in every form a step script uses.
+ *
+ * The auto-discovery below treats every `$UPPERCASE` it finds in a step's
+ * inputs as a value the pipeline must supply. For a `script` step the inputs
+ * *are* the shell body, so a variable the script computes reads exactly like
+ * one it needs handed to it — and the run is refused for a value nothing was
+ * ever supposed to provide.
+ *
+ * That is not hypothetical. A generated multiplatform pipeline whose prepare
+ * step opens with
+ *
+ *     INTEGRATION="$KMM_IOS_INTEGRATION"
+ *     IOS_DIR=$(dirname "$IOS_PROJECT_PATH")
+ *     for WORKSPACE in "$IOS_DIR"/*.xcworkspace; do …
+ *
+ * was refused before step 1 on "3 required value(s) missing — INTEGRATION,
+ * IOS_DIR, WORKSPACE", while the two variables it genuinely reads were both
+ * declared and present. The shell was correct; the reader was not.
+ *
+ * Only the assignment *target* is collected, never the right-hand side, so
+ * `INTEGRATION="$KMM_IOS_INTEGRATION"` still requires `KMM_IOS_INTEGRATION`.
+ * That is what keeps this from becoming a hole: a script cannot excuse itself
+ * from a value it reads by mentioning it.
+ *
+ * Assignment order is deliberately not modelled. A snippet that reads `$FOO`
+ * before setting it is a bug in the snippet, and guessing about it here would
+ * trade a false refusal for a different false refusal; "the script sets this
+ * somewhere" is the question worth asking, and erring toward letting the build
+ * run is the right direction for a check that cannot prompt.
+ */
+export function shellAssignedNames(obj) {
+    const names = new Set();
+    const collect = (text) => {
+        // `NAME=…`, `export NAME=…`, `local/readonly/declare/typeset NAME=…`, and
+        // `NAME+=…`. Anchored to the start of a command — line start, or after a
+        // separator — so `--flag=X` and `foo BAR=1` inside a longer word are not
+        // mistaken for assignments.
+        const assignment = /(?:^|[\n;&|(]|\|\||&&)[ \t]*(?:(?:export|readonly|local|declare|typeset)[ \t]+)?([A-Z_][A-Z_0-9]*)\+?=/g;
+        // `for NAME in …`, `select NAME in …`
+        const loop = /(?:^|[\n;&|(])[ \t]*(?:for|select)[ \t]+([A-Z_][A-Z_0-9]*)[ \t]+in\b/g;
+        // `read NAME`, `read -r NAME OTHER`, `while read -r NAME; do`
+        const read = /(?:^|[\n;&|(]|\|\||&&)[ \t]*(?:while[ \t]+)?read[ \t]+((?:-\S+[ \t]+)*)([A-Z_][A-Z_0-9]*(?:[ \t]+[A-Z_][A-Z_0-9]*)*)/g;
+        for (const re of [assignment, loop]) {
+            let m;
+            while ((m = re.exec(text)) !== null)
+                names.add(m[1]);
+        }
+        let m;
+        while ((m = read.exec(text)) !== null) {
+            for (const n of m[2].trim().split(/[ \t]+/))
+                names.add(n);
+        }
+    };
+    const walk = (value) => {
+        if (typeof value === 'string')
+            collect(value);
+        else if (Array.isArray(value))
+            value.forEach(walk);
+        else if (value && typeof value === 'object')
+            Object.values(value).forEach(walk);
+    };
+    walk(obj);
+    return names;
+}
 /**
  * StepValidator orchestrates pre-execution validation for a workflow.
  * It iterates through all steps, collects validation requirements,
@@ -169,10 +234,17 @@ export class StepValidator {
                 const resolvedEnv = this.envResolver.getAll();
                 const alreadyDeclared = new Set(requirements.map((r) => r.name));
                 const referencedVars = this.extractVariableReferences(parsedStep.inputs);
+                // Variables the step's own shell sets are not values anyone owes it.
+                const selfAssigned = shellAssignedNames(parsedStep.inputs);
                 for (const varName of referencedVars) {
                     // Skip POSIX vars the shell always provides
                     if (POSIX_ENV_ALLOWLIST.has(varName))
                         continue;
+                    // Skip anything this step's script assigns itself — a computed local
+                    // reads like a required input, and refusing on one stops a pipeline
+                    // for a value nothing was ever meant to supply.
+                    if (selfAssigned.has(varName))
+                        continue;
                     // Skip if already in resolved env (use hasOwnProperty so empty-string
                     // values set by the YAML/secrets are still treated as "provided")
                     if (Object.prototype.hasOwnProperty.call(resolvedEnv, varName))

package/dist/src/yaml/steps/android-variant-resolution.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=android-variant-resolution.test.d.ts.map

package/dist/src/yaml/steps/android-variant-resolution.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"android-variant-resolution.test.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/android-variant-resolution.test.ts"],"names":[],"mappings":""}

package/dist/src/yaml/steps/android-variant-resolution.test.js

@@ -0,0 +1,117 @@
+/**
+ * When the pipeline's variant is a guess Gradle cannot resolve.
+ *
+ * `android/nowinandroid` declares its product flavors as an enum in
+ * `build-logic/convention/…/NiaFlavor.kt` and applies them through a
+ * convention plugin, so `app/build.gradle.kts` has no `productFlavors {}`
+ * block. The literal scan saw no flavors, `VARIANT` stayed `debug`, and
+ * Gradle refused the very first Android step of the thirty-app study.
+ *
+ * Convention plugins are the norm in modern Android, so "literal or nothing"
+ * will keep missing them. Gradle names the candidates in its own error; this
+ * reads them back.
+ *
+ * The function under test is the one that ships — the shell is executed here,
+ * not re-implemented.
+ */
+import { execFileSync } from "node:child_process";
+import { PICK_VARIANT_TASK_FUNCTION, variantTaskCommands } from "./android.js";
+/** Run the shipped shell function over some Gradle output. */
+function pick(gradleOutput, prefix, suffix, buildType) {
+    const script = `${PICK_VARIANT_TASK_FUNCTION}\ncibuild_pick_variant_task "${prefix}" "${suffix}" "${buildType}"`;
+    return execFileSync("bash", ["-c", script], {
+        input: gradleOutput,
+        encoding: "utf-8",
+    }).trim();
+}
+/** The error nowinandroid produced, verbatim. */
+const NOW_IN_ANDROID = `
+FAILURE: Build failed with an exception.
+
+* What went wrong:
+Cannot locate tasks that match ':app:lintDebug' as task 'lintDebug' is ambiguous in project ':app'. Candidates are: 'lintDemoDebug', 'lintDemoRelease', 'lintProdDebug', 'lintProdRelease'.
+
+* Try:
+> Run gradlew tasks to get a list of available tasks.
+`;
+describe("cibuild_pick_variant_task", () => {
+    test("reads the candidates out of the nowinandroid error", () => {
+        expect(pick(NOW_IN_ANDROID, "lint", "", "Debug")).toBe("lintDemoDebug");
+    });
+    // The order Gradle happens to list them in is not a ranking, but a debug
+    // candidate must win over a release one wherever it appears.
+    test("prefers a debug candidate whatever order they are listed in", () => {
+        const reordered = NOW_IN_ANDROID.replace("'lintDemoDebug', 'lintDemoRelease', 'lintProdDebug', 'lintProdRelease'", "'lintProdRelease', 'lintDemoRelease', 'lintProdDebug', 'lintDemoDebug'");
+        expect(pick(reordered, "lint", "", "Debug")).toBe("lintProdDebug");
+    });
+    test("reads a unit-test task, suffix and all", () => {
+        const output = "task 'testDebugUnitTest' is ambiguous in project ':app'. Candidates are: " +
+            "'testDemoDebugUnitTest', 'testProdDebugUnitTest', 'testDemoReleaseUnitTest'.";
+        expect(pick(output, "test", "UnitTest", "Debug")).toBe("testDemoDebugUnitTest");
+    });
+    test("honours a build type that is not Debug", () => {
+        expect(pick(NOW_IN_ANDROID, "lint", "", "Release")).toBe("lintDemoRelease");
+    });
+    // Retrying with a task that builds the wrong thing is worse than failing
+    // with the error the user can read.
+    test("says nothing when no candidate matches the build type", () => {
+        const output = "task 'lintDebug' is ambiguous in project ':app'. Candidates are: " +
+            "'lintProdRelease', 'lintStagingRelease'.";
+        expect(pick(output, "lint", "", "Debug")).toBe("");
+    });
+    test("says nothing when the failure is not an ambiguity", () => {
+        expect(pick("FAILURE: Could not resolve all dependencies.", "lint", "", "Debug")).toBe("");
+    });
+});
+describe("the step that uses it", () => {
+    const escape = (value) => value;
+    test("runs the composed task first, and only resolves if Gradle refuses it", () => {
+        const script = variantTaskCommands({
+            module: "app",
+            variant: "debug",
+            prefix: "lint",
+            suffix: "",
+            escape,
+        }).join("\n");
+        expect(script).toContain("$GRADLE_CMD :app:lintDebug");
+        expect(script).toContain("is ambiguous in project");
+        // A flavourless project pays for nothing: the retry is inside the branch.
+        expect(script.indexOf("cibuild_pick_variant_task \"lint\"")).toBeGreaterThan(script.indexOf("$GRADLE_CMD :app:lintDebug"));
+    });
+    // Whichever of lint and unit tests runs first pays for the discovery; the
+    // other reads VARIANT out of the envstore.
+    test("exports the variant it resolved", () => {
+        const script = variantTaskCommands({
+            module: "app",
+            variant: "debug",
+            prefix: "test",
+            suffix: "UnitTest",
+            escape,
+        }).join("\n");
+        expect(script).toContain("envman add --key VARIANT");
+        expect(script).toContain("$GRADLE_CMD :app:$RESOLVED_TASK");
+    });
+    test("keeps a test filter on both the first attempt and the retry", () => {
+        const script = variantTaskCommands({
+            module: "app",
+            variant: "debug",
+            prefix: "test",
+            suffix: "UnitTest",
+            gradleArgs: "--tests 'com.acme.*'",
+            escape,
+        }).join("\n");
+        const withFilter = script.split("\n").filter((l) => l.includes("--tests 'com.acme.*'"));
+        expect(withFilter).toHaveLength(2);
+    });
+    test("propagates a failure that is not an ambiguity", () => {
+        const script = variantTaskCommands({
+            module: "app",
+            variant: "debug",
+            prefix: "lint",
+            suffix: "",
+            escape,
+        }).join("\n");
+        expect(script).toContain('exit "$VARIANT_STATUS"');
+    });
+});
+//# sourceMappingURL=android-variant-resolution.test.js.map

package/dist/src/yaml/steps/android.d.ts

@@ -65,6 +65,43 @@ export declare class GradleBuildStepExecutor extends BaseStepExecutor {
  * Android lint step executor
  * Runs Android lint checks
  */
+/**
+ * Bash that picks a real variant task out of Gradle's own ambiguity error.
+ *
+ * `android/nowinandroid` declares its product flavors as an enum in
+ * `build-logic/convention/…/NiaFlavor.kt` and applies them through a
+ * convention plugin, so `app/build.gradle.kts` has no `productFlavors {}`
+ * block for the literal scan to find. `VARIANT` stayed `debug` and Gradle
+ * refused the very first Android step:
+ *
+ *   Cannot locate tasks that match ':app:lintDebug' as task 'lintDebug' is
+ *   ambiguous in project ':app'. Candidates are: 'lintDemoDebug',
+ *   'lintProdDebug', …
+ *
+ * Gradle has just listed the answer. Reading it back costs one extra
+ * invocation on the failing case and nothing at all on a flavourless project,
+ * which is why this is the fallback rather than an up-front `tasks --all`.
+ *
+ * Written as a shell function so what ships is what the test runs.
+ */
+export declare const PICK_VARIANT_TASK_FUNCTION = "cibuild_pick_variant_task() {\n  # $1 task prefix (lint, test), $2 task suffix (empty, UnitTest),\n  # $3 the build type to prefer (Debug). Gradle's output arrives on stdin.\n  awk '/Candidates are:/ { sub(/.*Candidates are:/, \"\"); print; exit }' |\n    tr ',' '\\n' |\n    tr -d \" '\\\".\" |\n    grep -E \"^${1}[A-Za-z0-9]*${3}${2}$\" |\n    head -1\n}";
+/**
+ * The commands that run a variant-specific Gradle task and, if the variant
+ * turns out to be a guess Gradle cannot resolve, resolve it and retry once.
+ *
+ * The resolved variant is exported with `envman`, so the *other*
+ * variant-specific step in the same pipeline does not repeat the discovery —
+ * whichever of lint and unit tests runs first pays for it.
+ */
+export declare function variantTaskCommands(options: {
+    module: string;
+    variant: string;
+    prefix: string;
+    suffix: string;
+    /** Appended to both the first attempt and the retry. */
+    gradleArgs?: string;
+    escape: (value: string) => string;
+}): string[];
 export declare class AndroidLintStepExecutor extends BaseStepExecutor {
     getValidationRequirements(_inputs: AndroidLintInputs, env: Record<string, string>, _config: CIConfig): ValidationRequirement[];
     execute(inputs: AndroidLintInputs, env: Record<string, string>, config: CIConfig): Promise<StepDef>;

package/dist/src/yaml/steps/android.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"android.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/android.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEhF;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,gBAAgB;IAC9D,yBAAyB,CACvB,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAyB1B;;;OAGG;YACW,4BAA4B;IAqF1C,UAAU,IAAI,UAAU,EAAE;IAUpB,OAAO,CAAC,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAoH7G;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,gBAAgB;IAC3D,UAAU,IAAI,UAAU,EAAE;IAe1B,yBAAyB,CACvB,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAiBpB,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAyP1G;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,gBAAgB;IAC3D,yBAAyB,CACvB,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAiBpB,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAiL1G;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,gBAAgB;IAC/D,yBAAyB,CACvB,OAAO,EAAE,qBAAqB,EAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAiBpB,OAAO,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CA4L9G;AAMD,MAAM,WAAW,8BAA8B;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,oCAAqC,SAAQ,gBAAgB;IACxE,yBAAyB,CACvB,OAAO,EAAE,8BAA8B,EACvC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAM1B,UAAU,IAAI,UAAU,EAAE;IAOpB,OAAO,CAAC,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAsEzH"}
+{"version":3,"file":"android.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/android.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,OAAO,EAAE,gBAAgB,EAAuB,MAAM,WAAW,CAAC;AAClE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEhF;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,gBAAgB;IAC9D,yBAAyB,CACvB,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAyB1B;;;OAGG;YACW,4BAA4B;IAwF1C,UAAU,IAAI,UAAU,EAAE;IAUpB,OAAO,CAAC,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CA6H7G;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,gBAAgB;IAC3D,UAAU,IAAI,UAAU,EAAE;IAe1B,yBAAyB,CACvB,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAiBpB,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CA8P1G;AAED;;;GAGG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,0BAA0B,0WAQrC,CAAC;AAEH;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CACnC,GAAG,MAAM,EAAE,CAuCX;AAED,qBAAa,uBAAwB,SAAQ,gBAAgB;IAC3D,yBAAyB,CACvB,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAiBpB,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CA6L1G;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,gBAAgB;IAC/D,yBAAyB,CACvB,OAAO,EAAE,qBAAqB,EAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAiBpB,OAAO,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAwM9G;AAMD,MAAM,WAAW,8BAA8B;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,oCAAqC,SAAQ,gBAAgB;IACxE,yBAAyB,CACvB,OAAO,EAAE,8BAA8B,EACvC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAM1B,UAAU,IAAI,UAAU,EAAE;IAOpB,OAAO,CAAC,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAsEzH"}